April 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1174239] New: KDE Software Updater Applet: "Reboot needed / reboot now?" notification before Kernel update is installed
by bugzilla_noreply＠suse.com 17 Sep '22

17 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1174239 Bug ID: 1174239 Summary: KDE Software Updater Applet: "Reboot needed / reboot now?" notification before Kernel update is installed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Minor Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: thomas-formella(a)web.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- If a kernel update is available, the "KDE Software Updater Applet" notifies a "reboot needed / reboot now?" BEFORE the delta-rpm is downloaded and installed. It worked already as intended in a previous release before 15.0 (download kernel delta-rpm -> install -> notification "reboot needed / reboot now?"). Currently, the notification may confuse new users or desktop users, who don't use YaST or zypper to install updates. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1181029] New: racket: /usr/share/racket/pkgs/.LOCKpkgs.rktd cannot open output file
by bugzilla_noreply＠suse.com 16 Sep '22

16 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1181029 Bug ID: 1181029 Summary: racket: /usr/share/racket/pkgs/.LOCKpkgs.rktd cannot open output file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: petr(a)cervinka.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When you run drracket (current version 7.8) on Tumbleweed and open Package Manager to see Currently Installed (click menu: File->Package Manager->Currently installed) it will end with following error. open-output-file: cannot open output file path: /usr/share/racket/pkgs/.LOCKpkgs.rktd system error: Permission denied; errno=13 context...: /usr/share/racket/collects/racket/file.rkt:429:8 /usr/share/racket/collects/racket/file.rkt:424:0: call-with-file-lock /usr/share/racket/collects/racket/contract/private/arrow-val-first.rkt:555:3 /usr/share/racket/pkgs/gui-pkg-manager-lib/pkg/gui/private/by-installed.rkt:139:12: for-loop /usr/share/racket/pkgs/gui-pkg-manager-lib/pkg/gui/private/by-installed.rkt:137:4: reset-installed-list! method in by-installed-panel% /usr/share/racket/collects/racket/private/more-scheme.rkt:148:2: call-with-break-parameterization /usr/share/racket/collects/racket/private/more-scheme.rkt:266:2: call-with-exception-handler /usr/share/racket/pkgs/gui-lib/mred/private/wx/common/queue.rkt:435:6 /usr/share/racket/pkgs/gui-lib/mred/private/wx/common/queue.rkt:486:32 /usr/share/racket/pkgs/gui-lib/mred/private/wx/common/queue.rkt:634:3 When you manually create file by "sudo touch /usr/share/racket/pkgs/.LOCKpkgs.rktd", it will work fine. It seems to be easy to fix, but racket.changes file in OBS contains manipulation (related to this file) in the past, so my suggestion may not be correct one. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1168447] New: Please build Blender 2.8x with OptiX support
by bugzilla_noreply＠novell.com 16 Sep '22

16 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1168447 Bug ID: 1168447 Summary: Please build Blender 2.8x with OptiX support Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: cfeck(a)kde.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Blender has improved support for RTX cards since version 2.81. The official Blender download supports these Cycles engines: CPU, CUDA, OptiX, and OpenCL. In the Tumbleweed build of Blender, only CPU, CUDA, and OpenCL are selectable. -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1121578] New: python-aiohttp Factory version unable to build on Leap
by bugzilla_noreply＠novell.com 15 Sep '22

15 Sep '22

http://bugzilla.suse.com/show_bug.cgi?id=1121578 Bug ID: 1121578 Summary: python-aiohttp Factory version unable to build on Leap Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In order to fix python-aiohttp build failure in Leap 15.1, python-aiohttp's Factory version has submitted to Leap, however this version unable to build on Leap due to missing deps, https://build.opensuse.org/package/show/openSUSE:Leap:15.1:Staging:adi:21/p… Note that, a problem is, python-Cython is one of the dep does not have greater enough version in Leap, and python-Cython is from SLE. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1181849] New: VUL-0: nim: Insecure SSL/TLS Defaults, MitM, and nimble shell command injection
by bugzilla_noreply＠suse.com 14 Sep '22

14 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1181849 Bug ID: 1181849 Summary: VUL-0: nim: Insecure SSL/TLS Defaults, MitM, and nimble shell command injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: anicka(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: qa-bugs(a)suse.de CC: adrian.glaubitz(a)suse.com Found By: --- Blocker: --- through oss title: "Nim - Insecure SSL/TLS Defaults, MitM, and nimble shell command injection" date: 2021-02-04T14:13:23+01:00 cve: vendor: nim-lang vendorUrl: https://nim-lang.org/ authors: tintinweb affectedVersions: [ "<= 1.2.6", "nimble <=v0.12.0"] vulnClass: CWE-295, CWE-78, CWE-348 Vulnerability Note: https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaul… Vulnerability Note: https://github.com/tintinweb/pub/ Group: https://consensys.net/diligence/research/ # Vulnerability Note ## Summary We found a couple of critical security issues in the defaults for one of the standard-lib components that allows peer-impersonation (MitM) on secure transports. This also affects the languages package manager. Additionally, the package manager is vulnerable to shell command injection when fetching remote repositories before installing packages: * 2.1 - `httpClient` does no validate peer certificates by default (appears to be fixed in 1.4.x) * 2.2 - the package manager `nimble` relies on the insecure `httpClient` defaults (unfixed; latest 0.12.0 has not been re-compiled with a fixed nim-c) * 2.3 - `nimble` falls back to insecure transports if `https` is blocked (unfixed) * 2.4 - `nimble` shell command injection when fetching a package for installation (unfixed) **TLDR;** The Nim (`at least <=1.2.6`) `httpClient` default SSL/TLS configuration does not enforce peer certificate verification by default. Non-secure settings should not be the default as this might unexpectedly expose other projects to security risks. If you're using `nimble <= 0.12.0` anyone can block your TLS session and it will fall back to an insecure transport. Because of the insecure `httpClient` defaults, one can also just intercept your TLS session as the peer verification is too lax. Additionally, nimble appears to be vulnerable to a direct shell command injection when installing a package (but one can as well just provide a malicious package). ## Details see https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaul… ## Proof of Concept see https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaul… ### Timeline ``` JUL/09/2020 - contact nim developers @telegram; provided details, PoC FEB/04/2021 - deadline met. full disclosure. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1146856] New: security/fail2ban: Bug - failtoban breaks restarting firewalld
by bugzilla_noreply＠novell.com 14 Sep '22

