December 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1217677] VUL-0: CVE-2023-30801: qbittorrent: default credentials allowed by default
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217677 https://bugzilla.suse.com/show_bug.cgi?id=1217677#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1217677) was mentioned in https://build.opensuse.org/request/show/1130210 Backports:SLE-15-SP4+Backports:SLE-15-SP5 / libtorrent-rasterbar https://build.opensuse.org/request/show/1130211 Backports:SLE-15-SP4+Backports:SLE-15-SP5 / qbittorrent -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206069] VUL-0: CVE-2022-4170: rxvt-unicode: code execution via background OSC
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1206069 Michal Suchanek <msuchanek(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |msuchanek(a)suse.com, | |security-team(a)suse.de Flags| |needinfo?(security-team@sus | |e.de) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209908] On login, the button to switch between keyboard layouts is hidden
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1209908 https://bugzilla.suse.com/show_bug.cgi?id=1209908#c4 Megidd Git <megiddgit(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|Leap 15.4 |Leap 15.5 OS|openSUSE Leap 15.4 |openSUSE Leap 15.5 --- Comment #4 from Megidd Git <megiddgit(a)gmail.com> --- I'm observing this behavior occasionally on openSUSE Leap 15.5 too :( -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217677] VUL-0: CVE-2023-30801: qbittorrent: default credentials allowed by default
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217677 https://bugzilla.suse.com/show_bug.cgi?id=1217677#c3 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |aloisio(a)gmx.com --- Comment #3 from Marcus Meissner <meissner(a)suse.com> --- we also need fixes for: openSUSE:Backports:SLE-15-SP4:Update/qbittorrent openSUSE:Backports:SLE-15-SP5:Update/qbittorrent -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217118] AUDIT-FIND: udev: DRM render nodes are world-writable
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217118 https://bugzilla.suse.com/show_bug.cgi?id=1217118#c11 --- Comment #11 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1217118) was mentioned in https://build.opensuse.org/request/show/1130178 Factory / systemd -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182451] Since glibc 2.33 testing for execute permission does not work
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1182451 https://bugzilla.suse.com/show_bug.cgi?id=1182451#c57 Dirk Mueller <dmueller(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Flags|needinfo?, | |needinfo?(dcermak(a)suse.com) | Status|REOPENED |RESOLVED --- Comment #57 from Dirk Mueller <dmueller(a)suse.com> --- Closing as fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217118] AUDIT-FIND: udev: DRM render nodes are world-writable
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217118 https://bugzilla.suse.com/show_bug.cgi?id=1217118#c10 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #10 from Franck Bui <fbui(a)suse.com> --- FYI https://build.opensuse.org/request/show/1128161 has been accepted and submitted to Factory: sr#1130178 Hence I'm closing the bug. Wolfgang can you please open another bug report for the documentation part ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217707] AUDIT-0: plasma-branding-Kalpa: Review of polkit file 49-Kalpa.rules
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217707 https://bugzilla.suse.com/show_bug.cgi?id=1217707#c1 --- Comment #1 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- This is also the same as for openSUSE Aeon: ``` polkit.addAdminRule(function(action, subject) { return ["unix-group:wheel"]; ]); ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217706] AUDIT-0: plasma-branding-Kalpa: Review of sudoers file 50-kalpa
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1217706 https://bugzilla.suse.com/show_bug.cgi?id=1217706#c1 --- Comment #1 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Thanks for opening the review bug. This sudoers file wants: ``` Defaults:%wheel !targetpw %wheel ALL = (root) ALL ``` So a wheel group based authentication. In bug 1215276 something very similar was done for openSUSE Aeon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216191] snapper diff fails for lvm based config
by bugzilla_noreply＠suse.com 01 Dec '23

01 Dec '23

https://bugzilla.suse.com/show_bug.cgi?id=1216191 https://bugzilla.suse.com/show_bug.cgi?id=1216191#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1216191) was mentioned in https://build.opensuse.org/request/show/1130172 Factory / snapper -- You are receiving this mail because: You are on the CC list for the bug.

1 0