February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1204869] New: Network Manager asks for root password when adding AnyConnect VPN
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1204869 Bug ID: 1204869 Summary: Network Manager asks for root password when adding AnyConnect VPN Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cosmin.tanczel(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- 1. I installed CISCO AnyConnect VPN (openconnect) plugin for Network Manager 2. Added the Gateway, Reported OS (Windows), enable Token Authentication (HOTP - Ask for this password every time) 3. Save - at this step I am asked for the root password because in the General Configuration tab the All user may connect to this network is enable by default. I type the root password and save the profile 4. Connect to the new profile - I am asked for the root password the credentials window appear and when I click connect, the window disappear (crash). I should not be asked for the root password since the connection should NOT be available for all users (this was the case before the update that happened about 1 week ago) Below the NetworkManager log: Oct 31 11:10:42 localhost.localdomain NetworkManager[882]: <info> [1667207442.1953] audit: op="statistics" interface="wlp0s20f3" ifindex=3 args="2000" pid=1810 uid=1000 result="success" Oct 31 11:10:43 localhost.localdomain NetworkManager[882]: <info> [1667207443.4192] vpn[0x55f09551e910,f8c9359d-1d7e-4913-b724-d83083426981,"ARRK"]: starting openconnect Oct 31 11:10:43 localhost.localdomain NetworkManager[882]: <info> [1667207443.4196] audit: op="connection-activate" uuid="f8c9359d-1d7e-4913-b724-d83083426981" name="TEST" pid=1810 uid=1000 result="success" Oct 31 11:10:43 localhost.localdomain NetworkManager[882]: <info> [1667207443.7242] audit: op="statistics" interface="wlp0s20f3" ifindex=3 args="0" pid=1810 uid=1000 result="success" Oct 31 11:10:58 localhost.localdomain NetworkManager[882]: <warn> [1667207458.9404] vpn[0x55f09551e910,f8c9359d-1d7e-4913-b724-d83083426981,"TEST"]: secrets: failed to request VPN secrets #3: No agents were available for this request. Oct 31 11:10:59 localhost.localdomain NetworkManager[882]: <info> [1667207459.1234] agent-manager: agent[686b738f8cd3bed4,:1.141/org.kde.plasma.networkmanagement/1000]: agent registered -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1204873] New: New Konsole profile doesnt get save
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1204873 Bug ID: 1204873 Summary: New Konsole profile doesnt get save Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cosmin.tanczel(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- 1. Start konsole 2. Settings - create profile - name the profile - save 3. Close konsole 4. Open konsole - check Settings - profile menu. The previous create profile doesn't show up. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1203842] New: KDE Network Manager and openconnect
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1203842 Bug ID: 1203842 Summary: KDE Network Manager and openconnect Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cosmin.tanczel(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Can not connect using the PAN Global Protect (openconnect) with KDE Network Manager. I get an error saying: The IP config of the VPN connection ****, was invalid. In the logs I get operation not permitted. I've tried to manually connect from the cli as a normal user and I get the same. Connecting as root works. So I guess for some reason we do not allow bringing up the tunnel as normal users? Is this to be consider a bug, or it will stay like this? -------------------- ESP session established with server ESP tunnel connected; exiting HTTPS mainloop. Configured as 192.168.222.12, with SSL disconnected and ESP established Session authentication will expire at Wed Sep 28 23:14:32 2022 Failed to bind local tun device (TUNSETIFF): Operation not permitted To configure local networking, openconnect must be running as root See https://www.infradead.org/openconnect/nonroot.html for more information Set up tun device failed POST https://domain.com/ssl-vpn/logout.esp SSL negotiation with domain.com Connected to HTTPS on domain.com with ciphersuite (TLS1.2)-(ECDHE-SECP256R1)-(RSA-SHA256)-(AES-256-GCM) Logout successful. Unrecoverable I/O error; exiting. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1204880] New: power-profiles-daemon by default instead of tlp
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1204880 Bug ID: 1204880 Summary: power-profiles-daemon by default instead of tlp Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: cosmin.tanczel(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Any reason why we don't use power-profiles-daemon by default instead of tlp? I've compared tlp with power-profiles-daemon on different HW (about 10-15 different HW configuration, mobo/cpu). On all of them, power-profiles-daemon seems to offer more feature than tlp (especially power profiles) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1207454] New: VUL-0: CVE-2023-22796: rubygem-activesupport-*: Possible ReDoS based DoS vulnerability in Active Support's underscore
