April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1210077] VUL-0: CVE-2023-29132: irssi: use after free possible under special circumstances
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210077 http://bugzilla.opensuse.org/show_bug.cgi?id=1210077#c4 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Component|Incidents |Security Version|unspecified |Current Resolution|--- |FIXED Product|SUSE Security Incidents |openSUSE Tumbleweed Target Milestone|--- |Current QA Contact|security-team(a)suse.de |qa-bugs(a)suse.de --- Comment #4 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Already fixed in TW and on it's way to openSUSE:Backports:SLE-15-SP5. No update needed for maintained releases, closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210264] New installation option: partial disk encryption with Trusted Platform
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210264 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |slawek(a)lach.art.pl Flags| |needinfo?(slawek(a)lach.art.p | |l) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210264] New installation option: partial disk encryption with Trusted Platform
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210264 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Enhancement -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210264] New installation option: partial disk encryption with Trusted Platform
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210264 https://bugzilla.suse.com/show_bug.cgi?id=1210264#c1 --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- First of all, this is clearly a feature request, not a bug. Why do you think dividing up the root filesystem into an encrypted and an unencrypted part would save any disk space? It only makes things more complicated; a LOT more complicated, actually. Any miniscule performance gain by not needing to decrypt every disk block while reading would immediately be out the window by the need to constantly check everything while reading, as you suggest. You can already verify individual or all software packages with "rpm --verify" (see "man rpm" for more details) if you want to do this every now and then. Doing it all the time would be a huge performance drain. That's basically combining all the disadvantages of an unencrypted filesystem and an encrypted filesystem into one. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210220] New: Amarok Crashes on Startup - Tumbleweed 20230404
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210220 Bug ID: 1210220 Summary: Amarok Crashes on Startup - Tumbleweed 20230404 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cygnix(a)protonmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On Tumbleweed 20230404, Amarok crashes upon startup, and here is the backtrace provided: Application: Amarok (amarok), signal: Aborted [KCrash Handler] #4 0x00007f8c37e94d7c in __pthread_kill_implementation () at /lib64/libc.so.6 #5 0x00007f8c37e43356 in raise () at /lib64/libc.so.6 #6 0x00007f8c37e2b897 in abort () at /lib64/libc.so.6 #7 0x00007f8c384bb4e9 in () at /lib64/libQt5Core.so.5 #8 0x00007f8c384bbd86 in () at /lib64/libQt5Core.so.5 #9 0x00007f8c39ca9ac3 in () at /lib64/libamaroklib.so.1 #10 0x00007f8c39c7f9d3 in Playlist::Actions::playlistModeChanged() () at /lib64/libamaroklib.so.1 #11 0x00007f8c39c82d69 in Playlist::Actions::init() () at /lib64/libamaroklib.so.1 #12 0x00007f8c39c82dc0 in Playlist::Actions::instance() () at /lib64/libamaroklib.so.1 #13 0x00007f8c39e593bf in MainWindow::createActions() () at /lib64/libamaroklib.so.1 #14 0x00007f8c39e4f1cb in MainWindow::MainWindow() () at /lib64/libamaroklib.so.1 #15 0x00007f8c39e494de in App::continueInit() () at /lib64/libamaroklib.so.1 #16 0x0000561ec3cf3f71 in () #17 0x00007f8c37e2cbb0 in __libc_start_call_main () at /lib64/libc.so.6 #18 0x00007f8c37e2cc79 in __libc_start_main_impl () at /lib64/libc.so.6 #19 0x0000561ec3cf4815 in () [Inferior 1 (process 21607) detached] -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1209457] NFSv4 broken after kernel update (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209457 https://bugzilla.suse.com/show_bug.cgi?id=1209457#c46 --- Comment #46 from St�phane DESNEUX <sdx(a)iot.bzh> --- Please forget comment #45 (typo). ----------------- An even better workaround :) : cat <<EOF >>/etc/nfsmount.conf [ Server "nas" ] Defaultvers=4 EOF -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209457] NFSv4 broken after kernel update (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209457 https://bugzilla.suse.com/show_bug.cgi?id=1209457#c45 --- Comment #45 from St�phane DESNEUX <sdx(a)iot.bzh> --- An even better workaround :) : cat <<EOF >>>/etc/nfsmount.conf [ Server "nas" ] Defaultvers=4 EOF -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209457] NFSv4 broken after kernel update (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209457 https://bugzilla.suse.com/show_bug.cgi?id=1209457#c44 --- Comment #44 from St�phane DESNEUX <sdx(a)iot.bzh> --- QNAP NAS is up to date: model TS-412 version '4.3.3.2211 Build 20221124' This doesn't solve the issue. (In reply to Neil Brown from comment #40) > There is a known problem with QNAP which is triggered by a recent change in > Linux NFS. We do have the fix to avoid triggering this bug but I don't > think that update has been released yet. Once you get a kernel that was > released after 22/Mar/2023 QNAP should be fine. kernel .55 has been released after 22/Mar/2023 as reported by uname: # uname -a Linux <hostname> 5.14.21-150400.24.55-default #1 SMP PREEMPT_DYNAMIC Mon Mar 27 15:25:48 UTC 2023 (cc75cf8) x86_64 x86_64 x86_64 GNU/Linux Is it the correct release date? If so, maybe the fix occurred later? I'll try to dig in https://github.com/SUSE/kernel/tree/SLE15-SP4 ... As mentioned here https://forum.qnap.com/viewtopic.php?f=35&t=165385 , a workaround is to force the protocol version to 4: # mount -t nfs nas:/Web /mnt/tmp/ => FAILS # mount -o nfsvers=4 -t nfs nas:/Web /mnt/tmp/ => OK # mount -o nfsvers=4.0 -t nfs nas:/Web /mnt/tmp/ => OK HTH -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209457] NFSv4 broken after kernel update (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1209457 https://bugzilla.suse.com/show_bug.cgi?id=1209457#c43 --- Comment #43 from St�phane DESNEUX <sdx(a)iot.bzh> --- Hi Neil, Thanks for taking some time to investigate on this problem. As I mentioned earlier, I captured the nfs conversation between my laptop (Leap 15.4, same client as before) and the QNAP NAS server (details in description). As a summary: * showmount works * mount blocks indefinitely, as before. I stopped after 10mn. Looking at the capture (mount_ls_umount_kernel_46.1.pcapng.gz versus mount_ls_umount_kernel_55.3.pcapng.gz): everything is similar until we reach request #82 on kernel .55.3. The call GETATTR with FSID,FS_Locations is sent and the server replies with NFS4ERR_DELAY. This specific GETATTR call is not present in the capture for kernel .46.1. Then the same sequence repeats indefinitely every 15s. Looking on the web, I found a very similar issue ~1 year ago: https://bugzilla.redhat.com/show_bug.cgi?id=2055362 The conclusion was: updating QNAP NFS Server could help... I'll do this and report. But in any case, even if the NFS Server doesn't behave correctly, the client shouldn't block indefinitely. This is a major issue to be solved on client side IMO. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210199] New: mangohud 32-bit
by bugzilla_noreply＠suse.com 08 Apr '23

08 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210199 Bug ID: 1210199 Summary: mangohud 32-bit Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: dimstar(a)opensuse.org Reporter: m4ng4n(a)gmx.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Mangohud-32bit is one of the 32bit packages that is supposed to be deleted in snapshot 20230404. We still need this 32bit package. Otherwise there will be no mangohud on 32bit games started by steam and/or wine. This affects all 32bit games, be they native or run with wine/proton. Thank you! -- You are receiving this mail because: You are on the CC list for the bug.

1 6