January 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1199383] New: [Tumbleweed][lftp][Build_20220423] Connetion via lftp failed due with self signed certificate
by bugzilla_noreply＠suse.com 17 Mar '23

17 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1199383 Bug ID: 1199383 Summary: [Tumbleweed][lftp][Build_20220423] Connetion via lftp failed due with self signed certificate Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: weixuan.hao(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Summary This test is to test lftp with ssl enabled ## Observation After setting up vsftpd server and lftp, using lftp to login to ftp server and try to download/upload files, connection will fail with self signed certificate ## Environment # uname -m x86_64 # cat /etc/*release NAME="openSUSE Tumbleweed" # VERSION="20220423" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20220423" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:tumbleweed:20220423" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org/" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo-Tumbleweed" ## Reproducible Follow steps from https://bugzilla.suse.com/tr_show_case.cgi?case_id=1769978 to set up vsftpd server and https://bugzilla.suse.com/tr_show_case.cgi?case_id=1769945 for lftp testing ## Error # lftp -d -u ftpuser -e 'set ftp:ssl-force true' localhost Password: ---- Resolving host address... ---- 2 addresses found: ::1, 127.0.0.1 lftp ftpuser@localhost:~> ls ---- Connecting to localhost (::1) port 21 **** Socket error (Connection refused) - reconnecting ---- Closing control socket ---- Connecting to localhost (127.0.0.1) port 21 <--- 220 Welcome to SUSE FTP service. ---> FEAT <--- 211-Features: <--- AUTH TLS <--- EPRT <--- EPSV <--- MDTM <--- PASV <--- PBSZ <--- PROT <--- REST STREAM <--- SIZE <--- TVFS <--- UTF8 <--- 211 End ---> AUTH TLS <--- 234 Proceed with negotiation. ---> OPTS UTF8 ON Certificate depth: 0; subject: /C=CN/ST=Beijing/L=Beijing/O=SUSE/OU=QA/CN=shawn/emailAddress=weixuan.hao(a)suse.com; issuer: /C=CN/ST=Beijing/L=Beijing/O=SUSE/OU=QA/CN=shawn/emailAddress=weixuan.hao(a)suse.com ERROR: Certificate verification: self signed certificate (31:7B:F2:C5:B6:A1:21:90:A6:61:A3:11:26:42:F7:E3:CE:0E:53:4C) **** Certificate verification: self signed certificate (31:7B:F2:C5:B6:A1:21:90:A6:61:A3:11:26:42:F7:E3:CE:0E:53:4C) ---- Closing control socket ls: Fatal error: Certificate verification: self signed certificate (31:7B:F2:C5:B6:A1:21:90:A6:61:A3:11:26:42:F7:E3:CE:0E:53:4C) lftp ftpuser@localhost:~> exit -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1184786] New: Deduplicate directory ownership with filesystem package
by bugzilla_noreply＠suse.com 17 Mar '23

17 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1184786 Bug ID: 1184786 Summary: Deduplicate directory ownership with filesystem package Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, checksec pointed out that various directories in our /usr are 0755 while they're 0555 on Fedora and Red Hat. For more hardened environments this might make a difference, as it prevents a user "root" that doesn't have DAC_OVERRIDE permission to no longer write/create files there. In order to achieve that, only one package need to own the permissions of that directory. currently we have various packages co-owning it, which means actual permission would depend on installation order, and we'd get installation conflicts. This can be prevented by de-duplicating directory ownership. this is a tracker bug that tracks the work related to it. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1198668] New: Tumbleweed: Purge old kernels service block during boot
by bugzilla_noreply＠suse.com 17 Mar '23

17 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1198668 Bug ID: 1198668 Summary: Tumbleweed: Purge old kernels service block during boot Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: petr.vorel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Sometimes "Purge old kernels" service does not run after booting, but during boot, which slows down boot: $ LC_ALL=C journalctl -b 0 |grep -i purge Apr 20 08:16:01 dell5510 systemd[1]: Starting Purge old kernels... Apr 20 08:16:02 dell5510 zypper[1546]: Preparing to purge obsolete kernels... Apr 20 08:17:09 dell5510 systemd[1]: purge-kernels.service: Deactivated successfully. Apr 20 08:17:09 dell5510 systemd[1]: Finished Purge old kernels. Apr 20 08:17:09 dell5510 systemd[1]: purge-kernels.service: Consumed 53.594s CPU time. It started few weeks ago, it does not happen every boot, but maybe once a week. But bothered me enough to report the problem. $ LC_ALL=C rpm -qi purge-kernels-service Name : purge-kernels-service Version : 0 Release : 8.4 Architecture: noarch Install Date: Tue Feb 22 11:51:00 2022 Group : Unspecified Size : 346 License : MIT Signature : RSA/SHA256, Sat Feb 19 22:50:00 2022, Key ID b88b2fd43dbdc284 Source RPM : purge-kernels-service-0-8.4.src.rpm Build Date : Sat Feb 19 22:37:41 2022 ... $ lsb_release -a LSB Version: n/a Distributor ID: openSUSE Description: openSUSE Tumbleweed Release: 20220415 Codename: n/a -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1205636] New: zypper ps -s shows wrong command and no service
by bugzilla_noreply＠suse.com 16 Mar '23