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1207454 Bug ID: 1207454 Summary: VUL-0: CVE-2023-22796: rubygem-activesupport-*: Possible ReDoS based DoS vulnerability in Active Support's underscore Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mschnitzer(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: --- Blocker: --- Created attachment 864351 --> https://bugzilla.suse.com/attachment.cgi?id=864351&action=edit 7.0 patch There is a possible regular expression based DoS vulnerability in Active Support. This vulnerability has been assigned the CVE identifier CVE-2023-22796. Versions Affected: All Not affected: None Fixed Versions: 6.1.7.1, 7.0.4.1 Impact A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability. This affects String#underscore, ActiveSupport::Inflector.underscore, String#titleize, and any other methods using these. All users running an affected release should either upgrade or use one of the workarounds immediately. Releases The FIXED releases are available at the normal locations. Workarounds There are no feasible workarounds for this issue. Users on Ruby 3.2.0 or greater may be able to reduce the impact by configuring Regexp.timeout. Patches To aid users who aren��t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset. 6-1-Avoid-regex-backtracking-in-Inflector.underscore.patch - Patch for 6.1 series 7-0-Avoid-regex-backtracking-in-Inflector.underscore.patch - Patch for 7.0 series Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases. Credits We would like to thank ooooooo_q for reporting this https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-v… -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1208461] New: (GTK?) apps switch to tiny fonts
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208461 Bug ID: 1208461 Summary: (GTK?) apps switch to tiny fonts Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: alanjprescott(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In certain apps (firefox, chromium, calibre) which I believe are GTK-based apps the font size keeps switching to very tiny and then back to normal Trying to work out the sequence is not easy but here's what I found. I run daily updates and so far this week I've had:- Sunday - Ok Monday - normal sized fonts Tuesday - tiny fonts Wednesday - normal sized fonts Thursday - tiny fonts Friday - normal sized fonts Saturday - tiny fonts As far as I'm aware I've changed no system settings myself (while searching for a resolution) but it seems to change font size in synchronisation with updates. Operating System: openSUSE Tumbleweed 20230217 KDE Plasma Version: 5.27.0 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 Kernel Version: 6.1.12-1-default (64-bit) Graphics Platform: X11 Processors: 12 � AMD Ryzen 5 1600 Six-Core Processor Memory: 15.6 GiB of RAM Graphics Processor: NVIDIA GeForce GTX 970/PCIe/SSE2 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1207167] New: librsvg PDF related testsuite tests are failing
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1207167 Bug ID: 1207167 Summary: librsvg PDF related testsuite tests are failing Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Errors are like: [ 379s] ---- cmdline::rsvg_convert::pdf_has_link_inside_text stdout ---- [ 379s] thread 'cmdline::rsvg_convert::pdf_has_link_inside_text' panicked at 'Unexpected stdout, failed (is a PDF with a link to https://example.com && is a PDF with a link to https://another.example.com) [ 379s] �� is a PDF with a link to https://example.com [ 379s] �� actual link contents: FIXME: who knows, but it's not what we expected [ 379s] command=`"/home/abuild/rpmbuild/BUILD/librsvg-2.55.1/target/release/rsvg-convert" "--format=pdf" "tests/fixtures/cmdline/text-a-link.svg"` [ 379s] code=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1208670] New: Gambas2 fails to build on 15.5 and Tumbleweed
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208670 Bug ID: 1208670 Summary: Gambas2 fails to build on 15.5 and Tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: anixx(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Gambas2 fails to build on 15.5 and Tumbleweed. This seems to be due to some extension failing. So, the extension is preferably to be fixed or in case it is impossible, disabled. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1208320] New: Increased proportions of applications and fonts after updating KDE to 5.27
by bugzilla_noreply＠suse.com 03 Mar '23

03 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208320 Bug ID: 1208320 Summary: Increased proportions of applications and fonts after updating KDE to 5.27 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: jonmagon(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After the update, some applications like thunderbird and firefox look a bit enlarged because of the fonts, the fonts look barely blurry. HiDPI is not used. Using `GDK_DPI_SCALE=0.9 thunderbird` helps to get the window close to what it should be. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1116889] New: windows:mingw:win32/mingw32-cross-gcc: Bug / Installation size is huge (unstripped exes?)
by bugzilla_noreply＠novell.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1116889 Bug ID: 1116889 Summary: windows:mingw:win32/mingw32-cross-gcc: Bug / Installation size is huge (unstripped exes?) Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: sergei.ivn+bugzilla(a)gmail.com QA Contact: bnc-team-screening(a)forge.provo.novell.com CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, idonmez(a)suse.com, mkbosmans(a)gmail.com, tlillqvist(a)suse.com Found By: --- Blocker: --- (second attempt) Hi. I'm using opensuse tumbleweed on a remote CI server for building some of my windows project. And since the container size is huge I did some investigations and it turns out that execs size for mingw32-cross-{gcc,cpp,gcc-c++} is very big, for instance the size of the cc1 executable is over 200 megabytes. I'm myself is on windows so my possibilities are limited, but the msys2 file utility said that the exec files contain some debug info. (bugzilla prefilled cc:alan@xamarin.com breaks the report attempt) -- You are receiving this mail because: You are on the CC list for the bug.

2 9