June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226031] apparmor stops working due to "aa-logprof ERROR: Can't parse mount rule mount "" -> "/","
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226031 https://bugzilla.suse.com/show_bug.cgi?id=1226031#c7 David Disseldorp <ddiss(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs(a)opensuse.org |ddiss(a)suse.com --- Comment #7 from David Disseldorp <ddiss(a)suse.com> --- (In reply to Christian Boltz from comment #6) > The ptrace issue (see comment 2) turned out to be a kernel bug, therefore > reassigning to the kernel team. > > @kernel team: https://gitlab.com/apparmor/apparmor/-/issues/400 says this > gets fixed with > https://gitlab.com/georgiag/apparmor-kernel/-/commit/ > cd1948c0660b0e8b24a78288651d7e4f1a88c921 > > Can you please add that patch to the openSUSE kernel? I don't see this on the apparmor ML or in the maintainer kernel git repository yet. I'd prefer to see it "on its way" before merging it locally. > If you want to test yourself: a reproducer is in the description of > https://gitlab.com/apparmor/apparmor/-/issues/400 > > I can also do the testing - just tell me where I can find a test kernel ;-) Sure, I'll prepare a test kernel with the change. As always, thanks for looking into this and raising it upstream, Christian. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225065] New: Kernel Option Video Panel Orientation Not Working In Installer
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225065 Bug ID: 1225065 Summary: Kernel Option Video Panel Orientation Not Working In Installer Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: rbrown(a)suse.com Reporter: max(a)excloo.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When installing openSUSE Aeon, I set my kernel parameters as follows: video=DSI-1:panel_orientation=right_side_up This changes orientation in the boot process but once the UI loads orientation is reset. Is there any way to fix this? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1226124] New: Keyboard & Trackpad Don't Work
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226124 Bug ID: 1226124 Summary: Keyboard & Trackpad Don't Work Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: max(a)excloo.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0 Build Identifier: I just saw the new OpenSUSE Aeon release and gave it a go on my Chuwi MiniBook X, interestingly the screen is rotated right by default for the first time on Linux (must be a newer kernel) but unfortunately my keyboard and trackpad don't work at all. Very odd as they've been working everywhere else :'( When I tried MicroOS a few weeks back the screen wasn't rotated right (had to apply a kernel param from here: https://github.com/sonnyp/linux-minibook-x) but everything else worked perfect. Reproducible: Always Steps to Reproduce: 1. Boot OpenSUSE Aeon RC2 on MiniBook X Actual Results: Keyboard & trackpad don't work Expected Results: Working keyboard and trackpad -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1226201] New: dialog box opens in other screen in dual monitor
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226201 Bug ID: 1226201 Summary: dialog box opens in other screen in dual monitor Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: devguy.ca(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This bug has shown up maybe a few weeks back. Whenever I open a dialog box, like file open, it will open the dialog box on a different screen in my dual monitor setup. Why can't KDE be smart to just center the dialog over the app it belongs too? Operating System: openSUSE Tumbleweed 20240610 KDE Plasma Version: 6.0.5 KDE Frameworks Version: 6.3.0 Qt Version: 6.7.1 Kernel Version: 6.9.3-1-default (64-bit) Graphics Platform: X11 Processors: 24 × AMD Ryzen 9 5900X 12-Core Processor Memory: 62.7 GiB of RAM Graphics Processor: NVIDIA GeForce RTX 3080/PCIe/SSE2 Manufacturer: Micro-Star International Co., Ltd. Product Name: MS-7A38 System Version: 8.0 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224062] New: VUL-0: CVE-2024-34244: libmodbus: buffer overflow via the modbus_write_bits function
