July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1218458] New: zombie process "nvidia-settings" generated by the file .nvidia-settings-rc
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1218458 Bug ID: 1218458 Summary: zombie process "nvidia-settings" generated by the file .nvidia-settings-rc Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: H.H.Albert(a)web.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- .nvidia-settings-rc creates a zombie process on opensuse leap 15.5. If the .nvidia-settings-rc file is located in the $HOME directory of the user, the process table contains a zombie process. 16912 ? Z 0:00 [*nvidia*-settings] <defunct> Harware: *~ #* lspci | grep VGA 01:00.0 *VGA* compatible controller: NVIDIA Corporation TU116 [GeForce GTX 1660 Ti] (rev a1) *~ #* lscpu | grep Arch Architecture: x86_64 *~ #* hwinfo --gfxcard | grep Model *Model*: "nVidia TU116 [GeForce GTX 1660 Ti]" *~ #* hwinfo --arch Arch: X86_64/grub Desktop Environment KDE Plasma Version: 5.27.9 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 Kernel Version: 5.14.21-150500.55.39-default (64-bit) Graphics Platform: X11 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1227304] New: open build service raises 'Failed build dependencies' when new BuildRequires tag added during build runtime
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227304 Bug ID: 1227304 Summary: open build service raises 'Failed build dependencies' when new BuildRequires tag added during build runtime Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: fijik19(a)gmail.com QA Contact: adrian.schroeter(a)suse.com Target Milestone: --- Found By: --- Blocker: --- When i added code to _service, which formats .spec file adding BuildRequires tags at buildtime, futher build failes with 'Failed build dependencies', instead of installing these build dependencies -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1227309] New: VUL-0: CVE-2024-37298: distrobuilder: gorilla/schema: potential memory exhaustion due to sparse slice deserialization
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227309 Bug ID: 1227309 Summary: VUL-0: CVE-2024-37298: distrobuilder: gorilla/schema: potential memory exhaustion due to sparse slice deserialization Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/412571/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: containers-bugowner(a)suse.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-37298 https://www.cve.org/CVERecord?id=CVE-2024-37298 https://github.com/gorilla/schema/blob/main/decoder.go#L223 https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a80… https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3 https://bugzilla.redhat.com/show_bug.cgi?id=2295010 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1223989] New: Please update out-of-date cyrus IMAP
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1223989 Bug ID: 1223989 Summary: Please update out-of-date cyrus IMAP Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: aaron.w2(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Currently, it looks like Cyrus IMAP is stuck on version 2.4. The current stable version is 3.10. Version 2.4 is left over from when development was done at CMU, which has not been the case for quite a while. Is it possible to offer version 3.10? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1226157] New: sssd: missing /etc/sssd/sssd.conf
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1226157 Bug ID: 1226157 Summary: sssd: missing /etc/sssd/sssd.conf Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: gcomes.obs(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I use sssd. I normally edit /etc/sssd/sssd.conf in order to configure the package. In Leap 15.6 such file does not exist. I found in the packages sssd the file /usr/lib64/sssd/conf/sssd.conf and, for testing, I made my changes there. When I started sssd.service it didn't start. The presence of /etc/sssd/sssd.conf is required for the service to run although I didn't find any reference in /usr/share/doc/packages/sssd to the fact that the user is now required to create /etc/sssd/sssd.conf from scratch. I then made a copy of /usr/lib64/sssd/conf/sssd.conf to /etc/sssd/sssd.conf and changed it. When I started sssd.service it didn't start. The file /etc/sssd/sssd.conf can be readable only by root, but the file /usr/lib64/sssd/conf/sssd.conf did not have such permission and when I made the copy, /etc/sssd/sssd.conf was world readable as well. After changing the permission of /etc/sssd/sssd.conf I was finally able to start sssd.service. Please does not make such disruptive changes without giving the user indication about what it is required to do (that was not required before) before the program can be used. I suggest to put back /etc/sssd/sssd.conf with proper permission containing only commented lines explaining what and why the changes were made and what the user is supposed to do now. In this way may be other users will not go through the painful trial and error process as I did, before being able to use sssd in Leap 15.6. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1227307] New: nodejs-electron: constexpr _Tp& std::_Optional_base_impl<_Tp, _Dp>::_M_get() [with _Tp = content::DocumentAssociatedData; _Dp = std::_Optional_base<content::DocumentAssociatedData, false, false>]: Assertion 'this->_M_is_engaged()' failed.
