December 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226212] kernel-obs-build doesn't find "iso9660" when building containers with podman
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1226212 https://bugzilla.suse.com/show_bug.cgi?id=1226212#c55 --- Comment #55 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:4140-1: An update that solves 49 vulnerabilities and has 13 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244140-1 Category: security (important) Bug References: 1195775, 1204171, 1205796, 1206344, 1209290, 1216223, 1218562, 1219125, 1223384, 1223524, 1223824, 1225189, 1225336, 1225611, 1226211, 1226212, 1226557, 1228743, 1229042, 1229454, 1229456, 1230429, 1230454, 1231073, 1231191, 1231193, 1231197, 1231200, 1231203, 1231293, 1231375, 1231502, 1231673, 1231861, 1231887, 1231890, 1231893, 1231895, 1231936, 1231938, 1231942, 1231960, 1231961, 1231979, 1231987, 1231988, 1232033, 1232069, 1232070, 1232097, 1232136, 1232145, 1232262, 1232280, 1232282, 1232286, 1232304, 1232383, 1232418, 1232424, 1232432, 1232519 CVE References: CVE-2021-47416, CVE-2021-47589, CVE-2022-3435, CVE-2022-45934, CVE-2022-48664, CVE-2022-48947, CVE-2022-48956, CVE-2022-48960, CVE-2022-48962, CVE-2022-48967, CVE-2022-48970, CVE-2022-48988, CVE-2022-48991, CVE-2022-48999, CVE-2022-49003, CVE-2022-49014, CVE-2022-49015, CVE-2022-49023, CVE-2022-49025, CVE-2023-28327, CVE-2023-46343, CVE-2023-52881, CVE-2023-52919, CVE-2023-6270, CVE-2024-27043, CVE-2024-42145, CVE-2024-44947, CVE-2024-45016, CVE-2024-45026, CVE-2024-46813, CVE-2024-46814, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46849, CVE-2024-47668, CVE-2024-47674, CVE-2024-47684, CVE-2024-47706, CVE-2024-47747, CVE-2024-49860, CVE-2024-49867, CVE-2024-49936, CVE-2024-49969, CVE-2024-49974, CVE-2024-49982, CVE-2024-49991, CVE-2024-49995, CVE-2024-50047 Maintenance Incident: [SUSE:Maintenance:36348](https://smelt.suse.de/incident/36348/) Sources used: openSUSE Leap 15.3 (src): kernel-source-5.3.18-150300.59.182.1, kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1, kernel-obs-qa-5.3.18-150300.59.182.1, kernel-obs-build-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Live Patching 15-SP3 (src): kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server 15 SP3 LTSS (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Enterprise Storage 7.1 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Micro 5.1 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195775] apparmor fails to build with 5.16.7
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1195775 https://bugzilla.suse.com/show_bug.cgi?id=1195775#c108 --- Comment #108 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:4140-1: An update that solves 49 vulnerabilities and has 13 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244140-1 Category: security (important) Bug References: 1195775, 1204171, 1205796, 1206344, 1209290, 1216223, 1218562, 1219125, 1223384, 1223524, 1223824, 1225189, 1225336, 1225611, 1226211, 1226212, 1226557, 1228743, 1229042, 1229454, 1229456, 1230429, 1230454, 1231073, 1231191, 1231193, 1231197, 1231200, 1231203, 1231293, 1231375, 1231502, 1231673, 1231861, 1231887, 1231890, 1231893, 1231895, 1231936, 1231938, 1231942, 1231960, 1231961, 1231979, 1231987, 1231988, 1232033, 1232069, 1232070, 1232097, 1232136, 1232145, 1232262, 1232280, 1232282, 1232286, 1232304, 1232383, 1232418, 1232424, 1232432, 1232519 CVE References: CVE-2021-47416, CVE-2021-47589, CVE-2022-3435, CVE-2022-45934, CVE-2022-48664, CVE-2022-48947, CVE-2022-48956, CVE-2022-48960, CVE-2022-48962, CVE-2022-48967, CVE-2022-48970, CVE-2022-48988, CVE-2022-48991, CVE-2022-48999, CVE-2022-49003, CVE-2022-49014, CVE-2022-49015, CVE-2022-49023, CVE-2022-49025, CVE-2023-28327, CVE-2023-46343, CVE-2023-52881, CVE-2023-52919, CVE-2023-6270, CVE-2024-27043, CVE-2024-42145, CVE-2024-44947, CVE-2024-45016, CVE-2024-45026, CVE-2024-46813, CVE-2024-46814, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46849, CVE-2024-47668, CVE-2024-47674, CVE-2024-47684, CVE-2024-47706, CVE-2024-47747, CVE-2024-49860, CVE-2024-49867, CVE-2024-49936, CVE-2024-49969, CVE-2024-49974, CVE-2024-49982, CVE-2024-49991, CVE-2024-49995, CVE-2024-50047 Maintenance Incident: [SUSE:Maintenance:36348](https://smelt.suse.de/incident/36348/) Sources used: openSUSE Leap 15.3 (src): kernel-source-5.3.18-150300.59.182.1, kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1, kernel-obs-qa-5.3.18-150300.59.182.1, kernel-obs-build-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Live Patching 15-SP3 (src): kernel-livepatch-SLE15-SP3_Update_50-1-150300.7.3.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server 15 SP3 LTSS (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Enterprise Storage 7.1 (src): kernel-obs-build-5.3.18-150300.59.182.1, kernel-source-5.3.18-150300.59.182.1, kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1, kernel-syms-5.3.18-150300.59.182.1 SUSE Linux Enterprise Micro 5.1 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): kernel-default-base-5.3.18-150300.59.182.1.150300.18.107.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234037] [Build 20241130] SELinux: openQA fails after selinux-policy package rework
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234037 https://bugzilla.suse.com/show_bug.cgi?id=1234037#c1 --- Comment #1 from Cathy Hu <cathy.hu(a)suse.com> --- ah i broke the minimum policy, will fix it it is not that severe as our main focus is the targeted policy -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229732] [SELinux] investigate why relabeling sometime does not work