16 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1205636 Bug ID: 1205636 Summary: zypper ps -s shows wrong command and no service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After zypper dup and restarting all services reported by zypper ps -s on openSUSE Tumbleweed, USB-hotplug did not work anymore. Reason is that zypper shows wrong commands and thus not the service, which needs a restart: # zypper ps -s The following running processes use deleted files: PID | PPID | UID | User | Command | Service ------+------+------------+------------+-------------+-------- 1 | 0 | 0 | root | systemd | 2682 | 2680 | 1366800143 | kukuk | systemd | 24860 | 1 | 0 | root | udevadm | But PID 24860 is: root 24860 0.0 0.1 29840 1436 ? Ss Nov21 0:00 /usr/lib/systemd/systemd-udevd Since zypper detects the wrong command and thus does not show, that systemd-udevd.service needs to be restarted, running udevd and installed udev rules don't match and in this case e.g. USB-hotplug does not work anymore, since no more kernel modules get loaded. -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1205157] New: nrpe: %pre needs usrmerge update
by bugzilla_noreply＠suse.com 16 Mar '23

16 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1205157 Bug ID: 1205157 Summary: nrpe: %pre needs usrmerge update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: lars.vogdt(a)suse.com Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- nrpe.spec %pre does # check if the port for nrpe is already defined in /etc/services if grep -q %{nrpeport} %{_sysconfdir}/services ; then : OK - port already defined else %{nnmmsg} "Adding port %{nrpeport} to %{_sysconfdir}/services" echo "nrpe %{nrpeport}/tcp # Nagios nrpe" >> etc/services fi With usrmerge and /usr/etc/services, this means that installing nrpe will create /etc/services with just one line: nrpe 5666/tcp # Nagios nrpe Needless to say that you can find exactly this line in /usr/etc/services ;-) Please adjust the %pre script to also check /usr/etc/services. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1191381] New: gnu-compilers-hpc: Move rpm macros to %_rpmmacrodir
by bugzilla_noreply＠suse.com 16 Mar '23

16 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1191381 Bug ID: 1191381 Summary: gnu-compilers-hpc: Move rpm macros to %_rpmmacrodir Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: eich(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1191379 Found By: --- Blocker: --- rpm macros aren't config files for the administrator, as such they should be installed into %_rpmmacrodir (ie /usr/lib/rpm/macros.d) instead of /etc/rpm. Please consider adjusting gnu-compilers-hpc -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1203594] New: xscreensaver v 6.03 GL Slideshow fails
by bugzilla_noreply＠suse.com 16 Mar '23

16 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1203594 Bug ID: 1203594 Summary: xscreensaver v 6.03 GL Slideshow fails Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: suse(a)stanmiller.info QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Trying to run the GL Slideshow screensaver v 6.03 fails with this message. X error in glslideshow: glslideshow: Failed request: 158 glslideshow: Major opcode: 151 () glslideshow: Resource id: 0x0 glslideshow: Serial number: 117 / 117 It appears (quick test) that all other savers work. Manually installing xscreensaver v 5.44, from Open Suse 15.3 on 15.4 works with no problems. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1175587] New: windows:mingw:win{32|64}/mingw{32|64}-filesystem: Deprecated external dependency generator is used
by bugzilla_noreply＠suse.com 15 Mar '23