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227307 Bug ID: 1227307 Summary: nodejs-electron: constexpr _Tp& std::_Optional_base_impl<_Tp, _Dp>::_M_get() [with _Tp = content::DocumentAssociatedData; _Dp = std::_Optional_base<content::DocumentAssociatedData, false, false>]: Assertion 'this->_M_is_engaged()' failed. Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: Fedora Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: screening-team-bugs(a)suse.de Reporter: brunopitrus(a)hotmail.com QA Contact: screening-team-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Found when running vscode tests on OBS on Fedora 40: https://build.opensuse.org/package/live_build_log/home:dziobian:gulgul-ultr… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1227266] New: System crashes under graphics load after upgrading to Leap 16.6 when using Xen
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227266 Bug ID: 1227266 Summary: System crashes under graphics load after upgrading to Leap 16.6 when using Xen Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: Manfred.Haertel(a)rz-online.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I upgraded an older Laptop to Leap 15.6. When using Xen, the system crashes when there is some graphics load, e.g. when starting KDE plasma or when starting Firefox under ICEwm. The system runs normally when I do NOT use Xen. So I guess it is some problem in the graphics driver (i915), which probably detects something incorrectly when using Xen. Here is the Output of "dmesg -T -w" when the problem occurs (note the i915_* functions on the stack): [Sa, 29. Jun 2024, 06:03:05] BUG: kernel NULL pointer dereference, address: 0000000000000000 [Sa, 29. Jun 2024, 06:03:05] #PF: supervisor read access in kernel mode [Sa, 29. Jun 2024, 06:03:05] #PF: error_code(0x0000) - not-present page [Sa, 29. Jun 2024, 06:03:05] PGD 0 P4D 0 [Sa, 29. Jun 2024, 06:03:05] Oops: 0000 [#1] PREEMPT SMP NOPTI [Sa, 29. Jun 2024, 06:03:05] CPU: 3 PID: 2930 Comm: plasmashell Tainted: P OE n 6.4.0-150600.23.7-default #1 SLE15-SP6 128952646fcb1614c051ed5f88ec9aef64f90f32 [Sa, 29. Jun 2024, 06:03:05] Hardware name: Hewlett-Packard HP EliteBook 2570p/17DF, BIOS 68ISB Ver. F.44 10/08/2013 [Sa, 29. Jun 2024, 06:03:05] RIP: e030:get_page_from_freelist+0xebf/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] Code: 8b 40 18 48 39 44 24 30 49 8d 3c 17 48 89 7c 24 68 0f 84 d1 01 00 00 48 8b 44 24 28 48 be 00 01 00 00 00 00 ad de 48 8b 40 18 <48> 8b 08 48 8b 50 08 48 8d 78 f8 48 89 51 08 48 89 0a 48 89 30 48 [Sa, 29. Jun 2024, 06:03:05] RSP: e02b:ffffc90041c37698 EFLAGS: 00010086 [Sa, 29. Jun 2024, 06:03:05] RAX: 0000000000000000 RBX: 000000000000064a RCX: ffff888070d62790 [Sa, 29. Jun 2024, 06:03:05] RDX: 00000000000001f0 RSI: dead000000000100 RDI: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] RBP: 0000000000000eaa R08: 0000000000000000 R09: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] R10: ffffea00017d7e08 R11: 000000000000064a