April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1210258] Configuring network for No Link and IP Setup still enables IPv6
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210258 https://bugzilla.suse.com/show_bug.cgi?id=1210258#c1 Knut Alejandro Anderssen Gonz�lez <kanderssen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aaronw(a)doofus.org, | |kanderssen(a)suse.com Flags| |needinfo?(aaronw(a)doofus.org | |) --- Comment #1 from Knut Alejandro Anderssen Gonz�lez <kanderssen(a)suse.com> --- (In reply to Aaron Williams from comment #0) > I have a setup where I have two network cards and two bridges. > > br0 is connected to the first network card and br1 is connected to the > second network card. > I am using bridges for VMs. > In my case, for br1 I do not want any IP addresses since this port is > connected directly to the internet and should be accessed only by a VM. > The problem I am seeing is that even though YaST has br1 configured for No > Link and IP Setup (Bond Ports), it is still obtaining an IPv6 address. > If I configure a port for no IPv6 then it should not attach any protocols to > that port, IPv4 or IPv6. > > How to recreate: > 1. Configure a bridge with one network card and set it to No Link and IP > Setup (Bond Ports) > 2. Plug the cable into an IPv6 enabled network > 3. Type ip -6 a > 4. Notice that routeable IPv6 addresses get assigned. > > 7: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP > group > ip -6 a > ... > 7: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP > group default qlen 1000 > link/ether 10:7b:44:91:3e:c9 brd ff:ff:ff:ff:ff:ff > inet6 2603:3024:XXXX:XXXX:XXXX:XXXX:XXXX:37b8/64 scope global temporary > dynamic > valid_lft 299sec preferred_lft 299sec > inet6 2603:3024:XXXX:XXXX:XXXX:XXXX:XXXX:3ec9/64 scope global dynamic > mngtmpaddr > valid_lft 299sec preferred_lft 299sec > inet6 fe80::XXXX:XXXX:XXXX:3ec9/64 scope link > valid_lft forever preferred_lft forever > > /etc/sysconfig/network/ifcfg-br1 contains the following: > IPADDR='0.0.0.0' > MTU='0' > BOOTPROTO='none' > STARTMODE='auto' > ZONE='external' > BRIDGE='yes' > BRIDGE_PORTS='eth1' > BRIDGE_STP='off' > BRIDGE_FORWARDDELAY='15' > > I know IPv6 can be disabled via sysctl, but it should also be possible in > YaST2. This can be a security issue, as it is for me. And you can disable it in YaST using the Global Options tab and unchecking he IPv6 Protocol Settings -> Enable IPv6. Isn't it enough? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210270] New Directory Server (Instance) Setup Error : ModuleNotFoundError: No module named 'packaging'
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210270 https://bugzilla.suse.com/show_bug.cgi?id=1210270#c6 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ancor(a)suse.com Component|YaST2 |Samba Assignee|yast2-maintainers(a)suse.de |samba-maintainers(a)SuSE.de QA Contact|jsrain(a)suse.com |samba-maintainers(a)SuSE.de --- Comment #6 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- yast2-auth-server is not developed or maintained by the YaST Team. Reassigning to the Samba Team (by changing the component). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210265] VUL-0: CVE-2023-1801: tcpdump: out-of-bounds write in the SMB printer
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210265 https://bugzilla.suse.com/show_bug.cgi?id=1210265#c1 --- Comment #1 from Pedro Monreal Gonzalez <pmonrealgonzalez(a)suse.com> --- Factory submissions: * tcpdump: https://build.opensuse.org/request/show/1078231 * libpcap: https://build.opensuse.org/request/show/1078230 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208462] NetworkManager, bridge reconnection fails
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208462 https://bugzilla.suse.com/show_bug.cgi?id=1208462#c13 --- Comment #13 from Jonathan Kang <songchuan.kang(a)suse.com> --- (In reply to Episteme PROMENEUR from comment #12) > Today I made a new test. Bridge reconnection failed. > > The supplied links are too techie for me. > > Is there anything more to do ? I would suggest reporting this to upstream gitlab. As there is little to no documentation about bridging in NetworkManager, talking to upstream developers should help a lot. * https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210115] New: mame fails to build on Leap 15.5 because of find-debuginfo.sh
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210115 Bug ID: 1210115 Summary: mame fails to build on Leap 15.5 because of find-debuginfo.sh Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello meme fails to build on Leap 15.5 the build failure seems to be related to generation of debuginfo packages [ 2447s] + test -z /home/abuild/rpmbuild/BUILDROOT/mame-0.193-bp155.2.26.x86_64//usr/share/mame/bgfx/effects/README.md [ 2447s] + test -z '' [ 2447s] + _target= [ 2447s] + continue [ 2447s] + read _file [ 2447s] + /usr/lib/rpm/find-debuginfo.sh -j08 --build-id-seed 0.193-bp155.2.26 --unique-debug-suffix -0.193-bp155.2.26.x86_64 --unique-debug-src-base mame-0.193-bp155.2.26.x86_64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 50000000 -S debugsourcefiles.list /home/abuild/rpmbuild/BUILD/mame-mame0193 [ 2447s] /usr/lib/rpm/find-debuginfo.sh: line 513: ((: 08: value too great for base (error token is "08") [ 2447s] /usr/lib/rpm/find-debuginfo.sh: line 521: /tmp/find-debuginfo.NU1Guv/res.*: No such file or directory [ 2447s] error: Bad exit status from /var/tmp/rpm-tmp.XCr6Ge (%install) [ 2447s] We'd like to have the build failure fixed prior to the RC build in April. See https://en.opensuse.org/openSUSE:Roadmap for more details. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1184490] New: mame creates a cfg directory in PWD instead of ~/.mame and ignoring ~/.mame/cfg
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1184490 Bug ID: 1184490 Summary: mame creates a cfg directory in PWD instead of ~/.mame and ignoring ~/.mame/cfg Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ilya(a)ilya.pp.ua QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After updating mame to 0.226, mame started ignoring the configuration directory ~/.mame/cfg/ and started creating it in PWD, i.e. the directory where mame runs from (~/ if you run mame via the menu). In 0.229 nothing has changed. In 0.211 it was no problem. To reproduce, just run "cd /tmp && mame", wait for mame to load the interface, then press Esc to quit mame, and then check /tmp "ls -lah /tmp | grep cfg". -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1209680] New: ata1.00: exception Emask 0x40 SAct 0x3f0 SErr 0xd0800 action 0x6 frozen
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209680 Bug ID: 1209680 Summary: ata1.00: exception Emask 0x40 SAct 0x3f0 SErr 0xd0800 action 0x6 frozen Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: jshand2013(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- i'm not too sure where this issue should be put, but here it is. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1210265] VUL-0: CVE-2023-1801: tcpdump: out-of-bounds write in the SMB printer
by bugzilla_noreply＠suse.com 10 Apr '23

