January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1235709] New: Illegal Instruction in node22 when running virtual machine in qemu-system-s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235709 Bug ID: 1235709 Summary: Illegal Instruction in node22 when running virtual machine in qemu-system-s390x Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: S/390-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KVM Assignee: kvm-bugs(a)suse.de Reporter: azouhr(a)opensuse.org QA Contact: qa-bugs(a)suse.de CC: ada.lovelace(a)gmx.de, marcela.maslanova(a)suse.com Target Milestone: --- Found By: Community User Blocker: --- Created attachment 879555 --> https://bugzilla.suse.com/attachment.cgi?id=879555&action=edit coredump of yarn install --offline --force When trying to run a local qemu build of portainer, the build fails during the run of yarn install --offline --force. This is caused by an illegal instruction, that obviously works fine on real hardware. [ 529.763852] [ T1245] User process fault: interruption code 0001 ilc:1 in node22[1e5edec,2aa21100000+3ba0000] [ 529.766979] [ T1245] CPU: 3 UID: 0 PID: 1245 Comm: node22 Not tainted 6.12.8-2-default #1 openSUSE Tumbleweed 083d7f231fbcde5f6a80c247220bbc54b9c3b34d [ 529.767345] [ T1245] Hardware name: QEMU 8561 QEMU (KVM/Linux) [ 529.767463] [ T1245] User PSW : 0705000180000000 000002aa22f5edec [ 529.767574] [ T1245] R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:1 AS:0 CC:0 PM:0 RI:0 EA:3 [ 529.767637] [ T1245] User GPRS: 0000000000000001 000002aa24d45124 0000000000000000 000003ff00000000 [ 529.767675] [ T1245] 000003ff80aea7d3 000003ff80ae7f18 000003ffe32f2870 000003ffe32f2bf8 [ 529.767706] [ T1245] 00000000decade11 000003ff80aea910 000002aa2413f1d0 000003ffe32f2730 [ 529.767736] [ T1245] 000002aa22177750 0000000000000000 000002aa22f53f22 000003ffe32f2730 [ 529.768384] [ T1245] User Code:>000002aa22f5edec: c0e5ff64d142 brasl %r14,000002aa21bf9070 000002aa22f5edf2: 0707 bcr 0,%r7 000002aa22f5edf4: 0707 bcr 0,%r7 000002aa22f5edf6: 0707 bcr 0,%r7 000002aa22f5edf8: b3c1000b ldgr %f0,%r11 000002aa22f5edfc: b90400bf lgr %r11,%r15 000002aa22f5ee00: 0001 unknown 000002aa22f5ee02: b3cd00b0 lgdr %r11,%f0 [ 529.768678] [ T1245] Last Breaking-Event-Address: [ 529.768759] [ T1245] [<000002aa22f5edd4>] node22[1e5edd4,2aa21100000+3ba0000] Im running the testbuild of the package home:azouhr:playground/portainer with the command osc build -vm-type qemu openSUSE_Tumbleweed_zSystems s390x This happens with the cpu set to -cpu qemu as well as -cpu max (changed in /usr/lib/build/build-vm-qemu). I'll also add the generated coredump, altough I don't know if that helps at all. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1236217] New: go1.24 release tracking
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236217 Bug ID: 1236217 Summary: go1.24 release tracking Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: jkowalczyk(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- go1.24 (expected February 2025) is a major release of Go. Minor releases of go1.24.x will be provided through February 2026. This issue tracks go1.24.x releases packaged and submitted initially to openSUSE:Factory and can be referenced in submissions to additional repositories. Go Release Cycle https://github.com/golang/go/wiki/Go-Release-Cycle Go Release history https://golang.org/doc/devel/release.html -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1236153] VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in Easy-RSA
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236153 Vadim Krevs <vkrevs(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|vkrevs(a)yahoo.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236153] VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in Easy-RSA
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236153 Vadim Krevs <vkrevs(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |vkrevs(a)yahoo.com Hardware|Other |x86-64 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236215] New: Multiple core files in /tmp after Ctrl-Alt-F1+init 3 after upgrade to plasma 6.3 beta
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236215 Bug ID: 1236215 Summary: Multiple core files in /tmp after Ctrl-Alt-F1+init 3 after upgrade to plasma 6.3 beta Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: vkrevs(a)yahoo.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 Build Identifier: Multiple core files in /tmp after Ctrl-Alt-F1+init 3 after upgrade to plasma 6.3 beta Reproducible: Always Steps to Reproduce: STEPS TO REPRODUCE 1. Login into KDE 2. Hit Ctrl-Alt-F1 3. In console become root and run "init 3". Actual Results: file /tmp/core* ore_gmenudbusmenupr_1000.5250: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/gmenudbusmenuproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/gmenudbusmenuproxy', platform: 'x86_64' core_gmenudbusmenupr_1000.5342: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/gmenudbusmenuproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/gmenudbusmenuproxy', platform: 'x86_64' core_gmenudbusmenupr_1000.5355: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/gmenudbusmenuproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/gmenudbusmenuproxy', platform: 'x86_64' core_gmenudbusmenupr_1000.5367: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/gmenudbusmenuproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/gmenudbusmenuproxy', platform: 'x86_64' core_gmenudbusmenupr_1000.5379: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/gmenudbusmenuproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/gmenudbusmenuproxy', platform: 'x86_64' core_kaccess_1000.5252: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/kaccess', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/kaccess', platform: 'x86_64' core_kaccess_1000.5343: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/kaccess', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/kaccess', platform: 'x86_64' core_kaccess_1000.5356: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/kaccess', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/kaccess', platform: 'x86_64' core_kaccess_1000.5368: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/kaccess', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/kaccess', platform: 'x86_64' core_kaccess_1000.5380: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/kaccess', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/kaccess', platform: 'x86_64' core_xembedsniproxy_1000.5254: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/xembedsniproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/xembedsniproxy', platform: 'x86_64' core_xembedsniproxy_1000.5344: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/xembedsniproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/xembedsniproxy', platform: 'x86_64' core_xembedsniproxy_1000.5357: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/xembedsniproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/xembedsniproxy', platform: 'x86_64' core_xembedsniproxy_1000.5369: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/xembedsniproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/xembedsniproxy', platform: 'x86_64' core_xembedsniproxy_1000.5381: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/xembedsniproxy', real uid: 1000, effective uid: 1000, real gid: 100, effective gid: 100, execfn: '/usr/bin/xembedsniproxy', platform: 'x86_64' Expected Results: EXPECTED RESULT No core files in /tmp SOFTWARE/OS VERSIONS Operating System: openSUSE Leap 15.6 KDE Plasma Version: 6.2.90 KDE Frameworks Version: 6.10.0 Qt Version: 6.8.1 Kernel Version: 6.4.0-150600.23.33-default (64-bit) Graphics Platform: X11 Graphics Processor: NVIDIA GeForce RTX 4060 Ti gdb stack traces from gmenudbusmenupr, kaccess, xembedsniproxy are attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 13

