September 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1213659] New: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network
by bugzilla_noreply＠suse.com 22 Jul '24

22 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1213659 Bug ID: 1213659 Summary: VUL-0: CVE-2023-38496: apptainer: Ineffective privileges drop when requesting container network Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/373431/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: cgoll(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38496 https://bugzilla.redhat.com/show_bug.cgi?id=2226582 https://www.cve.org/CVERecord?id=CVE-2023-38496 http://www.cvedetails.com/cve/CVE-2023-38496/ https://github.com/apptainer/apptainer/pull/1523 https://github.com/apptainer/apptainer/pull/1578 https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-w… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1213595] New: Live ISO does not creates Persistent storage
by bugzilla_noreply＠suse.com 16 Jul '24

16 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1213595 Bug ID: 1213595 Summary: Live ISO does not creates Persistent storage Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Live Medium Assignee: fvogt(a)suse.com Reporter: sehsuvarselmanoglu(a)hotmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868398 --> https://bugzilla.suse.com/attachment.cgi?id=868398&action=edit 7z File for some logs Hi, I downloaded OpenSUSE Leap ISO (openSUSE-Leap-15.5-KDE-Live-x86_64-Build10.40-Media.iso) at 08/06/2023 (as soon as released) then I “dd” to USB stick and plugged to computer and it worked fine. At first boot, it did create the persistent storage cow (boot.log : [ 22.002982] dracut-initqueue[877]: mke2fs 1.46.4 (18-Aug-2021) ) Few days later I download again this time build number was different (openSUSE-Leap-15.5-KDE-Live-x86_64-Build10.57-Media.iso). At first boot, it did not create persistent storage. dracut says (boot.log : [ 21.489260] dracut-initqueue[769]: Warning: Falling back to temporary overlay) same as the new release (openSUSE-Leap-15.5-KDE-Live-x86_64-Build10.73-Media.iso) Any release after 10.40 does not creates persistent storage (neither 10.53 nor 10.73) I tried with different CPU (AMD, Core Duo, I5) and different USB stick (4GB 8GB 16GB and 32GB) even with different port (USB2 USB3) with different USB s and so on. No matter what I tried don't work. Releases after 10.40 (10.57 or 10.73) do not creates the persistent storage. So I open discussion on the forums.opensuse.org and someone suggested that I need to open bug report. and he/she wrote "It is not something you can fix without recreating initrd. The script that is used here comes from kiwi dracut module.". I also add the 7zip file for each ISO "....10.40", "...10.57", "...10.73" that contains some log files. "boot.log" : "sudo cp /var/log/boot.log" "boot.msg" : "cp /var/log/boot.msg" "dmesg.txt" : Output of "dmesg" right after the first boot "fdisk.txt" : 0utput of "fdisk -l" right after first boot "journal.txt" : Output of "sudo journalctl --no-pager --full -b" Thank you very much. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1214353] New: mhi: Enabling broadband connecting not working
by bugzilla_noreply＠suse.com 16 Jul '24

16 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1214353 Bug ID: 1214353 Summary: mhi: Enabling broadband connecting not working Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: holgi(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868851 --> https://bugzilla.suse.com/attachment.cgi?id=868851&action=edit hwinfo.txt When trying to use broadband connecting with network manager, I can not get beyond entering SIM code - starting connection does not work System Slot: #36 Designation: "M.2 WWAN Connector (J3702)" Type: 0xa6 (Other) Bus Width: 0x08 (Other) Status: 0x03 (Available) Length: 0x04 (Long) Slot ID: 4 Characteristics: 0x0704 (3.3 V, PME#, Hot-Plug) -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1214364] New: net-snmp: new release 5.9.4
by bugzilla_noreply＠suse.com 09 Jul '24

09 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1214364 Bug ID: 1214364 Summary: net-snmp: new release 5.9.4 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: abergmann(a)suse.com Reporter: abergmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://github.com/net-snmp/net-snmp/blob/v5.9.4/CHANGES *5.9.4*: IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly in this release with various versions of OpenSSL and will be fixed in a future release. libsnmp: - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not used in the Net-SNMP code base. - DISPLAY-HINT fixes - Miscellanious improvements to the transports - Handle multiple oldEngineID configuration lines - fixes for DNS names longer than 63 characters agent: - Added a ignoremount configuration option for the HOST-MIB - disallow SETs with a NULL varbind - fix the --enable-minimalist build apps: - snmpset: allow SET with NULL varbind for testing - snmptrapd: improved MySQL logging code general: - configure: Remove -Wno-deprecated as it is no longer needed - miscellanious ther bug fixes, build fixes and cleanups -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1212924] New: PHP 8.2 no installable APCu module for apache2
by bugzilla_noreply＠suse.com 01 Jul '24

01 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1212924 Bug ID: 1212924 Summary: PHP 8.2 no installable APCu module for apache2 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: 64bit OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: opensuse(a)eisinger-ulm.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- PHP 8.2 installed from https://download.opensuse.org/repositories/devel:/languages:/php/openSUSE_L… The APCU module from https://download.opensuse.org/repositories/server:/php:/extensions/15.5/ is does not fit to 8.2 (it wants php 8.0) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213785] New: [Build 20230729] openQA test fails in perf
by bugzilla_noreply＠suse.com 29 Jun '24

