August 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1201659] glibc-2.31-150300.31.2 breaks symantec antivirus scanner version 14.3.558-0000.2.8
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201659 https://bugzilla.suse.com/show_bug.cgi?id=1201659#c3 Martin Jambor <mjambor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mjambor(a)suse.com --- Comment #3 from Martin Jambor <mjambor(a)suse.com> --- (In reply to Moritz Duge from comment #2) > Looks like this has been fixed by glibc-2.31-150300.37.1 > > https://build.opensuse.org/package/rdiff/SUSE:SLE-15-SP3:Update/ > glibc?linkrev=base&rev=8 > > bug 1201560 Since 15.4 getting 100's of cron *** stack smashing detected > ***: terminated > > bug 1201640 (private bug) > @Andreas Schwab: Can you reveal this bug now, so I can see what was fixed? The bug is described in upstream bugzilla: https://sourceware.org/bugzilla/show_bug.cgi?id=25788 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195463] smb not starting after patch openSUSE-SLE-15.3-2022-283=1
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1195463 https://bugzilla.suse.com/show_bug.cgi?id=1195463#c31 --- Comment #31 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:2627-1: An update that has two recommended fixes can now be installed. Category: recommended (important) Bug References: 1195463,1196850 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP5 (src): apparmor-2.8.2-56.9.1 SUSE Linux Enterprise Server 12-SP5 (src): apparmor-2.8.2-56.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195463] smb not starting after patch openSUSE-SLE-15.3-2022-283=1
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1195463 https://bugzilla.suse.com/show_bug.cgi?id=1195463#c30 --- Comment #30 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:2628-1: An update that has two recommended fixes can now be installed. Category: recommended (important) Bug References: 1195463,1196850 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): apparmor-2.13.6-150300.3.15.1, libapparmor-2.13.6-150300.3.15.1 SUSE Linux Enterprise Module for Server Applications 15-SP3 (src): apparmor-2.13.6-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): apparmor-2.13.6-150300.3.15.1, libapparmor-2.13.6-150300.3.15.1 SUSE Linux Enterprise Micro 5.2 (src): apparmor-2.13.6-150300.3.15.1, libapparmor-2.13.6-150300.3.15.1 SUSE Linux Enterprise Micro 5.1 (src): apparmor-2.13.6-150300.3.15.1, libapparmor-2.13.6-150300.3.15.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1196663] New: VUL-0: CVE-2021-32797: python-jupyterlab: untrusted notebook can execute on load which could lead to an RCE
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1196663 Bug ID: 1196663 Summary: VUL-0: CVE-2021-32797: python-jupyterlab: untrusted notebook can execute on load which could lead to an RCE Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/306082/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn��t sanitize the action attribute of html `<form>`. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook. References: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4952-p58q… https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d5293… References: https://bugzilla.redhat.com/show_bug.cgi?id=2046370 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32797 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32797 https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d5293… https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4952-p58q… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1199820] [rpi] - Ethernet controller added as wlan0
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1199820 http://bugzilla.opensuse.org/show_bug.cgi?id=1199820#c9 --- Comment #9 from Axel Braun <axel.braun(a)gmx.de> --- This is still an issue on TW 20220729 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202065] [Build 20220802-3] Leap15.2 migration to Leap15.4 fails due to gimp-plugins-python
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202065 https://bugzilla.suse.com/show_bug.cgi?id=1202065#c1 --- Comment #1 from Marcus Meissner <meissner(a)suse.com> --- i ask for deletion of the one mistaken gimp-plugins-python release. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199450] yast2-nfs-client: NFSv4 server and directory scanning doesn't work (firewall?)
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1199450 https://bugzilla.suse.com/show_bug.cgi?id=1199450#c23 --- Comment #23 from Saigi Laszlo <laca3400(a)gmail.com> --- hi gents Any news about it? The bug will be fixed anytime soon? Thanks, best regards, laszlo -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202054] New: starting KVM guest crashes kernel 5.14.21-150400.24.11-default
