August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208242] mozilla-nss-tools do not contain manpages
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1208242 https://bugzilla.suse.com/show_bug.cgi?id=1208242#c9 --- Comment #9 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-RU-2024:2707-1: An update that has four fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-ru-20242707-1 Category: recommended (moderate) Bug References: 1191546, 1207209, 1208242, 1208999 Maintenance Incident: [SUSE:Maintenance:28633](https://smelt.suse.de/incident/28633/) Sources used: Certifications Module 15-SP5 (src): mozilla-nss-3.79.4-150400.3.29.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228728] system marked as tainted: unmerged-bin
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228728 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |systemd-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228621] [Build 9.32] openSUSE agama live installer iso failed to boot for dracut report error and entered emergency mode
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228621 https://bugzilla.suse.com/show_bug.cgi?id=1228621#c11 Thomas Blume <thomas.blume(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast-internal(a)suse.de |thomas.blume(a)suse.com --- Comment #11 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Antonio Feijoo from comment #8) > Created attachment 876430 [details] > livenetroot.sh extracted from > agama-installer-openSUSE.s390x-9.0.0-openSUSE-Build9.34.iso/boot/s390x/initrd > > The following code is not shipped by dracut, compare it with > https://github.com/openSUSE/dracut/blob/SUSE/059/modules.d/90livenet/ > livenetroot.sh > > ``` > $ diff agama-initrd/sbin/livenetroot > ~/SUSE/059/modules.d/90livenet/livenetroot.sh > 18,28d17 > < let memsize=$(($(sed -n "s/MemTotal: *$[[:digit:]]*$.*/\1/p" > /proc/meminfo) / 1024)) > < let imgsize=$(($(curl -sI "$liveurl" | sed -n "s/Content-Length: > *$[[:digit:]]*$.*/\1/p") / (1024 * 1024))) > < > < if [ $((memsize - imgsize)) -lt 1024 ]; then > < sed -i 'N;/echo "$RDSOSREPORT"/s/echo$/echo\ > < echo Warning!!!\ > < echo The memory size of your system is too small for this live > image.\ > < echo Expect killed processes due to out of memory conditions.\ > < echo /' usr/bin/dracut-emergency > < emergency_shell > < fi > ``` > > I have no idea who/what is modifying livenetroot.sh... Thomas, since you've > worked with this in the past, have you added any patches to any installation > packages that modify the dracut code? Hm, that was indeed my approach for injecting a memory size check for livenetroot for the agama initrd that is build with kiwi. But, I don't remember that I submitted that anywhere. However, it's missing error handling for the case that curl cannot retrieve the Content-Length setting. I will work on it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228659] Snapshot 20240730 - unbootable after transactional-update dup
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228659 https://bugzilla.suse.com/show_bug.cgi?id=1228659#c32 --- Comment #32 from Alberto Planas Dominguez <aplanas(a)suse.com> --- (In reply to Andrei Borzenkov from comment #31) > No, they are not. What is wrong is systemd packaging. Either all components > of systemd that depend on libsystemd-shared-$VERSION.so must be updated > together with this library (i.e. - they must belong to the same package), or > libsystemd-shared-$VERSION.so has to be in a separate package which allows > concurrent installation of multiple versions, like every other shared > library used by multiple packages does. Sadly I lack knowledge about libsolv, but I would argue that this is not systemd packaging fault. The order in witch packages gets installed is decided by libsolv, that must guarantee that all those Requires(post) are present before the %post scriptlets gets launched. There is a parallel discussion here: https://bugzilla.suse.com/show_bug.cgi?id=1228759. My current mental model puts the issue in suse-module-tools and sdbootutil side, but I can be very wrong here too. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228659] Snapshot 20240730 - unbootable after transactional-update dup
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228659 https://bugzilla.suse.com/show_bug.cgi?id=1228659#c31 --- Comment #31 from Andrei Borzenkov <arvidjaar(a)gmail.com> --- (In reply to Richard Brown from comment #28) > > HYPOTHESIS - the dependencies of packages udev and the kernel are apparently > wrong, with udev being installed AFTER the kernel when it should be BEFORE. > No, they are not. What is wrong is systemd packaging. Either all components of systemd that depend on libsystemd-shared-$VERSION.so must be updated together with this library (i.e. - they must belong to the same package), or libsystemd-shared-$VERSION.so has to be in a separate package which allows concurrent installation of multiple versions, like every other shared library used by multiple packages does. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228777] VUL-0: CVE-2024-42458: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type.
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228777 https://bugzilla.suse.com/show_bug.cgi?id=1228777#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1228777) was mentioned in https://build.opensuse.org/request/show/1191110 Factory / neatvnc -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228731] AUDIT-0: aaa_base: sysctl.d/50-default.conf has new defaults and a new sysctl.d file
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228731 https://bugzilla.suse.com/show_bug.cgi?id=1228731#c5 --- Comment #5 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1228731) was mentioned in https://build.opensuse.org/request/show/1191104 Factory / rpmlint -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228223] The systemd-devel-32bit package is missing
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228223 https://bugzilla.suse.com/show_bug.cgi?id=1228223#c3 --- Comment #3 from Francois Gouget <fgouget(a)codeweavers.com> --- More precisely this prevents Wine developers from compiling Wine with support for libudev and thus 32-bit plug-and-play support. The missing parts are the /usr/lib/libudev.so symbolic link and the corresponding /usr/lib/pkgconfig/libudev.pc file. I thought there used to be a libudev-devel-32bit package but it looks like I'm wrong. Probably the standard operating procedure is to just manually create the symbolic link and copy the 64-bit .pc file to the 32-bit directory. But that's clearly not how it should work. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228777] New: VUL-0: CVE-2024-42458: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type.
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228777 Bug ID: 1228777 Summary: VUL-0: CVE-2024-42458: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/416161/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mvetter(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-42458 https://www.cve.org/CVERecord?id=CVE-2024-42458 https://github.com/any1/neatvnc/commit/cc71650a69abc2573a0d96d082409d246880… https://github.com/any1/neatvnc/compare/v0.8.0...v0.8.1 https://github.com/any1/neatvnc/releases/tag/v0.8.1 http://www.openwall.com/lists/oss-security/2024/08/02/1 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1227223] podman stats doesn't show the MEM USAGE in rootless containers
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227223 https://bugzilla.suse.com/show_bug.cgi?id=1227223#c5 Dan Čermák <dcermak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcermak(a)suse.com --- Comment #5 from Dan Čermák <dcermak(a)suse.com> --- (In reply to Walddys Emmanuel Dorrejo Céspedes from comment #4) > Hello, Have the same issue, and looks like nobody of openSUSE team is > following this. > > `memory.stat: no such file or directory` > > in the folder: /sys/fs/cgroup/ appear all cgroups > > but in folder: /sys/fs/cgroup/user.slice: it would not be added io and > memory. Which OS are you on and what's the systemd version that you are running? -- You are receiving this mail because: You are on the CC list for the bug.

1 0