September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1187262] pythonN-base not in Prefer: list
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1187262 https://bugzilla.suse.com/show_bug.cgi?id=1187262#c6 --- Comment #6 from Matej Cepl <mcepl(a)suse.com> --- (In reply to Olaf Hering from comment #5) > I just spotted a user, which I forgot: > ocaml-pyml Right, https://build.opensuse.org/request/show/921451 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190476] New: VUL-0: chromium: update to 93.0.4577.82
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190476 Bug ID: 1190476 Summary: VUL-0: chromium: update to 93.0.4577.82 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: gmbr3(a)opensuse.org Reporter: gianluca.gabrielli(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1190096 Found By: --- Blocker: --- Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven��t yet fixed. This update includes 11 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information. [$7500][1237533] High CVE-2021-30625: Use after free in Selection API. Reported by Marcin Towalski of Cisco Talos on 2021-08-06 [$7500][1241036] High CVE-2021-30626: Out of bounds memory access in ANGLE. Reported by Jeonghoon Shin of Theori on 2021-08-18 [$5000][1245786] High CVE-2021-30627: Type Confusion in Blink layout. Reported by Aki Helin of OUSPG on 2021-09-01 [$TBD][1241123] High CVE-2021-30628: Stack buffer overflow in ANGLE. Reported by Jaehun Jeong(@n3sk) of Theori on 2021-08-18 [$TBD][1243646] High CVE-2021-30629: Use after free in Permissions. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on 2021-08-26 [$TBD][1244568] High CVE-2021-30630: Inappropriate implementation in Blink . Reported by SorryMybad (@S0rryMybad) of Kunlun Lab on 2021-08-30 [$TBD][1246932] High CVE-2021-30631: Type Confusion in Blink layout. Reported by Atte Kettunen of OUSPG on 2021-09-06 [$TBD][1247763] High CVE-2021-30632: Out of bounds write in V8. Reported by Anonymous on 2021-09-08 [$TBD][1247766] High CVE-2021-30633: Use after free in Indexed DB API. Reported by Anonymous on 2021-09-08 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. Google is aware that exploits for CVE-2021-30632 and CVE-2021-30633 exist in the wild. As usual, our ongoing internal security work was responsible for a wide range of fixes: [1249027] Various fixes from internal audits, fuzzing and other initiatives Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL. https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-des… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1190096] VUL-0: chromium: update to 93.0.4577.63
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190096 https://bugzilla.suse.com/show_bug.cgi?id=1190096#c5 Callum Farmer <gmbr3(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Callum Farmer <gmbr3(a)opensuse.org> --- done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190096] VUL-0: chromium: update to 93.0.4577.63
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190096 Callum Farmer <gmbr3(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1190476 Depends on|1190476 | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189254] chromium package is missing crashpad_handler
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1189254 https://bugzilla.suse.com/show_bug.cgi?id=1189254#c8 Callum Farmer <gmbr3(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Callum Farmer <gmbr3(a)opensuse.org> --- fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190872] New: Vivaldi Snapshot crash
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190872 Bug ID: 1190872 Summary: Vivaldi Snapshot crash Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: rskunath(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 852745 --> http://bugzilla.opensuse.org/attachment.cgi?id=852745&action=edit Terminal output from the crash The latest Vivaldi snapshot - Vivaldi 4.3.2431.3 (Official Build) snapshot (64-bit) Revision 082a42a3977fe50ddf09daceba42d46562ae6428 When the latest Vivaldi Snapshot is opened with all extensions disabled it crashes after a short time. No steps are needed to get it to crash. Opening it on the start page or the about tab will cause the crash. A terminal output during the crash is attached. This crash is new since the laters Vivaldi Snapshot. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1174749] Gedit: gedit-ternimal can not change directory
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1174749 https://bugzilla.suse.com/show_bug.cgi?id=1174749#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1309-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1174749 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP2 (src): gedit-plugins-3.28.1-bp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190861] openSUSE Tumbleweed Oval data
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190861 http://bugzilla.opensuse.org/show_bug.cgi?id=1190861#c1 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger(a)gmx.de --- Comment #1 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- The OVAL data for SLE and openSUSE Leap is generated from the maintenance update engine, from patchinfo XML files associated with the update. But package updates for openSUSE Tumbleweed, and the Tumbleweed snapshots, do not go through this mechanism. The information it available in principle, but probably as complete and readily available as would be needed for a quick implementation. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169494] AUDIT-0: oddjob: review D-Bus and PAM
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1169494 https://bugzilla.suse.com/show_bug.cgi?id=1169494#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1306-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1169494,1189106 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP2 (src): rpmlint-1.10-bp152.4.12.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 981596] XFCE Login manager usability with many users existing
by bugzilla_noreply＠suse.com 25 Sep '21

25 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=981596 https://bugzilla.suse.com/show_bug.cgi?id=981596#c21 --- Comment #21 from openQA Review <openqa-review(a)suse.de> --- This is an autogenerated message for openQA integration by the openqa_review script: This bug is still referenced in a failing openQA test: extra_tests_on_xfce https://openqa.opensuse.org/tests/1933211 To prevent further reminder comments one of the following options should be followed: 1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted 2. The openQA job group is moved to "Released" or "EOL" (End-of-Life) 3. The bugref in the openQA scenario is removed or replaced, e.g. `label:wontfix:boo1234` -- You are receiving this mail because: You are on the CC list for the bug.

1 0