10 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210265 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210270] New: New Directory Server (Instance) Setup Error : ModuleNotFoundError: No module named 'packaging'
by bugzilla_noreply＠suse.com 09 Apr '23

09 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210270 Bug ID: 1210270 Summary: New Directory Server (Instance) Setup Error : ModuleNotFoundError: No module named 'packaging' Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: jshand2013(a)gmail.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Recently i tried to set up a new directory instance with self-signed certificates. i was unable to cpmplete the process due to an error ModuleNotFoundError: No module named 'packaging'. i have enclosed logs -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1210126] New: VUL-0: chromium: multiple security issues fixed in 112.0.5615.49
by bugzilla_noreply＠suse.com 09 Apr '23

09 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210126 Bug ID: 1210126 Summary: VUL-0: chromium: multiple security issues fixed in 112.0.5615.49 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: gmbr3(a)opensuse.org Reporter: Andreas.Stieger(a)gmx.de QA Contact: security-team(a)suse.de Found By: --- Blocker: --- https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-des… Fixed in Chromium 112.0.5615.49: CVE-2023-1810: Heap buffer overflow in Visuals CVE-2023-1811: Use after free in Frames CVE-2023-1812: Out of bounds memory access in DOM Bindings CVE-2023-1813: Inappropriate implementation in Extensions CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing CVE-2023-1815: Use after free in Networking APIs CVE-2023-1816: Incorrect security UI in Picture In Picture CVE-2023-1817: Insufficient policy enforcement in Intents CVE-2023-1818: Use after free in Vulkan CVE-2023-1819: Out of bounds read in Accessibility CVE-2023-1820: Heap buffer overflow in Browser History CVE-2023-1821: Inappropriate implementation in WebShare CVE-2023-1822: Incorrect security UI in Navigation CVE-2023-1823: Inappropriate implementation in FedCM Various fixes from internal audits, fuzzing and other initiatives -- You are receiving this mail because: You are on the CC list for the bug.

1 12