October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1232650] Lenovo Yoga Pro 7 14ASP9 fails to wake up from suspend mode
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232650 https://bugzilla.suse.com/show_bug.cgi?id=1232650#c5 --- Comment #5 from Takashi Iwai <tiwai(a)suse.com> --- Thanks. Then it's a regression between 6.10 and 6.11, and the latest upstream still suffers. BTW, could you upload the dmesg and hwinfo outputs from 6.10, 6.11 and 6.12 to this Bugzilla (use attachments)? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232648] [tw][selinux][wireguard] serial-getty@hvc0.service: Deactivated after wireguard tests and caused openQA test fail
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232648 https://bugzilla.suse.com/show_bug.cgi?id=1232648#c4 --- Comment #4 from Cathy Hu <cathy.hu(a)suse.com> --- i did a run with setenforce 0 and semodule -DB in permissive mode: https://openqa.opensuse.org/tests/4608316# https://openqa.opensuse.org/tests/4608315# so it is probably a policy issue -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232496] [SELinux] sl micro 5.5 has enforcing=1 in grub config, so /etc/selinux/config is ignored
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232496 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |jsegitz(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232496] [SELinux] sl micro 5.5 has enforcing=1 in grub config, so /etc/selinux/config is ignored
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232496 https://bugzilla.suse.com/show_bug.cgi?id=1232496#c2 --- Comment #2 from Cathy Hu <cathy.hu(a)suse.com> --- i think its also in factory when installing via pattern -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232668] displaylink driver uses wrong ethernet module cdc_ncm instead of r8152
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232668 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joan.torres(a)suse.com, | |tiwai(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232650] Lenovo Yoga Pro 7 14ASP9 fails to wake up from suspend mode
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232650 https://bugzilla.suse.com/show_bug.cgi?id=1232650#c3 --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Zhang from comment #2) > I have tried 6.12rc5 kernel-default, 6.11 kernel-default, 6.11 > kernel-vanilla, 6.12rc5 on Fedora and 6.10 kernel-vanilla. Only 6.10 > kernel-vanilla works. It woke up properly. Doesn't kernel-default 6.10.x from OBS home:tiwai:kernel:6.10 work? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231686] AusweisApp and AusweisApp2 broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 https://bugzilla.suse.com/show_bug.cgi?id=1231686#c15 --- Comment #15 from Marcus Meissner <meissner(a)suse.com> --- I am happy with applying fedoras patch for now, testbuild here: home:msmeissn:branches:security/AusweisApp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232057] New: Update nvidia driver to latest 550.127.05 release
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232057 Bug ID: 1232057 Summary: Update nvidia driver to latest 550.127.05 release Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: sndirsch(a)suse.com QA Contact: sndirsch(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Update nvidia driver to latest 550.127.05 release -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1232688] New: VUL-0: CVE-2024-21537: bitwarden: lilconfig: insecure usage of eval in the dynamicImport function
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232688 Bug ID: 1232688 Summary: VUL-0: CVE-2024-21537: bitwarden: lilconfig: insecure usage of eval in the dynamicImport function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/426383/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: brunopitrus(a)hotmail.com, camila.matos(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Blocks: 1232672 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1232672 +++ Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-21537 https://www.cve.org/CVERecord?id=CVE-2024-21537 https://github.com/antonk52/lilconfig/commit/2c68a1ab8764fc74acc46771e1ad39… https://github.com/antonk52/lilconfig/pull/48 https://github.com/antonk52/lilconfig/releases/tag/v3.1.1 https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1232686] New: VUL-0: CVE-2024-21537: element-web: lilconfig: insecure usage of eval in the dynamicImport function
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232686 Bug ID: 1232686 Summary: VUL-0: CVE-2024-21537: element-web: lilconfig: insecure usage of eval in the dynamicImport function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/426383/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com, dheidler(a)suse.com, marius.kittler(a)suse.com, okurz(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Blocks: 1232672 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1232672 +++ Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-21537 https://www.cve.org/CVERecord?id=CVE-2024-21537 https://github.com/antonk52/lilconfig/commit/2c68a1ab8764fc74acc46771e1ad39… https://github.com/antonk52/lilconfig/pull/48 https://github.com/antonk52/lilconfig/releases/tag/v3.1.1 https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789 -- You are receiving this mail because: You are on the CC list for the bug.

1 1