February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1188023] GNOME:Apps/fractal: cargo-audit potential security issues
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1188023 https://bugzilla.suse.com/show_bug.cgi?id=1188023#c1 Alynx Zhou <alynx.zhou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou(a)suse.com --- Comment #1 from Alynx Zhou <alynx.zhou(a)suse.com> --- Sorry for this late reply but I think now we have newer version of fractal in Factory, maybe re-check it? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208590] New: VUL-0: CVE-2021-33367: freeimage: denial of service via a crafted JXR file
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208590 Bug ID: 1208590 Summary: VUL-0: CVE-2021-33367: freeimage: denial of service via a crafted JXR file Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/357959/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dimstar(a)opensuse.org Reporter: gabriele.sonnu(a)suse.com QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33367 https://bugzilla.redhat.com/show_bug.cgi?id=2172782 https://www.cve.org/CVERecord?id=CVE-2021-33367 http://www.cvedetails.com/cve/CVE-2021-33367/ https://sourceforge.net/p/freeimage/discussion/36109/thread/1a4db03d58/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1208571] New: installation interrupted by unexpected reboot
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208571 Bug ID: 1208571 Summary: installation interrupted by unexpected reboot Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: mrmazda(a)earthlink.net QA Contact: jsrain(a)suse.com CC: lubos.kocman(a)suse.com Found By: --- Blocker: --- Created attachment 865054 --> http://bugzilla.opensuse.org/attachment.cgi?id=865054&action=edit .tgz of the few logs found on installation target from try #3 Thrice today I started NET installs on a Core2 6600 by Grub loading linux and initrd earlier downloaded from mirror. All attempts aborted at various times, twice after package installation had been moving along, the first while in detailed package selection. The first was evidently a kernel failure of some sort because of blinking LEDs and self-rebooting. For the second and third I added nomce to the kernel cmdline. The second interruption simply put up the little red text window reporting non-descript failure. That one I tried to restart via the text window, but before reaching the YaST GUI it rebooted itself. For the last attempt I changed the PSU on account of other non-*SUSE installations only working with nomce on their linu lines. #3 got the remaining package count down below 70 when I last looked before looking again to find it in POST. The target when checked had nothing in /var/log/YaST2/. Last line in /var/log/zypp/history was install dracut after install fonts-config. /boot/ had multiple expected files, but no initrd. All attempts selected booting "Not Managed", "Generic Desktop", use existing partitions, and used detailed package selection with use recommends deselected. PC has a few dozen existing installations, some of which I boot via nomce, but not including 15.4 or TW, which seem to work just fine without it. Among the others: Mageia 9 beta, Fedora 36, 37, 38 alpha, Debian 10, 11, 12, and all stable openSUSE releases following 11.3 except for 15.2. System: Host: hp945 Kernel: 3.12.67-64-desktop arch: x86_64 bits: 64 compiler: gcc v: 4.8.1 parameters: showopts root=LABEL=s131p08h8s ipv6.disable=1 noresume consoleblank=0 vga=791 video=1440x900@60 3 Console: pty pts/0 (vt 2) Distro: openSUSE 13.1 (Bottle) Machine: Type: Desktop System: HP-Pavilion product: RX900AA-ABA a6010n v: N/A serial: <filter> Chassis: Hewlett-Packard type: 3 v: 1111 serial: N/A Mobo: ASUSTek model: LEONITE v: 5.00 serial: <filter> BIOS: Phoenix v: 5.10 date: 01/30/2007 CPU: Info: dual core Intel Core2 6600 [MCP] arch: Core2 Merom speed (MHz): avg: 1600 min/max: 1600/2400 Graphics: Device-1: NVIDIA GT218 [GeForce 210] vendor: eVga.com. driver: nouveau v: kernel alternate: nvidiafb non-free: series: 340.xx status: legacy (EOL) last: release: 340.108 kernel: 5.4 xorg: 1.20 arch: Tesla process: 40-80nm built: 2006-13 ports: active: DVI-I-1,HDMI-A-1 empty: VGA-1 bus-ID: 01:00.0 chip-ID: 10de:0a65 class-ID: 0300 temp: 68.0 C Display: server: X.org driver: X: loaded: modesetting unloaded: fbdev,vesa dri: nouveau gpu: i915,nouveau tty: 180x56 resolution: 1: 1920x1200 2: 1680x1050 API: OpenGL Message: GL data unavailable in console and glxinfo missing. Network: Device-1: Intel NM10/ICH7 Family LAN vendor: Hewlett-Packard driver: e100 v: 3.5.24-k2-NAPI port: de00 bus-ID: 02:08.0 chip-ID: 8086:27dc class-ID: 0200 Drives: Local Storage: total: 465.76 GiB used: 29.68 GiB (6.4%) Info: Processes: 136 Uptime: 0h 9m wakeups: 0 Memory: 2.94 GiB used: 232.5 MiB (7.7%) Init: systemd v: 210 target: multi-user (3) default: multi-user tool: systemctl Compilers: gcc: N/A Packages: pm: rpm pkgs: N/A note: see --rpm tools: yast,zypper Shell: Bash v: 4.2.53 running-in: pty pts/0 (vt 2) inxi: 3.3.25 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1207851] New: tesseract-ocr-traineddata in repo Publishing is no longer built