[Bug 1236214] New: No external monitor since TW 20250117
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236214 Bug ID: 1236214 Summary: No external monitor since TW 20250117 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: axel.braun(a)gmx.de QA Contact: sndirsch(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Using TW 20250112 I could give a presentation from my Laptop using the nvidia offload mode. After upgrade to 20250117, together with nvidia-G06 550.144.03-30, the external HDMI-port is not working anylonger. The external moniter recognizes that there is a HDMI cable attached, but it says 'check power supply' Switching to external monitor using Fn-F7 does not work journalctl when HDMI is connected: an 21 17:46:28 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:28 X1E systemd[1766]: Starting KScreen OSD service... Jan 21 17:46:28 X1E systemd[1766]: Started KScreen OSD service. Jan 21 17:46:28 X1E dbus-send[8235]: method return time=1737477988.724746 sender=:1.144 -> destination=:1.143 serial=15 reply_serial=2 Jan 21 17:46:36 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:36 X1E systemd[1766]: Starting KScreen OSD service... Jan 21 17:46:36 X1E systemd[1766]: Started KScreen OSD service. Jan 21 17:46:37 X1E dbus-send[8372]: method return time=1737477997.075144 sender=:1.146 -> destination=:1.145 serial=15 reply_serial=2 Jan 21 17:46:38 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:38 X1E dbus-send[8419]: method return time=1737477998.592746 sender=:1.146 -> destination=:1.147 serial=38 reply_serial=2 Jan 21 17:46:39 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:39 X1E dbus-send[8422]: method return time=1737477999.047203 sender=:1.146 -> destination=:1.148 serial=41 reply_serial=2 Jan 21 17:46:39 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:39 X1E dbus-send[8437]: method return time=1737477999.592535 sender=:1.146 -> destination=:1.149 serial=44 reply_serial=2 Jan 21 17:46:52 X1E systemd[1766]: Started Anzeige-Einrichtung. Jan 21 17:46:52 X1E systemd[1766]: Starting KScreen OSD service... Jan 21 17:46:52 X1E systemd[1766]: Started KScreen OSD service. Jan 21 17:46:53 X1E dbus-send[8625]: method return time=1737478013.091990 sender=:1.151 -> destination=:1.150 serial=15 reply_serial=2 Operating System: openSUSE Tumbleweed 20250120 KDE Plasma Version: 6.2.5 KDE Frameworks Version: 6.10.0 Qt Version: 6.8.1 Kernel Version: 6.12.10-1-default (64-bit) Graphics Platform: X11 Processors: 12 × Intel® Core™ i7-9750H CPU @ 2.60GHz Memory: 15.4 GiB of RAM Graphics Processor: Mesa Intel® UHD Graphics 630 Manufacturer: LENOVO Product Name: 20QWS0A8GE System Version: ThinkPad X1 Extreme 2nd docb@X1E:~/buildservice> rpm -qa | grep nvidia nvidia-drivers-G06-550.144.03-30.1.x86_64 nvidia-video-G06-32bit-550.144.03-30.1.x86_64 nvidia-compute-G06-32bit-550.144.03-30.1.x86_64 nvidia-gl-G06-550.144.03-30.1.x86_64 nvidia-compute-G06-550.144.03-30.1.x86_64 nvidia-utils-G06-550.144.03-30.1.x86_64 kernel-firmware-nvidia-20250111-1.1.noarch nvidia-gl-G06-32bit-550.144.03-30.1.x86_64 libnvidia-egl-wayland1-1.1.17-1.1.x86_64 nvidia-driver-G06-kmp-default-550.144.03_k6.12.9_1-30.2.x86_64 nvidia-video-G06-550.144.03-30.1.x86_64 nvidia-compute-utils-G06-550.144.03-30.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212476] patch shebang line match the python version required in the package
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1212476 https://bugzilla.suse.com/show_bug.cgi?id=1212476#c97 --- Comment #97 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1212476) was mentioned in https://build.opensuse.org/request/show/1239346 Factory / gupnp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082090] bitlbee needs too many dependencies
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1082090 https://bugzilla.suse.com/show_bug.cgi?id=1082090#c7 --- Comment #7 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1082090) was mentioned in https://build.opensuse.org/request/show/1239346 Factory / gupnp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231795] New: python3-config contains some garbage flags
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1231795 Bug ID: 1231795 Summary: python3-config contains some garbage flags Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: jengelh(a)inai.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- OS: openSUSE Tumbleweed 20241016 Version: python311-devel-3.11.10-1.2.x86_64 Observed: $ >x.c; gcc `python3-config --cflags` -c x.c -Wmissing-include-dirs cc1: warning: Vendor/: No such file or directory [-Wmissing-include-dirs] Expected: Don't let -IVendor escape from the python internal build into the python3-config script. Since python3.pc does not have the problem, I wonder if anyone should even ever use python3-config to begin with. Opinions? -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1236213] New: OpenSUSE Tumbleweek signing key fails sq-keyring-linter check
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236213 Bug ID: 1236213 Summary: OpenSUSE Tumbleweek signing key fails sq-keyring-linter check Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: daan.j.demeyer(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The openSUSE Tumbleweek GPG signing key seems to fail the checks done by sq-keyring-linter. Effectively this means that on distributions without a custom rpm-sequoia config, rpm will refuse to install packages signed with the tumbleweed key. While it's possible to work around this with a custom rpm-sequoia config, it would make my life much easier if the signing key would pass all of sq-keyring-linter's checks so I don't have to bother with overriding the rpm-sequoia policy. ➜ mkosi git:(ci) sq-keyring-linter /usr/share/distribution-gpg-keys/opensuse/RPM-GPG-KEY-openSUSE-Tumbleweed Certificate 35A2F86E29B700A4 is not valid under the standard policy: No binding signature at time 2025-01-21T19:45:19Z Certificate 35A2F86E29B700A4 contains a User ID ("openSUSE Project Signing Key <opensuse(a)opensuse.org>") protected by SHA-1 Examined 1 certificate. 