July 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1184997] zypper ps -sss no longer works
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1184997 https://bugzilla.suse.com/show_bug.cgi?id=1184997#c26 --- Comment #26 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1879-1: An update that has four recommended fixes can now be installed. Category: recommended (important) Bug References: 1184326,1184399,1184997,1185325 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): libsolv-0.7.19-6.1, libzypp-17.26.0-9.1, zypper-1.14.45-10.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184399] purge-kernels.service might conflict with other background services using zypper as well
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1184399 https://bugzilla.suse.com/show_bug.cgi?id=1184399#c26 --- Comment #26 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1879-1: An update that has four recommended fixes can now be installed. Category: recommended (important) Bug References: 1184326,1184399,1184997,1185325 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): libsolv-0.7.19-6.1, libzypp-17.26.0-9.1, zypper-1.14.45-10.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184326] zypper dup from Leap 15.2 to 15.3 beta: rpm verification keys not installed, rpms installed unverified
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1184326 https://bugzilla.suse.com/show_bug.cgi?id=1184326#c72 --- Comment #72 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1879-1: An update that has four recommended fixes can now be installed. Category: recommended (important) Bug References: 1184326,1184399,1184997,1185325 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): libsolv-0.7.19-6.1, libzypp-17.26.0-9.1, zypper-1.14.45-10.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1174283] New: Firewall-applet displays underlying code on mouseover
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1174283 Bug ID: 1174283 Summary: Firewall-applet displays underlying code on mouseover Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: fkrueger(a)mailbox.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 839832 --> http://bugzilla.opensuse.org/attachment.cgi?id=839832&action=edit Firewall-applet message shown on mouseover Given TW20200717 with KDE Plasma 5.19.3, firewall-applet shows the message in the attachment on mouseover. I am not sure whether KDE as "component" would be the better/right choice. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1187464] patch:SUSE-2021-1973-1 conflicts with myspell-lightproof-en [...]
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187464 https://bugzilla.suse.com/show_bug.cgi?id=1187464#c14 Silviu Marin-Caea <silviu_marin-caea(a)otpbank.ro> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gfs1989(a)gmx.net --- Comment #14 from Silviu Marin-Caea <silviu_marin-caea(a)otpbank.ro> --- *** Bug 1187377 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187377] Software Updates conflicts
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187377 https://bugzilla.suse.com/show_bug.cgi?id=1187377#c1 Silviu Marin-Caea <silviu_marin-caea(a)otpbank.ro> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |silviu_marin-caea(a)otpbank.r | |o Resolution|--- |DUPLICATE --- Comment #1 from Silviu Marin-Caea <silviu_marin-caea(a)otpbank.ro> --- This seems to be a duplicate of 1187464 that's been fixed recently. *** This bug has been marked as a duplicate of bug 1187464 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187464] patch:SUSE-2021-1973-1 conflicts with myspell-lightproof-en [...]
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187464 https://bugzilla.suse.com/show_bug.cgi?id=1187464#c13 --- Comment #13 from Silviu Marin-Caea <silviu_marin-caea(a)otpbank.ro> --- I confirm it's fixed, all clear. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180804] New: VUL-0: CVE-2020-35701: cacti: SQL injection vulnerability in data_debug.php
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180804 Bug ID: 1180804 Summary: VUL-0: CVE-2020-35701: cacti: SQL injection vulnerability in data_debug.php Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/275013/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1915042 An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution. https://asaf.me/2020/12/15/cacti-1-2-0-to-1-2-16-sql-injection/ https://github.com/Cacti/cacti/issues/4022 References: https://bugzilla.redhat.com/show_bug.cgi?id=1915042 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35701 https://github.com/Cacti/cacti/issues/4022 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35701 https://asaf.me/2020/12/15/cacti-1-2-0-to-1-2-16-sql-injection/ -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1188183] New: Out of date package: openssh
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1188183 Bug ID: 1188183 Summary: Out of date package: openssh Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Enhancement Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: jamesli1258(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, I was wondering if the package would be able to be updated. OpenSSH has released 8.6 noted here: https://www.openssh.com/txt/release-8.6 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1183265] [Build 20210308] openQA test fails for boot_linuxrc
by bugzilla_noreply＠suse.com 10 Jul '21

10 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1183265 https://bugzilla.suse.com/show_bug.cgi?id=1183265#c10 --- Comment #10 from openQA Review <openqa-review(a)suse.de> --- This is an autogenerated message for openQA integration by the openqa_review script: This bug is still referenced in a failing openQA test: boot_linuxrc https://openqa.opensuse.org/tests/1815968 To prevent further reminder comments one of the following options should be followed: 1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted 2. The openQA job group is moved to "Released" or "EOL" (End-of-Life) 3. The label in the openQA scenario is removed -- You are receiving this mail because: You are on the CC list for the bug.

1 0