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207851 Bug ID: 1207851 Summary: tesseract-ocr-traineddata in repo Publishing is no longer built Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ecsos(a)schirra.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Since last change the package tesseract-ocr-traineddata in repo Publishing is no longer build. No build for Leap and also no build for Tumbleweed. Please revert or fix the last change. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1175627] When kdeconnect-kde package is installed, automatically allow its services through the firewall
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1175627 https://bugzilla.suse.com/show_bug.cgi?id=1175627#c12 --- Comment #12 from Fabian Vogt <fvogt(a)suse.com> --- Ping. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208157] Support Bluetooth devices in SDDM.
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208157 https://bugzilla.suse.com/show_bug.cgi?id=1208157#c7 --- Comment #7 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Joey Lee from comment #5) > Hi roke, > > (In reply to roke beedell from comment #4) > > Yes, that remediates it! Consider that to be the focus of this bug report, > > then. I am very thankful. > > I have tested bluez-5.62-1.2.x86_64 and bluez-5.66-1.4.x86_64, both of them > works to me for using bluetooth keyboard on gnome SDDM "gnome SDDM"? Do you mean GDM? It's possible that GDM tries to do bluetooth handling itself, which other DMs do not do. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208167] AppArmor parser error for /etc/apparmor.d in profile /etc/apparmor.d/usr.bin.lxc-start at line 4: Could not open 'abstractions/lxc/start-container'
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208167 https://bugzilla.suse.com/show_bug.cgi?id=1208167#c2 Dan ��erm��k <dcermak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |asarai(a)suse.com, | |dcermak(a)suse.com Assignee|containers-bugowner(a)suse.de |asarai(a)suse.com Flags| |needinfo?(asarai(a)suse.com) --- Comment #2 from Dan ��erm��k <dcermak(a)suse.com> --- (In reply to Takashi Tamura from comment #1) > Reported at https://build.opensuse.org/request/show/1066437 I don't think that this is the correct fix. Imho if the apparmor profiles are required for the main application, then they should be included in the main package. lxc needn't depend on the full liblxc package just for the apparmor profiles. WDYT Aleksa? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208369] New: New "lo" connection
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208369 Bug ID: 1208369 Summary: New "lo" connection Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: epistemepromeneur(a)free.fr QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 864924 --> http://bugzilla.opensuse.org/attachment.cgi?id=864924&action=edit the new "lo" connection Yesterday 2023/02/15 there was a tumbleweed update, in particular zn update of "NetworkManager" In the list of the connection it appeared an new connection "lo". See the attachment. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1207562] U-Boot: Raspberry Pi 4 booting from USB stopped booting
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207562 https://bugzilla.suse.com/show_bug.cgi?id=1207562#c47 Guillaume GARDET <guillaume.gardet(a)arm.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #47 from Guillaume GARDET <guillaume.gardet(a)arm.com> --- This should be fixed with Tumbleweed snapshot 20220221. Please re-open, if not. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208157] Support Bluetooth devices in SDDM.
by bugzilla_noreply＠suse.com 23 Feb '23

23 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208157 https://bugzilla.suse.com/show_bug.cgi?id=1208157#c6 --- Comment #6 from Joey Lee <jlee(a)suse.com> --- (In reply to roke beedell from comment #4) > Yes, that remediates it! Consider that to be the focus of this bug report, > then. I am very thankful. Sorry for I forgot one thing. If you want /etc/bluetooth/main.conf, please use zypper to install bluz-auto-enable-devices package. The package includes main.conf and also has post scripts for enable bluetoothd by systemctl. -- You are receiving this mail because: You are on the CC list for the bug.

1 0