0 certificates are invalid and were not linted. (GOOD) 1 certificate was linted. 1 of the 1 certificates (100%) has at least one issue. (BAD) 0 of the linted certificates were revoked. 0 of the 0 certificates has revocation certificates that are weaker than the certificate and should be recreated. (GOOD) 0 of the linted certificates were expired. 1 of the non-revoked linted certificate has at least one non-revoked User ID: 1 has at least one User ID protected by SHA-1. (BAD) 1 has all User IDs protected by SHA-1. (BAD) 0 of the non-revoked linted certificates have at least one non-revoked, live subkey: 0 have at least one non-revoked, live subkey with a binding signature that uses SHA-1. (GOOD) 0 of the non-revoked linted certificates have at least one non-revoked, live, signing-capable subkey: 0 certificates have at least one non-revoked, live, signing-capable subkey with a strong binding signature, but a backsig that uses SHA-1. (GOOD) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233738] New: SELINUX prevents XRDP from working when in enforcing mode
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233738 Bug ID: 1233738 Summary: SELINUX prevents XRDP from working when in enforcing mode Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: jmscdba(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hi Cathy, In my test TW system that is using selinux I found that xrdp is not working. When you attempt to RDP after entering your credentials a dialog is displayed which says the login is successful but then it says VNC error - problem connecting some problem Error conneting to user session If I run "setenforce 0" after booting then xrdp works fine. If I watch the journal when selinux is enforcing I find: xrdp-sesman[6092]: pam_unix(xrdp-sesman:session): session opened for user denise(uid=1001) by (uid=0) xrdp-sesman[6092]: pam_kwallet5(xrdp-sesman:session): pam_kwallet5: pam_sm_open_session xrdp-sesman[6149]: pam_kwallet5: final socket path: /run/user/1001/kwallet5.socket xrdp-sesman[6150]: pam_kwallet5: could not execute kwalletd from /usr/bin/kwalletd6 xrdp-sesman[6092]: pam_systemd(xrdp-sesman:session): New sd-bus connection (system-bus-pam-systemd-6092) opened. xrdp-sesman[6092]: pam_unix(xrdp-sesman:session): session closed for user denise xrdp-sesman[6092]: pam_kwallet5(xrdp-sesman:session): pam_kwallet5: pam_sm_close_session xrdp-sesman[6092]: pam_kwallet5(xrdp-sesman:setcred): pam_kwallet5: pam_sm_setcred systemd[1]: session-c7.scope: Deactivated successfully. ausearch shows these denied messages ausearch -ts boot | grep -i denied type=AVC msg=audit(1732232293.658:185): avc: denied { transition } for pid=2613 comm="xrdp-sesman" path="/usr/bin/kwalletd6" dev="sda2" ino=1779042 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process permissive=0 type=AVC msg=audit(1732232293.658:188): avc: denied { transition } for pid=2616 comm="xrdp-sesman" path="/usr/bin/bash" dev="sda2" ino=1719714 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process permissive=0 type=AVC msg=audit(1732232303.435:189): avc: denied { transition } for pid=2621 comm="xrdp-sesman" path="/usr/sbin/xrdp-chansrv" dev="sda2" ino=1455897 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process permissive=0 I'm still getting up to speed with selinux but it seems to me that xrdp tries to launch /usr/bin/xrdp-chansrv it is denied because there is no selinux policy to allow it, however, I thought when TARGETED mode was used then selinux would have allowed it ? Or does the package need to be updated to include a policy to allow xrdp so that it works in enforcing mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 25

[Bug 1236116] New: python-numpy: unreliable dot product calculation
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236116 Bug ID: 1236116 Summary: python-numpy: unreliable dot product calculation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: lpechacek(a)gmx.com QA Contact: qa-bugs(a)suse.de CC: eich(a)suse.com, stefan.bruens(a)rwth-aachen.de Target Milestone: --- Found By: --- Blocker: --- [CCing Egbert for HPC as the bug may be related to LAPACK and BLAS and Stefan who also maintains Rasterio] I've just spent two afternoons staring into Rasterio tests to root-cause its post-build test failures on i586 [1]. Rasterio uses Numpy for geodetic transformations and there are tests implemented in the package to ensure accuracy. All the tests pass on x86_64 but 15 tests fail on i586. All the test failures boil down to inaccurate calculation of one affine transformation. The minimal test case showing the failure is as follows: [newlines added for easier reading] -----------------------8<--------------------------- fmn:~ # chroot /var/tmp/build-root/openSUSE_Tumbleweed-i586 fmn:/ # python3 Python 3.11.11 (main, Dec 04 2024, 21:44:34) [GCC] on linux Type "help", "copyright", "credits" or "license" for more information. Could not open PYTHONSTARTUP FileNotFoundError: [Errno 2] No such file or directory: '/etc/pythonstart' >>> from numpy import (array, float64) >>> array([0.0033329119791008304, -339.9070281885982]) @ array([101985.0, 1]) np.float64(-2.275957200481571e-15) >>> float64(0.0033329119791008304) * float64(101985.0) + float64(-339.9070281885982) np.float64(0.0) ----------------------->8--------------------------- According to documentation, the dot product calculation performed by numpy.matmul (the @ operator) is accelerated with help of BLAS/LAPACK [2] but I don't see into the details as I never dealt with Numpy and LAPACK before. IMHO the inaccuracy in calculation is worth attention, and depending on the status of i586 in the openSUSE world, might be worth fixing. I'm filing the bug report in case someone has seen similar symptoms and/or knows what might be the cause. Thanks! [1] https://build.opensuse.org/package/show/Application:Geo/python-rasterio (will build again as soon as upgrade to 1.4.3 is accepted) [2] https://numpy.org/doc/stable/reference/generated/numpy.matmul.html -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1236209] New: VUL-0: CVE-2025-0377: TRACKERBUG: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236209 Bug ID: 1236209 Summary: VUL-0: CVE-2025-0377: TRACKERBUG: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437591/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-0377 https://www.cve.org/CVERecord?id=CVE-2025-0377 https://discuss.hashicorp.com/t/hcsec-2025-01-hashicorp-go-slug-vulnerable-… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1236211] New: VUL-0: CVE-2025-0377: opentofu: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236211 Bug ID: 1236211 Summary: VUL-0: CVE-2025-0377: opentofu: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437591/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: opensuse_buildservice(a)ojkastl.de Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Blocks: 1236209 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1236209 +++ HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-0377 https://www.cve.org/CVERecord?id=CVE-2025-0377 https://discuss.hashicorp.com/t/hcsec-2025-01-hashicorp-go-slug-vulnerable-… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1236210] New: VUL-0: CVE-2025-0377: helmfile: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236210 Bug ID: 1236210 Summary: VUL-0: CVE-2025-0377: helmfile: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437591/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: manfred.h(a)gmx.net Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Blocks: 1236209 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1236209 +++ HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-0377 https://www.cve.org/CVERecord?id=CVE-2025-0377 https://discuss.hashicorp.com/t/hcsec-2025-01-hashicorp-go-slug-vulnerable-… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1236056] BTRFS warning (device nvme0n1p2): failed to cleanup qgroup 0/1179: -2
