January 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219339] New: AUDIT-0: The sendmail binary needs to be setgid mail but rpmlint does not know about
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219339 Bug ID: 1219339 Summary: AUDIT-0: The sendmail binary needs to be setgid mail but rpmlint does not know about Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: werner(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The binary /usr/sbin/sendmail of package sendmail has to be owned by root:mail and the set group identity bit has to set aka werner/sendmail> ll /usr/sbin/sendmail -r-xr-sr-x 1 root mail 893656 Oct 9 10:55 /usr/sbin/sendmail this ensures that sendmail can mail handle in offline enqueue -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1219346] New: zram_submit_bio WARNING due to bcachefs REQ_OP_FLUSH
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219346 Bug ID: 1219346 Summary: zram_submit_bio WARNING due to bcachefs REQ_OP_FLUSH Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Filesystems Assignee: kernel-fs(a)suse.de Reporter: ddiss(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I ran into the following WARNING while doing a bcachefs fstests run against tumbleweed's 6.7.1-2-default kernel: generic/068 [ 395.418059][ T263] run fstests generic/068 at 2024-01-30 12:03:57 [ 395.638334][T22189] bcachefs (zram0): going read-write [ 395.707629][T22212] bcachefs (zram1): mounting version 1.3: rebalance_work [ 395.712533][T22212] bcachefs (zram1): initializing new filesystem [ 395.717313][T22212] bcachefs (zram1): going read-write [ 395.722198][T22212] bcachefs (zram1): initializing freespace [ 397.884529][T22254] bcachefs (zram1): going read-write [ 398.093884][T22267] ------------[ cut here ]------------ [ 398.095352][T22267] WARNING: CPU: 1 PID: 22267 at drivers/block/zram/zram_drv.c:1948 zram_submit_bio+0x1bd/0x980 [zram] [ 398.097604][T22267] Modules linked in: ext4 mbcache jbd2 loop dm_flakey dm_mod bcachefs lz4_compress xor lz4hc_compress libcrc32c raid6_pq zram virtio_blk [ 398.100412][T22267] CPU: 1 PID: 22267 Comm: fsstress Tainted: G W 6.7.1-2-default #1 openSUSE Tumbleweed d50116cfdb1b14a701e904c894d8f1c040bf1146 [ 398.103313][T22267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 [ 398.105681][T22267] RIP: 0010:zram_submit_bio+0x1bd/0x980 [zram] [ 398.106940][T22267] Code: ff ff 83 44 24 14 01 45 31 c9 45 85 f6 0f 85 e8 fe ff ff 4c 8b 64 24 18 e9 25 07 00 00 0f b6 d0 83 fa 03 74 31 83 fa 09 74 2c <0f> 0b 48 8b 44 20 [ 398.110897][T22267] RSP: 0018:ffffb8a3822c7ca8 EFLAGS: 00010297 [ 398.112119][T22267] RAX: 0000000000000002 RBX: ffff9ba30095e800 RCX: ffff9ba30dbfb210 [ 398.113774][T22267] RDX: 0000000000000002 RSI: 000000000002d23e RDI: ffff9ba30dbfb210 [ 398.115360][T22267] RBP: ffff9ba31ad5c000 R08: 0000000000000001 R09: 0000000000004001 [ 398.116957][T22267] R10: 000056356b09a2f1 R11: 000000000000038f R12: ffff9ba31ad5c000 [ 398.118548][T22267] R13: 0000000000000000 R14: 0000000000000000 R15: ffff9ba31acce800 [ 398.120117][T22267] FS: 00007fa7c7ee6040(0000) GS:ffff9ba437d00000(0000) knlGS:0000000000000000 [ 398.121925][T22267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.123307][T22267] CR2: 00007fa7c7c00000 CR3: 000000011cdc8000 CR4: 00000000000006f0 [ 398.124906][T22267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.126508][T22267] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.128094][T22267] Call Trace: [ 398.128752][T22267] <TASK> [ 398.129364][T22267] ? zram_submit_bio+0x1bd/0x980 [zram 306d1de59f59b3565665180c68ecbb123a2737f1] [ 398.131148][T22267] ? __warn+0x81/0x130 [ 398.131997][T22267] ? zram_submit_bio+0x1bd/0x980 [zram 306d1de59f59b3565665180c68ecbb123a2737f1] [ 398.133849][T22267] ? report_bug+0x171/0x1a0 [ 398.134786][T22267] ? handle_bug+0x3c/0x80 [ 398.135650][T22267] ? exc_invalid_op+0x17/0x70 [ 398.136583][T22267] ? asm_exc_invalid_op+0x1a/0x20 [ 398.137579][T22267] ? zram_submit_bio+0x1bd/0x980 [zram 306d1de59f59b3565665180c68ecbb123a2737f1] [ 398.138979][T22267] ? __schedule+0x3e5/0x14b0 [ 398.139577][T22267] ? bio_associate_blkg_from_css+0xf8/0x340 [ 398.140325][T22267] ? queue_work_on+0x3b/0x50 [ 398.140907][T22267] __submit_bio+0xb3/0x170 [ 398.141471][T22267] submit_bio_noacct_nocheck+0x147/0x380 [ 398.142192][T22267] bch2_inode_flush_nocow_writes_async+0xc9/0x140 [bcachefs 87a9241f310455d8dd26e5519b093c57d3f4361d] [ 398.143652][T22267] bch2_flush_inode.part.0+0xb3/0xd0 [bcachefs 87a9241f310455d8dd26e5519b093c57d3f4361d] [ 398.144954][T22267] bch2_fsync+0x82/0xa0 [bcachefs 87a9241f310455d8dd26e5519b093c57d3f4361d] [ 398.146115][T22267] __x64_sys_fdatasync+0x52/0x90 [ 398.146742][T22267] do_syscall_64+0x64/0xe0 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1219420] New: Unexpected EOF errors when installing upgrades to Vivaldi browsers - xdg-icon-resource
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219420 Bug ID: 1219420 Summary: Unexpected EOF errors when installing upgrades to Vivaldi browsers - xdg-icon-resource Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: epp(a)mcom.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Upgraded my Vivaldi browsers on Tumbleweed and the following errors were displayed during the upgrade (using zypper dup): /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' (77/78) Installing: vivaldi-stable-6.5.3206.59-1.x86_64 ................................................[done] /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' /bin/xdg-icon-resource: line 1041: unexpected EOF while looking for matching ``' (78/78) Installing: vivaldi-snapshot-6.6.3256.4-1.x86_64 ...............................................[done] This was discussed with a Vivaldi developer and was told the bug is in /bin/xdg-icon-resource. xdg-utils was upgraded today. Information for package xdg-utils: ---------------------------------- Repository : Main Repository (OSS) Name : xdg-utils Version : 1.2.0+20240130-1.1 Arch : noarch Vendor : openSUSE Installed Size : 385.0 KiB Installed : Yes (automatically) Status : up-to-date -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1219407] New: Buttons "buy now " and "put to basket" without funktion
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219407 Bug ID: 1219407 Summary: Buttons "buy now " and "put to basket" without funktion Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: openSUSE Leap 15.5 Status: NEW Severity: Major Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: guenter.halt(a)halt-hoenow.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- On e-bay web-side an product can be chosen, however buy is not possible. The related button are inactive. Firefox release is 115.7.0esr(64-Bit) The same e-bay-action an browser firefox release 115.2.0esr(64-Bit) on Leap 15.5 too it works fine (last update of Leap15.5 was about 2 weeks before) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1219158] New: bcachefs-tools: fails to mount device due building without Rust (NO_RUST=1)
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1219158 Bug ID: 1219158 Summary: bcachefs-tools: fails to mount device due building without Rust (NO_RUST=1) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Filesystems Assignee: kernel-fs(a)suse.de Reporter: petr.vorel(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I reported bcachefs-tools failure to mount loop device [1]. Upstream notes that building with Rust is mandatory [2] and indeed we have NO_RUST=1 in our spec file [3]. Could you please build with Rust? [1] https://lore.kernel.org/ltp/20240124200032.GA343522@pevik/ [2] https://lore.kernel.org/ltp/5ykyohhnlc7nkbz7usc5sqmluyl7wgyhc6frqmbo5kk4vhu… [3] https://build.opensuse.org/package/view_file/filesystems/bcachefs-tools/bca… -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1218452] New: gnome-boxes doesn't set up Windows 11 VMs with secure boot and TPM 2.0
by bugzilla_noreply＠suse.com 01 Feb '24

