January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1227908] auditd obsolete built-in options
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1227908 https://bugzilla.suse.com/show_bug.cgi?id=1227908#c9 --- Comment #9 from Martin Loviska <mloviska(a)suse.com> --- Hi, we can see the obsolete messages in logs of sle 16.0 as well. ``` Jan 21 11:58:53.257448 localhost auditd[881]: Option builtin_af_unix line 10 is obsolete - using /sbin/audisp-af_unix Jan 21 11:58:53.257812 localhost auditd[881]: Option builtin line 11 is obsolete - update it ``` https://openqa.suse.de/tests/16532223#step/journal_check/8 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235536] Flickering screen on TUF Gaming A16 FA617NSR. Functioning workaround.
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235536 https://bugzilla.suse.com/show_bug.cgi?id=1235536#c4 --- Comment #4 from Takashi Iwai <tiwai(a)suse.com> --- Let us know the URL if you already reported (or joined) on the upstream bug tracker. I'll add it here for tracking. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236169] New: afl: LLVM modes broken on Tumbleweed
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236169 Bug ID: 1236169 Summary: afl: LLVM modes broken on Tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- AFL LLVM modes are currently broken on Tumbleweed: > $ afl-clang-fast -o hello hello.c > afl-cc++4.30c by Michal Zalewski, Laszlo Szekeres, Marc Heuse - mode: LLVM-PCGUARD > clang: error: unknown argument: '-fexperimental-new-pass-manager' clang removed this option a while ago, but AFL is still trying to pass it. See also https://github.com/llvm/llvm-project/commit/69b2b7282e92a1b576b7bd26f3b1671… > $ afl-clang-lto -o hello hello.c > afl-cc++4.30c by Michal Zalewski, Laszlo Szekeres, Marc Heuse - mode: LLVM-LTO-PCGUARD > LLVM ERROR: Could not load library '/usr/libexec/afl/SanitizerCoverageLTO.so': /usr/libexec/afl/SanitizerCoverageLTO.so: undefined symbol: _ZN4llvm15SmallVectorBaseIjE13mallocForGrowEmmRm > clang: error: linker command failed with exit code 1 (use -v to see invocation) ABI problem. It's also not possible to install afl's build dependencies on Tumbleweed: > $ zypper si -d afl > Loading repository data... > Reading installed packages... > Resolving package dependencies... > > Problem: 1: the to be installed llvm15-devel-15.0.7-10.2.x86_64 requires 'llvm15-gold', but this requirement cannot be provided > not installable providers: llvm15-gold-15.0.7-10.2.x86_64[download.opensuse.org-oss_2] > llvm15-gold-15.0.7-10.2.x86_64[openSUSE-20241203-0] Overall, the latest AFLplusplus releases seem to have broken compatibility with old LLVM versions. In fact, increasing the BuildRequires to llvm >= 19 fixes the above issues. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1233688] abcde queries incorrect database
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233688 https://bugzilla.suse.com/show_bug.cgi?id=1233688#c4 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(geoff(a)cs.hmc.edu) CC| |geoff(a)cs.hmc.edu --- Comment #4 from Martin Wilck <martin.wilck(a)suse.com> --- I have added the patch in home:mwilck:branches:multimedia:apps. https://download.opensuse.org/repositories/home:/mwilck:/branches:/multimed… https://download.opensuse.org/repositories/home:/mwilck:/branches:/multimed… Please provide feedback. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236040] Application:Geo/qgis: Bug
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236040 https://bugzilla.suse.com/show_bug.cgi?id=1236040#c1 Dirk Stoecker <opensuse(a)dstoecker.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |opensuse(a)dstoecker.de --- Comment #1 from Dirk Stoecker <opensuse(a)dstoecker.de> --- Submitted an Update to fix this: https://build.opensuse.org/request/show/1239254 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233688] abcde queries incorrect database
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233688 https://bugzilla.suse.com/show_bug.cgi?id=1233688#c3 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #3 from Martin Wilck <martin.wilck(a)suse.com> --- Note that these are the built-in defaults only. abcde creates a file $HOME/.abcde.conf that contains editable settings for both CDDBURL and CDDBSUBMIT. So users who are unhappy with the defaults can change them. Moreover, by default abcde doesn't even query cddb, as the default CDDBMETHOD is set to "musicbrainz". Finally, note that upstream seems to be dead since quite some time... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207443] VUL-0: CVE-2022-39957: mod_security_crs: Charset accept header field resulting in response rule set bypass
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1207443 https://bugzilla.suse.com/show_bug.cgi?id=1207443#c1 Stoyan Manolov <stoyan.manolov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Stoyan Manolov <stoyan.manolov(a)suse.com> --- Already fixed in the current version. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207442] VUL-0: CVE-2022-39958: mod_security_crs: Small range header leading to response rule set bypass
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1207442 https://bugzilla.suse.com/show_bug.cgi?id=1207442#c1 Stoyan Manolov <stoyan.manolov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Stoyan Manolov <stoyan.manolov(a)suse.com> --- Already fixed in the current version. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207440] VUL-0: CVE-2022-39955: mod_security_crs: Multiple charsets defined in Content-Type header
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1207440 https://bugzilla.suse.com/show_bug.cgi?id=1207440#c1 Stoyan Manolov <stoyan.manolov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Stoyan Manolov <stoyan.manolov(a)suse.com> --- Already fixed in the current version. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207441] VUL-0: CVE-2022-39956: mod_security_crs: Content-Type or Content-Transfer-Encoding MIME header fields abuse
