May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1094148] New: [SLE-Classic] The "Applications" window floats far away from the menu bar.
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1094148 Bug ID: 1094148 Summary: [SLE-Classic] The "Applications" window floats far away from the menu bar. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: gwang(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 770947 --> http://bugzilla.opensuse.org/attachment.cgi?id=770947&action=edit "Applications" window floats far away from the menu bar Steps: 1. Install gnome-shell-classic manually 2. Login with SLE-Classic session selected 3. Click "Applications" on the left-bottom corner Actual Result: The popup window floats above the menu bar with some distance. Please find the attachment for details. Expected Result: The popup window should be above and next to the menu bar. -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1086036] New: translation-update-upstream commented out for Leap
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1086036 Bug ID: 1086036 Summary: translation-update-upstream commented out for Leap Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Translations Assignee: dimstar(a)opensuse.org Reporter: sbrabec(a)suse.com QA Contact: ke(a)suse.com CC: tchvatal(a)suse.com Found By: --- Blocker: --- Looking at the packages, many of them now use: %if !0%{?is_opensuse} translation-update-upstream %endif This is an ugly divergence between SLE15 and Leap, as it forces splitting of translation-update and translation-update-upstream packages for SLE15 and Leap15, and doubles amount of work on translation updates. Disabling translation-update-upstream makes impossible to do a build-time translation update and forces post-installation updates). It makes translation-update for SLE unusable for Leap, and it also increases size of installation image with translations. I am aware of a small increase of build time, but it makes possible to easily update translations directly in the lang package without touching the sources. Technical details: translation-update-upstream: Package that contains new upstream translations that can be used during the build time. It contains supplementary scripts to get the update. translation-update: Package that contains post-installation updates. The tarball in this package is generated from translation-update-upstream using the %prep log (if translation-update-upsteam succeeds, build-time translation update is used, if it fails, post-installation translation update is used). translation-update depends on a dedicated glibc patch. -- You are receiving this mail because: You are on the CC list for the bug.

2 12

[Bug 1082345] New: [NEEDS-REBASE] gnome-shell-extensions 3.27.91 patches need rebase
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1082345 Bug ID: 1082345 Summary: [NEEDS-REBASE] gnome-shell-extensions 3.27.91 patches need rebase Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- - Disable SLE-classic patches that need rebase: gse-sle-classic-ext.patch, gnome-shell-add-app-to-desktop.patch, gnome-shell-favorites-menu-at-end.patch and gnome-shell-extensions-window-list-app-icon-not-shown.patch. Those patches do not apply on GNOME Shell exteions 3.27.91 (in GNOME:Next) -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1061742] New: GNOME: sle-classic applications menu handles right click like left click
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1061742 Bug ID: 1061742 Summary: GNOME: sle-classic applications menu handles right click like left click Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: Other Status: NEW Keywords: Usability Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: sebastian.parschauer(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: L3 Blocker: --- On Leap 42.3 sle-classic session the right click on an application in the applications menu results in just opening the application instead of showing a small popup like this: Open --- Add to Favorites Add to Desktop My expectation is that this works the same way like on SLES12-SP2. Please fix this. TIA -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1039756] New: GNOME needs to support default.desktop in session directories
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1039756 Bug ID: 1039756 Summary: GNOME needs to support default.desktop in session directories Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: http://openqa.opensuse.org/tests/376325/modules/first_ boot/steps/21 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de CC: dimstar(a)opensuse.org, fvogt(a)suse.com, jreidinger(a)suse.com, lnussel(a)suse.com, lslezak(a)suse.com, mlin(a)suse.com, okurz(a)suse.com, simonf.lees(a)suse.com Depends on: 1030873 Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #1030873 +++ If no default autologin session is defined, default.desktop (usually in /usr/share/xsessions, but can eventually be in wayland-sessions as well) is used by displaymanagers such as lightdm and sddm. This link is now created by update-alternatives for IceWM, Xfce, LXQt (sr not accepted yet), Plasma5 and enlightenment. This means that if GDM is used if one of those is installed, it will list default.desktop twice, as it is a symlink to a .desktop file in the same directory. lightdm and sddm are patched to recognize this properly. GDM should respect the default.desktop selection if nothing else is defined in /etc/sysconfig/displaymanager. GNOME should also register itself with update-alternatives, with the same priority as KDE (25), for reference: https://build.opensuse.org/package/rdiff/KDE:Frameworks5/plasma5-session?li… -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1090376] New: plasma panel bar does not scale up
by bugzilla_noreply＠novell.com 19 Jul '21

19 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1090376 Bug ID: 1090376 Summary: plasma panel bar does not scale up Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- on a 3840x2160 screen with 157x161 dots per inch KDE looks quite ok by default, only the panel did not scale up -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1087369] New: Change default TLS configuration of lighttpd for better security out-of-the-box
by bugzilla_noreply＠novell.com 18 Jul '21

