July 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1213803] New: VUL-0: chromium: multiple security issues fixed in 111.0.5563.64
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213803 Bug ID: 1213803 Summary: VUL-0: chromium: multiple security issues fixed in 111.0.5563.64 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-des… CVE-2023-1213: Use after free in Swiftshader. CVE-2023-1214: Type Confusion in V8. CVE-2023-1215: Type Confusion in CSS. CVE-2023-1216: Use after free in DevTools. CVE-2023-1217: Stack buffer overflow in Crash reporting. CVE-2023-1218: Use after free in WebRTC. CVE-2023-1219: Heap buffer overflow in Metrics. CVE-2023-1220: Heap buffer overflow in UMA. CVE-2023-1221: Insufficient policy enforcement in Extensions API. CVE-2023-1222: Heap buffer overflow in Web Audio API. CVE-2023-1223: Insufficient policy enforcement in Autofill. CVE-2023-1224: Insufficient policy enforcement in Web Payments API. CVE-2023-1225: Insufficient policy enforcement in Navigation. CVE-2023-1226: Insufficient policy enforcement in Web Payments API. CVE-2023-1227: Use after free in Core. CVE-2023-1228: Insufficient policy enforcement in Intents. CVE-2023-1229: Inappropriate implementation in Permission prompts. CVE-2023-1230: Inappropriate implementation in WebApp Installs. CVE-2023-1231: Inappropriate implementation in Autofill. CVE-2023-2314: Insufficient data validation in DevTools. CVE-2023-1232: Insufficient policy enforcement in CVE-2023-1233: Insufficient policy enforcement in CVE-2023-1234: Inappropriate implementation in Intents. CVE-2023-1235: Type Confusion in DevTools. CVE-2023-1236: Inappropriate implementation in Internals. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213802] New: VUL-0: chromium: multiple security issues fixed in 97.0.4692.71
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213802 Bug ID: 1213802 Summary: VUL-0: chromium: multiple security issues fixed in 97.0.4692.71 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-des… CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks. CVE-2022-0337: Inappropriate implementation in File System API. CVE-2022-0102: Type Confusion in V8 . CVE-2022-0103: Use after free in SwiftShader. CVE-2022-4924: Use after free in WebRTC. CVE-2022-0104: Heap buffer overflow in ANGLE. CVE-2022-0105: Use after free in PDF. CVE-2022-0106: Use after free in Autofill. CVE-2022-0107: Use after free in File Manager API. CVE-2022-0108: Inappropriate implementation in Navigation. CVE-2022-0109: Inappropriate implementation in Autofill. CVE-2022-0110: Incorrect security UI in Autofill. CVE-2022-0111: Inappropriate implementation in Navigation. CVE-2022-0112: Incorrect security UI in Browser UI. CVE-2022-0113: Inappropriate implementation in Blink. CVE-2022-0114: Out of bounds memory access in Web Serial. CVE-2022-0115: Uninitialized Use in File API. CVE-2022-0116: Inappropriate implementation in Compositing. CVE-2022-0117: Policy bypass in Service Workers. CVE-2022-0118: Inappropriate implementation in WebShare. CVE-2022-0120: Inappropriate implementation in Passwords. CVE-2022-4925: Insufficient validation of untrusted input in QUIC. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213800] New: VUL-0: chromium: multiple security issues fixed in 96.0.4664.45
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213800 Bug ID: 1213800 Summary: VUL-0: chromium: multiple security issues fixed in 96.0.4664.45 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-des… CVE-2021-38008: Use after free in media. CVE-2021-38009: Inappropriate implementation in cache. CVE-2021-38006: Use after free in storage foundation. CVE-2021-38007: Type Confusion in V8. CVE-2021-38005: Use after free in loader. CVE-2021-38010: Inappropriate implementation in service workers. CVE-2021-38011: Use after free in storage foundation. CVE-2021-38012: Type Confusion in V8. CVE-2021-38013: Heap buffer overflow in fingerprint recognition. CVE-2021-38014: Out of bounds write in Swiftshader. CVE-2021-38015: Inappropriate implementation in input. CVE-2021-38016: Insufficient policy enforcement in background fetch. CVE-2021-38017: Insufficient policy enforcement in iframe sandbox. CVE-2021-38018: Inappropriate implementation in navigation. CVE-2021-38019: Insufficient policy enforcement in CORS. CVE-2021-38020: Insufficient policy enforcement in contacts picker. CVE-2021-38021: Inappropriate implementation in referrer. CVE-2021-4316: Inappropriate implementation in Cast UI. CVE-2021-38022: Inappropriate implementation in WebAuthentication. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213693] Black Screen during boot of kernel 6.4.x
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213693 https://bugzilla.suse.com/show_bug.cgi?id=1213693#c21 --- Comment #21 from Takashi Iwai <tiwai(a)suse.com> --- Thanks for confirmation. As the revert seems to be the only valid workaround as of now, I sent a PR to revert it for TW stable git branch. Please join to the upstream gitlab issues in comment 14, report there that the problem still persists (and the revert still works), and watch out the upstream development. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213795] New: Automatic mounting of drives not working
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213795 Bug ID: 1213795 Summary: Automatic mounting of drives not working Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: stephan(a)secunix.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868522 --> https://bugzilla.suse.com/attachment.cgi?id=868522&action=edit Mount settings I have an internal drive (not OS), which is encrypted with LUKS2 and formatted with btrfs. Normally in other distributions I just use the GNOME disks app and setup the disk so that it automatically unlocks and mounts on bootup (OS is FDE, so that is fine from a security perspective). However, on Aeon only unlocking works, but not automatic mounting. I have attached a screenshot of the mount configuration. After bootup I can mount it manually (by clicking in nautilus), but it's not automatically mounted. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213709] Gerbera service refuses to start
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213709 https://bugzilla.suse.com/show_bug.cgi?id=1213709#c3 Paolo Stivanin <pstivanin(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(daniel.fasko@gmai | |l.com) | --- Comment #3 from Paolo Stivanin <pstivanin(a)suse.com> --- I've just installed a fresh 15.5 system on a VM, added the multimedia repo and can confirm that I face the same issue. On Tumbleweed it works fine though. The issue is present only in Leap. Will dig into it -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213491] Realtek ethernet adpater stops working after update to 6.4.2 and 6.4.3
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213491 https://bugzilla.suse.com/show_bug.cgi?id=1213491#c20 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #20 from Takashi Iwai <tiwai(a)suse.com> --- OK, let's close now. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213780] KDE Discover doesn't come include Updates KCM as dependency.
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213780 https://bugzilla.suse.com/show_bug.cgi?id=1213780#c9 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com --- Comment #9 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Nathaniel Graham from comment #8) > The only real difference would be > the reliability and UX presented by their respective the front-ends. Exactly... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213787] Plasma desktop is entirely grey with 64+GB of RAM
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213787 https://bugzilla.suse.com/show_bug.cgi?id=1213787#c1 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com Component|KDE Workspace (Plasma) |Kernel Assignee|opensuse-kde-bugs@opensuse. |kernel-bugs(a)opensuse.org |org | --- Comment #1 from Fabian Vogt <fvogt(a)suse.com> --- Sounds like some resource conflicts with the graphics driver. Reassigning to kernel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213560] update failed
by bugzilla_noreply＠suse.com 31 Jul '23

31 Jul '23

https://bugzilla.suse.com/show_bug.cgi?id=1213560 Steve Kowalik <steven.kowalik(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|python-maintainers(a)suse.com |steven.kowalik(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0