July 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1213159] New: [request] Lock root account by default
by bugzilla_noreply＠suse.com 17 Apr '24

17 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213159 Bug ID: 1213159 Summary: [request] Lock root account by default Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: milachew(a)mail.lv QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Since MicroOS aims to keep administration as small as possible, it makes sense to consider blocking root account by default. Original comment: https://www.reddit.com/r/openSUSE/comments/14u7ka1/comment/jr60ogz/?utm_sou… P.S. By the way, there have already been similar discussions, but regarding ALP: https://bugzilla.opensuse.org/show_bug.cgi?id=1203978 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1213496] New: Man pages and documentation in general missing
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213496 Bug ID: 1213496 Summary: Man pages and documentation in general missing Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Distrobox Assignee: rbrown(a)suse.com Reporter: kjong+lists(a)neobits.nl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- In Aeon the system is immutable and shouldn't be touched. However, there are no man pages installed. This is not really user-friendly. But maybe it's on purpose to make sure people don't touch their base install? But even after doing `distrobox enter` and you download and enter the default distrobox, which is `registry.opensuse.org/opensuse/distrobox:latest`, I still don't get manual pages. This makes using the system harder than it should be. What's the reasoning to not include documentation? On production non-interactive containers I get why man pages are a waste of disk space. But distrobox is meant to be used as a normal user environment. In such an environment people expect to find man pages. Otherwise the system is in the way of getting things done. In contrast, Fedora Silverblue has the man pages installed in the base OS, but also in their default toolbox image. Which to me makes perfect sense. Humans are going to use those environment interactively. Googling/Ducking for man pages online would be weird and the `--help` output isn't always complete or fully helpful. Can man pages be included in Aeon and in the toolbox containers? -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1212951] New: AUDIT-1: nqptp: precision time protocol daemon
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1212951 Bug ID: 1212951 Summary: AUDIT-1: nqptp: precision time protocol daemon Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- nqptp is a Precision Time Protocol daemon. Upstream: https://github.com/mikebrady/nqptp This daemon runs as root and, according to upstream: > nqptp has not been checked or audited for security issues. Note that it must run in root mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1213659] New: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network
by bugzilla_noreply＠suse.com 28 Mar '24

28 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1213659 Bug ID: 1213659 Summary: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/373431/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: cgoll(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38496 https://bugzilla.redhat.com/show_bug.cgi?id=2226582 https://www.cve.org/CVERecord?id=CVE-2023-38496 http://www.cvedetails.com/cve/CVE-2023-38496/ https://github.com/apptainer/apptainer/pull/1523 https://github.com/apptainer/apptainer/pull/1578 https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-w… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1213043] New: windows:mingw:win{32|64}/mingw{32|64}-cross-cmake: no version support for generated mingw32(cmake:xxx) provides
by bugzilla_noreply＠suse.com 07 Mar '24

07 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1213043 Bug ID: 1213043 Summary: windows:mingw:win{32|64}/mingw{32|64}-cross-cmake: no version support for generated mingw32(cmake:xxx) provides Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, mkbosmans(a)gmail.com Target Milestone: --- Found By: --- Blocker: --- Qt6 packages often uses dependencies to cmake package including a version as shown below: %package devel Summary: Qt 6 base development meta package Requires: qt6-base-common-devel Requires: cmake(Qt6Concurrent) = %{real_version} Requires: cmake(Qt6Core) = %{real_version} Requires: cmake(Qt6DBus) = %{real_version} Requires: cmake(Qt6Gui) = %{real_version} Requires: cmake(Qt6Network) = %{real_version} Requires: cmake(Qt6OpenGL) = %{real_version} Requires: cmake(Qt6OpenGLWidgets) = %{real_version} Requires: cmake(Qt6PrintSupport) = %{real_version} Requires: cmake(Qt6Sql) = %{real_version} Requires: cmake(Qt6Test) = %{real_version} Requires: cmake(Qt6Widgets) = %{real_version} Requires: cmake(Qt6Xml) = %{real_version} BuildArch: noarch https://build.opensuse.org/package/view_file/KDE:Qt6/qt6-base/qt6-base.spec… Cmake-related provides generated by the named package do not currently support versions. This means that when porting Qt6 packages to MinGW, the versions would have to be removed manually or via script. It would therefore be helpful if a version were available for these generated "Provides". -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213028] New: windows:mingw:win{32|64}/mingw{32|64}-libmng: no pkgconfig support
by bugzilla_noreply＠suse.com 07 Mar '24

