July 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1149870] ocserv authentication issue using pam
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1149870 https://bugzilla.suse.com/show_bug.cgi?id=1149870#c5 --- Comment #5 from Michael Du <duyizhaozj321(a)yahoo.com> --- /etc/pam.d/ocserv is not included in this package, you have to create this file manually. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1149870] ocserv authentication issue using pam
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1149870 https://bugzilla.suse.com/show_bug.cgi?id=1149870#c4 --- Comment #4 from Michael Du <duyizhaozj321(a)yahoo.com> --- /etc/pam.d/ocserv is not included in this package, you have to this file manually. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188142] Kernel 5.13.1 does not boot due to bad shim signature
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1188142 https://bugzilla.suse.com/show_bug.cgi?id=1188142#c2 --- Comment #2 from Yan Huang <yan.huang(a)suse.com> --- (The workaround is to temporarily disable Secure Boot.) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188142] Kernel 5.13.1 does not boot due to bad shim signature
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1188142 https://bugzilla.suse.com/show_bug.cgi?id=1188142#c1 Yan Huang <yan.huang(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |yan.huang(a)suse.com --- Comment #1 from Yan Huang <yan.huang(a)suse.com> --- I have encountered exactly the same issue with the Kernel:stable kernel 5.13.1-1.1.gbebf622 from https://software.opensuse.org/download/package?package=kernel-default&proje… and Secure Boot enabled (on Tumbleweed 20210707). I think the issue actually started with the Kernel:stable kernel 5.13.0-5.1.g9140415. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187270] Broken translations in YaST control center
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187270 https://bugzilla.suse.com/show_bug.cgi?id=1187270#c20 --- Comment #20 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:2278-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1187270 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): yast2-users-4.2.12-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187707] VUL-0: CVE-2020-18670: roundcubemail: Cross Site Scripting (XSS) vulneraibility via database host and user in /installer/test.php
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187707 https://bugzilla.suse.com/show_bug.cgi?id=1187707#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:1014-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1180399,1187706,1187707 CVE References: CVE-2020-18670,CVE-2020-18671,CVE-2020-35730 JIRA References: Sources used: openSUSE Backports SLE-15-SP2 (src): roundcubemail-1.3.16-bp152.4.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187706] VUL-0: CVE-2020-18671: roundcubemail: Cross Site Scripting (XSS) vulnerability via smtp config in /installer/test.php
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187706 https://bugzilla.suse.com/show_bug.cgi?id=1187706#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:1014-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1180399,1187706,1187707 CVE References: CVE-2020-18670,CVE-2020-18671,CVE-2020-35730 JIRA References: Sources used: openSUSE Backports SLE-15-SP2 (src): roundcubemail-1.3.16-bp152.4.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1140566] firewalld: rich masquerading rules don't work
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1140566 http://bugzilla.opensuse.org/show_bug.cgi?id=1140566#c2 Bj�rn Voigt <bjoernv(a)arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bjoernv(a)arcor.de Component|Security |Security Version|Current |Leap 15.2 Product|openSUSE Tumbleweed |openSUSE Distribution OS|openSUSE Factory |All --- Comment #2 from Bj�rn Voigt <bjoernv(a)arcor.de> --- Tumbleweed and openSUSE 15.3 already include FirewallD 0.9.3, so the fix from 0.6.4 is already includes. But openSUSE 15.2 still has FirewallD 0.5.5. I suggest to assign this issue to "openSUSE Distribution". -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188105] virtualbox after last updates of tumbleweed did not run vbox machines
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1188105 http://bugzilla.opensuse.org/show_bug.cgi?id=1188105#c5 Larry Finger <Larry.Finger(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar(a)opensuse.org --- Comment #5 from Larry Finger <Larry.Finger(a)gmail.com> --- *** Bug 1188089 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188146] New: Request for a free implementation of aptX be added
by bugzilla_noreply＠suse.com 09 Jul '21

09 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1188146 Bug ID: 1188146 Summary: Request for a free implementation of aptX be added Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: wardlawhunter(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This is taken from request 905123 (https://build.opensuse.org/request/show/905123) to add libfreeaptx to openSUSE multimedia:libs. ------------------------------------------------------------------------------ A free implementation of aptX is missing from openSUSE. This can be installed through Packman as described in (https://en.opensuse.org/SDB:Installing_codecs_from_Packman_repositories) to, for example, install pipewire with support for aptX over bluetooth with libopenaptx 0.2.0. However, I'd like to add aptX to openSUSE if possible. This will require evaluation from SUSE's legal team (I am not a lawyer!). Additionally, I am new to this sort of thing so forgive any ignorance or lack of proper procedure. libfreeaptx has been forked form libopenaptx 0.2.0 which itself was based on ffmpeg 4.0. libopenaptx was updated to 0.2.1 to change its license from LGPL2.1+ to GPL3+ with an additional restriction: it may not be used by members of Freedesktop or Collabora, as well as preventing linking with any of their software. This makes libopenaptx >=0.2.1 practically useless as it prevents usage with pipewire going forward. This is due to a past conflict with libopenaptx's developer which can be found at https://gitlab.freedesktop.org/pulseaudio/pulseaudio/-/merge_requests/227 Freedesktop made a statement about this here: https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/664 Here are some relevant sections from that statement. "... The original work came from ffmpeg under the LGPL v2.1, to which third parties may not add additional restrictions (per sections 2 and 7 of the LGPL v2.1), so LGPLv2.1 + may-not-use restrictions are not permissible without the explicit consent of the original copyright holder. The upgrade to LGPL v3.0 without explicit consent from the original copyright holder is in itself permissible through the upgrade terms of the LGPL, however the additional restrictions imposed again conflict with sections 7 and 10 of the GPLv3 (as the base of the LGPLv3, with those sections not being invalidated by the additional LGPLv3 text). ... Regardless of the declared license having no legal validity, the LGPL's explicit provision in both v2.1 and v3.0 for such additional restrictions to be stripped, and the low likelihood of it ever being used together with PipeWire as its licensing terms would not be acceptable to any distribution, enforcing a version check seems like the safest way to ensure complete legal clarity, not put users or downstreams in any jeopardy, and comply with the author's stated wishes for v0.2.1 and above to not be used by PipeWire." If this is true, then potentially libopenaptx >= 0.2.1 may be used instead of libfreeaptx (though I do want to upset libopenaptx's developer regardless of legality). Debian is shipping libopenaptx 0.2.0 (pre-license change) in testing/bullseye. Aside from reaching a conclusion on proper licensure there is also a matter regarding patents that must be reviewed. aptX and aptX HD (supported by libfreeaptx and libopenaptx) were previously covered under patents EP0398973B1 (https://worldwide.espacenet.com/patent/search/family/010631689/publication/…) and US9398620B1 (https://worldwide.espacenet.com/patent/search/family/056381853/publication/…) respectively. I believe these patents have been a roadblock for getting aptX including with openSUSE in the past. However, the patents are now expired. Again, I am not a lawyer. SUSE's legal team needs to evaluate this. I realize this may be an endeavor for adding just this one package, but I believe improving openSUSE's out-of-the-box experience with bluetooth audio devices will add value to openSUSE for users with audio oriented use cases (such as myself). -- You are receiving this mail because: You are on the CC list for the bug.

1 1