February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207959] devel:languages:tcl/tcl: Bug libraries outside of '/usr/share/tcl' do not seem to be loaded
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207959 https://bugzilla.suse.com/show_bug.cgi?id=1207959#c2 Reinhard Max <max(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Component|3rd party software |Other Version|unspecified |Current Resolution|--- |FIXED Product|openSUSE.org |openSUSE Tumbleweed QA Contact|screening-team-bugs(a)suse.de |qa-bugs(a)suse.de --- Comment #2 from Reinhard Max <max(a)suse.com> --- Not a bad guess, but that change is about the libraries that are being used to link libtcl itself. The problem here was that install-libraries-libdir.patch wasn't doing things properly or not being applied at all. I changed the package to install everything under %tcl_archdir (which expands to %_libdir/tcl), so that pkgIndex.tcl and the shared object it loads are next to each other again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207917] installation fails with static hostname (was: ip address)
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207917 https://bugzilla.suse.com/show_bug.cgi?id=1207917#c9 --- Comment #9 from Stefan Hundhammer <shundhammer(a)suse.com> --- So, to clarify: Changing one of those settings such as "static hostname" or "static IP" was just what triggered that other bug, the NoMethodError; because then it was necessary to write that configuration to disk. As for the Arecibo observatory, here is what I wrote one year ago about it: https://www.youtube.com/watch?v=3oBCtTv6yOw&lc=UgyGtoauVbeYeHlKo6R4AaABAg -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207978] VUL-0: CVE-2023-23944: nextcloud: user's passwordsstored in cleartext in the database during the duration of OAuth2 setup procedure
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207978 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207977] VUL-0: CVE-2023-23943: nextcloud: IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207977 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207976] VUL-0: CVE-2023-23942: nextcloud-desktop: missing sanitisation on qml labels leading to javascript injection
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207976 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207095] ASSERT [ArmCpuDxe] /home/abuild/rpmbuild/BUILD/edk2-edk2-stable202211/ArmPkg/Library/DefaultExceptionHandlerLib/AArch64/DefaultExceptionHandler.c(333): ((BOOLEAN)(0==1))
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207095 https://bugzilla.suse.com/show_bug.cgi?id=1207095#c11 --- Comment #11 from Joey Lee <jlee(a)suse.com> --- (In reply to Paolo Stivanin from comment #4) > I've tested the fix provided by Debian, and it works fine. > I've pushed an SR to ovmf: https://build.opensuse.org/request/show/1059503 I just pushed Paolo's patch to Virtualization/ovmf. It also created a submitreq to openSUSE:Factory/ovmf. Let's disable it currently. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207095] ASSERT [ArmCpuDxe] /home/abuild/rpmbuild/BUILD/edk2-edk2-stable202211/ArmPkg/Library/DefaultExceptionHandlerLib/AArch64/DefaultExceptionHandler.c(333): ((BOOLEAN)(0==1))
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207095 https://bugzilla.suse.com/show_bug.cgi?id=1207095#c10 --- Comment #10 from Joey Lee <jlee(a)suse.com> --- Thanks! (In reply to Gary Ching-Pang Lin from comment #8) > The edk2 commit message probably refers to this grub2 commit: > https://git.savannah.gnu.org/cgit/grub.git/commit/ > ?id=f826330683675f0deb55b58fd229afd7d65fb053 > > The commit has been in grub2 since 2.04, while the factory/tumbleweed is > using 2.06. Then it may stuck in other place. e.g. EFI stub. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207939] New: pulse audio server not starting
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207939 Bug ID: 1207939 Summary: pulse audio server not starting Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: toby(a)breckon.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Updated to latest TW as of today (kernel - 6.1.8-1-default). Pulseaudio has stopped working: toby@breckon[~] systemctl --user status pulseaudio.service � pulseaudio.service - Sound Service Loaded: loaded (/usr/lib/systemd/user/pulseaudio.service; disabled; preset: disabled) Active: failed (Result: exit-code) since Mon 2023-02-06 13:45:55 GMT; 4min 59s ago TriggeredBy: � pulseaudio.socket Process: 9619 ExecStart=/usr/bin/pulseaudio --daemonize=no --log-target=journal (code=exited, status=255/E> Main PID: 9619 (code=exited, status=255/EXCEPTION) CPU: 181ms Feb 06 13:45:55 breckon systemd[2490]: Failed to start Sound Service. Feb 06 13:45:55 breckon systemd[2490]: pulseaudio.service: Scheduled restart job, restart counter is at 5. Feb 06 13:45:55 breckon systemd[2490]: Stopped Sound Service. Feb 06 13:45:55 breckon systemd[2490]: pulseaudio.service: Start request repeated too quickly. Feb 06 13:45:55 breckon systemd[2490]: pulseaudio.service: Failed with result 'exit-code'. Feb 06 13:45:55 breckon systemd[2490]: Failed to start Sound Service. - same result on two different hosts with different sound h/w. T. -- You are receiving this mail because: You are on the CC list for the bug.

1 13

[Bug 1206953] New: zypper: Rephrasing needed of warning about locked dependencies
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1206953 Bug ID: 1206953 Summary: zypper: Rephrasing needed of warning about locked dependencies Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: m40636067(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In case you have locked a package (e.g. 'perl') and you install another package (e.g. 'nut') with dependency of 'perl' then you get this warning-message which need some rephrasing, especially first line: " Problem: the to be installed nut-2.7.4-150000.6.3.1.x86_64 requires 'usbutils', but this requirement cannot be provided not installable providers: usbutils-014-3.3.1.x86_64[openSUSE-Leap-15.4-1] usbutils-014-3.3.1.x86_64[repo-oss] Solution 1: remove lock to allow installation of perl-5.26.1-150300.17.3.1.x86_64[repo-sle-update] Solution 2: remove lock to allow installation of perl-5.26.1-150300.17.11.1.x86_64[repo-sle-update] Solution 3: remove lock to allow installation of perl-5.26.1-150300.17.3.1.x86_64[repo-oss] Solution 4: remove lock to allow installation of perl-5.26.1-150300.17.3.1.x86_64[openSUSE-Leap-15.4-1] Solution 5: do not install nut-2.7.4-150000.6.3.1.x86_64 Solution 6: break nut-2.7.4-150000.6.3.1.x86_64 by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/3/4/5/6/c/d/?] (c): " Absolutely not critical, but should be fixed next time you come around these code-lines anyway ;-) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1207971] New: VUL-0: CVE-2022-28923: caddy: an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs
by bugzilla_noreply＠suse.com 07 Feb '23

07 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207971 Bug ID: 1207971 Summary: VUL-0: CVE-2022-28923: caddy: an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/356318/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#2167571 Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs. https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redire… References: https://bugzilla.redhat.com/show_bug.cgi?id=2167571 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28923 https://www.cve.org/CVERecord?id=CVE-2022-28923 https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redire… -- You are receiving this mail because: You are on the CC list for the bug.

1 1