14 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1146856 Bug ID: 1146856 Summary: security/fail2ban: Bug - failtoban breaks restarting firewalld Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: meissner(a)suse.com Reporter: Mathias.Homann(a)opensuse.org QA Contact: bnc-team-screening(a)forge.provo.novell.com Found By: --- Blocker: --- on a system with fail2ban installed and activated it is impossible to use systemctl restart to restart firewalld: nextcloud:~ # systemctl restart firewalld Failed to restart firewalld.service: Transaction contains conflicting jobs 'restart' and 'stop' for fail2ban.service. Probably contradicting requirement dependencies configured. See system logs and 'systemctl status firewalld.service' for details. the sequence "systemctl stop fail2ban; systemctl restart firewalld; systemctl start fail2ban" works as exected. the same used to happen when I still used SuSEfirewall2 instead of firewalld, so I'm pretty sure the issue is with fail2ban and not with either of the two firewalls... for more info: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871993 https://bugzilla.redhat.com/show_bug.cgi?id=1379141 https://lists.freedesktop.org/archives/systemd-devel/2016-March/036011.html -- You are receiving this mail because: You are on the CC list for the bug.

2 8

[Bug 1183425] New: Graphical "Please enter passphrase" prompt for disk encryption upon startup is unreadable on HiDPI
by bugzilla_noreply＠suse.com 13 Sep '22

13 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1183425 Bug ID: 1183425 Summary: Graphical "Please enter passphrase" prompt for disk encryption upon startup is unreadable on HiDPI Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: gp(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 847121 --> https://bugzilla.suse.com/attachment.cgi?id=847121&action=edit Screenshot of the startup screen - the broken and too small prompt marked On a notebook with an HiDPI display the text of the prompt to enter the passphrase for the desk encryption of /home is - unreadable - horizontally(!) split in two pieces - that are distributed in the upper left and the upper right of the screen See the attached screenshot. -- You are receiving this mail because: You are on the CC list for the bug.

1 34

[Bug 1057976] New: Patch for gtk3 (openSUSE-2017-1032) requires vietnamese, inuktitut, thai, and amharic
by bugzilla_noreply＠novell.com 12 Sep '22

12 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1057976 Bug ID: 1057976 Summary: Patch for gtk3 (openSUSE-2017-1032) requires vietnamese, inuktitut, thai, and amharic Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)forge.provo.novell.com Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 740114 --> http://bugzilla.opensuse.org/attachment.cgi?id=740114&action=edit Screen shot showing Yast's suggestions When online updating the gtk3-3.20.10-5.3.1 to gtk3-3.20.10-5.6.1, Yast2 insists to add additional language modules like gtk3-immodule-{ietnamese,inuktitut,thai,amharic} which I don't need. See attachment. -- You are receiving this mail because: You are on the CC list for the bug.

2 20

[Bug 966042] New: yast command-line usage emits "unable to close filehandle properly" warning at exit
by bugzilla_noreply＠novell.com 09 Sep '22

09 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=966042 Bug ID: 966042 Summary: yast command-line usage emits "unable to close filehandle properly" warning at exit Classification: openSUSE Product: openSUSE Tumbleweed Version: 2015* Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Minor Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: bk(a)ancilla.ca QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Specifically, it says: Warning: unable to close filehandle properly: Bad file descriptor, <STDIN> line 21 during global destruction (#1) (S io) An error occurred when Perl implicitly closed a filehandle. This usually indicates your file system ran out of disk space. This happens with (as far as I can tell, I haven't tested exhaustively) all command-line yast invokations that involve a module. So, e.g., "yast users help" or "yast sysconfig help" will produce this message. "yast help" on its own, however, won't. It does not appear to affect yast's exit code, or it's ability to do its job; if I run "yast sysconfig set LOADER_TYPE=none", it does the right thing and then produces that message while exiting. Despite the hint that it may be space-related, this happens on multiple computers, all of them with plenty of space available on all filesystems. These systems are all running recent (~2 weeks) versions of Tumbleweed. -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1181243] New: accounts-daemon[1065]: g_dbus_interface_skeleton_get_object_path: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1181243 Bug ID: 1181243 Summary: accounts-daemon[1065]: g_dbus_interface_skeleton_get_object_path: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: suseino(a)riseup.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 845399 --> http://bugzilla.opensuse.org/attachment.cgi?id=845399&action=edit journal This error shows up in journal: accounts-daemon[1065]: g_dbus_interface_skeleton_get_object_path: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed Attaching journal excerpt. -- You are receiving this mail because: You are on the CC list for the bug.

1 1