July 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1198266] procps-4.0.0 is an experimental upstream release
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1198266 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|1198150 | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200600] [Build 20220614] openQA test fails in inotify12
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1200600 https://bugzilla.suse.com/show_bug.cgi?id=1200600#c22 --- Comment #22 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:2382-1: An update that solves 15 vulnerabilities and has 22 fixes is now available. Category: security (important) Bug References: 1065729,1129770,1177282,1194013,1196964,1197170,1199482,1199487,1199657,1200343,1200571,1200599,1200600,1200604,1200605,1200608,1200619,1200692,1200762,1200806,1200807,1200809,1200810,1200813,1200820,1200821,1200822,1200829,1200868,1200869,1200870,1200871,1200872,1200873,1200925,1201080,1201251 CVE References: CVE-2020-26541,CVE-2021-4157,CVE-2022-1012,CVE-2022-1679,CVE-2022-20132,CVE-2022-20141,CVE-2022-20154,CVE-2022-2318,CVE-2022-26365,CVE-2022-29900,CVE-2022-29901,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742,CVE-2022-33981 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 12-SP5 (src): kernel-default-4.12.14-122.127.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): kernel-docs-4.12.14-122.127.1, kernel-obs-build-4.12.14-122.127.1 SUSE Linux Enterprise Server 12-SP5 (src): kernel-default-4.12.14-122.127.1, kernel-source-4.12.14-122.127.1, kernel-syms-4.12.14-122.127.1 SUSE Linux Enterprise Live Patching 12-SP5 (src): kernel-default-4.12.14-122.127.1, kgraft-patch-SLE12-SP5_Update_33-1-8.3.1 SUSE Linux Enterprise High Availability 12-SP5 (src): kernel-default-4.12.14-122.127.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1197242] server:mail/postfix: postdrop error with enabled SELINUX when sending mail from a systemd service
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

1 0

[Bug 1200911] New: A denial is observed after upgrading to systemd v251
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1200911 Bug ID: 1200911 Summary: A denial is observed after upgrading to systemd v251 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: fbui(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After submitting systemd v251 to Factory (sr#981446), openQA reported the following regression: https://openqa.opensuse.org/tests/2420012#step/journal_check/22 > Jun 17 14:08:14.358418 localhost systemd-gpt-auto-generator[441]: Failed to dissect: Permission denied > Jun 17 14:08:14.358432 localhost kernel: audit: type=1400 audit(1655474893.968:10): avc: denied { sys_admin } for pid=441 comm="systemd-gpt-aut" capability=21 scontext=system_u:system_r:systemd_gpt_generator_t:s0 tcontext=system_u:system_r:systemd_gpt_generator_t:s0 tclass=capability permissive=0 Apparently selinux prevents now systemd-gpt-auto-generator from accessing to the filesystem. I took a quick look at the changes introduced in systemd-gpt-auto-generator between v250 and v251 but couldn't find anything relevant. Could the secteam have a look and maybe help me figuring out what's going wrong ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1197242] [SELinux] server:mail/postfix: postdrop error with enabled SELINUX when sending mail from a systemd service
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1197242 https://bugzilla.suse.com/show_bug.cgi?id=1197242#c6 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jsegitz(a)suse.com |iforster(a)suse.com --- Comment #6 from Johannes Segitz <jsegitz(a)suse.com> --- The minor policy adjustments are in current policy in security:SELinux and Factory. Assigning to the transactional-update maintainer since the root cause is in there. Since the fix already exists this is mainly to get the bnc in the changelog -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193984] New: SELinux: targeted: rpcinfo violation
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1193984 Bug ID: 1193984 Summary: SELinux: targeted: rpcinfo violation Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: okir(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This is with Leap 15.3 and the targeted SELinux policy from MicroOS 5.1 This is a two-node configuration. Running rpcinfo on the client, trying to perform a NULL call to the server's rpcbind: /sbin/rpcinfo -T udp $server_ip portmapper The test user is tied to SELinux user staff_u. This results in the following audit message: audit: type=1400 audit(1640160326.582:12): avc: denied { name_bind } for pid=4754 comm="rpcinfo" src=690 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket permissive=1 It's possible that this is harmless (rpcinfo may just try to do a bindresvport() call in case it's running with privileges). However, in order to avoid noise, we may want to patch this out for euid != 0. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1201084] neovim immediately crashes on start
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201084 https://bugzilla.suse.com/show_bug.cgi?id=1201084#c3 --- Comment #3 from Martin Li��ka <martin.liska(a)suse.com> --- Ok, so may I close this as resolved? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198549] Update TLP to the latest version 1.5.0
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1198549 Emiliano Langella <emiliano.langella(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emiliano.langella(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201236] New: vlc can not execute rtsp-stream in HD-quality
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201236 Bug ID: 1201236 Summary: vlc can not execute rtsp-stream in HD-quality Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: 64bit OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: guenter.halt(a)halt-hoenow.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hardware: FRITZ!Box 6490 cabel Local-IP http://192.168.178.1 Provider: Vodafone (Kabel-Deutschland) Insatlled vlc: 3.0.17.3-bp154.1.49 vlc-codecs: 3.0.17.3-pm154.2.3 vlc-codec-gstreamer: 3.0.17.3-bp154.1.49 The vlc Player shows only a red hat (sound works) if the vlc is called : vlc rtsp://192.168.178.1:554/?avm=1&freq=330&bw=8&msys=dvbc&mtype=256qam&sr=6900&specinv=1&pids=0,16,17,18,20,5100,5101,1170,1176,2171,2172,5102,5103,5104,5105 (ARD-HD) on cabel vlc works fine, using SD-quality vlc http://192.168.178.1/dvb/m3u/12200_53601.m3u?sid=58397d19db75f259 (RTL-SD) The PC runs in dualboot Leap15.3 or Leap15.4 In Leap15.3 all TV-Stations can be shown -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1201431] New: VUL-0: CVE-2022-29187: git: incomplete fix for CVE-2022-24765
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201431 Bug ID: 1201431 Summary: VUL-0: CVE-2022-29187: git: incomplete fix for CVE-2022-24765 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: danilo.spinella(a)suse.com Reporter: Andreas.Stieger(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- From https://lists.q42.co.uk/pipermail/git-announce/2022-July/001250.html Fixed in Git v2.37.1, v2.30.5, v2.31.4, v2.32.3, v2.33.4, v2.34.4, v2.35.4, and v2.36.2 CVE-2022-29187, where the fixes in v2.36.1 and below to address CVE-2022-24765 released earlier may not have been complete. * The safety check that verifies a safe ownership of the Git worktree is now extended to also cover the ownership of the Git directory (and the `.git` file, if there is any). https://github.com/git/git/commit/3b0bf2704980b1ed6018622bdf5377ec22289688 -- You are receiving this mail because: You are on the CC list for the bug.

1 2