February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207177] SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207177 https://bugzilla.suse.com/show_bug.cgi?id=1207177#c15 Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED Flags|needinfo?(varkoly(a)suse.com) | --- Comment #15 from Hu <cathy.hu(a)suse.com> --- Thanks for the fix, tested it and it is working now. Closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206996] Named with samba-dlz: core dump when windows 10 PC starts or wakes up;
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1206996 https://bugzilla.suse.com/show_bug.cgi?id=1206996#c5 Samuel Cabrero <scabrero(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #5 from Samuel Cabrero <scabrero(a)suse.com> --- Fix released with 4.17.5. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208220] New: Remove unneeded libnsl build requires
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208220 Bug ID: 1208220 Summary: Remove unneeded libnsl build requires Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Samba Assignee: samba-maintainers(a)SuSE.de Reporter: kukuk(a)suse.com QA Contact: samba-maintainers(a)SuSE.de Found By: --- Blocker: --- Samba has a BuildRequires for libnsl-devel, which is not needed and not used. Please remove this BuildRequires, as we don't want to maintain deprecated legacy software in ALP, especially not if it is not used. And please check for other obsolete (Build)Requires, too. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1205680] qemu: don't recommend packages with excessive deps
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1205680 https://bugzilla.suse.com/show_bug.cgi?id=1205680#c1 Marina Latini <marina.latini(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |marina.latini(a)suse.com --- Comment #1 from Marina Latini <marina.latini(a)suse.com> --- The following is one more example of excessive dependencies pulled in by qemu. On Leap 14.4 (used just via ssh) an update of build, due to qemu, will pull: --------------- The following package is going to be upgraded: build The following 243 NEW packages are going to be installed: adwaita-icon-theme atk-lang at-spi2-atk-common at-spi2-atk-gtk2 at-spi2-core at-spi2-core-lang bsdtar bubblewrap build-mkdrpms desktop-translations enchant-2-backend-hunspell enchant-data fakeroot fuse3 gcr-data gcr-lang gcr-prompter gcr-ssh-agent gcr-viewer gdk-pixbuf-lang gdk-pixbuf-loader-rsvg gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer gnome-online-accounts gnome-online-accounts-lang gptfdisk gstreamer gstreamer-lang gstreamer-plugins-base gstreamer-plugins-base-lang gtk2-branding-openSUSE gtk2-data gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-tigrigna gtk2-immodule-vietnamese gtk2-lang gtk2-metatheme-adwaita gtk2-theming-engine-adwaita gtk2-tools gtk3-branding-openSUSE gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-lang gtk3-metatheme-adwaita gtk3-schema gtk3-tools gvfs gvfs-backends gvfs-backend-samba gvfs-fuse gvfs-lang json-glib-lang kvm_stat libaom3 libarchive13 libatasmart4 libatasmart-utils libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 libavif13 libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev libblockdev2 libbluray2 libbytesize1 libbytesize-lang libcacard0 libcdda_interface0 libcdda_paranoia0 libcdio16 libcdio19 libcdio_cdda2 libcdio_paranoia2 libcolord2 libdav1d5 libefa1 libenchant-2-2 libepoxy0 libevdev2 libexif12 libfdt1 libfmt8 libfuse3-3 libgbm1 libgck-1-0 libgcr-3-1 libgd3 libgdata22 libgdata-lang libgdk_pixbuf-2_0-0 libgoa-1_0-0 libgoa-backend-1_0-1 libgphoto2-6 libgphoto2-6-lang libgraphene-1_0-0 libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstreamer-1_0-0 libgstriff-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 libgtk-2_0-0 libgtk-3-0 libgudev-1_0-0 libharfbuzz-icu0 libhyphen0 libibverbs libibverbs1 libinih0 libjavascriptcoregtk-4_0-18 libjson-glib-1_0-0 liblockdev1 libltdl7 liblttng-ust0 liblvm2cmd2_03 liblzo2-2 libmanette-0_2-0 libmlx4-1 libmlx5-1 libmtp9 libmtp-udev libndctl6 libnfs8 liboauth0 libogg0 libopus0 liborc-0_4-0 libpmem1 librados2 librav1e0 librbd1 librdmacm1 librest-0_7-0 librsvg-2-2 libsecret-1-0 libsecret-lang libslirp0 libsnappy1 libsoup-2_4-1 libsoup2-lang libspice-server1 libtheoradec1 libtheoraenc1 libudisks2-0 libudisks2-0_btrfs libunwind libusbredirparser1 libvdeplug3 libvirglrenderer1 libvisual libvorbis0 libvorbisenc2 libvte-2_91-0 libwayland-client0 libwayland-cursor0 libwayland-egl1 libwayland-server0 libwebkit2gtk3-lang libwebkit2gtk-4_0-37 libwoff2common1_0_2 libwoff2dec1_0_2 libwpe-1_0-1 libWPEBackend-fdo-1_0-1 libX11-xcb1 libXcomposite1 libXcursor1 libXdamage1 libXfixes3 libXi6 libXinerama1 libxkbcommon0 libXrandr2 libXtst6 libXv1 lockdev lvm2 metatheme-adwaita-common openssh-askpass-gnome ovmf perl-Config-IniFiles perl-IO-stringy perl-YAML-LibYAML pmdk qemu qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-rbd qemu-chardev-spice qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-linux-user qemu-microvm qemu-ovmf-x86_64 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 rdma-core rdma-ndd rpmdevtools system-user-qemu udisks2 udisks2-lang vte-lang webkit2gtk-4_0-injected-bundles xdg-dbus-proxy xfsprogs xkeyboard-config