February 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1163120] No mitigations for CPU vulnerabilities
by bugzilla_noreply＠novell.com 09 Feb '20

09 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1163120 http://bugzilla.suse.com/show_bug.cgi?id=1163120#c6 --- Comment #6 from Suse User <suseino(a)riseup.net> --- I suppose the confusion comes from this bug report being about other vulnerabilities too (as seen in the initial attachment): # with kernel-default: - l1tf - mds - meltdown - spectre store bypass + itlb multihit # with kernel-pae (fewer but still not fully mitigated): - mds - spectre store bypass + itlb multihit Considering this difference between kernel-default and kernel-pae + the fact that the microcode is the same whether I use either kernel: I thought that some of the vulnerabilities are not just a matter of microcode but kernel level mitigations exists. > So what exactly are you asking? (1) After the above clarification, I suppose you can have a second look to my previous question. > > What about kernel-level mitigations? Are these impossible, i.e. is microcode > > the only way to mitigate the remaining vulnerabilities? (2) My other question is: https://lkml.org/lkml/2019/12/8/205 *I understand (2) and the answer to it may be considered off-topic to this bug report but I still hope you could shed some light on it too (in direct email is fine too, if you think it would be more appropriate). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163120] No mitigations for CPU vulnerabilities
by bugzilla_noreply＠novell.com 09 Feb '20

