August 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1198427] VUL-0: CVE-2022-27536: go1.17,go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1198427 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198427] VUL-0: CVE-2022-27536: go1.17,go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1198427 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jkowalczyk(a)suse.com Flags| |needinfo?(jkowalczyk(a)suse.c | |om) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201385] AUDIT-0: postfix: review of permissions-file-setuid-bit: /usr/sbin/postlog (02755)
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201385 http://bugzilla.opensuse.org/show_bug.cgi?id=1201385#c25 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(dimstar@opensuse. | |org) | --- Comment #25 from Dominique Leuenberger <dimstar(a)opensuse.org> --- (In reply to Christian Wittmer from comment #23) > I am still getting build failure even with the updated permissions package. > > [ 33s] permissions-20201225-150400.3.4 > ######################################## permissions-20201225 - does not sound like 'recent' (In reply to Christian Wittmer from comment #24) > submit to Factory: > https://build.opensuse.org/request/show/992755 Auto-declined (gpg sig validation failed) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201936] New: nVidia modules built under 5.14.21-150400.24.11-default are incompatible with 5.14.21-150400.22-default (__x86_return_thunk)
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201936 Bug ID: 1201936 Summary: nVidia modules built under 5.14.21-150400.24.11-default are incompatible with 5.14.21-150400.22-default (__x86_return_thunk) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: arvidjaar(a)gmail.com QA Contact: sndirsch(a)suse.com Found By: --- Blocker: --- nVidia KMP for 15.4 explicitly installs modules in the GA kernel version: rpm -q --scripts nvidia-gfxG05-kmp-default ... postinstall scriptlet (using /bin/sh): ... # remove still existing old kernel modules (boo#1174204) rm -f /lib/modules/$kver/updates/nvidia*.ko install -m 755 -d /lib/modules/5.14.21-150400.22-$flavor/updates install -m 644 /usr/src/kernel-modules/nvidia-470.129.06-$flavor/nvidia*.ko \ /lib/modules/5.14.21-150400.22-$flavor/updates depmod 5.14.21-150400.22-$flavor If KMP is (re)installed under the current 5.14.21-150400.24.11-default previous (working) modules are deleted from 5.14.21-150400.22-default and replaced with modules built for 5.14.21-150400.24.11-default: bor@10:~> ll /lib/modules/5.14.21-150400.22-default/updates/ total 128744 -rw-r--r-- 1 root root 6745460 Jul 28 08:12 nvidia-drm.ko -rw-r--r-- 1 root root 59235644 Jul 28 08:12 nvidia.ko -rw-r--r-- 1 root root 2499484 Jul 28 08:12 nvidia-modeset.ko -rw-r--r-- 1 root root 439988 Jul 28 08:12 nvidia-peermem.ko -rw-r--r-- 1 root root 62902572 Jul 28 08:12 nvidia-uvm.ko bor@10:~> ll /lib/modules/5.14.21-150400.24.11-default/weak-updates/updates/ total 20 lrwxrwxrwx 1 root root 60 Jul 28 08:13 nvidia-drm.ko -> /lib/modules/5.14.21-150400.22-default/updates/nvidia-drm.ko lrwxrwxrwx 1 root root 56 Jul 28 08:13 nvidia.ko -> /lib/modules/5.14.21-150400.22-default/updates/nvidia.ko lrwxrwxrwx 1 root root 64 Jul 28 08:13 nvidia-modeset.ko -> /lib/modules/5.14.21-150400.22-default/updates/nvidia-modeset.ko lrwxrwxrwx 1 root root 64 Jul 28 08:13 nvidia-peermem.ko -> /lib/modules/5.14.21-150400.22-default/updates/nvidia-peermem.ko lrwxrwxrwx 1 root root 60 Jul 28 08:13 nvidia-uvm.ko -> /lib/modules/5.14.21-150400.22-default/updates/nvidia-uvm.ko bor@10:~> But these modules fail to load under 5.14.21-150400.22-default 2022-07-28T08:22:05.678432+03:00 localhost sudo: bor : TTY=pts/0 ; PWD=/home/bor ; USER=root ; COMMAND=/usr/sbin/modprobe nvidia 2022-07-28T08:22:05.682354+03:00 localhost sudo: pam_unix(sudo:session): session opened for user root by (uid=1000) 2022-07-28T08:22:07.039522+03:00 localhost kernel: [ 75.589360][ T1736] nvidia: loading out-of-tree module taints kernel. 2022-07-28T08:22:07.039909+03:00 localhost kernel: [ 75.589373][ T1736] nvidia: module license 'NVIDIA' taints kernel. 2022-07-28T08:22:07.040023+03:00 localhost kernel: [ 75.589374][ T1736] Disabling lock debugging due to kernel taint 2022-07-28T08:22:07.053578+03:00 localhost kernel: [ 75.617999][ T1736] nvidia: Unknown symbol __x86_return_thunk (err -2) It makes it impossible for a user to boot with previous kernel if necessary for troubleshooting. Quoting https://bugzilla.opensuse.org/show_bug.cgi?id=1174204#c11 That's how it is supposed to be. Create symlinks for all kernels sharing the same kABI. The problem is that kernel update as can be seen is not kABI compatible with GA kernel. At least not downwards compatible (not sure whether it is supported to run modules built for older kernel - they obviously lack mitigation added in newer kernel). -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 1196447] New: mame dependency error
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

