October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231271] New: kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 Bug ID: 1231271 Summary: kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://build.opensuse.org/package/show/openSUSE:Facto ry:ARM/kiwi-templates-Minimal:kvm-and-xen-grub-bls OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 877724 --> https://bugzilla.suse.com/attachment.cgi?id=877724&action=edit Full build log kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil: [ 67s] [ INFO ]: 09:49:47 | Calling disk.sh script [ 67s] [ DEBUG ]: 09:49:47 | --------------out start------------- [ 67s] [ DEBUG ]: 09:49:47 | ####### BOOTLOADER INSTALL (disk.sh) [ 67s] [ DEBUG ]: 09:49:47 | sdbootutil-1+git20241002.7da4a47-1.1.aarch64 [ 67s] [ DEBUG ]: 09:49:47 | install boot loader [ 67s] [ DEBUG ]: 09:49:47 | --------------out stop-------------- [ 67s] [ DEBUG ]: 09:49:47 | --------------err start------------- [ 67s] [ DEBUG ]: 09:49:47 | + '[' -x /usr/bin/sdbootutil ']' [ 67s] + echo '####### BOOTLOADER INSTALL (disk.sh)' [ 67s] + rpm -q sdbootutil [ 67s] ++ uname -m [ 67s] + arch=aarch64 [ 67s] + case "$arch" in [ 67s] + arch=aa64 [ 67s] + echo 'install boot loader' [ 67s] + sdbootutil -v --no-random-seed --arch aa64 --esp-path /boot/efi --entry-token=auto --no-variables install [ 67s] Error: Bootloader not detected [ 67s] [ 67s] [ DEBUG ]: 09:49:47 | --------------err stop-------------- -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1231291] New: No "Start bootloader from a read-only snapshot" line anymore in Grub
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231291 Bug ID: 1231291 Summary: No "Start bootloader from a read-only snapshot" line anymore in Grub Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 URL: https://openqa.opensuse.org/tests/4530671/modules/boot _into_snapshot/steps/29 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de CC: mchang(a)suse.com Target Milestone: --- Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-boot_to_snapshot@aarch64 fails in [boot_into_snapshot](https://openqa.opensuse.org/tests/4530671/modules/boot_… No "Start bootloader from a read-only snapshot" line anymore in Grub: https://openqa.opensuse.org/tests/4530671#step/boot_into_snapshot/11 This SR could be related: * grub2: https://build.opensuse.org/request/show/1201971 Installed from DVD ISO, textmode. ## Test suite description ## Reproducible Fails since (at least) Build [20241002](https://openqa.opensuse.org/tests/4530166) ## Expected result Last good: [20241001](https://openqa.opensuse.org/tests/4527032) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231288] xscreensaver-gl package missed
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231288 https://bugzilla.suse.com/show_bug.cgi?id=1231288#c2 hui <sturm-fr(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|NEW |RESOLVED --- Comment #2 from hui <sturm-fr(a)web.de> --- These packages are called xscreensaver-data and xscreensaver-data-extra in openSUSE. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c10 --- Comment #10 from Michael Chang <mchang(a)suse.com> --- (In reply to Alberto Planas Dominguez from comment #8) > (In reply to Michael Chang from comment #7) > > (In reply to Guillaume GARDET from comment #3) > > > Maybe related, openQA found there is no "Start bootloader from a read-only > > > snapshot" line anymore in Grub: > > > https://openqa.opensuse.org/tests/4530671#step/boot_into_snapshot/11 > > > > > > Installed from DVD ISO, textmode. > > > > The grub snapshot boot menu requires grub2-snapper-plugin-2.12-24.1.noarch. > > Could it be that this package is missing because "sdbootutil + > > grubbls/systemd-boot" is now expected to take control in the new KIWI build? > > But this is still not the case, right? > > The tested image is > opensuse-Tumbleweed-DVD-aarch64-Build20241002-boot_to_snapshot@aarch64, so > sdbootutil is not in place there. Or I am missing somthing? No. Apparently it was me who got confused. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c9 --- Comment #9 from Michael Chang <mchang(a)suse.com> --- (In reply to Michael Chang from comment #7) > (In reply to Guillaume GARDET from comment #3) > > Maybe related, openQA found there is no "Start bootloader from a read-only > > snapshot" line anymore in Grub: > > https://openqa.opensuse.org/tests/4530671#step/boot_into_snapshot/11 > > > > Installed from DVD ISO, textmode. > > The grub snapshot boot menu requires grub2-snapper-plugin-2.12-24.1.noarch. > Could it be that this package is missing because "sdbootutil + > grubbls/systemd-boot" is now expected to take control in the new KIWI build? Ah, I believe I've found the issue. It is indeed related to the grub2 repackaging. The grub2 package may not be included in the system since only grub2-x86_64-efi and grub2-common are required now. I'll address this in the upcoming grub2 package update, along with some other pending submissions. As a side note, it will be changed from this: > %package snapper-plugin > .... > Supplements: packageand(snapper:grub2) to this: > %package snapper-plugin > .... > Supplements: packageand(snapper:grub2) > Supplements: packageand(snapper:grub2-common) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230111] libopenssl problem? libcrypto segfaults when called from the svn program and SASL encryption is enabled
