July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1224781] New: VUL-0: CVE-2024-35192: trivy: credential leak via malicious registry
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1224781 Bug ID: 1224781 Summary: VUL-0: CVE-2024-35192: trivy: credential leak via malicious registry Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/406773/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Trivy is a security scanner. Prior to 0.51.2, if a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry (ECR), Google Cloud Artifact/Container Registry, or Azure Container Registry (ACR). These tokens can then be used to push/pull images from those registries to which the identity/user running Trivy has access. Systems are not affected if the default credential provider chain is unable to obtain valid credentials. This vulnerability only applies when scanning container images directly from a registry. This vulnerability is fixed in 0.51.2. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35192 https://www.cve.org/CVERecord?id=CVE-2024-35192 https://github.com/aquasecurity/trivy/commit/e7f14f729de259551203f313e57d2d… https://github.com/aquasecurity/trivy/security/advisories/GHSA-xcq4-m2r3-cm… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1218309] New: systemd-detect-virt does not detect RISC-V QEMU
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1218309 Bug ID: 1218309 Summary: systemd-detect-virt does not detect RISC-V QEMU Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: RISC-V URL: https://openqa.opensuse.org/tests/3829768/modules/firs trun/steps/67 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: --- In a qemu-system-riscv64 -M virt,acpi=off -cpu rv64 VM, systemd-detect-virt returns "none". ## Observation openQA test in scenario opensuse-Tumbleweed-JeOS-for-RISCV-riscv64-jeos@riscv64_cpu_max fails in [firstrun](https://openqa.opensuse.org/tests/3829768/modules/firstrun/steps/… ## Test suite description Maintainer: fvogt, mnowak Start JeOS from the HDD image, configure it using the firstboot wizard and then run basic tests. console=tty0 added as needed for aarch64. ## Reproducible Fails since (at least) Build [20231220](https://openqa.opensuse.org/tests/3829768) (current job) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=riscv64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1222450] New: Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1222450 Bug ID: 1222450 Summary: Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: miika.alikirri(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874124 --> https://bugzilla.suse.com/attachment.cgi?id=874124&action=edit output of podman info On a fresh installation of tumbleweed (version 20240403), podman fails to run as a non-root user when `--memory` option is set. running: ``` podman run --rm --memory 4M tumbleweed echo it works ``` prints out: ``` Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found ``` And running it as sudo runs it correctly and prints: ``` it works ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1227580] New: yast2-services-manager fails to build with systemd v256
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227580 Bug ID: 1227580 Summary: yast2-services-manager fails to build with systemd v256 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: fbui(a)suse.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Hi, It seems that there's a regression in yast2-services-manager with the latest version of systemd (v256 submitted via sr#1186155). For more details please check the following link: https://build.opensuse.org/package/show/openSUSE:Factory:Staging:K/yast2-se… Could you have a look ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1224819] New: Please update Kicad to version 8.0
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1224819 Bug ID: 1224819 Summary: Please update Kicad to version 8.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: aaron.w2(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The included Kicad is stuck at version 6 where it is now at version 8. The version included in the engineering repository is broken (and stuck somewhere between 6 and 7. Note that Kicad 8 requires Python > 3.6, i.e. Python 3.11, with wxWidget and wxPython support for Python 3.11. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1227467] New: libSDL2_mixer-2_0-0-32bit missing
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227467 Bug ID: 1227467 Summary: libSDL2_mixer-2_0-0-32bit missing Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: asdhio(a)tuta.io QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0 Build Identifier: libSDL2_mixer-2_0-0-32bit is missing from default repos. It was available in Leap 15.5, but went missing in Leap 15.6 (and in addition, Tumbleweed). Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1219943] New: Certificate error while fetching from https://debuginfod.opensuse.org
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1219943 Bug ID: 1219943 Summary: Certificate error while fetching from https://debuginfod.opensuse.org Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: jimis(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Certificate error while fetching from https://debuginfod.opensuse.org Sorry about setting the component to "other" but I couldn't find a suitable one, I was searching for something like "infrastructure" or "administration". -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1223673] New: kubernetes update
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1223673 Bug ID: 1223673 Summary: kubernetes update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: jwittner(a)kabelmail.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- <html>Auflösung der Abhängigkeit fehlgeschlagen:<br/><br/>das zu installierende kubernetes1.30-client-1.30.0-1.1.x86_64 erfordert 'kubernetes1.30-client-common', aber diese Anforderung kann nicht bereitgestellt werden das installierte kubernetes-client-1.29.3-40.1.x86_64 erfordert 'kubernetes1.29-client = 1.29.3', aber diese Anforderung kann nicht bereitgestellt werden</html> -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1226661] New: About Installer Translation
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226661 Bug ID: 1226661 Summary: About Installer Translation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: physicianshield(a)gmail.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- There's a translation error in other languages, needs to fix -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1222934] New: rsvndump fails to build on Leap 15.6 - missing subversion libraries
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1222934 Bug ID: 1222934 Summary: rsvndump fails to build on Leap 15.6 - missing subversion libraries Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello package rsvndump fails to build on Leap 15.6 due to missing subversion libraries https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 28s] checking for svn_client_open_ra_session in -lsvn_client-1... no [ 28s] configure: error: Neccessary Subversion libraries are missing [ 28s] error: Bad exit status from /var/tmp/rpm-tmp.zq7Yz1 (%build) [ 28s] [ 28s] Could you please have a look? -- You are receiving this mail because: You are on the CC list for the bug.

1 3