July 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1173775] New: Installation append wrong entry in "fstab" file
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1173775 Bug ID: 1173775 Summary: Installation append wrong entry in "fstab" file Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: Genedy.m(a)gmail.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Dears, i am facing issue starting from leap 15.0 to 15.2, that installation append below entry in "fstab" that make the system not bootable after installation, every time after new installation, system boot to emergency shell, then i manually remount "/sysroot" with "rw" option to comment that "fstab" entry then reboot, and after that system boot successfully. #overlay /etc overlay defaults,lowerdir=/sysroot/etc,upperdir=/sysroot/var/lib/overlay/1/etc,workdir=/sysroot/var/lib/overlay/work-etc,x-systemd.requires-mounts-for=/var,x-systemd.requires-mounts-for=/sysroot/var,x-initrd.mount 0 0 * I don't use Transactional server, so i don't know why installation process added this entry to "fstab". -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1173851] New: VUL-1: CVE-2020-5238: cmark: Exponential time to parse certain inputs could lead to DoS.
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1173851 Bug ID: 1173851 Summary: VUL-1: CVE-2020-5238: cmark: Exponential time to parse certain inputs could lead to DoS. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/262759/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: kgronlund(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-5238 The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. Upstream Advisory: https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85 References: https://bugzilla.redhat.com/show_bug.cgi?id=1854328 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-5238 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5238 https://github.com/github/cmark-gfm/commit/85d895289c5ab67f988ca659493a64ab… https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172715] osc up incomplete
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172715 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |marco.strigl(a)suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173111] both services NetworkManager and wicked are activated in TW image for RPi4
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173111 https://bugzilla.suse.com/show_bug.cgi?id=1173111#c1 Guillaume GARDET <guillaume.gardet(a)arm.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Guillaume GARDET <guillaume.gardet(a)arm.com> --- Duplicate *** This bug has been marked as a duplicate of bug 1141433 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1141433] Get no hint that network connection is made by NetworkManager when start YaST Networkmanagement
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1141433 https://bugzilla.suse.com/show_bug.cgi?id=1141433#c26 Guillaume GARDET <guillaume.gardet(a)arm.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |freek(a)opensuse.org --- Comment #26 from Guillaume GARDET <guillaume.gardet(a)arm.com> --- *** Bug 1173111 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173750] usbguard daemon segfaults - fixed upstream in version 0.7.8
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173750 https://bugzilla.suse.com/show_bug.cgi?id=1173750#c7 --- Comment #7 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Thank you for the additional information. So the interesting part is that the daemon is not segfaulting, it terminates with SIGSYS, bad system call. The root cause seems to be in the usbguard.service file, as you pointed out. There is a plethora of security settings in there. It looks like the daemon tries to execute a system call that is forbidden through the security settings. According to the message: ``` Stack trace of thread 2812: #0 0x00007f34eedc60d9 __brk (/lib64/ld-2.26.so) #1 0x00007f34eedc4eb1 frob_brk (/lib64/ld-2.26.so) #2 0x00007f34eedaddb8 _dl_start_final (/lib64/ld-2.26.so) #3 0x00007f34eedacea8 _start (/lib64/ld-2.26.so) ``` it happens in the dynamic linker loading process. It could be the `brk` system call but that would be strange since I don't believe that this one is blacklisted. Sadly not all debugging symbols are present so we can't tell exactly where it happened. Maybe the SUSE dynamic loader does something special that doesn't happen on other distros that causes this. I wonder why I can't reproduce this on my test installation. Do you have some special configuration for usbguard? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172874] Translation of installer not updated for more than 6 months
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172874 https://bugzilla.suse.com/show_bug.cgi?id=1172874#c5 --- Comment #5 from Ladislav Slezák <lslezak(a)suse.com> --- BTW the SLE package was submitted manually by Stanislav Brabec, see https://build.suse.de/package/revisions/SUSE:SLE-15-SP2:GA/yast2-trans. We should automate this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172874] Translation of installer not updated for more than 6 months
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172874 https://bugzilla.suse.com/show_bug.cgi?id=1172874#c4 Ladislav Slezák <lslezak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(lslezak(a)suse.com) | --- Comment #4 from Ladislav Slezák <lslezak(a)suse.com> --- The translations are automatically sent once a week by an internal Jenkins job (https://ci.suse.de/view/YaST/job/yast-POT-package-updater/) to openSUSE Factory. The current latest is this one: https://build.opensuse.org/request/show/818890 But it seems we miss some automation for submitting to Leap, the recent versions were submitted manually by Lubos, see https://build.opensuse.org/package/revisions/openSUSE:Leap:15.2/yast2-trans . The standard YaST packages get to Leap from SLE by some automatic OBS mirroring, see e.g. https://build.opensuse.org/package/revisions/openSUSE:Leap:15.2/yast2 I think we should use the same mechanism also for the translations... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173787] Requirements for darktable-3.0.1 in repositories/graphics/openSUSE_Leap_15.2 are unsatisfied
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173787 Marcus Rückert <mrueckert(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|mrueckert(a)suse.com |asn(a)cryptomilk.org -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173787] Requirements for darktable-3.0.1 in repositories/graphics/openSUSE_Leap_15.2 are unsatisfied
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173787 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |mrueckert(a)suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0