October 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1187962] New: `nil:NilClass` and `false:FalseClass` errors during stage 2
by bugzilla_noreply＠suse.com 17 May '22

17 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1187962 Bug ID: 1187962 Summary: `nil:NilClass` and `false:FalseClass` errors during stage 2 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: x86-64 OS: openSUSE Leap 15.3 Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: mail(a)georg-pfuetzenreuter.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 850738 --> http://bugzilla.opensuse.org/attachment.cgi?id=850738&action=edit save_y2logs Hi, as discussed in IRC, if the following is set, the attached error messages occur during stage two of an AutoYaST deployment of/on Leap 15.3: <do_online_update config:type="boolean">true</do_online_update> After confirming the two error dialogues with `Ok`, the system is left in a broken state, as i.e. the defined logon shells are missing. The workaround is to reinstall with do_online_update set to false: <do_online_update config:type="boolean">false</do_online_update> Cheers, Georg -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1174581] New: %cmake uses absolute path for CMAKE_INSTALL_LIBDIR
by bugzilla_noreply＠suse.com 17 May '22

17 May '22

https://bugzilla.suse.com/show_bug.cgi?id=1174581 Bug ID: 1174581 Summary: %cmake uses absolute path for CMAKE_INSTALL_LIBDIR Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: simonf.lees(a)suse.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- According to https://cmake.org/cmake/help/latest/module/GNUInstallDirs.html: > LIBDIR object code libraries (lib or lib64 or lib/<multiarch-tuple> on Debian) It is meant to contain the path below CMAKE_INSTALL_PREFIX, but currently %cmake sets it to %{_libdir}, which evaluates to /usr/lib64. This breaks several projects which use any variation of ${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_LIBDIR} or libdir=$prefix/${CMAKE_INSTALL_LIBDIR} to generate .pc files. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1183454] New: [Build 20210311] openQA test fails in first_boot: opensuse-welcome fails on pentium3
by bugzilla_noreply＠suse.com 17 May '22

17 May '22

https://bugzilla.suse.com/show_bug.cgi?id=1183454 Bug ID: 1183454 Summary: [Build 20210311] openQA test fails in first_boot: opensuse-welcome fails on pentium3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1665203/modules/firs t_boot/steps/2 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: uhhadd(a)gmail.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: openQA Blocker: Yes opensuse-welcome uses Qt WebEngine, which requires SSE2 and CMOV (https://github.com/v8/v8/blob/dc712da548c7fb433caed56af9a021d964952728/src/…) If those are not available, it simply doesn't start properly. Ideas on how to address this: - Don't install opensuse-welcome on such hardware (probably needs libzypp feature)? - Don't start opensuse-welcome on such hardware? - Just raise the minimum hardware requirements to SSE2 + CMOV, at least for desktop installs? ## Observation openQA test in scenario opensuse-Tumbleweed-NET-i586-install_only@pentium3 fails in [first_boot](https://openqa.opensuse.org/tests/1665203/modules/first_boot/st… ## Test suite description set HDDSIZE=40 as required for ppc64le (failed w/o it on https://openqa.opensuse.org/tests/390330#step/install_and_reboot/21 ## Reproducible Fails since (at least) Build [20210310](https://openqa.opensuse.org/tests/1664163) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=i586&distri=opensuse&… -- You are receiving this mail because: You are on the CC list for the bug.

1 27

[Bug 993885] New: Kde-Live net installer does not reboot after installation
by bugzilla_noreply＠novell.com 17 May '22

17 May '22

http://bugzilla.suse.com/show_bug.cgi?id=993885 Bug ID: 993885 Summary: Kde-Live net installer does not reboot after installation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Live Medium Assignee: fvogt(a)suse.com Reporter: okurz(a)suse.com QA Contact: okurz(a)suse.com Found By: --- Blocker: --- ## observation Continuing through the whole installation process of the NET installer on the Kde-Live medium until the "reboot now" dialog shows up works fine but the reboot does not seem to happen ## steps to reproduce I am in the process of automating this but it can be as easy as * start Kde-Live * call installation from within plasma session * let installer run into "reboot now" action * observe that the system does not reboot ## expected result system should reboot into installed system ## workaround manual reboot of the system yields a properly setup Tumbleweed installation so the installation is ok. -- You are receiving this mail because: You are on the CC list for the bug.