R12: 0000000000000002 [Sa, 29. Jun 2024, 06:03:05] R13: ffff888070d626c0 R14: 0000000000000002 R15: ffff888070d626c0 [Sa, 29. Jun 2024, 06:03:05] FS: 00007fc2eca0ca00(0000) GS:ffff888067b80000(0000) knlGS:0000000000000000 [Sa, 29. Jun 2024, 06:03:05] CS: 10000e030 DS: 0000 ES: 0000 CR0: 0000000080050033 [Sa, 29. Jun 2024, 06:03:05] CR2: 0000000000000000 CR3: 0000000037b8c000 CR4: 0000000000050660 [Sa, 29. Jun 2024, 06:03:05] Call Trace: [Sa, 29. Jun 2024, 06:03:05] <TASK> [Sa, 29. Jun 2024, 06:03:05] ? __die_body+0x1a/0x60 [Sa, 29. Jun 2024, 06:03:05] ? page_fault_oops+0x131/0x510 [Sa, 29. Jun 2024, 06:03:05] ? fixup_exception+0x22/0x310 [Sa, 29. Jun 2024, 06:03:05] ? exc_page_fault+0x69/0x150 [Sa, 29. Jun 2024, 06:03:05] ? asm_exc_page_fault+0x22/0x30 [Sa, 29. Jun 2024, 06:03:05] ? get_page_from_freelist+0xebf/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] ? get_page_from_freelist+0x417/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] __alloc_pages+0x18b/0x350 [Sa, 29. Jun 2024, 06:03:05] new_slab+0x40a/0x5b0 [Sa, 29. Jun 2024, 06:03:05] ___slab_alloc+0x306/0x970 [Sa, 29. Jun 2024, 06:03:05] ? xas_alloc+0x9f/0xc0 [Sa, 29. Jun 2024, 06:03:05] ? __alloc_pages+0x18b/0x350 [Sa, 29. Jun 2024, 06:03:05] __slab_alloc.isra.77+0x22/0x40 [Sa, 29. Jun 2024, 06:03:05] kmem_cache_alloc_lru+0x373/0x410 [Sa, 29. Jun 2024, 06:03:05] ? xas_alloc+0x9f/0xc0 [Sa, 29. Jun 2024, 06:03:05] ? vma_alloc_folio+0x9b/0x340 [Sa, 29. Jun 2024, 06:03:05] xas_alloc+0x9f/0xc0 [Sa, 29. Jun 2024, 06:03:05] xas_create+0xd5/0x3a0 [Sa, 29. Jun 2024, 06:03:05] xas_store+0x56/0x5b0 [Sa, 29. Jun 2024, 06:03:05] ? charge_memcg+0x67/0x90 [Sa, 29. Jun 2024, 06:03:05] shmem_add_to_page_cache+0x1ad/0x300 [Sa, 29. Jun 2024, 06:03:05] shmem_get_folio_gfp+0x2b4/0x760 [Sa, 29. Jun 2024, 06:03:05] shmem_read_folio_gfp+0x45/0x80 [Sa, 29. Jun 2024, 06:03:05] shmem_read_mapping_page_gfp+0x11/0x80 [Sa, 29. Jun 2024, 06:03:05] shmem_sg_alloc_table+0xe2/0x290 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] ? i915_gem_object_set_to_cpu_domain+0x10/0x90 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] shmem_get_pages+0xa8/0x340 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] ? i915_gem_object_set_to_cpu_domain+0x10/0x90 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] __i915_gem_object_get_pages+0x34/0x40 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] i915_gem_set_domain_ioctl+0x2b7/0x360 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] ? __pfx_i915_gem_set_domain_ioctl+0x10/0x10 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] drm_ioctl_kernel+0xc2/0x150 [Sa, 29. Jun 2024, 06:03:05] drm_ioctl+0x38d/0x480 [Sa, 29. Jun 2024, 06:03:05] ? __pfx_i915_gem_set_domain_ioctl+0x10/0x10 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] ? __pfx_i915_gem_create_ioctl+0x10/0x10 [i915 501e899d3c73e340c963df906f8a8aecd8bc989a] [Sa, 29. Jun 2024, 06:03:05] __x64_sys_ioctl+0x92/0xd0 [Sa, 29. Jun 2024, 06:03:05] ? count_memcg_event_mm+0x47/0x60 [Sa, 29. Jun 