June 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1193742] go1.18 release tracking
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1193742 https://bugzilla.suse.com/show_bug.cgi?id=1193742#c22 --- Comment #22 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:2005-1: An update that solves four vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1193742,1200134,1200135,1200136,1200137 CVE References: CVE-2022-29804,CVE-2022-30580,CVE-2022-30629,CVE-2022-30634 JIRA References: Sources used: openSUSE Leap 15.4 (src): go1.18-1.18.3-150000.1.20.1 openSUSE Leap 15.3 (src): go1.18-1.18.3-150000.1.20.1 SUSE Linux Enterprise Module for Development Tools 15-SP4 (src): go1.18-1.18.3-150000.1.20.1 SUSE Linux Enterprise Module for Development Tools 15-SP3 (src): go1.18-1.18.3-150000.1.20.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193742] go1.18 release tracking
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1193742 https://bugzilla.suse.com/show_bug.cgi?id=1193742#c21 --- Comment #21 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:1761-2: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1193742 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Development Tools 15-SP4 (src): go-1.18-150000.3.23.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200305] New: dnsmasq returns "REFUSED" for server=/#/8.8.8.8
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200305 Bug ID: 1200305 Summary: dnsmasq returns "REFUSED" for server=/#/8.8.8.8 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: ematsumiya(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Starting from dnsmasq 2.86, my dnsmasq.conf with "server=/#/8.8.8.8" started giving me "REFUSED" for domains that didn't match my other explicit rules. Reproducing: # dnsmasq --server=/\#/8.8.8.8 -d --log-debug -q ... dnsmasq: using nameserver 8.8.8.8#53 for domain # In another terminal: # nslookup google.com Server: 127.0.0.1 Address: 127.0.0.1#53 ** server can't find google.com: REFUSED On dnsmasq log: ... dnsmasq: query[A] google.com from 127.0.0.1 dnsmasq: config error is REFUSED (EDE: not ready) dnsmasq: query[A] web.whatsapp.com from 127.0.0.1 dnsmasq: config error is REFUSED (EDE: not ready) ... <loops for some time> .... According to my research, there's a fix for this and it's included in 2.87: commit 089a11f3400485f215f5e29c77e41d7730f2c806 Author: DL6ER <dl6er(a)dl6er.de> Date: Tue Oct 5 10:15:21 2021 +0200 --local should behave as --server, not as --address according to the man page -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1200279] New: VUL-0: CVE-2022-29718: caddy: unauthenticated open redirect vulnerability
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200279 Bug ID: 1200279 Summary: VUL-0: CVE-2022-29718: caddy: unauthenticated open redirect vulnerability Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/333631/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-29718 Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links. Upstream fix: https://github.com/caddyserver/caddy/commit/3fe2c73dd04f7769a9d9673236cb94b… References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-29718 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29718 https://github.com/caddyserver/caddy/pull/4499 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1199852] Bluetooth: No default controller available
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1199852 https://bugzilla.suse.com/show_bug.cgi?id=1199852#c5 --- Comment #5 from Hendrik Vogelsang <hvogel(a)suse.com> --- Sorry I was mistaken, That hci0 appeared again was just a consequence of rmmod/modprobe btusb. The needed firmware file just does not end up in the initrd. lsinitrd |grep intel/ibt -rw-r--r-- 1 root root 72 May 12 02:26 lib/firmware/intel/ibt-11-5.ddc.xz -rw-r--r-- 1 root root 361692 May 12 02:26 lib/firmware/intel/ibt-11-5.sfi.xz -rw-r--r-- 1 root root 68 May 12 02:26 lib/firmware/intel/ibt-12-16.ddc.xz -rw-r--r-- 1 root root 361836 May 12 02:26 lib/firmware/intel/ibt-12-16.sfi.xz If I include the (original kernel-firmware-bluetooth) files manually (like below) in the initrd then hci0 is correctly setup during boot. /usr/bin/dracut -I "/lib/firmware/intel/ibt-18-16-1.ddc.xz /lib/firmware/intel/ibt-18-16-1.sfi.xz" --logfile /var/log/YaST2/mkinitrd.log --force /boot/initrd-5.14.21-150400.22-default 5.14.21-150400.22-default -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200177] New: Error message: Failed to connect to mirrorcache-us.opensuse.org port 443 after 151 ms: Connection refused
