October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 Wolfgang Rosenauer <wolfgang(a)rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P1 - Urgent -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 https://bugzilla.suse.com/show_bug.cgi?id=1232567#c2 --- Comment #2 from Wolfgang Rosenauer <wolfgang(a)rosenauer.org> --- Interestingly some download actions seem to work correctly. Not exactly sure what the differences are. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232566] VUL-0: chromium: 130.0.6723.91 stable release
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232566 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232489] YaST NTP Configuration generates improper Transmit Timestamp values in tcpdump
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232489 https://bugzilla.suse.com/show_bug.cgi?id=1232489#c5 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast2-maintainers(a)suse.de |max(a)suse.com QA Contact|jsrain(a)suse.com |qa-bugs(a)suse.de CC| |mpluskal(a)suse.com Component|YaST2 |Network --- Comment #5 from Stefan Hundhammer <shundhammer(a)suse.com> --- So this is very likely not a problem at all. But maybe the chrony maintainer are still interested. % osc maintainer -e chrony Defined in package: network:time/chrony bugowner of chrony : max(a)suse.com maintainer of chrony : max(a)suse.com, mpluskal(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225932] New: Authentication failure for non-privileged user in "Software updates"
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1225932 Bug ID: 1225932 Summary: Authentication failure for non-privileged user in "Software updates" Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Cockpit Assignee: Cockpit-bugs(a)suse.de Reporter: robert.simai(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 875298 --> https://bugzilla.suse.com/attachment.cgi?id=875298&action=edit Cockpit message Logged into Cockpit (309) on Tumbleweed as non-privileged user "robert", clicked the "Software updates" and got the attached message on screen and the following in the journal: sudo[5258]: robert : 3 incorrect password attempts ; PWD=/ ; USER=root ; COMMAND=/usr/bin/cockpit-bridge --privileged Something similar happens when I click the "Check for updates" from the Software updates module, the journal message then is sudo[5856]: pam_unix(sudo:auth): authentication failure; logname=robert uid=1000 euid=0 tty= ruser=robert rhost= user=root sudo[5856]: robert : 3 incorrect password attempts ; PWD=/ ; USER=root ; COMMAND=/usr/bin/cockpit-bridge --privileged I'm not sure why refreshing the updates requires sudo as a regular user could successfully run "zypper lu" as well. But if it does, we could at least come up with a clearer message "switch to administrative access first" or such. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232570] New: Adapt the openssl-ibmca package for the openssl-1_1 removal
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232570 Bug ID: 1232570 Summary: Adapt the openssl-ibmca package for the openssl-1_1 removal Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: pmonrealgonzalez(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- We are working to fully remove openssl-1_1 from Factory and SLE16 but there are some packages that still require it. At this moment, only python2.7 that is required by gimp and openssl-ibmca still depend on openssl-1_1: For python2.7, it will be removed as soon as gimp 3.0 is out which expected to be released in November 23. For openssl-ibmca, we need to remove openssl-1_1 from _multibuild and only have it building against openssl-3. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 https://bugzilla.suse.com/show_bug.cgi?id=1232567#c1 Wolfgang Rosenauer <wolfgang(a)rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |wolfgang(a)rosenauer.org --- Comment #1 from Wolfgang Rosenauer <wolfgang(a)rosenauer.org> --- Can confirm :-( Will look into it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230552] VUL-0: CVE-2024-45770: pcp: `pmpost` symlink attack allows escalating `pcp` to `root` user
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230552 https://bugzilla.suse.com/show_bug.cgi?id=1230552#c13 --- Comment #13 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3785-1: An update that solves three vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243785-1 Category: security (important) Bug References: 1217826, 1222815, 1230551, 1230552, 1231345 CVE References: CVE-2023-6917, CVE-2024-45769, CVE-2024-45770 Jira References: PED-8192, PED-8389 Maintenance Incident: [SUSE:Maintenance:35852](https://smelt.suse.de/incident/35852/) Sources used: openSUSE Leap 15.5 (src): pcp-6.2.0-150500.8.6.1 Development Tools Module 15-SP5 (src): pcp-6.2.0-150500.8.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222815] New: Performance CoPilot 6 is not starting due to missing pmlogger_daily.timer
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1222815 Bug ID: 1222815 Summary: Performance CoPilot 6 is not starting due to missing pmlogger_daily.timer Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- just installing pcp and pmlogger leads to: # systemctl start pmlogger Failed to start pmlogger.service: Unit pmlogger_daily.timer not found. this unit is currently in pcp-zeroconf. however pmlogger.service is in pcp (main package). if zeroconf is supposed to be optional, then the pmlogger_daily.timer dependency is supposed to be made optional. otherwise the timer needs to be moved into the main package (like it appears to be upstream) -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1230551] VUL-0: CVE-2024-45769: pcp: `pmcd` heap corruption through metric pmstore operations
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230551 https://bugzilla.suse.com/show_bug.cgi?id=1230551#c17 --- Comment #17 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3785-1: An update that solves three vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243785-1 Category: security (important) Bug References: 1217826, 1222815, 1230551, 1230552, 1231345 CVE References: CVE-2023-6917, CVE-2024-45769, CVE-2024-45770 Jira References: PED-8192, PED-8389 Maintenance Incident: [SUSE:Maintenance:35852](https://smelt.suse.de/incident/35852/) Sources used: openSUSE Leap 15.5 (src): pcp-6.2.0-150500.8.6.1 Development Tools Module 15-SP5 (src): pcp-6.2.0-150500.8.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0