October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231139] [SELinux] systemd-cryptsetup generator cannot read /etc/crypttab
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231139 https://bugzilla.suse.com/show_bug.cgi?id=1231139#c5 --- Comment #5 from Alberto Planas Dominguez <aplanas(a)suse.com> --- I am trying to get the pcrlock.json error but is taking some time. For now maybe makes more sense to focus on the generator error when accessing /etc/crypttab, as for this one I have the AVC -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231139] [SELinux] systemd-cryptsetup generator cannot read /etc/crypttab
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

1 0

[Bug 1231323] core dump (Segmentation fault) when ending repository management
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231323 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zypp-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231323] core dump (Segmentation fault) when ending repository management
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231323 https://bugzilla.suse.com/show_bug.cgi?id=1231323#c8 --- Comment #8 from Stefan Hundhammer <shundhammer(a)suse.com> --- I downgraded libzypp to the next older version on both Slowroll and Leap 15.6, but that didn't change anything. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231139] [SELinux] systemd-cryptsetup cannot read [/run/systemd | /var/lib/systemd]/pcrlock.json
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231139 https://bugzilla.suse.com/show_bug.cgi?id=1231139#c4 --- Comment #4 from Alberto Planas Dominguez <aplanas(a)suse.com> --- Some AVC, extracted from journalctl -xb Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.763:4): avc: denied { open } for pid=732 comm="systemd-cryptse" path="/etc/crypttab" dev="overlay" ino=12334 scontext=system_u:system_r:systemd_cryptsetup_generator_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file permissive=0 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.803:5): avc: denied { read } for pid=729 comm="growpart-genera" name="passwd" dev="overlay" ino=3087 scontext=system_u:system_r:systemd_growpart_generator_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.803:6): avc: denied { open } for pid=729 comm="growpart-genera" path="/etc/passwd" dev="overlay" ino=3087 scontext=system_u:system_r:systemd_growpart_generator_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.803:7): avc: denied { getattr } for pid=729 comm="growpart-genera" path="/etc/passwd" dev="overlay" ino=3087 scontext=system_u:system_r:systemd_growpart_generator_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.806:8): avc: denied { read } for pid=730 comm="selinux-autorel" name="passwd" dev="overlay" ino=3087 scontext=system_u:system_r:selinux_autorelabel_generator_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=0 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304160.856:9): avc: denied { sys_admin } for pid=736 comm="systemd-gpt-aut" capability=21 scontext=system_u:system_r:systemd_gpt_generator_t:s0 tcontext=system_u:system_r:systemd_gpt_generator_t:s0 tclass=capability permissive=0 Oct 07 12:29:21 localhost kernel: audit: type=1400 audit(1728304161.186:10): avc: denied { module_request } for pid=1 comm="systemd" kmod="net-pf-16-proto-12" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0 Oct 07 12:29:22 localhost kernel: audit: type=1400 audit(1728304161.983:11): avc: denied { siginh } for pid=773 comm="sh" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=process permissive=0 Oct 07 12:30:52 localhost kernel: audit: type=1400 audit(1728304252.123:14): avc: denied { net_admin } for pid=920 comm="systemd-tmpfile" capability=12 scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:system_r:systemd_tmpfiles_t:s0 tclass=capability permissive=0 The first one for systemd-cryptsetup should be referring to the generator, that reads /etc/crypttab. I think this one is cutting now the boot process, as I do not see the pcrlock one. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1086804] fonts-config warns about ninitialized HOME in posttrans
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1086804 https://bugzilla.suse.com/show_bug.cgi?id=1086804#c8 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED CC| |pgajdos(a)suse.com --- Comment #8 from Petr Gajdos <pgajdos(a)suse.com> --- This should be fixed already: ------------------------------------------------------------------- Tue Nov 28 16:38:44 UTC 2023 - Takashi Iwai <tiwai(a)suse.com> - Update to 20230604+git0.630c8206607c: * Fix uninitialised use of the HOME environment variable (bsc#1086804,bsc#1210700) * font match and pattern match can't put in one file. [...] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231323] core dump (Segmentation fault) when ending repository management
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

1 0

[Bug 1231252] [SELinux] macros.selinux-policy relabels during build, which causes issues when building custom modules
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231252 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |jsegitz(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231130] panic on boot with QEMU/KVM+UEFI for current openSUSE-Leap-15.6-NET-x86_64-Build710.3-Media.iso
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231130 https://bugzilla.suse.com/show_bug.cgi?id=1231130#c4 David Disseldorp <ddiss(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ddiss(a)suse.com --- Comment #4 from David Disseldorp <ddiss(a)suse.com> --- (In reply to Takashi Iwai from comment #2) > It couldn't load / expand the initrd: > > [ 2.284739][ T27] Initramfs unpacking failed: write error I've hit this a few times too. We should be able to do a little better by providing a more informative error message for the case where memory is exhausted. As a start I'm working on propagating kernel_write() and decompress_method error codes via the existing init/initramfs.c:message global. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231232] New: VUL-0: chromium: multiple vulnerabilities fixed in 129.0.6668.89
by bugzilla_noreply＠suse.com 07 Oct '24

07 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231232 Bug ID: 1231232 Summary: VUL-0: chromium: multiple vulnerabilities fixed in 129.0.6668.89 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: ro(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- [$10000][367764861] High CVE-2024-7025: Integer overflow in Layout. Reported by Tashita Software Security on 2024-09-18 [TBD][368208152] High CVE-2024-9369: Insufficient data validation in Mojo. Reported by Xiantong Hou and Pisanbao of Wuheng Lab on 2024-09-19 [TBD][368311899] High CVE-2024-9370: Inappropriate implementation in V8. Reported by Nguyễn Hoàng Thạch, Đỗ Minh Tuấn, and Wu JinLin of STAR Labs SG Pte. Ltd. on 2024-09-19 https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-des… -- You are receiving this mail because: You are on the CC list for the bug.

1 3