February 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1181261] VUL-0: sqlite3: potential use-after-free bug when processing a a subquery with both a correlated WHERE clause and a "HAVING 0" clause and where the parent query is an aggregate
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181261 https://bugzilla.suse.com/show_bug.cgi?id=1181261#c1 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #1 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- This seems to affect only 3.33 and on at [1]. Internal codestreams are not affected. Factory already ships 3.34.1 [1]https://sqlite.org/src/info/6e6b3729e0549de0 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1116849] yast2-sound: do not add sound modules to initrd
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1116849 https://bugzilla.suse.com/show_bug.cgi?id=1116849#c46 Martin Vidner <mvidner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jesper(a)goll-rossau.dk --- Comment #46 from Martin Vidner <mvidner(a)suse.com> --- *** Bug 1181663 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181663] YaST2 sound configurator wrongly creates /etc/modules-load.d/yast.conf
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181663 https://bugzilla.suse.com/show_bug.cgi?id=1181663#c1 Martin Vidner <mvidner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Martin Vidner <mvidner(a)suse.com> --- Thanks for the report! The file /etc/modules-load.d/yast.conf is created by the Kernel.rb library: https://github.com/yast/yast-yast2/blob/06c67e0398a3f81ae1cbcfdab4baebd9eb6… The modules-load.d directory is used by systemd: https://www.man7.org/linux/man-pages/man5/modules-load.d.5.html and the man page does say: > Note that it is usually a better idea to rely on the automatic > module loading by PCI IDs, USB IDs, DMI IDs or similar > triggers encoded in the kernel modules themselves instead > of static configuration like this. In fact, most modern > kernel modules are prepared for automatic loading already. In fact this problem has been reported before, we should raise its priority. *** This bug has been marked as a duplicate of bug 1116849 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181705] VUL-0: CVE-2020-15690: nim: Standard library asyncftpclient lacks a check for newline character
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181705 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181705] New: VUL-0: CVE-2020-15690: nim: Standard library asyncftpclient lacks a check for newline character
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1181705 Bug ID: 1181705 Summary: VUL-0: CVE-2020-15690: nim: Standard library asyncftpclient lacks a check for newline character Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/276831/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-15690 In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda… https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6 References: https://bugzilla.redhat.com/show_bug.cgi?id=1922604 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-15690 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15690 https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda… https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1029961] [META] Finalize /bin -> /usr/bin merge
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1029961 https://bugzilla.suse.com/show_bug.cgi?id=1029961#c45 --- Comment #45 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1029961) was mentioned in https://build.opensuse.org/request/show/868682 Factory / dracut -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181344] [Build 58.1] openQA test fails on signature validation 65276565: NOKEY
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181344 https://bugzilla.suse.com/show_bug.cgi?id=1181344#c12 --- Comment #12 from Michael Andres <ma(a)suse.com> --- (In reply to Stefan Schubert from comment #11) > I am lost now :-) So what we have to do on YaST side now ? > Could we please have the latest build if there is still something to do? We IMO need: - A yast log from a version including Ladislavs changes (c#7) to figure out why a package signature check is enforced at all. - The Backports key should be included in the set of keys YAST preloads, so it is available in case it's needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181344] [Build 58.1] openQA test fails on signature validation 65276565: NOKEY
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181344 https://bugzilla.suse.com/show_bug.cgi?id=1181344#c11 Stefan Schubert <schubi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lubos.kocman(a)suse.com, | |schubi(a)suse.com Flags| |needinfo?(lubos.kocman@suse | |.com) --- Comment #11 from Stefan Schubert <schubi(a)suse.com> --- (In reply to Lubos Kocman from comment #10) > I've just added the backports key to the openSUSE-build-key for Leap:15.3 > https://build.opensuse.org/request/show/867519 > > We've agreed to not sign Backports packages with openSUSE key, as there > could be some more issues for PH users. I am lost now :-) So what we have to do on YaST side now ? Could we please have the latest build if there is still something to do? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1053373] MIT-SHM extension does not work in Xvnc
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1053373 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sndirsch(a)suse.com QA Contact|xorg-maintainer-bugs@forge. |gfx-bugs(a)suse.de |provo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181093] New: nvme-cli is not selected for installation in case of installation on nvme drive
by bugzilla_noreply＠suse.com 02 Feb '21

02 Feb '21

https://bugzilla.suse.com/show_bug.cgi?id=1181093 Bug ID: 1181093 Summary: nvme-cli is not selected for installation in case of installation on nvme drive Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 845246 --> https://bugzilla.suse.com/attachment.cgi?id=845246&action=edit screenshot prompting user to select nvme-cli manually Hello, I'm installing Leap on Tuxedo laptop with two drives 1 nvme (250G) and then one extra 1TB sata drive. I chose both disks to be used for installation, while nvme was selected for root partition in the guided wizzard. Software selection / summary is now complaining that nvme-cli needs to be manually selected. Which is a bummer. -- You are receiving this mail because: You are on the CC list for the bug.

1 15