March 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1069904] VUL-0: CVE-2017-14804: build: Exploit extractbuild to write to files in the host system
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1069904 https://bugzilla.suse.com/show_bug.cgi?id=1069904#c22 faust jonson <faustjonson(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |faustjonson(a)gmail.com --- Comment #22 from faust jonson <faustjonson(a)gmail.com> --- f0958407337f559c95ae0e9e85d03423 0001-Improve-sanity-checks-in-extractbuild.patch 74690090af4b170bccc1d75569dc34d7 my_bs_worker.pl https://medium.com/@spiringwriter/best-coding-homework-help-websites-5b7ea3… 17ad13d19a7d6a210408e500cda9d48e obs-build_extractbuild_exploit.txt 8a9de7e3e2084fa644ed188f447afbda test.spec 823fed5809f654917062f857d6cee6e4 worker.txt 143732600263228b8e864fae336bb081 write_swap.pl openSUSE Leap 42.3 (src): build-20171128-5.1, obs-service-source_validator-0.7-16.1, osc-0.162.0-10.1 openSUSE Leap 42.2 (src): build-20171128-2.6.1, obs-service-source_validator-0.7-13.6.1, osc-0.162.0-7.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208450] Yast does not show recommended packages in dependencies tab
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208450 https://bugzilla.suse.com/show_bug.cgi?id=1208450#c9 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |NORESPONSE --- Comment #9 from Stefan Hundhammer <shundhammer(a)suse.com> --- No response. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198331] python-moto: failed on test_boto3_availability_zones test_create_notebook_instance_bad_volume_size
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1198331 https://bugzilla.suse.com/show_bug.cgi?id=1198331#c24 --- Comment #24 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2023:0604-1: An update that solves two vulnerabilities, contains one feature and has two fixes can now be installed. Category: security (important) Bug References: 1178168, 1182066, 1198331, 1199282 CVE References: CVE-2020-25659, CVE-2020-36242 Jira References: SLE-24629 Sources used: SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Real Time 15 SP3 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): python-cryptography-3.3.2-150200.16.1 SUSE Manager Proxy 4.2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Manager Retail Branch Server 4.2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Manager Server 4.2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Enterprise Storage 7.1 (src): python-cryptography-3.3.2-150200.16.1 SUSE Enterprise Storage 7 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Micro 5.1 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Micro 5.2 (src): python-cryptography-3.3.2-150200.16.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): python-cryptography-3.3.2-150200.16.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1116889] New: windows:mingw:win32/mingw32-cross-gcc: Bug / Installation size is huge (unstripped exes?)
by bugzilla_noreply＠novell.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1116889 Bug ID: 1116889 Summary: windows:mingw:win32/mingw32-cross-gcc: Bug / Installation size is huge (unstripped exes?) Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: sergei.ivn+bugzilla(a)gmail.com QA Contact: bnc-team-screening(a)forge.provo.novell.com CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, idonmez(a)suse.com, mkbosmans(a)gmail.com, tlillqvist(a)suse.com Found By: --- Blocker: --- (second attempt) Hi. I'm using opensuse tumbleweed on a remote CI server for building some of my windows project. And since the container size is huge I did some investigations and it turns out that execs size for mingw32-cross-{gcc,cpp,gcc-c++} is very big, for instance the size of the cc1 executable is over 200 megabytes. I'm myself is on windows so my possibilities are limited, but the msys2 file utility said that the exec files contain some debug info. (bugzilla prefilled cc:alan@xamarin.com breaks the report attempt) -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1208855] create-dirs-from-rpmdb.service failed to start ('/var/lib/pcp/config/derived': No such file or directory)
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208855 https://bugzilla.suse.com/show_bug.cgi?id=1208855#c1 --- Comment #1 from Thorsten Kukuk <kukuk(a)suse.com> --- (In reply to Felix Niederwanger from comment #0) > * libpcp3 > * libpcp_import1 > * pcp-conf > > The `/var/lib/pcp/` directory doesn't exist on this system. However, > generating the '/var/lib/pcp/config/' directory and restarting the service > seems to resolve the issue. Sounds like pcp-conf is broken, either there is a dependency missing or it should not contain a subdirectory of a not packaged directory. Our build scripts try to find such errors, but looks like that checks didn't worked here. If a directory in the path is missing, we don't know which owner and permissions this should have, and random ownership and permissions could lead to a security problem. So create-dirs-from-rpmdb is correct here to refuse to create a directory with unknown ownership and permissions. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208855] New: create-dirs-from-rpmdb.service failed to start ('/var/lib/pcp/config/derived': No such file or directory)