07 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1213028 Bug ID: 1213028 Summary: windows:mingw:win{32|64}/mingw{32|64}-libmng: no pkgconfig support Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, mkbosmans(a)gmail.com Target Milestone: --- Found By: --- Blocker: --- On building mingw32-qt6-imageformat for MinGW it turned out that the mentioned package does not have pkgconfig support ~/osc/home:rhabacker:branches:windows:mingw:win32:Qt65/mingw32-qt6-imageformats> osc build openSUSE_Leap_15.5 -j12 Building mingw32-qt6-imageformats.spec for openSUSE_Leap_15.5/x86_64 Getting buildconfig from server and store to /home/osc/home:rhabacker:branches:windows:mingw:win32:Qt65/mingw32-qt6-imageformats/.osc/_buildconfig-openSUSE_Leap_15.5-x86_64 Getting buildinfo from server and store to /home/osc/home:rhabacker:branches:windows:mingw:win32:Qt65/mingw32-qt6-imageformats/.osc/_buildinfo-openSUSE_Leap_15.5-x86_64.xml buildinfo is broken... it says: unresolvable: nothing provides mingw32(pkg:libmng) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213384] New: Jul-2023 update of windows 10/11 breaks trust relationship
by bugzilla_noreply＠suse.com 27 Feb '24

27 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1213384 Bug ID: 1213384 Summary: Jul-2023 update of windows 10/11 breaks trust relationship Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Samba Assignee: samba-maintainers(a)SuSE.de Reporter: nopower(a)suse.com QA Contact: samba-maintainers(a)SuSE.de Target Milestone: --- Found By: --- Blocker: --- Reports of users getting errors like "The trust relationship between this workstation and the primary domain failed." have been reported upstream since applying updates KB5028166 / KB5028185. this at least affects samba domain controllers (AD & PDC I believe) it also apparently can affect rdp access. upstream bug https://bugzilla.samba.org/show_bug.cgi?id=15418 -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1213353] New: bash crash during autocompletion: systemctmalloc_consolidate(): unaligned fastbin chunk detected
by bugzilla_noreply＠suse.com 23 Feb '24

