May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1224462] RC2 Tik installer / first boot doesn't prompt for hostname
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224462 https://bugzilla.suse.com/show_bug.cgi?id=1224462#c4 --- Comment #4 from Mike Watkins <solutionroute(a)gmail.com> --- Yes, exactly like that. ;-) Case closed? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223617] systemd-tmpfiles-setup finds configuration in /etc/tmpfiles.d as duplicate instead of overridding base config
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223617 https://bugzilla.suse.com/show_bug.cgi?id=1223617#c1 Radoslav Kolev <radoslav.kolev(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |radoslav.kolev(a)suse.com --- Comment #1 from Radoslav Kolev <radoslav.kolev(a)suse.com> --- Hello! Where does the file /etc/tmpfiles.d/var.conf come from? Can you share its contents? It is expected to get the duplicate warning in the log if multiple files specify the same path. See CONFIGURATION DIRECTORIES AND PRECEDENCE section of 'man tmpfiles.d'. If you want to override some settings from a system supplied file found under /usr/lib/tmpfiles.d/ then you have to create a file with the same name under /etc/tmpfiles.d/ and in this way the on under /usr/lib/tmpfiles.d/ will be ignored. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224461] New: Shell other than default system shells prevents user logon post-install
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224461 Bug ID: 1224461 Summary: Shell other than default system shells prevents user logon post-install Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: All OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: rbrown(a)suse.com Reporter: solutionroute(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Build Identifier: User with alternate shell (fish, zsh, etc) must install in the core via transactional-updates, but installer rightly does not add user specified packages from previous install to upgrade install. If user has alternate shell specified in /etc/passwd, login is not possible. Reproducible: Always Steps to Reproduce: 1. Add alternate shell to core OS 2. Change user shell 3. Perform RC2 tik update Actual Results: Unable to login; no root login is possible in an upgraded or fresh RC2. Expected Results: At minimum, detect user shell is not a system default and warn/block the upgrade, recommend user logon to old system, chsh, and restart upgrade. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1223858] Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223858 Ursula Brueckner <ursula.brueckner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ursula.brueckner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212522] Package vorta fails to start
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1212522 https://bugzilla.suse.com/show_bug.cgi?id=1212522#c9 --- Comment #9 from Matthias Bach <marix(a)marix.org> --- This was broken starting in 15.5 and wasn't fixed for 15.6. The irony is that for a long time now there is already a working version for 15.5 and 15.6 in the `home:ecsos:Backup` project. And, unless I overlooked something that's pulled in from devel:languages:python:backports on my system, that version doesn't need anything that's not already in the main distro. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223144] New: GIMP segmentation fault
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223144 Bug ID: 1223144 Summary: GIMP segmentation fault Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: oberkut(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874375 --> https://bugzilla.suse.com/attachment.cgi?id=874375&action=edit Crash log GIMP Segmentation fault 1.Open GIMP. 2.Create Project. 3.Draw any image. 4.Close GIMP (Not saved changes). -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1224791] New: VUL-0: CVE-2024-33901: keepassxc: recovery of passwords stored in the .kdbx database
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224791 Bug ID: 1224791 Summary: VUL-0: CVE-2024-33901: keepassxc: recovery of passwords stored in the .kdbx database Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/406771/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Issue in KeePassXC 2.7.7 allows an attacker to recover some passwords stored in the .kdbx database. References: https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 https://keepassxc.org/blog/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-33901 https://www.cve.org/CVERecord?id=CVE-2024-33901 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1201822] VUL-0: CVE-2022-34037: caddy: oob read allows for DoS
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1201822 https://bugzilla.suse.com/show_bug.cgi?id=1201822#c4 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de Status|IN_PROGRESS |NEW --- Comment #4 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- The SR was accepted and this is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200279] VUL-0: CVE-2022-29718: caddy: unauthenticated open redirect vulnerability
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1200279 https://bugzilla.suse.com/show_bug.cgi?id=1200279#c5 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #5 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- The SRs were accepted and this is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207208] VUL-0: CVE-2022-41721: TRACKERBUG: traefik: x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1207208 https://bugzilla.suse.com/show_bug.cgi?id=1207208#c2 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #2 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- This was fixed in https://build.opensuse.org/request/show/1058870. -- You are receiving this mail because: You are on the CC list for the bug.

1 0