May 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1185271] YaST KDE control module has stopped working
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185271 https://bugzilla.suse.com/show_bug.cgi?id=1185271#c7 Christopher Yeleighton <giecrilj(a)stegny.2a.pl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|WORKSFORME |--- --- Comment #7 from Christopher Yeleighton <giecrilj(a)stegny.2a.pl> --- Woohoo here we go again. The missing library line disappeared after the latest major update. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173281] VUL-0: CVE-2020-14929: alpine: silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1173281 https://bugzilla.suse.com/show_bug.cgi?id=1173281#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0675-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1173281 CVE References: CVE-2020-14929 JIRA References: Sources used: openSUSE Leap 15.2 (src): alpine-2.24-lp152.5.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185631] VUL-0: exim: 21Nails - Multiple vulnerabilities in Exim
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185631 https://bugzilla.suse.com/show_bug.cgi?id=1185631#c2 --- Comment #2 from Marcus Meissner <meissner(a)suse.com> --- i forwarded the factory version to leap 15.2 and backports 15-sp1. backports 15-sp2 will auto fetch it from 15.2 once released. can you osc review accept -m ok 891096 and osc review accept -m ok 891098 for the 2 submits? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185631] VUL-0: exim: 21Nails - Multiple vulnerabilities in Exim
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185631 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185441] "system is compromised" during boot after grub2+shim update
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185441 http://bugzilla.opensuse.org/show_bug.cgi?id=1185441#c12 Tiago Marques <bugs(a)tmarques.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bugs(a)tmarques.com --- Comment #12 from Tiago Marques <bugs(a)tmarques.com> --- Hi, I've been hit by this for some months now. Every Grub2 update, I get the same message as OP. Not sure which grub package is to blame and I'm using EFI and secure boot. I've managed to (twice) solve the issue by booting a live USB, chrooting and then running 'shim-install'. Not sure where the bug is or if this helps. I'm available to test other things out to help fix this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185704] New: AutoYaST: Improve <ask-list> support
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185704 Bug ID: 1185704 Summary: AutoYaST: Improve <ask-list> support Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: igonzalezsosa(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The <ask> mechanism provides a convenient way to add some kind of interactivity to AutoYaST. However, the code is rather old and the implementation could be improved. You can find more information about this feature in the AutoYaST Guide: https://doc.opensuse.org/projects/autoyast/#CreateProfile-Ask. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1185731] New: libzstd1.rpm is compressed with itself, or Bumpy Road from RPM 4.12
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185731 Bug ID: 1185731 Summary: libzstd1.rpm is compressed with itself, or Bumpy Road from RPM 4.12 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: giecrilj(a)stegny.2a.pl QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Background: RPM 4.16 requires libzstd1, which is a new library. However, the package introducing the library is compressed with the very library that it purports to install, creating a vicious cycle. WARNING: DO NOT TRY THIS AT HOME!!! When upgrading with YaST2 and RPM 4.12, you cannot install anything but RPM itself. All other packages are zstd1-compressed and thus malformed. You can ignore the uncompressing errors, in which case you end up with a non-functional RPM: it requires libzstd1 which has not been installed. Moreover, libzstd1 will not work without a newer glibc. Not even rpm2cpio loads. So you have to install locally glibc (NOT INTO THE NORMAL LOCATION FOR IT), libzstd1 and liblua from the initrd image of a network installer. Since the new glibc is incompatible with ld-linux.so, you need to invoke the new ld-linux.so directly. IF YOU INSTALL GLIBC INTO THE NORMAL LOCATION, YOU WILL NOT BE ABLE TO RUN BASIC TOOLS LIKE rm, I.E. THERE WILL BE NO WAY BACK!!! Under these circumstances rpm still fails but the call of { env LD_LIBRARY_PATH=�� /ld-linux.so rmp2cpio; } is likely to succeed; use this to extract the CPIO archive of glibc, libzstd1 and liblua. Use { cpio -i ��; } to install them into the normal location. You can run { rpm; } now; it will convert bdb to ndb first. The rest is about a hundred packages you need to explicitly install with { rpm -i ��; } (as zypper is still broken). Which packages are needed depends on which packages you have installed. All of them must be installed in one run, mainly because they require the new glibc either directly or indirectly. Some of them can be installed onto the old glibc (you already have the new one but rpm thinks you have the old one) but most of them are not. This includes PERL, python ruby and all packages that require them. You also have to manually delete scores of packages that require those scripting languages, including the whole of YaST2 itself. RPM cannot figure out it reinstalls YaST2 because storage-ng is not a replacement for storage (or so I think). Of course, there are YaST2 packages, like inetd, that are obsolete and need to be removed by hand anyway. At this point, you can proceed with zypper because it works again. A funny detail is that you have to remove xscreensaver because pam_unix does not explicitly replace pam-modules. I think much of this tinkering could be avoided if the basic packages were not zstd1-compressed (at least, if zypper could pick up a version that is not). -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1184399] purge-kernels.service might conflict with other background services using zypper as well
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1184399 https://bugzilla.suse.com/show_bug.cgi?id=1184399#c9 --- Comment #9 from Michal Suchanek <msuchanek(a)suse.com> --- https://build.opensuse.org/request/show/891053 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184399] purge-kernels.service might conflict with other background services using zypper as well
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1184399 https://bugzilla.suse.com/show_bug.cgi?id=1184399#c8 Christian Dywan <cdywan(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cdywan(a)suse.com --- Comment #8 from Christian Dywan <cdywan(a)suse.com> --- Is there a separate bug for the purge kernels service? Or is there already a fix in the pipeline? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185700] Digikam 7.2.0 failing to launch.
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185700 https://bugzilla.suse.com/show_bug.cgi?id=1185700#c3 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com, | |paul.pgp-7(a)gmx.com Flags| |needinfo?(paul.pgp-7(a)gmx.co | |m) --- Comment #3 from Fabian Vogt <fvogt(a)suse.com> --- It appears to work here, that symbol is provided by libopencv4_5-4.5.2-1.1.x86_64. What's the version of the libopencv4_5 package on your system? Where is it from? -- You are receiving this mail because: You are on the CC list for the bug.

1 0