August 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1212951] New: AUDIT-1: nqptp: precision time protocol daemon
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1212951 Bug ID: 1212951 Summary: AUDIT-1: nqptp: precision time protocol daemon Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- nqptp is a Precision Time Protocol daemon. Upstream: https://github.com/mikebrady/nqptp This daemon runs as root and, according to upstream: > nqptp has not been checked or audited for security issues. Note that it must run in root mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1214795] New: [Build 518.1] openQA test fails in sshfs - sshfs can not be installed on s390x
by bugzilla_noreply＠suse.com 06 Apr '24

06 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214795 Bug ID: 1214795 Summary: [Build 518.1] openQA test fails in sshfs - sshfs can not be installed on s390x Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: S/390-64 URL: https://openqa.opensuse.org/tests/3534841/modules/sshf s/steps/19 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ada.lovelace(a)gmx.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation sshfs tests are failing during the installation of sshfs on s390x. The capability can not be found: 2023-08-29 14:32:30 <2> susetest(39392) [zypper:req] SolverRequester.cc(install):325 sshfs cap:sshfs not found 2023-08-29 14:32:30 <5> susetest(39392) [zypp-core] Exception.cc(log):186 installremove.cc(handleFeedback):41 THROW: name or capability not found 2023-08-29 14:32:30 <5> susetest(39392) [zypp-core] Exception.cc(log):186 basecommand.cc(run):281 CAUGHT: name or capability not found at opensuse/lib/utils.pm line 675. openQA test in scenario opensuse-15.6-DVD-s390x-textmode-server@s390x-zVM-vswitch-l2 fails in [sshfs](https://openqa.opensuse.org/tests/3534841/modules/sshfs/steps/19) ## Test suite description The base test suite is used for job templates defined in YAML documents. It has no settings of its own. ## Reproducible Fails since (at least) Build [507.2](https://openqa.opensuse.org/tests/3505261) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=s390x&distri=opensuse… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1214160] New: libvirt-routed firewalld zone not functional
by bugzilla_noreply＠suse.com 04 Apr '24

04 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214160 Bug ID: 1214160 Summary: libvirt-routed firewalld zone not functional Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: rombert(a)apache.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After a recent update of my virtual machines host (sorry for being fuzzy) I started seeing connections being dropped between the VMs and the host, specifically NFS. The interfaces are assigned to the libvirt-routed interface contributed by libvirt-daemon-driver-network. # firewall-cmd --get-active-zones (...) libvirt-routed interfaces: kubic-net-br virbr1 # rpm -qf /usr/lib/firewalld/zones/libvirt-routed.xml libvirt-daemon-driver-network-9.0.0-150500.6.11.1.x86_64 Once enabling firewalld dropped packages logging I see log entries such as Aug 10 13:08:02 vmhost002 kernel: "filter_IN_policy_libvirt-to-host_REJECT: "IN=virbr1 OUT= MAC=52:54:00:33:68:12:52:54:00:ce:5c:25:08:00 SRC=10.25.1.6 DST=10.25.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54291 DF PROTO=TCP SPT=943 DPT=2049 WINDOW=64240 RES=0x00 SYN URGP=0 The nfs service should be allowed # firewall-cmd --info-zone=libvirt-routed | grep services services: http mountd mysql nfs rpc-bind # firewall-cmd --info-service=nfs nfs ports: 2049/tcp protocols: source-ports: modules: destination: includes: helpers: What is worrying me and pointing to a bug are the following messages from the system journal which point to the firewalld zone not being functional Aug 09 13:12:36 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'RUNNING', False, 'public', {'nf_nat_tftp': 4}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:12:36 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'RUNNING', False, 'public', {'nf_nat_tftp': 4}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:13:33 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'INIT', False, 'public', {}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:13:33 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'INIT', False, 'public', {'nf_nat_tftp': 1}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Happy to provide more information if needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1213659] New: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network
by bugzilla_noreply＠suse.com 28 Mar '24

28 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1213659 Bug ID: 1213659 Summary: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/373431/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: cgoll(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38496 https://bugzilla.redhat.com/show_bug.cgi?id=2226582 https://www.cve.org/CVERecord?id=CVE-2023-38496 http://www.cvedetails.com/cve/CVE-2023-38496/ https://github.com/apptainer/apptainer/pull/1523 https://github.com/apptainer/apptainer/pull/1578 https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-w… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1214850] New: open-vm-tools 12.3.0 has been released - please rebase
by bugzilla_noreply＠suse.com 27 Mar '24

27 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1214850 Bug ID: 1214850 Summary: open-vm-tools 12.3.0 has been released - please rebase Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: jwolfe(a)vmware.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- open-vm-tools 12.3.0 was released on Aug. 31, 2023. Also affects project (?) Also affects distribution/package Edit Bug Description There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: This release resolves CVE-2023-20900. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. Building of the VMware Guest Authentication Service (VGAuth) using "xml-security-c" and "xerces-c" is being deprecated. A number of Coverity reported issues have been addressed. A number of GitHub issues and pull requests have been handled. Please see the Resolves Issues section of the Release Notes. For issues resolved in this release, see the Resolved Issues section of the Release Notes. For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0 Release Notes are available at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md The granular changes that have gone into the 12.3.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/Ch… Note: With the changes upstreamed and the fix for CVE-2023-20867 in the source, you may not need the following patches in your open-vm-toold pacjage build: 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch 2023-20867-Remove-some-dead-code.patch detect-suse-location.patch Please rebase open-vm-tools version 12.3.0 in supported releases of SLES 12 and SLES 15 for x86_64/amd64 and aarch64/ARM64 architectures as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1214274] New: Google Chrome and Chromium: Skia shader compilation error
by bugzilla_noreply＠suse.com 17 Mar '24

