January 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1218653] New: Gimp 3 scheduled for May - Lets start the preparations
by bugzilla_noreply＠suse.com 22 Feb '24

22 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1218653 Bug ID: 1218653 Summary: Gimp 3 scheduled for May - Lets start the preparations Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: mrueckert(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- - https://www.phoronix.com/news/GIMP-3.0-May-2024-Schedule - https://librearts.org/2023/11/gimp-3-0-roadmap/ current test packages are in: https://build.opensuse.org/project/show/graphics:gimp:master i dropped a mail to Jehan to find out if the master snapshots of gegl and babl are still needed or not. if we want to have parallel buildable packages it would be easy to rename the master gimp package to gimp3 and apply this patch: ``` Index: gimp.spec =================================================================== --- gimp.spec (revision 1878) +++ gimp.spec (working copy) @@ -67,14 +67,16 @@ %global abiver 5 %global apiver 3.0 -Name: gimp +%define pkg_name gimp + +Name: gimp3 Version: 3.0 Release: 0 Summary: The GNU Image Manipulation Program License: GPL-3.0-or-later Group: Productivity/Graphics/Bitmap Editors URL: https://www.gimp.org/ -Source: %{name}-%{version}.tar.zst +Source: %{pkg_name}-%{version}.tar.zst Source1: macros.gimp # openSUSE palette file Source2: openSUSE.gpl @@ -184,6 +186,7 @@ Provides: gimp-2.0 = %{version} Provides: gimp(abi) = %{abiver} Provides: gimp(api) = %{apiver} +Conflicts: gimp %description The GIMP is an image composition and editing program, which can be @@ -296,7 +299,7 @@ %endif %prep -%autosetup -p1 +%autosetup -p1 -n %{pkg_name}-%{version} %build #define _lto_cflags %{nil} ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1217446] New: Bad umlaut in partitioning summary during installation
by bugzilla_noreply＠suse.com 22 Feb '24

22 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1217446 Bug ID: 1217446 Summary: Bad umlaut in partitioning summary during installation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: dheidler(a)suse.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 870930 --> https://bugzilla.suse.com/attachment.cgi?id=870930&action=edit screenshot Expected: "Partition /dev/vda (20GiB) für…" Observed: "Partition /dev/vda (20GiB) f?r…" -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1216650] New: libz upgrade breaks texlive-latex-bin-bin / lualatex (library version does not match)
by bugzilla_noreply＠suse.com 22 Feb '24

22 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1216650 Bug ID: 1216650 Summary: libz upgrade breaks texlive-latex-bin-bin / lualatex (library version does not match) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: registrations(a)wuthoehle.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I did a 'zypper dup' yesterday and noticed that I couldn't compile any LaTeX documents using LuaLaTeX any longer: % lualatex beamer5.tex PANIC: unprotected error in call to Lua API (zlib library version does not match - header: 1.2.13, library: 1.3) [1] 7239 IOT instruction (core dumped) lualatex beamer5.tex And indeed zlib was updated recently: % LC_ALL=C rpm -qi libz1 Name : libz1 Version : 1.3 Release : 1.1 Architecture: x86_64 Install Date: Thu Oct 26 22:00:15 2023 Group : Unspecified Size : 118944 License : Zlib Signature : RSA/SHA512, Wed Oct 25 18:06:26 2023, Key ID 35a2f86e29b700a4 Source RPM : zlib-1.3-1.1.src.rpm Build Date : Wed Oct 25 18:06:09 2023 Build Host : i03-ch2c Packager : https://bugs.opensuse.org Vendor : openSUSE URL : https://www.zlib.net/ Summary : Library implementing the DEFLATE compression algorithm Description : zlib is a general-purpose lossless data-compression library, implementing an API for the DEFLATE algorithm, the latter of which is being used by, for example, gzip and the ZIP archive format. Distribution: openSUSE Tumbleweed However, the corresponding texlive package was not: % LC_ALL=C rpm -qi texlive-latex-bin-bin Name : texlive-latex-bin-bin Version : 2023.20230311.svn54358 Release : 93.4 Architecture: x86_64 Install Date: Wed Oct 11 19:42:52 2023 Group : Productivity/Publishing/TeX/Utilities Size : 26 License : LPPL-1.0 Signature : RSA/SHA512, Mon Oct 9 12:04:33 2023, Key ID 35a2f86e29b700a4 Source RPM : texlive-2023.20230311-93.4.src.rpm Build Date : Mon Oct 9 11:45:00 2023 Build Host : i03-ch1b Relocations : /usr/bin Packager : https://bugs.opensuse.org Vendor : openSUSE URL : https://www.tug.org/texlive/ Summary : Binary files of latex-bin Description : Binary files of latex-bin Distribution: openSUSE Tumbleweed It seems like the texlive package is in need of a rebuild. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1219364] New: [SELinux] AVC denial dovecot
by bugzilla_noreply＠suse.com 21 Feb '24