29 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1213785 Bug ID: 1213785 Summary: [Build 20230729] openQA test fails in perf Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3468080/modules/perf /steps/33 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation tcp_sendmsg is out of .text, skip it. Probe point 'tcp_sendmsg' not found. Error: Failed to add events. openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_misc@64bit fails in [perf](https://openqa.opensuse.org/tests/3468080/modules/perf/steps/33) ## Test suite description Maintainer: zluo(a)suse.de -- Tests: iotop, gd, perf and journalctlLevels -- see poo#93820 for details ## Reproducible Fails since (at least) Build [20230729](https://openqa.opensuse.org/tests/3467348) ## Expected result Last good: [20230728](https://openqa.opensuse.org/tests/3465334) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1215337] New: python-onnx does not build s390x
by bugzilla_noreply＠suse.com 25 Jun '24

25 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215337 Bug ID: 1215337 Summary: python-onnx does not build s390x Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: S/390-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: azouhr(a)opensuse.org QA Contact: qa-bugs(a)suse.de CC: ada.lovelace(a)gmx.de, ihno(a)suse.com Target Milestone: --- Found By: --- Blocker: --- python-onnx does not build on openSUSE:Factory:zSystems for quite some time: osc buildhistory openSUSE:Factory:zSystems python-onnx standard s390x TIME SRCMD5 VER-REL.BUILD# REV DURATION 2019-11-26 15:59:51 c7251471230f79907f69762d42f620a6 1.6.0-1.1 1 414 2019-12-24 10:29:50 c7251471230f79907f69762d42f620a6 1.6.0-1.2 1 821 2020-01-07 20:22:00 c7251471230f79907f69762d42f620a6 1.6.0-1.3 1 138 2020-01-08 17:02:51 0147179dbf202fdba63d0887ccf75400 1.6.0-2.1 2 192 2020-01-11 08:08:49 0147179dbf202fdba63d0887ccf75400 1.6.0-2.2 2 137 2020-01-21 18:59:45 0147179dbf202fdba63d0887ccf75400 1.6.0-2.3 2 135 2020-02-05 07:12:05 0147179dbf202fdba63d0887ccf75400 1.6.0-2.4 2 668 2020-02-07 20:58:34 0147179dbf202fdba63d0887ccf75400 1.6.0-2.5 2 178 2020-02-16 16:40:23 0147179dbf202fdba63d0887ccf75400 1.6.0-2.6 2 280 2020-02-18 13:51:04 0147179dbf202fdba63d0887ccf75400 1.6.0-2.7 2 227 2020-02-19 17:01:33 0147179dbf202fdba63d0887ccf75400 1.6.0-2.8 2 264 This package is needed in order to prepare a container for onnx-mlir which is the platform that also supports IBM Telum processors on Mainframe. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1215645] New: Flatpak uses broken Adwaita theme in KDE Plasma with huge cursor
by bugzilla_noreply＠suse.com 19 Jun '24

19 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215645 Bug ID: 1215645 Summary: Flatpak uses broken Adwaita theme in KDE Plasma with huge cursor Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: rx2l5t+4zshakz4lenfc(a)sharklasers.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Open Firefox, Thunderbird or any GTK4 app in Plasma and they will appear with a GNOME theme, with a huge Adwaita cursor. This seems to be caused by the most recent Flatpak and/or xdg-desktop updates. Apparently doesn't happen on X11, only on the Wayland session. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213606] New: mksusecd: fix --instsys option
by bugzilla_noreply＠suse.com 18 Jun '24

18 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1213606 Bug ID: 1213606 Summary: mksusecd: fix --instsys option Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: snwint(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- mksusecd allows modifying the installation system using the --instsys option. This does not work correctly (existing files are not replaced). Also, ALP and Fedora use a Live media layout, which is not supported at all. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1214789] New: Drop the raw / uncompressed kernel-firmware package
by bugzilla_noreply＠suse.com 18 Jun '24

18 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1214789 Bug ID: 1214789 Summary: Drop the raw / uncompressed kernel-firmware package Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: tiwai(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Currently, kernel-firmware repo provides two different ways of packaging: one is the kernel-firmware.rpm that contains all firmware files in raw and uncompressed format, and another is the split of several subpackages with compressed files which are gathered by kernel-firmwre-all.rpm meta package. The former, kernel-firmware.rpm is still provided only for the legacy use cases (the old SLE), and kernel-firmware-all.rpm already has "Provides: kernel-firmware" as the better (much smaller) replacement. Now, we'd like to drop the old big kernel-firmware.rpm finally. But this needs fixing the dependencies in some package or images. As far as I see, the only package that has an explicit use of the uncompressed files is installation-images. This needs the changes to adapt kernel-firmwre-all and handling of compressed files. Also, KIWI images may have requires of kernel-firmware, and that might be a bigger problem. -- You are receiving this mail because: You are on the CC list for the bug.

1 18