June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226122] TW installation leaves /boot empty
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226122 https://bugzilla.suse.com/show_bug.cgi?id=1226122#c6 --- Comment #6 from Thorsten Kukuk <kukuk(a)suse.com> --- (In reply to Felix Miata from comment #5) > The installer needs to be adapted to receive input related to "not managed" > and what the results of kernel and dracut installation should include, such > as radio buttons or checkboxes for /boot/, /boot/efi/, neither, discrete > filesystem, etc. handled through /etc/alternatives or /etc/sysconfig. The installer does not copy the kernel or initrd into /boot, this are the bootloader scripts. Letting the installer do this wouldn't make any sense because you want to update this files with the next update, too. And if you have no bootloader, nothing is copying the kernel, because nothing which could do it get's installed. See my previous comment, the kernel must be in the location where the selected bootloader needs it, not in a random place. I'm afraid you need to create your own scripts for your bootloader, as that is not shipped with openSUSE. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222854] https subversion checkout fails
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222854 https://bugzilla.suse.com/show_bug.cgi?id=1222854#c7 --- Comment #7 from Jonathan Brady <jonathan.brady(a)denbridgemarine.com> --- Ok, not quite as far as I can go. After applying libserf-1-1-1.3.10-1.5.x86_64.rpm from Tumbleweed repo (and it's dependencies - libgdbm6-1.23-3.3.x86_64.rpm, libldap2-2.6.7-2.1.x86_64.rpm), subversion is now working for me. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222854] https subversion checkout fails
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222854 https://bugzilla.suse.com/show_bug.cgi?id=1222854#c6 --- Comment #6 from Jonathan Brady <jonathan.brady(a)denbridgemarine.com> --- Looking into this it appears that the first 5 bytes of the TLS connection are simply missing when using 15.6: On 15.5: writev(5, [{iov_base="\26\3\1\2\0\1\0\1\374\3\3j\231f\312\376_\20U\2\26\212\241\37\235\264\211\236\245F2,"..., iov_len=517}], 1) = 517 On 15.6: writev(4, [{iov_base="\1\0\1\374\3\3\10y\334\204\360\344\354l\26jd\211GTk\375a\327\213Z\223\31\300\213\267\321"..., iov_len=512}], 1) = 512 That is unfortunately as far as I can go in diagnosing this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226135] New: Nautilus fails to launch after a fresh upgrade to 15.6
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226135 Bug ID: 1226135 Summary: Nautilus fails to launch after a fresh upgrade to 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: seroton10(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- On a system running Leap 15.5, I used "zypper --releasever=15.6 dup" to upgrade it to Leap 15.6. The upgrade itself was successful. However, on the new GNOME 45.3 desktop, Nautilus consistently failed to launch. It turned out that the issue was caused by a missing package: typelib-1_0-Nautilus-4_0. For some reason, the upgrade didn't install it. The issue was fixed once I installed the package manually. I guess a dependency declaration is missing somewhere? -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1222854] https subversion checkout fails
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222854 https://bugzilla.suse.com/show_bug.cgi?id=1222854#c5 --- Comment #5 from Jonathan Brady <jonathan.brady(a)denbridgemarine.com> --- I set up a simple web server using: openssl s_server -key privkey.pem -cert fullchain.pem -accept 443 -www -msg When subversion from 15.5 connects I get: ACCEPT <<< ??? [length 0005] 16 03 01 02 00 <<< TLS 1.3, Handshake [length 0200], ClientHello ... When subversion from 15.6 connects I get: ACCEPT <<< ??? [length 0005] 01 00 01 fc 03 139678608217920:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:332: <<< ??? [length 0005] 01 00 01 fc 03 139678608217920:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:332: <<< ??? [length 0005] 01 00 01 fc 03 139678608217920:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:332: -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226122] TW installation leaves /boot empty
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226122 https://bugzilla.suse.com/show_bug.cgi?id=1226122#c4 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk(a)suse.com --- Comment #4 from Thorsten Kukuk <kukuk(a)suse.com> --- (In reply to Mario Guzman from comment #0) > At this point I can't get a new install working. Some people really need to > install without a boot manager, Opensuse and TW made it easy. I assume it's > not a design change since it would make no sense to leave /boot empty. It's a design change because if you need something in /boot and what depends on the selected bootloader. grub2 needs something in /boot, grub2-bls and systemd-boot need something in /boot/EFI and nothing in /boot. And if you use full disk encryption with TPM or FIDO2 key, a kernel in /boot will not help you at all, as the bootloader cannot decrypt /boot to read the kernel, so you need the kernel in /boot/EFI. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223373] VUL-0: CVE-2024-32879: python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223373 https://bugzilla.suse.com/show_bug.cgi?id=1223373#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1223373) was mentioned in https://build.opensuse.org/request/show/1179662 Factory / python-social-auth-app-django -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221211] /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC'
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1221211 https://bugzilla.suse.com/show_bug.cgi?id=1221211#c19 --- Comment #19 from Petr Gajdos <pgajdos(a)suse.com> --- (In reply to Maintenance Automation from comment #18) > openSUSE Leap 15.6 (src): > libserf-1.3.9-150600.18.3.2 > Basesystem Module 15-SP6 (src): > libserf-1.3.9-150600.18.3.2 The build with this libserf build version number or higher should succeed, however mine doesn't, still pick it: $ osc rbl home:pgajdos/thunar-plugin-vcs 15.6 x86_64 | grep libserf [ 9s] [349/415] cumulate libserf-1-1-1.3.9-150600.16.2 [ 9s] [378/415] cumulate libserf-devel-1.3.9-150600.16.2 [ 15s] libserf-1-1-1.3.9-150600.16.2 ######################################## [ 19s] libserf-devel-1.3.9-150600.16.2 ######################################## [ 39s] /usr/lib64/gcc/x86_64-suse-linux/7/../../../../x86_64-suse-linux/bin/ld: /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC' $ So let's wait a bit -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223373] New: VUL-0: CVE-2024-32879: python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223373 Bug ID: 1223373 Summary: VUL-0: CVE-2024-32879: python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/403106/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-32879 https://www.cve.org/CVERecord?id=CVE-2024-32879 https://github.com/python-social-auth/social-app-django/commit/31c3e0c7edb1… https://github.com/python-social-auth/social-app-django/pull/566 https://github.com/python-social-auth/social-app-django/security/advisories… https://bugzilla.redhat.com/show_bug.cgi?id=2277035 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1222854] https subversion checkout fails
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222854 https://bugzilla.suse.com/show_bug.cgi?id=1222854#c4 --- Comment #4 from Eric Bischoff <ebischoff(a)suse.com> --- I updated to libserf-1-1-1.3.9-150600.18.3.2.x86_64, it does not help. -- You are receiving this mail because: You are on the CC list for the bug.

1 0