February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207810] Digest verification failed for file primary.xml.gz (opensuse.ucom.am)
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207810 https://bugzilla.suse.com/show_bug.cgi?id=1207810#c7 --- Comment #7 from Andrii Nikitin <andrii.nikitin(a)suse.com> --- moreover, in ideal world zypper can note flacky mirrors and report them as a info message and try to ignore them in next requests. The same mirror may be stable for one user and have problems for other users, so zypper can use that info with advantage and I cannot think about any better alternatives. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207810] Digest verification failed for file primary.xml.gz (opensuse.ucom.am)
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207810 https://bugzilla.suse.com/show_bug.cgi?id=1207810#c6 --- Comment #6 from Andrii Nikitin <andrii.nikitin(a)suse.com> --- To me all these recent cases are linked to empty reply from mirror, which theoretically can happen and shouldn't disturb the download much. I think when zypper starts retrying the range in such cases - the problem will not occur. Otherwise - I don't see any better strategy that trying to identify and troubleshoot problem mirrors from zypper.log We can do some random checks on mirrors, but it will not guarantee anything. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207884] systemd hardening breaks mlocate
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207884 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |jsegitz(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207887] OpenSSH 9.2 released with fixes for two security problems and a memory safety problem
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207887 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207887] OpenSSH 9.2 released with fixes for two security problems and a memory safety problem
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207887 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |hpj(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207884] systemd hardening breaks mlocate
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207884 https://bugzilla.suse.com/show_bug.cgi?id=1207884#c1 --- Comment #1 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- The technical reason for this is that ProtectKernelModules also makes the kernel module tree inaccessible. The problem in locate thus only extends to kernel modules. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207751] New: binutils 2.40: kernel-default build fails
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207751 Bug ID: 1207751 Summary: binutils 2.40: kernel-default build fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Fails due to: [ 1685s] Unsupported DW_TAG_unspecified_type(0x3b) [ 1685s] Encountered error while encoding BTF. which is known and resolved thing: https://lore.kernel.org/all/YzwkazNc6wNCpQTN@kernel.org/t/#m492bd6283e2f7c0… We'll need a new dwarves release, I'm negotiating that with the project maintainer. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1207884] New: systemd hardening breaks mlocate
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207884 Bug ID: 1207884 Summary: systemd hardening breaks mlocate Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: carlos.e.r(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- See https://bugzilla.opensuse.org/show_bug.cgi?id=1181400#c211 Elesar:~ # locate snd-hda-intel Elesar:~ # find /lib/modules -type f -name snd-hda-intel\* /lib/modules/5.14.21-150400.24.41-default/kernel/sound/pci/hda/snd-hda-intel.ko.zst /lib/modules/5.14.21-150400.24.38-default/kernel/sound/pci/hda/snd-hda-intel.ko.zst Elesar:~ # We thought that the new kernel was missing modules. <https://lists.opensuse.org/archives/list/users@lists.opensuse.org/message/V…> The hack is overriding mlocate.service with: [Service] ProtectKernelModules=false -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1207870] VUL-0: CVE-2022-24963: apr,libapr1: Integer Overflow or Wraparound vulnerability in apr_encode
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207870 https://bugzilla.suse.com/show_bug.cgi?id=1207870#c6 Stoyan Manolov <stoyan.manolov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED Flags|needinfo?(stoyan.manolov@su | |se.com) | --- Comment #6 from Stoyan Manolov <stoyan.manolov(a)suse.com> --- Thank you for your prompt feedback! I have updated our tracking accordingly. Closing this entry. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207870] VUL-0: CVE-2022-24963: apr,libapr1: Integer Overflow or Wraparound vulnerability in apr_encode
by bugzilla_noreply＠suse.com 03 Feb '23

03 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207870 David Anes <david.anes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(stoyan.manolov@su | |se.com) -- You are receiving this mail because: You are on the CC list for the bug.

1 0