February 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1195412] smb does not start if openSUSE-SLE-15.3-2022-283 is installed and smb.conf has printers set up
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195412 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195416] New: kdump: consider dropping build requirement on systemd-sysvinit
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195416 Bug ID: 1195416 Summary: kdump: consider dropping build requirement on systemd-sysvinit Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: fbui(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, kdump.spec has: Name: kdump Version: 1.0 [...] BuildRequires: systemd-sysvinit This dependency looks suspicious because systemd-sysvinit doesn't provide anything useful for building a package in a chroot environment: it was historically used to switch from sysvinit to systemd. Can you please consider dropping this build requirement, if possible, as we're in the process of getting rid of systemd-sysvinit ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1195391] identify and declare bash dependencies explicitly
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1195391 http://bugzilla.opensuse.org/show_bug.cgi?id=1195391#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1195391) was mentioned in https://build.opensuse.org/request/show/950665 Factory / ncurses https://build.opensuse.org/request/show/950667 Factory / go1.9 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192938] New: VUL-0: CVE-2021-21900: librecad: use-after-free in dxfRW:processLType()
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1192938 Bug ID: 1192938 Summary: VUL-0: CVE-2021-21900: librecad: use-after-free in dxfRW:processLType() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/315444/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-21900 A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability. Upstream commit in librecad/libdxfrw: https://github.com/LibreCAD/libdxfrw/commit/fcd977cc7f8f6cc7f012e5b72d33cf7… The changes of the librecad/libdxfrw upstream commit has been included in a libdxfrw update commit in a librecad/librecad: https://github.com/LibreCAD/LibreCAD/commit/33b34d4a4acb7a681462626ef442013… References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-21900 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21900 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1351 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1192937] New: VUL-0: CVE-2021-21899: librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1192937 Bug ID: 1192937 Summary: VUL-0: CVE-2021-21899: librecad: heap out-of-bounds write in dwgCompressor:copyCompBytes21 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/315445/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-21899 A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Upstream commit in librecad/libdxfrw: https://github.com/LibreCAD/libdxfrw/commit/6417118874333309aa10c4e59f954c3… The changes of the librecad/libdxfrw upstream commit has been included in a libdxfrw update commit in a librecad/librecad: https://github.com/LibreCAD/LibreCAD/commit/33b34d4a4acb7a681462626ef442013… References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-21899 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21899 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1350 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1192936] New: VUL-0: CVE-2021-21898: librecad: out-of-bounds write in dwgCompressor:decompress18()
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1192936 Bug ID: 1192936 Summary: VUL-0: CVE-2021-21898: librecad: out-of-bounds write in dwgCompressor:decompress18() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/315428/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-21898 A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Upstream commit in librecad/libdxfrw: https://github.com/LibreCAD/libdxfrw/commit/ba3fa95648bef948e008dfbdd31a4d2… The changes of the librecad/libdxfrw upstream commit has been included in a libdxfrw update commit in a librecad/librecad: https://github.com/LibreCAD/LibreCAD/commit/33b34d4a4acb7a681462626ef442013… References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-21898 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21898 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1349 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1195395] hardware/wpa_supplicant: Not able to connect to WLAN after wpa_supplicant update to version 2.10
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195395 https://bugzilla.suse.com/show_bug.cgi?id=1195395#c18 --- Comment #18 from Marcus Meissner <meissner(a)suse.com> --- FWIW I also have a wireless card in my workstation, managed by wicked. this one works on the same FritzBox AP , same wpa_supplicant from Factory. - Laptop Lenovo X200s with Intel Pro Wireless 5100 AGN SHiloh and NetworkManager: does not work - Workstation with RTL8188EE Wireless Network Adapter (rev 01) with wicked: works -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195412] smb does not start if openSUSE-SLE-15.3-2022-283 is installed and smb.conf has printers set up
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195412 https://bugzilla.suse.com/show_bug.cgi?id=1195412#c5 --- Comment #5 from Mathias Homann <Mathias.Homann(a)opensuse.org> --- (In reply to Andreas Osterburg from comment #4) > (In reply to Mathias Homann from comment #3) > > (In reply to Mathias Homann from comment #2) > > > (In reply to Andreas Osterburg from comment #1) > > > > Same here. It seems that apparmor is the problem. > > > > > > > > My workaround: > > > > > > > > Add the following two lines to /etc/apparmor.d/local/usr.sbin.smbd > > > > > > > > /usr/lib64/samba/samba-bgqd ix, > > > > /run/samba/samba-bgqd.pid rw, > > > > > > > > and reload the appamor profile > > > > > > > > /sbin/apparmor_parser -r /etc/apparmor.d/usr.sbin.smbd > > > > actually: > > > > akari:~ # /sbin/apparmor_parser -r /etc/apparmor.d/local/usr.sbin.smbd > > AppArmor-Analysefehler f?r /etc/apparmor.d/local/usr.sbin.smbd in > > /etc/apparmor.d/local/usr.sbin.smbd in Zeile 2: syntax error, unexpected > > TOK_MODE, expecting TOK_OPEN > > You cannot load just the local part, you have to include the whole profile: > /sbin/apparmor_parser -r /etc/apparmor.d/usr.sbin.smbd > That worked, but the updated samba server does *not* offer any printers. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188947] sparse versioning prevents update from being installed
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1188947 https://bugzilla.suse.com/show_bug.cgi?id=1188947#c5 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #5 from Jiri Slaby <jslaby(a)suse.com> --- Sorry, I never got into this and now 15.2 is out of maintenance and 15.3 already has 0.6.3 from the beginning. So this is fixed, I suppose? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195390] switch default build environment from glibc-locale to glibc-locale-base
by bugzilla_noreply＠suse.com 02 Feb '22

02 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1195390 http://bugzilla.opensuse.org/show_bug.cgi?id=1195390#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1195390) was mentioned in https://build.opensuse.org/request/show/950660 Factory / libgudev -- You are receiving this mail because: You are on the CC list for the bug.

1 0