15 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1175587 Bug ID: 1175587 Summary: windows:mingw:win{32|64}/mingw{32|64}-filesystem: Deprecated external dependency generator is used Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, idonmez(a)suse.com, mkbosmans(a)gmail.com Found By: --- Blocker: --- On building packages there is always a message printed that a 'Deprecated external dependency generator is used'. The reason for this message is located in macros.mingw32 (https://build.opensuse.org/package/view_file/windows:mingw:win32/mingw32-fi…) %_mingw32_package_header \ %global __strip %{_mingw32_strip} \ %global __objdump %{_mingw32_objdump} \ %global _use_internal_dependency_generator 0 \ %global __find_requires %{_mingw32_findrequires} \ %global __find_provides %{_mingw32_findprovides} \ %global __os_install_post %{_mingw32_install_post} by specifing '_use_internal_dependency_generator 0' and overriding the __find_requires and __find_provides. Recent obs dependency support uses *.attr file as shown below: cat /usr/lib/rpm/fileattrs/cmake.attr %__cmake_provides %{_rpmconfigdir}/cmake.prov %__cmake_path ^/usr/lib(64)?/cmake/.*/.*(Config\.cmake|-config\.cmake) where the mentioned file cmake.prov does the work of generating a list of packages that are provided by cmake configuration files. Similar files exists for debuginfo cat /usr/lib/rpm/fileattrs/debuginfo.attr %__debuginfo_provides %{_rpmconfigdir}/debuginfo.prov %__debuginfo_path ^/usr/lib/debug/ for pkgconfig files cat /usr/lib/rpm/fileattrs/pkgconfig.attr %__pkgconfig_provides %{_rpmconfigdir}/pkgconfigdeps.sh --provides %__pkgconfig_requires %{_rpmconfigdir}/pkgconfigdeps.sh --requires %__pkgconfig_path ^((%{_libdir}|%{_datadir})/pkgconfig/.*\.pc|%{_bindir}/pkg-config)$ for executables cat /usr/lib/rpm/fileattrs/elf.attr %__elf_provides %{_rpmconfigdir}/elfdeps --provides %{?__filter_GLIBC_PRIVATE:--filter-private} %__elf_requires %{_rpmconfigdir}/elfdeps --requires %{?__filter_GLIBC_PRIVATE:--filter-private} %__elf_magic ^(setuid,? )?(setgid,? )?(sticky )?ELF (32|64)-bit.*executable %__elf_flags exeonly %__elf_exclude_path ^/usr/lib/debug/ for shared libraries cat /usr/lib/rpm/fileattrs/elflib.attr %__elflib_provides %{_rpmconfigdir}/elfdeps --assume-exec --provides %{?__filter_GLIBC_PRIVATE:--filter-private} %__elflib_requires %{_rpmconfigdir}/elfdeps --assume-exec --requires %{?__filter_GLIBC_PRIVATE:--filter-private} %__elflib_magic ^(setuid )?(setgid )?(sticky )?ELF (32|64)-bit.*shared object %__elflib_exclude_path ^/usr/lib/debug/ and others. To take advantage of this type of support, the currently used files mingw32-find-provides.sh and mingw32-find-requres.sh must be split into implementations that handle a single category of corresponding files. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1207381] New: VUL-0: CVE-2022-47021: opusfile: Null pointer dereference issue allows attackers to cause denial of service
by bugzilla_noreply＠suse.com 15 Mar '23

15 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207381 Bug ID: 1207381 Summary: VUL-0: CVE-2022-47021: opusfile: Null pointer dereference issue allows attackers to cause denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/354445/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sreeves(a)suse.com Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-47021 A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47021 https://www.cve.org/CVERecord?id=CVE-2022-47021 https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92c… https://github.com/xiph/opusfile/issues/36 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1166537] New: osc rq accept - forwarding request causes backtrace
by bugzilla_noreply＠novell.com 15 Mar '23

15 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1166537 Bug ID: 1166537 Summary: osc rq accept - forwarding request causes backtrace Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: marco.strigl(a)suse.com Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de CC: suse-tux(a)gmx.de Found By: --- Blocker: --- When accepting a SR to a devel project, osc asks if I want to forward the SR to Factory. I answered "y", but got this nice backtrace instead of a SR to Factory: # osc rq accept 784420 Result of change request state: ok openSUSE:Factory Forward this submit to it? ([y]/n)y Traceback (most recent call last): File "/usr/bin/osc", line 41, in <module> r = babysitter.run(osccli) File "/usr/lib/python3.8/site-packages/osc/babysitter.py", line 64, in run return prg.main(argv) File "/usr/lib/python3.8/site-packages/osc/cmdln.py", line 344, in main return self.cmd(args) File "/usr/lib/python3.8/site-packages/osc/cmdln.py", line 367, in cmd retval = self.onecmd(argv) File "/usr/lib/python3.8/site-packages/osc/cmdln.py", line 501, in onecmd return self._dispatch_cmd(handler, argv) File "/usr/lib/python3.8/site-packages/osc/cmdln.py", line 1232, in _dispatch_cmd return handler(argv[0], opts, *args) File "/usr/lib/python3.8/site-packages/osc/commandline.py", line 2652, in do_request project, package, html.escape(msg, quote=False)) NameError: name 'html' is not defined Wild guess: missing "import html"? Note: commandline.py has an "import html" in do_submitrequest(), but this import isn't visible to do_request(). Also note that there are more functions in this file that call html.escape() without importing html before and will probably break in a similar way. Doing the "import html" in the file header instead of inside the functions might be a good idea. -- You are receiving this mail because: You are on the CC list for the bug.

2 2