18 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1087369 Bug ID: 1087369 Summary: Change default TLS configuration of lighttpd for better security out-of-the-box Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Depends on: 1086764 Found By: --- Blocker: --- To comply with upcoming standards (PCI DSS) a default installation of nginx should only support TLS 1.1 and above (1.2 recommended / strongly encouraged): [0] https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-… > 30 June 2018 is the deadline for disabling SSL/early TLS and implementing a > more secure encryption protocol – TLS 1.1 or higher (TLS v1.2 is strongly > encouraged) in order to meet the PCI Data Security Standard (PCI DSS) for > safeguarding payment data. For some more details refer to [1] https://bugzilla.suse.com/show_bug.cgi?id=1086764 Therefore the default should be changed in /etc/lighttpd/lighttpd.conf [2] https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_SSL Configuration ====================== ssl.openssl.ssl-conf-cmd specify openssl config commands (e.g. ("Protocol" => "-ALL, TLSv1.2") restricts protocol to only TLS 1.2) (since 1.4.48) (commit https://redmine.lighttpd.net/projects/lighttpd/repository/revisions/c09acbe…) ====================== lighttpd version 1.4.48 is in openSUSE Tumbleweed and openSUSE Leap 15 only: https://software.opensuse.org/package/lighttpd Something to be like this in 'SSL Support' section of /etc/lighttpd/lighttpd.conf file: ============================ # Allow TLS version 1.2 only, which is a recommended default these days # by international information security standards. #ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL, TLSv1.2") ============================ See also: ============= [3] https://bugzilla.suse.com/show_bug.cgi?id=1086854 (Change default TLS configuration of apache2 for better security out-of-the-box) [4] https://bugzilla.suse.com/show_bug.cgi?id=1086855 (Change default TLS configuration of nginx for better security out-of-the-box) -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1109665] New: Disabling f2fs
by bugzilla_noreply＠novell.com 16 Jul '21

16 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1109665 Bug ID: 1109665 Summary: Disabling f2fs Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: nborisov(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This issue is to be used as a collection of all discussions regarding disabling the compilation of f2fs in various opensuse distributions. Currently this filesystem received only sporadic CVE-related backports. In the process of doing said backports I have also identified several drawbacks which make it rather hard to support and provide sensible experience: 1. There are a bunch of validation checks which are not being backported since they are not linked to a particular CVE as such the stability of the filesystem is questionable even with CVE backports. 2. Currently the filesystem doesn't have a way to disable mounting of filesystems created with newer kernels, containing on-disk incompatible changes. I have talked with one of the maintainers and they recognize this fact but so far no one is working on this. This is a pretty major since newer images could potentially crash older kernels not being able to properly parse them. 3. All in all this leads me to believe that f2fs requires a rather controller environment in terms of kernel/tools versions so is not a good candidate to be included in a community-based distribution kernel. I've already spoken to release manager for leap/tumbleweed and they are fine with disabling it. -- You are receiving this mail because: You are on the CC list for the bug.

2 15

[Bug 1171222] New: [RPi4] GRUB kernel image/initrd load slowdown after adding USB keyboard support
by bugzilla_noreply＠novell.com 16 Jul '21

16 Jul '21

http://bugzilla.suse.com/show_bug.cgi?id=1171222 Bug ID: 1171222 Summary: [RPi4] GRUB kernel image/initrd load slowdown after adding USB keyboard support Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: nsaenzjulienne(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The tumbleweed image to reproduce this is not yet available, but will be soon. If USB keyboard plugged, the whole process takes more than a minute. When no USB keyboard plugged, only 12 seconds. This cannot be reproduced with leap15.2's GRUB. -- You are receiving this mail because: You are on the CC list for the bug.

2 30

[Bug 1140566] New: firewalld: rich masquerading rules don't work
by bugzilla_noreply＠novell.com 15 Jul '21

15 Jul '21

http://bugzilla.suse.com/show_bug.cgi?id=1140566 Bug ID: 1140566 Summary: firewalld: rich masquerading rules don't work Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: martin.wilck(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I wanted to create a rich rule to enable masquerading only for packets with a certain source address: # firewall-cmd --zone nat --list-all work (active) target: default icmp-block-inversion: no interfaces: tun0 sources: services: ssh ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv4" source address="192.168.30.0/24" masquerade This is what iptables-save shows: -A POSTROUTING -j POSTROUTING_ZONES -A POSTROUTING_ZONES -o tun0 -g POST_work -A POST_work -j POST_work_allow -A POST_work_allow ! -o lo -j MASQUERADE As you can see, the last rule does not filter by source address, which was the whole purpose of the rich rule instead of "--add-masquerade". This is fixed by upstream commit bd784bf "fw_zone: fix rich rule masquerading", which is included in firewalld 0.6.4. With that fix, the rule is correctly generated: -A POST_work_allow -s 192.168.30.0/24 ! -o lo -j MASQUERADE Please push that version (already in security:netfilter) to factory. -- You are receiving this mail because: You are on the CC list for the bug.

2 3