2024, 06:03:05] do_syscall_64+0x5b/0x80 [Sa, 29. Jun 2024, 06:03:05] ? __x64_sys_ioctl+0xae/0xd0 [Sa, 29. Jun 2024, 06:03:05] ? syscall_exit_to_user_mode+0x1e/0x40 [Sa, 29. Jun 2024, 06:03:05] ? do_syscall_64+0x67/0x80 [Sa, 29. Jun 2024, 06:03:05] ? exc_page_fault+0x6e/0x150 [Sa, 29. Jun 2024, 06:03:05] entry_SYSCALL_64_after_hwframe+0x7c/0xe6 [Sa, 29. Jun 2024, 06:03:05] RIP: 0033:0x7fc2ed529f9b [Sa, 29. Jun 2024, 06:03:05] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [Sa, 29. Jun 2024, 06:03:05] RSP: 002b:00007fffd3485310 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [Sa, 29. Jun 2024, 06:03:05] RAX: ffffffffffffffda RBX: 00007fffd34853c0 RCX: 00007fc2ed529f9b [Sa, 29. Jun 2024, 06:03:05] RDX: 00007fffd34853b4 RSI: 00000000400c645f RDI: 000000000000000b [Sa, 29. Jun 2024, 06:03:05] RBP: 000055746d7f8bd0 R08: 00000000000000b0 R09: 00007fc2ed5ffb20 [Sa, 29. Jun 2024, 06:03:05] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000800 [Sa, 29. Jun 2024, 06:03:05] R13: 00007fffd34853b4 R14: 000000000000000b R15: 000055746b22d520 [Sa, 29. Jun 2024, 06:03:05] </TASK> [Sa, 29. Jun 2024, 06:03:05] Modules linked in: rfcomm xt_LOG nf_log_syslog xt_limit xt_comment b43legacy(n) b43(n) cordic bcma(n) mac80211 libarc4 ssb af_packet xt_pkttype xt_tcpudp ip6t_REJECT nf_reject_ipv6 ipt_REJECT nf_reject_ipv4 xen_gntdev xen_gntalloc iptable_filter bpfilter ip6table_mangle nf_conntrack_netbios_ns nf_conntrack_broadcast xen_evtchn qrtr(n) xen_netback snd_seq snd_seq_device xt_conntrack nf_conntrack xen_blkback snd_pcm_oss nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c cmac snd_mixer_oss ip6table_filter algif_hash ip6_tables xen_pciback algif_skcipher af_alg bnep xen_acpi_processor binfmt_misc intel_rapl_msr iTCO_wdt intel_pmc_bxt iTCO_vendor_support mei_wdt mei_pxp btusb wl(POEn) mei_hdcp(n) btrtl btintel snd_hda_codec_hdmi btbcm btmtk bluetooth snd_ctl_led ledtrig_audio snd_hda_codec_idt snd_hda_codec_generic intel_rapl_common cdc_mbim snd_hda_intel pcspkr cdc_ncm snd_intel_dspcfg snd_intel_sdw_acpi cdc_ether ecdh_generic snd_hda_codec hp_wmi snd_hda_core usbnet snd_hwdep sparse_keymap mii cdc_wdm cdc_acm [Sa, 29. Jun 2024, 06:03:05] platform_profile snd_pcm wmi_bmof cfg80211 snd_timer rfkill snd lpc_ich mfd_core soundcore e1000e mei_me mei thermal tpm_infineon tiny_power_button(n) hp_accel lis3lv02d ac wireless_hotkey button joydev fuse configfs xenfs xen_privcmd dmi_sysfs ip_tables x_tables ext4 crc16 mbcache jbd2 sr_mod cdrom crc32_pclmul crc32c_intel polyval_clmulni(n) polyval_generic(n) gf128mul ahci libahci libata ghash_clmulni_intel sha512_ssse3 sd_mod sha256_ssse3 scsi_dh_emc sha1_ssse3 i915 scsi_dh_rdac scsi_dh_alua t10_pi crc64_rocksoft_generic crc64_rocksoft sg sdhci_pci i2c_algo_bit drm_buddy ttm xhci_pci xhci_pci_renesas crc64 drm_display_helper cqhci aesni_intel crypto_simd ehci_pci xhci_hcd ehci_hcd scsi_mod sdhci cryptd video usbcore mmc_core cec rc_core wmi battery serio_raw msr [Sa, 29. Jun 2024, 06:03:05] Supported: