June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1211196] VUL-0: CVE-2023-32182: postfix: config_postfix SUSE specific script potentially bad /tmp file usage
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1211196 Alexander Bergmann <abergmann(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(varkoly(a)suse.com) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1211196] VUL-0: CVE-2023-32182: postfix: config_postfix SUSE specific script potentially bad /tmp file usage
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1211196 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2023-3218 | |2:5.5:(AV:L/AC:L/PR:L/UI:N/ | |S:U/C:N/I:H/A:N) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226424] AUDIT-0: powerdevil6: New polkit actions for battery conservation mode (charge limit)
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226424 https://bugzilla.suse.com/show_bug.cgi?id=1226424#c1 --- Comment #1 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- This should not take long to review. There's a bit of backlog in the team currently though, so it may still take a bit before we can take care of it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1211196] VUL-0: CVE-2023-32182: postfix: config_postfix SUSE specific script potentially bad /tmp file usage
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1211196 Alexander Bergmann <abergmann(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/365316/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226240] Brother MFC DCP-J125 Scanner not recognized
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226240 https://bugzilla.suse.com/show_bug.cgi?id=1226240#c9 --- Comment #9 from Gui Do <guidopro(a)mailbox.org> --- (In reply to Stephan Hemeier from comment #8) > Have you installed the udev-rules? > brother-udev-rule-type1-1.0.2-0.noarch > > Maybe you can install the Scanner packages once more. Yes I have. Both. Twice. Tested with x86_64 and i386 drivers. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225968] Since kernel 6.9, applications running on only 1 core
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225968 https://bugzilla.suse.com/show_bug.cgi?id=1225968#c10 --- Comment #10 from Ivan Topolsky <ivan.topolsky(a)isb-sib.ch> --- (In reply to Takashi Iwai from comment #8) > 6.9.5 is found in OBS Kernel:stable repo. > http://download.opensuse.org/repositories/Kernel:/stable/standard/ > > Can anyone confirm that it works? ...and one reboot later: Success: with kernel 6.9.5 all core are correctly initialized, and process are correctly spread between cores. Success! In the logs: - the crashes (in "sched_cpu_starting" and "build_sched_domains") that 6.9.1 introduced are gone. - the errors "__common_interrupt: 1.55 No irq handler for vector" are still present but don't seem to affect core initialisation. (outside the always preset, and completely unrelated to the present issue, broken SATA and and "ACPI Error: AE_NOT_FOUND"s) Thanks to everybody involved. Looking forward to this package arriving in the main channel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1211554] Clamav LTS version 1.3.0 is available
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1211554 Revanth Rangaraju <revanth.rangaraju(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |revanth.rangaraju(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226424] New: AUDIT-0: powerdevil6: New
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226424 Bug ID: 1226424 Summary: AUDIT-0: powerdevil6: New Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: fabian(a)ritter-vogt.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package: https://build.opensuse.org/package/show/KDE:Frameworks/powerdevil6 (but to allow TW inclusion it'll be disabled there temporarily) rpmlint complaint: [ 94s] powerdevil6.x86_64: E: polkit-user-privilege (Badness: 10000) org.kde.powerdevil.chargethresholdhelper.getconservationmode (no:yes:yes) [ 94s] The package allows unprivileged users to carry out privileged operations [ 94s] without root authentication. This could cause security problems if not done [ 94s] carefully. If the package is intended for inclusion in any SUSE product please [ 94s] open a bug report to request review of the package by the security team. [ 94s] Please refer to [ 94s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 94s] more information. [ 94s] [ 94s] powerdevil6.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.kde.powerdevil.chargethresholdhelper.setconservationmode (no:no:auth_admin_keep) [ 94s] The polkit action is not listed in the polkit-default-privs profiles which [ 94s] makes it harder for admins to find. Furthermore improper polkit authorization [ 94s] checks can easily introduce security issues. If the package is intended for [ 94s] inclusion in any SUSE product please open a bug report to request review of [ 94s] the package by the security team. Please refer to [ 94s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 94s] more information. Code: https://invent.kde.org/plasma/powerdevil/-/blob/master/daemon/chargethresho… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1226240] Brother MFC DCP-J125 Scanner not recognized
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226240 https://bugzilla.suse.com/show_bug.cgi?id=1226240#c8 Stephan Hemeier <Sauerlandlinux(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Sauerlandlinux(a)gmx.de --- Comment #8 from Stephan Hemeier <Sauerlandlinux(a)gmx.de> --- Have you installed the udev-rules? brother-udev-rule-type1-1.0.2-0.noarch Maybe you can install the Scanner packages once more. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210962] AUDIT-0: openvpn3-linux: DBus system services
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1210962 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugzilla.suse.com/s | |how_bug.cgi?id=1226150 -- You are receiving this mail because: You are on the CC list for the bug.

1 0