September 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1185948] VUL-0: CVE-2021-29495: nim: stdlib httpClient does not validate peer certificates by default
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1185948 https://bugzilla.suse.com/show_bug.cgi?id=1185948#c4 David Anes <david.anes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|david.anes(a)suse.com |security-team(a)suse.de --- Comment #4 from David Anes <david.anes(a)suse.com> --- All done. Assigning back to security. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192712] VUL-1: CVE-2021-41259: nim: null byte accepted in getContent function, leading to URI validation bypass
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1192712 https://bugzilla.suse.com/show_bug.cgi?id=1192712#c10 David Anes <david.anes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|david.anes(a)suse.com |security-team(a)suse.de --- Comment #10 from David Anes <david.anes(a)suse.com> --- All done. Assigning back to security. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202090] mdadm / mdmonitor systemd service not allowed to write env (mdadm_env.sh) on SELinux enabled systems
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202090 https://bugzilla.suse.com/show_bug.cgi?id=1202090#c2 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz(a)suse.com Assignee|filippo.bonazzi(a)suse.com |nfbrown(a)suse.com Summary|[SELinux] mdadm / mdmonitor |mdadm / mdmonitor systemd |systemd service not allowed |service not allowed to |to write env (mdadm_env.sh) |write env (mdadm_env.sh) on | |SELinux enabled systems --- Comment #2 from Johannes Segitz <jsegitz(a)suse.com> --- Neil, can you please change the packaging to install mdadm_env.sh to /usr/libexec? Thanks -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202090] [SELinux] mdadm / mdmonitor systemd service not allowed to write env (mdadm_env.sh)
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202090 https://bugzilla.suse.com/show_bug.cgi?id=1202090#c1 --- Comment #1 from Johannes Segitz <jsegitz(a)suse.com> --- Thank you for your detailed bug report. The issue here is the packaging of mdadm. Setting the type to mdadm_exec_t solves the issue, but the real solution is to get the file marked as bin_t to allow for the usual transitions. I'll assign it to the maintainer -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203241] zsh tests fail with GNU grep 3.8
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203241 https://bugzilla.suse.com/show_bug.cgi?id=1203241#c7 Dirk Mueller <dmueller(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from Dirk Mueller <dmueller(a)suse.com> --- submitted 1002958 with a workaround for the testsuite until upstream fixes come along. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203092] GNU grep 3.8 egrep / grep warnings and migration to grep -E / grep -F
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203092 Bug 1203092 depends on bug 1203241, which changed state. Bug 1203241 Summary: zsh tests fail with GNU grep 3.8 https://bugzilla.suse.com/show_bug.cgi?id=1203241 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200369] Inkscape 1.0.1 with pango 1.50.4 doesn't render mult-line text correctly
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1200369 https://bugzilla.suse.com/show_bug.cgi?id=1200369#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3254-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1200369 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): inkscape-1.0.1-150400.9.3.2 SUSE Linux Enterprise Workstation Extension 15-SP4 (src): inkscape-1.0.1-150400.9.3.2 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (src): inkscape-1.0.1-150400.9.3.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189778] SDL2 2.0.16 broke audio on Tumbleweed with PulseAudio
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1189778 https://bugzilla.suse.com/show_bug.cgi?id=1189778#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3255-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1189778 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): pulseaudio-14.2-150300.6.3.1 openSUSE Leap 15.3 (src): pulseaudio-14.2-150300.6.3.1 SUSE Linux Enterprise Workstation Extension 15-SP3 (src): pulseaudio-14.2-150300.6.3.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (src): pulseaudio-14.2-150300.6.3.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): pulseaudio-14.2-150300.6.3.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): pulseaudio-14.2-150300.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203037] AUDIT-0: warpinator: review of polkit privilege for org.x.warpinator
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203037 https://bugzilla.suse.com/show_bug.cgi?id=1203037#c3 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |matthias.gerstner(a)suse.com --- Comment #3 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- I will look into this package. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203241] zsh tests fail with GNU grep 3.8
by bugzilla_noreply＠suse.com 12 Sep '22

12 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203241 https://bugzilla.suse.com/show_bug.cgi?id=1203241#c5 --- Comment #5 from Dirk Mueller <dmueller(a)suse.com> --- I am not involved in zsh other than updating it occassionally (which is done by a script). it appears that upstream is discussing how to properly fix this: https://www.zsh.org/mla/workers/2022/msg00956.html it looks like the path will be to remove all uses of egrep from the testsuite and use zsh builtins, as "grep -E" is not portable outside GNU ecosystem. -- You are receiving this mail because: You are on the CC list for the bug.

1 0