April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1222180] New: openssh: rewrite systemd notification without linking systemd
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222180 Bug ID: 1222180 Summary: openssh: rewrite systemd notification without linking systemd Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- openssh carries this patch: https://build.opensuse.org/projects/openSUSE:Factory/packages/openssh/files… which is linking libsystemd, just for notifying systemd. given the large dependency tree of systemd, this increases the attack surface of openssh, as can be seen via https://www.suse.com/security/cve/CVE-2024-3094.html we should split out sd_notify() into a separate standalone library (or maybe it exists already?) and link that one instead -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1223378] New: rstudio fails to build against boost 1.85
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223378 Bug ID: 1223378 Summary: rstudio fails to build against boost 1.85 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ana.guerrero(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- rstudio failed to build in openSUSE:Factory after boost had been updated to version 1.85, see https://build.opensuse.org/package/live_build_log/openSUSE:Factory/rstudio/… -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1213297] New: No clang-tools package needed by clang >=13 from PackageHub repo
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1213297 Bug ID: 1213297 Summary: No clang-tools package needed by clang >=13 from PackageHub repo Classification: openSUSE Product: openSUSE Backports Version: SLE-15-SP5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Packages Assignee: packagehub-bugs(a)suse.com Reporter: oleksandr.shchirskyi(a)intel.com QA Contact: packagehub-bugs(a)suse.com Target Milestone: --- Found By: --- Blocker: No There is an issues with LLVM versions >=13 on SLES15 SP5. None of the Package Hub versions can be installed because the Clang-tool dependency is missing. For example, LLVM for SLES15 SP4 includes Clang-tool, but for SP5 it doesn't: https://packagehub.suse.com/packages/llvm13/ The same issue applies to LLVM 14. Here's a brief log example: # grep PRETTY /etc/os-release PRETTY_NAME="SUSE Linux Enterprise Server 15 SP5" # zypper install clang14-devel Refreshing service 'Basesystem_Module_15_SP5_x86_64'. Refreshing service 'Desktop_Applications_Module_15_SP5_x86_64'. Refreshing service 'Development_Tools_Module_15_SP5_x86_64'. Refreshing service 'Legacy_Module_15_SP5_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_Server_15_SP5_x86_64'. Refreshing service 'SUSE_Package_Hub_15_SP5_x86_64'. Refreshing service 'Server_Applications_Module_15_SP5_x86_64'. Loading repository data... Reading installed packages... Resolving package dependencies... Problem: nothing provides 'clang-tools >= 14.0.6' needed by the to be installed clang14-devel-14.0.6-bp155.4.10.x86_64 Solution 1: do not install clang14-devel-14.0.6-bp155.4.10.x86_64 Solution 2: break clang14-devel-14.0.6-bp155.4.10.x86_64 by ignoring some of its dependencies # zypper info clang14-devel Refreshing service 'Basesystem_Module_15_SP5_x86_64'. Refreshing service 'Desktop_Applications_Module_15_SP5_x86_64'. Refreshing service 'Development_Tools_Module_15_SP5_x86_64'. Refreshing service 'Legacy_Module_15_SP5_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_Server_15_SP5_x86_64'. Refreshing service 'SUSE_Package_Hub_15_SP5_x86_64'. Refreshing service 'Server_Applications_Module_15_SP5_x86_64'. Loading repository data... Reading installed packages... Information for package clang14-devel: -------------------------------------- Repository : SUSE-PackageHub-15-SP5-Backports-Pool Name : clang14-devel Version : 14.0.6-bp155.4.10 Arch : x86_64 Vendor : openSUSE Support Level : unknown Installed Size : 17.3 MiB Installed : No Status : not installed Source package : llvm14-14.0.6-bp155.4.10.src Upstream URL : https://www.llvm.org/ Summary : CLANG frontend for LLVM (devel package) Description : This package contains the clang (C language) frontend for LLVM. (development files) # zypper search clang | grep tools # At the same moment it's possible to install LLVM >=13 from OpenSUSE repos, for example, adding this to repos config "http://download.opensuse.org/distribution/leap/15.5/repo/oss/" -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1217716] New: No bass, nonfunctional brightness keys on Lenovo Slim 7 16" AMD
