December 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1206001] Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 with Parallels virtualisation
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1206001 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Other |GNOME Assignee|screening-team-bugs(a)suse.de |gnome-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206005] New: [doc] 19.2.3 Default privileges
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1206005 Bug ID: 1206005 Summary: [doc] 19.2.3 Default privileges Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: deano_ferrari(a)hotmail.com QA Contact: fs(a)suse.com Found By: --- Blocker: --- 19.2.3 Default privileges: https://doc.opensuse.org/documentation/leap/security/html/book-security/cha… With respect to the following files described... /etc/polkit-default-privs.standard Defines privileges suitable for most desktop systems /etc/polkit-default-privs.restrictive Designed for machines administered centrally I note the above are now located at /usr/etc/ and they are called standard and restrictive. There is an 'easy' set of privileges as well that shoud be also documented... > rpm -ql polkit-default-privs /etc/polkit-1/rules.d/90-default-privs.rules /usr/etc /usr/etc/polkit-default-privs /usr/etc/polkit-default-privs/local.template /usr/etc/polkit-default-privs/profiles /usr/etc/polkit-default-privs/profiles/easy /usr/etc/polkit-default-privs/profiles/restrictive /usr/etc/polkit-default-privs/profiles/standard /usr/sbin/chkstat-polkit /usr/sbin/set_polkit_default_privs /usr/share/doc/packages/polkit-default-privs /usr/share/doc/packages/polkit-default-privs/README.md /usr/share/fillup-templates/sysconfig.security-polkit_default_privs /usr/share/man/man5/polkit-default-privs.5.gz /usr/share/man/man8/set_polkit_default_privs.8.gz -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1206001] Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 with Parallels virtualisation
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1206001 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Critical |Major -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206004] New: Adding Breeze gtk4 theme into plasma ?
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1206004 Bug ID: 1206004 Summary: Adding Breeze gtk4 theme into plasma ? Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Tumbleweed Status: NEW Severity: Enhancement Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: belazizadam04(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 863287 --> http://bugzilla.opensuse.org/attachment.cgi?id=863287&action=edit Celluloid use gtk4 default adwaita Hi I got a bad review of Opensuse Tumbleweed by one of my friend saying that breeze gtk4 isn't included as default (he use a lot of gtk4 application) so I wanted to know how to package it and set as default for KDE desktop -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1205871] New: VUL-0: chromium: multiple security issues fixed in 108.0.5359.71
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1205871 Bug ID: 1205871 Summary: VUL-0: chromium: multiple security issues fixed in 108.0.5359.71 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: abergmann(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-des… - High CVE-2022-4174: Type Confusion in V8. - High CVE-2022-4175: Use after free in Camera Capture. - High CVE-2022-4176: Out of bounds write in Lacros Graphics. - High CVE-2022-4177: Use after free in Extensions. - High CVE-2022-4178: Use after free in Mojo. - High CVE-2022-4179: Use after free in Audio. - High CVE-2022-4180: Use after free in Mojo. - High CVE-2022-4181: Use after free in Forms. - Medium CVE-2022-4182: Inappropriate implementation in Fenced Frames. - Medium CVE-2022-4183: Insufficient policy enforcement in Popup Blocker. - Medium CVE-2022-4184: Insufficient policy enforcement in Autofill. - Medium CVE-2022-4185: Inappropriate implementation in Navigation. - Medium CVE-2022-4186: Insufficient validation of untrusted input in Downloads. - Medium CVE-2022-4187: Insufficient policy enforcement in DevTools. - Medium CVE-2022-4188: Insufficient validation of untrusted input in CORS. - Medium CVE-2022-4189: Insufficient policy enforcement in DevTools. - Medium CVE-2022-4190: Insufficient data validation in Directory. - Medium CVE-2022-4191: Use after free in Sign-In. - Medium CVE-2022-4192: Use after free in Live Caption. - Medium CVE-2022-4193: Insufficient policy enforcement in File System API. - Medium CVE-2022-4194: Use after free in Accessibility. - Medium CVE-2022-4195: Insufficient policy enforcement in Safe Browsing. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1205871] VUL-0: chromium: multiple security issues fixed in 108.0.5359.71