21 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219364 Bug ID: 1219364 Summary: [SELinux] AVC denial dovecot Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mcepl(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I have dovecot running on localhost of my workstation, and when switching to SELinux on new Tumbleweed machine, I got this: mitmanek:~ # ausearch -m AVC -ts 22:30 |grep -v -i apparmor|grep dovecot type=AVC msg=audit(1706651785.442:142): avc: denied { search } for pid=20932 comm="auth" name="logins" dev="nvme0n1p3" ino=145649 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:selinux_login_config_t:s0 tclass=dir permissive=1 type=AVC msg=audit(1706651785.446:143): avc: denied { read } for pid=20932 comm="auth" name="unconfined_u" dev="nvme0n1p3" ino=145643 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=file permissive=1 type=AVC msg=audit(1706651785.446:144): avc: denied { open } for pid=20932 comm="auth" path="/etc/selinux/targeted/contexts/users/unconfined_u" dev="nvme0n1p3" ino=145643 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=file permissive=1 type=AVC msg=audit(1706651785.446:145): avc: denied { getattr } for pid=20932 comm="auth" path="/etc/selinux/targeted/contexts/users/unconfined_u" dev="nvme0n1p3" ino=145643 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=file permissive=1 type=AVC msg=audit(1706651785.446:146): avc: denied { setexec } for pid=20932 comm="auth" scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:system_r:dovecot_auth_t:s0 tclass=process permissive=1 type=AVC msg=audit(1706651785.446:148): avc: denied { setkeycreate } for pid=20932 comm="auth" scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:system_r:dovecot_auth_t:s0 tclass=process permissive=1 mitmanek:~ # Moved `dovecot_t` to the permissive domains. I believe labels should be correct (relabelled whole system just not that long time ago). -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1219028] New: dnscrypt takes a long time to activate the internet connection
by bugzilla_noreply＠suse.com 21 Feb '24

21 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219028 Bug ID: 1219028 Summary: dnscrypt takes a long time to activate the internet connection Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: popov895(a)ukr.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 872036 --> https://bugzilla.suse.com/attachment.cgi?id=872036&action=edit My dnscrypt-proxy.toml I'm on openSUSE Tumbleweed and I have a `dnscrypt-proxy` installed. Everything works fine, except for one: sometimes after rebooting it takes a long time to activate the internet connection (it may take up to 30 seconds). It also very rarely happens that the internet connection isn't activated at all and in this case even restarting the `dnscrypt-proxy` and `NetworkManager` services doesn't help, so I have to reboot my system. There's no such issue on Ubuntu and there I can use the internet immediately after logging in. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1218540] New: kubeadm random panic
by bugzilla_noreply＠suse.com 21 Feb '24

21 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1218540 Bug ID: 1218540 Summary: kubeadm random panic Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: rbranco(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 871659 --> https://bugzilla.suse.com/attachment.cgi?id=871659&action=edit Output of kubeadm init --v=5 --skip-phases=addon/kube-proxy kubeadm panics 50% of the time I try to use it. # kubeadm version kubeadm version: &version.Info{Major:"1", Minor:"28", GitVersion:"v1.28.4", GitCommit:"bae2c62678db2b5053817bc97181fcc2e8388103", GitTreeState:"clean", BuildDate:"2023-11-24T00:00:00Z", GoVersion:"go1.21.4", Compiler:"gc", Platform:"linux/amd64"} # head -2 /etc/os-release NAME="openSUSE MicroOS" # VERSION="20231228" Attached stdout/stderr. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213757] New: All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi
by bugzilla_noreply＠suse.com 20 Feb '24

