April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208069] Leap 15.5 & Gecko rolling plasma does not revive video from suspend?
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208069 https://bugzilla.suse.com/show_bug.cgi?id=1208069#c26 --- Comment #26 from Fritz Hudnut <non.space.1(a)gmail.com> --- So, today booted in Gecko MATE rolling, and this is the OS that is not reviving from suspend, tested that out again today. And it appears that I did also upgrade the kernel to 6.2 lp xxxx and that did not seem to help out with the issue. Ran a zypper and it hit a dependency on nvidia G06 xxxxx . . . which previously created problems in TW, and there I locked it out of the rotation. Possibly missed it over here in Gecko?? [CODE] uname -r 6.2.4-lp154.2.g0532a55-default [/CODE] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208069] Leap 15.5 & Gecko rolling plasma does not revive video from suspend?
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208069 https://bugzilla.suse.com/show_bug.cgi?id=1208069#c25 --- Comment #25 from Fritz Hudnut <non.space.1(a)gmail.com> --- Created attachment 866049 --> https://bugzilla.suse.com/attachment.cgi?id=866049&action=edit dmesg file from Gecko rolling on same machine -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208069] Leap 15.5 & Gecko rolling plasma does not revive video from suspend?
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208069 https://bugzilla.suse.com/show_bug.cgi?id=1208069#c24 --- Comment #24 from Fritz Hudnut <non.space.1(a)gmail.com> --- Created attachment 866048 --> https://bugzilla.suse.com/attachment.cgi?id=866048&action=edit hwinfo file from Gecko rolling, same machine -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200983] New: mouse & keyboard not available in X/plasma
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1200983 Bug ID: 1200983 Summary: mouse & keyboard not available in X/plasma Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: opensuse(a)mike.franken.de QA Contact: gfx-bugs(a)suse.de Found By: --- Blocker: --- Starting with a few Tumbleweed snapshots ago I always have the problem, that mouse and keyboard are not working in my X/plasma desktop. I always have to unplug und plug them in again. After that they work as expected. There are no obvious error messages, that could help me to solve this problem. -- You are receiving this mail because: You are on the CC list for the bug.

1 24

[Bug 1205802] VUL-0: CVE-2022-39346: nextcloud: Missing length validation of user displayname allows to generate an SQL error
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1205802 http://bugzilla.opensuse.org/show_bug.cgi?id=1205802#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1205802) was mentioned in https://build.opensuse.org/request/show/1076615 Backports:SLE-15-SP4 / nextcloud -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203190] New: VUL-1: CVE-2022-35931: nextcloud: Password Policy app could generate passwords that would be block
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1203190 Bug ID: 1203190 Summary: VUL-1: CVE-2022-35931: nextcloud: Password Policy app could generate passwords that would be block Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/341558/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-35931 Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator itself would block. Upgrade Nextcloud Server to 22.2.10, 23.0.7 or 24.0.3 to receive a patch for the issue in Password Policy. There are no known workarounds available. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35931 https://www.cve.org/CVERecord?id=CVE-2022-35931 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c… https://github.com/nextcloud/password_policy/pull/363 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1208462] NetworkManager, bridge reconnection fails
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208462 https://bugzilla.suse.com/show_bug.cgi?id=1208462#c8 --- Comment #8 from Episteme PROMENEUR <epistemepromeneur(a)free.fr> --- Created attachment 866041 --> https://bugzilla.suse.com/attachment.cgi?id=866041&action=edit new result of "sudo journalctl -b -u NetworkManager" -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209436] I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209436 https://bugzilla.suse.com/show_bug.cgi?id=1209436#c70 --- Comment #70 from Christian Kurtsiefer <christian.kurtsiefer(a)gmail.com> --- Thanks a lot - .55 kernel works great :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210024] New: LLVM 16: build issues with OpenShadingLanguage (that requires llvm < 16 for now)
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210024 Bug ID: 1210024 Summary: LLVM 16: build issues with OpenShadingLanguage (that requires llvm < 16 for now) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: hpj(a)urpla.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, while working on OpenShadingLanguage build issues, I noticed a dependency issue with the new clang-tools package. OSL cannot be compiled with LLVM 16 for now, therefore I forced the deps for TW to: BuildRequires: clang15-devel BuildRequires: llvm15-devel but build drags in clang-tools anyway, which in turn depends on clang16, rendering the clang15 containment ineffective. This results in strange errors like: > [ 34s] /usr/bin/llvm-as: /home/abuild/rpmbuild/BUILD/OpenShadingLanguage-1.12.10.0/build/src/liboslexec/llvm_ops_host_rs.s:13285:79: error: unterminated attribute group > [ 34s] attributes #0 = { alwaysinline mustprogress nofree nosync nounwind willreturn memory(none) uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" } > [ 34s] ^ requiring me to deliberately add a: #!BuildIgnore: clang-tools You will find this build here: https://build.opensuse.org/package/show/home:frispete:blender/OpenShadingLa… I do think, that the build ignore shouldn't be required here. A similar fix was required by: https://build.opensuse.org/package/show/home:frispete:blender/ispc -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207976] New: VUL-0: CVE-2023-23942: nextcloud-desktop: missing sanitisation on qml labels leading to javascript injection
by bugzilla_noreply＠suse.com 01 Apr '23

01 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207976 Bug ID: 1207976 Summary: VUL-0: CVE-2023-23942: nextcloud-desktop: missing sanitisation on qml labels leading to javascript injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/356329/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2023-23942 The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-23942 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6… https://www.cve.org/CVERecord?id=CVE-2023-23942 https://github.com/nextcloud/desktop/pull/5233 https://hackerone.com/reports/1788598 -- You are receiving this mail because: You are on the CC list for the bug.

1 1