February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208452] SSSD configured with ldap cannot disable sudoers lookup
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208452 https://bugzilla.suse.com/show_bug.cgi?id=1208452#c6 --- Comment #6 from Samuel Cabrero <scabrero(a)suse.com> --- Bug is closed and I can't reproduce it. Please reopen and attach the sssd logs if the issue persists. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207948] New: Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207948 Bug ID: 1207948 Summary: Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 864736 --> http://bugzilla.opensuse.org/attachment.cgi?id=864736&action=edit hwinfo output With the current openSUSE Tumbleweed (kernel-default-6.1.8-1.1.x86_64), attempts to resume from hibernation (from "suspend to disk") ends in kernel panic. After I type in my disk encryption password (I have kernel and initrd on an unencrypted partition), initrd takes over but a short while afterwards system hangs, does nothing for about 30 seconds and then CapsLock starts blinking). Usually the screen stays black but two or three times I have seen the contents of the screen restored and only then the laptop froze. All my attempts to get at some backtraces or error messages were not successful (I tried no_console_suspend=1 but that only meant I saw the cursor blinking before the machine froze but no messages appeared and my attempts to somehow use EFI pstore also led to nothing). Resume from suspend to RAM works fine. I am attaching output from hwinfo. -- You are receiving this mail because: You are on the CC list for the bug.

1 22

[Bug 1199198] Redis Sentinel fails to start due to ProtectSystem=full hardening in systemd service
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1199198 https://bugzilla.suse.com/show_bug.cgi?id=1199198#c7 Tamara Schmitz <tamara.schmitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tamara.schmitz(a)suse.com --- Comment #7 from Tamara Schmitz <tamara.schmitz(a)suse.com> --- This issue also exists in SP4. Can we expect a backport? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208393] OpenSSL 3.0.8 breaks PKITS test 4.1.5 (which requires DSA parameter inheritance)
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208393 https://bugzilla.suse.com/show_bug.cgi?id=1208393#c3 Otto Hollmann <otto.hollmann(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(otto.hollmann@sus | |e.com) | --- Comment #3 from Otto Hollmann <otto.hollmann(a)suse.com> --- Submitted > https://build.opensuse.org/request/show/1066801 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208438] On some i7-8650U Dell Laptops get kernel panic when gui is running.
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208438 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jslaby(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208260] New: Thunar 4.18.3 lp154 - Regular Expression not available in Bulk Renamer dialog
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208260 Bug ID: 1208260 Summary: Thunar 4.18.3 lp154 - Regular Expression not available in Bulk Renamer dialog Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: bjurg.orsku(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 864887 --> http://bugzilla.opensuse.org/attachment.cgi?id=864887&action=edit Thunar 4.18.3 Bulk Renamer dialog on Leap 15.4 20230214 Thunar 4.18.3 (from X11:xfce repository) installed on leap 15.4 with zypper and the --no-recommends option leaves the Thunar Bulk Renamer dialog window with the Regular Expression option grayed out �� i.e.: unavailable. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1208089] New: VUL-0: CVE-2023-25165: helmfile: helm: getHostByName Function Information Disclosure
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208089 Bug ID: 1208089 Summary: VUL-0: CVE-2023-25165: helmfile: helm: getHostByName Function Information Disclosure Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/356535/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: manfred.h(a)gmx.net Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1208083 Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1208083 +++ CVE-2023-25165 Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25165 https://bugzilla.redhat.com/show_bug.cgi?id=2168458 https://www.cve.org/CVERecord?id=CVE-2023-25165 https://github.com/helm/helm/commit/5abcf74227bfe8e5a3dbf105fe62e7b12deb58d2 https://github.com/helm/helm/security/advisories/GHSA-pwcw-6f5g-gxf8 -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1208490] New: redfishtool missing modules after installation - unable to start
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208490 Bug ID: 1208490 Summary: redfishtool missing modules after installation - unable to start Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: hsehic(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- laszis200:~ # cat /etc/os-release && zypper lr -U && redfishtool --help && redfishtool NAME="openSUSE Leap" VERSION="15.4" ID="opensuse-leap" ID_LIKE="suse opensuse" VERSION_ID="15.4" PRETTY_NAME="openSUSE Leap 15.4" ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:leap:15.4" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org/" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Leap" LOGO="distributor-logo-Leap" Repository priorities in effect: (See 'zypper lr -P' for details) 90 (raised priority) : 1 repository 91 (raised priority) : 1 repository 99 (default priority) : 7 repositories # | Alias | Name | Enabled | GPG Check | Refresh | URI ---+-----------------------------+---------------------------+---------+-----------+---------+------------------------------------------------------------------------------------------------ 7 | repo-debug-non-oss | Debug Repository (Non-O-> | No | ---- | ---- | http://download.opensuse.org/debug/distribution/leap/15.4/repo/non-oss/ 6 | repo-debug | Debug Repository | No | ---- | ---- | http://download.opensuse.org/debug/distribution/leap/15.4/repo/oss/ 9 | repo-debug-update-non-oss | Update Repository (Debu-> | No | ---- | ---- | http://download.opensuse.org/debug/update/leap/15.4/non-oss/ 8 | repo-debug-update | Update Repository (Debug) | No | ---- | ---- | http://download.opensuse.org/debug/update/leap/15.4/oss/ 12 | repo-sle-debug-update | Update repository with -> | No | ---- | ---- | http://download.opensuse.org/debug/update/leap/15.4/sle/ 10 | repo-non-oss | Non-OSS Repository | Yes | (r ) Yes | Yes | http://download.opensuse.org/distribution/leap/15.4/repo/non-oss/ 11 | repo-oss | Haupt-Repository | Yes | (r ) Yes | Yes | http://download.opensuse.org/distribution/leap/15.4/repo/oss/ 14 | repo-source | Source Repository | No | ---- | ---- | http://download.opensuse.org/source/distribution/leap/15.4/repo/oss/ 5 | repo-backports-update | Update repository of op-> | Yes | (r ) Yes | Yes | http://download.opensuse.org/update/leap/15.4/backports/ 4 | repo-backports-debug-update | Update repository with -> | No | ---- | ---- | http://download.opensuse.org/update/leap/15.4/backports_debug/ 16 | repo-update-non-oss | Aktualisierungs-Reposit-> | Yes | (r ) Yes | Yes | http://download.opensuse.org/update/leap/15.4/non-oss/ 15 | repo-update | Hauptaktualisierungs-Re-> | Yes | (r ) Yes | Yes | http://download.opensuse.org/update/leap/15.4/oss 13 | repo-sle-update | Update repository with -> | Yes | (r ) Yes | Yes | http://download.opensuse.org/update/leap/15.4/sle/ 3 | openSUSE-Leap-15.4-1 | openSUSE-Leap-15.4-1 | Yes | (r ) Yes | Yes | https://download.opensuse.org/distribution/leap/15.4/repo/oss/?proxy=10.10.… 1 | devel:openQA | devel:openQA | Yes | (r ) Yes | No | https://download.opensuse.org/repositories/devel:/openQA/openSUSE_Leap_15.4 2 | devel:openQA:Leap:15.4 | devel:openQA:Leap:15.4 | Yes | (r ) Yes | No | https://download.opensuse.org/repositories/devel:/openQA:/Leap:/15.4/openSU… Traceback (most recent call last): File "/usr/bin/redfishtool", line 14, in <module> from redfishtoollib import main File "/usr/lib/python3.6/site-packages/redfishtoollib/__init__.py", line 5, in <module> from .redfishtoolMain import main File "/usr/lib/python3.6/site-packages/redfishtoollib/redfishtoolMain.py", line 22, in <module> from .redfishtoolTransport import RfTransport File "/usr/lib/python3.6/site-packages/redfishtoollib/redfishtoolTransport.py", line 44, in <module> from dateutil import parser ModuleNotFoundError: No module named 'dateutil' laszis200:~ # -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1208393] OpenSSL 3.0.8 breaks PKITS test 4.1.5 (which requires DSA parameter inheritance)
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208393 https://bugzilla.suse.com/show_bug.cgi?id=1208393#c2 --- Comment #2 from Otto Hollmann <otto.hollmann(a)suse.com> --- I was about to temporarily revert one commit (fab4973) in OpenSSL but I just found that KDE upstream decided to remove failing test. So let's remove this test from our codestream as well. I will prepare submit request. > https://invent.kde.org/libraries/qca/-/merge_requests/93 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208382] New: cdc_acm prevents USB connection to Samsung S20
by bugzilla_noreply＠suse.com 20 Feb '23

