April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219363] New: [SELinux] AVC denial execmem ModemManager
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1219363 Bug ID: 1219363 Summary: [SELinux] AVC denial execmem ModemManager Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mcepl(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Just what I found in ausearch -m AVC output: mitmanek:~ # ausearch -m AVC -ts boot |grep ModemManager type=AVC msg=audit(1706651142.962:84): avc: denied { execmem } for pid=1618 comm="ModemManager" scontext=system_u:system_r:modemmanager_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=process permissive=1 type=AVC msg=audit(1706651143.909:85): avc: denied { execmem } for pid=1618 comm="ModemManager" scontext=system_u:system_r:modemmanager_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=process permissive=1 I don’t use ModemManager for anything, so I cannot test whether anything actually changed with functionality. openSUSE/Tumbleweed and mitmanek:~ # sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allowed Memory protection checking: actual (secure) Max kernel policy version: 33 mitmanek:~ # -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1222825] New: VUL-0: CVE-2024-28869: traefik: denial of service
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1222825 Bug ID: 1222825 Summary: VUL-0: CVE-2024-28869: traefik: denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/401695/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: thomas.leroy(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28869 https://www.cve.org/CVERecord?id=CVE-2024-28869 https://doc.traefik.io/traefik/routing/entrypoints/#respondingtimeouts https://github.com/traefik/traefik/commit/240b83b77351dfd8cadb91c305b84e9d2… https://github.com/traefik/traefik/releases/tag/v2.11.2 https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5 https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw https://bugzilla.redhat.com/show_bug.cgi?id=2274987 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1221348] New: SELinux: relabeling after reboot is not communicated to user
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1221348 Bug ID: 1221348 Summary: SELinux: relabeling after reboot is not communicated to user Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jsegitz(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: qa-bugs(a)suse.de CC: cathy.hu(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Hi, if the SELinux policy is updated and the system reboots, the system gets relabeled. But this is not communicated to the user, it just looks like the system is stuck during boot. Especially with MicroOS the user might not know what was part of the last update. If the system is stuck during boot some users might not know that they use SELinux and where the wait is coming from. From a usability point of view: would it be possible to print a message that the system is currently relabeling the filesystem and maybe also add a message that it is done ? Second part might not be strictly needed, but I think some messaging might be helpful for users. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1222583] New: [Build 20240409] MATE: clock has quit unexpectedly
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1222583 Bug ID: 1222583 Summary: [Build 20240409] MATE: clock has quit unexpectedly Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4075118/modules/rebo ot_icewm/steps/11 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_mate@64bit fails in [reboot_icewm](https://openqa.opensuse.org/tests/4075118/modules/reboot_icew… ## Test suite description ## Reproducible Fails since (at least) Build [20240409](https://openqa.opensuse.org/tests/4074357) ## Expected result Last good: [20240408](https://openqa.opensuse.org/tests/4072457) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1214600] New: Dell XPS 13 while start install image get the error /grub-core/kern/mm.c:394:out of memory
by bugzilla_noreply＠suse.com 30 Jul '24

30 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1214600 Bug ID: 1214600 Summary: Dell XPS 13 while start install image get the error /grub-core/kern/mm.c:394:out of memory Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: virex(a)mail.ru QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 869000 --> https://bugzilla.suse.com/attachment.cgi?id=869000&action=edit Photo of error On fresh Tumbleweed with 6 kernel install iso image get the error. Dell XPS 13 while start install image get the error /grub-core/kern/mm.c:394:out of memory I tested the memory and it is fine. Leap 15.6 alpha starting fine, and old thumbleweed with kernel 5th work fine too. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1220574] New: [META] GCC 14 package failures that cannot be worked around with -fpermissive (that are not results of warnings that are now errors)
by bugzilla_noreply＠suse.com 29 Jul '24

29 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1220574 Bug ID: 1220574 Summary: [META] GCC 14 package failures that cannot be worked around with -fpermissive (that are not results of warnings that are now errors) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: mjambor(a)suse.com Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Meta issue that will track all packages that fail with gcc14 package except for those that are tracked in bug#1220571 - i.e. those that cannot be worked around by turning new errors back to warnings. -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1219657] New: "airplane mode" does not survive reboot
by bugzilla_noreply＠suse.com 28 Jul '24

28 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1219657 Bug ID: 1219657 Summary: "airplane mode" does not survive reboot Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Time doesn't make bugs go away: It seems the issue has been reported before: https://bugzilla.opensuse.org/show_bug.cgi?id=925535 Anyway: When having enabled "airplane mode" (WiFi and Bluetooth OFF) on my Lenovo ThinkPad E15 Gen 2, airplane mode is disabled after reboot, and even before login I'm prompted for a WiFi password repeatedly (which I don't what to enter at that point). What makes matters worse is that the keyboard hotkey to toggle airplane mode does work only after having logged in to GNOME. Unsure whether it's base system or GNOME. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1216537] New: xdg-utils perl requirement
by bugzilla_noreply＠suse.com 25 Jul '24

25 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1216537 Bug ID: 1216537 Summary: xdg-utils perl requirement Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: simonf.lees(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jslaby(a)suse.com Target Milestone: --- Found By: --- Blocker: --- xdg-utils requires perl via /usr/bin/xdg-screensaver. On minimal systems we'd like to avoid any extra script interpreters. Any chance to avoid using perl there? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1218640] New: The libxkbregistry-devel-32bit package is missing
by bugzilla_noreply＠suse.com 25 Jul '24

25 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1218640 Bug ID: 1218640 Summary: The libxkbregistry-devel-32bit package is missing Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: fgouget(a)codeweavers.com QA Contact: gfx-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The libxkbregistry-devel-32bit package is missing: suset-64:~ # zypper install libxkbregistry-devel-32bit Loading repository data... Reading installed packages... Package 'libxkbregistry-devel-32bit' not found. Resolving package dependencies... Nothing to do. Wine uses this package to run 32-bit Windows applications when using Wayland for the graphics layer. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1221006] New: GCC 14: linux-atm package fails
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1221006 Bug ID: 1221006 Summary: GCC 14: linux-atm package fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: michal.jires(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jbohac(a)suse.com Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Building linux-atm with GCC 14 fails here: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… Due to (exhaustive list of errors): 100 | fprintf(stderr,"internal error: len %d %% %d\n",req.length, conn.c: In function ‘accept_conn’: conn.c:414:57: error: passing argument 3 of ‘accept’ from incompatible pointer type [-Wincompatible-pointer-types] 414 | fd = accept(conn->fd, (struct sockaddr *)&addr, &len); | ^~~~ | | | size_t * {aka long unsigned int *} In file included from ../../src/include/atm.h:10, from conn.c:42: /usr/include/sys/socket.h:307:42: note: expected ‘socklen_t * restrict’ {aka ‘unsigned int * restrict’} but argument is of type ‘size_t *’ {aka ‘long unsigned int *’} 307 | socklen_t *__restrict __addr_len); | ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~ See the meta bug#1220571 for more info. -- You are receiving this mail because: You are on the CC list for the bug.

1 2