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208855 Bug ID: 1208855 Summary: create-dirs-from-rpmdb.service failed to start ('/var/lib/pcp/config/derived': No such file or directory) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: felix.niederwanger(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On a fresh MicroOS installation, the create-dirs-from-rpmdb.service fails to start: > Mar 02 14:53:24 microos dbus-daemon[1110]: [session uid=0 pid=1110] Successfully activated service 'org.freedesktop.systemd1' > Mar 02 14:53:24 microos dbus-daemon[664]: [system] Successfully activated service 'org.freedesktop.timedate1' > Mar 02 14:53:24 microos systemd[1]: Started Time & Date Service. > Mar 02 14:53:33 microos systemd[1]: Starting Create missing directories from rpmdb... > Mar 02 14:53:34 microos create_dirs_from_rpmdb[1117]: Failed to create directory '/var/lib/pcp/config/derived': No such file or directory > Mar 02 14:53:34 microos create_dirs_from_rpmdb[1117]: Create /var/lib/pcp/config/derived > Mar 02 14:53:34 microos systemd[1]: create-dirs-from-rpmdb.service: Main process exited, code=exited, status=1/FAILURE > Mar 02 14:53:34 microos systemd[1]: create-dirs-from-rpmdb.service: Failed with result 'exit-code'. > Mar 02 14:53:34 microos systemd[1]: Failed to start Create missing directories from rpmdb. > Mar 02 14:53:54 microos systemd[1]: systemd-hostnamed.service: Deactivated successfully. I didn't install anything related to pcp, and could only find the following packages being present: * libpcp3 * libpcp_import1 * pcp-conf The `/var/lib/pcp/` directory doesn't exist on this system. However, generating the '/var/lib/pcp/config/' directory and restarting the service seems to resolve the issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208188] New: [Build 20230212] plasmashell crashes
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208188 Bug ID: 1208188 Summary: [Build 20230212] plasmashell crashes Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i586 URL: https://openqa.opensuse.org/tests/3115089/modules/open suse_welcome/steps/8 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: openQA Blocker: Yes ## Observation openQA does not get over the 'first boot' screen and detects plasmashell crashes. This seems so far to be limited to i586 builds of Tumbleweed openQA test in scenario opensuse-Tumbleweed-LegacyX86-DVD-i586-kde@32bit fails in [opensuse_welcome](https://openqa.opensuse.org/tests/3115089/modules/opensus… ## Test suite description TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in kde@USBboot_64 scenario. Added by : oorlov; Related ticket: poo#37000 ## Reproducible Fails since (at least) Build [20230209](https://openqa.opensuse.org/tests/3109362) ## Expected result Last good: [20230208](https://openqa.opensuse.org/tests/3106470) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=i586&distri=opensuse&… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1208847] neovim: better support for openSUSE-specific development files
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208847 http://bugzilla.opensuse.org/show_bug.cgi?id=1208847#c2 --- Comment #2 from Filippo Bonazzi <filippo.bonazzi(a)suse.com> --- I wasn't sure whether to assign to a maintainer directly, or if there is another mechanism. Maintainers are Ronis_BR, marxin, mcepl. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208847] neovim: better support for openSUSE-specific development files
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208847 http://bugzilla.opensuse.org/show_bug.cgi?id=1208847#c1 --- Comment #1 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Who is "we" here? Can you look up the package maintainers? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207470] GCC 13: libqt5-qtlocation package fails
by bugzilla_noreply＠suse.com 02 Mar '23

02 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1207470 http://bugzilla.opensuse.org/show_bug.cgi?id=1207470#c2 --- Comment #2 from Christophe Marin <christophe(a)krop.fr> --- (In reply to Fabian Vogt from comment #1) > > I tried to add some missing headers but there are some other issues which > need a closer look: https://github.com/maplibre/maplibre-gl-native/issues/872 > Wrong repo? Qt uses https://github.com/mapbox/mapbox-gl-native -- You are receiving this mail because: You are on the CC list for the bug.

1 0