20 Feb '23

https://bugzilla.suse.com/show_bug.cgi?id=1208382 Bug ID: 1208382 Summary: cdc_acm prevents USB connection to Samsung S20 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: stephan.barth(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When trying to upload files to my Samsung S20 the GNOME file manager fails to see any files or folders, because cdc_acm gets loaded into the kernel, which creates ttyACM0 and therefore access to the smartphone is blocked. rmmod cdc_acm and switching connection modes back and forth on the S20 allows accessing the smartphone through the file manager. Snippet from dmesg: [42176.794325] usb 3-2: new high-speed USB device number 13 using xhci_hcd [42176.952259] usb 3-2: New USB device found, idVendor=04e8, idProduct=6865, bcdDevice= c.00 [42176.952265] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [42176.952267] usb 3-2: Product: SAMSUNG_Android [42176.952268] usb 3-2: Manufacturer: SAMSUNG [42176.952269] usb 3-2: SerialNumber: R3CNB0272ZP [42201.218000] usb 3-2: USB disconnect, device number 13 [42201.698482] usb 3-2: new high-speed USB device number 14 using xhci_hcd [42201.856728] usb 3-2: New USB device found, idVendor=04e8, idProduct=6860, bcdDevice= c.00 [42201.856735] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [42201.856736] usb 3-2: Product: SAMSUNG_Android [42201.856738] usb 3-2: Manufacturer: SAMSUNG [42201.856739] usb 3-2: SerialNumber: R3CNB0272ZP [42201.887908] cdc_acm 3-2:1.1: ttyACM0: USB ACM device -- You are receiving this mail because: You are on the CC list for the bug.

1 2