December 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1233690] Docker containers are not reachable from network after OS update from 20241114 to 20241115
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233690 https://bugzilla.suse.com/show_bug.cgi?id=1233690#c15 --- Comment #15 from JDA <jda82(a)vicious-gaming.de> --- Can confirm that removing iptables-backend-nft fixes my issue. Thank you very much for the amazingly fast fix and workaround :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233690] New: Docker containers are not reachable from network
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233690 Bug ID: 1233690 Summary: Docker containers are not reachable from network Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: MicroOS Assignee: forgotten_u0-bnvADNc(a)user.net Reporter: seifert(a)alesak.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After regular OS update from 20241114 to 20241115 or later makes containers unreachable. Containers seams to be normally bind to correct interfaces. As it is on production server I was not able to investigate for very long time, reverting to previous OS snapshot resolved the problem. Installed current version of "openSUSE-MicroOS.x86_64-ContainerHost-kvm-and-xen.qcow2" into VM but unable to reproduce the issue, everything seams to work normally. The only symptom in journal is high occurrence of similar lines: Nov 24 02:23:46 backup1 dockerd[1340]: time="2024-11-24T02:23:46.068350205Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.20.0.66:42800" dns-server="udp:213.186.33.99:53" error="read udp 172.20.0.66:42800->213.186.33.99:53: i/o timeout" question=";certbot.\tIN\t AAAA" spanID=850c3ffdfcec0675 traceID=e1693dcfdf213f90555090b6285ac906 Also there is a difference in IPTABLES: NOT working: Chain FORWARD (policy DROP) target prot opt source destination DOCKER-USER all -- anywhere anywhere DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere working: Chain FORWARD (policy DROP) target prot opt source destination DOCKER-USER all -- anywhere anywhere DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1225862] Package metamail does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1225862 https://bugzilla.suse.com/show_bug.cgi?id=1225862#c3 Matej Cepl <mcepl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mcepl(a)suse.com Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #3 from Matej Cepl <mcepl(a)suse.com> --- https://build.opensuse.org/request/show/1181483 has been accepted -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220571] [META] Packages failing because GCC 14+ treats some warnings as errors
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1220571 Bug 1220571 depends on bug 1225862, which changed state. Bug 1225862 Summary: Package metamail does not build with gcc14 because of new errors https://bugzilla.suse.com/show_bug.cgi?id=1225862 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233451] iwlwifi does not work with AX210
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233451 https://bugzilla.suse.com/show_bug.cgi?id=1233451#c8 --- Comment #8 from Marco Louter <marco(a)growy.nl> --- Created attachment 878824 --> https://bugzilla.suse.com/attachment.cgi?id=878824&action=edit dmesg output 6.8.9 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233451] iwlwifi does not work with AX210
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233451 https://bugzilla.suse.com/show_bug.cgi?id=1233451#c7 --- Comment #7 from Marco Louter <marco(a)growy.nl> --- (In reply to Takashi Iwai from comment #6) > Meanwhile, there are old kernel packages in my OBS repos, e.g. > home:tiwai:kernel:6.8 > https://download.opensuse.org/repositories/home:/tiwai:/kernel:/6.8/ARM/ > > Could you check with this kernel and see whether the problem persists or not? > If the old kernel is confirmed to work, you can report it as a regression. I have downgraded the kernel-default package to the version from your repository. In the dmesg output I see that the driver tries to load firmware version 86 instead of 89. Other than that the output looks the same. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229732] [SELinux] investigate why relabeling sometime does not work
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229732 https://bugzilla.suse.com/show_bug.cgi?id=1229732#c11 --- Comment #11 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Johannes Segitz from comment #9) > Created attachment 878820 [details] > Relabel logic spreadsheet information collection > > Cathy asked for this. This will evolve over time and is incomplete ATM For t-u apply it's not that bad: The old policy stays loaded, which matches the not yet relabelled filesystem. It can break in two scenarios: a) Someone triggers the autorelabel services somehow b) The new policy is loaded manually somehow b) could also cause breakage without t-u apply, in the case that a local SELinux policy module is changed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231324] New: Error after deploy image
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1231324 Bug ID: 1231324 Summary: Error after deploy image Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: rbrown(a)suse.com Reporter: emtorres(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 877761 --> https://bugzilla.suse.com/attachment.cgi?id=877761&action=edit tik.log Finishing the installation process, it shows this error message: [ERROR] Command /usr/bin/chroot /var/lib/tik/encrypt/mnt sdbootutil -vv --esp-path /boot/efi --no-variables install FAILED I'm attaching tik.log -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1229042] New: Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229042 Bug ID: 1229042 Summary: Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: mpdesouza(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Remove the condition that currently only applies to openSUSE Tumbleweed. -- You are receiving this mail because: You are on the CC list for the bug.

1 26

[Bug 1226211] kernel-obs-build missing network modules for Docker build
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1226211 https://bugzilla.suse.com/show_bug.cgi?id=1226211#c57 --- Comment #57 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:4140-1: An update that solves 49 vulnerabilities and has 13 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244140-1 Category: security (important) Bug References: 1195775, 1204171, 1205796, 1206344, 1209290, 1216223, 1218562, 1219125, 1223384, 1223524, 1223824, 1225189, 1225336, 1225611, 1226211, 1226212, 1226557, 1228743, 1229042, 1229454, 1229456, 1230429, 1230454, 1231073, 1231191, 1231193, 1231197, 1231200, 1231203, 1231293, 1231375, 1231502, 1231673, 1231861, 1231887, 1231890, 1231893, 1231895, 1231936, 1231938, 1231942, 1231960, 1231961, 1231979, 1231987, 1231988, 1232033, 1232069, 1232070, 1232097, 1232136, 1232145, 1232262, 1232280, 1232282, 1232286, 1232304, 1232383, 1232418, 1232424, 1232432, 1232519 CVE References: CVE-2021-47416, CVE-2021-47589, CVE-2022-3435, CVE-2022-45934, CVE-2022-48664, CVE-2022-48947, CVE-2022-48956, CVE-2022-48960, CVE-2022-48962, CVE-2022-48967, CVE-2022-48970, CVE-2022-48988, CVE-2022-48991, CVE-2022-48999, CVE-2022-49003, CVE-2022-49014, CVE-2022-49015, CVE-2022-49023, CVE-2022-49025, CVE-2023-28327, CVE-2023-46343, CVE-2023-52881, CVE-2023-52919, CVE-2023-6270, CVE-2024-27043, CVE-2024-42145, CVE-2024-44947, CVE-2024-45016, CVE-2024-45026, CVE-2024-46813, CVE-2024-46814, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46849, CVE-2024-47668, CVE-2024-47674, CVE-2024-47684, CVE-2024-47706, CVE-2024-47747, CVE-2024-49860, CVE-2024-49867, CVE-2024-49936, CVE-2024-49969, CVE-2024-49974, CVE-2024-49982, CVE-2024-49991, CVE-2024-49995, CVE-2024-50047 Maintenance Incident: [SUSE:Maintenance:36348](https://smelt.suse.de/incident/36348/) Sources used: openSUSE Leap 15.3 (src): kernel-source-5.3.18-150300.59.182.1, kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1, kernel-obs-qa-5.3.18-150300.59.182.1, kernel-obs-build-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Live Patching 15-SP3 (src): kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server 15 SP3 LTSS (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Enterprise Storage 7.1 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Micro 5.1 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0