October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231599] hard freezes related to btusb device 04ca:3802
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231599 https://bugzilla.suse.com/show_bug.cgi?id=1231599#c8 --- Comment #8 from Takashi Iwai <tiwai(a)suse.com> --- Ideally speaking, yes. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231493] [Build 20241008-SELinux] openQA test fails in ovs_client: Job for openvswitch-ipsec.service failed
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231493 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |cathy.hu(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231493] [Build 20241008-SELinux] openQA test fails in ovs_client: Job for openvswitch-ipsec.service failed
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231493 https://bugzilla.suse.com/show_bug.cgi?id=1231493#c1 --- Comment #1 from Cathy Hu <cathy.hu(a)suse.com> --- Reproducer: install openvswitch-ipsec systemctl start openvswitch-ipsec.service Oct 17 14:55:42 localhost ovs-ctl[14237]: File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 1072, in __init__ Oct 17 14:55:42 localhost ovs-ctl[14237]: self.ike_helper.restart_ike_daemon() Oct 17 14:55:42 localhost ovs-ctl[14237]: File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 232, in restart_ik> Oct 17 14:55:42 localhost ovs-ctl[14237]: f = open(self.CHARON_CONF, "w") Oct 17 14:55:42 localhost ovs-ctl[14237]: ^^^^^^^^^^^^^^^^^^^^^^^^^^^ Oct 17 14:55:42 localhost ovs-ctl[14237]: PermissionError: [Errno 13] Permission denied: '/etc/strongswan.d/ovs.conf' Oct 17 14:55:42 localhost ovs-monitor-ips[14237]: ovs| 2 | ovs-monitor-ipsec | ERR | traceback Traceback (most recent call last): File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 1398, in <> main() File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 1342, in m> monitor = IPsecMonitor(root_prefix, args.ike_daemon, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 1072, in _> self.ike_helper.restart_ike_daemon() File "/usr/share/openvswitch/scripts/ovs-monitor-ipsec", line 232, in re> f = open(self.CHARON_CONF, "w") ^^^^^^^^^^^^^^^^^^^^^^^^^^^ PermissionError: [Errno 13] Permission denied: '/etc/strongswan.d/ovs.conf' Oct 17 14:55:42 localhost systemd[1]: openvswitch-ipsec.service: Control process exited, code=exited, status=1/FAILURE -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231742] New: Libreoffice Calc freezes when clicking OK in information dialog
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231742 Bug ID: 1231742 Summary: Libreoffice Calc freezes when clicking OK in information dialog Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: LibreOffice Assignee: screening-team-bugs(a)suse.de Reporter: matti.kettunen(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- 1. Open new spreadsheet 2. Tools -> Protect sheet 3. Try to modify protected cell 4. Information dialog appears: "You are not allowed to modify protected cell" (or something like that) 5. Click OK 6. Calc (and Desktop) freezes Same problem with two different computers. I have not found any error messages in logs. No errors in command line either if I start Calc from Konsole. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231479] [Build 20241008-SELinux] can not start nginx
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231479 https://bugzilla.suse.com/show_bug.cgi?id=1231479#c2 --- Comment #2 from Cathy Hu <cathy.hu(a)suse.com> --- probably test case needs to add selinux port: sudo semanage port -a -t http_port_t -p tcp 444 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231708] New: VUL-0: CVE-2024-49195: mbedtls: mbedtls: buffer underrun in pkwrite when writing an opaque key pair
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231708 Bug ID: 1231708 Summary: VUL-0: CVE-2024-49195: mbedtls: mbedtls: buffer underrun in pkwrite when writing an opaque key pair Classification: openSUSE Product: openSUSE Distribution Version: Leap 16.0 Hardware: Other URL: https://smash.suse.de/issue/424184/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: andrea.mattiazzo(a)suse.com QA Contact: qa-bugs(a)suse.de CC: andrea.mattiazzo(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Depends on: 1231707 Target Milestone: --- Found By: Security Response Team Blocker: --- Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair References: https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-49195 https://www.cve.org/CVERecord?id=CVE-2024-49195 https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-secur… Patch: https://github.com/Mbed-TLS/mbedtls/commit/5f1c8a720fdcc62cb9854da7b3a64a77… -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1231696] New: openQA test fails in journal_check, systemd 256.7 update with dracut+systemd-repart
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231696 Bug ID: 1231696 Summary: openQA test fails in journal_check, systemd 256.7 update with dracut+systemd-repart Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ana.guerrero(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- In tumbleweed, we're updating to systemd 256.7 and adding a dracut service to repart the disk instead of systemd-repart, called systemd-repart-dracut. Everything is in staging F right now. There is an openQA test that's failing (see below) and after some research it seems it could be a selinux issue. ## Observation openQA test in scenario microos-Staging:F-Staging-MicroOS-Image-sdboot-x86_64-microos-wizard-tpm@uefi-staging fails in [journal_check](https://openqa.opensuse.org/tests/4565037/modules/journal_ch… ## Test suite description Like MicroOS, but use neither combustion nor ignition for the intial configuration, so jeos-firstboot runs. ## Reproducible Fails since (at least) Build [F.1.5](https://openqa.opensuse.org/tests/4565037) (current job) ## Expected result Last good: [F.82.1](https://openqa.opensuse.org/tests/4543287) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1231696] openQA test fails in journal_check, systemd 256.7 update with dracut+systemd-repart
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231696 https://bugzilla.suse.com/show_bug.cgi?id=1231696#c2 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com Status|NEW |RESOLVED Component|Other |Bootloader Resolution|--- |FIXED Assignee|cathy.hu(a)suse.com |fvogt(a)suse.com --- Comment #2 from Fabian Vogt <fvogt(a)suse.com> --- That denial has actually been there from the beginning, sdbootutil overwrites /etc/crypttab in a way that broke the SELinux label. The reason it wasn't caught in other stagings before the systemd 256.7 update is https://github.com/systemd/systemd/commit/902877d55e0f74c447fa2ed3ce65316d5… - logging was just broken! Root cause fixed with https://github.com/openSUSE/sdbootutil/pull/144. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1177205] VUL-0: CVE-2020-25626: python-djangorestframework: XSS Vulnerability in API viewer
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1177205 https://bugzilla.suse.com/show_bug.cgi?id=1177205#c14 --- Comment #14 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1177205) was mentioned in https://build.opensuse.org/request/show/1208609 Backports:SLE-15-SP6 / python3-djangorestframework -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226112] Supersede kmozillahelper by xdg-desktop-portal integration
by bugzilla_noreply＠suse.com 17 Oct '24

17 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1226112 https://bugzilla.suse.com/show_bug.cgi?id=1226112#c6 --- Comment #6 from Fabian Vogt <fvogt(a)suse.com> --- Ping. -- You are receiving this mail because: You are on the CC list for the bug.

1 0