January 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1192936] VUL-0: CVE-2021-21898: libdxfrw: out-of-bounds write in dwgCompressor:decompress18()
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1192936 https://bugzilla.suse.com/show_bug.cgi?id=1192936#c4 --- Comment #4 from Jiri Slaby <jslaby(a)suse.com> --- Factory is already fixed with the recent update. The rest (leap + backports), it's close to impossible to fix by the three CVE patches (the code is way too old/different and the changes are very intrusive). Instead, we could upgrade both libdxfrw and librecad to what is in factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192937] VUL-0: CVE-2021-21899: libdxfrw: heap out-of-bounds write in dwgCompressor:copyCompBytes21
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1192937 https://bugzilla.suse.com/show_bug.cgi?id=1192937#c3 --- Comment #3 from Jiri Slaby <jslaby(a)suse.com> --- Factory is already fixed with the recent update. The rest (leap + backports), it's close to impossible to fix by the three CVE patches (the code is way too old/different and the changes are very intrusive). Instead, we could upgrade both libdxfrw and librecad to what is in factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192938] VUL-0: CVE-2021-21900: libdxfrw: use-after-free in dxfRW:processLType()
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1192938 https://bugzilla.suse.com/show_bug.cgi?id=1192938#c3 --- Comment #3 from Jiri Slaby <jslaby(a)suse.com> --- Factory is already fixed with the recent update. The rest (leap + backports), it's close to impossible to fix by the three CVE patches (the code is way too old/different and the changes are very intrusive). Instead, we could upgrade both libdxfrw and librecad to what is in factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1194236] New: Unable to use file dialogs - they close after one second
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1194236 Bug ID: 1194236 Summary: Unable to use file dialogs - they close after one second Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: staniek(a)kde.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Unable to use file dialogs - they close after one second. To reproduce: 1. Use any web feature that opens file-selection dialog, or use Ctrl+O or Ctrl+S 2. The dialog (typical to Gnome apps) appears for one seconds and disappears 3. Sometimes when the disalog is used to "download a file" I am able to press Enter key quickly and the file is accepted, but that's it. Typically it's not even possible to click any button. Other than that, there's no crash, no hang or other annoyance. It happens no matter if I use existing or a new fresh profile or incognito mode (chromium -incognito). It happens both in XFCE (4.14) and in Plasma (KDE Frameworks 5.71.0). Chromium version: 96.0.4664.110 stable Nothing specific appears on the log when the browser is started with (chromium --enable-logging=stderr --v=1). I can share the logs if needed. Such misfeature of the dialog does not happen in other apps that use the same dialog, e.g. in Firefox. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1194099] Sound using headphones does not work after update yesterday.
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1194099 https://bugzilla.suse.com/show_bug.cgi?id=1194099#c6 --- Comment #6 from Takashi Iwai <tiwai(a)suse.com> --- You should be able to choose another kernel in GRUB menu (go "Advanced" and choose the one). I'd like to verify whether it's a kernel regression or not, first of all. So please check it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193882] Pulseaudio mutes system when plugging/unplugging headphones
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1193882 https://bugzilla.suse.com/show_bug.cgi?id=1193882#c3 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED Flags|needinfo?(michael.lashkevic | |h(a)gmail.com) | --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- Good to hear! The issue of conflict with pipewire is a known issue we need to fix somehow. It's often dragged into the system due to some dependencies. I guess we'll apply the workaround for Leap 15.4 and TW sooner or later. Until that, please just uninstall or disable pipewire as a workaround. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192751] Regression: suse-prime's nvidia mode broken since xorg-server 21.1.x
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1192751 https://bugzilla.suse.com/show_bug.cgi?id=1192751#c39 --- Comment #39 from Axel Braun <axel.braun(a)gmx.de> --- (In reply to Stefan Dirsch from comment #36) > https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server > > but I haven't tested it yet. Maybe somebody else affected could .... Works for me as well! Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1194259] Build disabled for Mozilla Repository
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1194259 https://bugzilla.suse.com/show_bug.cgi?id=1194259#c1 Wolfgang Rosenauer <wolfgang(a)rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Wolfgang Rosenauer <wolfgang(a)rosenauer.org> --- Enabled the build. FWIW 95.0.2 has no changes relevant for Linux at all AFAIK. But in general it was an oversight to enable the builds so thanks for the report. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1194190] [Build 20211230] openQA test fails in graphicsMagick
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1194190 https://bugzilla.suse.com/show_bug.cgi?id=1194190#c12 --- Comment #12 from Alynx Zhou <alynx.zhou(a)suse.com> --- I reproduced this bug on virtual machine manually, some log is from https://gitlab.freedesktop.org/wayland/wayland/-/blame/main/src/connection.… and https://gitlab.freedesktop.org/wayland/wayland/-/blob/main/src/wayland-serv…, looks like when passing fd from client to server some problem happens, however those codes are not updated recently. I'm still reading related code. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1194276] VUL-1: CVE-2021-45948: assimp: heap-based buffer overflow in _m3d_safestr
by bugzilla_noreply＠suse.com 04 Jan '22

04 Jan '22

https://bugzilla.suse.com/show_bug.cgi?id=1194276 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0