October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1232583] New: VUL-0: CVE-2024-50602: paraview: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232583 Bug ID: 1232583 Summary: VUL-0: CVE-2024-50602: paraview: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: vicente.bolea(a)gmail.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1226541] New: Cockpit Packagekit does not appear in UI
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1226541 Bug ID: 1226541 Summary: Cockpit Packagekit does not appear in UI Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Cockpit Assignee: Cockpit-bugs(a)suse.de Reporter: cody.henderson(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After installing cockpit-packagekit the Software Updates tab did not appear. After doing a little digging it appears to be caused by an incorrect path listed in the manifest for the plugin. In /usr/share/cockpit/packagekit/manifest.json it has the following conditions: > "conditions": [ > {"path-exists": "/lib/systemd/system/packagekit.service"}, > {"path-not-exists": "/sysroot/ostree"} > ], The path /lib/systemd/system/packagekit.service does not exist with packagekit installed on the system. Instead it is located at /usr/lib/systemd/system/packagekit.service. If I change that line to the corrected path the Software Update tab then appears and seems to function just fine. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1231800] New: Many problems with kernel prior 6.9 release. AMD platform.
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231800 Bug ID: 1231800 Summary: Many problems with kernel prior 6.9 release. AMD platform. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: slawek(a)lach.art.pl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0 Build Identifier: I currently must work on kernel 6.8, cause any newer causes serious problem. I trying many thinks, but nothing helps. Firstly, this bug may be related to closed source NVidia driver. Kernel many times do panic and print some debug info with NVidia string. I try to disable nvidia module. Blacklisting does nothing, so I removed it and try to ran 6.11 kernel. But, I do not disable NVidia service and maybe I unfortunately install it again. Meanwhile, I got information about update in discover and it hangs on installing updates. I try with zypper and I must accept license for NVidia. Discover do not ask for accepting license in previous event, so I think NVidia kernel was installed again, without my knowledge, as I described. When installing via zypper, system halt and sound was playing in loop. Fortunaty, I installed NVidia service and remove nvidia drivers via zypper and test 6.11 again. System many times complained about XFS (/home) filesystem error. Plasma 6.2 then reset and default settings was loaded. I currently, again working on 6.8. Related info: https://www.gamingonlinux.com/2024/08/nvidia-driver-with-linux-kernel-6-10-… . https://forums.opensuse.org/t/when-kernels-e8c6092e52f8-will-be-applied-on-… https://forums.opensuse.org/t/asus-zenbook-flip-15-kernel-6-9-fail-to-boot/… Thanks. Reproducible: Sometimes Steps to Reproduce: 1. Ran system, play many web games (freecivweb, total battle, forge of empires, the settlers: online, tentlan, etc.) at once, play video. Actual Results: On 6.8 no problems, but on newer multiple problems. I am not sure system is hanging, because it may be related to NVidia driver, but sometimes system complained about filesystem is mounted read only. Expected Results: Everything working without problems, like in 6.8. My laptop is ASUS ZenBook Flip 15. Operating System: openSUSE Tumbleweed 20241016 KDE Plasma Version: 6.2.1 KDE Frameworks Version: 6.7.0 Qt Version: 6.7.3 Kernel Version: 6.8.9-1-default (64-bit) Graphics Platform: Wayland Processors: 8 × AMD Ryzen 7 4700U with Radeon Graphics Memory: 15.0 GiB of RAM Graphics Processor: AMD Radeon Graphics Manufacturer: ASUSTeK COMPUTER INC. Product Name: ZenBook UX562IQ_UM562IQ System Version: 1.0 -- You are receiving this mail because: You are on the CC list for the bug.