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236056 Goldwyn Rodrigues <rgoldwyn(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-fs(a)suse.de |wqu(a)suse.com CC| |rgoldwyn(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235709] Illegal Instruction in node22 when running virtual machine in qemu-system-s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235709 https://bugzilla.suse.com/show_bug.cgi?id=1235709#c12 --- Comment #12 from Sarah Kriesch <ada.lovelace(a)gmx.de> --- Hi Thomas and Marcus, Can you involve here somebody of the KVM/qemu team, please? (In reply to Berthold Gunreben from comment #9) > (In reply to Marcela Maslanova from comment #5) > > zCX is container extension for running zOS tools (on Z can run zVM, zOS or > > Linux). Having these available seems nice. > > > > Are we running our build infrastructure on TCG, which is slow and insecure? > > :) > > This is just running development for myself on qemu-s390x. I do have real > hardware available, however that is an air gap environment, and it is not > trivial to bring all the development tools there. If that is qemu on real hardware and not zCX, we can reduce the bug to qemu-s390x. Then I am allowed to forward it to the Linux on Z department. zCX issues should have been forwarded via the Datev IBM support. I like also the collaborative interaction between openSUSE, SUSE and IBM here. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235709] Illegal Instruction in node22 when running virtual machine in qemu-system-s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235709 Sarah Kriesch <ada.lovelace(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tstaudt(a)de.ibm.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235709] Illegal Instruction in node22 when running virtual machine in qemu-system-s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235709 Sarah Kriesch <ada.lovelace(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |marcus.kraft1(a)ibm.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236196] New: Hard freeze when cutting power from USB dongle
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236196 Bug ID: 1236196 Summary: Hard freeze when cutting power from USB dongle Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Drivers Assignee: kernel-bugs(a)suse.de Reporter: andrea.ippo(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I use a USB-C dongle connected to my laptop, as it extends connectivity beyond the limited amount of ports the laptop comes with. I can reproduce this issue with a couple of such dongles from different brands, and this didn't happen before, so the issue is clearly in software. My setup is as follows: I have a USB-C wall charger providing power to the dongle over a USB-C to USB-C cable. The dongle then also has an HDMI cable connecting to an external monitor, as well as two USB-A radio receivers (for mouse and keyboard). The dongle ultimately plugs into one of the 3 USB-C ports my laptop is equipped with. Laptop and OS specs: Operating System: openSUSE Tumbleweed 20250120 KDE Plasma Version: 6.2.5 KDE Frameworks Version: 6.10.0 Qt Version: 6.8.1 Kernel Version: 6.12.10-1-default (64-bit) Graphics Platform: Wayland Processors: 16 × AMD Ryzen 7 7840U w/ Radeon 780M Graphics Memory: 30.7 GiB of RAM Graphics Processor: AMD Radeon 780M Manufacturer: Framework Product Name: Laptop 13 (AMD Ryzen 7040Series) System Version: A7 Now to the actual problem: from this starting configuration, whenever I cut the power to the dongle (by unplugging the USB-C cable coming from the wall outlet), there's a brief readjusting in the multi-monitor setup, and then the system I/O freezes: input devices become unresponsive, and not only those connected via the dongle, but even internal ones (touchpad, integrated keyboard). The screen also freezes. Curiously enough, the sound still works, as I hear KDE's "power connected/disconnected" sounds as I try to reattach/detach the cable multiple times (to no avail). I'm eventually forced to hard shutdown, then boot again. I can reproduce this with two dongles, and since my laptop also has an HDMI port, I will also try removing dongles from the equation, and report back. Meanwhile I'm attaching logs, but I suspect it may have to do with amdgpu. https://paste.opensuse.org/pastes/8459ef24af5c Any further info needed? Ask away and I'll do my best Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1233167] New: [Build 20241109] Mesa 24.2.x - shifted colors on s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233167 Bug ID: 1233167 Summary: [Build 20241109] Mesa 24.2.x - shifted colors on s390x Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4634296/modules/boot loader_start/steps/33 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: gfx-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation We have a color shift when installing on an s390x mainframe; introduced with Mesa 24.2.x openQA test in scenario opensuse-Tumbleweed-DVD-s390x-autoyast_zvm@s390x-zVM-vswitch-l2 fails in [bootloader_start](https://openqa.opensuse.org/tests/4634296/modules/bootloa… ## Test suite description Create HDD for s390x textmode ## Reproducible Fails since (at least) Build [20241109](https://openqa.opensuse.org/tests/4633979) ## Expected result Last good: [20241105](https://openqa.opensuse.org/tests/4622286) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=s390x&distri=opensuse… -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1235671] [Build 20250108-SELinux] tigervnc: openQA test fails in vnc_two_passwords because tigervnc does not ship selinux module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235671 https://bugzilla.suse.com/show_bug.cgi?id=1235671#c4 --- Comment #4 from Cathy Hu <cathy.hu(a)suse.com> --- thanks for the quick reaction! almost done, it starts now :) there are still a couple things: tigervnc-selinux is not installed when selinux is enabled you can probably be done with something like this, it will pull the package when the selinux-policy-base exists: Requires: (%{name}-selinux if selinux-policy-base) also there is one AVC, that i need to debug, will have a look tomorrow and get back to you on that one: ---- time->Tue Jan 21 17:35:15 2025 type=AVC msg=audit(1737477315.980:2651): avc: denied { create } for pid=26812 comm="vncsession" name=".local" scontext=system_u:system_r:vnc_session_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233517] VUL-0: CVE-2025-23013: pam_u2f: problematic PAM_IGNORE return values in `pam_sm_authenticate()`
