April 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1175164] New: VUL-0: CVE-2020-8224: nextcloud-desktop: code injection when placing a malicious OpenSSL config into a fixed directory
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1175164 Bug ID: 1175164 Summary: VUL-0: CVE-2020-8224: nextcloud-desktop: code injection when placing a malicious OpenSSL config into a fixed directory Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/264969/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8224 A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8224 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8224 https://hackerone.com/reports/622170 https://nextcloud.com/security/advisory/?id=NC-SA-2020-030 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1121301] New: Mails can not read in roundcubemail from server:Kolab:Extra
by bugzilla_noreply＠novell.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1121301 Bug ID: 1121301 Summary: Mails can not read in roundcubemail from server:Kolab:Extra Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: openSUSE Factory Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ecsos(a)schirra.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In roundcubemail from server:Kolab there come serveral errors. 1.) Every time When call the Link, without login, it rise up following warnings in /var/log/roundcubemail/errors: [09-Jan-2019 17:20:01 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:20:01 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:20:01 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:20:01 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 2.) After login this is in /var/log/roundcubemail/errors: [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:20 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:25:22 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 3.) When click on Subject to read mail, noting happens. Only the message is loading without end. And in /var/log/roundcubemail/errors is: [09-Jan-2019 17:27:21 UTC] PHP Warning: Declaration of rcube_kolab_contacts::validate(&$save_data) should be compatible with rcube_addressbook::validate(&$save_data, $autofix = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:27:21 UTC] PHP Warning: Declaration of rcube_kolab_contacts::delete_all() should be compatible with rcube_addressbook::delete_all($with_groups = false) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:27:21 UTC] PHP Warning: Declaration of rcube_kolab_contacts::list_groups($search = NULL) should be compatible with rcube_addressbook::list_groups($search = NULL, $mode = 0) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:27:21 UTC] PHP Warning: Declaration of rcube_kolab_contacts::rename_group($gid, $newname) should be compatible with rcube_addressbook::rename_group($group_id, $newname, &$newid) in /srv/www/roundcubemail/plugins/kolab_addressbook/lib/rcube_kolab_contacts.php on line 29 [09-Jan-2019 17:27:21 UTC] PHP Fatal error: Class vobject_location_property contains 3 abstract methods and must therefore be declared abstract or implement the remaining methods (Sabre\VObject\Property::getValueType, Sabre\VObject\Property::setRawMimeDirValue, Sabre\VObject\Property::getRawMimeDirValue) in /srv/www/roundcubemail/plugins/libcalendaring/libvcalendar.php on line 1364 So. Mail can never read. -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1182527] New: Xsane - Scanning Negatives
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1182527 Bug ID: 1182527 Summary: Xsane - Scanning Negatives Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: 64bit OS: openSUSE Leap 15.2 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: admfubar(a)yahoo.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Setting the Invert Colors for Scanning Negatives, produces the desired result in the preview window and not the actual scanned image. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1123566] New: kolab-freebusyd doesn't generate files
by bugzilla_noreply＠novell.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1123566 Bug ID: 1123566 Summary: kolab-freebusyd doesn't generate files Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ecsos(a)schirra.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- kolab-freebusyd from package kolab-utils does not generate his files. It generates errors: $ # kolab-freebusyd -c /etc/kolab/kolab.conf -g foo(a)foobar.com (18:51:03) fbcoordinator.cpp(139): Starting generation for user: "foo(a)foobar.com" (18:51:03) kolabjob.cpp(47): =========================================================== (18:51:03) kolabjob.cpp(48): starting kolab job: "foo(a)foobar.com" on "localhost" : 993 (18:51:03) authenticationjob.cpp(34): logging in as "foo(a)foobar.com" using "cyrusAdminUsername" (18:51:04) authenticationjob.cpp(68): authentication successful (18:51:04) createkolabfolderjob.cpp(65): "Create failed, server replied: A000010 NO Mailbox already exists " Trying to fix the metadata (18:51:04) setupkolabfoldersjob.cpp(122): Created folder "" "Freebusy" (18:51:04) fbcoordinator.cpp(162): Error: "" (18:51:04) fbcoordinator.cpp(117): All done. Total time elapsed [s]: 0.147 (18:51:04) kolabjob.cpp(41): lost connenction So, no availability is seen by generation of a new appointment in roundcube or Korganizer. -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1124862] New: gnutls and TLS 1.3
