September 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1215172] New: VUL-0: croc: multiple security issues in croc
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215172 Bug ID: 1215172 Summary: VUL-0: croc: multiple security issues in croc Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jsmithfpv(a)gmail.com Reporter: matthias.gerstner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I have reviewed the Croc codebase during the past month and have found a series of security issues, mostly in the area of a receiver of files which can be harmed by a malicious sender. There are now public GitHub issues about the most pressing issues: - possible creation of files in dangerous path location: https://github.com/schollz/croc/issues/593 - Interactive File Overwrite Prompt can be Circumvented by Sending ZIP file: https://github.com/schollz/croc/issues/594 - Escape Sequences in Filenames are not Filtered: https://github.com/schollz/croc/issues/595 - Use of Parts of the Shared Secret as Room Name: https://github.com/schollz/croc/issues/596 - Unencrypted "ips?" Message Leaks Information from the Sender Side: https://github.com/schollz/croc/issues/597 - Shared Secret Passed on Command Line Possibly Leaks to other Local Users: https://github.com/schollz/croc/issues/598 Nothing of this is currently fixed and it sounds like they also won't be fixed for a longer time, because the upstream author is lacking time to take care of this. As maintainers of croc you may be able to help out upstream to fix these issues or you may consider dropping this package from openSUSE until it becomes better. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1215622] New: iscsiuio - Couldn't mmap registers: Invalid argument
by bugzilla_noreply＠suse.com 17 Jun '24

17 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215622 Bug ID: 1215622 Summary: iscsiuio - Couldn't mmap registers: Invalid argument Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: per(a)computer.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When trying to set up an iscsi initiator (in yast) using a bnx2 offload engine, I wasn't getting very far, see bug#1215621. I kept getting this error: iscsiadm: Could not set host net params (err 29) I ran iscsiuio with debug level 4 and noticed the following error msg: Couldn't mmap registers: Invalid argument After some research, I rebooted the machine with "iomem=relaxed" - now it works: anton:~ # iscsiadm -m discovery -P 1 -t st -I eth4-bnx2i -p 10.42.8.10:3260 iscsiadm: Could not set host net params (err 29) iscsiadm: Connection to discovery portal 10.42.8.10 failed: operation failed but retry may succeed Target: iqn.2023-09.local.rz2:opensuse-mirror Portal: 10.42.8.10:3260,1 Iface Name: eth4-bnx2i Target: iqn.2023-09.local.rz2:webspace Portal: 10.42.8.10:3260,1 Iface Name: eth4-bnx2i -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1214213] New: shadowsocks-rust: shadowsocks-rust-client.service should not use Type=forking
by bugzilla_noreply＠suse.com 16 Jun '24

16 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1214213 Bug ID: 1214213 Summary: shadowsocks-rust: shadowsocks-rust-client.service should not use Type=forking Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: darkgeekyang(a)foxmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hi, The shadowsocks-rust-client.service provided by shadowsocks-rust has Type set to forking, which leads to the timeout of this service every minutes. Since the command sslocal used in ExecStart won't fork, so it's not correct to use forking, instead we should just remove the two lines in the unit service: >Type=forking >PIDFile=/var/run/shadowsocks-rust-client.pid After doing this, the service becomes stable. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1212841] New: Lots of objtool warnings when building the nvidia driver
by bugzilla_noreply＠suse.com 15 Jun '24

15 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1212841 Bug ID: 1212841 Summary: Lots of objtool warnings when building the nvidia driver Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: christophe(a)krop.fr QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- # rpm -qv nvidia-driver-G06-kmp-default nvidia-driver-G06-kmp-default-535.54.03_k6.3.7_1-10.1.x86_64 # zgrep -c objtool zypper.log-20230627.xz 213230 extracts: [rpm> LD [M] /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia-modeset.o [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia-modeset.o: warning: objtool: _nv000675kms+0x46: 'naked' return found in RETHUNK build [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia-modeset.o: warning: objtool: _nv000676kms+0x46: 'naked' return found in RETHUNK build [cut] [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia.o: warning: objtool: _nv040720rm+0xb9: return with modified stack frame [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia.o: warning: objtool: _nv013581rm+0xd9: stack state mismatch: reg1[5]=-1+0 reg2[5]=-2-64 [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia.o: warning: objtool: _nv034058rm+0x83: stack state mismatch: reg1[5]=-1+0 reg2[5]=-2-56 [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia.o: warning: objtool: _nv024689rm+0xb: missing int3 after ret [rpm> /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia.o: warning: objtool: _nv043791rm+0x4: missing int3 after ret [cut] then it finishes building and prints a couple last warnings such as: [rpm> Skipping BTF generation for /usr/src/kernel-modules/nvidia-535.54.03-default/nvidia-peermem.ko due to unavailability of vmlinux -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1215646] New: Fontconfig file oversight on Noto Sans CJK fonts
by bugzilla_noreply＠suse.com 13 Jun '24