No, Proprietary modules are loaded [Sa, 29. Jun 2024, 06:03:05] CR2: 0000000000000000 [Sa, 29. Jun 2024, 06:03:05] ---[ end trace 0000000000000000 ]--- [Sa, 29. Jun 2024, 06:03:05] RIP: e030:get_page_from_freelist+0xebf/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] Code: 8b 40 18 48 39 44 24 30 49 8d 3c 17 48 89 7c 24 68 0f 84 d1 01 00 00 48 8b 44 24 28 48 be 00 01 00 00 00 00 ad de 48 8b 40 18 <48> 8b 08 48 8b 50 08 48 8d 78 f8 48 89 51 08 48 89 0a 48 89 30 48 [Sa, 29. Jun 2024, 06:03:05] RSP: e02b:ffffc90041c37698 EFLAGS: 00010086 [Sa, 29. Jun 2024, 06:03:05] RAX: 0000000000000000 RBX: 000000000000064a RCX: ffff888070d62790 [Sa, 29. Jun 2024, 06:03:05] RDX: 00000000000001f0 RSI: dead000000000100 RDI: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] RBP: 0000000000000eaa R08: 0000000000000000 R09: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] R10: ffffea00017d7e08 R11: 000000000000064a R12: 0000000000000002 [Sa, 29. Jun 2024, 06:03:05] R13: ffff888070d626c0 R14: 0000000000000002 R15: ffff888070d626c0 [Sa, 29. Jun 2024, 06:03:05] FS: 00007fc2eca0ca00(0000) GS:ffff888067b80000(0000) knlGS:0000000000000000 [Sa, 29. Jun 2024, 06:03:05] CS: 10000e030 DS: 0000 ES: 0000 CR0: 0000000080050033 [Sa, 29. Jun 2024, 06:03:05] CR2: 0000000000000000 CR3: 0000000037b8c000 CR4: 0000000000050660 [Sa, 29. Jun 2024, 06:03:05] note: plasmashell[2930] exited with irqs disabled [Sa, 29. Jun 2024, 06:03:05] note: plasmashell[2930] exited with preempt_count 3 [Sa, 29. Jun 2024, 06:03:05] general protection fault, maybe for address 0x0: 0000 [#2] PREEMPT SMP NOPTI [Sa, 29. Jun 2024, 06:03:05] CPU: 3 PID: 558 Comm: systemd-journal Tainted: P D OE n 6.4.0-150600.23.7-default #1 SLE15-SP6 128952646fcb1614c051ed5f88ec9aef64f90f32 [Sa, 29. Jun 2024, 06:03:05] Hardware name: Hewlett-Packard HP EliteBook 2570p/17DF, BIOS 68ISB Ver. F.44 10/08/2013 [Sa, 29. Jun 2024, 06:03:05] RIP: e030:clear_page_erms+0x7/0x10 [Sa, 29. Jun 2024, 06:03:05] Code: 48 89 47 38 48 8d 7f 40 75 d9 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [Sa, 29. Jun 2024, 06:03:05] RSP: e02b:ffffc900405e3a60 EFLAGS: 00010246 [Sa, 29. Jun 2024, 06:03:05] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000001000 [Sa, 29. Jun 2024, 06:03:05] RDX: ffff888067bbccf0 RSI: ffff888067bbcd30 RDI: ffe72899eef33000 [Sa, 29. Jun 2024, 06:03:05] RBP: 0000000000000901 R08: 000000000000001e R09: ffffffffffffffff [Sa, 29. Jun 2024, 06:03:05] R10: fffffffffffffff0 R11: 0000000000000001 R12: ffff888067bbccf0 [Sa, 29. Jun 2024, 06:03:05] R13: 0000000000000000 R14: 0000000000002dc2 R15: 0000000000000001 [Sa, 29. Jun 2024, 06:03:05] FS: 00007f9180c1b3c0(0000) GS:ffff888067b80000(0000) knlGS:0000000000000000 [Sa, 29. Jun 2024, 06:03:05] CS: e030 DS: 0000 ES: 0000 CR0: 0000000080050033 [Sa, 29. Jun 2024, 06:03:05] CR2: 00007f917c5fedb8 CR3: 000000000bc18000 CR4: 0000000000050660 [Sa, 29. Jun 2024, 06:03:05] Call Trace: [Sa, 29. Jun 2024, 06:03:05] <TASK> [Sa, 29. Jun 2024, 06:03:05] ? __die_body+0x1a/0x60 [Sa, 29. Jun 2024, 06:03:05] ? die_addr+0x38/0x60 [Sa, 29. Jun 2024, 06:03:05] ? exc_general_protection+0x154/0x380 [Sa, 29. Jun 2024, 06:03:05] ? asm_exc_general_protection+0x22/0x30 [Sa, 29. Jun 2024, 06:03:05] ? clear_page_erms+0x7/0x10 [Sa, 29. Jun 2024, 06:03:05] prep_new_page+0x193/0x1b0 [Sa, 29. Jun 2024, 06:03:05] get_page_from_freelist+0x6ce/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] __alloc_pages+0x18b/0x350 [Sa, 29. Jun 2024, 06:03:05] __vmalloc_node_range+0x504/0x850 [Sa, 29. Jun 2024, 06:03:05] ? kernel_clone+0x9b/0x3d0 [Sa, 29. Jun 2024, 06:03:05] ? xen_pv_evtchn_do_upcall+0xc/0xa0 [Sa, 29. Jun 2024, 06:03:05] copy_process+0x659/0x1c30 [Sa, 29. Jun 2024, 06:03:05] ? kernel_clone+0x9b/0x3d0 [Sa, 29. Jun 2024, 06:03:05] kernel_clone+0x9b/0x3d0 [Sa, 29. Jun 2024, 06:03:05] __do_sys_clone+0x66/0x90 [Sa, 29. Jun 2024, 06:03:05] do_syscall_64+0x5b/0x80 [Sa, 29. Jun 2024, 06:03:05] ? exc_page_fault+0x6e/0x150 [Sa, 29. Jun 2024, 06:03:05] entry_SYSCALL_64_after_hwframe+0x7c/0xe6 [Sa, 29. Jun 2024, 06:03:05] RIP: 0033:0x7f9180b2e8e2 [Sa, 29. Jun 2024, 06:03:05] Code: 85 ff 74 3e 48 83 e6 f0 74 38 48 89 4e f8 48 83 ee 10 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [Sa, 29. Jun 2024, 06:03:05] RSP: 002b:00007ffd877bc3e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [Sa, 29. Jun 2024, 06:03:05] RAX: ffffffffffffffda RBX: 00007f9180aa735e RCX: 00007f9180b2e8e2 [Sa, 29. Jun 2024, 06:03:05] RDX: 00007f917c5ff990 RSI: 00007f917c5fedb0 RDI: 00000000003d0f00 [Sa, 29. Jun 2024, 06:03:05] RBP: 00007f917c5ff6c0 R08: 00007f917c5ff6c0 R09: 00007f917c5ff6c0 [Sa, 29. Jun 2024, 06:03:05] R10: 00007f917c5ff990 R11: 0000000000000202 R12: fffffffffffffda0 [Sa, 29. Jun 2024, 06:03:05] R13: 0000000000000000 R14: 00007ffd877bc440 R15: 00007f917bdff000 [Sa, 29. Jun 2024, 06:03:05] </TASK> [Sa, 29. Jun 2024, 06:03:05] Modules linked in: rfcomm xt_LOG nf_log_syslog xt_limit xt_comment b43legacy(n) b43(n) cordic bcma(n) mac80211 libarc4 ssb af_packet xt_pkttype xt_tcpudp ip6t_REJECT nf_reject_ipv6 ipt_REJECT nf_reject_ipv4 xen_gntdev xen_gntalloc iptable_filter bpfilter ip6table_mangle nf_conntrack_netbios_ns nf_conntrack_broadcast xen_evtchn qrtr(n) xen_netback snd_seq snd_seq_device xt_conntrack nf_conntrack xen_blkback snd_pcm_oss nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c cmac snd_mixer_oss ip6table_filter algif_hash ip6_tables xen_pciback algif_skcipher af_alg bnep xen_acpi_processor binfmt_misc intel_rapl_msr iTCO_wdt intel_pmc_bxt iTCO_vendor_support mei_wdt mei_pxp btusb wl(POEn) mei_hdcp(n) btrtl btintel snd_hda_codec_hdmi btbcm btmtk bluetooth snd_ctl_led ledtrig_audio snd_hda_codec_idt snd_hda_codec_generic intel_rapl_common cdc_mbim snd_hda_intel pcspkr cdc_ncm snd_intel_dspcfg snd_intel_sdw_acpi cdc_ether ecdh_generic snd_hda_codec hp_wmi snd_hda_core usbnet snd_hwdep sparse_keymap mii cdc_wdm cdc_acm [Sa, 29. Jun 2024, 06:03:05] platform_profile snd_pcm wmi_bmof cfg80211 snd_timer rfkill snd lpc_ich mfd_core