August 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1185084] VUL-0: CVE-2021-21373: nim: "nimble refresh" falls back to a non-TLS URL in case of error
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1185084 https://bugzilla.suse.com/show_bug.cgi?id=1185084#c6 --- Comment #6 from David Anes <david.anes(a)suse.com> --- Codestream Vers. Request ---------------------------------------------------------------------- Leap:15.1:Update 0.19.6 EOL [4] Leap:15.2:Update 1.2.12 EOL [4] Backports:SLE-15:Update 0.19.6 EOL [4] Backports:SLE-15-SP1:Update 0.19.6 EOL [4] Backports:SLE-15-SP2:Update 1.2.12 EOL [4] Backports:SLE-15-SP3:Update 0.19.6 -> 1.6.6 [1] Backports:SLE-15-SP4:Update 1.2.12 -> 1.6.6 [1] Factory 1.6.6 [3] (already there, make the CVE explicitly in changelog) [1] https://build.opensuse.org/request/show/994306 [2] https://build.opensuse.org/request/show/994305 [3] https://build.opensuse.org/request/show/994303 [4] We are still building up-to-date packages for all Leap and SLE >= 15 in the development project: * https://build.opensuse.org/package/show/devel:languages:misc/nim -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202067] MicroOS Desktop: unacceptable TLS certificate
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202067 https://bugzilla.suse.com/show_bug.cgi?id=1202067#c17 Richard Brown <rbrown(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(rbrown(a)suse.com) | --- Comment #17 from Richard Brown <rbrown(a)suse.com> --- (In reply to David Diaz from comment #16) > (In reply to Jan Zerebecki from comment #13) > > I don't think anyone reachable via microos-bugs knows enough about yast or > > the skelcd control file. CC-ing the relevant bugowner instead: > > > osc bugowner -A yast2-caasp > > Defined in project: YaST:Head > > bugowner of yast2-caasp : > > yast2-maintainers > > > osc bugowner -A skelcd-control-MicroOS > > Defined in project: YaST:Head > > bugowner of skelcd-control-MicroOS : > > yast2-maintainers > > Probably by accident because of the module name. > > Asking Richard Brown, who created and updated the skelcd. See output from > git blame > https://github.com/yast/skelcd-control-MicroOS/blame/ > 509289c27796cbbdaa7cbfad8b93fdcd618469cf/control/control.MicroOS.xml#L257 Hi all, The problem we face with the MicroOS Desktop is as follows - We _cannot_ have YaST produce a user account, because we need the gnome initial setup tool to do that - YaST does so on regular MicroOS as part of the inst_user_first module - Therefore the inst_user_first module must not be run when installing the MicroOS Desktop, which is why it was removed - When removing inst_user_first I didn't add back the inst_microos_role we use elsewhere I don't really care for the RPi as a desktop platform but I'll fix this as it will make the Desktop more in sync with what we have on regular MicroOS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1036969] VUL-1: CVE-2017-8372: libmad: assertion failure in layer3.c
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1036969 Olaf Hering <ohering(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|ohering(a)suse.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1036969] VUL-1: CVE-2017-8372: libmad: assertion failure in layer3.c
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1036969 https://bugzilla.suse.com/show_bug.cgi?id=1036969#c5 --- Comment #5 from Hu <cathy.hu(a)suse.com> --- As far as I can see, this is now in SLE15 and still affected: - SUSE:SLE-15:Update/libmad 0.15.1b - openSUSE:Factory/libmad 0.15.1b I think there is a fix here: https://bugzilla.redhat.com/show_bug.cgi?id=1511330 Please let me know if I missed something. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1036969] VUL-1: CVE-2017-8372: libmad: assertion failure in layer3.c
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1036969 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2017-8372 | |:3.3:(AV:L/AC:L/PR:N/UI:R/S | |:U/C:N/I:N/A:L) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200461] Dracut locks computer, fails to generate initrd file
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1200461 https://bugzilla.suse.com/show_bug.cgi?id=1200461#c39 Antonio Feijoo <antonio.feijoo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |antonio.feijoo(a)suse.com Assignee|dracut-maintainers(a)suse.de |systemd-maintainers(a)suse.de --- Comment #39 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- (In reply to Mike DeMicco from comment #38) > Created attachment 860142 [details] > # udevadm test /sys/devices/pci0000:00/ Moving this bug to systemd, as udevadm is getting a segfault. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201558] New: iio-sensor-proxy: Update adds polkit-user-privilege file
