January 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1206247] Wayland and Plasma5 unstable
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1206247 https://bugzilla.suse.com/show_bug.cgi?id=1206247#c7 --- Comment #7 from Ayers <anothergrump(a)runbox.com> --- I saw that on the last x86 update but it is not yet available in the Arm update. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1197614] moc player buffer overflow detected
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1197614 https://bugzilla.suse.com/show_bug.cgi?id=1197614#c7 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #7 from Petr Gajdos <pgajdos(a)suse.com> --- (In reply to Victor hck from comment #6) > (In reply to Petr Gajdos from comment #5) > > The crucial thing is your motivation, not the actual knowledge, believe me. > > do you think so?? It's really hard trying to fix .spec files or such... I see you have already contributed a patch in multimedia:libs/moc. So you can try it and you will see. I guess it will be also enough to just send requests against this package, as you already did. > > I didn't see this particular piece of software, but anytime you can try ask > > me directly for help, or I think anytime you can involve opensuse-factory@ > > or other lists. > > Well, I've using cmus for a while... but I still prefer mocp... so would be > sad left this software dropped from openSUSE repositories... so maybe I can > take over this package. I do not want to issue threats ;). I wanted to ensure that moc is used at all. Perhaps also multimedia:apps maintainers can eventually take over, but of course it would be probably better to have dedicated maintainer. I will now close this bug: I see the patch in openSUSE:Backports:SLE-15-SP5/moc, in case the patch is not wanted there, you can remove it there as a welcome ;). In case I can help, let me know. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201627] openssl-1_0_0 FTBFS 2023-05-26
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1201627 https://bugzilla.suse.com/show_bug.cgi?id=1201627#c5 Otto Hollmann <otto.hollmann(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #5 from Otto Hollmann <otto.hollmann(a)suse.com> --- Changes submitted into affected code streams: openSUSE:Factory 1046230 SUSE:SLE-12-SP4:Update 287542 SLE-15:Update 287543 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201627] New: openssl-1_0_0 FTBFS 2023-05-26
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1201627 Bug ID: 1201627 Summary: openssl-1_0_0 FTBFS 2023-05-26 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: jsikes(a)suse.com Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: pmonrealgonzalez(a)suse.com Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our openssl-1_0_0 package fails build after 2023-05-26 To Reproduce: osc co openSUSE:Factory/openssl-1_0_0 && cd $_ osc build --vm-type=kvm --noservice --clean \ --build-opt=--vm-custom-opt="-rtc base=2023-05-26T18:00:00" standard It is probably possible to re-use the solution from bug 1185637 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1205860] hplip does not have support for scanner of HP deskjet 2700 series
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1205860 Freek de Kruijf <freek(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|hplip does not have support |hplip does not have support |for HP deskjet 2700 series |for scanner of HP deskjet | |2700 series -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205860] hplip does not have support for HP deskjet 2700 series
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1205860 https://bugzilla.suse.com/show_bug.cgi?id=1205860#c3 --- Comment #3 from Freek de Kruijf <freek(a)opensuse.org> --- Created attachment 863780 --> https://bugzilla.suse.com/attachment.cgi?id=863780&action=edit screenshot of window in yast -> hardware - scanner -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205860] hplip does not have support for HP deskjet 2700 series
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1205860 https://bugzilla.suse.com/show_bug.cgi?id=1205860#c2 Freek de Kruijf <freek(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(freek(a)opensuse.or | |g) | --- Comment #2 from Freek de Kruijf <freek(a)opensuse.org> --- (In reply to Martin Wilck from comment #1) > According to > https://developers.hp.com/hp-linux-imaging-and-printing/release_notes, this > device should be supported since 3.20.5. > > I am building 3.22.10 now, but I have little hope that it will solve your > problem. I have 3.22.6 installed. > > Perhaps this printer needs the hplip proprietary plugin? Try running the > "hp-plugin" tool. This one is/was already installed. > > If that doesn't help, run "hp-setup -g" and provide the output. ~> hp-setup -g HP Linux Imaging and Printing System (ver. 3.22.6) Printer/Fax Setup Utility ver. 9.0 Copyright (c) 2001-18 HP Development Company, LP This software comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to distribute it under certain conditions. See COPYING file for more details. hp-setup[14186]: debug: param= hp-setup[14186]: debug: selected_device_name=None hp-setup[14186]: debug: Using PyQt5 hp-setup[14186]: debug: Sys.argv=['/usr/bin/hp-setup', '-g'] printer_name=None param= jd_port=1 device_uri=None remove=False hp-setup[14186]: debug: Starting GUI Event Loop... Searching... (bus=usb, search=(None), desc=0) hp-setup[14186]: debug: Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 005: ID 0c45:62c0 Microdia Sonix USB 2.0 Camera Bus 001 Device 004: ID 046d:c534 Logitech, Inc. Unifying Receiver Bus 001 Device 008: ID 03f0:1853 HP, Inc DeskJet 2700 series Bus 001 Device 003: ID 1a40:0101 Terminus Technology Inc. Hub Bus 001 Device 002: ID 0001:0000 Fry's Electronics MEC0002 Bus 001 Device 007: ID 0cf3:e005 Qualcomm Atheros Communications Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub hp-setup[14186]: debug: Cache miss: deskjet_2700_series hp-setup[14186]: debug: Reading file: /usr/share/hplip/data/models/models.dat hp-setup[14186]: debug: Searching for section [deskjet_2700_series] in file /usr/share/hplip/data/models/models.dat hp-setup[14186]: debug: Found section [deskjet_2700_series] in file /usr/share/hplip/data/models/models.dat hp-setup[14186]: debug: {'hp:/usb/DeskJet_2700_series?serial=CN08N4A2T1': ['DeskJet_2700']} Exiting the setup... On the screen I get the message that a printer queue has already been setup, so I answered No on adding another queue. However there was no question about setting up something for the scanner. Trying Yast to add a scanner I got the picture in the attachment. Selecting the 2700 (see the blue background) and selecting Add did not result in adding a scanner. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191331] New: VUL-0: CVE-2021-32765: hiredis: integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1191331 Bug ID: 1191331 Summary: VUL-0: CVE-2021-32765: hiredis: integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/311708/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-32765 Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32765 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32765 https://github.com/redis/hiredis/security/advisories/GHSA-hfm9-39pp-55p2 https://github.com/redis/hiredis/commit/76a7b10005c70babee357a7d0f2becf28ec… https://wiki.sei.cmu.edu/confluence/display/c/MEM07-C.+Ensure+that+the+argu… -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1201566] [SELinux] setroubleshoot packages in repositories bundle a broken version of setroubleshootd
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1201566 https://bugzilla.suse.com/show_bug.cgi?id=1201566#c2 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |jsegitz(a)suse.com Resolution|--- |FIXED --- Comment #2 from Johannes Segitz <jsegitz(a)suse.com> --- Is solved in current version in Factory -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206572] nVidia driver gfxG06 RPM doesn't install
by bugzilla_noreply＠suse.com 02 Jan '23

02 Jan '23

https://bugzilla.suse.com/show_bug.cgi?id=1206572 https://bugzilla.suse.com/show_bug.cgi?id=1206572#c3 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aaronw(a)doofus.org Flags| |needinfo?(aaronw(a)doofus.org | |) --- Comment #3 from Stefan Dirsch <sndirsch(a)suse.com> --- Please run the same commands and post the results here. Maybe we can find this way the culprit. -- You are receiving this mail because: You are on the CC list for the bug.

1 0