soundcore e1000e mei_me mei thermal tpm_infineon tiny_power_button(n) hp_accel lis3lv02d ac wireless_hotkey button joydev fuse configfs xenfs xen_privcmd dmi_sysfs ip_tables x_tables ext4 crc16 mbcache jbd2 sr_mod cdrom crc32_pclmul crc32c_intel polyval_clmulni(n) polyval_generic(n) gf128mul ahci libahci libata ghash_clmulni_intel sha512_ssse3 sd_mod sha256_ssse3 scsi_dh_emc sha1_ssse3 i915 scsi_dh_rdac scsi_dh_alua t10_pi crc64_rocksoft_generic crc64_rocksoft sg sdhci_pci i2c_algo_bit drm_buddy ttm xhci_pci xhci_pci_renesas crc64 drm_display_helper cqhci aesni_intel crypto_simd ehci_pci xhci_hcd ehci_hcd scsi_mod sdhci cryptd video usbcore mmc_core cec rc_core wmi battery serio_raw msr [Sa, 29. Jun 2024, 06:03:05] Supported: No, Proprietary modules are loaded [Sa, 29. Jun 2024, 06:03:05] ---[ end trace 0000000000000000 ]--- [Sa, 29. Jun 2024, 06:03:05] RIP: e030:get_page_from_freelist+0xebf/0x1fd0 [Sa, 29. Jun 2024, 06:03:05] Code: 8b 40 18 48 39 44 24 30 49 8d 3c 17 48 89 7c 24 68 0f 84 d1 01 00 00 48 8b 44 24 28 48 be 00 01 00 00 00 00 ad de 48 8b 40 18 <48> 8b 08 48 8b 50 08 48 8d 78 f8 48 89 51 08 48 89 0a 48 89 30 48 [Sa, 29. Jun 2024, 06:03:05] RSP: e02b:ffffc90041c37698 EFLAGS: 00010086 [Sa, 29. Jun 2024, 06:03:05] RAX: 0000000000000000 RBX: 000000000000064a RCX: ffff888070d62790 [Sa, 29. Jun 2024, 06:03:05] RDX: 00000000000001f0 RSI: dead000000000100 RDI: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] RBP: 0000000000000eaa R08: 0000000000000000 R09: ffff888070d628b0 [Sa, 29. Jun 2024, 06:03:05] R10: ffffea00017d7e08 R11: 000000000000064a R12: 0000000000000002 [Sa, 29. Jun 2024, 06:03:05] R13: ffff888070d626c0 R14: 0000000000000002 R15: ffff888070d626c0 [Sa, 29. Jun 2024, 06:03:05] FS: 00007f9180c1b3c0(0000) GS:ffff888067b80000(0000) knlGS:0000000000000000 [Sa, 29. Jun 2024, 06:03:05] CS: 10000e030 DS: 0000 ES: 0000 CR0: 0000000080050033 [Sa, 29. Jun 2024, 06:03:05] CR2: 00007f917c5fedb8 CR3: 000000000bc18000 CR4: 0000000000050660 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1214373] Network installer image's "Loading Installation System" does atrocious job at loading it for me
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1214373 https://bugzilla.suse.com/show_bug.cgi?id=1214373#c5 --- Comment #5 from ell1e <el(a)horse64.org> --- That sounds promising, I'm curious if that one will cover this use case better. I'm hoping you're not dropping the network installer altogether, it is useful. I'd be interested in testing once a new network installer is available. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227305] New: VUL-0: CVE-2024-38519: yt-dlp: improper file extension limitations lead to to arbitrary filenames being created in the download folder
