January 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1202423] New: VUL-0: CVE-2022-35978: minetest: Mod scripts can escape sandbox in single player
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1202423 Bug ID: 1202423 Summary: VUL-0: CVE-2022-35978: minetest: Mod scripts can escape sandbox in single player Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/339900/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: dap.darkness(a)gmail.com Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-35978 Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs in is not sandboxed and can directly interfere with the user's system. There are currently no known workarounds. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35978 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35978 https://github.com/minetest/minetest/commit/da71e86633d0b27cd02d7aac9fdac62… https://github.com/minetest/minetest/security/advisories/GHSA-663q-pcjw-27cc https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1193141] minetestserver terminates with SIGSEGV at startup
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1193141 https://bugzilla.suse.com/show_bug.cgi?id=1193141#c15 --- Comment #15 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0001-1: An update that solves one vulnerability and has two fixes is now available. Category: security (important) Bug References: 1181400,1193141,1202423 CVE References: CVE-2022-35978 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): minetest-5.6.0-bp154.2.3.5 openSUSE Backports SLE-15-SP3 (src): minetest-5.6.0-bp153.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206697] Wireless network disappears on Raspberry Pi 4B after kernel-default 6.0.12
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1206697 https://bugzilla.suse.com/show_bug.cgi?id=1206697#c6 --- Comment #6 from Guillaume GARDET <guillaume.gardet(a)arm.com> --- armv7 does not seem to be affected. I tried kernel-firmware at versions 20221130 and 20221216 (updated 5 days ago in Factory) but there is no change. Kernel 6.1.0 received lots of updates for brcmfmac. I also tested 6.1.2 which had more fixes, but still no luck. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191055] aws-efs-utils: finish UsrMerge, install to /usr
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1191055 http://bugzilla.opensuse.org/show_bug.cgi?id=1191055#c9 --- Comment #9 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1191055) was mentioned in https://build.opensuse.org/request/show/1046505 Factory / aws-efs-utils -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205860] hplip does not have support for scanner of HP deskjet 2700 series
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1205860 https://bugzilla.suse.com/show_bug.cgi?id=1205860#c8 --- Comment #8 from Johannes Meixner <jsmeix(a)suse.com> --- Some general information: In general see the section "Third-Party Scanner Drivers" in https://en.opensuse.org/SDB:Configuring_Scanners Regarding HPLIP and its proprietary plugin see the section "Some devices require a proprietary HPLIP plugin" and its sub-sections in https://en.opensuse.org/SDB:How_to_set-up_a_HP_printer In particular regarding the screenshot in comment #3 https://bugzilla.suse.com/attachment.cgi?id=863780 that shows the same device twice as available via "hpaio" and as "not configured" in the Yast2 scanner module: The Yast2 scanner module calls /usr/lib/YaST2/bin/autodetect_scanners to autodetect devices which seem to be scanners which calls sane-find-scanner for SANE scanners and additionally hp-probe for HPLIP scanners. The Yast2 scanner module calls /usr/lib/YaST2/bin/determine_active_scanners to determine scanners that are available via a SANE driver which calls scanimage -f '%d,%v,%m;' that outpouts basically same as scanimage -L Then some "reasonable effort attempt" is done in the Yast2 scanner module to find out which autodetected device is available via a SANE driver. When that "reasonable effort attempt" cannot match an autodetected device to what is reported by scanimage -f '%d,%v,%m;' (e.g. the model name may not match), then one same device is reported twice as already available via a SANE driver and as not configured autodetected device. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191054] Switch remaining packages to /usr
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1191054 Bug 1191054 depends on bug 1191055, which changed state. Bug 1191055 Summary: aws-efs-utils: finish UsrMerge, install to /usr http://bugzilla.opensuse.org/show_bug.cgi?id=1191055 What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191055] aws-efs-utils: finish UsrMerge, install to /usr
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1191055 http://bugzilla.opensuse.org/show_bug.cgi?id=1191055#c8 Robert Schweikert <rjschwei(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Robert Schweikert <rjschwei(a)suse.com> --- Accepted to dev project and forwarded to Factory -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206775] git 2.39 does not want to talk to git 2.35
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1206775 https://bugzilla.suse.com/show_bug.cgi?id=1206775#c6 --- Comment #6 from Danilo Spinella <danilo.spinella(a)suse.com> --- Seems like a race condition to me. I'll try running it a couple of times and see if I can reproduce it. Let's also open a bug upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205860] hplip does not have support for scanner of HP deskjet 2700 series
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1205860 https://bugzilla.suse.com/show_bug.cgi?id=1205860#c7 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsmeix(a)suse.com --- Comment #7 from Martin Wilck <martin.wilck(a)suse.com> --- The YaST printer and scanner modules don't receive much attention these days. It has been a loong time since anyone was payed to maintain them, and volunteers are rare, too. We already discussed retiring them entirely, but they still seem to be somewhat useful to some people. Adding Johannes who knows more about this, but he will probably tell you the same thing. If your printing and scanning issues are solved, please close the bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206797] New: [RPi3] brcmfmac: brcmf_sdio_htclk: HT Avail timeout (1000000): clkctl 0x50
by bugzilla_noreply＠suse.com 03 Jan '23

03 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1206797 Bug ID: 1206797 Summary: [RPi3] brcmfmac: brcmf_sdio_htclk: HT Avail timeout (1000000): clkctl 0x50 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 URL: https://openqa.opensuse.org/tests/3008872/modules/jour nal_check/steps/10 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de CC: afaerber(a)suse.com, dmueller(a)suse.com, ivan.ivanov(a)suse.com, mbrugger(a)suse.com Found By: openQA Blocker: Yes With kernel 6.1, openQA shows the following kernel trace on RPi3: kernel: brcmfmac: brcmf_sdio_htclk: HT Avail timeout (1000000): clkctl 0x50 -- You are receiving this mail because: You are on the CC list for the bug.

1 4