March 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1182644] VUL-0: CVE-2021-3407: A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182644 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Basesystem |Security Assignee|screening-team-bugs(a)suse.de |security-team(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175470] [Jump] GNOME autologin broken with Wayland on aarch64
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1175470 https://bugzilla.suse.com/show_bug.cgi?id=1175470#c2 Lubos Kocman <lubos.kocman(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lubos.kocman(a)suse.com Flags| |needinfo?(guillaume.gardet@ | |arm.com) --- Comment #2 from Lubos Kocman <lubos.kocman(a)suse.com> --- Hello Guillaume, is this still applicable for 15.3? Lubos -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178497] Add Xfce system role to Yast Installer
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1178497 https://bugzilla.suse.com/show_bug.cgi?id=1178497#c4 Lubos Kocman <lubos.kocman(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Lubos Kocman <lubos.kocman(a)suse.com> --- Available in Public Beta. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1177568] VUL-0: CVE-2020-26945: mybatis: mishandles deserialization of object streams which could result in remote code execution
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

1 0

[Bug 1183009] Some armv6/7 builds on OBS fail due to kernel 5.11 modules not being loaded properly
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1183009 https://bugzilla.suse.com/show_bug.cgi?id=1183009#c2 --- Comment #2 from Fabian Vogt <fvogt(a)suse.com> --- Can be reproduced manually by downloading kernel-obs-build for armv7l and running qemu-system-arm -M virt -m 1024 -kernel .build.kernel.kvm -initrd .build.initrd.kvm -serial stdio [ 6.454262] sg: section 4 reloc 1 sym '_raw_write_lock_irqsave': relocation 28 out of range (0xbf009024 -> 0xc101ccc4) ... [ 8.022461] loop: section 4 reloc 59 sym 'mutex_lock': relocation 28 out of range (0xbf0186b4 -> 0xc1019f50) [ 8.233010] loop: module loaded [ 8.434861] binfmt_misc: section 4 reloc 55 sym '_raw_read_lock': relocation 28 out of range (0xbf009410 -> 0xc101cd10) [ 8.629426] dm_mod: section 6 reloc 66 sym '__stack_chk_fail': relocation 28 out of range (0xbf0143e0 -> 0xc1014448) ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180984] New: dwz: breaks with hardlink binaries
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1180984 Bug ID: 1180984 Summary: dwz: breaks with hardlink binaries Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: tdevries(a)suse.com Reporter: amajer(a)suse.com QA Contact: qa-bugs(a)suse.de CC: christian.voegl(a)suse.com, pth(a)suse.com, tdevries(a)suse.com Found By: --- Blocker: --- Created attachment 845164 --> https://bugzilla.suse.com/attachment.cgi?id=845164&action=edit strace When the binaries are hardlinked, dwt is failing (ie. at least not cleaning up after itself) > osc co -r 2 devel:libraries:c_c++/libdeflate > [ 146s] Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PartialHardlinkSets) <= 4.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 > [ 146s] Recommends: libdeflate-debugsource(x86-64) = 1.7-2.1 > [ 146s] Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/abuild/rpmbuild/BUILDROOT/libdeflate-1.7-2.1.x86_64 > [ 146s] error: Installed (but unpackaged) file(s) found: > [ 146s] /usr/lib/debug/usr/bin/libdeflate-gzip-1.7-2.1.x86_64.debug.#dwz#.OEYOXp > [ 146s] > [ 146s] > [ 146s] RPM build errors: > [ 146s] Empty %files file /home/abuild/rpmbuild/BUILD/libdeflate-1.7/debugsourcefiles.list > [ 146s] Installed (but unpackaged) file(s) found: > [ 146s] /usr/lib/debug/usr/bin/libdeflate-gzip-1.7-2.1.x86_64.debug.#dwz#.OEYOXp The files are not removed because rename() returns success but does nothing when the destination and source are hardlinked together. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1182929] kernel fuse crash in heavy use with cvmfs
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182929 https://bugzilla.suse.com/show_bug.cgi?id=1182929#c3 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(kernel-bugs@opens | |use.org) | --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- I have a collection of kernel packages in OBS home:tiwai:kernel:* project, e.g. home:tiwai:kernel:5.9 contains the last 5.9.x kernel package, home:tiwai:kernel:5.8 for 5.8.x, etc. Note that it's signed with an unofficial key, so Secure Boot won't work. We haven't change anything about FUSE in TW packages, AFAIK, so if any, it's an upstream issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182929] kernel fuse crash in heavy use with cvmfs
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182929 https://bugzilla.suse.com/show_bug.cgi?id=1182929#c2 Stefan Kluth <skluth(a)mpp.mpg.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kernel-bugs(a)opensuse.org Flags| |needinfo?(kernel-bugs@opens | |use.org) --- Comment #2 from Stefan Kluth <skluth(a)mpp.mpg.de> --- We have reproduced the problem many times when we changed versions of cvmfs, or did it on different servers to exclude hardware problems. Is there a good and reproduceable way to get the older kernels from opensuse as packages? I did look on OBS but there are only some private projects with kernels. Are you perhaps aware of recent (in 5.x kernels) modifications to the fuse kernel module? Their introduction into the the 5.x series might give a hint which kernels to try. Otherwise its at best a binary search between 5.3 and 5.10 and every test takes several hours. That would be the brute force approach. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1074057] qemu can't properly capture some keys in libreoffice under GNOME wayland
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1074057 https://bugzilla.suse.com/show_bug.cgi?id=1074057#c69 --- Comment #69 from Oliver Kurz <okurz(a)suse.com> --- This is an autogenerated message for openQA integration by the openqa_review script: This bug is still referenced in a failing openQA test: qam-regression-gnome@64bit-virtio-vga https://openqa.suse.de/tests/5582133 To prevent further reminder comments one of the following options should be followed: 1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted 2. The openQA job group is moved to "Released" 3. The label in the openQA scenario is removed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181806] VUL-0: CVE-2021-26708: kernel-source: Exploitable vulnerabilities in AF_VSOCK implementation
by bugzilla_noreply＠suse.com 04 Mar '21

04 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1181806 https://bugzilla.suse.com/show_bug.cgi?id=1181806#c6 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |UPSTREAM --- Comment #6 from Marcus Meissner <meissner(a)suse.com> --- also covered in zdnet https://www.zdnet.com/article/linux-network-security-holes-found-fixed/ -> marking resolved/upstream -- You are receiving this mail because: You are on the CC list for the bug.

1 0