09 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1163120 http://bugzilla.suse.com/show_bug.cgi?id=1163120#c5 --- Comment #5 from Borislav Petkov <bpetkov(a)suse.com> --- (In reply to Suse User from comment #4) > https://spectreattack.com/spectre.pdf > https://invidio.us/watch?v=6O8LTwVfTVs I think you misunderstood. My comment about running guests was about the ITLB multihit thing. The pointers you gave are about Spectre and Meltdown - which are not the ITLB multihit thing and they are not part of your question in the description. So what exactly are you asking? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1156546] New: opal build failed with linux-glibc-devel 5.3
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1156546 Bug ID: 1156546 Summary: opal build failed with linux-glibc-devel 5.3 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de CC: lnussel(a)suse.com Found By: --- Blocker: --- fails to build with linux-glibc-devel 5.3 update[0] build log: https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.2:Stagin… maybe we should disable ixj support like Factory's package did. [1] https://build.opensuse.org/request/show/738565 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1163120] No mitigations for CPU vulnerabilities
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1163120 http://bugzilla.suse.com/show_bug.cgi?id=1163120#c4 --- Comment #4 from Suse User <suseino(a)riseup.net> --- > Yes. That's quite unfortunate. > Which presentation is that? Link? https://spectreattack.com/spectre.pdf https://invidio.us/watch?v=6O8LTwVfTVs I also asked about this on LKML hoping for some clarity from experts but unfortunately got zero replies (and unsubscribed from that list): https://lkml.org/lkml/2019/12/8/205 I would really appreciate if you could direct me to the right info (or the right place to ask). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163200] New: SSH process often not "Entering interactive session" when executed by script
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1163200 Bug ID: 1163200 Summary: SSH process often not "Entering interactive session" when executed by script Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: Stefan.Welscher(a)telekom.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I have a script which dynamically creates a tunnel to a destination only reachable by a intermediate hop. This is done using the following command on a session with "raw" and "-echo": /usr/bin/ssh -N -f -4 -o PreferredAuthentications=password -o ExitOnForwardFailure=yes -o ServerAliveInterval=10 -o ServerAliveCountMax=2 -L localport:ipv4_destination_address:22 user@ipv4_hop_adress 2>&1 && echo EXPECT_EOF When executing this command manual via bash, it always works without any problems. When executing this command via script (perl/Expect.pm) it sometimes works and sometimes doesn't (in cases it doesn't work, no corresponding local ssh process is listed on ps), but as far as I could see on my tests, it alwayss works if I respawn the command on the same script immideately after, if the process is missing. This is a workaround, but it takes some time. On the debug output (-vvv), in cases the command doesn't work, the last two debug lines are missing: ... debug1: Local forwarding listening on 127.0.0.1 port 10003. debug2: fd 4 setting O_NONBLOCK debug3: fd 4 is O_NONBLOCK debug1: channel 0: new [port listener] debug2: fd 3 setting TCP_NODELAY debug3: ssh_packet_set_tos: set IP_TOS 0x10 debug1: Requesting no-more-sessions(a)openssh.com debug3: send packet: type 80 debug1: forking to background debug1: Entering interactive session. <--- missing if failed debug1: pledge: network <--- missing if failed EXPECT_EOF All other debug lines are exactly the same. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1162007] poedit depends on libcpprest.so.2.10() whil cpprest is being deleted (failed to build for more than 14 days)
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162007 http://bugzilla.opensuse.org/show_bug.cgi?id=1162007#c4 Antoine Belvire <antoine.belvire(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Antoine Belvire <antoine.belvire(a)opensuse.org> --- cpprest has been updated, poedit now builds fine => resolved fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163196] New: typelib() RPM generator: Remove lines with start with either '"' or some spaces/tabs and '"'
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1163196 Bug ID: 1163196 Summary: typelib() RPM generator: Remove lines with start with either '"' or some spaces/tabs and '"' Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mikhailnov(a)dumalogiya.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 829722 --> http://bugzilla.opensuse.org/attachment.cgi?id=829722&action=edit 0002-Remove-lines-with-start-with-either-or-some-spaces-t.patch We are using your gi-find-deps.sh from gobject-introspection in ROSA Linux and today I have made a fix of a problem that when building python-gobject3 3.30.0 such dependency was generated: Requires: typelib(%namespaces) = %versions and another small fix. 2 patches are attached. ********************************************** commit 2da791359cdc25eac1c2b7cdcb847ce69ea13569 (HEAD -> rosa2019.1, origin/rosa2019.1) Author: Mikhail Novosyolov <m.novosyolov(a)rosalinux.ru> Date: Sat Feb 8 20:32:31 2020 +0300 Remove lines with start with either '"' or some spaces/tabs and '"' Example line: "Use gi.require_version('%(namespace)s', '%(version)s') It is a text that is printed and must not be processed It was: typelib(%namespaces) = %versions commit 93e5c2b77d30f143868cd5fbc98b128c60d48328 Author: Mikhail Novosyolov <m.novosyolov(a)rosalinux.ru> Date: Sat Feb 8 19:22:24 2020 +0300 sync shell fork with shebang -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1107525] New: Raise default file descriptor limits to meet Valve Proton requirements
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1107525 Bug ID: 1107525 Summary: Raise default file descriptor limits to meet Valve Proton requirements Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: noga.dany(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Valve released beta version of Proton / Steam play. Next Leap 15.1 should meet minimal requirements. One of them is file descriptor limits: https://github.com/zfigura/wine/blob/esync/README.esync "If you get something like "eventfd: Too many open files" and then things start crashing, you've probably run out of file descriptors. esync creates one eventfd descriptor for each synchronization object, and some games may use a large number of these. Linux by default limits a process to 4096 file descriptors, which probably was reasonable back in the nineties but isn't really anymore. (Fortunately Debian and derivatives [Ubuntu, Mint] already have a reasonable limit.)" -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1163081] [Build 566.1] openQA test fails in start_install - Caller: /mounts/mp_0001/usr/share/YaST2/modules/Product.rb:129:in `FindBaseProducts' Details: No base product found
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1163081 http://bugzilla.suse.com/show_bug.cgi?id=1163081#c1 --- Comment #1 from Max Lin <mlin(a)suse.com> --- Look at https://openqa.opensuse.org/tests/1166137#step/installation_overview/1 , seems new repos aren't added. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163194] VUL-1: CVE-2020-1768: otrs: The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.
by bugzilla_noreply＠novell.com 08 Feb '20

08 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1163194 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0