September 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1175825] VUL-0: brotli: decoder: integer overflow when input chunk is larger than 2GiB
by bugzilla_noreply＠suse.com 01 Sep '20

01 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1175825 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/266093/ CC| |wolfgang.frisch(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171055] [Build 20200502] kdump_and_crash: Failed to start Switch Root
by bugzilla_noreply＠suse.com 01 Sep '20

01 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1171055 https://bugzilla.suse.com/show_bug.cgi?id=1171055#c15 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE Flags|needinfo?(ptesarik(a)suse.com | |), | |needinfo?(dimstar@opensuse. | |org) | --- Comment #15 from Fabian Vogt <fvogt(a)suse.com> --- While the other bug is a duplicate of this one, let's mark it the other way around as the other one has a PR pending. *** This bug has been marked as a duplicate of bug 1172670 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172670] kdump: fails to create dump as dump-capture kernel boots into systemd emergency mode
by bugzilla_noreply＠suse.com 01 Sep '20

01 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1172670 https://bugzilla.suse.com/show_bug.cgi?id=1172670#c10 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar(a)opensuse.org --- Comment #10 from Fabian Vogt <fvogt(a)suse.com> --- *** Bug 1171055 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175565] New: lvm can't pass build with gcc option Wstringop-overflow
by bugzilla_noreply＠suse.com 01 Sep '20

01 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1175565 Bug ID: 1175565 Summary: lvm can't pass build with gcc option Wstringop-overflow Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: heming.zhao(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- when build lvm2-2.03.10 package, the lvmlockd can't pass build. warning: ``` [ 72s] In function 'strcpy', [ 72s] inlined from '_store_str' at device_mapper/libdm-common.c:1453:2, [ 72s] inlined from '_stack_node_op' at device_mapper/libdm-common.c:1589:2: [ 72s] /usr/include/bits/string_fortified.h:90:10: warning: '__builtin_strcpy' writing 1 or more bytes into a region of size 0 overflows the destination [-Wstringop-overflow=] [ 72s] 90 | return __builtin___strcpy_chk (__dest, __src, __bos (__dest)); ``` the reason is lvm2 use zero-sized array like: ``` struct node_op_parms { struct dm_list list; node_op_t type; char *dev_name; uint32_t major; uint32_t minor; uid_t uid; gid_t gid; mode_t mode; uint32_t read_ahead; uint32_t read_ahead_flags; char *old_name; int warn_if_udev_failed; unsigned rely_on_udev; char names[0]; }; ``` the last item char names[0] should be changed with flexible array: char names[] -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1175980] New: chainloading is broken with the new shim
by bugzilla_noreply＠suse.com 01 Sep '20

01 Sep '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1175980 Bug ID: 1175980 Summary: chainloading is broken with the new shim Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: nwr10cst-oslnx(a)yahoo.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0 Build Identifier: I have Ubuntu-20 and Tumbleweed 20200829 installed side by side in a KVM virtual machine. I also have Jump 15.2 and Tumbleweed installed side by side in a different VM. Note that Jump 15.2 uses the SUSE shim rather than the openSUSE shim. I will describe what I am seeing for the ubuntu case. I see similar problems in both of those virtual machines. If I allow Ubuntu to control the booting, then it cannot boot Tumbleweed. If I allow Tumbleweed to control the booting, then it cannot boot Ubuntu. I added an entry to the Tumbleweed boot menu to chainload to the Ubuntu shim. The idea was that this would allow booting Ubuntu from the Tumbleweed boot menu. In that past that used to work. Now it does not work, and gives a "bad signature" error. I tried it the other way. That is, I added an entry to the Ubuntu boot menu to chainload the openSUSE shim. That also does not work (gives a bad signature error). I should not that if I disable secure-boot, then these all work. I used that to test the boot menu entry. But with secure-boot enabled, they do not work. Next, I tried importing the Tumbleweed shim certificate ("4659838C-shim.crt") while running Ubuntu. With that change, the Ubuntu direct menu entry for Tumbleweed now works. But the menu entry to chainload to the Tumbleweed shim still does not work. Hmm, I should explain "does not work". When I use the chainload menu entry, that seems to work. It brings up the expected menu. So if I chainload from Tumbleweed to Ubuntu, I do see the Ubuntu boot menu. But when I attempt to boot Ubuntu, I get the "bad signature" error as the kernel is loaded. Similarly, if I chainload from Ubuntu to Tumbleweed (and set the boot order to prefer Ubuntu), then the chainload brings up the Tumbleweed boot menu. But if I attempt to boot Tumbleweed, I get the "bad signature" error as the kernel is loaded. After importing the Tumbleweed shim certificate, that error message changes to "System is compromised. halting" The Ubuntu files (in "\EFI\ubuntu") have dates from last April. I'm guessing it is the openSUSE changes that are causing the problems in both directions. Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug.

1 1