xkeyboard-config-lang 1 package to upgrade, 243 new. --------------- with build as: -------- Information for package build: ------------------------------ Repository : Update repository with updates from SUSE Linux Enterprise 15 Name : build Version : 20230215-150200.15.1 Arch : noarch Vendor : SUSE LLC <https://www.suse.com/> Installed Size : 2.7 MiB Installed : Yes (automatically) Status : out-of-date (version 20220613-150200.12.1 installed) Source package : build-20230215-150200.15.1.src -------- and qemu: --------- Information for package qemu: ----------------------------- Repository : Update repository with updates from SUSE Linux Enterprise 15 Name : qemu Version : 6.2.0-150400.37.8.2 Arch : x86_64 Vendor : SUSE LLC <https://www.suse.com/> Installed Size : 14.2 MiB Installed : No Status : not installed Source package : qemu-6.2.0-150400.37.8.2.src --------- -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208547] Alternatives error in python310-docutils-0.19-3.2.noarch.rpm
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208547 https://bugzilla.suse.com/show_bug.cgi?id=1208547#c1 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Installation |Other Assignee|yast2-maintainers(a)suse.de |adrian.schroeter(a)suse.com QA Contact|jsrain(a)suse.com |qa-bugs(a)suse.de --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- This is clearly not a problem of the installer; even more so since you didn not even use it. You used "zypper dup", so there is a slim chance that it might be a zypp problem (Bugzilla component libzypp). But much more likely, this is a problem of the affected packages; either update-alternatives (not very likely) or python3. % osc maintainer -e python3 Defined in project: SUSE:SLE-15-SP3:Update bugowner of python3 : - maintainer of python3 : adrian.schroeter(a)suse.com, ro(a)suse.de, - -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205680] qemu: don't recommend packages with excessive deps
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1205680 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208492] [Build 20230219] yast2-security: augeas serialization error
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208492 https://bugzilla.suse.com/show_bug.cgi?id=1208492#c8 --- Comment #8 from Michal Filka <mfilka(a)suse.com> --- I'll try to come with some patch. Keeping it in needinfo until then. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208560] New: VUL-0: CVE-2022-31394: spotifyd: hyper: max header list size not settable allowing deny of service
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208560 Bug ID: 1208560 Summary: VUL-0: CVE-2022-31394: spotifyd: hyper: max header list size not settable allowing deny of service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/357841/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: matthias(a)mailaender.name Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de CC: security-team(a)suse.de Blocks: 1208551 Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1208551 +++ CVE-2022-31394 Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-31394 https://www.cve.org/CVERecord?id=CVE-2022-31394 https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19 https://github.com/hyperium/hyper/issues/2826 https://github.com/hyperium/hyper/pull/2828 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1208561] New: VUL-0: CVE-2022-31394: tectonic: hyper: max header list size not settable allowing deny of service
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208561 Bug ID: 1208561 Summary: VUL-0: CVE-2022-31394: tectonic: hyper: max header list size not settable allowing deny of service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/357841/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: socvirnyl.estela(a)gmail.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1208551 Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1208551 +++ CVE-2022-31394 Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-31394 https://www.cve.org/CVERecord?id=CVE-2022-31394 https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19 https://github.com/hyperium/hyper/issues/2826 https://github.com/hyperium/hyper/pull/2828 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1208558] New: VUL-0: CVE-2022-31394: gnome-podcasts: hyper: max header list size not settable allowing deny of service
by bugzilla_noreply＠suse.com 22 Feb '23

22 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208558 Bug ID: 1208558 Summary: VUL-0: CVE-2022-31394: gnome-podcasts: hyper: max header list size not settable allowing deny of service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/357841/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: os.gnome.maintainers(a)gmail.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de CC: security-team(a)suse.de Blocks: 1208551 Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1208551 +++ CVE-2022-31394 Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-31394 https://www.cve.org/CVERecord?id=CVE-2022-31394 https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19 https://github.com/hyperium/hyper/issues/2826 https://github.com/hyperium/hyper/pull/2828 -- You are receiving this mail because: You are on the CC list for the bug.

1 2