17 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1214274 Bug ID: 1214274 Summary: Google Chrome and Chromium: Skia shader compilation error Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: miso(a)hlavki.eu QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868797 --> https://bugzilla.suse.com/attachment.cgi?id=868797&action=edit error log After upgrade to snapshots 20230812, 20230813 Google Chrome and Chromium stops render properly web pages. Started to blink and console log shows errors. Attachned error.txt It looks similar to: https://bugs.chromium.org/p/chromium/issues/detail?id=1442633 Can confirm that workaround is: google-chrome --disable-gpu-driver-bug-workarounds -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1214800] New: KDE Wayland Screen Energy Saving Problem
by bugzilla_noreply＠suse.com 14 Mar '24

14 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1214800 Bug ID: 1214800 Summary: KDE Wayland Screen Energy Saving Problem Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: pfaca(a)tutamail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When using Wayland, Screen Energy Saving doesn't work. Either waiting for the switch off timer, or using Ctrl + Alt + D the outcome is the same: 1. display turns off 2. display says that there is no signal/input 3. display turns off again 4. display wakes up immediately Journal gives the following: plasmashell[2276] qt.qpa.wayland: Wayland does not support QWindow::requestActivate() At bugs.kde.org there is the bug number 462695 (https://bugs.kde.org/show_bug.cgi?id=462695) where it claims the bug was resolved at KDE side and the fix has to be provided by openSUSE. My specs: openSUSE Tumbleweed Kernel 6.4.11-1-default DE Plasma 5.27.7 CPU Intel i5-4670K GPU AMD ATI Radeon RX 6750 XT Note: Everything works has expected using X11. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1214786] New: [Build 20230823] libreoffice: pressing alt-t does not keep the menu 'open'
by bugzilla_noreply＠suse.com 14 Mar '24

14 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1214786 Bug ID: 1214786 Summary: [Build 20230823] libreoffice: pressing alt-t does not keep the menu 'open' Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3528042/modules/libr eoffice_default_theme/steps/4 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: LibreOffice Assignee: screening-team-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation This trips up openQA - and I could reproduce it locally: * Start LibreOffice (the main program) * press alt-t (open Tools menu) In many cases (especially when alt is not pressed longer) you can see the tools menu open and close down right again. if you press alt for at least as long until the sub-menu tools/Macros is rendered, the menu stays open. This seems quite annoying for keyboard users (clicking Tools with the mouse seems to keep it open always) openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-desktopapps-documentation-x11@64bit fails in [libreoffice_default_theme](https://openqa.opensuse.org/tests/3528042/module… ## Test suite description ## Reproducible Fails since (at least) Build [20230531](https://openqa.opensuse.org/tests/3327574) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214111] New: VUL-0: CVE-2023-3894: jackson-dataformats-text: DoS during toml deserialization
by bugzilla_noreply＠suse.com 10 Mar '24

10 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1214111 Bug ID: 1214111 Summary: VUL-0: CVE-2023-3894: jackson-dataformats-text: DoS during toml deserialization Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/374699/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: fstrba(a)suse.com Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- CVE-2023-3894 Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3894 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50083 https://www.cve.org/CVERecord?id=CVE-2023-3894 https://github.com/FasterXML/jackson-dataformats-text/blob/2.16/release-not… https://github.com/FasterXML/jackson-dataformats-text/pull/398 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213043] New: windows:mingw:win{32|64}/mingw{32|64}-cross-cmake: no version support for generated mingw32(cmake:xxx) provides
by bugzilla_noreply＠suse.com 07 Mar '24

07 Mar '24

https://bugzilla.suse.com/show_bug.cgi?id=1213043 Bug ID: 1213043 Summary: windows:mingw:win{32|64}/mingw{32|64}-cross-cmake: no version support for generated mingw32(cmake:xxx) provides Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: fridrich.strba(a)bluewin.ch, hib(a)hiberis.nl, mkbosmans(a)gmail.com Target Milestone: --- Found By: --- Blocker: --- Qt6 packages often uses dependencies to cmake package including a version as shown below: %package devel Summary: Qt 6 base development meta package Requires: qt6-base-common-devel Requires: cmake(Qt6Concurrent) = %{real_version} Requires: cmake(Qt6Core) = %{real_version} Requires: cmake(Qt6DBus) = %{real_version} Requires: cmake(Qt6Gui) = %{real_version} Requires: cmake(Qt6Network) = %{real_version} Requires: cmake(Qt6OpenGL) = %{real_version} Requires: cmake(Qt6OpenGLWidgets) = %{real_version} Requires: cmake(Qt6PrintSupport) = %{real_version} Requires: cmake(Qt6Sql) = %{real_version} Requires: cmake(Qt6Test) = %{real_version} Requires: cmake(Qt6Widgets) = %{real_version} Requires: cmake(Qt6Xml) = %{real_version} BuildArch: noarch https://build.opensuse.org/package/view_file/KDE:Qt6/qt6-base/qt6-base.spec… Cmake-related provides generated by the named package do not currently support versions. This means that when porting Qt6 packages to MinGW, the versions would have to be removed manually or via script. It would therefore be helpful if a version were available for these generated "Provides". -- You are receiving this mail because: You are on the CC list for the bug.

1 2