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230111 https://bugzilla.suse.com/show_bug.cgi?id=1230111#c14 --- Comment #14 from Angel Yankov <angel.yankov(a)suse.com> --- Hello Lewis, The patch is in staging, waiting for release. Should be available within the next few days. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c8 --- Comment #8 from Alberto Planas Dominguez <aplanas(a)suse.com> --- (In reply to Michael Chang from comment #7) > (In reply to Guillaume GARDET from comment #3) > > Maybe related, openQA found there is no "Start bootloader from a read-only > > snapshot" line anymore in Grub: > > https://openqa.opensuse.org/tests/4530671#step/boot_into_snapshot/11 > > > > Installed from DVD ISO, textmode. > > The grub snapshot boot menu requires grub2-snapper-plugin-2.12-24.1.noarch. > Could it be that this package is missing because "sdbootutil + > grubbls/systemd-boot" is now expected to take control in the new KIWI build? But this is still not the case, right? The tested image is opensuse-Tumbleweed-DVD-aarch64-Build20241002-boot_to_snapshot@aarch64, so sdbootutil is not in place there. Or I am missing somthing? > And if the bootloader is now supposed to be either grubbls or systemd-boot, > the openQA test case needs to be revised to reflect this change. The menu is > presented and organized differently due to the new skins of BLS snippet. For this image should be grub2-efi for aarch64 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221918] New: VUL-0: CVE-2024-2824: jhead: heap-based buffer overflow in function PrintFormatNumber
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1221918 Bug ID: 1221918 Summary: VUL-0: CVE-2024-2824: jhead: heap-based buffer overflow in function PrintFormatNumber Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398716/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-2824 https://www.cve.org/CVERecord?id=CVE-2024-2824 https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip https://github.com/Matthias-Wandel/jhead/issues/84 https://vuldb.com/?ctiid.257711 https://vuldb.com/?id.257711 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c7 --- Comment #7 from Michael Chang <mchang(a)suse.com> --- (In reply to Guillaume GARDET from comment #3) > Maybe related, openQA found there is no "Start bootloader from a read-only > snapshot" line anymore in Grub: > https://openqa.opensuse.org/tests/4530671#step/boot_into_snapshot/11 > > Installed from DVD ISO, textmode. The grub snapshot boot menu requires grub2-snapper-plugin-2.12-24.1.noarch. Could it be that this package is missing because "sdbootutil + grubbls/systemd-boot" is now expected to take control in the new KIWI build? And if the bootloader is now supposed to be either grubbls or systemd-boot, the openQA test case needs to be revised to reflect this change. The menu is presented and organized differently due to the new skins of BLS snippet. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227464] Please subpackage the grub binaries into grub2-bin
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1227464 https://bugzilla.suse.com/show_bug.cgi?id=1227464#c6 --- Comment #6 from Michael Chang <mchang(a)suse.com> --- (In reply to Daan De Meyer from comment #5) > > Could you please elaborate on the requirements for grub2-bin to achieve your goal? This would help me to get a better understanding. > > I want grub2-bin to install the grub tools without configuring the system to > actually use grub as the bootloader. It's fine if it triggers a bootloader > update on upgrade if grub is already the bootloader for the system, it just > shouldn't do anything if grub is not the system's bootloader. In the Tumbleweed 20241002 snapshot, grub tools and other common stuff have been moved to the grub2-common package. This allows them to be installed separately from grub platform modules, meaning no updates to the bootloader. You might want to take a look and see if this setup works better for your needs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0