July 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1187987] [Build 20210702] openQA test fails in enable_autologin
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187987 https://bugzilla.suse.com/show_bug.cgi?id=1187987#c2 David Diaz <dgonzalez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dgonzalez(a)suse.com --- Comment #2 from David Diaz <dgonzalez(a)suse.com> --- Hi there! Recently we have changed a bit the back-end of user management to start relying on shadow tools instead of directly modifying the involved files. More can be read at [1] But taking a look at linked logs (thanks, btw) looks like the changes for adapting yast2-firstboot [2] have arrived first before changes for yast2-users [3]. > ... > 2021-07-03 02:34:03|install|yast2-firstboot|4.4.2-1.1|noarch|root@susetest|OSS|9919296c97bc5c34decc03f61124284a6ea39743e641a82844d181d77fe87a41| > ... > 2021-07-03 00:18:58|install|yast2-users|4.4.1-1.1|x86_64||openSUSE-20210702-0|693f02c3bd13a2ff601fe95245d38177cb80fd811f374184d94eac02db6f3225| > ... That's why this error is appearing. A matter of time to have yast2-users 4.4.2 available, I guess. Just in case you are wondering about a dependency in the yast2-firstboot spec file for avoiding problems like this, it is missing because this special yast2-firstboot module does not require any other module due to the fact that, depending on the chosen configuration, it might be necessary or not. I'll keep the bug report open until the error goes. Thanks! [1] https://yast.opensuse.org/blog/2021-06-28/sprint-126 [2] https://github.com/yast/yast-firstboot/pull/123 [3] https://github.com/yast/yast-users/pull/316 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185362] fwupd fails to start due to missing dependencies causing a timeout
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1185362 https://bugzilla.suse.com/show_bug.cgi?id=1185362#c13 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #13 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- The tcti-device-tss is now Required due to bug 1187077. So the desire expressed in this bug is now fulfilled. Although I still think fwupd is behaving wrongly here. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186790] VUL-1: wireshark: DVB-S2-BB dissector infinite loop (wnpa-sec-2021-05)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1186790 https://bugzilla.suse.com/show_bug.cgi?id=1186790#c2 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #2 from Robert Frohl <rfrohl(a)suse.com> --- (In reply to Robert Frohl from comment #1) > released in Factory, closing needed for SLE15 too, waiting for submission to be released -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187917] New: VUL-1: CVE-2020-36403: libhts: out-of-bounds write access in vcf_parse_format()
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1187917 Bug ID: 1187917 Summary: VUL-1: CVE-2020-36403: libhts: out-of-bounds write access in vcf_parse_format() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/303343/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: flyos(a)mailoo.org Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-36403 HTSlib 1.10 through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read). References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-36403 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36403 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2020-95… https://github.com/samtools/htslib/commit/dcd4b7304941a8832fba2d0fc4c1e716e… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1169817] Printing/cups: Bug
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1169817 https://bugzilla.suse.com/show_bug.cgi?id=1169817#c5 Johannes Meixner <jsmeix(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jsmeix(a)suse.com) | --- Comment #5 from Johannes Meixner <jsmeix(a)suse.com> --- I cannot say anything about "driverless" because I do not have a matching printer for it (I have only a traditional PostScript USB printer) so I cannot try out or reproduce anything in this area. It seems to work according to the recent "IPP Everywhere support" mail thread on factory(a)lists.opensuse.org https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message… "Printing to a network printer via IPP" is not the same as "driverless printing" because not each network printer that supports IPP to receive printing data also supports "driverless printing" i.e. network printers that support only plain IPP usually still need printer driver software. "IPP Everywhere" printers support "driverless printing". In general regarding "driverless printing" https://wiki.debian.org/CUPSDriverlessPrinting provides a good overview. "Unable to print via IPP" could be also things like bug #1178604 or something different... In general regarding how to report a printing issue see https://en.opensuse.org/SDB:How_to_Report_a_Printing_Issue -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179931] VUL-0: CVE-2020-26419: wireshark: Multiple dissector memory leaks fixed in 3.4.1 (wnpa-sec-2020-19)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1179931 https://bugzilla.suse.com/show_bug.cgi?id=1179931#c7 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from Robert Frohl <rfrohl(a)suse.com> --- released -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179931] VUL-0: CVE-2020-26419: wireshark: Multiple dissector memory leaks fixed in 3.4.1 (wnpa-sec-2020-19)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1179931 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/273166/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175204] VUL-0: CVE-2020-17498: wireshark: Kafka dissector crash (wnpa-sec-2020-10)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1175204 https://bugzilla.suse.com/show_bug.cgi?id=1175204#c7 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from Robert Frohl <rfrohl(a)suse.com> --- fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175204] VUL-0: CVE-2020-17498: wireshark: Kafka dissector crash (wnpa-sec-2020-10)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1175204 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/265136/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186790] VUL-1: wireshark: DVB-S2-BB dissector infinite loop (wnpa-sec-2021-05)
by bugzilla_noreply＠suse.com 05 Jul '21

05 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1186790 https://bugzilla.suse.com/show_bug.cgi?id=1186790#c1 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Robert Frohl <rfrohl(a)suse.com> --- released in Factory, closing -- You are receiving this mail because: You are on the CC list for the bug.

1 0