13 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215646 Bug ID: 1215646 Summary: Fontconfig file oversight on Noto Sans CJK fonts Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: mn230199(a)hotmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- On /etc/fonts/conf.d/60-family-prefer.conf the Noto Sans CJK fonts don't have the 'CJK' part in their names (instead of "Noto Sans CJK JP" it appears as "Noto Sans JP"), making the fonts not get used for CJK text. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1215689] New: postfix: deamon_directory is invalid
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215689 Bug ID: 1215689 Summary: postfix: deamon_directory is invalid Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: varkoly(a)suse.com Reporter: amajer(a)suse.com QA Contact: qa-bugs(a)suse.de CC: chris(a)computersalat.de Target Milestone: --- Found By: --- Blocker: --- Seems the default directory is wrong. # postconf -d daemon_directory daemon_directory = /usr/libexec/postfix I'm assuming this is suppose to be /usr/lib/postfix/bin ? # rpm -q postfix postfix-3.8.1-2.1.aarch64 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1212909] New: unstripped-binary-or-object for binary libraries in Python directories
by bugzilla_noreply＠suse.com 07 Jun '24

07 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1212909 Bug ID: 1212909 Summary: unstripped-binary-or-object for binary libraries in Python directories Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: mcepl(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- There is a zillion packages which end up with the warning like python311-scipy.x86_64: W: unstripped-binary-or-object /usr/lib64/python3.11/site-packages/scipy/spatial/_qhull.cpython-311-x86_64-linux-gnu.so (this is from https://build.opensuse.org/package/live_build_log/home:gladiac:mailman/pyth…) Interestingly the same package in the devel project doesn’t seem to present the same problem (https://build.opensuse.org/build/devel:languages:python:numeric/openSUSE_Tu…) Could we find out why these happen and do something about it? -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1213929] New: zypper-changelog-plugin lacks dependencies (No module named 'rpm')
by bugzilla_noreply＠suse.com 06 Jun '24

06 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1213929 Bug ID: 1213929 Summary: zypper-changelog-plugin lacks dependencies (No module named 'rpm') Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: ma(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After installing the zypper-changelog-plugin in a TW container it says: > 21606fdb0e6d:/ # zypper changelog > Traceback (most recent call last): > File "/usr/bin/zypper-changelog", line 30, in <module> > import rpm > ModuleNotFoundError: No module named 'rpm' A bunch of dependencies were installed together with the package, but python311-rpm was missing. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1215619] New: Request to include packets opendmarc and postfix-policyd-spf-perl in a standard openSUSE repository
by bugzilla_noreply＠suse.com 05 Jun '24

05 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1215619 Bug ID: 1215619 Summary: Request to include packets opendmarc and postfix-policyd-spf-perl in a standard openSUSE repository Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: freek(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- In The Netherlands recently hackers succeeded in getting a payment by sending an email supposedly coming from a boss, who asked for settling an invoice. It might have been unsuccessful if proper security measure were taken by implementing email security features like DMARC and SPF, next to DKIM. To make this more easy I find it highly desirable to have the packages opendmarc and postfix-policyd-spf-perl available in a standard repository of openSUSE; opendkim, next to DKIM support in Amavis, is already available. These packages, architecture noarch, are available o.a. in: https://download.opensuse.org/repositories/devel:/languages:/perl/15.4/ https://download.opensuse.org/repositories/server:/mail/15.5/ -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1213915] New: Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2
by bugzilla_noreply＠suse.com 31 May '24

31 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1213915 Bug ID: 1213915 Summary: Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: PowerPC-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: jrivrain(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868604 --> https://bugzilla.suse.com/attachment.cgi?id=868604&action=edit serial output All ppc64 Tumbleweed tests in Openqa are failing right now with a kernel panic. All the workers are on power8 cpus, this does not happen on a qemu emulated power9 cpu. Example of failing test: https://openqa.opensuse.org/tests/3476697 See attached serial output. -- You are receiving this mail because: You are on the CC list for the bug.

1 30