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227305 Bug ID: 1227305 Summary: VUL-0: CVE-2024-38519: yt-dlp: improper file extension limitations lead to to arbitrary filenames being created in the download folder Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/412693/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- `yt-dlp` is a command-line audio/video downloader. Prior to version 2024.07.01, `yt-dlp` does not limit the extensions of downloaded files, which could lead to aribitrary filenames being created in the download folder (and path traversal on Windows). Since `yt-dlp` also reads config from the working directory (and on Windows executables will be executed from the yt-dlp directory) this could lead to arbitrary code being executed. `yt-dlp` version 2024.07.01 fixes this issue by whitelisting the allowed extensions. This might mean some very uncommon extensions might not get downloaded, however it will also limit the possible exploitation surface. In addition to upgrading, have `.%(ext)s` at the end of the output template and make sure the user trusts the websites that they are downloading from. Also, make sure to never download to a directory within PATH or other sensitive locations like one's user directory, `system32`, or other binaries locations. For users who are not able to upgrade, keep the default output template (`-o "%(title)s [%(id)s].%(ext)s`); make sure the extension of the media to download is a common video/audio/sub/... one; try to avoid the generic extractor; and/or use `--ignore-config --config-location ...` to not load config from common locations. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38519 https://www.cve.org/CVERecord?id=CVE-2024-38519 https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090c… https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01 https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1226676] Installation: kdump reports an error if systemd-boot has been selected for bootloader
by bugzilla_noreply＠suse.com 02 Jul '24

02 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1226676 https://bugzilla.suse.com/show_bug.cgi?id=1226676#c6 Jiri Bohac <jbohac(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #6 from Jiri Bohac <jbohac(a)suse.com> --- (In reply to Stefan Hundhammer from comment #3) > AFAICS /etc/sysconfig/kdump is generated with some fillup-template. In this > case, obviously this does not work. "obviously" meaning you understand why? Or you just see it didn't? :) Because I don't understand why it does not work. > So the first thing to do would be to > ensure that there is ALWAYS an /etc/sysconfig/kdump if the kdump package > needs it so desperately. It doesn't need it. If it does not exist, it still works, using default values. The error message "/usr/lib/kdump/kdump-read-config.sh: line 144: /etc/sysconfig/kdump: No such file or directory" is misleading and I just fixed it: https://github.com/openSUSE/kdump/commit/0d1cd2c6b21f875d6ad9c6a97df20ff946… The real problem is the other error message: "Kernel not found." By deafult kdump expects a /boot/vmlinuz symlink to exist, seems to not be the case here... investigating why. -- You are receiving this mail because: You are on the CC list for the bug.

1 0