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233517 https://bugzilla.suse.com/show_bug.cgi?id=1233517#c27 --- Comment #27 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2025:0200-1: An update that solves one vulnerability and has one security fix can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250200-1 Category: security (important) Bug References: 1233517, 1235961 CVE References: CVE-2025-23013 Maintenance Incident: [SUSE:Maintenance:37069](https://smelt.suse.de/incident/37069/) Sources used: openSUSE Leap 15.4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Micro for Rancher 5.3 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Micro 5.3 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Micro for Rancher 5.4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Micro 5.4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Micro 5.5 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Server 15 SP4 LTSS (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Server 15 SP5 LTSS (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Manager Proxy 4.3 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Manager Retail Branch Server 4.3 (src): pam_u2f-1.2.0-150400.4.5.1 SUSE Manager Server 4.3 (src): pam_u2f-1.2.0-150400.4.5.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234605] Userspace crashes on parallels VM
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234605 https://bugzilla.suse.com/show_bug.cgi?id=1234605#c21 --- Comment #21 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2025:0201-1: An update that solves 77 vulnerabilities and has 31 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250201-1 Category: security (important) Bug References: 1170891, 1173139, 1185010, 1190358, 1190428, 1203332, 1205521, 1209288, 1209798, 1211593, 1211595, 1214635, 1215304, 1215523, 1216813, 1216909, 1219608, 1222878, 1223044, 1225758, 1225820, 1226694, 1228190, 1229809, 1230422, 1230697, 1231388, 1231453, 1231854, 1232045, 1232157, 1232166, 1232419, 1232436, 1232472, 1232823, 1233038, 1233050, 1233070, 1233096, 1233127, 1233200, 1233239, 1233324, 1233467, 1233468, 1233469, 1233485, 1233547, 1233550, 1233558, 1233564, 1233568, 1233637, 1233642, 1233701, 1233769, 1233837, 1234072, 1234073, 1234075, 1234076, 1234077, 1234087, 1234120, 1234156, 1234219, 1234220, 1234240, 1234241, 1234281, 1234282, 1234294, 1234338, 1234357, 1234437, 1234464, 1234605, 1234639, 1234650, 1234727, 1234811, 1234827, 1234834, 1234843, 1234846, 1234853, 1234856, 1234891, 1234912, 1234920, 1234921, 1234960, 1234963, 1234971, 1234973, 1235004, 1235035, 1235037, 1235039, 1235054, 1235056, 1235061, 1235073, 1235220, 1235224, 1235246, 1235507 CVE References: CVE-2021-47202, CVE-2022-36280, CVE-2022-48742, CVE-2022-49033, CVE-2022-49035, CVE-2023-1382, CVE-2023-33951, CVE-2023-33952, CVE-2023-52920, CVE-2024-24860, CVE-2024-26886, CVE-2024-26924, CVE-2024-36915, CVE-2024-42232, CVE-2024-44934, CVE-2024-47666, CVE-2024-47678, CVE-2024-49944, CVE-2024-49952, CVE-2024-50018, CVE-2024-50143, CVE-2024-50154, CVE-2024-50166, CVE-2024-50181, CVE-2024-50202, CVE-2024-50211, CVE-2024-50256, CVE-2024-50262, CVE-2024-50278, CVE-2024-50279, CVE-2024-50280, CVE-2024-50296, CVE-2024-53051, CVE-2024-53055, CVE-2024-53056, CVE-2024-53064, CVE-2024-53072, CVE-2024-53090, CVE-2024-53095, CVE-2024-53101, CVE-2024-53113, CVE-2024-53114, CVE-2024-53119, CVE-2024-53120, CVE-2024-53122, CVE-2024-53125, CVE-2024-53130, CVE-2024-53131, CVE-2024-53142, CVE-2024-53146, CVE-2024-53150, CVE-2024-53156, CVE-2024-53157, CVE-2024-53158, CVE-2024-53161, CVE-2024-53162, CVE-2024-53173, CVE-2024-53179, CVE-2024-53206, CVE-2024-53210, CVE-2024-53213, CVE-2024-53214, CVE-2024-53239, CVE-2024-53240, CVE-2024-53241, CVE-2024-56539, CVE-2024-56548, CVE-2024-56549, CVE-2024-56570, CVE-2024-56571, CVE-2024-56575, CVE-2024-56598, CVE-2024-56604, CVE-2024-56605, CVE-2024-56619, CVE-2024-56755, CVE-2024-8805 Maintenance Incident: [SUSE:Maintenance:36972](https://smelt.suse.de/incident/36972/) Sources used: openSUSE Leap 15.5 (src): kernel-source-5.14.21-150500.55.91.1, kernel-livepatch-SLE15-SP5_Update_22-1-150500.11.3.1, kernel-syms-5.14.21-150500.55.91.1, kernel-obs-qa-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Micro 5.5 (src): kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 SUSE Linux Enterprise Live Patching 15-SP5 (src): kernel-livepatch-SLE15-SP5_Update_22-1-150500.11.3.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Server 15 SP5 LTSS (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1215523] kernel 5.14.21.150400.24.84.1 amdgpu critical error
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1215523 https://bugzilla.suse.com/show_bug.cgi?id=1215523#c39 --- Comment #39 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2025:0201-1: An update that solves 77 vulnerabilities and has 31 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250201-1 Category: security (important) Bug References: 1170891, 1173139, 1185010, 1190358, 1190428, 1203332, 1205521, 1209288, 1209798, 1211593, 1211595, 1214635, 1215304, 1215523, 1216813, 1216909, 1219608, 1222878, 1223044, 1225758, 1225820, 1226694, 1228190, 1229809, 1230422, 1230697, 1231388, 1231453, 1231854, 1232045, 1232157, 1232166, 1232419, 1232436, 1232472, 1232823, 1233038, 1233050, 1233070, 1233096, 1233127, 1233200, 1233239, 1233324, 1233467, 1233468, 1233469, 1233485, 1233547, 1233550, 1233558, 1233564, 1233568, 1233637, 1233642, 1233701, 1233769, 1233837, 1234072, 1234073, 1234075, 1234076, 1234077, 1234087, 1234120, 1234156, 1234219, 1234220, 1234240, 1234241, 1234281, 1234282, 1234294, 1234338, 1234357, 1234437, 1234464, 1234605, 1234639, 1234650, 1234727, 1234811, 1234827, 1234834, 1234843, 1234846, 1234853, 1234856, 1234891, 1234912, 1234920, 1234921, 1234960, 1234963, 1234971, 1234973, 1235004, 1235035, 1235037, 1235039, 1235054, 1235056, 1235061, 1235073, 1235220, 1235224, 1235246, 1235507 CVE References: