March 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1209872] New: "Valid metadata not found at specified URL" prompts at the beginning of installing TW snapshot20230326
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209872 Bug ID: 1209872 Summary: "Valid metadata not found at specified URL" prompts at the beginning of installing TW snapshot20230326 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: jcao(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Fail to install Tumbelweed with recent snapshots with same errors. - Tried http://download.opensuse.org/tumbleweed/repo/oss or http://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-x86_64-CURRE… - tried snapshot20230324, 20230326 and 20230327 ### reproduct steps #### 1. The install command via iPXE: kernel http://download.opensuse.org/tumbleweed/repo/oss/boot/x86_64/loader/linux install=http://download.opensuse.org/tumbleweed/repo/oss plymouth.enable=0 Y2DEBUG=1 console=ttyS1,115200 linuxrc.log=/dev/ttyS1 linuxrc.core=/dev/ttyS1 linuxrc.debug=4,trace reboot_timeout=0 ssh=1 sshpassword=xxx kernel.softlockup_panic=1 vga=791 video=1024x768 vt.color=0x07 quiet initrd http://download.opensuse.org/tumbleweed/repo/oss/boot/x86_64/loader/initrd boot 2. After loading kernel, login ssh and type "yast.ssh", install wizard starts. before any user interaction, the install wizard stops and prompts the following error https://openqa.opensuse.org/tests/3197651#step/welcome/2 ``` Unable to create repository from URL 'http://download.opensuse.org/tumbleweed/repo/oss'. Details: [openSUSE-20230326-0|http://download.opensuse.org/tumbleweed/repo/oss] Valid metadata not found at specified URL History: - File /var/tmp/TmpFile.Jtn0jd doesn't contain public key data ``` ## Reproducibility 100% ## Last good build TW snapshot 20230322 ## Logs y2logs and more logs are in https://openqa.opensuse.org/tests/3197651#downloads -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1209528] New: VUL-0: CVE-2023-28425: redis: specially crafted MSETNX command can lead to assertion and denial-of-service
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209528 Bug ID: 1209528 Summary: VUL-0: CVE-2023-28425: redis: specially crafted MSETNX command can lead to assertion and denial-of-service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: danilo.spinella(a)suse.com Reporter: Andreas.Stieger(a)gmx.de QA Contact: security-team(a)suse.de Found By: --- Blocker: --- It was discovered that in redis before 7.0.10 authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. Affects redis >= 7.0.8, fixed in 7.0.10. CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (5.5) https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8c https://github.com/redis/redis/releases/tag/7.0.10 https://github.com/redis/redis/blob/7.0.10/00-RELEASENOTES https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f2… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1206349] New: guake no longer works in 15.4
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1206349 Bug ID: 1206349 Summary: guake no longer works in 15.4 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: batpul(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After fresh install of 15.4 the guake program no longer works: $ /usr/bin/guake Guake not running, starting it Loading Gnome schema from: /usr/share/glib-2.0/schemas Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 177, in activate_name_owner return self.get_name_owner(bus_name) File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 363, in get_name_owner 's', (bus_name,), **keywords) File "/usr/lib/python3.6/site-packages/dbus/connection.py", line 653, in call_blocking message, timeout) dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NameHasNoOwner: Could not get owner of name 'org.guake3.RemoteControl': no such name During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/guake/main.py", line 451, in main remote_object = bus.get_object(DBUS_NAME, DBUS_PATH) File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 243, in get_object follow_name_owner_changes=follow_name_owner_changes) File "/usr/lib/python3.6/site-packages/dbus/proxies.py", line 250, in __init__ self._named_service = conn.activate_name_owner(bus_name) File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 182, in activate_name_owner self.start_service_by_name(bus_name) File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 280, in start_service_by_name 'su', (bus_name, flags))) File "/usr/lib/python3.6/site-packages/dbus/connection.py", line 653, in call_blocking message, timeout) dbus.exceptions.DBusException: org.freedesktop.DBus.Error.ServiceUnknown: The name org.guake3.RemoteControl was not provided by any .service files During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/guake/__init__.py", line 28, in guake_version import importlib.metadata as importlib_metadata ModuleNotFoundError: No module named 'importlib.metadata' During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/bin/guake", line 10, in <module> sys.exit(exec_main()) File "/usr/lib/python3.6/site-packages/guake/main.py", line 616, in exec_main if not main(): File "/usr/lib/python3.6/site-packages/guake/main.py", line 467, in main instance = Guake() File "/usr/lib/python3.6/site-packages/guake/guake_app.py", line 123, in __init__ or self.settings.general.get_string("schema-version") != guake_version() File "/usr/lib/python3.6/site-packages/guake/__init__.py", line 30, in guake_version import importlib_metadata ModuleNotFoundError: No module named 'importlib_metadata' -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1197256] New: VUL-0: CVE-2021-23556: guake: possible command injection through dbus interface