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229732 https://bugzilla.suse.com/show_bug.cgi?id=1229732#c10 --- Comment #10 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Thorsten Kukuk from comment #3) > There is one scenario, where only parts of the system get relabeled: > systemctl soft-reboot at least on MicroOS, haven't tested Tumbleweed yet. > > Problem on MicroOS: > - initrd does not get executed, so no relabel of root filesystem > - subvolumes get relabeled and remove the relabel trigger > > zypp-boot-plugin will report a required hard reboot if selinux-policy gets > updated in the future, but that's not very robust, admins can still call > "systemctl soft-reboot" themself. Which is IMO a bigger problem. If "systemctl soft-reboot" unconditionally soft-reboots into the next/default snapshot, it will break in even more cases like kernel updates (modules no longer match) or any of the packages in the exclusion list. We need a general solution here, not just for SELinux autorelabelling. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231820] New: wine-devel is missing archive files
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1231820 Bug ID: 1231820 Summary: wine-devel is missing archive files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: aleithner(a)level101.at QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- With both wine-devel and wine-devel-32bit installed, it is currently only possible to compile Winelib DLLs (using winegcc) as 32-bit objects. The wine-devel package only installs archive files for PE binaries in /usr/lib64/wine/x86_64-windows, whereas the wine-devel-32bit package installs archive files for both PE binaries in /usr/lib/wine/i386-windows and for ELF binaries in /usr/lib/wine/i386-unix. Building wine from source on my machine yields archive files for 64-bit ELF and PE binaries (in lib64/x86_64-unix and lib64/i386-windows respectively) and for 32-bit PE binaries (in lib64/i386-windows), though 32-bit ELF binaries can be compiled and linked using the self-built winegcc. For context and reference, see the Wine Developer's mailing list thread [1] where I have asked about this originally. [1]: https://list.winehq.org/mailman3/hyperkitty/list/wine-devel@winehq.org/thre… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1229732] [SELinux] investigate why relabeling sometime does not work
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229732 https://bugzilla.suse.com/show_bug.cgi?id=1229732#c9 --- Comment #9 from Johannes Segitz <jsegitz(a)suse.com> --- Created attachment 878820 --> https://bugzilla.suse.com/attachment.cgi?id=878820&action=edit Relabel logic spreadsheet information collection Cathy asked for this. This will evolve over time and is incomplete ATM -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234037] New: [Build 20241130] SELinux: openQA fails after selinux-policy package rework
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234037 Bug ID: 1234037 Summary: [Build 20241130] SELinux: openQA fails after selinux-policy package rework Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4677660/modules/enfo rcing_mode_setup/steps/35 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation script_run("timeout 1780 restorecon -R /", timeout => 1800); script_run("timeout 1780 restorecon -R /*", timeout => 1800); The first one seems to run - but spitting a bunch of errors about read-only FS - the 2nd seems not to be started at all (nothing showing on the serial_terminal.txt - i.e no even the command typed) openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-selinux@64bit fails in [enforcing_mode_setup](https://openqa.opensuse.org/tests/4677660/modules/enf… ## Test suite description Maintainer (Lily Zhao) llzhao(a)suse.com ## Reproducible Fails since (at least) Build [20241130](https://openqa.opensuse.org/tests/4676938) ## Expected result Last good: [20241129](https://openqa.opensuse.org/tests/4674528) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1233949] New: VUL-0: CVE-2024-11738: himmelblau: rustls: accept`
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233949 Bug ID: 1233949 Summary: VUL-0: CVE-2024-11738: himmelblau: rustls: accept` Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/430408/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-11738:5.9:(AV:N/AC:H/PR:N/UI:N/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: david.mulder(a)suse.com Reporter: emanuele.cappello(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1233897 Target Milestone: --- Found By: --- Blocker: --- A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use `rustls::server::Acceptor::accept()` are affected. Servers that use `tokio-rustls`'s `LazyConfigAcceptor` API are affected. Servers that use `tokio-rustls`'s `TlsAcceptor` API are not affected. Servers that use `rustls-ffi`'s `rustls_acceptor_accept` API are affected. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-11738 https://bugzilla.redhat.com/show_bug.cgi?id=2328732 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1233674] Webcamoid does not find uvc camera anymore
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233674 https://bugzilla.suse.com/show_bug.cgi?id=1233674#c3 --- Comment #3 from Christophe Marin <christophe(a)krop.fr> --- qt6-multimedia is not faulty btw, this can be tested with the qt6-multimedia-examples package. /usr/lib64/qt6/examples/multimedia/camera/camera and /usr/lib64/qt6/examples/multimedia/declarative-camera/declarative-camera both work nicely -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232486] Improvements for man ifcfg(5)
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1232486 Paul McKeith <paul.mckeith(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |paul.mckeith(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0