October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1232489] YaST NTP Configuration generates improper Transmit Timestamp values in tcpdump
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232489 https://bugzilla.suse.com/show_bug.cgi?id=1232489#c5 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast2-maintainers(a)suse.de |max(a)suse.com QA Contact|jsrain(a)suse.com |qa-bugs(a)suse.de CC| |mpluskal(a)suse.com Component|YaST2 |Network --- Comment #5 from Stefan Hundhammer <shundhammer(a)suse.com> --- So this is very likely not a problem at all. But maybe the chrony maintainer are still interested. % osc maintainer -e chrony Defined in package: network:time/chrony bugowner of chrony : max(a)suse.com maintainer of chrony : max(a)suse.com, mpluskal(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225932] New: Authentication failure for non-privileged user in "Software updates"
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1225932 Bug ID: 1225932 Summary: Authentication failure for non-privileged user in "Software updates" Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Cockpit Assignee: Cockpit-bugs(a)suse.de Reporter: robert.simai(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 875298 --> https://bugzilla.suse.com/attachment.cgi?id=875298&action=edit Cockpit message Logged into Cockpit (309) on Tumbleweed as non-privileged user "robert", clicked the "Software updates" and got the attached message on screen and the following in the journal: sudo[5258]: robert : 3 incorrect password attempts ; PWD=/ ; USER=root ; COMMAND=/usr/bin/cockpit-bridge --privileged Something similar happens when I click the "Check for updates" from the Software updates module, the journal message then is sudo[5856]: pam_unix(sudo:auth): authentication failure; logname=robert uid=1000 euid=0 tty= ruser=robert rhost= user=root sudo[5856]: robert : 3 incorrect password attempts ; PWD=/ ; USER=root ; COMMAND=/usr/bin/cockpit-bridge --privileged I'm not sure why refreshing the updates requires sudo as a regular user could successfully run "zypper lu" as well. But if it does, we could at least come up with a clearer message "switch to administrative access first" or such. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 https://bugzilla.suse.com/show_bug.cgi?id=1232567#c1 Wolfgang Rosenauer <wolfgang(a)rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |wolfgang(a)rosenauer.org --- Comment #1 from Wolfgang Rosenauer <wolfgang(a)rosenauer.org> --- Can confirm :-( Will look into it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230552] VUL-0: CVE-2024-45770: pcp: `pmpost` symlink attack allows escalating `pcp` to `root` user
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230552 https://bugzilla.suse.com/show_bug.cgi?id=1230552#c13 --- Comment #13 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3785-1: An update that solves three vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243785-1 Category: security (important) Bug References: 1217826, 1222815, 1230551, 1230552, 1231345 CVE References: CVE-2023-6917, CVE-2024-45769, CVE-2024-45770 Jira References: PED-8192, PED-8389 Maintenance Incident: [SUSE:Maintenance:35852](https://smelt.suse.de/incident/35852/) Sources used: openSUSE Leap 15.5 (src): pcp-6.2.0-150500.8.6.1 Development Tools Module 15-SP5 (src): pcp-6.2.0-150500.8.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230551] VUL-0: CVE-2024-45769: pcp: `pmcd` heap corruption through metric pmstore operations
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230551 https://bugzilla.suse.com/show_bug.cgi?id=1230551#c17 --- Comment #17 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3785-1: An update that solves three vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243785-1 Category: security (important) Bug References: 1217826, 1222815, 1230551, 1230552, 1231345 CVE References: CVE-2023-6917, CVE-2024-45769, CVE-2024-45770 Jira References: PED-8192, PED-8389 Maintenance Incident: [SUSE:Maintenance:35852](https://smelt.suse.de/incident/35852/) Sources used: openSUSE Leap 15.5 (src): pcp-6.2.0-150500.8.6.1 Development Tools Module 15-SP5 (src): pcp-6.2.0-150500.8.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219884] New: Adapt package libzrtpcpp to build with OpenSSL 3
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1219884 Bug ID: 1219884 Summary: Adapt package libzrtpcpp to build with OpenSSL 3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: otto.hollmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package libzrtpcpp requires openssl 1.0.0 that is EOL and we would like to remove it from Factory. > BuildRequires: libopenssl-1_0_0-devel Please check tracker bug 1219879 for more details. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1232448] Licensing issue: python-nltk contains non-commercial licenses
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232448 https://bugzilla.suse.com/show_bug.cgi?id=1232448#c4 Daniel Garcia <daniel.garcia(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #4 from Daniel Garcia <daniel.garcia(a)suse.com> --- Fixed now in Factory -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232452] New: Licensing issue: python-fpdf2 contains non-commercial licenses
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232452 Bug ID: 1232452 Summary: Licensing issue: python-fpdf2 contains non-commercial licenses Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Any non commercial: 1 files fpdf2-2.7.9/test/text_shaping/SBL_Hbrw.ttf The license text says: 2. You may use this font software free of charge for all non-commercial purposes. If you wish to obtain a license for commercial use of this font software, please contact the Society of Biblical Literature at sblfonts(a)sbl-site.org, or write to license(a)tiro.com. Fees for commercial licenses are at the individual discretion of the Society of Biblical Literature and Tiro Typeworks. Nothing seems to depend on fpdf2 - so removing from Factory might be the most sensible/easy way -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214160] libvirt-routed firewalld zone not functional
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214160 Santiago Zarate <santiago.zarate(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |santiago.zarate(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232566] VUL-0: chromium: 130.0.6723.91 stable release
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232566 https://bugzilla.suse.com/show_bug.cgi?id=1232566#c1 --- Comment #1 from Ruediger Oertel <ro(a)suse.com> --- any hints on where/how to get to a tarball while their download server is still broken ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0