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217716 Bug ID: 1217716 Summary: No bass, nonfunctional brightness keys on Lenovo Slim 7 16" AMD Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Kernel:Drivers Assignee: kernel-bugs(a)suse.de Reporter: variable_valuables761(a)simplelogin.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- It seems the bass speakers do not work in the latest Tumbleweed KDE snapshot on the Lenovo Slim 7 16" AMD, 16ARH7, 82UX0001US (and this same model is called Yoga outside the United States). This issue appears to be similar to that of the wide range of recently released laptops that have the CS35L41 and TAS2781 amps, however I cannot find that hardware listed in any of my logs or online spec sheets for this laptop. The closest I can find is that is has a Realtek ALC3287 codec. Also, the keyboard brightness keys do not work. It seems the internal display's brightness value is bugged and shows up as a huge number in brightnessctl (and other tools) rather than something within the expected range. I can provide any logs that would be helpful. I hope this is an appropriate place to report these issues. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1217051] New: Enable ptrace_scope=1 by default on openSUSE Tumbleweed
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217051 Bug ID: 1217051 Summary: Enable ptrace_scope=1 by default on openSUSE Tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: 95kreaninw95(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Currently, on openSUSE Tumbleweed, ptrace_scope is disabled by default (ptrace_scope=0). This makes Chromium sandboxing status showing as no and red colored for both Ptrace Protection with Yama LSM entries. Enabling ptrace_scope=1 this fixed the issue. And I think it's a security hardening for the system. There's a request to enable this feature on SUSE 15 SP4: https://bugzilla.suse.com/show_bug.cgi?id=1198601 I am requesting this on openSUSE Tumbleweed. For reference, ptrace_scope is enabled on Ubuntu since 10.10. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1222512] New: VUL-0: CVE-2024-28871: libhtp: excessive CPU usage when parsing malformed traffic
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222512 Bug ID: 1222512 Summary: VUL-0: CVE-2024-28871: libhtp: excessive CPU usage when parsing malformed traffic Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/400377/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: otto.hollmann(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28871 https://www.cve.org/CVERecord?id=CVE-2024-28871 https://github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd… https://github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32… https://github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmg https://redmine.openinfosecfoundation.org/issues/6757 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1222641] New: Absence of python3-Pillow binary in the distro breaks xpra
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222641 Bug ID: 1222641 Summary: Absence of python3-Pillow binary in the distro breaks xpra Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ncutler(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Since xpra has the following line in its spec file: Requires: python3-Pillow it was broken by the recent change in Factory: ------------------------------------------------------------------- Fri Apr 21 12:20:55 UTC 2023 - Dirk Müller <dmueller(a)suse.com> - add sle15_python_module_pythons (jsc#PED-68) Because that effectively stops it from building python3-Pillow in Leap 15.6 and SLE-15-SP6 Package Hub. This is because Leap 15.6 and SLE-15-SP6 provide both a default Python 3.6 and an optional Python 3.11. This makes it impossible to install xpra, even though xpra is part of the distro. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1213574] New: Thunderbird OAUTH2 broken
