February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208029] VUL-0: chromium: multiple security issues fixed in 110.0.5481.77
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208029 http://bugzilla.opensuse.org/show_bug.cgi?id=1208029#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1208029) was mentioned in https://build.opensuse.org/request/show/1064313 Backports:SLE-15-SP5 / chromium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207447] New: VUL-0: wireshark: multiple security issues fixed in 3.6.11 and 4.0.3
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207447 Bug ID: 1207447 Summary: VUL-0: wireshark: multiple security issues fixed in 3.6.11 and 4.0.3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: rfrohl(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: --- Blocker: --- No CVEs yet, so lets track this through a tracker bug instead: for 4.0.3, from changes [0] * EAP dissector crash. * NFS dissector memory leak. * Dissection engine crash. * GNW dissector crash. * iSCSI dissector crash. * Multiple dissector excessive loops. * TIPC dissector crash. for 3.6.11, from changes [1] * NFS dissector memory leak. * Dissection engine crash. * GNW dissector crash. * iSCSI dissector crash. * Multiple dissector excessive loops. * TIPC dissector crash. [0] https://www.wireshark.org/docs/relnotes/wireshark-4.0.3.html [1] https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1206189] VUL-1: CVE-2022-4345: wireshark: Multiple dissector infinite loops (wnpa-sec-2022-09)
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1206189 https://bugzilla.suse.com/show_bug.cgi?id=1206189#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2023:0343-1: An update that solves 7 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1206189,1207447,1207663,1207664,1207665,1207667,1207668,1207669 CVE References: CVE-2022-4345,CVE-2023-0411,CVE-2023-0412,CVE-2023-0413,CVE-2023-0415,CVE-2023-0416,CVE-2023-0417 JIRA References: Sources used: openSUSE Leap 15.4 (src): wireshark-3.6.11-150000.3.83.1 SUSE Manager Server 4.2 (src): wireshark-3.6.11-150000.3.83.1 SUSE Manager Retail Branch Server 4.2 (src): wireshark-3.6.11-150000.3.83.1 SUSE Manager Proxy 4.2 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server for SAP 15-SP3 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server 15-SP3-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Realtime Extension 15-SP3 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): wireshark-3.6.11-150000.3.83.1 SUSE Enterprise Storage 7.1 (src): wireshark-3.6.11-150000.3.83.1 SUSE Enterprise Storage 7 (src): wireshark-3.6.11-150000.3.83.1 SUSE Enterprise Storage 6 (src): wireshark-3.6.11-150000.3.83.1 SUSE CaaS Platform 4.0 (src): wireshark-3.6.11-150000.3.83.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207374] Cannot set up iscsi targets during installation
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207374 https://bugzilla.suse.com/show_bug.cgi?id=1207374#c21 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #21 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- (In reply to Stefan Hundhammer from comment #9) > > - When we copy the iscsi setup from the inst-sys to the target at the end of > the installation (after installing all the RPMs), copy /var/lib/iscsi/ to > /mnt/var/lib/iscsi/, not /etc/iscsi/ to /mnt/etc/iscsi. This is now submitted to: - To SP5 https://build.suse.de/request/show/289787 - To TW https://build.opensuse.org/request/show/1064295 That, together with the fix to installation-images already provided by Steffen (see comment#13), should fix all the problems. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208004] Make %post script SELinux aware
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208004 http://bugzilla.opensuse.org/show_bug.cgi?id=1208004#c5 --- Comment #5 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1208004) was mentioned in https://build.opensuse.org/request/show/1064283 Factory / ntp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208069] Leap 15.5 & Gecko rolling plasma does not revive video from suspend?
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208069 https://bugzilla.suse.com/show_bug.cgi?id=1208069#c3 Fritz Hudnut <non.space.1(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(tiwai(a)suse.com) --- Comment #3 from Fritz Hudnut <non.space.1(a)gmail.com> --- (In reply to Takashi Iwai from comment #2) > Could you retest with the kernel in OBS Kernel:SLE15-SP5 repo? If the bug > persists, please give the hwinfo output. @Takashi: Happy to do that, but jammed today. The other problem is not knowing how to do what you are suggesting . . . ??? Add "SLE15-SP5" to the repos?? Search "OBS kernel:SLE15-SP5" in YaST? and then install it? For the most part I have a bunch of linux installs that I maintain, but don't "get under the hood" with them, except the fix them . . . which lately TW and Leap 15.5 have been requesting more of my attention that I have to spare . . . . The "third" confirmation is that I had the same problem with another openSUSE based system yesterday, a Gecko rolling MATE iteration had the same problem as the other two, failure to revive from suspending, display stays black, etc. Historically, when these "failure to suspend or revive" issues showed up it was an "nvidia" issue . . . so years ago I stopped using proprietary drivers. But recently in TW there was a "G06" package that somehow insinuated itself into the system, wiping out video in older cards like my GTX780. After that issue I scanned the upgrade packages looking for "G06" but didn't see any in the Leap or Gecko zypper listings . . . but possibly some aspects of "nvidia-ness" have been adapted by the system?? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207295] bpftrace: SIGSEGV on almost any simple program
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207295 http://bugzilla.opensuse.org/show_bug.cgi?id=1207295#c4 Bystron <cartesius68(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Bystron <cartesius68(a)gmail.com> --- Thank you, Shung-Hsi Yu! Update v0.17 works. This bug can be closed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207986] New: Gnome Help app is empty
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207986 Bug ID: 1207986 Summary: Gnome Help app is empty Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: MicroOS Assignee: kubic-bugs(a)opensuse.org Reporter: lilfrogg(a)posteo.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On my MicroOS install the Gnome Help app doesn't have any contents. It shows the text "All Help Documents" and nothing else. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1207912] New: TypeError when logging into cockpit
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207912 Bug ID: 1207912 Summary: TypeError when logging into cockpit Classification: openSUSE Product: openSUSE Leap Micro Version: 5.3 Hardware: x86-64 OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Patterns Assignee: lubos.kocman(a)suse.com Reporter: lilfrogg(a)posteo.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Whenever I log into cockpit I get an error message "TypeError: e.List is not a function". The install doesn't have anything other than cockpit installed and is up to date. I'm not sure how or if the bug is interfering with the functionality in any way, most things seem to work. The only issue I have noticed with cokpit so far is that it constantly shows that an update is available, but that update is described as "Feature uodate for Gnome 41" which doesn't really make sense to me as Leap Micro has no DE, so I have just updated theachine via terminal so far. (Should I file this as a seoarate bug, or would it be better to file those with cockpit in the first place?) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1208115] New: libdb 4.8.30 matched in rpm-4.14.3-150300.52.1.x86_64.rpm
by bugzilla_noreply＠suse.com 10 Feb '23

10 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208115 Bug ID: 1208115 Summary: libdb 4.8.30 matched in rpm-4.14.3-150300.52.1.x86_64.rpm Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: simonalogan(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Our security scanning tool has matched libdb 4.8.30 in rpm-4.14.3-150300.52.1.x86_64.rpm as follows: Full File Path rpm-4.14.3-150300.52.1.x86_64.rpm/usr/lib64/librpm.so.8.2.0 Signature 0:"Berkeley DB 4.8.30:" libdb was previously examined in https://bugzilla.suse.com/show_bug.cgi?id=1036086 and declared WONTFIX. It��s now 6 years later and our security scanner is still flagging CVE-2017-3604 - CVE-2017-3617 against libdb 4.8.30 in rpm-4.14.3-150300.52.1.x86_64.rpm Is it possible to revisit this? Thanks, Simon -- You are receiving this mail because: You are on the CC list for the bug.

1 1