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1205871 https://bugzilla.suse.com/show_bug.cgi?id=1205871#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2022:10229-1: An update that fixes 22 vulnerabilities is now available. Category: security (important) Bug References: 1205871 CVE References: CVE-2022-4174,CVE-2022-4175,CVE-2022-4176,CVE-2022-4177,CVE-2022-4178,CVE-2022-4179,CVE-2022-4180,CVE-2022-4181,CVE-2022-4182,CVE-2022-4183,CVE-2022-4184,CVE-2022-4185,CVE-2022-4186,CVE-2022-4187,CVE-2022-4188,CVE-2022-4189,CVE-2022-4190,CVE-2022-4191,CVE-2022-4192,CVE-2022-4193,CVE-2022-4194,CVE-2022-4195 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): chromium-108.0.5359.71-bp154.2.49.1 openSUSE Backports SLE-15-SP3 (src): chromium-108.0.5359.71-bp153.2.142.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202513] VUL-0: CVE-2022-35133: cherrytree: cross-site scripting (XSS) vulnerability in CherryTree v0.99.30
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1202513 https://bugzilla.suse.com/show_bug.cgi?id=1202513#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2022:10230-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1202513 CVE References: CVE-2022-35133 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): cherrytree-0.99.49+3-bp154.2.3.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206003] New: In wayland session several keyboard shortcuts don't work in virt-viewer session. In xorg they do.
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1206003 Bug ID: 1206003 Summary: In wayland session several keyboard shortcuts don't work in virt-viewer session. In xorg they do. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: michiel(a)nexigon.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Running TW snapshot 20221201 with Gnome shell. virt-viewer-11.0-4.1.x86_64 gnome-shell-43.1-1.1.x86_64 Since several months I noticed that several keyboard shortcuts don't work in a virt-viewer session. Tested with guests in Proxmox VE and locally in virt-manager. In a xorg gnome session they do work in the guests virt-viewer session. It doesn�t matter if the guests run wayland or xorg session, both work as long as xorg session on the host is used. I haven't tested all combinations but here are the tests I did so far: Xorg: what works inside guest virt-viewer session: super key super key + TAB ALT + ` ALT + TAB CTRL + F CTRL + C CTRL + V Wayland: what works, all other keys from above list don't work: CTRL + F CTRL + C CTRL + V I already have reset my shortcut keys. Please advise what extra info is needed or what test I could run. As the issue only seems to present itself in gnome wayland I reported in category gnome. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203630] New: Multiple occurences of "BUG: workqueue leaked lock or atomic" causing OOM conditions after kernel update 5.14.21-150400.24.18-default -> 5.14.21-150400.24.21-default
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1203630 Bug ID: 1203630 Summary: Multiple occurences of "BUG: workqueue leaked lock or atomic" causing OOM conditions after kernel update 5.14.21-150400.24.18-default -> 5.14.21-150400.24.21-default Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: okurz(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Observation See the detailed report in https://progress.opensuse.org/issues/116722 We observed multiple occassions of "BUG: workqueue leaked lock or atomic" causing OOM conditions after kernel update 5.14.21-150400.24.18-default -> 5.14.21-150400.24.21-default. Detailed log contents: ``` 1202771 Sep 18 06:41:21 openqa kernel: BUG: workqueue leaked lock or atomic: kworker/u21:2/0x00000001/19034 1202772 last function: xs_error_handle [sunrpc] 1202773 Sep 18 06:41:21 openqa kernel: CPU: 2 PID: 19034 Comm: kworker/u21:2 Not tainted 5.14.21-150400.24.21-default #1 SLE15-SP4 7550826c4c7e8c258239e300508e0c8b2a69bad2 1202774 Sep 18 06:41:21 openqa kernel: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 1202775 Sep 18 06:41:21 openqa kernel: Workqueue: xprtiod xs_error_handle [sunrpc] 1202776 Sep 18 06:41:21 openqa kernel: Call Trace: 1202777 Sep 18 06:41:21 openqa kernel: <TASK> 1202778 Sep 18 06:41:21 openqa kernel: dump_stack_lvl+0x45/0x5b 1202779 Sep 18 06:41:21 openqa kernel: process_one_work+0x390/0x440 1202780 Sep 18 06:41:21 openqa kernel: worker_thread+0x2d/0x3d0 1202781 Sep 18 06:41:21 openqa kernel: ? process_one_work+0x440/0x440 1202782 Sep 18 06:41:21 openqa kernel: kthread+0x156/0x180 1202783 Sep 18 06:41:21 openqa kernel: ? set_kthread_struct+0x50/0x50 1202784 Sep 18 06:41:21 openqa kernel: ret_from_fork+0x22/0x30 1202785 Sep 18 06:41:21 openqa kernel: </TASK> 1202786 Sep 18 06:41:21 openqa kernel: BUG: scheduling while atomic: kworker/u21:2/19034/0x00000002 1202787 Sep 18 06:41:21 openqa kernel: Modules linked in: dm_mod iscsi_ibft iscsi_boot_sysfs rfkill loop xfs libcrc32c kvm_amd ccp kvm virtio_net net_failover virtio_balloon failover irqbypass joydev i2c_piix4 pcspkr button nfsd auth_rpcgss nfs_acl lockd grace fuse sunrpc configfs ip _tables x_tables ext4 crc16 mbcache jbd2 drm_kms_helper ata_generic syscopyarea sysfillrect sysimgblt serio_raw fb_sys_fops cec ata_piix rc_core ahci uhci_hcd libahci ehci_hcd drm libata usbcore virtio_blk floppy qemu_fw_cfg sg scsi_mod 1202788 Sep 18 06:41:21 openqa kernel: Supported: Yes 1202789 Sep 18 06:41:21 openqa kernel: CPU: 2 PID: 19034 Comm: kworker/u21:2 Not tainted 5.14.21-150400.24.21-default #1 SLE15-SP4 7550826c4c7e8c258239e300508e0c8b2a69bad2 1202790 Sep 18 06:41:21 openqa kernel: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 1202791 Sep 18 06:41:21 openqa kernel: Workqueue: 0x0 (xprtiod) 1202792 Sep 18 06:41:21 openqa kernel: Call Trace: 1202793 Sep 18 06:41:21 openqa kernel: <TASK> 1202794 Sep 18 06:41:21 openqa kernel: dump_stack_lvl+0x45/0x5b 1202795 Sep 18 06:41:21 openqa kernel: __schedule_bug+0x52/0x70 1202796 Sep 18 06:41:21 openqa kernel: __schedule+0xdc4/0x1140 1202797 Sep 18 06:41:21 openqa kernel: ? arch_local_irq_enable+0x7/0xc 1202798 Sep 18 06:41:21 openqa kernel: schedule+0x64/0xe0 1202799 Sep 18 06:41:21 openqa kernel: worker_thread+0xab/0x3d0 1202800 Sep 18 06:41:21 openqa kernel: ? process_one_work+0x440/0x440 1202801 Sep 18 06:41:21 openqa kernel: kthread+0x156/0x180 1202802 Sep 18 06:41:21 openqa kernel: ? set_kthread_struct+0x50/0x50 1202803 Sep 18 06:41:21 openqa kernel: ret_from_fork+0x22/0x30 1202804 Sep 18 06:41:21 openqa kernel: </TASK> 1202805 Sep 18 06:41:46 openqa kernel: watchdog: BUG: soft lockup - CPU#2 stuck for 26s! [kworker/2:2:24024] ``` after that the process is stuck for a longer time until processes like postgres run into out of memory conditions eventually crashing the complete machine. I looked into 10 days of logs before the upgrade 5.14.21-150400.24.18-default -> 5.14.21-150400.24.21-default and found no mentions of the above condition. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1206001] New: Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 with Parallels virtualisation
by bugzilla_noreply＠suse.com 04 Dec '22

04 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1206001 Bug ID: 1206001 Summary: Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 with Parallels virtualisation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: michael(a)bleistein.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 Macbook Pro with Parallels 18.1.0 virtualisation. After installing and reboot the cursor is not visible in the main GNOME desktop area. Resize handles on windows are not displayed/working. This behavior is unaffected by the installation status of Parallels Tools. Booting with the 20221128-0 kernel is not affecting the problem. Changing from Wayland to X makes the system usable again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0