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1213574 Bug ID: 1213574 Summary: Thunderbird OAUTH2 broken Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: openSUSE Leap 15.4 Status: NEW Severity: Major Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: aaron.w2(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Recent Thunderbird updates broke OAUTH2 and this seems to be a common problem with Thunderbird 102. With this update it no longer presents an OAUTH2 dialog for IMAP. My employer uses Microsoft Office365 and OAUTH2 is essential. This used to work. Even with a clean install and nuking the previous configuration it will never prompt for OAUTH2 authentication like it used to. Note that the OAUTH2 dialog DOES work with SMTP, but not IMAP. Searching the Internet reveals that this is a common problem with this release. Please upgrade Thunderbird to a newer release for 15.4. I'm not quite ready to upgrade to 15.5 just yet since I use this machine for heavy development work. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1217260] New: slib build failed in %post
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217260 Bug ID: 1217260 Summary: slib build failed in %post Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello slib does not build on Leap 15.6. This should be fixed before Beta (Feb 2023). https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Build log from Leap 15.6 https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 26s] ERROR: In procedure open-file: [ 26s] In procedure open-file: No such file or directory: "/usr/share/guile/site/2.2/slibcat" [ 26s] ... running 50-check-binary-kernel-log [ 26s] ... running 50-check-core-files [ 26s] ... checking for core files [ 26s] ... running 50-check-debuginfo [ 26s] ... testing for empty debuginfo packages [ 26s] ... running 50-check-filelist [ 26s] ... checking filelist [ 26s] ... running 50-check-gconf-scriptlets [ 26s] ... testing GConf scriptlet presence [ 26s] ... running 50-check-installtest [ 26s] ... testing for pre/postinstall scripts that are not idempotent [ 27s] Backtrace: [ 27s] 12 (apply-smob/1 #<catch-closure 5638290ba180>) [ 27s] In ice-9/boot-9.scm: [ 27s] 705:2 11 (call-with-prompt ("prompt") #<procedure 5638290d38c0 ?> ?) [ 27s] In ice-9/eval.scm: [ 27s] 619:8 10 (_ #(#(#<directory (guile-user) 563829187140>))) [ 27s] In ice-9/command-line.scm: [ 27s] 181:18 9 (_ #<input: string 563829192a80>) [ 27s] In unknown file: [ 27s] 8 (eval (require (quote new-catalog)) #<directory (guile-?>) [ 27s] In /usr/share/slib/require.scm: [ 27s] 145:16 7 (slib:require new-catalog) [ 27s] 79:15 6 (catalog:get new-catalog) [ 27s] In /usr/share/slib/guile-2.init: [ 27s] 257:4 5 (with-load-pathname _ _) [ 27s] In ice-9/boot-9.scm: [ 27s] 2312:4 4 (save-module-excursion #<procedure 563829261990 at ice-?>) [ 27s] 3832:12 3 (_) [ 27s] In /usr/share/slib/mklibcat.scm: [ 27s] 22:2 2 (_) [ 27s] In ice-9/ports.scm: [ 27s] 461:11 1 (call-with-output-file "/usr/share/guile/site/2.2/slib?" ?) [ 27s] In unknown file: [ 27s] 0 (open-file "/usr/share/guile/site/2.2/slibcat" "w" # #f) [ 27s] [ 27s] ERROR: In procedure open-file: [ 27s] In procedure open-file: No such file or directory: "/usr/share/guile/site/2.2/slibcat" [ 27s] postinstall script of slib-3b7-bp156.2.2.noarch.rpm failed -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1222982] New: autoyast ask password no repeat
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222982 Bug ID: 1222982 Summary: autoyast ask password no repeat Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Enhancement Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: lars.bohl(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello, we could not figure out a good way to "ask" for a password. In this case, the user needs to input an existing password, not create a new one. Background information: If our pre-script detects a luks partition, we need to open it, to see if any logical subvolumes exist. On system upgrade, we want to preserve a logical subvolume with a certain label. The other subvolumes of the luks partition will be used for root and swap, so they will be erased. Current workaround (not ideal): Either use a "<password>" or use a basic text "ask". Both are not ideal. With a "<password>" field, the user has to type the password twice, which is unnecessary and confusing for a password input. The "basic text" approach is also not ideal, because the user will see their password on the screen as they type it. Note: We've been using this documentation: https://doc.opensuse.org/projects/autoyast/ We could not find a link to the source repository of the autoyast tool there. Thank you for any suggestions. -- You are receiving this mail because: You are on the CC list for the bug.

1 3