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201558 Bug ID: 1201558 Summary: iio-sensor-proxy: Update adds polkit-user-privilege file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: badshah400(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Update to iio-sensor-proxy version 3.4 adds a polkit-user-privilege file, and rpmlint now complains about: > [ 10s] iio-sensor-proxy.x86_64: E: polkit-user-privilege (Badness: 10) net.hadess.SensorProxy.claim-sensor (no:no:yes) > [ 10s] The package allows unprivileged users to carry out privileged operations > [ 10s] without root authentication. This could cause security problems if not done > [ 10s] carefully. If the package is intended for inclusion in any SUSE product please > [ 10s] open a bug report to request review of the package by the security team. The updated package may be accessed for review at my home branch: https://build.opensuse.org/package/show/home:badshah400:branches:hardware/i… Upstream here: https://gitlab.freedesktop.org/hadess/iio-sensor-proxy I would be grateful for a security review of this, so that I can submit this to update to Factory. Please let me know if I can help with any additional info. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1202295] New: Dead keys don't work in LibreOffice Writer
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1202295 Bug ID: 1202295 Summary: Dead keys don't work in LibreOffice Writer Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: LibreOffice Assignee: screening-team-bugs(a)suse.de Reporter: psychonaut(a)nothingisreal.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In LibreOffice Writer, it's impossible to type a character using a dead key if the insertion point is positioned at the end of a line (other than the very last line of the document). Doing so results in the dead-key accent appearing at the insertion point, and the cursor then moving to the beginning of the next line. This is a known issue in LibreOffice Writer that was apparently fixed by version 7.3.3.2. (See <https://bugs.documentfoundation.org/show_bug.cgi?id=71437#c39> and the following few comments.) Version 7.3.4.2 on Tumbleweed is unaffected by the bug. Leap 15.4 currently packages 7.2.5.1 which *is* affected by the bug; this makes it nearly impossible to edit documents using a keyboard layout with dead keys. Could the Leap 15.4 package maintainers either upgrade to 7.3.3.2 or higher, or else backport a patch for this bug? Reproducibility: Always Steps to reproduce: 1. Configure KDE to use a keyboard layout with dead keys, such as "English (Dvorak, intl. with dead keys)", which emits the character "�" when you type <AltGr>+<'> followed by <A>. 2. Create a new document in LibreOffice Writer. 3. Type the following: <Enter> <Up> <AltGr>+<'> <A> Observed behaviour: 4. After typing <AltGr>+<'>, an underlined acute accent appears at the insertion point, and the insertion point moves to the next line. After typing <A>, the acute accent loses its underline and the insertion point remains on the next line. No "a" or "�" appears. Expected behaviour: 4. After typing <AltGr>+<'>, an underlined acute accent should appear at the insertion point, and the new insertion point should be immediately after it, on the same line. After typing <A>, the underlined acute accent should be replaced with the character "�". -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1202294] New: Support NFS root in zypper ps
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202294 Bug ID: 1202294 Summary: Support NFS root in zypper ps Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp Assignee: ma(a)suse.com Reporter: schwab(a)suse.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On NFS, files that are removed while still in use are instead renamed to .nfsXXXXXX, see fs/nfs/unlink.c:nfs_silly_rename. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1200984] New: motebook - no resume from hibernation
by bugzilla_noreply＠suse.com 10 Aug '22

10 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1200984 Bug ID: 1200984 Summary: motebook - no resume from hibernation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 859873 --> https://bugzilla.suse.com/attachment.cgi?id=859873&action=edit start screen Starting with kernel versions 5.17.x I got the problem, that my notebook refuses to resume from hibernation state in about 95% of all cases. This is a Dell Inc. XPS 13 9310 2-in-1/0NVVG0, BIOS 2.8.1 running openSUSE Tumbleweed with latest snapshot. I didn't open a bug yet, because I hoped, that 5.18.x would solve the problem, but no go. I'm not sure, what diagnostic data you need, because resuming stops at several stages of the process, mostly when plymouth tries to initialize the environment, which is the last message then. There are no log entries at this point, so I took a photo of the start screen. -- You are receiving this mail because: You are on the CC list for the bug.

1 14