February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207806] New: cppcheck does not install addon and platform files
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207806 Bug ID: 1207806 Summary: cppcheck does not install addon and platform files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: info(a)pragmaticlinux.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- cppcheck itself works without problems. The only issue is that the installation skips a few files. Specifically those in the addons/ and platforms/ directories. These files come in handy when checking sources that are meant to be cross-compiled and/or if you want to check the sources against MISRA 2012 rules. The solution is to update the spec-file and install these files. I'll go ahead an generate a submit request for this shortly. Note that the same issue was reported a bit over a year ago (bug #1190513) for Leap 15.3. Since Leap 15.3 is end-of-life now, that bug report can be closed, when this one gets closed. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1207562] U-Boot: Raspberry Pi 4 booting from USB stopped booting
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207562 Matthias Brugger <mbrugger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |afaerber(a)suse.com, | |chester.lin(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204829] Newest Python 3.6 causes strange problem in program
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1204829 https://bugzilla.suse.com/show_bug.cgi?id=1204829#c4 --- Comment #4 from Freek de Kruijf <freek(a)opensuse.org> --- (In reply to Matej Cepl from comment #3) > I am sorry, but unless I have some kind of reproducer of the problem then I > cannot do anything. > > Please, reopen with some way how to reproduce the problem without your > program. > > Thank you With a newer version of 3.6.15, namely 3.6.15-150300.10.37.2 the problem is gone. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207562] U-Boot: Raspberry Pi 4 booting from USB stopped booting
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207562 https://bugzilla.suse.com/show_bug.cgi?id=1207562#c14 --- Comment #14 from Stefan Seyfried <seife(a)novell.slipkontur.de> --- updated the second machine today to u-boot-rpiarm64-2023.01-2.1.aarch64 from tumbleweed-oss repo, last changelog * Fri Jan 27 2023 Guillaume GARDET <guillaume.gardet(a)opensuse.org> Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2023.01 Prefer upstream solution to fix boo#1207562 * Patches dropped: 0017-rpi-fix-boot-from-USB-on-RPi4-boo-1.patch * Patches added: 0017-Backport-https-patchwork.ozlabs.org.patch And it still fails. I only could take a picture of the error message, so typing in here (if this continues, I definitely will have to set up a serial-to-syslog-device for my raspis ;-)) ------- Scanning usb 0:1 BootOrder not defined EFI boot manager: Cannot load any image Found EFI removable media binary efi/boot/bootaa64.efi ** Reading file would overwrite reserved memory ** Failed to load 'efi/boot/bootaa64.efi' No UEFI binary known at 0x00080000 EFI LOAD FILED: continuing... BOOTP broadcast 1 ------ I'd try to boot the machine simply via bootp/tftp, but these machines are in the guest network and thus I cannot easily provide them with tftp ;-) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207810] Digest verification failed for file primary.xml.gz (opensuse.ucom.am)
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207810 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202933] VUL-0: CVE-2022-3560: pesign: pesign-authorize ExecStartPost script allows privilege escalation from pesign to root
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1202933 https://bugzilla.suse.com/show_bug.cgi?id=1202933#c18 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(glin(a)suse.com) --- Comment #18 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- (In reply to Matthias Gerstner from comment #1) > c) we need to fix the broken systemd hardening in Tumbleweed > d) we need to fix the broken paths in SLE-15 > > c) and d) should only be done after the fixes are applied, lest we actually > introduce the vulnerability in 2). Thanks for handling the fix! Do you also take care of these issues? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202933] VUL-0: CVE-2022-3560: pesign: pesign-authorize ExecStartPost script allows privilege escalation from pesign to root
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

1 0

[Bug 1202933] VUL-0: CVE-2022-3560: pesign: pesign-authorize ExecStartPost script allows privilege escalation from pesign to root
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1202933 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202933] VUL-0: CVE-2022-3560: pesign: pesign-authorize ExecStartPost script allows privilege escalation from pesign to root
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1202933 https://bugzilla.suse.com/show_bug.cgi?id=1202933#c17 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|SUSE Security Internal | --- Comment #17 from Robert Frohl <rfrohl(a)suse.com> --- oss-security: Hello all, a local privilege escalation vulnerability was found in pesign. This vulnerability has been identified by CVE-2022-3560. Description: "The pesign deamon started by the systemd service of the pesign package is vulnerable to a path traversal vulnerability allowing a local privilege escalation. When properly exploited this flaw allows a malicious unprivileged user with access to pesign user or group can gain access to higher privileged files and directories." CVSSv3.1:7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H The patch for this issue is attached to this message. I'd like to thank Matthias Gerstner from SUSE Security Team for reporting this issue. Marco Benatto Red Hat Product Security secalert(a)redhat.com for urgent response -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207520] nvidia-open-driver-G06-signed incorrectly declares compatibility with too much hardware
by bugzilla_noreply＠suse.com 01 Feb '23

01 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207520 https://bugzilla.suse.com/show_bug.cgi?id=1207520#c36 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |martin.wilck(a)suse.com --- Comment #36 from Martin Wilck <martin.wilck(a)suse.com> --- (In reply to Joey Lee from comment #30) > I have pushed Stefan's change to Base:System/pesign-obs-integration, and a > submitreq to Factory be created: > > https://build.opensuse.org/request/show/1061964 The documentation of pesign-spec-macros and pesign-copy-sources shouldn't be hidden in the README of pesign-obs-integration, which hardly anyone is aware of. As this is an important topic for KMP authors, should this be mentioned in the Kernel Module Packages manual (https://drivers.suse.com/doc/kmpm/) perhaps? The last version we published was for SLE11, unfortunately. -- You are receiving this mail because: You are on the CC list for the bug.

1 0