2 31

[Bug 1190065] New: libinput-tools is missing libinput-replay
by bugzilla_noreply＠suse.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1190065 Bug ID: 1190065 Summary: libinput-tools is missing libinput-replay Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: alexander.reimelt(a)protonmail.ch QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Trying to run "libinput replay" only returns "libinput: replay is not installed". I looked through the repo because the gui tool is separeate as well but couldn't find anything. please add libinput-replay to libinput-tools -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1188470] New: VUL-0: CVE-2021-36740: varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request
by bugzilla_noreply＠suse.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1188470 Bug ID: 1188470 Summary: VUL-0: CVE-2021-36740: varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/304008/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1982409 Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8. Reference: https://varnish-cache.org/security/VSV00007.html References: https://bugzilla.redhat.com/show_bug.cgi?id=1982409 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36740 https://github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c41f… https://github.com/varnishcache/varnish-cache/commit/82b0a629f60136e76112c6… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36740 https://docs.varnish-software.com/security/VSV00007/ https://varnish-cache.org/security/VSV00007.html -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1097779] New: VUL-0: CVE-2018-12434: LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channelattack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problemor ROHNP. To discover a key, the attacker needs access to
by bugzilla_noreply＠novell.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1097779 Bug ID: 1097779 Summary: VUL-0: CVE-2018-12434: LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channelattack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problemor ROHNP. To discover a key, the attacker needs access to Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/208302/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: jengelh(a)inai.de Reporter: meissner(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-12434 LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12434 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.4-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.6.5-relnotes.txt -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1086778] New: VUL-0: CVE-2018-8970: libressl: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c inLibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zeroname length, which causes silent omission of hostname verification
by bugzilla_noreply＠novell.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1086778 Bug ID: 1086778 Summary: VUL-0: CVE-2018-8970: libressl: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c inLibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zeroname length, which causes silent omission of hostname verification Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/202623/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: jengelh(a)inai.de Reporter: meissner(a)suse.com QA Contact: security-team(a)suse.de CC: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-8970 The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-8970 http://www.cvedetails.com/cve/CVE-2018-8970/ https://boringssl.googlesource.com/boringssl/+/e759a9cd84198613199259dbed40… https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.1-relnotes.txt https://github.com/libressl-portable/openbsd/commit/0654414afcce51a16d35d05… -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 981004] New: Ensure template unit instances are deleted
by bugzilla_noreply＠novell.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=981004 Bug ID: 981004 Summary: Ensure template unit instances are deleted Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: Linux Status: NEW Severity: Enhancement Priority: P5 - None Component: Basesystem Assignee: jengelh(a)inai.de Reporter: jengelh(a)inai.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When a package is uninstalled, it will also be removed from the boot sequence, by means of %preun generally calling %service_del_preun foo.service, which expands to (among other things) `systemctl disable foo.service`. To disable template instances such as foo(a)bar.service and foo(a)baz.service, one can - and must, since "bar" and "baz" are not known at any time to the package management system - use `systemctl disable foo@.service`, which will disable all instances. A number of packages are lacking the corresponding %service_del_preun template@.service lines, which means template instance links like foo(a)bar.service will stick around after package uninstall. 389-ds apache2 arpwatch autossh booth chrony cups device-mapper dracut envoy freeipa govpn gpsd kmscon libteam lvm2 lvm2-clvm mariadb mdadm mgetty mysql mysql-community-server openct openvpn parkverbot rear redis rfkill syncthing system-config-printer systemd systemd-mini tomcat vpnc vsftpd wicked xf86-input-wacom -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1171321] New: nftables crashes when trying to add rule to nonexistant chain
by bugzilla_noreply＠novell.com 16 May '22

16 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1171321 Bug ID: 1171321 Summary: nftables crashes when trying to add rule to nonexistant chain Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: jengelh(a)inai.de Reporter: mrueckert(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Core was generated by `nft add rule inet traffic-filter input tcp dport { 22, 80, 443 } accept'. Program terminated with signal SIGSEGV, Segmentation fault. #0 erec_print (octx=octx@entry=0x55776a4222c0, erec=erec@entry=0x55776a425780, debug_mask=debug_mask@entry=0) at ../../src/erec.c:95 95 switch (indesc->type) { (gdb) bt #0 erec_print (octx=octx@entry=0x55776a4222c0, erec=erec@entry=0x55776a425780, debug_mask=debug_mask@entry=0) at ../../src/erec.c:95 #1 0x00007f0eadab847a in erec_print_list (octx=octx@entry=0x55776a4222c0, list=list@entry=0x7ffd930c3ff0, debug_mask=0) at ../../src/erec.c:190 #2 0x00007f0eadac2915 in nft_run_cmd_from_buffer (nft=0x55776a4222a0, buf=<optimized out>) at ../../src/libnftables.c:459 #3 0x0000557769ea68a3 in main (argc=14, argv=<optimized out>) at ../../src/main.c:453 (gdb) l 90 char *pbuf = NULL; 91 unsigned int i, end; 92 FILE *f; 93 int l; 94 95 switch (indesc->type) { 96 case INDESC_BUFFER: 97 case INDESC_CLI: 98 line = indesc->data; 99 *strchrnul(line, '\n') = '\0'; (gdb) p indesc $1 = (const struct input_descriptor *) 0x0 (gdb) quit -- You are receiving this mail because: You are on the CC list for the bug.

2 3