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1202054 Bug ID: 1202054 Summary: starting KVM guest crashes kernel 5.14.21-150400.24.11-default Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: seife(a)novell.slipkontur.de QA Contact: qa-bugs(a)suse.de Found By: Community User Blocker: --- Starting a KVM guest crashes the host OS. This is the relevant part of dmesg.txt I also have a kdump vmcore if that helps. It works fine with the non-updated 5.14.21-150400.22-default kernel. [ 45.034200] int3: 0000 [#1] PREEMPT SMP PTI [ 45.034208] CPU: 1 PID: 6269 Comm: CPU 0/KVM Kdump: loaded Tainted: G OE N 5.14.21-150400.24.11-default #1 SLE15-SP4 458651046114dcfd0463a30d9fb6442f361cad48 [ 45.034212] Hardware name: FUJITSU SIEMENS ESPRIMO E5730 /D2824-A1, BIOS 6.00 R1.19-03.2824.A1 07/12/2011 [ 45.034213] RIP: 0010:setc+0x5/0x8 [kvm] [ 45.034357] Code: 00 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 0f 90 c0 c3 cc cc cc cc 0f 91 c0 c3 cc cc cc cc 0f 92 c0 c3 cc <cc> cc cc 0f 93 c0 c3 cc cc cc cc 0f 94 c0 c3 cc cc cc cc 0f 95 c0 [ 45.034359] RSP: 0018:ffffb31a01887ba0 EFLAGS: 00000287 [ 45.034362] RAX: ffffffffc0af3674 RBX: ffff96a2d2e93ea0 RCX: 0000000000000000 [ 45.034363] RDX: 0000000000000285 RSI: 0000000000000000 RDI: ffff96a2d2e93ea0 [ 45.034365] RBP: 0000000000000006 R08: ffff96a2e9950000 R09: ffff96a2d4880000 [ 45.034366] R10: ffffffffc0b30b18 R11: 0000000000000006 R12: ffffffffc0b2bde0 [ 45.034368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.034369] FS: 00007ff40affe700(0000) GS:ffff96a30fd00000(0000) knlGS:0000000000000000 [ 45.034371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.034372] CR2: 0000000000000000 CR3: 00000001e9adc000 CR4: 00000000000426e0 [ 45.034374] Call Trace: [ 45.034380] <TASK> [ 45.034382] x86_emulate_insn+0x6e7/0xef0 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034434] x86_emulate_instruction+0x321/0x6c0 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034481] vmx_handle_exit+0x269/0x7e0 [kvm_intel b8f60b1567a29a13306803440c7f8cbf70665724] [ 45.034500] ? __SCT__kvm_x86_tlb_flush_guest+0x8/0x8 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034552] vcpu_enter_guest+0x95b/0x17b0 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034599] ? kvm_arch_vcpu_load+0x1a5/0x260 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034646] ? kvm_arch_vcpu_ioctl_run+0x38b/0x630 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034693] kvm_arch_vcpu_ioctl_run+0x38b/0x630 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034741] kvm_vcpu_ioctl+0x418/0x660 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034778] ? kvm_vcpu_ioctl+0x18d/0x660 [kvm e1724a76e48a111c8cedafb0bd0db0ebecb51f92] [ 45.034813] ? vmx_get_segment_base+0x28/0x60 [kvm_intel b8f60b1567a29a13306803440c7f8cbf70665724] [ 45.034821] __x64_sys_ioctl+0x92/0xd0 [ 45.034825] ? syscall_trace_enter.isra.20+0xa9/0x1e0 [ 45.034830] do_syscall_64+0x5b/0x80 [ 45.034834] ? syscall_exit_to_user_mode+0x18/0x40 [ 45.034837] ? do_syscall_64+0x67/0x80 [ 45.034838] ? syscall_exit_to_user_mode+0x18/0x40 [ 45.034840] ? do_syscall_64+0x67/0x80 [ 45.034842] ? __x64_sys_ioctl+0xae/0xd0 [ 45.034844] ? syscall_exit_to_user_mode+0x18/0x40 [ 45.034846] ? do_syscall_64+0x67/0x80 [ 45.034848] ? exc_page_fault+0x67/0x150 [ 45.034850] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.034854] RIP: 0033:0x7ff49e0f1c47 [ 45.034856] Code: 90 90 90 48 8b 05 49 c2 2d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 19 c2 2d 00 f7 d8 64 89 01 48 [ 45.034858] RSP: 002b:00007ff40affd4f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.034860] RAX: ffffffffffffffda RBX: 000000000000ae80 RCX: 00007ff49e0f1c47 [ 45.034861] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 45.034862] RBP: 00005565d86ef940 R08: 00005565d71e2aa8 R09: 0000000000000000 [ 45.034864] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 45.034865] R13: 0000000000000071 R14: 0000000000000000 R15: 00007ff4a3ce5000 [ 45.034868] </TASK> [ 45.034868] Modules linked in: vhost_net vhost vhost_iotlb tap xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_nat nf_nat br_netfilter tcp_diag inet_diag ipt_REJECT nf_reject_ipv4 xt_state xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter bpfilter af_packet 8021q garp mrp iscsi_ibft iscsi_boot_sysfs rfkill tun dmi_sysfs btrfs blake2b_generic xor raid6_pq xfs libcrc32c coretemp kvm_intel at24 regmap_i2c iTCO_wdt intel_pmc_bxt gpio_ich iTCO_vendor_support i915 kvm isl6421(N) cx24120(OEN) mt312(N) mei_wdt stv0297(N) bcm3510(N) lgdt330x(N) nxt200x(N) mt352(N) irqbypass pcspkr i2c_i801 i2c_smbus b2c2_flexcop_pci(N) b2c2_flexcop(N) r8169 s5h1420(N) cx24113(N) lpc_ich realtek cx24123(N) mfd_core mdio_devres video libphy i2c_algo_bit ttm drm_kms_helper cec syscopyarea sysfillrect sysimgblt fb_sys_fops mei_me e1000e button mei acpi_cpufreq ppdev nfsd auth_rpcgss drm nfs_acl lockd grace sunrpc configfs ip_tables x_tables [ 45.034931] ext4 crc16 mbcache jbd2 sd_mod t10_pi ahci ata_generic libahci libata serio_raw ehci_pci uhci_hcd ehci_hcd parport_pc parport hid_generic usbhid usbcore sg dm_multipath dm_mod scsi_dh_rdac scsi_dh_emc scsi_dh_alua scsi_mod msr fuse stv0299(N) budget_ci(N) rc_core budget_core(N) ttpci_eeprom(N) saa7146 dvb_core(N) mc bridge stp llc [ 45.034956] Supported: No, Unsupported modules are loaded -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1197896] [Build 20220328] openQA test fails in yast2_samba
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1197896 https://bugzilla.suse.com/show_bug.cgi?id=1197896#c5 Samuel Cabrero <scabrero(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #5 from Samuel Cabrero <scabrero(a)suse.com> --- The samba schema shipped with 389-ds has been updated, closing bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201996] MicroOS Desktop: Virtualbox guest extentions not working
by bugzilla_noreply＠suse.com 02 Aug '22

02 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201996 Larry Finger <Larry.Finger(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |llrainey15(a)gmail.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0