December 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1199184] New: switch Tumbleweed to a 4096bit RSA signing key
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1199184 Bug ID: 1199184 Summary: switch Tumbleweed to a 4096bit RSA signing key Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: dimstar(a)opensuse.org Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: dmueller(a)suse.com Found By: --- Blocker: --- We currently still use a 2048 bit key for signing. It would be better to switch to a 4096 RSA key. -- You are receiving this mail because: You are on the CC list for the bug.

1 24

[Bug 1182998] New: libcontainers-common seems to miss prerequires
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1182998 Bug ID: 1182998 Summary: libcontainers-common seems to miss prerequires Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- There are several errors during initial installation of libcontainers-common. As result, the configuration is broken and podman not correct working: # 2021-03-04 05:56:10 libcontainers-common-20210112-2.1.noarch.rpm installed ok # Additional rpm output: # /var/tmp/rpm-tmp.fgZbcB: line 4: findmnt: command not found # /var/tmp/rpm-tmp.fgZbcB: line 4: findmnt: command not found # 2021-03-04 05:56:10|install|libcontainers-common|20210112-2.1|noarch||openSUSE-MicroOS-20210302-0|867c95e8e8cd2e09046dc327b743e9134c6072146f59c6f3b357b0e92420b494| # 2021-03-04 05:56:10 openssh-8.4p1-4.1.x86_64.rpm installed ok # Additional rpm output: # find: '/etc/init.d/rc[35].d': No such file or directory # -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1200441] New: go1.19 release tracking
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1200441 Bug ID: 1200441 Summary: go1.19 release tracking Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: jkowalczyk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- go1.19 (expected August 2022) is a major release of Go. Minor releases of go1.19.x will be provided through August 2023. This issue tracks go1.19.x releases packaged and submitted initially to openSUSE:Factory and can be referenced in submissions to additional repositories. Go Release Cycle https://github.com/golang/go/wiki/Go-Release-Cycle Go Release history https://golang.org/doc/devel/release.html -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1205667] New: VUL-0: CVE-2021-44758: heimdal -- security update
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1205667 Bug ID: 1205667 Summary: VUL-0: CVE-2021-44758: heimdal -- security update Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/348699/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- openSUSE:Backports and openSUSE:Factory only. CVE-2021-44758 Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. CVE-2021-3671 Joseph Sutton discovered that the Heimdal KDC does not validate that the server name in the TGS-REQ is present before dereferencing, which may result in denial of service. CVE-2021-44758 It was discovered that Heimdal is prone to a NULL dereference in acceptors where an initial SPNEGO token that has no acceptable mechanisms, which may result in denial of service for a server application that uses SPNEGO. CVE-2022-3437 Several buffer overflow flaws and non-constant time leaks were discovered when using 1DES, 3DES or RC4 (arcfour). CVE-2022-41916 An out-of-bounds memory access was discovered when Heimdal normalizes Unicode, which may result in denial of service. CVE-2022-42898 It was discovered that integer overflows in PAC parsing may result in denial of service for Heimdal KDCs or possibly Heimdal servers. CVE-2022-44640 It was discovered that the Heimdal's ASN.1 compiler generates code that allows specially crafted DER encodings to invoke an invalid free on the decoded structure upon decode error, which may result in remote code execution in the Heimdal KDC. For the stable distribution (bullseye), these problems have been fixed in version 7.7.0+dfsg-2+deb11u2. We recommend that you upgrade your heimdal packages. For the detailed security status of heimdal please refer to its security tracker page at: https://security-tracker.debian.org/tracker/heimdal References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44758 https://security-tracker.debian.org/tracker/DSA-5287-1 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996586 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1155207] New: systemctl command line completion is very slow
by bugzilla_noreply＠novell.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1155207 Bug ID: 1155207 Summary: systemctl command line completion is very slow Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: carlos.e.r(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- systemctl command line completion is very slow Suppose I type: systemctl status smart[tab][tab] and I get nothing. One second, two seconds... so I insist and hit tab several times, and after several seconds I get (one line per second): Isengard:~ # systemctl status smart smartcard.target smartd.service smartd_generate_opts.path smartd_generate_opts.service Isengard:~ # systemctl status smart smartcard.target smartd.service smartd_generate_opts.path smartd_generate_opts.service Isengard:~ # systemctl status smart smartcard.target smartd.service smartd_generate_opts.path smartd_generate_opts.service Isengard:~ # systemctl status smart and then I can type "d" and enter. Why is it that slow? It is an M2 disk. ie, SSD technology. It responds instantly when completing a normal command: Isengard:~ # smart smart_agetty smartctl smartd Isengard:~ # smart And that system is not busy at all, load 0.20. I can replicate the issue on other machines, and has been so probably for a year or so. Google "systemctl completion slow" finds reports on other distributions and several media. <https://bugzilla.redhat.com/show_bug.cgi?id=1491668> <https://bugs.launchpad.net/ubuntu/+source/bash-completion/+bug/1471723> and: <https://github.com/systemd/systemd/issues/7185> -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1159528] New: keybase client package is extremely outdated, plus lacks all gui elements
by bugzilla_noreply＠novell.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1159528 Bug ID: 1159528 Summary: keybase client package is extremely outdated, plus lacks all gui elements Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: Mathias.Homann(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- the keybase package that comes packaged in openSUSE Leap 15.1 is outdated... to the ponit of being a prehistoric artefact: bundled comes version 2.11 - current from keybase.io is 5.1.1.... also, it lacks all gui elements - probably because it is such an old version. please update to the latest version. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1126900] New: health-checker: grub2-editenv: error: cannot open `/boot/grub2/grubenv': Read-only file system.
by bugzilla_noreply＠novell.com 06 Apr '23

