February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208450] Yast does not show recommended packages in dependencies tab
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208450 https://bugzilla.suse.com/show_bug.cgi?id=1208450#c8 --- Comment #8 from Stefan Hundhammer <shundhammer(a)suse.com> --- So, how about that "Package Classification" / "Recommended Packages" filter view? Does that work for what you have in mind? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208523] New: Filesystem creation on DRBD device failed - process hungs endless
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208523 Bug ID: 1208523 Summary: Filesystem creation on DRBD device failed - process hungs endless Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: High Availability Assignee: ha-bugs(a)suse.de Reporter: tschoche.jonas(a)ddv-mediengruppe.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello, i like to setup a new drbd cluster on OpenSuse Tumbleweed, but unfortunately the creation of the filesystem with mkfs.ocfs2 failed on the drbd device. I tried ext4 and other filesystems too, but the process waits in the "D+" state (uninterruptible) and does nothing. It seems that this is a bug in the current drbd package. I tried the same steps in OpenSuse Leap 15 and it worked without any problems. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208520] New: VUL-0: CVE-2023-26249: knot: excessive TCP reconnections
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208520 Bug ID: 1208520 Summary: VUL-0: CVE-2023-26249: knot: excessive TCP reconnections Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/357785/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: michal.hrusecky(a)opensuse.org Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de Found By: --- Blocker: --- CVE-2023-26249 Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26249 https://www.cve.org/CVERecord?id=CVE-2023-26249 https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1208520] VUL-0: CVE-2023-26249: knot: excessive TCP reconnections
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208520 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208492] [Build 20230219] yast2-security: augeas serialization error
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208492 https://bugzilla.suse.com/show_bug.cgi?id=1208492#c7 Lukas Ocilka <locilka(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mfilka(a)suse.com Flags| |needinfo?(mfilka(a)suse.com) --- Comment #7 from Lukas Ocilka <locilka(a)suse.com> --- 2023-02-21 09:37:34 <3> poseidon(19234) [Ruby] yast/wfm.rb(handle_exception):271 Client /usr/share/YaST2/clients/security.rb failed with 'Augeas serializing error: Unexpected node '/store/USERADD_CMD': can not match tree { "USERADD_CMD" } { "USERDEL_PRECMD" } { "USERDEL_POSTCMD" } with pattern ( { /[.0-9A-Z_a-z-]+/ = /[^\t\n ]+([\t ]+[^\t\n ]+)*/ } | { /#comment/ = /[^\t\n\r ].*[^\t\n\r ]|[^\t\n\r ]/ } | { })* for /etc/login.defs.d/70-yast.defs with lens /usr/share/augeas/lenses/dist/login_defs.aug:24.10-.48:' (CFA::AugeasSerializingError). Michal, would you be able to fix this? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208393] OpenSSL 3.0.8 breaks PKITS test 4.1.5 (which requires DSA parameter inheritance)
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208393 https://bugzilla.suse.com/show_bug.cgi?id=1208393#c5 Otto Hollmann <otto.hollmann(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #5 from Otto Hollmann <otto.hollmann(a)suse.com> --- Request with OpenSSL 3.0.8 got accepted: > https://build.opensuse.org/request/show/1063740 So I'm closing this bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204284] VUL-0: CVE-2022-42889: apache-commons-text: code execution when processing untrusted input due to insecure interpolation defaults
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1204284 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P2 - High |P1 - Urgent Severity|Major |Critical -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207892] [Build 20230202] dracut: fips integrity check failed
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1207892 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208492] New: [Build 20230219] yast2-security: augeas serialization error
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208492 Bug ID: 1208492 Summary: [Build 20230219] yast2-security: augeas serialization error Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3132265/modules/yast 2_security/steps/19 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: jsrain(a)suse.com Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_gui@64bit fails in [yast2_security](https://openqa.opensuse.org/tests/3132265/modules/yast2_sec… ## Test suite description Maintainer: qsf-y Test for yast2 UI, GUI only. Running on created gnome images which provides both text console for ncurses UI tests as well as the gnome environment for the GUI tests. Temporarily added YAST2_GUI_TERMINATE_PREVIOUS_INSTANCES to see if helps. This variable triggers code which terminates all yast2 processes before starting new one. (see poo#26104). ## Reproducible Fails since (at least) Build [20230118](https://openqa.opensuse.org/tests/3052079) ## Expected result Last good: [20230117](https://openqa.opensuse.org/tests/3050303) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1208492] [Build 20230219] yast2-security: augeas serialization error
by bugzilla_noreply＠suse.com 21 Feb '23

21 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208492 https://bugzilla.suse.com/show_bug.cgi?id=1208492#c5 --- Comment #5 from Lukas Ocilka <locilka(a)suse.com> --- (In reply to Dominique Leuenberger from comment #3) > openQA did not produce logs for this test :( > Will have to reproduce locally, but that should not be too hard I understand, but just imagine that we would have to reproduce locally every bug. We need developers for developing (and fixing) the software. -- You are receiving this mail because: You are on the CC list for the bug.

1 0