20 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1213757 Bug ID: 1213757 Summary: All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: aarch64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: dheidler(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 868483 --> https://bugzilla.suse.com/attachment.cgi?id=868483&action=edit strace of hanging "ip a" The issue appears a few (~5) minutes after hostapd is started. Jul 28 12:47:40 openqa-piworker systemd[1]: Started Hostapd IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator. Jul 28 12:47:40 openqa-piworker hostapd[15307]: Configuration file: /etc/hostapd.conf Jul 28 12:47:40 openqa-piworker kernel: br0: port 1(wlan0) entered blocking state Jul 28 12:47:40 openqa-piworker kernel: br0: port 1(wlan0) entered disabled state Jul 28 12:47:40 openqa-piworker kernel: device wlan0 entered promiscuous mode Jul 28 12:47:40 openqa-piworker hostapd[15307]: wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE Jul 28 12:47:41 openqa-piworker dbus-daemon[629]: [system] Activating via systemd: service name='fi.w1.wpa_supplicant1' unit='wpa_supplicant.service' requested by ':1.31' (uid=0 pid=730 comm="/usr/sbin/wickedd --systemd --foreground ") Jul 28 12:47:41 openqa-piworker systemd[1]: Starting WPA Supplicant daemon... Jul 28 12:47:41 openqa-piworker dbus-daemon[629]: [system] Successfully activated service 'fi.w1.wpa_supplicant1' Jul 28 12:47:41 openqa-piworker systemd[1]: Started WPA Supplicant daemon. Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: Could not connect to kernel driver Jul 28 12:47:45 openqa-piworker hostapd[15307]: Using interface wlan0 with hwaddr e4:5f:01:bb:63:41 and ssid "openQA-worker" Jul 28 12:47:45 openqa-piworker kernel: IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready Jul 28 12:47:45 openqa-piworker kernel: br0: port 1(wlan0) entered blocking state Jul 28 12:47:45 openqa-piworker kernel: br0: port 1(wlan0) entered forwarding state Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: interface state COUNTRY_UPDATE->ENABLED Jul 28 12:47:45 openqa-piworker hostapd[15307]: wlan0: AP-ENABLED openqa-piworker:~ # cat /etc/sysconfig/network/ifcfg-br0 IPADDR='192.168.7.1/24' BOOTPROTO='static' STARTMODE='auto' BRIDGE='yes' BRIDGE_PORTS='' BRIDGE_STP='off' BRIDGE_FORWARDDELAY='15' ZONE=dmz openqa-piworker:~ # cat /etc/hostapd.conf interface=wlan0 bridge=br0 ssid=openQA-worker wpa_passphrase=0foobar12345 driver=nl80211 country_code=DE hw_mode=g channel=7 # Bit field: bit0 = WPA, bit1 = WPA2, 3=both wpa=2 # Bit field: 1=wpa, 2=wep, 3=both auth_algs=1 wpa_pairwise=CCMP wpa_key_mgmt=WPA-PSK logger_stdout=-1 logger_stdout_level=2 openqa-piworker:~ # systemctl cat hostapd.service # /usr/lib/systemd/system/hostapd.service [Unit] Description=Hostapd IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator After=network.target [Service] ExecStart=/usr/sbin/hostapd /etc/hostapd.conf ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target # /etc/systemd/system/hostapd.service.d/override.conf # Ensure that wlan0 is up before starting hostapd (otherwise hostapd will not add wlan0 to the bridge) [Unit] BindsTo=sys-subsystem-net-devices-wlan0.device After=sys-subsystem-net-devices-wlan0.device -- You are receiving this mail because: You are on the CC list for the bug.

1 33

[Bug 1215873] New: AUDIT-0: thermald: review of D-Bus file /usr/share/dbus-1/system.d/org.freedesktop.thermald.conf
by bugzilla_noreply＠suse.com 19 Feb '24

19 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1215873 Bug ID: 1215873 Summary: AUDIT-0: thermald: review of D-Bus file /usr/share/dbus-1/system.d/org.freedesktop.thermald.co nf Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: trenn(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Latest thermald package seem to have dbus API modifications which need review by the security team. The package is intended to be submitted to SLE 15 SP6/ALP afterwards. You may want to keep this in mind when looking at this: [SUSE-JIRA] (PED-5716) Impl: Enable support for Thermal Controls on platform https://jira.suse.com/browse/PED-5716 The submit request for factory showing the dbus security review need is here: https://build.opensuse.org/request/show/1113687#comment-1827588 Thanks in advance. -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1217199] New: Allow non-SUSE users to use TOTP 2FA on LDAP accounts.
by bugzilla_noreply＠suse.com 18 Feb '24

18 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1217199 Bug ID: 1217199 Summary: Allow non-SUSE users to use TOTP 2FA on LDAP accounts. Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: All OS: All Status: NEW Severity: Enhancement Priority: P5 - None Component: Bugzilla Assignee: screening-team-bugs(a)suse.de Reporter: rokejulianlockhart+1674683091(a)outlook.com QA Contact: bugzilla-admins(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Some specific services like progress.opensuse.org support it there, but that's service-specific. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1219401] New: [Build 20240130] openssl packaging changes require apparmor profile update
by bugzilla_noreply＠suse.com 16 Feb '24

16 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219401 Bug ID: 1219401 Summary: [Build 20240130] openssl packaging changes require apparmor profile update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3906242/modules/apac he2_changehat/steps/115 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation type=AVC msg=audit(1706694192.948:964): apparmor="DENIED" operation="open" class="file" profile="/usr/sbin/httpd-prefork" name="/etc/ssl/engines3.d/" pid=16836 comm="httpd-prefork" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=AVC msg=audit(1706694192.948:965): apparmor="DENIED" operation="open" class="file" profile="/usr/sbin/httpd-prefork" name="/etc/ssl/engdef3.d/" pid=16836 comm="httpd-prefork" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=SERVICE_START msg=audit(1706694192.955:966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=apache2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=BPF msg=audit(1706694217.958:967): prog-id=186 op=LOAD type=BPF msg=audit(1706694217.958:968): prog-id=187 op=LOAD type=BPF msg=audit(1706694217.958:969): prog-id=188 op=LOAD type=SERVICE_START msg=audit(1706694218.088:970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1706694248.192:971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit fails in [apache2_changehat](https://openqa.opensuse.org/tests/3906242/modules/apache… ## Test suite description Maintained by QE Security ## Reproducible Fails since (at least) Build [20240123](https://openqa.opensuse.org/tests/3888806) ## Expected result Last good: [20240122](https://openqa.opensuse.org/tests/3886273) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 3