23 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1213353 Bug ID: 1213353 Summary: bash crash during autocompletion: systemctmalloc_consolidate(): unaligned fastbin chunk detected Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: werner(a)suse.com Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868226 --> https://bugzilla.suse.com/attachment.cgi?id=868226&action=edit bash screendump and coredumpctl output with intact linebreaks I just had the following bash crash during autocompletion: Unfortunately I don't remember exactly what I did when bash crashed. The only hint that I can offer is that my prompt starts with $? if it's non-zero. The last propmt line indicates that $? was [INT] ====================================================================== cb@tux:~/isotopp.github.io/content/posts cboltz-typo52 L …4> systemctl enable -- --after --defaults --firmware-setup --help --legend=no --no-ask-password --now --plain --recursive --show-types --timestamp --version --all --dry-run --force --host --lines --no-block --no-wall --preset-mode --reverse --signal --type --wait --before --fail --full --job-mode --machine --no-pager --no-warn --property --root --state --user --check-inhibitors --failed --global --kill-whom --message --no-reload --output --quiet --runtime --system --value cb@tux:~/isotopp.github.io/content/posts cboltz-typo52 L …4> systemctl enable --no --no-ask-password --no-block --no-pager --no-reload --now --no-wall --no-warn cb@tux:~/isotopp.github.io/content/posts cboltz-typo52 L …4> systemctl e [INT] cb@tux:~/isotopp.github.io/content/posts cboltz-typo52 L …4> systemctmalloc_consolidate(): unaligned fastbin chunk detected Achtung: Das Programm „/bin/bash“ ist abgestürzt. ====================================================================== ====================================================================== # coredumpctl dump bash PID: 13069 (bash) UID: 1000 (cb) GID: 100 (users) Signal: 6 (ABRT) Timestamp: Fri 2023-07-14 19:58:42 CEST (8min ago) Command Line: /bin/bash Executable: /usr/bin/bash Control Group: /user.slice/user-1000.slice/user@1000.service/app.slice/app-kde_autostart@autostart.service Unit: user(a)1000.service User Unit: app-kde_autostart(a)autostart.service Slice: user-1000.slice Owner UID: 1000 (cb) Boot ID: c4b7162d927340e9995cb85273857589 Machine ID: abf06ac46e2e487ea0edd474065e8b87 Hostname: tux.boltz Storage: /var/lib/systemd/coredump/core.bash.1000.c4b7162d927340e9995cb85273857589.13069.1689357522000000.zst (present) Size on Disk: 722.5K Message: Process 13069 (bash) of user 1000 dumped core. Stack trace of thread 13069: #0 0x00007fe721781a7c __pthread_kill_implementation (libc.so.6 + 0x8fa7c) #1 0x00007fe721730226 raise (libc.so.6 + 0x3e226) #2 0x00007fe721718921 abort (libc.so.6 + 0x26921) #3 0x00007fe721719611 __libc_message.cold (libc.so.6 + 0x27611) #4 0x00007fe72178c417 malloc_printerr (libc.so.6 + 0x9a417) #5 0x00007fe72178d03c malloc_consolidate (libc.so.6 + 0x9b03c) #6 0x00007fe72178f6b8 _int_malloc (libc.so.6 + 0x9d6b8) #7 0x00007fe721790aba __libc_malloc (libc.so.6 + 0x9eaba) #8 0x000055ff5a6938ee xmalloc (bash + 0x758ee) #9 0x000055ff5a69fd61 n/a (bash + 0x81d61) #10 0x000055ff5a6b98cf map_over_funcs (bash + 0x9b8cf) #11 0x000055ff5a6818f6 all_visible_functions (bash + 0x638f6) #12 0x000055ff5a68dc6a command_word_completion_function (bash + 0x6fc6a) #13 0x00007fe72190cddb rl_completion_matches (libreadline.so.8 + 0x1dddb) #14 0x000055ff5a68c7a0 bash_default_completion (bash + 0x6e7a0) #15 0x00007fe72190cef3 n/a (libreadline.so.8 + 0x1def3) #16 0x00007fe72191579c rl_complete_internal (libreadline.so.8 + 0x2679c) #17 0x00007fe72190d178 _rl_dispatch_subseq (libreadline.so.8 + 0x1e178) #18 0x00007fe72190dfa6 readline_internal_char (libreadline.so.8 + 0x1efa6) #19 0x00007fe721916f65 readline (libreadline.so.8 + 0x27f65) #20 0x000055ff5a65ce67 n/a (bash + 0x3ee67) #21 0x000055ff5a69904e n/a (bash + 0x7b04e) #22 0x000055ff5a697394 n/a (bash + 0x79394) #23 0x000055ff5a696be7 yyparse (bash + 0x78be7) #24 0x000055ff5a696821 parse_command (bash + 0x78821) #25 0x000055ff5a6a2c8e read_command (bash + 0x84c8e) #26 0x000055ff5a6a2919 reader_loop (bash + 0x84919) #27 0x000055ff5a6b5f04 main (bash + 0x97f04) #28 0x00007fe721719bb0 __libc_start_call_main (libc.so.6 + 0x27bb0) #29 0x00007fe721719c79 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x27c79) #30 0x000055ff5a6b4fe5 _start (bash + 0x96fe5) ELF object binary architecture: AMD x86-64 Refusing to dump core to tty (use shell redirection or specify --output). ====================================================================== I can provide the full coredump on request. Unfortunately it contains private data (for example filenames from the bash history), therefore I don't want to attach it to a public bugreport. However, I can send it by mail if needed. [Note to myself: the coredump is in ~/susebeta/2023-07-14-*.zst] The attached file contains the above bash screendump and coredumpctl output, just in case bugzilla inserts funny linebreaks. -- You are receiving this mail because: You are on the CC list for the bug.