CVE-2021-47202, CVE-2022-36280, CVE-2022-48742, CVE-2022-49033, CVE-2022-49035, CVE-2023-1382, CVE-2023-33951, CVE-2023-33952, CVE-2023-52920, CVE-2024-24860, CVE-2024-26886, CVE-2024-26924, CVE-2024-36915, CVE-2024-42232, CVE-2024-44934, CVE-2024-47666, CVE-2024-47678, CVE-2024-49944, CVE-2024-49952, CVE-2024-50018, CVE-2024-50143, CVE-2024-50154, CVE-2024-50166, CVE-2024-50181, CVE-2024-50202, CVE-2024-50211, CVE-2024-50256, CVE-2024-50262, CVE-2024-50278, CVE-2024-50279, CVE-2024-50280, CVE-2024-50296, CVE-2024-53051, CVE-2024-53055, CVE-2024-53056, CVE-2024-53064, CVE-2024-53072, CVE-2024-53090, CVE-2024-53095, CVE-2024-53101, CVE-2024-53113, CVE-2024-53114, CVE-2024-53119, CVE-2024-53120, CVE-2024-53122, CVE-2024-53125, CVE-2024-53130, CVE-2024-53131, CVE-2024-53142, CVE-2024-53146, CVE-2024-53150, CVE-2024-53156, CVE-2024-53157, CVE-2024-53158, CVE-2024-53161, CVE-2024-53162, CVE-2024-53173, CVE-2024-53179, CVE-2024-53206, CVE-2024-53210, CVE-2024-53213, CVE-2024-53214, CVE-2024-53239, CVE-2024-53240, CVE-2024-53241, CVE-2024-56539, CVE-2024-56548, CVE-2024-56549, CVE-2024-56570, CVE-2024-56571, CVE-2024-56575, CVE-2024-56598, CVE-2024-56604, CVE-2024-56605, CVE-2024-56619, CVE-2024-56755, CVE-2024-8805 Maintenance Incident: [SUSE:Maintenance:36972](https://smelt.suse.de/incident/36972/) Sources used: openSUSE Leap 15.5 (src): kernel-source-5.14.21-150500.55.91.1, kernel-livepatch-SLE15-SP5_Update_22-1-150500.11.3.1, kernel-syms-5.14.21-150500.55.91.1, kernel-obs-qa-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Micro 5.5 (src): kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 SUSE Linux Enterprise Live Patching 15-SP5 (src): kernel-livepatch-SLE15-SP5_Update_22-1-150500.11.3.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Server 15 SP5 LTSS (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src): kernel-syms-5.14.21-150500.55.91.1, kernel-source-5.14.21-150500.55.91.1, kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1, kernel-obs-build-5.14.21-150500.55.91.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235871] New: Update nvidia driver to latest 550.144.03 release
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235871 Bug ID: 1235871 Summary: Update nvidia driver to latest 550.144.03 release Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: sndirsch(a)suse.com QA Contact: sndirsch(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Update nvidia driver to latest 550.144.03 release -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1236193] New: [SELinux] audit2allow: could not open interface info [/var/lib/sepolgen/interface_info]
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236193 Bug ID: 1236193 Summary: [SELinux] audit2allow: could not open interface info [/var/lib/sepolgen/interface_info] Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When installing audit2allow (via policycoreutils-python-utils), then policycoreutils-devel is not installed with it. So the user wanting to use audit2allow needs to: - install policycoreutils-devel - run sepolgen-ifgen Maybe this can be improved, to remove the friction with the selinux tooling. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203094] sensors: convert egrep to grep -E
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1203094 https://bugzilla.suse.com/show_bug.cgi?id=1203094#c1 Jean Delvare <jdelvare(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Jean Delvare <jdelvare(a)suse.com> --- Fixed upstream since lm-sensors version 3.6.1 by commit 88eeffcb50a6 ("pwmconfig: change usage of 'egrep' to 'grep -E'"). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203092] GNU grep 3.8 egrep / grep warnings and migration to grep -E / grep -F
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1203092 Bug 1203092 depends on bug 1203094, which changed state. Bug 1203094 Summary: sensors: convert egrep to grep -E https://bugzilla.suse.com/show_bug.cgi?id=1203094 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236189] New: [SELinux] policycoreutils-gui utilities broken
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236189 Bug ID: 1236189 Summary: [SELinux] policycoreutils-gui utilities broken Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: filippo.bonazzi(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Operating System: Tumbleweed (sway) SELinux status, mode and policy name: enabled, enforcing, targeted SELinux policy version and repository: latest The software (incl. version) that is affected by the SELinux issue and the error message: policycoreutils-gui SELinux Audit log: n/a Any other important details: might be partially a wayland/sway issue Neither of the graphical utilities provided by policycoreutils-gui seem to work on current Tumbleweed. selinux-polgengui ================= > $ selinux-polgengui > > (selinux-polgengui:3680): Gtk-WARNING **: 16:52:20.956: Content added to the action area of a dialog using header bars > > (selinux-polgengui:3680): Gtk-WARNING **: 16:52:20.956: Content added to the action area of a dialog using header bars > Traceback (most recent call last): > File "/usr/bin/selinux-polgengui", line 346, in __init__ > for u in sepolicy.interface.get_user(): > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > File "/usr/lib/python3.11/site-packages/sepolicy/interface.py", line 112, in get_user > for i in sepolicy.get_methods(): > ^^^^^^^^^^^^^^^^^^^^^^ > File "/usr/lib/python3.11/site-packages/sepolicy/__init__.py", line 815, in get_methods > gen_interfaces() > File "/usr/lib/python3.11/site-packages/sepolicy/__init__.py", line 897, in gen_interfaces > raise ValueError(_("You must regenerate interface info by running /usr/bin/sepolgen-ifgen")) > ValueError: You must regenerate interface info by running /usr/bin/sepolgen-ifgen > > During handling of the above exception, another exception occurred: > > Traceback (most recent call last): > File "/usr/bin/selinux-polgengui", line 784, in <module> > app = childWindow() > ^^^^^^^^^^^^^ > File "/usr/bin/selinux-polgengui", line 354, in __init__ > self.error(e.message) > ^^^^^^^^^ > AttributeError: 'ValueError' object has no attribute 'message' This one is fixed by running sepolgen-ifgen (contained in policycoreutils-devel, also not required by policycoreutils-gui). Perhaps this should be done upon package install... system-config-selinux ===================== > $ system-config-selinux > > (system-config-selinux.py:5494): Gtk-CRITICAL **: 16:58:15.558: _gtk_css_lookup_resolve: assertion '(((__extension__ ({ GTypeInstance *__inst = (GTypeInstance*) ((provider)); GType __t = ((_gtk_style_provider_private_get_type ())); gboolean __r; if (!__inst) __r = (0); else if (__inst->g_class && __inst->g_class->g_type == __t) __r = (!(0)); else __r = g_type_check_instance_is_a (__inst, __t); __r; }))))' failed > /usr/share/system-config-selinux/system-config-selinux.py:80: Warning: g_object_set_data_full: assertion 'G_IS_OBJECT (object)' failed > xml.add_from_file("/usr/share/system-config-selinux/system-config-selinux.ui") > > (system-config-selinux.py:5494): Gtk-ERROR **: 16:58:15.558: Can't create a GtkStyleContext without a display connection I think this one is a graphical session error. I don't know whether it works on GNOME and/or x11, I only tested this on sway on wayland. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236147] virtnetworkd[2716]: internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 2
