November 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1205031] VUL-0: CVE-2022-41639,CVE-2022-41988: OpenImageIO: TIFF: buffer overflow when processing corrupted CMYK files
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1205031 https://bugzilla.suse.com/show_bug.cgi?id=1205031#c2 Hans-Peter Jansen <hp.jansen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carlos.lopez(a)suse.com, | |hp.jansen(a)suse.com Flags| |needinfo?(carlos.lopez@suse | |.com) --- Comment #2 from Hans-Peter Jansen <hp.jansen(a)suse.com> --- Hi Carlos, since you created all these bugs against OpenImageIO today, I've started updating OpenImageIO to 2.4.5.0 in my home project, and will commit https://build.opensuse.org/request/show/1033496 upon successful tests. Is there any (newer) issue dangling after this update? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203270] Samba 4.16.4+git.297.1497eb221ed-1.4 causes "Invalid argument" errors from NVidia Shield and Nautilus
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1203270 https://bugzilla.suse.com/show_bug.cgi?id=1203270#c4 Samuel Cabrero <scabrero(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |samba-maintainers(a)SuSE.de Resolution|--- |NORESPONSE Assignee|samba-maintainers(a)SuSE.de |scabrero(a)suse.com --- Comment #4 from Samuel Cabrero <scabrero(a)suse.com> --- (In reply to David Walker from comment #3) > I've attached my smb.conf file. I'm afraid I've moved to using NFS to avoid > the "invalid argument" errors (and disabled the Samba server), so I can't > produce logs. If you see something suspicious in my smb.conf file, though, I > can re-enable Samba service and run some tests. Let me know. Hi David, I don't see anything wrong with your smb.conf, so please reopen the bug when you get a chance to get the logs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204830] pam_mount not working with gdm
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1204830 https://bugzilla.suse.com/show_bug.cgi?id=1204830#c4 Samuel Cabrero <scabrero(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |samba-maintainers(a)SuSE.de, | |scabrero(a)suse.com Assignee|samba-maintainers(a)SuSE.de |scabrero(a)suse.com --- Comment #4 from Samuel Cabrero <scabrero(a)suse.com> --- Hi Philip, thanks for reporting the issue. It was caused by this gdm package change https://build.opensuse.org/package/rdiff/openSUSE:Factory/gdm?linkrev=base&… Will be fixed by https://github.com/yast/yast-samba-client/pull/101 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205037] New: aws-cli has unsatisfiable dependency on python3-colorama
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1205037 Bug ID: 1205037 Summary: aws-cli has unsatisfiable dependency on python3-colorama Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Cloud:Tools Assignee: rjschwei(a)suse.com Reporter: brunopitrus(a)hotmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The aws-cli package has an overly strict dependency on `python3-colorama <= 0.4.5`. As the current version of `python310-colorama` in Tumbleweed is `0.4.6`, `aws-cli` is impossible to install on new installations. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1176553] [Build 20200914] NM_wpa2_enterprise: no auth dialog to connect
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1176553 Pavel Dost�l <pdostal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pdostal(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205021] New: VUL-0: CVE-2022-41838: OpenImageIO: crash when processing cubemap files and a cube face was not present
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1205021 Bug ID: 1205021 Summary: VUL-0: CVE-2022-41838: OpenImageIO: crash when processing cubemap files and a cube face was not present Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/347024/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: hpj(a)urpla.net Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de CC: adrian.schroeter(a)suse.com Found By: Security Response Team Blocker: --- rh#2139797 From https://github.com/OpenImageIO/oiio/releases/tag/v2.3.21.0: RLA: fix potential buffer overrun. (TALOS-2022-1629, CVE-2022-36354) #3624 TIFF: guard against corrupt files with buffer overflows. (TALOS-2022-1627, CVE-2022-41977) #3628 TIFF: guard against buffer overflow for certain CMYK files. (TALOS-2022-1633, CVE-2022-41639) (TALOS-2022-1643, CVE-2022-41988) #3632 References: https://bugzilla.redhat.com/show_bug.cgi?id=2139797 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-41838 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1205008] New: wezterm: data privacy violation
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1205008 Bug ID: 1205008 Summary: wezterm: data privacy violation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: socvirnyl.estela(a)gmail.com Reporter: jengelh(a)inai.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- wezterm phones home. Similar to https://bugzilla.opensuse.org/show_bug.cgi?id=1177239 It's stupid, and it reveals to them my host was using wezterm, likely going against some data privacy rules in Europe. $ wezterm 18:29:07.369 INFO wezterm_gui::update > latest release 20220905-102802-7d4b8249 is newer than current build -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1203922] Sound is not working at all on Asus Zenbook 14 OLED
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1203922 https://bugzilla.suse.com/show_bug.cgi?id=1203922#c51 --- Comment #51 from Sven H <hdir1o11(a)4wrd.cc> --- Created attachment 862645 --> https://bugzilla.suse.com/attachment.cgi?id=862645&action=edit hwinfo from updated bios -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203922] Sound is not working at all on Asus Zenbook 14 OLED
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1203922 https://bugzilla.suse.com/show_bug.cgi?id=1203922#c50 --- Comment #50 from Sven H <hdir1o11(a)4wrd.cc> --- Created attachment 862644 --> https://bugzilla.suse.com/attachment.cgi?id=862644&action=edit dmesg from updated bios -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203922] Sound is not working at all on Asus Zenbook 14 OLED
by bugzilla_noreply＠suse.com 04 Nov '22

04 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1203922 https://bugzilla.suse.com/show_bug.cgi?id=1203922#c49 --- Comment #49 from Sven H <hdir1o11(a)4wrd.cc> --- Hello again, I just updated the BIOS to version 309 and unfortunately Sound doesn't seem to work again. I'll attach hwinfo and dmesg. -- You are receiving this mail because: You are on the CC list for the bug.

1 0