November 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1203949] nouveau: Updating to Mesa*22.2.0 makes videos have corrupted colors in Firefox
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1203949 https://bugzilla.suse.com/show_bug.cgi?id=1203949#c22 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #22 from Stefan Dirsch <sndirsch(a)suse.com> --- I've added the fix from the issue upstream. ------------------------------------------------------------------- Wed Nov 2 16:56:33 UTC 2022 - Stefan Dirsch <sndirsch(a)suse.com> - u_nouveau-corrupted-colors-boo1203949.patch * fixes corrupted colors in videos on nouveau with Kepler in Firefox (boo#1203949, issue#7416) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199306] New: cryfs package in opensuse Tumbleweed 20220504 not works
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1199306 Bug ID: 1199306 Summary: cryfs package in opensuse Tumbleweed 20220504 not works Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: stolz(a)rfgs.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, Package cryfs not works since openSUSE Tumbleweed 20220504. If I use command: cryfs --version I get this: cryfs: symbol lookup error: cryfs: undefined symbol: _ZN6spdlog5sinks15basic_file_sinkISt5mutexEC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEb Version of my cryfs: 0.11.2-1.2-x86_64 from vendor openSUSE Peter -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1201783] VUL-0: CVE-2022-35737: sqlite3: multiple fixes
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1201783 https://bugzilla.suse.com/show_bug.cgi?id=1201783#c13 --- Comment #13 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:3307-2: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1189802,1195773,1201783 CVE References: CVE-2021-36690,CVE-2022-35737 JIRA References: Sources used: SUSE Manager Server 4.1 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Manager Retail Branch Server 4.1 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Manager Proxy 4.1 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server for SAP 15 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Server 15-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise Micro 5.3 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): sqlite3-3.39.3-150000.3.17.1 SUSE Enterprise Storage 7 (src): sqlite3-3.39.3-150000.3.17.1 SUSE Enterprise Storage 6 (src): sqlite3-3.39.3-150000.3.17.1 SUSE CaaS Platform 4.0 (src): sqlite3-3.39.3-150000.3.17.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204974] Warning when Retrieving repository for 'opensuse-leap-15.3-pool-x86_64' - Digest verification failed for file
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1204974 http://bugzilla.opensuse.org/show_bug.cgi?id=1204974#c9 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|Andreas.Stieger(a)gmx.de | --- Comment #9 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- fine -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1096050] sudo doesn't work after upgrade from leap 42,3
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1096050 https://bugzilla.suse.com/show_bug.cgi?id=1096050#c7 Jason Sikes <jsikes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |WORKSFORME Flags|needinfo?(alarrosa(a)suse.com | |) | --- Comment #7 from Jason Sikes <jsikes(a)suse.com> --- OK. I am going to mark this as "works for me" and close. Please reopen if this is still an issue. Thank you. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204974] Warning when Retrieving repository for 'opensuse-leap-15.3-pool-x86_64' - Digest verification failed for file
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1204974 http://bugzilla.opensuse.org/show_bug.cgi?id=1204974#c7 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger(a)gmx.de, | |samuel.snow(a)suse.com Flags|needinfo?(lubos.kocman@suse |needinfo?(samuel.snow@suse. |.com) |com) --- Comment #7 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- The Leap 15.3 OSS repo has not changed since 2021-05-24. The file delivered to the user seem to be corrupt. Simply by the fact that the file content sha256 digest does not match the one declared in the file name. This is failing the basic consistency check. Reporter, please give the mirror in use? E.g. from from the network where this is seen? http://download.opensuse.org/distribution/leap/15.3/repo/oss/repodata/edc2f… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193584] New: VUL-0: CVE-2021-44540: Multiple issues fixed in Privoxy 3.0.33 stable
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1193584 Bug ID: 1193584 Summary: VUL-0: CVE-2021-44540: Multiple issues fixed in Privoxy 3.0.33 stable Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/316954/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: mseben(a)gmail.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-44540 via oss-sec mailing list https://seclists.org/oss-sec/2021/q4/148 Multiple issues fixed in Privoxy 3.0.33 stable - CVE-2021-44540: get_url_spec_param(): Free memory of compiled pattern spec before bailing. - CVE-2021-44541: process_encrypted_request_headers(): Free header memory when failing to get the request destination. - CVE-2021-44542: send_http_request(): Prevent memory leaks when handling errors - CVE-2021-44543: cgi_error_no_template(): Encode the template name to prevent XSS (cross-site scripting) -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1202435] VUL-0: CVE-2022-24949: EternalTerminal: privilege escalation to root
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1202435 https://bugzilla.suse.com/show_bug.cgi?id=1202435#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2022:10185-1: An update that fixes four vulnerabilities is now available. Category: security (important) Bug References: 1202432,1202433,1202434,1202435 CVE References: CVE-2022-24949,CVE-2022-24950,CVE-2022-24951,CVE-2022-24952 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): EternalTerminal-6.2.1-bp154.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202434] VUL-0: CVE-2022-24950: EternalTerminal: race condition allows authenticated attacker to hijack other users' SSH authorization socket
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1202434 https://bugzilla.suse.com/show_bug.cgi?id=1202434#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2022:10185-1: An update that fixes four vulnerabilities is now available. Category: security (important) Bug References: 1202432,1202433,1202434,1202435 CVE References: CVE-2022-24949,CVE-2022-24950,CVE-2022-24951,CVE-2022-24952 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): EternalTerminal-6.2.1-bp154.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202433] VUL-0: CVE-2022-24951: EternalTerminal: race condition allows local attacker to hijack IPC socket
by bugzilla_noreply＠suse.com 02 Nov '22

02 Nov '22

https://bugzilla.suse.com/show_bug.cgi?id=1202433 https://bugzilla.suse.com/show_bug.cgi?id=1202433#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2022:10185-1: An update that fixes four vulnerabilities is now available. Category: security (important) Bug References: 1202432,1202433,1202434,1202435 CVE References: CVE-2022-24949,CVE-2022-24950,CVE-2022-24951,CVE-2022-24952 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): EternalTerminal-6.2.1-bp154.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0