- openSUSE Bugs

[Bug 1224165] AUDIT-0: openSUSE Leap 15.6 Gold Master security audit
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1224165 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1220403 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220403] VUL-0: CVE-2024-23837: libhtp: excessive processing time of HTTP headers can lead to denial of service
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1220403 https://bugzilla.suse.com/show_bug.cgi?id=1220403#c3 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1224165 CC| |Andreas.Stieger(a)gmx.de Assignee|security-team(a)suse.de |otto.hollmann(a)suse.com --- Comment #3 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- (In reply to Carlos López from comment #2) > What about openSUSE:Backports:SLE-15-SP{4,5,6}? openSUSE has a weak model and tracking and following up here. Otto did not read your message: He was neither the assignee, nor CC'd on the bug, nor would the maintainer ever be pinged again unless someone looked at this randomly. Re-assigning back to Maintainer to action. Here's a backport: https://build.opensuse.org/request/show/1178079 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225786] software.o.o not fully functional and/or reliable
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225786 https://bugzilla.suse.com/show_bug.cgi?id=1225786#c2 --- Comment #2 from Gunner Gewiß <Gunner.Gewiss(a)posteo.de> --- Oh, OK. Sorry for posting the dup. But as you refer to the dup: it is quite old now. And the last comment there is also even quite old. Is there some work going on to fix this issue? Just asking. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219983] amdgpu : "kernel NULL pointer dereference" kernel 6.7.4-1
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1219983 https://bugzilla.suse.com/show_bug.cgi?id=1219983#c13 --- Comment #13 from Alan Lima <alanemmanuel5(a)gmail.com> --- (In reply to Takashi Iwai from comment #12) > Ah, then it's maybe a different issue the upstream tracker hitting. Let's > close this entry. well i've installed the latest update and the bug reappeared, so i suppose this issue shall be re-opened ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222512] VUL-0: CVE-2024-28871: libhtp: excessive CPU usage when parsing malformed traffic
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222512 https://bugzilla.suse.com/show_bug.cgi?id=1222512#c3 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Product|openSUSE Distribution |openSUSE Tumbleweed Component|Security |Security CC| |Andreas.Stieger(a)gmx.de Version|Leap 15.6 |Current Resolution|--- |FIXED --- Comment #3 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- fixed in Tumbleweed, moving/closing -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225786] New: software.o.o not fully functional and/or reliable
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225786 Bug ID: 1225786 Summary: software.o.o not fully functional and/or reliable Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: All OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: Gunner.Gewiss(a)posteo.de QA Contact: adrian.schroeter(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Hello! I sometimes use "software.o.o" <https://software.opensuse.org/>. I would like to note that it's not fully functional and/or reliable… Issue: when you search "firefox" and look up details for "Firefox Web Browser" <https://software.opensuse.org/package/MozillaFirefox> it shows only (and just this one) the official build for Tumbleweed, but no official build for Leap (whatever what version of Leap) and even no "experimental packages" (official OBS — not home OBS!) for Leap (whatever what version of Leap). But as <https://build.opensuse.org/project/show/mozilla> clearly shows, there is an official offer. This issues holds for several packages (I don't have collected all examples I have noticed so far, but they are a few, indeed). This is somehow annoying… I like to use Leap (not Tumbleweed or Slowroll), but often the package for Leap is not listed (official build (i.e. distribution) or (official) experimental build (i.e. official OBS — not home OBS). Workaround: what often helps me, is looking up the info for Tumbleweed and then adapt it to Leap. But well… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1188365] Unable to find packages for Leap 15.3 using software.opensuse.org
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1188365 https://bugzilla.suse.com/show_bug.cgi?id=1188365#c10 hui <sturm-fr(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dev(a)mail.sleepingtux.fr --- Comment #10 from hui <sturm-fr(a)web.de> --- *** Bug 1188550 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188550] Software at search software.opensuse.org does not show openSuse 15.3
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1188550 https://bugzilla.suse.com/show_bug.cgi?id=1188550#c7 hui <sturm-fr(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #7 from hui <sturm-fr(a)web.de> --- . *** This bug has been marked as a duplicate of bug 1188365 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225689] New: Error message received from tik with mount system call failed.
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225689 Bug ID: 1225689 Summary: Error message received from tik with mount system call failed. Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: rbrown(a)suse.com Reporter: tony.neely(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0 Build Identifier: [tik][20240531-02:01:04][LOG] [START] /usr/bin/tik [/usr/lib/tik/modules/pre/10-welcome][20240531-02:01:04][LOG] [START] /usr/lib/tik/modules/pre//usr/lib/tik/modules/pre/10-welcome [/usr/lib/tik/modules/pre/10-welcome][20240531-02:01:24][LOG] [zenity][0][] --info --ok-label=Install Now --no-wrap --width=300 --height=300 --icon=distributor-logo-Aeon-symbolic --title= --text=<big>Welcome to openSUSE Aeon</big>\n\nPlease press <b>Install Now</b> to continue [/usr/lib/tik/modules/pre/10-welcome][20240531-02:01:24][LOG] [STOP] /usr/lib/tik/modules/pre//usr/lib/tik/modules/pre/10-welcome [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:24][LOG] [START] /usr/lib/tik/modules/pre//usr/lib/tik/modules/pre/20-mig [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:32][LOG] [pkexec][0] /usr/bin/mkdir -p /var/lib/tik/mig [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:43][LOG] [zenity][0][nvme-Samsung_SSD_970_EVO_Plus_250GB_S4P3NF0M605653V] --list --column=Disk --column=Size --width=1000 --height=340 --title=Select A Disk --text=Select the disk to install the operating system to. <b>Make sure any important documents and files have been backed up.</b>\n ata-Samsung_SSD_860_EVO_1TB_S3Z8NY0M767057P 931.5G nvme-Samsung_SSD_970_EVO_Plus_250GB_S4P3NF0M605653V 232.9G [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:43][LOG] [pkexec][0] /usr/bin/mkdir -p /var/lib/tik/mig/mnt [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:43][LOG] [pkexec][0] /usr/bin/mount -o compress=zstd:1 /dev/disk/by-id/nvme-eui.0025385691b29275-part2 /var/lib/tik/mig/mnt [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:43][LOG] [probe_partitions] /dev/disk/by-id/nvme-eui.0025385691b29275-part2 found [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:43][LOG] Legacy Aeon Install FOUND [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:48][LOG] [pkexec][0] /usr/bin/umount /var/lib/tik/mig/mnt [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:48][LOG] [pkexec][0] /usr/bin/rmdir /var/lib/tik/mig/mnt [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:48][LOG] [pkexec][0] /usr/bin/mkdir /var/lib/tik/mig/mnt mount: /var/lib/tik/mig/mnt: mount system call failed: No such file or directory. dmesg(1) may have more information after failed mount system call. [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:48][LOG] [pkexec][32] /usr/bin/mount -o compress=zstd:1,subvol=/@/home /dev/disk/by-id/nvme-eui.0025385691b29275-part2 /var/lib/tik/mig/mnt [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:48][ERROR] Command <tt>/usr/bin/mount -o compress=zstd:1,subvol=/@/home /dev/disk/by-id/nvme-eui.0025385691b29275-part2 /var/lib/tik/mig/mnt</tt> FAILED [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:54][LOG] [zenity][0][] --error --text Command <tt>/usr/bin/mount -o compress=zstd:1,subvol=/@/home /dev/disk/by-id/nvme-eui.0025385691b29275-part2 /var/lib/tik/mig/mnt</tt> FAILED [/usr/lib/tik/modules/pre/20-mig][20240531-02:01:54][LOG] [STOP][1] /usr/bin/tik Reproducible: Always Actual Results: System notified me of error and shut down. I have an existing Aeon install, with a separate drive (BTRFS formatted) for my /home. Easy enough to setup with old installer. Chose system drive (not /home drive) for the install. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1225787] New: openSUSE Leap 15.5 hangs during boot with recent kernels on Raspberry Pi 3b
by bugzilla_noreply＠suse.com 01 Jun '24