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236147 https://bugzilla.suse.com/show_bug.cgi?id=1236147#c5 James Fehlig <jfehlig(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jshand2013@gmail. | |com) | Assignee|kvm-bugs(a)suse.de |jorik.cronenberg(a)suse.com --- Comment #5 from James Fehlig <jfehlig(a)suse.com> --- (In reply to John Shand from comment #4) > (In reply to James Fehlig from comment #3) > > This sounds similar to SLE bug#1235809, although not sure if you are able to > > access it. > > > > Is the named service running on your host? If so, are you able to start the > > libvirt default network after stopping named? > > i turned off named and default network was active and running. Thanks for checking. It seems there has been a change in behavior of the named service. For now, I'll reassign to the bind maintainer for commentary. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236187] New: Emulators/wine: Missing debug info for cross compiled binaries
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236187 Bug ID: 1236187 Summary: Emulators/wine: Missing debug info for cross compiled binaries Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: meissner(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The mentioned package provides cross compiled binaries in /usr/lib/wine/*-windows and /usr/lib64/wine/*-windows, for which no debug symbols are available when debugging.. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233167] [Build 20241109] Mesa 24.2.x - shifted colors on s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233167 https://bugzilla.suse.com/show_bug.cgi?id=1233167#c45 --- Comment #45 from LTC BugProxy <bugproxy(a)us.ibm.com> --- ------- Comment From Jonas.Paulsson1(a)ibm.com 2025-01-21 10:48 EDT------- Hi Thomas, I would like to help with this issue, but would first need some assistance in getting started as I have never built / used Mesa3D. I have access to a SystemZ account, as I work with the LLVM SystemZ backend. /Jonas -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236147] virtnetworkd[2716]: internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 2
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236147 Antoine Ginies <aginies(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium CC| |aginies(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235671] [Build 20250108-SELinux] tigervnc: openQA test fails in vnc_two_passwords because tigervnc does not ship selinux module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235671 https://bugzilla.suse.com/show_bug.cgi?id=1235671#c3 --- Comment #3 from Joan Torres <joan.torres(a)suse.com> --- @cathy.hu Could you, please, check if this fixes it? https://build.opensuse.org/package/show/home:jtorres:branches:X11:XOrg/tige… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234619] CPU reporting and using incorrect max freq
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234619 https://bugzilla.suse.com/show_bug.cgi?id=1234619#c13 Giovanni Gherdovich <giovanni.gherdovich(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #13 from Giovanni Gherdovich <giovanni.gherdovich(a)suse.com> --- (In reply to E Z from comment #12) > I have tested the new kernel and can confirm that it resolves the issues. Thanks for testing the kernel, I'm happy to hear the problem is resolved. This fix will be included in the next monthly kernel update for Leap 15.6, which will be released around mid February. I'm closing the bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234230] VUL-0: CVE-2024-54132: gh: GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234230 https://bugzilla.suse.com/show_bug.cgi?id=1234230#c4 Pavel Dostál <pdostal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Pavel Dostál <pdostal(a)suse.com> --- The `gh` is now upgraded. Closing the bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235709] Illegal Instruction in node22 when running virtual machine in qemu-system-s390x
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235709 https://bugzilla.suse.com/show_bug.cgi?id=1235709#c11 Dario Faggioli <dfaggioli(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(azouhr(a)opensuse.o | |rg) --- Comment #11 from Dario Faggioli <dfaggioli(a)suse.com> --- (In reply to Berthold Gunreben from comment #9) > (In reply to Marcela Maslanova from comment #5) > > zCX is container extension for running zOS tools (on Z can run zVM, zOS or > > Linux). Having these available seems nice. > > > > Are we running our build infrastructure on TCG, which is slow and insecure? > > :) > > This is just running development for myself on qemu-s390x. I do have real > hardware available, however that is an air gap environment, and it is not > trivial to bring all the development tools there. > > On my local x86_64 machine, it is much easier for me to get the needed > software and permissions to do reasonable development work. Speed is also > not that bad (at least on modern hardware). > > Still, this is not about a discussion what is useful or not, but about a > defect of qemu-system-s390x and I wanted to report this to give people a > chance to look into it. > Right. However, what I think we need to figure out here, is whether we have a bug and/or a missing feature that is specific to our packages version of QEMU in openSUSE & SLE, or if it's an upstream bug and/or development issue. In fact, if the problem only exists in our packages, we need to keep working here for trying to identify whether it's caused by a malformed downstream-only patch, a config or build issue, or anything like that. If, instead, the problem comes directly from the upstream QEMU project, then it should be reported to the QEMU upstream community, so that the people that work on s390x support there can help understand it, implement the missing features, etc. Since (AFAIUI) you're running into the issue while using QEMU on Tumbleweed, I think you've done the right thing reporting it here. What we need to do now, however, is figuring out what the best way forward is. For example, can you perhaps build QEMU from the upstream sources, and double check if the issue manifests if using the binary resulting from that too? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235247] nscd incompatible with with systemd 257
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235247 https://bugzilla.suse.com/show_bug.cgi?id=1235247#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1235247) was mentioned in https://build.opensuse.org/request/show/1239262 Factory / glibc -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236158] [Build 20250120] qgis: couldn't load SIP module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236158 https://bugzilla.suse.com/show_bug.cgi?id=1236158#c5 --- Comment #5 from Dirk Stoecker <opensuse(a)dstoecker.de> --- My SR was accepted, followup-SR for Factory: https://build.opensuse.org/request/show/1239276 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236040] Application:Geo/qgis: Bug