1 24

[Bug 1232231] New: AUDIT-0: mousepad: New PolKit rules added
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232231 Bug ID: 1232231 Summary: AUDIT-0: mousepad: New PolKit rules added Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: manfred.h(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 878180 --> https://bugzilla.suse.com/attachment.cgi?id=878180&action=edit Full build log mousepad update 0.6.3 has added polkit rules [ 31s] RPMLINT report: [ 31s] =============== [ 32s] ============================ rpmlint session starts ============================ [ 32s] rpmlint: 2.6.1 [ 32s] mousepad.x86_64: E: polkit-untracked-privilege (Badness: 10) org.xfce.mousepad (no:auth_admin:auth_admin) [ 32s] The polkit action is not listed in the polkit-default-privs profiles which [ 32s] makes it harder for admins to find. Furthermore improper polkit authorization [ 32s] checks can easily introduce security issues. If the package is intended for [ 32s] inclusion in any SUSE product please open a bug report to request review of [ 32s] the package by the security team. Please refer to [ 32s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 32s] more information. OBS repo: https://build.opensuse.org/package/show/X11:xfce/mousepad -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1224199] New: [Build 20240512] Unlock Users setting will end up in changing Root user settings.
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1224199 Bug ID: 1224199 Summary: [Build 20240512] Unlock Users setting will end up in changing Root user settings. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4182899/modules/logi n_test/steps/6 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: xiaoguang.wang(a)suse.com Reporter: grace.wang(a)suse.com QA Contact: qa-bugs(a)suse.de CC: yfjiang(a)suse.com, zcjia(a)suse.com Target Milestone: --- Found By: openQA Blocker: --- Steps: 1. Install a fresh Tumbleweed and the System Role is "Desktop with GNOME" 2. Boot to desktop and login with a non-root user which was created during installation -> Launch gnome-control-center -> Navigate to System and then Users -> Click Unlock and input Administrator password to Authenticate 3. Observe the Users Actual Result: The Users panel shows "Root" instead of the non-root user we used for login. This issue can only be reproduced on a fresh installed system. That mean if you reproduced this issue for one time and you might now be able to reproduced this one more time in this particular environment. So, be sure to take a snapshot before trying to reproduce this issue one your side. ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-desktopapps-gnome@64bit fails in [login_test](https://openqa.opensuse.org/tests/4182899/modules/login_test/st… ## Test suite description ## Reproducible Fails since (at least) Build [20240320](https://openqa.opensuse.org/tests/4028599) ## Expected result Last good: [20240319](https://openqa.opensuse.org/tests/4026004) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1232536] New: bpftrace: ERROR: Error attaching probe: 'kprobe:swap_readpage'
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232536 Bug ID: 1232536 Summary: bpftrace: ERROR: Error attaching probe: 'kprobe:swap_readpage' Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: petr.vorel(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- bpftrace tests on Tumbleweed fails on # echo -e "\ninterval:s:5 { exit(); }" | cat /usr/share/bpftrace/tools/swapin.bt - | bpftrace - stdin:1-16: WARNING: swap_readpage is not traceable (either non-existing, inlined, or marked as "notrace"); attaching to it will likely fail Attaching 3 probes... cannot attach kprobe, Invalid argument ERROR: Error attaching probe: 'kprobe:swap_readpage' echo $? 255 # bpftrace --info System OS: Linux 6.11.5-1-default #1 SMP PREEMPT_DYNAMIC Wed Oct 23 04:27:11 UTC 2024 (b4e3aa9) Arch: x86_64 Build version: v0.21.2 LLVM: 18.1.8 unsafe probe: no bfd: no liblldb (DWARF support): yes libsystemd (systemd notify support): no Kernel helpers probe_read: yes probe_read_str: yes probe_read_user: yes probe_read_user_str: yes probe_read_kernel: yes probe_read_kernel_str: yes get_current_cgroup_id: yes send_signal: yes override_return: no get_boot_ns: yes dpath: yes skboutput: yes get_tai_ns: yes get_func_ip: yes jiffies64: yes for_each_map_elem: yes Kernel features Instruction limit: 1000000 Loop support: yes btf: yes module btf: yes map batch: yes uprobe refcount (depends on Build:bcc bpf_attach_uprobe refcount): yes Map types hash: yes percpu hash: yes array: yes percpu array: yes stack_trace: yes perf_event_array: yes ringbuf: yes Probe types kprobe: yes tracepoint: yes perf_event: yes kfunc: yes kprobe_multi: yes uprobe_multi: yes raw_tp_special: yes iter: yes Running the same test on Debian with kernel 6.11.5, and with these different build options it pass: LLVM: 18.1.8 bfd: no liblldb (DWARF support): yes -- You are receiving this mail because: You are on the CC list for the bug.