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1224062 Bug ID: 1224062 Summary: VUL-0: CVE-2024-34244: libmodbus: buffer overflow via the modbus_write_bits function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/404865/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially crafted input, which leads to out-of-bounds read and can potentially cause a crash or other unintended behaviors. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-34244 https://www.cve.org/CVERecord?id=CVE-2024-34244 https://github.com/stephane/libmodbus/issues/743 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1223697] New: VUL-0: CVE-2023-26793: libmodbus: heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223697 Bug ID: 1223697 Summary: VUL-0: CVE-2023-26793: libmodbus: heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/403923/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26793 https://www.cve.org/CVERecord?id=CVE-2023-26793 https://github.com/stephane/libmodbus/issues/683 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1226099] New: VUL-0: CVE-2024-5742: nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226099 Bug ID: 1226099 Summary: VUL-0: CVE-2024-5742: nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/409081/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: crrodriguez(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- When nano is killed while it has a modified buffer, it saves this buffer to an emergency .save file and then chmods and chowns this file to the permissions and owner of the original file. This means that when nano is run as root and edits a user-owned file in a directory that is writable by that user, it gives a malicious user a window of opportunity to replace the .save file with a malicious symlink to a root-owned file. To be exploitable, it requires that the malicious user is able to kill the nano run by root. The original reporters of the problem said this: We think it will mostly have an impact on multi-user systems. Where an admin might open a user's file -- for example to fix a broken config file. This could be in a user directory, requiring the admin to either become the user, or become root. If an admin does the latter, this attack can be performed - as long as the user can kill nano of course. One such example might be when root is logged in over `ssh` to a low-privilege user machine and the user can turn off the wifi on that machine. https://bugzilla.redhat.com/show_bug.cgi?id=2277586 https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5d… References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-5742 https://bugzilla.redhat.com/show_bug.cgi?id=2278574 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225797] Kaffeine cannot scan for channels any more and blocks long time when opened since Kernel update.
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225797 https://bugzilla.suse.com/show_bug.cgi?id=1225797#c3 --- Comment #3 from Stakanov Schufter <stakanov(a)disroot.org> --- (In reply to Jiri Slaby from comment #2) > Takashi has some old snapshots of kernels in his repo: > https://download.opensuse.org/repositories/home:/tiwai:/kernel:/ > > No 6.8 in there so far AFAICS, though... > > But 6.8 is still available in history: > http://download.opensuse.org/history/20240507/tumbleweed/repo/oss/x86_64/ I guess I am not good enough. The repo from Takashi does install but the installed kernel then does not boot (I did not really understand why, seems an UEFI issue). The other repo seems not existing any more. so I have the 6.7.9 installed but that one cannot boot and the 8.8 seems gone. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226173] New: virt-manager: Browse local does not work anymore
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226173 Bug ID: 1226173 Summary: virt-manager: Browse local does not work anymore Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: martin.jedamzik(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When trying to add a storage device with virt-manager via: --> Add Hardware --> Storage --> Select or create custom-storage --> Manage --> Browse Local nothing will happen. After starting : virt-manager --no-fork --debug one see's this error message: Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/storagebrowse.py", line 162, in _browse_clicked return self._browse_local() ^^^^^^^^^^^^^^^^^^^^ File "/usr/share/virt-manager/virtManager/storagebrowse.py", line 187, in _browse_local filename = self.err.browse_local( ^^^^^^^^^^^^^^^^^^^^^^ TypeError: vmmErrorDialog.browse_local() got an unexpected keyword argument 'choose_label' Commenting out "choose_label=data.choose_label" in /usr/share/virt-manager/virtManager/storagebrowse.py does solve the issue. However, I am unsure about possible drawbacks. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1226200] New: systemd fails to build in 2038
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226200 Bug ID: 1226200 Summary: systemd fails to build in 2038 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: systemd-maintainers(a)suse.de Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: Development Blocker: --- Steps to reproduce: osc co openSUSE:Factory/systemd && cd $_ osc build --noservice --vm-type=kvm \ --build-opt=--vm-custom-opt="-rtc base=2038-01-25T00:00:00" Actual results: Assertion 'os_release_support_ended("2037-12-31", false, NULL) == false' failed at src/test/test-os-util.c:125, function test_os_release_support_ended(). Aborting. -- You are receiving this mail because: You are on the CC list for the bug.

1 0