01 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225787 Bug ID: 1225787 Summary: openSUSE Leap 15.5 hangs during boot with recent kernels on Raspberry Pi 3b Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: adrian.glaubitz(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- One of the recent updates broke openSUSE Leap 15.5 on the Raspberry Pi 3B. The systems no longer boots beyond "Reached target Basic System." The last working version for me was: - 5.14.21-150500.55.52-default The following two versions don't work: - 5.14.21-150500.55.59-default - 5.14.21-150500.55.65-default The last kernel messages before the system hangs are: [ OK ] Started Forward Password R…s to Plymouth Directory Watch. [ OK ] Reached target Path Units. [ OK ] Reached target Basic System. [ 7.538503][ T311] mmc1: new high speed SDIO card at address 0001 [ 7.562530][ T300] mmcblk0: mmc0:e624 SC32G 29.7 GiB [ 7.575747][ T300] mmcblk0: p1 p2 p3 [ 7.592670][ T296] dwc2 3f980000.usb: EPs: 8, dedicated fifos, 4080 entries in SPRAM [ 7.600936][ T296] dwc2 3f980000.usb: DWC OTG Controller [ 7.606531][ T296] dwc2 3f980000.usb: new USB bus registered, assigned bus number 1 [ 7.614486][ T296] dwc2 3f980000.usb: irq 51, io mem 0x3f980000 [ 7.620891][ T296] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.14 [ 7.630098][ T296] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 7.638174][ T296] usb usb1: Product: DWC OTG Controller [ 7.638178][ T301] fb0: switching to vc4 from EFI VGA [ 7.638188][ T296] usb usb1: Manufacturer: Linux 5.14.21-150500.55.59-default dwc2_hsotg [ 7.657225][ T296] usb usb1: SerialNumber: 3f980000.usb [ 7.657301][ T301] Console: switching to colour dummy device 80x25 [ 7.657891][ T296] hub 1-0:1.0: USB hub found [ 7.673797][ T296] hub 1-0:1.0: 1 port detected [ 7.689828][ T301] vc4-drm soc:gpu: bound 3f400000.hvs (ops vc4_hvs_ops [vc4]) This issue has been independently reported by another user in [1]. > [1] https://lists.opensuse.org/archives/list/arm@lists.opensuse.org/thread/L3WQ… -- You are receiving this mail because: You are on the CC list for the bug.

1 1