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236040 https://bugzilla.suse.com/show_bug.cgi?id=1236040#c2 Dirk Stoecker <opensuse(a)dstoecker.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #2 from Dirk Stoecker <opensuse(a)dstoecker.de> --- Was accepted, Followup-SR for Factory: https://build.opensuse.org/request/show/1239276 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235926] r8169: adapter stops working after upgrade to kernel 6.4.0
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235926 https://bugzilla.suse.com/show_bug.cgi?id=1235926#c6 --- Comment #6 from Takashi Iwai <tiwai(a)suse.com> --- We need a bit more logs. e.g. The lines you gave showed only the result, and the actual cause might be seen beforehand. e.g. the repeated lines with "rtl_chipcmd_cond == 1" indicate that the chip is already screwed up, and how it doesn't tell much how it happened. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235894] Generalplus Technology Inc. Web cam no longer working since kernel >= 6.12.4
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235894 https://bugzilla.suse.com/show_bug.cgi?id=1235894#c4 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #4 from Takashi Iwai <tiwai(a)suse.com> --- The revert is included in the upcoming TW kernel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235146] [6.13] vbox kmp fails to build with kernel 6.13
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235146 https://bugzilla.suse.com/show_bug.cgi?id=1235146#c7 --- Comment #7 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1235146) was mentioned in https://build.opensuse.org/request/show/1239250 Factory / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233517] VUL-0: CVE-2025-23013: pam_u2f: problematic PAM_IGNORE return values in `pam_sm_authenticate()`
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233517 https://bugzilla.suse.com/show_bug.cgi?id=1233517#c26 --- Comment #26 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2025:0198-1: An update that solves one vulnerability and has one security fix can now be installed. URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250198-1 Category: security (important) Bug References: 1233517, 1235961 CVE References: CVE-2025-23013 Maintenance Incident: [SUSE:Maintenance:37082](https://smelt.suse.de/incident/37082/) Sources used: SUSE Linux Enterprise Server 12 SP5 LTSS (src): pam_u2f-1.0.8-3.6.1 SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src): pam_u2f-1.0.8-3.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227908] auditd obsolete built-in options
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1227908 https://bugzilla.suse.com/show_bug.cgi?id=1227908#c9 --- Comment #9 from Martin Loviska <mloviska(a)suse.com> --- Hi, we can see the obsolete messages in logs of sle 16.0 as well. ``` Jan 21 11:58:53.257448 localhost auditd[881]: Option builtin_af_unix line 10 is obsolete - using /sbin/audisp-af_unix Jan 21 11:58:53.257812 localhost auditd[881]: Option builtin line 11 is obsolete - update it ``` https://openqa.suse.de/tests/16532223#step/journal_check/8 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235536] Flickering screen on TUF Gaming A16 FA617NSR. Functioning workaround.
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235536 https://bugzilla.suse.com/show_bug.cgi?id=1235536#c4 --- Comment #4 from Takashi Iwai <tiwai(a)suse.com> --- Let us know the URL if you already reported (or joined) on the upstream bug tracker. I'll add it here for tracking. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235499] New: Monitor freeze on 6.12: amdgpu [drm] *ERROR* [CRTC:83:crtc-1] flip_done timed out
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235499 Bug ID: 1235499 Summary: Monitor freeze on 6.12: amdgpu [drm] *ERROR* [CRTC:83:crtc-1] flip_done timed out Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: wardlawhunter(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 879464 --> https://bugzilla.suse.com/attachment.cgi?id=879464&action=edit dmesg output My monitor has been intermittently freezing since updating to 6.12.8 (20250106) from 6.11.8 (20241218). I see the following from dmesg after a freeze. [ 3692.909069] [ T23491] amdgpu 0000:03:00.0: [drm] *ERROR* [CRTC:83:crtc-1] flip_done timed out [ 3716.799074] [ T2890] amdgpu 0000:03:00.0: [drm] *ERROR* flip_done timed out [ 3716.799082] [ T2890] amdgpu 0000:03:00.0: [drm] *ERROR* [CRTC:83:crtc-1] commit wait timed out [ 3726.825819] [ T2890] amdgpu 0000:03:00.0: [drm] *ERROR* flip_done timed out [ 3726.825826] [ T2890] amdgpu 0000:03:00.0: [drm] *ERROR* [PLANE:80:plane-7] commit wait timed out Full output is attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1236169] New: afl: LLVM modes broken on Tumbleweed
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236169 Bug ID: 1236169 Summary: afl: LLVM modes broken on Tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- AFL LLVM modes are currently broken on Tumbleweed: > $ afl-clang-fast -o hello hello.c > afl-cc++4.30c by Michal Zalewski, Laszlo Szekeres, Marc Heuse - mode: LLVM-PCGUARD > clang: error: unknown argument: '-fexperimental-new-pass-manager' clang removed this option a while ago, but AFL is still trying to pass it. See also https://github.com/llvm/llvm-project/commit/69b2b7282e92a1b576b7bd26f3b1671… > $ afl-clang-lto -o hello hello.c > afl-cc++4.30c by Michal Zalewski, Laszlo Szekeres, Marc Heuse - mode: LLVM-LTO-PCGUARD > LLVM ERROR: Could not load library '/usr/libexec/afl/SanitizerCoverageLTO.so': /usr/libexec/afl/SanitizerCoverageLTO.so: undefined symbol: _ZN4llvm15SmallVectorBaseIjE13mallocForGrowEmmRm > clang: error: linker command failed with exit code 1 (use -v to see invocation) ABI problem. It's also not possible to install afl's build dependencies on Tumbleweed: > $ zypper si -d afl > Loading repository data... > Reading installed packages... > Resolving package dependencies... > > Problem: 1: the to be installed llvm15-devel-15.0.7-10.2.x86_64 requires 'llvm15-gold', but this requirement cannot be provided > not installable providers: llvm15-gold-15.0.7-10.2.x86_64[download.opensuse.org-oss_2] > llvm15-gold-15.0.7-10.2.x86_64[openSUSE-20241203-0] Overall, the latest AFLplusplus releases seem to have broken compatibility with old LLVM versions. In fact, increasing the BuildRequires to llvm >= 19 fixes the above issues. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1233688] abcde queries incorrect database
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233688 https://bugzilla.suse.com/show_bug.cgi?id=1233688#c4 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(geoff(a)cs.hmc.edu) CC| |geoff(a)cs.hmc.edu --- Comment #4 from Martin Wilck <martin.wilck(a)suse.com> --- I have added the patch in home:mwilck:branches:multimedia:apps. https://download.opensuse.org/repositories/home:/mwilck:/branches:/multimed… https://download.opensuse.org/repositories/home:/mwilck:/branches:/multimed… Please provide feedback. -- You are receiving this mail because: You are on the CC list for the bug.

1 0