1 2

[Bug 1199734] New: Cannot join windows domain with YaST
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1199734 Bug ID: 1199734 Summary: Cannot join windows domain with YaST Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: x86-64 OS: openSUSE Leap 15.3 Status: NEW Severity: Normal Priority: P5 - None Component: Samba Assignee: samba-maintainers(a)SuSE.de Reporter: rs.opensuse(a)spitzenpfeil.org QA Contact: samba-maintainers(a)SuSE.de Found By: --- Blocker: --- There appears to be some issue with "FSMO roles". Essentially joining a windows domain works just fine with Leap 15.0 / 15.1 / 15.2 (mostly) and fails with 15.3 Depending on which DC our round robin DNS returns to the client, one either gets a valid response for the LDAP server or (null). Lengthy discussion in the forum: https://forums.opensuse.org/showthread.php/570134-Joining-a-windows-domain-… -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1200729] New: yast samba-client aborts
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200729 Bug ID: 1200729 Summary: yast samba-client aborts Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: rs.opensuse(a)spitzenpfeil.org QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 859717 --> http://bugzilla.opensuse.org/attachment.cgi?id=859717&action=edit y2log Find attached y2log TW version 20220619 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1202067] MicroOS Desktop: unacceptable TLS certificate
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1202067 https://bugzilla.suse.com/show_bug.cgi?id=1202067#c8 Axel Braun <axel.braun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(guillaume.gardet@ | |arm.com), | |needinfo?(axel.braun(a)gmx.de | |) | --- Comment #8 from Axel Braun <axel.braun(a)gmx.de> --- Created attachment 860606 --> https://bugzilla.suse.com/attachment.cgi?id=860606&action=edit y2logs -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199734] Cannot join windows domain with YaST
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1199734 https://bugzilla.suse.com/show_bug.cgi?id=1199734#c22 --- Comment #22 from robert spitzenpfeil <rs.opensuse(a)spitzenpfeil.org> --- Joining our AD works now. Yast doesn't crash anymore. But that's about it. Console logins with winbind auth, ssh logins, pam_mount etc. do not work. Something in the pam stack might be wrong. When I find some time, I will investigate further and probably open a new bug report. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201584] [Build :23464:libixion] nothing provides 'liborcus-0.17.so.0()(64bit)' needed by the to be installed libreoffice-7.3.3.1-150300.14.22.21.9.x86_6
by bugzilla_noreply＠suse.com 04 Aug '22

04 Aug '22

https://bugzilla.suse.com/show_bug.cgi?id=1201584 https://bugzilla.suse.com/show_bug.cgi?id=1201584#c3 --- Comment #3 from Martin Loviska <mloviska(a)suse.com> --- Another failure in leap15.4 https://openqa.suse.de/tests/9260968#step/updates_packagekit_gpk/17 -- You are receiving this mail because: You are on the CC list for the bug.

1 0