August 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1202111] supportconfig: Allow limiting the timeframe of option "-l"
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202111 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |jason.record(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202253] VUL-0: CVE-2022-35724: rust: Denial of service while reading data in Avro Rust SDK
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202253 https://bugzilla.suse.com/show_bug.cgi?id=1202253#c1 Thomas Leroy <thomas.leroy(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID Summary|VUL-0: CVE-2022-35724: |VUL-0: CVE-2022-35724: |python-avro: Denial of |rust: Denial of service |service while reading data |while reading data in Avro |in Avro Rust SDK |Rust SDK --- Comment #1 from Thomas Leroy <thomas.leroy(a)suse.com> --- This is actually a bug in the apache-avro rust crate, not python-avro. We don't bundle this crate in rust. Closing -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202074] after installing fetchmsttfonts the operation system fonts change automatically, also firefox fonts change automatically(effect badelly on facebook arabic posts)
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202074 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202102] Armv7 raspberry pi image boot loop on pi 400
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202102 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mbrugger(a)suse.com Assignee|screening-team-bugs(a)suse.de |guillaume.gardet(a)opensuse.o | |rg -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201994] Xen DomU unable to emulate audio device
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201994 https://bugzilla.suse.com/show_bug.cgi?id=1201994#c4 --- Comment #4 from Erwin Pacua <erwin.pacua(a)gmail.com> --- Hi James, Thank you for the reply. I presume you are on 15.3 because all vms had no problem with it, including the ancient windows xp. The lspci command confirmed that no sound device is available. [root@fedora ~]# lspci 00:00.0 Host bridge: Intel Corporation 440FX - 82441FX PMC [Natoma] (rev 02) 00:01.0 ISA bridge: Intel Corporation 82371SB PIIX3 ISA [Natoma/Triton II] 00:01.1 IDE interface: Intel Corporation 82371SB PIIX3 IDE [Natoma/Triton II] 00:01.3 Bridge: Intel Corporation 82371AB/EB/MB PIIX4 ACPI (rev 03) 00:02.0 Unassigned class [ff80]: XenSource, Inc. Xen Platform Device (rev 01) 00:03.0 Communication controller: Red Hat, Inc. Virtio console 00:04.0 VGA compatible controller: Device 1234:1111 (rev 02) [root@fedora ~]# [root@fedora ~]# hwinfo --sound [root@fedora ~]# Nothing in the /var/log/message nor on /var/log/xen/ that relates to audio device. I know that 15.3 works bu I'll try to install it on a separate host anyway. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202253] VUL-0: CVE-2022-35724: python-avro: Denial of service while reading data in Avro Rust SDK
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202253 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202251] mosquitto segfault
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202251 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mrueckert(a)suse.com Assignee|screening-team-bugs(a)suse.de |mardnh(a)gmx.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202253] New: VUL-0: CVE-2022-35724: python-avro: Denial of service while reading data in Avro Rust SDK
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1202253 Bug ID: 1202253 Summary: VUL-0: CVE-2022-35724: python-avro: Denial of service while reading data in Avro Rust SDK Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/339200/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: otto.hollmann(a)suse.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-35724 Posted by Ryan Skraba on Aug 08Severity: important Description: It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue. Credit: This issue was reported to the Apache Avro team by Evan Richter at ForAllSecure and found with Mayhem. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35724 https://seclists.org/oss-sec/2022/q3/107 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202245] System hang while editing APN settings on nm-connection-editor
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202245 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |gnome-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202195] bpftool fails with latest binutils release
by bugzilla_noreply＠suse.com 09 Aug '22

09 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202195 https://bugzilla.suse.com/show_bug.cgi?id=1202195#c2 --- Comment #2 from Martin Li��ka <martin.liska(a)suse.com> --- Thanks Jiri! -- You are receiving this mail because: You are on the CC list for the bug.

1 0