September 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c18 --- Comment #18 from Kilian Hanich <khanich.opensource(a)gmx.de> --- (In reply to Chester Lin from comment #17) > BTW, MokUtil shouldn't be able to create any EFI variable to uboot because > uboot has not yet supported SetVariable [EFI_RT_SUPPORTED_SET_VARIABLE, > 0x0040] in its real-time services table. See: > > https://github.com/u-boot/u-boot/blob/v2022.04/lib/efi_loader/efi_runtime. > c#L124 Well, mokutil can't, it errors out, but it thinks it can because as it seems the efivar library authors haven't thought about the possibility that efivarfs could be read-only and only check if it exists (this function gets called when the library gets initialized) which is then relied upon by mokutil. https://github.com/rhboot/efivar/blob/main/src/efivarfs.c#L67 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c17 --- Comment #17 from Chester Lin <chester.lin(a)suse.com> --- IIRC, uboot can only support UEFI SecureBoot in a special manner, which needs to specifically install the PK, KEK and db via the u-boot shell. See: https://github.com/u-boot/u-boot/blob/v2022.04/doc/develop/uefi/uefi.rst#co… BTW, MokUtil shouldn't be able to create any EFI variable to uboot because uboot has not yet supported SetVariable [EFI_RT_SUPPORTED_SET_VARIABLE, 0x0040] in its real-time services table. See: https://github.com/u-boot/u-boot/blob/v2022.04/lib/efi_loader/efi_runtime.c… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c16 --- Comment #16 from Kilian Hanich <khanich.opensource(a)gmx.de> --- (In reply to Joey Lee from comment #14) > For reading requirement, "mokutil --sb-state" needs efivarfs for detecting > "secure boot" status. But I am not sure who used it. systemd automatically mounts efivarfs -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198550] New: Show exact hits first
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1198550 Bug ID: 1198550 Summary: Show exact hits first Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: bluedzins(a)wp.pl QA Contact: adrian.schroeter(a)suse.com Found By: --- Blocker: --- Let's say you are looking for jed editor, so you typed "jed". https://software.opensuse.org/search?baseproject=ALL&q=jed Expected result: since "jed" is exact match, the first hit should be jed. Actual results: jedit python-jedi jedit-javadoc python38-jedi python39-jedi python310-jedi python-jedihttp python38-jedihttp python39-jedihttp python310-jedihttp jed ...list goes on... It is not even sorted. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1203187] VUL-1: CVE-2022-38528: assimp: segmentation fault in Assimp::XFileImporter::CreateMeshes
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203187 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c15 --- Comment #15 from Joey Lee <jlee(a)suse.com> --- A f88814cc25 patch be introduced to v5.8 kernel to set flag to read only if SetVariable not be supported by firmware: commit f88814cc2578c121e6edef686365036db72af0ed [v5.8-rc7~14] Author: Ard Biesheuvel <ardb(a)kernel.org> Date: Wed Jul 8 13:01:57 2020 +0300 efi/efivars: Expose RT service availability via efivars abstraction fs/efivarfs/super.c static int efivarfs_fill_super(struct super_block *sb, struct fs_context *fc) { ... if (!efivar_supports_writes()) sb->s_flags |= SB_RDONLY; ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c14 --- Comment #14 from Joey Lee <jlee(a)suse.com> --- (In reply to Kilian Hanich from comment #12) > OK, U-Boot follows the "Embedded Base Boot Requirements Specification - > Release v1.0" and as such does not have a full blown UEFI implementation. > This includes that "SetVariable" is not supported. > > efivarfs gets mounted because systemd does that. And as such mokutil thinks > it is working with a full blown UEFI implementation. > > Now, I tried to just add "noefi" as a kernel parameter and I have not > noticed any bugs. Because efivarfs doesn't get mounted, mokutil acts > properly and as such transactional-update actually succeeds updating. > > So, does somebody know if anything else depends on being on an UEFI system? There have following functions need efivarfs. All of them need SetVariable: - rtc-efi - efibootmgr - MOK - uefi capsule update For reading requirement, "mokutil --sb-state" needs efivarfs for detecting "secure boot" status. But I am not sure who used it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202438] grub2 can no longer boot from an ISO
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202438 https://bugzilla.suse.com/show_bug.cgi?id=1202438#c25 --- Comment #25 from Gary Ching-Pang Lin <glin(a)suse.com> --- Hi Hansi, I updated the testing grub2 to allocate at least 1MB for the additional heap allocations. Maybe this could improve the loading time. https://download.opensuse.org/repositories/home:/gary_lin:/branches:/Base:/… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 Chester Lin <chester.lin(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dennis.tseng(a)suse.com, | |jlee(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200441] go1.19 release tracking
by bugzilla_noreply＠suse.com 07 Sep '22

07 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200441 http://bugzilla.opensuse.org/show_bug.cgi?id=1200441#c6 --- Comment #6 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1200441) was mentioned in https://build.opensuse.org/request/show/1001534 Factory / go1.19 -- You are receiving this mail because: You are on the CC list for the bug.

1 0