06 Apr '23

http://bugzilla.suse.com/show_bug.cgi?id=1126900 Bug ID: 1126900 Summary: health-checker: grub2-editenv: error: cannot open `/boot/grub2/grubenv': Read-only file system. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kubic Assignee: iforster(a)suse.com Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- >From a health-checker run: Clearing GRUB flag + grub2-editenv - set health_checker_flag=0 grub2-editenv: error: cannot open `/boot/grub2/grubenv': Read-only file system. Starting health check -- You are receiving this mail because: You are on the CC list for the bug.

2 12

[Bug 1194160] New: texlive-tex-gyre-fonts: Unknown Type 1 weight "BoldItalic"
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1194160 Bug ID: 1194160 Summary: texlive-tex-gyre-fonts: Unknown Type 1 weight "BoldItalic" Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Upgrading from Leap 15.2 to 15.3 via "zypper dup" showed this error message: (4328/5706) Installing: texlive-tex-gyre-fonts-2017.134.2.004svn18651-5.18.noarch .....[done] Additional rpm output: Unknown Type 1 weight "BoldItalic" Couldn't determine weight for qcsbi.pfb -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1204746] New: texlive-scheme-medium missing english documentation for fancyhdr
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1204746 Bug ID: 1204746 Summary: texlive-scheme-medium missing english documentation for fancyhdr Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Patterns Assignee: dimstar(a)opensuse.org Reporter: lukasstraub2(a)web.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When installing texlive-scheme-medium, it includes documentation, but for example for fancyhdr only the italian docs are included, not the english ones. i.e. only texlive-fancyhdr-it is installed, not texlive-fancyhdr-doc. I suspect this is not the only package that has this problem. I expect at least english documentation to be installed. -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1195094] New: nVidia: Remove generic (fb) driver first ...
by bugzilla_noreply＠suse.com 05 Apr '23

05 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1195094 Bug ID: 1195094 Summary: nVidia: Remove generic (fb) driver first ... Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Enhancement Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: sndirsch(a)suse.com QA Contact: sndirsch(a)suse.com Found By: --- Blocker: --- Users of nVidia's proprietary driver are running into issues with the introduction of 'simpledrm'. https://forums.developer.nvidia.com/t/510-39-01-on-5-16-0-kernel-green-scre… There are workarounds available like a) patching the nvidia kernel module and no longer calling pci_request_regions(...) function b) Kernel option 'initcall_blacklist=simpledrm_platform_driver_init' c) Kerneloption ' fbcon=map:1'. But the culprit is that nVidia doesn't remove the generic driver (e.g. efifb/vesafb) first. This should be changed to address the real issue here. API under MIT license https://elixir.bootlin.com/linux/latest/source/include/drm/drm_aperture.h Example for nouveau driver. https://elixir.bootlin.com/linux/latest/source/drivers/gpu/drm/nouveau/nouv… Thomas is the author of 'simpledrm'. Please correct me, if I misunderstood anything and feel free to add more details here. -- You are receiving this mail because: You are on the CC list for the bug.

1 14