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200177 Bug ID: 1200177 Summary: Error message: Failed to connect to mirrorcache-us.opensuse.org port 443 after 151 ms: Connection refused Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: ndordea(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- zypper ref -f -s fails for almost all remote repos .... Retrieving repository 'Apache' metadata ...................................................................................................................[error] Repository 'Apache' is invalid. [Apache|https://download.opensuse.org/repositories/Apache/openSUSE_Leap_15.4/] Valid metadata not found at specified URL History: - Download (curl) error for 'https://download.opensuse.org/repositories/Apache/openSUSE_Leap_15.4/repoda…': Error code: Connection failed Error message: Failed to connect to mirrorcache-us.opensuse.org port 443 after 151 ms: Connection refused - Can't provide ./repodata/549f3488befeb6ba57830d63b03015fe133c4048ea9389552cfbee68771fb968-primary.xml.gz Please check if the URIs defined for this repository are pointing to a valid repository. Skipping repository 'Apache' because of the above error. Could not refresh the repositories because of errors. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1200091] [package updater] Allow un-/select entire groups of packages
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1200091 https://bugzilla.suse.com/show_bug.cgi?id=1200091#c10 --- Comment #10 from Stefan Hundhammer <shundhammer(a)suse.com> --- I am not sure, but it is possible that the package name is "gnome-packagekit". https://software.opensuse.org/package/gnome-packagekit [shundhammer @ wotan] ~ % osc maintainer gnome-packagekit Defined in project: GNOME:Factory bugowner of gnome-packagekit : os-gnome-maintainers maintainer of gnome-packagekit : dimstar, sreeves1, factory-repo-checker, group:factory-maintainers, group:gnome-maintainers, group:factory-staging -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200091] [package updater] Allow un-/select entire groups of packages
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1200091 https://bugzilla.suse.com/show_bug.cgi?id=1200091#c9 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|YaST2 |GNOME Assignee|yast2-maintainers(a)suse.de |gnome-bugs(a)suse.de QA Contact|jsrain(a)suse.com |qa-bugs(a)suse.de --- Comment #9 from Stefan Hundhammer <shundhammer(a)suse.com> --- OK, thank you for the screenshot. I don't know exactly what program that is; but for sure it's not a part of YaST. Since it doesn't have an "OK" button on the bottom right, it's most likely also not a KDE Plasma program; with that "Install Updates" button on the top right (quite an odd location for such a button), I think it's a GNOME program. AFAICS it's this one, the gnome-package-updater: https://documentation.suse.com/sles/15-SP3/html/SLES-all/cha-yast-software.… Reassigning to bug component "GNOME". -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199852] Bluetooth: No default controller available
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1199852 https://bugzilla.suse.com/show_bug.cgi?id=1199852#c4 --- Comment #4 from Hendrik Vogelsang <hvogel(a)suse.com> --- Replacing firmware from linux-firmware.git/tree/intel makes it work Guess this needs an update. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185637] openssl-1_1 fails to build after 2022-06-01
by bugzilla_noreply＠suse.com 07 Jun '22

07 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1185637 https://bugzilla.suse.com/show_bug.cgi?id=1185637#c17 --- Comment #17 from Marcus Meissner <meissner(a)suse.com> --- No, it was just a incident with a buggy state of openssl-1_1. We still expect resubmission for 15-sp2 of openssl-1_1. -- You are receiving this mail because: You are on the CC list for the bug.

1 0