July 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1201399] grub.cfg not found
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201399 http://bugzilla.opensuse.org/show_bug.cgi?id=1201399#c1 Christian Boltz <suse-beta(a)cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta(a)cboltz.de Component|AppArmor |Bootloader Assignee|suse-beta(a)cboltz.de |screening-team-bugs(a)suse.de --- Comment #1 from Christian Boltz <suse-beta(a)cboltz.de> --- I slightly ;-) doubt that this is related to AppArmor - moving to bootloader... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200278] logrotate complains about "size=" elements in the rotate config files
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1200278 https://bugzilla.suse.com/show_bug.cgi?id=1200278#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:2398-1: An update that contains security fixes can now be installed. Category: security (important) Bug References: 1192449,1200278,1200802 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Server 12-SP5 (src): logrotate-3.11.0-2.20.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160011] Cannot run ghostscript at all
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1160011 https://bugzilla.suse.com/show_bug.cgi?id=1160011#c13 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #13 from Martin Wilck <martin.wilck(a)suse.com> --- CLosing per comment 12 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160011] Cannot run ghostscript at all
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1160011 https://bugzilla.suse.com/show_bug.cgi?id=1160011#c12 --- Comment #12 from Angelos Skembris <a.skembris(a)quantdata.gr> --- (In reply to Martin Wilck from comment #11) > Sorry for the silence. Is this still relevant? It doesn't seem to be, I cannot reproduce it any more. gs starts normally and I can print. I am not sure at which point it got fixed, but it's been a while now. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1048177] New: hplip device manager (hp-toolbox) stalls trying to start/stop printer
by bugzilla_noreply＠novell.com 14 Jul '22

14 Jul '22

http://bugzilla.suse.com/show_bug.cgi?id=1048177 Bug ID: 1048177 Summary: hplip device manager (hp-toolbox) stalls trying to start/stop printer Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Printing Assignee: jsmeix(a)suse.com Reporter: martin.wilck(a)suse.com QA Contact: jsmeix(a)suse.com Found By: --- Blocker: --- hplip-3.17.4-1.1.x86_64 Trying to stop/start printer using hp-toolbox tab "Printer Control", the Qt GUI starts hanging. "cupsd" is seen in top with 75% CPU. strace shows that hp-toolbox is constantly trying to send commands via the cups socket and gets "HTTP/1.1 401 Unauthorized" errors. > 21127 14:56:41.581250 sendto(20, "POST /admin/ HTTP/1.1\r\nAuthorization: Basic cm9vdDo=\r\nContent-Length: 154\r\nContent-Type: application/ipp\r\nHost: localhost:0\r\nUser-Agent: CUPS/2.2.3 (Linux 4.11.8-1-default; x86_64) IPP/2.0\r\nExpect: 100-continue\r\n\r\n", 214, 0, NULL, 0) = 214 > 21127 14:56:41.581272 sendto(20, "\2\0\0\20\0\0\0\1\1G\0\22attributes-charset\0\5utf-8H\0\33attributes-natural-language\0\5en-usE\0\vprinter-uri\0\"ipp://localhost/printers/ENVY_5530B\0\24requesting-user-name\0\4root\3", 154, 0, NULL, 0) = 154 > 21127 14:56:41.581419 recvfrom(20, "HTTP/1.1 401 Unauthorized\r\nConnection: close\r\nContent-Language: en_US\r\nContent-Length: 521\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 11 Jul 2017 12:56:41 GMT\r\nWWW-Authenticate: Basic realm=\"CUPS\", trc=\"y\"\r\nAccept-Encoding: gzip, deflate, identity"..., 2048, 0, NULL, NULL) = 879 > ... > 21127 14:56:41.581972 sendto(20, "POST /admin/ HTTP/1.1\r\nAuthorization: Basic cm9vdDo=\r\nContent-Length: 154\r\nContent-Type: application/ipp\r\nHost: localhost:0\r\nUser-Agent: CUPS/2.2.3 (Linux 4.11.8-1-default; x86_64) IPP/2.0\r\nExpect: 100-continue\r\n\r\n", 214, 0, NULL, 0) = 214 > 21127 14:56:41.581992 sendto(20, "\2\0\0\20\0\0\0\1\1G\0\22attributes-charset\0\5utf-8H\0\33attributes-natural-language\0\5en-usE\0\vprinter-uri\0\"ipp://localhost/printers/ENVY_5530B\0\24requesting-user-name\0\4root\3", 154, 0, NULL, 0) = 154 > 21127 14:56:41.582132 recvfrom(20, "HTTP/1.1 401 Unauthorized\r\nConnection: close\r\nContent-Language: en_US\r\nContent-Length: 521\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 11 Jul 2017 12:56:41 GMT\r\nWWW-Authenticate: Basic realm=\"CUPS\", trc=\"y\"\r\nAccept-Encoding: gzip, deflate, identity"..., 2048, 0, NULL, NULL) = 879 This is a default cups setup, no special permissions configured. cupsd.conf: # All printer operations require a printer operator to authenticate... <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> AuthType Default Require user @SYSTEM Order deny,allow </Limit> So it's not surprising that the permission isn't granted, but it's wrong to keep trying. -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1162794] New: VUL-0: CVE-2019-10784: phpPgAdmin: improper source validation may lead to CSRF
by bugzilla_noreply＠novell.com 14 Jul '22

14 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1162794 Bug ID: 1162794 Summary: VUL-0: CVE-2019-10784: phpPgAdmin: improper source validation may lead to CSRF Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/252397/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: chris(a)computersalat.de Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-10784 phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10784 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10784 https://snyk.io/vuln/SNYK-PHP-PHPPGADMINPHPPGADMIN-543885 -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1036463] New: Please take over /usr/lib/modules-load.d/sg.conf
by bugzilla_noreply＠novell.com 14 Jul '22

14 Jul '22

http://bugzilla.suse.com/show_bug.cgi?id=1036463 Bug ID: 1036463 Summary: Please take over /usr/lib/modules-load.d/sg.conf Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: fbui(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi kernel maintainers, Currently systemd package ships the following file: $ cat /usr/lib/modules-load.d/sg.conf # load sg module at boot time sg I don't know if it's still needed but if so it doesn't seem appropriate to ship it through systemd since it seems to be a workaround for a missing driver dependency or something similar. Would you take this file over ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

2 94

[Bug 1133418] New: sg3_utils: syntax error in 59-fc-wwpn-id.rules
by bugzilla_noreply＠novell.com 14 Jul '22

14 Jul '22

http://bugzilla.suse.com/show_bug.cgi?id=1133418 Bug ID: 1133418 Summary: sg3_utils: syntax error in 59-fc-wwpn-id.rules Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.wilck(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- [ 74.262834] systemd-udevd[2958]: /usr/lib/udev/rules.d/59-fc-wwpn-id.rules:12: Invalid key/value pair, starting at character 25 (';') -- You are receiving this mail because: You are on the CC list for the bug.

2 17

[Bug 1158817] Update broke network on KVM virtual machines
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1158817 https://bugzilla.suse.com/show_bug.cgi?id=1158817#c56 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #56 from Martin Wilck <martin.wilck(a)suse.com> --- Closing. SLE adapted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160011] Cannot run ghostscript at all
by bugzilla_noreply＠suse.com 14 Jul '22

14 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1160011 https://bugzilla.suse.com/show_bug.cgi?id=1160011#c11 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(a.skembris@quantd | |ata.gr) --- Comment #11 from Martin Wilck <martin.wilck(a)suse.com> --- Sorry for the silence. Is this still relevant? -- You are receiving this mail because: You are on the CC list for the bug.

1 0