1 21

[Bug 1213757] New: All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi
by bugzilla_noreply＠suse.com 20 Feb '24

20 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1213757 Bug ID: 1213757 Summary: All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: aarch64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: dheidler(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868483 --> https://bugzilla.suse.com/attachment.cgi?id=868483&action=edit strace of hanging "ip a" The issue appears a few (~5) minutes after hostapd is started. Jul 28 12:47:40 openqa-piworker systemd[1]: Started Hostapd IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator. Jul 28 12:47:40 openqa-piworker hostapd[15307]: Configuration file: /etc/hostapd.conf Jul 28 12:47:40 openqa-piworker kernel: br0: port 1(wlan0) entered blocking state Jul 28 12:47:40 openqa-piworker kernel: br0: port 1(wlan0) entered disabled state Jul 28 12:47:40 openqa-piworker kernel: device wlan0 entered promiscuous mode Jul 28 12:47:40 openqa-piworker hostapd[15307]: wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE Jul 28 12:47:41 openqa-piworker dbus-daemon[629]: [system] Activating via systemd: service name='fi.w1.wpa_supplicant1' unit='wpa_supplicant.service' requested by ':1.31' (uid=0 pid=730 comm="/usr/sbin/wickedd --systemd --foreground ") Jul 28 12:47:41 openqa-piworker systemd[1]: Starting WPA Supplicant daemon... Jul 28 12:47:41 openqa-piworker dbus-daemon[629]: [system] Successfully activated service 'fi.w1.wpa_supplicant1' Jul 28 12:47:41 openqa-piworker systemd[1]: Started WPA Supplicant daemon. Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: Could not connect to kernel driver Jul 28 12:47:45 openqa-piworker hostapd[15307]: Using interface wlan0 with hwaddr e4:5f:01:bb:63:41 and ssid "openQA-worker" Jul 28 12:47:45 openqa-piworker kernel: IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready Jul 28 12:47:45 openqa-piworker kernel: br0: port 1(wlan0) entered blocking state Jul 28 12:47:45 openqa-piworker kernel: br0: port 1(wlan0) entered forwarding state Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: interface state COUNTRY_UPDATE->ENABLED Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: AP-ENABLED openqa-piworker:~ # cat /etc/sysconfig/network/ifcfg-br0 IPADDR='192.168.7.1/24' BOOTPROTO='static' STARTMODE='auto' BRIDGE='yes' BRIDGE_PORTS='' BRIDGE_STP='off' BRIDGE_FORWARDDELAY='15' ZONE=dmz openqa-piworker:~ # cat /etc/hostapd.conf interface=wlan0 bridge=br0 ssid=openQA-worker wpa_passphrase=0foobar12345 driver=nl80211 country_code=DE hw_mode=g channel=7 # Bit field: bit0 = WPA, bit1 = WPA2, 3=both wpa=2 # Bit field: 1=wpa, 2=wep, 3=both auth_algs=1 wpa_pairwise=CCMP wpa_key_mgmt=WPA-PSK logger_stdout=-1 logger_stdout_level=2 openqa-piworker:~ # systemctl cat hostapd.service # /usr/lib/systemd/system/hostapd.service [Unit] Description=Hostapd IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator After=network.target [Service] ExecStart=/usr/sbin/hostapd /etc/hostapd.conf ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target # /etc/systemd/system/hostapd.service.d/override.conf # Ensure that wlan0 is up before starting hostapd (otherwise hostapd will not add wlan0 to the bridge) [Unit] BindsTo=sys-subsystem-net-devices-wlan0.device After=sys-subsystem-net-devices-wlan0.device -- You are receiving this mail because: You are on the CC list for the bug.

1 33

[Bug 1212954] New: amdgpu: Monitor displaying wrong resolution
by bugzilla_noreply＠suse.com 16 Feb '24

16 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1212954 Bug ID: 1212954 Summary: amdgpu: Monitor displaying wrong resolution Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: holgi(a)suse.com QA Contact: gfx-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 867944 --> https://bugzilla.suse.com/attachment.cgi?id=867944&action=edit IMG_20230703_164538751_HDR.jpg Having a 4K monitor (SAMSUNG LU28R55) attached to the docking station of my ThinkPad via HDMI I can easily 1:1 mirror the screen output of the laptop and the monitor with openSUSE Leap 15.4. Doing the same with openSUSE Leap 15.5 will result in monitor displaying a resolution 1980x2160 instead of the set 1980x1080. Using a 4x different screen (Philips) is working fine. Photo of monitor attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 28