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1197256 Bug ID: 1197256 Summary: VUL-0: CVE-2021-23556: guake: possible command injection through dbus interface Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/326571/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: badshah400(a)gmail.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-23556 The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. **Note:** Exploitation requires the user to have installed another malicious program that will be able to send dbus signals or run terminal commands. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-23556 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23556 https://github.com/Guake/guake/pull/2017/commits/e3d671120bfe7ba28f50e256cc… https://github.com/Guake/guake/releases https://github.com/Guake/guake/pull/2017 https://github.com/Guake/guake/issues/1796 https://snyk.io/vuln/SNYK-PYTHON-GUAKE-2386334 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1191924] New: kernel-source.git/README outdated
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1191924 Bug ID: 1191924 Summary: kernel-source.git/README outdated Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: ohering(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- There is a section "Before You Commit -- Things To Check" in kernel-source.git/README, it will likely not work out of the box. According to rpm/kernel-binary.spec.in, at least three more packages beside the obvious gcc/make/patch need to be installed: BuildRequires: libopenssl-devel BuildRequires: libelf-devel BuildRequires: dwarves >= 1.21 Furthermore rapidquilt is not mentioned. It is not strictly required, but one can hardly live without it. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1184490] New: mame creates a cfg directory in PWD instead of ~/.mame and ignoring ~/.mame/cfg
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1184490 Bug ID: 1184490 Summary: mame creates a cfg directory in PWD instead of ~/.mame and ignoring ~/.mame/cfg Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ilya(a)ilya.pp.ua QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After updating mame to 0.226, mame started ignoring the configuration directory ~/.mame/cfg/ and started creating it in PWD, i.e. the directory where mame runs from (~/ if you run mame via the menu). In 0.229 nothing has changed. In 0.211 it was no problem. To reproduce, just run "cd /tmp && mame", wait for mame to load the interface, then press Esc to quit mame, and then check /tmp "ls -lah /tmp | grep cfg". -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1209680] New: ata1.00: exception Emask 0x40 SAct 0x3f0 SErr 0xd0800 action 0x6 frozen
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209680 Bug ID: 1209680 Summary: ata1.00: exception Emask 0x40 SAct 0x3f0 SErr 0xd0800 action 0x6 frozen Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: jshand2013(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- i'm not too sure where this issue should be put, but here it is. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1209970] New: Trimmed "Leap" logo on the default wallpaper
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209970 Bug ID: 1209970 Summary: Trimmed "Leap" logo on the default wallpaper Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: tiwai(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 866004 --> http://bugzilla.opensuse.org/attachment.cgi?id=866004&action=edit Desktop screenshot When installing on Lenovo Thinkpad T14s Gen 3, the "Leap" logo appears at the upper right corner, but it's trimmed. It still works from functionality POV, but it's not nice at all. The problem is likely the screen aspect ratio. T14s has the screen size 1920x1200, while the default wallpeper for xfce is 1600x1200. Can the artwork be adjusted to place the logo at a bit lower position? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1209974] New: firefox cannot play video
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209974 Bug ID: 1209974 Summary: firefox cannot play video Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: wzyhktk(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Firefox cannot play video on leap 15.5, although all codecs have been installed. while the flatpak version firefox works fine. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1208665] New: restic does not print information when doing backups
by bugzilla_noreply＠suse.com 07 Apr '23

07 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208665 Bug ID: 1208665 Summary: restic does not print information when doing backups Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: S/390-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: azouhr(a)opensuse.org QA Contact: qa-bugs(a)suse.de CC: ada.lovelace(a)gmx.de Found By: Community User Blocker: --- When doing backups on s390x, restic only prompts for password, but does not print any more information, regardless of the verbosity. The backup seems to work though. This has been evaluated with restic-0.15.1-0.s390x.rpm. On x86_64, there is quite some additional information by default. The following commands can be used to reproduce: > restic init --repo /tmp/testrepo enter password for new repository: enter password again: created restic repository 49ad167248 at /tmp/testrepo Please note that knowledge of your password is required to access the repository. Losing your password means that your data is irrecoverably lost. > restic -r /tmp/testrepo backup ~/ enter password for repository: > echo $? 0 For those who do not have s390x available, you can reproduce on your local PC like this: zypper in qemu-s390x osc co openSUSE:Factory:zSystems restic cd openSUSE:Factory:zSystems/restic osc build --vm-type qemu --vm-memory=8192 standard s390x osc chroot --vm-type qemu --vm-memory=8192 --noinit standard s390x You will find the package at the usual places. It can be unpacked with rpm2cpio and cpio -id if you want to retrieve the binary. -- You are receiving this mail because: You are on the CC list for the bug.

1 5