April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1210220] Amarok Crashes on Startup - Tumbleweed 20230404
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210220 https://bugzilla.suse.com/show_bug.cgi?id=1210220#c1 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cygnix(a)protonmail.com, | |fvogt(a)suse.com Flags| |needinfo?(cygnix@protonmail | |.com) --- Comment #1 from Fabian Vogt <fvogt(a)suse.com> --- Please install amarok-debuginfo for more information in the backtrace. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208992] VUL-1: CVE-2022-45142: libheimdal: samba fix for CVE-2022-3437 introduced a logic inversion
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208992 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED CC| |dimstar(a)opensuse.org -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c10 --- Comment #10 from Tom de Vries <tdevries(a)suse.com> --- Created attachment 866178 --> https://bugzilla.suse.com/attachment.cgi?id=866178&action=edit Xorg.1.log.gz (In reply to Stefan Dirsch from comment #9) > Thanks. Would be interesting to see whether X fiddles also with the nvidia > GPU. For this please attach also your X logfile. I think for KDE you find > this in ~/.local/share/xorg, but could also be in /var/log. Or somewhere > hideen in journalctl output (sddm process). Fabian will know. The external GPU is currently not connected, I just mentioned it because it explains why I'm having the i915.force_probe=46aa. Anyway, here's the X logfile from ~/.local/share/xorg. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205667] New: VUL-0: CVE-2021-44758: heimdal -- security update
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1205667 Bug ID: 1205667 Summary: VUL-0: CVE-2021-44758: heimdal -- security update Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/348699/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- openSUSE:Backports and openSUSE:Factory only. CVE-2021-44758 Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. CVE-2021-3671 Joseph Sutton discovered that the Heimdal KDC does not validate that the server name in the TGS-REQ is present before dereferencing, which may result in denial of service. CVE-2021-44758 It was discovered that Heimdal is prone to a NULL dereference in acceptors where an initial SPNEGO token that has no acceptable mechanisms, which may result in denial of service for a server application that uses SPNEGO. CVE-2022-3437 Several buffer overflow flaws and non-constant time leaks were discovered when using 1DES, 3DES or RC4 (arcfour). CVE-2022-41916 An out-of-bounds memory access was discovered when Heimdal normalizes Unicode, which may result in denial of service. CVE-2022-42898 It was discovered that integer overflows in PAC parsing may result in denial of service for Heimdal KDCs or possibly Heimdal servers. CVE-2022-44640 It was discovered that the Heimdal's ASN.1 compiler generates code that allows specially crafted DER encodings to invoke an invalid free on the decoded structure upon decode error, which may result in remote code execution in the Heimdal KDC. For the stable distribution (bullseye), these problems have been fixed in version 7.7.0+dfsg-2+deb11u2. We recommend that you upgrade your heimdal packages. For the detailed security status of heimdal please refer to its security tracker page at: https://security-tracker.debian.org/tracker/heimdal References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44758 https://security-tracker.debian.org/tracker/DSA-5287-1 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996586 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c9 --- Comment #9 from Stefan Dirsch <sndirsch(a)suse.com> --- Thanks. Would be interesting to see whether X fiddles also with the nvidia GPU. For this please attach also your X logfile. I think for KDE you find this in ~/.local/share/xorg, but could also be in /var/log. Or somewhere hideen in journalctl output (sddm process). Fabian will know. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209924] New: /usr/lib/os-release contains BUG_REPORT_URL="https:/bugs.opensuse.org" which redirects to en.opensuse.org instead of bugzilla.opensuse.org
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209924 Bug ID: 1209924 Summary: /usr/lib/os-release contains BUG_REPORT_URL="https:/bugs.opensuse.org" which redirects to en.opensuse.org instead of bugzilla.opensuse.org Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: NetWare 6.5 Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: mrmazda(a)earthlink.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Original Summary: /usr/lib/os-release contains BUG_REPORT_URL="https:/bugs.opensuse.org" which redirects to en.opensuse.org instead of bugzilla.opensuse.org Actual line item in /etc/os-release: BUG_REPORT_URL="https://bugs.opensuse.org/" causes redirect to https://en.opensuse.org/openSUSE:Submitting_bug_reports Expected line item in /etc/os-release: BUG_REPORT_URL="https://bugzilla.opensuse.org/" which goes directly to the bug tracker itself If the intent of the string is to provide instructions for filing bug reports rather than going directly to the official bug tracker, then BUG_REPORT_URL= should be replaced with some alternative string that confers an intent to provide bug reporting instructions. https://web.archive.org/web/20230314225146/www.linux.org/docs/man5/os-relea… [quote] SUPPORT_URL= should refer to the main support page for the operating system, if there is any. This is primarily intended for operating systems which vendors provide support for. BUG_REPORT_URL= should refer to the main bug reporting page for the operating system, if there is any. This is primarily intended for operating systems that rely on community QA. [/quote] SUPPORT_URL= does not exist in current os-release. Maybe it should contain: https://en.opensuse.org/openSUSE:Submitting_bug_reports so that BUG_REPORT_URL= can mean what it says and direct to: https://bugzilla.opensuse.org/ -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c8 --- Comment #8 from Tom de Vries <tdevries(a)suse.com> --- (In reply to Stefan Dirsch from comment #7) > Maybe it's obvious for Fabian, but for me it's not. Could you check whether > you're using x11 or wayland, please? > > echo $XDG_SESSION_TYPE > > should tell you this. Sure: ... $ echo $XDG_SESSION_TYPE x11 $ ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c7 --- Comment #7 from Stefan Dirsch <sndirsch(a)suse.com> --- Maybe it's obvious for Fabian, but for me it's not. Could you check whether you're using x11 or wayland, please? echo $XDG_SESSION_TYPE should tell you this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |patrik.jakobsson(a)suse.com, | |tiwai(a)suse.com, | |tzimmermann(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210126] VUL-0: chromium: multiple security issues fixed in 112.0.5615.49
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210126 https://bugzilla.suse.com/show_bug.cgi?id=1210126#c6 --- Comment #6 from Callum Farmer <gmbr3(a)opensuse.org> --- (In reply to Andreas Stieger from comment #5) > Can��t figure out the Leap failures at all Looks like the supposed missing header is marked as iOS only, why this breaks only on Leap I have no idea. Need to investigate further as moving it back just triggers a file collision error due to target duplication so I still can't be certain this is actually the reason. -- You are receiving this mail because: You are on the CC list for the bug.

1 0