March 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1111735] New: Out of date package: openSUSE:Factory/mypaint
by bugzilla_noreply＠novell.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1111735 Bug ID: 1111735 Summary: Out of date package: openSUSE:Factory/mypaint Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: sean(a)suspend.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- https://build.opensuse.org/package/show/openSUSE:Factory/mypaint is out of date (1.1.0). Current upstream release is: https://github.com/mypaint/mypaint/releases/download/v1.2.1/mypaint-1.2.1.t…. -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1182900] YaST module inst_autoimage has failed
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182900 https://bugzilla.suse.com/show_bug.cgi?id=1182900#c1 --- Comment #1 from Lukas Ocilka <locilka(a)suse.com> --- Let's start from the end, inst_autoimage has been dropped including (hopefully) mention about it in installation control file. https://github.com/yast/skelcd-control-openSUSE/pull/214 but according to this bug, it was readded by OBS (?). Now fixed: https://bugzilla.suse.com/show_bug.cgi?id=1181790 Andreas, I hope you are not installing from images, are you? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182901] New: [Build 91.1] Grub snapshots does not display any sort of identifier for user defined snapshot.
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1182901 Bug ID: 1182901 Summary: [Build 91.1] Grub snapshots does not display any sort of identifier for user defined snapshot. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://openqa.opensuse.org/tests/1651100/modules/user _defined_snapshot/steps/38 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: jsrain(a)suse.com Found By: openQA Blocker: Yes ## Observation Hello team seems like that user define filesystem snapshot is not recognizable from grub boot screen at all. We would expect a comment, instead it looks that there is eval or representation of some function from zypper. Please see more details in the test. I'm setting owners to Yast as I don't think bootloader is responsible for the configuration/text itself. openQA test in scenario opensuse-15.3-DVD-x86_64-extra_tests_gnome@64bit fails in [user_defined_snapshot](https://openqa.opensuse.org/tests/1651100/modules/us… ## Test suite description Maintainer: asmorodskyi, okurz. Extra tests which were designed to run on gnome ## Reproducible Fails since (at least) Build [32.4](https://openqa.opensuse.org/tests/1500065) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1074478] New: scim-bridge-*-32bit not installable
by bugzilla_noreply＠novell.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1074478 Bug ID: 1074478 Summary: scim-bridge-*-32bit not installable Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- can't install scim-bridge-qt4-32bit-0.4.17-1.3.x86_64: nothing provides scim-bridge-32bit = 0.4.17 needed by scim-bridge-qt4-32bit-0.4.17-1.3.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1182125] [Build 20210207] no yast2 online update icon in control center
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182125 Rodion Iafarov <riafarov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(shundhammer@suse. | |com) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182850] Create homedirectories with stricter permissions
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182850 https://bugzilla.suse.com/show_bug.cgi?id=1182850#c7 --- Comment #7 from Johannes Segitz <jsegitz(a)suse.com> --- (In reply to Thorsten Kukuk from comment #6) I did not claim that upstream changed the default. With the comment you quoted I assigned it to the shadow maintainer to request this setting to be made default for openSUSE -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182897] VUL-0: CVE-2021-21273: matrix-synapse: user provided domains were not restricted to external IP addresses
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182897 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182895] VUL-0: CVE-2021-21274: matrix-synapse: malicious homeserver could redirect requests to their .well-known file to a large file
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182895 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182897] New: VUL-0: CVE-2021-21273: matrix-synapse: user provided domains were not restricted to external IP addresses
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1182897 Bug ID: 1182897 Summary: VUL-0: CVE-2021-21273: matrix-synapse: user provided domains were not restricted to external IP addresses Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/278709/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: okurz(a)suse.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-21273 Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external IP addresses when calculating the key validity for third-party invite events and sending push notifications. This could cause Synapse to make requests to internal infrastructure. The type of request was not controlled by the user, although limited modification of request bodies was possible. For the most thorough protection server administrators should remove the deprecated `federation_ip_range_blacklist` from their settings after upgrading to Synapse v1.25.0 which will result in Synapse using the improved default IP address restrictions. See the new `ip_range_blacklist` and `ip_range_whitelist` settings if more specific control is necessary. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-21273 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21273 https://github.com/matrix-org/synapse/commit/30fba6210834a4ecd91badf0c8f3eb… https://github.com/matrix-org/synapse/pull/8821 https://github.com/matrix-org/synapse/releases/tag/v1.25.0 https://github.com/matrix-org/synapse/security/advisories/GHSA-v936-j8gp-9q… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182125] [Build 20210207] no yast2 online update icon in control center
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182125 https://bugzilla.suse.com/show_bug.cgi?id=1182125#c7 --- Comment #7 from Rodion Iafarov <riafarov(a)suse.com> --- (In reply to Stefan Hundhammer from comment #6) > https://github.com/yast/patterns-yast/blame/master/package/patterns-yast. > spec#L76 seems to indicate that this is intentional. > > lslezak also just wrote in IRC: > > "TW does not have maintenance updates (patches), they just update packages. > So online-update does not make much sense." > > That yast2-online-update module handles patches. So IMHO this works as > intended. Just to be sure, yast2-online-update is still installed, should not we then skip installing both yast2-online-update-frontend and yast2-online-update? -- You are receiving this mail because: You are on the CC list for the bug.

1 0