August 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1200478] syslog flood by bind "resolver priming query complete"
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1200478 Jorik Cronenberg <jorik.cronenberg(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |max(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201679] New: VUL-0: chromium: multiple security issues fixed in 103.0.5060.134
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201679 Bug ID: 1201679 Summary: VUL-0: chromium: multiple security issues fixed in 103.0.5060.134 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: gmbr3(a)opensuse.org Reporter: gabriele.sonnu(a)suse.com QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Found By: --- Blocker: --- This update includes 11 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information. [$16000][1336266] High CVE-2022-2477 : Use after free in Guest View. Reported by anonymous on 2022-06-14 [$7500][1335861] High CVE-2022-2478 : Use after free in PDF. Reported by triplepwns on 2022-06-13 [$3000][1329987] High CVE-2022-2479 : Insufficient validation of untrusted input in File. Reported by anonymous on 2022-05-28 [$NA][1339844] High CVE-2022-2480 : Use after free in Service Worker API. Reported by Sergei Glazunov of Google Project Zero on 2022-06-27 [$TBD][1341603] High CVE-2022-2481: Use after free in Views. Reported by YoungJoo Lee(@ashuu_lee) of CompSecLab at Seoul National University on 2022-07-04 [$7000][1308341] Low CVE-2022-2163: Use after free in Cast UI and Toolbar. Reported by Chaoyuan Peng (@ret2happy) on 2022-03-21 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.As usual, our ongoing internal security work was responsible for a wide range of fixes: [1345513] Various fixes from internal audits, fuzzing and other initiatives -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1142941] VUL-1: CVE-2019-11922: zstd: race condition in one-pass compression functions could allow out of bounds write
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1142941 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2019-1192 | |2:0.0:(AV:N/AC:H/PR:N/UI:N/ | |S:U/C:N/I:N/A:N) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160113] VUL-1: CVE-2019-20330: jackson-databind: lacks certain net.sf.ehcache blocking
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1160113 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2019-2033 | |0:8.1:(AV:N/AC:H/PR:N/UI:N/ | |S:U/C:H/I:H/A:H) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201988] New: zypper --requires-pkg shows wrong package
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201988 Bug ID: 1201988 Summary: zypper --requires-pkg shows wrong package Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: arvidjaar(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On Leap 15.4 with current patches (as of 2022-07-29): bor@10:~> zypper se --requires-pkg -x libicu69 Loading repository data... Reading installed packages... S | Name | Summary | Type ---+-------------------------+-----------------------------------------+-------- | chromedriver | WebDriver for Google Chrome/Chromium | package i+ | chromium | Google's open source browser project | package | icu.691 | International Components for Unicode | package | icu.691-devel | Development files for the ICU library | package | libmozjs-78-0 | JavaScript's library | package | libQt6WebEngineCore6 | Qt6 WebEngineCore library | package | mozjs78 | SpiderMonkey JavaScript library | package | nodejs16 | Evented I/O for V8 JavaScript | package | qt6-webenginecore-devel | Development files for the Qt 6 WebEng-> | package bor@10:~> rpm -q libicu69 package libicu69 is not installed bor@10:~> There is no way chromium can require libicu69 which is not even installed. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1201966] Package yast2-installation requires xrdb and ultimately libX*
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201966 https://bugzilla.suse.com/show_bug.cgi?id=1201966#c1 David Diaz <dgonzalez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dgonzalez(a)suse.com, | |r.nowagk(a)gmx.de Flags| |needinfo?(r.nowagk(a)gmx.de) --- Comment #1 from David Diaz <dgonzalez(a)suse.com> --- Hi! Thanks for the report. Could you please provide more information?. E.g., YaST logs collected by running the save_y2logs command https://en.opensuse.org/openSUSE:Report_a_YaST_bug#Attachments_-_y2logs,_hw…. Thanks in advance. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1197905] New: windows:mingw:win{32|64}/mingw{32|64}-gpg2
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1197905 Bug ID: 1197905 Summary: windows:mingw:win{32|64}/mingw{32|64}-gpg2 Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, mkbosmans(a)gmail.com Found By: --- Blocker: --- Updates are available for gpg2 related packages https://gnupg.org/download/; related packages should be updated to reflect this. new actual GnuPG (LTS) 2.2.34 2.2.27 Libgcrypt (LTS) 1.8.9 1.8.3 ... -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1199536] New: Plasma systemd start doesn't follow "PLASMA_USE_QT_SCALING=1" anymore after gcc12 massive update
by bugzilla_noreply＠suse.com 01 Aug '22

01 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1199536 Bug ID: 1199536 Summary: Plasma systemd start doesn't follow "PLASMA_USE_QT_SCALING=1" anymore after gcc12 massive update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: qydwhotmail(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I set "PLASMA_USE_QT_SCALING=1" in both ~/.profile and /etc/environment, before the gcc12 update X11 scaling worked normally, but after 20220510 gcc12 update, X11 scaling doesn't work anymore. Instead, I have to modify the systemd service file and set the environment variable there. System information Operating System: openSUSE Tumbleweed 20220510 KDE Plasma Version: 5.24.80 KDE Frameworks Version: 5.94.0 Qt Version: 5.15.2 Kernel Version: 5.17.5-1-default (64-bit) Graphics Platform: X11 Processors: 8 � AMD Ryzen 7 4700U with Radeon Graphics Memory: 15.0 GiB of RAM Graphics Processor: AMD RENOIR Manufacturer: HP Product Name: HP ZHAN 66 Pro A 14 G3 -- You are receiving this mail because: You are on the CC list for the bug.

1 2