December 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1229732] [SELinux] investigate why relabeling sometime does not work
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229732 https://bugzilla.suse.com/show_bug.cgi?id=1229732#c10 --- Comment #10 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Thorsten Kukuk from comment #3) > There is one scenario, where only parts of the system get relabeled: > systemctl soft-reboot at least on MicroOS, haven't tested Tumbleweed yet. > > Problem on MicroOS: > - initrd does not get executed, so no relabel of root filesystem > - subvolumes get relabeled and remove the relabel trigger > > zypp-boot-plugin will report a required hard reboot if selinux-policy gets > updated in the future, but that's not very robust, admins can still call > "systemctl soft-reboot" themself. Which is IMO a bigger problem. If "systemctl soft-reboot" unconditionally soft-reboots into the next/default snapshot, it will break in even more cases like kernel updates (modules no longer match) or any of the packages in the exclusion list. We need a general solution here, not just for SELinux autorelabelling. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231820] New: wine-devel is missing archive files
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1231820 Bug ID: 1231820 Summary: wine-devel is missing archive files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: aleithner(a)level101.at QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- With both wine-devel and wine-devel-32bit installed, it is currently only possible to compile Winelib DLLs (using winegcc) as 32-bit objects. The wine-devel package only installs archive files for PE binaries in /usr/lib64/wine/x86_64-windows, whereas the wine-devel-32bit package installs archive files for both PE binaries in /usr/lib/wine/i386-windows and for ELF binaries in /usr/lib/wine/i386-unix. Building wine from source on my machine yields archive files for 64-bit ELF and PE binaries (in lib64/x86_64-unix and lib64/i386-windows respectively) and for 32-bit PE binaries (in lib64/i386-windows), though 32-bit ELF binaries can be compiled and linked using the self-built winegcc. For context and reference, see the Wine Developer's mailing list thread [1] where I have asked about this originally. [1]: https://list.winehq.org/mailman3/hyperkitty/list/wine-devel@winehq.org/thre… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1229732] [SELinux] investigate why relabeling sometime does not work
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229732 https://bugzilla.suse.com/show_bug.cgi?id=1229732#c9 --- Comment #9 from Johannes Segitz <jsegitz(a)suse.com> --- Created attachment 878820 --> https://bugzilla.suse.com/attachment.cgi?id=878820&action=edit Relabel logic spreadsheet information collection Cathy asked for this. This will evolve over time and is incomplete ATM -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234037] New: [Build 20241130] SELinux: openQA fails after selinux-policy package rework
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234037 Bug ID: 1234037 Summary: [Build 20241130] SELinux: openQA fails after selinux-policy package rework Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4677660/modules/enfo rcing_mode_setup/steps/35 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation script_run("timeout 1780 restorecon -R /", timeout => 1800); script_run("timeout 1780 restorecon -R /*", timeout => 1800); The first one seems to run - but spitting a bunch of errors about read-only FS - the 2nd seems not to be started at all (nothing showing on the serial_terminal.txt - i.e no even the command typed) openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-selinux@64bit fails in [enforcing_mode_setup](https://openqa.opensuse.org/tests/4677660/modules/enf… ## Test suite description Maintainer (Lily Zhao) llzhao(a)suse.com ## Reproducible Fails since (at least) Build [20241130](https://openqa.opensuse.org/tests/4676938) ## Expected result Last good: [20241129](https://openqa.opensuse.org/tests/4674528) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1233674] Webcamoid does not find uvc camera anymore
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233674 https://bugzilla.suse.com/show_bug.cgi?id=1233674#c3 --- Comment #3 from Christophe Marin <christophe(a)krop.fr> --- qt6-multimedia is not faulty btw, this can be tested with the qt6-multimedia-examples package. /usr/lib64/qt6/examples/multimedia/camera/camera and /usr/lib64/qt6/examples/multimedia/declarative-camera/declarative-camera both work nicely -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232486] Improvements for man ifcfg(5)
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1232486 Paul McKeith <paul.mckeith(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |paul.mckeith(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233855] New: VUL-0: CVE-2024-21538: xpra-html5: cross-spawn: regular expression denial of service
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233855 Bug ID: 1233855 Summary: VUL-0: CVE-2024-21538: xpra-html5: cross-spawn: regular expression denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/427356/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-21538:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: scott.bradnick(a)suse.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1233843 Target Milestone: --- Found By: --- Blocker: --- Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-21538 https://www.cve.org/CVERecord?id=CVE-2024-21538 https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d80… https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601… https://github.com/moxystudio/node-cross-spawn/pull/160 https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349 https://bugzilla.redhat.com/show_bug.cgi?id=2324550 https://github.com/CVEProject/cvelistV5/blob/main//cves/2024/21xxx/CVE-2024… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1233733] ibt-0040-2120 not working firmware version
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233733 https://bugzilla.suse.com/show_bug.cgi?id=1233733#c5 --- Comment #5 from Takashi Iwai <tiwai(a)suse.com> --- If it doesn't work with TW including the latest kernel and firmware, it's essentially an upstream problem. You'd better report and ask on the upstream, e.g. bugzilla.kernel.org. Care to report there? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233451] iwlwifi does not work with AX210
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233451 https://bugzilla.suse.com/show_bug.cgi?id=1233451#c6 --- Comment #6 from Takashi Iwai <tiwai(a)suse.com> --- There seems no reaction from the upstream yet, unfortunately. You can ping them on ML. Meanwhile, there are old kernel packages in my OBS repos, e.g. home:tiwai:kernel:6.8 https://download.opensuse.org/repositories/home:/tiwai:/kernel:/6.8/ARM/ Could you check with this kernel and see whether the problem persists or not? If the old kernel is confirmed to work, you can report it as a regression. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233690] Docker containers are not reachable from network after OS update from 20241114 to 20241115
by bugzilla_noreply＠suse.com 02 Dec '24

02 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233690 https://bugzilla.suse.com/show_bug.cgi?id=1233690#c13 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |antonio.teixeira(a)suse.com Status|CONFIRMED |IN_PROGRESS Assignee|alexandre.vicenzi(a)suse.com |antonio.teixeira(a)suse.com --- Comment #13 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- A preliminary test shows that the patch [1] fixes the issues I managed to reproduce on my side. Antonio is going to submit an update for iptables with this patch. Reassigning this to Antonio until the package is updated. [1]: https://git.netfilter.org/iptables/commit/?id=40406dbfaefbc204134452b2747ba… -- You are receiving this mail because: You are on the CC list for the bug.

1 0