01 Feb '24

https://bugzilla.suse.com/show_bug.cgi?id=1218452 Bug ID: 1218452 Summary: gnome-boxes doesn't set up Windows 11 VMs with secure boot and TPM 2.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 16.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: el(a)horse64.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 871604 --> https://bugzilla.suse.com/attachment.cgi?id=871604&action=edit Gnome boxes creation of Windows 11 VM where you can see the wrong boot sequence showing there's no secure boot set up gnome-boxes doesn't set up Windows 11 VMs with secure boot and TPM 2.0, see attached video in which you can see it boots with SeaBIOS with no secure boot. The VM also has no TPM. Since manually setting that up doesn't seem to be that feasible for mere mortals and very often leads to unbootable VMs ( https://bugzilla.opensuse.org/show_bug.cgi?id=1216463 ) it would be helpful if that worked properly. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1219336] New: VUL-0: CVE-2024-23170: mbedtls: timing side channel in private key RSA operations
by bugzilla_noreply＠suse.com 31 Jan '24

31 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1219336 Bug ID: 1219336 Summary: VUL-0: CVE-2024-23170: mbedtls: timing side channel in private key RSA operations Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/392471/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: meissner(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- CVE-2024-23170 Timing side channel in private key RSA operations. Mbed TLS is vulnerable to a timing side channel in private key RSA operations. This side channel could be sufficient for an attacker to recover the plaintext. A local attacker or a remote attacker who is close to the victim on the network might have precise enough timing measurements to exploit this. It requires the attacker to send a large number of messages for decryption. https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-secur… Resolution: update net-libs/mbedtls to 2.28.7 and 3.5.2. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23170 https://bugzilla.redhat.com/show_bug.cgi?id=2261598 -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1212970] [JeOS] systemd-vconsole-setup[165]: /usr/bin/setfont failed with exit status 71.
by bugzilla_noreply＠suse.com 31 Jan '24

31 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1212970 Stanislav Brabec <sbrabec(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sbrabec(a)suse.com Assignee|antonio.teixeira(a)suse.com |sbrabec(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212486] Deja-dup (Gnome backup) insists on installing an already installed duplicity
by bugzilla_noreply＠suse.com 31 Jan '24

31 Jan '24

1 0

[Bug 1212141] [lockdown] KBD_NUMLOCK="bios" is broken: numlockbios: /dev/mem,kmem,port is restricted
by bugzilla_noreply＠suse.com 31 Jan '24

31 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1212141 https://bugzilla.suse.com/show_bug.cgi?id=1212141#c4 Stanislav Brabec <sbrabec(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jslaby(a)suse.com Flags| |needinfo?(jslaby(a)suse.com) Assignee|antonio.teixeira(a)suse.com |sbrabec(a)suse.com --- Comment #4 from Stanislav Brabec <sbrabec(a)suse.com> --- This feature was not added by me. I just ported a very old feature to systemd. Fri Jun 14 12:58:10 CEST 2002 - sndirsch(a)suse.de - boot.setup: handle Numlock depending on BIOS setting if KBD_NUMLOCK is set to "bios" - sysconfig.keyboard: added "bios" to KBD_NUMLOCK description This feature needs to read the BIOS data area. Is there a better way, how to do it? It basically does: fdmem = open("/dev/mem", O_RDONLY); lseek(fdmem, 0x497, SEEK_SET); read (fdmem, &c, sizeof(char)); if (c & 0x02) printf("on\n"); else printf("off\n"); -- You are receiving this mail because: You are on the CC list for the bug.

1 0