1 25

[Bug 1231167] New: Enable CONFIG_SCSI_UFS_QCOM for UFS support on QCOM platforms
by bugzilla_noreply＠suse.com 05 Nov '24

05 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231167 Bug ID: 1231167 Summary: Enable CONFIG_SCSI_UFS_QCOM for UFS support on QCOM platforms Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: rsalveti(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 877673 --> https://bugzilla.suse.com/attachment.cgi?id=877673&action=edit kernel config diff Hi, I'm validating openSUSE Tumbleweed on QCOM-based arm64 platforms (e.g. rb3gen2) and noticed the installer can't find the UFS controller. This patch enables CONFIG_SCSI_UFS_QCOM as module so it can identify UFS controllers on QCOM platforms. Patch attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1231686] New: AusweisApp and AusweisApp broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 Bug ID: 1231686 Summary: AusweisApp and AusweisApp broken with OpenSSL 3.3 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: r.miller(a)unity-mail.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 878013 --> https://bugzilla.suse.com/attachment.cgi?id=878013&action=edit log file (AusweisApp > AusweisApp_error.log 2>&1 Since AusweisApp and AusweisApp2 are using openssl-3-3.1.4-150600.5.18.1.x86_64 the application is not working anymore. card 2024.10.15 17:13:32.217 4144 C EcUtil::generateKey(card/base/pace/ec/EcUtil.cpp:213) : Cannot create EVP_PKEY support 2024.10.15 17:13:32.217 4144 I ...ionWorker::establishPaceChannel(card/base/CardConnectionWorker.cpp:310) : Finished PACE for PACE_PIN with result PROTOCOL_ERROR card 2024.10.15 17:13:32.217 4144 BaseCardCommand::execute(card/base/command/BaseCardCommand.cpp:41) : governikus::EstablishPaceChannelCommand | ReturnCode of internal execute: PROTOCOL_ERROR statemachine 2024.10.15 17:13:32.228 4138 ...dleNpaPosition(workflows/base/states/StateEstablishPaceChannel.cpp:137) : Clearing unfortunate-card-position panickiness. | PROTOCOL_ERROR As result it increases error counter on card and stop with error message PROTOCOL_ERROR. With Leap 15.5 AusweisApp2 was working with OpenSSL 1.x. Card Reader USB ReinerSCT Basic. Please find attached the full log. Regards, Rainer -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1222211] New: "Forget file" in "Recent Files" of the "Application Menu" starter seems to do nothing (KDE Plasma 6, Tumbleweed 20240329)
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1222211 Bug ID: 1222211 Summary: "Forget file" in "Recent Files" of the "Application Menu" starter seems to do nothing (KDE Plasma 6, Tumbleweed 20240329) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: ingo.strauch(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I've recently updated to version 20240329 of Tumbleweed which for me was the upgrade of KDE Plasma 5 to 6. Since then, forgetting files via the start menu does not work as expected anymore. Steps to reproduce * open the "Application Menu" starter * click "Recent Files" at the top to show the list of recent files * right-click on one of the files and select "Forget File" from the context menu Expected behavior * the file gets removed from the list immediately (just like it did with KDE Plasma 5) Actual behavior * the file is still shown in the list As it turns out the file does get forgotten because it is removed from the list in a fresh login session, so it seems to me it's just a UI refresh problem. I still find it quite annoying because my use case often is to open files from the "Recent Files" list where I first have to remove several (to me) irrelevant entries before the document I'm looking for is shown. I've also tested this with a fresh user account and the problem exists there as well. Forgetting files does work as expected in "Application Starter" but not with "Application Menu". -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1213156] New: systemd-xdg-autostart-generator cannot start several existing desktop files in Leap 15.5
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1213156 Bug ID: 1213156 Summary: systemd-xdg-autostart-generator cannot start several existing desktop files in Leap 15.5 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: ftake(a)geeko.jp QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This report is created in order to summarize related report caused by the same issues of systemd-xdg-autostart-generator in 15.5. systemd-xdg-autostart-generator is a mechanism to start XDG autostart (e.g., /etc/xdg/autostart) instead of desktop environments. In Leap 15.5, KDE plasma started to use this mechanism. However, due to the following problems, xdg-autostart-generator cannot start desktop files derived from Leap 15.4. Some essential services including IBus does not work in 15.5 (#1211977). * systemd-xdg-autostart-generator inappropriately ignores desktop files with X-GNOME-Autostart-Phase (#1201728) [1] * systemd-xdg-autostart-generator cannot start process that forks another process [2, 3, 4] [1] https://github.com/systemd/systemd/issues/18791 (resolved) [2] https://bugs.kde.org/show_bug.cgi?id=433299 [3] https://github.com/systemd/systemd/pull/20813 (merged) [4] https://github.com/systemd/systemd/issues/27919 (unresolved) FYI: Upstream bug tracker related xdg-autostart https://github.com/systemd/systemd/labels/xdg-autostart Some other fixes also might be necessary for 15.5 -- You are receiving this mail because: You are on the CC list for the bug.

1 19