by bugzilla_noreply＠novell.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1124862 Bug ID: 1124862 Summary: gnutls and TLS 1.3 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: ecsos(a)schirra.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- All versions of gnutls, but Tumbleweed, have to old versions of gnutls. All versions, but Tumbleweed, does not support TLS 1.3 Think it is for SLE also. First stable support was with 3.6.4. Current version is 3.6.6. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1164545] New: Error in package obs-service-source_validator
by bugzilla_noreply＠novell.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1164545 Bug ID: 1164545 Summary: Error in package obs-service-source_validator Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ecsos(a)schirra.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When i branch Emulator:Wine wine and would build it local with osc build there will rise up an error and nothing build: - package has baselibs.conf: (unchanged) - package has wine-rpmlintrc: (unchanged) ERROR: 'wine' referenced in baselibs.conf is not being built ERROR: 'wine-devel' referenced in baselibs.conf is not being built Aborting: service call failed: /usr/lib/obs/service/source_validator --outdir /home/foo/osc/home:foo/wine/tmptvl91k_j.source_validator.service Source service run failed! When i update to obs-service-source_validator-0.19-lp151.140.1.noarch.rpm from openSUSE:Tools wine will build. Please fix/update this in Leap 15.1 Regards Eric -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1183492] openSUSE-Leap-15.3-NET-x86_64-Build91.1: During installation: Unable to download repository list
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1183492 http://bugzilla.opensuse.org/show_bug.cgi?id=1183492#c10 Riccardo ----- <zenigata.it(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zenigata.it(a)gmail.com --- Comment #10 from Riccardo ----- <zenigata.it(a)gmail.com> --- Same here. The error in my installation (english) is: "unable to download list of repositories or no repositories defined". -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184326] zypper dup from Leap 15.2 to 15.3 beta: rpm verification keys not installed, rpms installed unverified
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1184326 https://bugzilla.suse.com/show_bug.cgi?id=1184326#c4 --- Comment #4 from Michael Andres <ma(a)suse.com> --- > It's a bit strange, that rpm complains the key is missing. The database > should even contain this updated version (imported when the repo was > refreshed). Even my oldest 15.0 has this key. Sorry I oversaw that you're on LEAP! The SuSE Package Signing Key is from SLES. And now it makes sense that he key is missing. For 15.3 there's been an attempt to close the gap between Leap and SLES. It may be that now packages are taken from SLES directly (signed with 39db7c82) while older Leap packages were usually signed by 3dbdc284 (openSUSE Project Signing Key <opensuse(a)opensuse.org>). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184326] zypper dup from Leap 15.2 to 15.3 beta: rpm verification keys not installed, rpms installed unverified
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1184326 https://bugzilla.suse.com/show_bug.cgi?id=1184326#c3 Michael Andres <ma(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |d_werner(a)gmx.net Flags| |needinfo?(d_werner(a)gmx.net) --- Comment #3 from Michael Andres <ma(a)suse.com> --- I just checked the 2 keys from https://download.opensuse.org/distribution/leap/15.3/repo/oss/gpg-pubkey-... > === gpg-pubkey-39db7c82-5847eb1f.asc{- 0644 216/50 size 972} > [SuSE Package Signing Key <build(a)suse.de>] > +----[RSA 2048]-----+ > | . . ^ | fpr FEAB502539D846DB2C0961CA70AF9E8139DB7C82 > | : : . | id 70AF9E8139DB7C82 > | ^ ^ . | alg RSA 2048 > | ^ . l i | cre 1481108255 Wed Dec 7 11:57:35 2016 > | : ^ . f : | exp 1607252255 Sun Dec 6 11:57:35 2020 (EXPIRED) > | ? ^ .Sl | ttl -125 > | E i ... | rpm 39db7c82-5847eb1f > | ^ .. | > | . . | > | . . | > | .... | > +----[39DB7C82]-----+ This is an old (expired) version of the SuSE Package Signing Key. I actually wonder that the key is not in your DB. The repo metadata are signed with the updated version of 39db7c82 (repomd.xml.key): > === ./repomd.xml.key{- 0644 216/50 size 972} > [SuSE Package Signing Key <build(a)suse.de>] > +----[RSA 2048]-----+ > | . . ^ | fpr FEAB502539D846DB2C0961CA70AF9E8139DB7C82 > | : : . | id 70AF9E8139DB7C82 > | ^ ^ . | alg RSA 2048 > | ^ . l i | cre 1600676507 Mon Sep 21 10:21:47 2020 > | : ^ . f : | exp 1726820507 Fri Sep 20 10:21:47 2024 > | ? ^ .Sl | ttl 1259 > | E i ... | rpm 39db7c82-5f68629b > | ^ .. | > | . . | > | . . | > | .... | > +----[39DB7C82]-----+ It's a bit strange, that rpm complains the key is missing. The database should even contain this updated version (imported when the repo was refreshed). Even my oldest 15.0 has this key. Could you please attach the /var/log/zypper.log showing the dup? I'd realy like to check this. The 2nd key is from the Backports OBS Project. > === gpg-pubkey-65176565-59787af5.asc{- 0644 216/50 size 1113} > [openSUSE:Backports OBS Project <openSUSE:Backports@build.opensuse.org>] > +----[RSA 2048]-----+ > | ...^ ^^^.E | fpr 637B32FF3D83F07A7AE1C40A9C214D4065176565 > | .. . . . | id 9C214D4065176565 > | . | alg RSA 2048 > | . | cre 1570022273 Wed Oct 2 15:17:53 2019 > | ^ | exp 1639142273 Fri Dec 10 14:17:53 2021 > | . S | ttl 244 > | : l . | rpm 65176565-5d94a381 > | ? ^ : | > | i i ^ | > | ^ i.^ | > | ^i. .^ | > +----[65176565]-----+ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1183461] [Build 20210311] openQA test fails in nftables - /etc/nftables is not created
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1183461 Dominik Heidler <dheidler(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dheidler(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0