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1207441 https://bugzilla.suse.com/show_bug.cgi?id=1207441#c1 Stoyan Manolov <stoyan.manolov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Stoyan Manolov <stoyan.manolov(a)suse.com> --- Already fixed in the current version. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235146] New: [6.13] vbox kmp fails to build with kernel 6.13
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235146 Bug ID: 1235146 Summary: [6.13] vbox kmp fails to build with kernel 6.13 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: jslaby(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://build.opensuse.org/package/live_build_log/Kernel:HEAD:KMP/virtualbo… > [ 83s] vbox_drv.c:43:11: fatal error: drm/drm_aperture.h: No such file or directory > [ 83s] 43 | # include <drm/drm_aperture.h> -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1235467] New: Headset/sound/pipewire issues
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235467 Bug ID: 1235467 Summary: Headset/sound/pipewire issues Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: msvec(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Since 2024-10-11 I have issues with my headset and sound, specifically with Google Meet. It often fails to start working. What helps is this: 'systemctl --user restart pipewire-pulse.service', but sometimes it has to be done multiple times repeatedly. The message log is full of these messages: localhost pipewire[2573]: spa.alsa: front:3p: (62 suppressed) snd_pcm_avail after recover: Broken pipe This issue happens only this one host, the other hosts have no problems, despite all being on the latest Leap 15.6, with another host being almost the same hardware. So perhaps it's related to the headset, Logitech H600. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1233688] abcde queries incorrect database
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233688 https://bugzilla.suse.com/show_bug.cgi?id=1233688#c2 --- Comment #2 from Martin Wilck <martin.wilck(a)suse.com> --- Reported upstream as https://abcde.einval.com/bugzilla/show_bug.cgi?id=155 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234055] Unable to reach dual monitor resolution with 2x 4k UHD side by side to 7680x2160
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234055 https://bugzilla.suse.com/show_bug.cgi?id=1234055#c32 --- Comment #32 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Otrebor Igorig from comment #31) > Stumbled over this article on Phoronix today: > https://www.phoronix.com/news/Linux-6.14-Intel-UHBR-TB > > Since an early 6.12 kernel worked with the full displays (leap only has > 6.4.x so far), Note that Leap 15.6 is based on 6.4.x, but received tons of backports for DRM drivers. So it might be some of backports that caused a regression. You can check the older 6.4.x kernel from OBS home:tiwai:kernel:6.4 repo https://download.opensuse.org/repositories/home:/tiwai:/kernel:/6.4/backpor… for installing on a Leap system. The package version looks newer (6.4.12), but it's certainly "older" than Leap 15.6 kernels that dropped the minor version number. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233414] Torn screen when at 4k@120hz after Tumbleweed 2024-10-05
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233414 https://bugzilla.suse.com/show_bug.cgi?id=1233414#c8 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|REOPENED |RESOLVED --- Comment #8 from Takashi Iwai <tiwai(a)suse.com> --- OK, then let's close again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233537] evince dumps core zooming in on PDF
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233537 Yifan Jiang <yfjiang(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yfjiang(a)suse.com |alynx.zhou(a)suse.com CC| |gnome-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235887] New: blkid.conf should be moved to /usr/etc
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235887 Bug ID: 1235887 Summary: blkid.conf should be moved to /usr/etc Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- libblkid.so.1 is using libeconf to read the confguration file blkid.conf This means we support: /etc/blkid.conf /usr/etc/blkid.conf /usr/etc/blkid.conf.d/*.conf /etc/blkid.conf.d/*.conf Please move the blkid.conf file below /usr References: https://jira.suse.com/browse/PM-3430 https://jira.suse.com/browse/PED-3863 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1233537] evince dumps core zooming in on PDF
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233537 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gnome-bugs(a)suse.de |yfjiang(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233738] SELINUX prevents XRDP from working when in enforcing mode
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233738 https://bugzilla.suse.com/show_bug.cgi?id=1233738#c25 --- Comment #25 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1233738) was mentioned in https://build.opensuse.org/request/show/1239232 Factory / selinux-policy -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232527] [SELinux] "systemd-bless-boot good" fail during boot time
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1232527 https://bugzilla.suse.com/show_bug.cgi?id=1232527#c15 --- Comment #15 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1232527) was mentioned in https://build.opensuse.org/request/show/1239232 Factory / selinux-policy -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233537] evince dumps core zooming in on PDF
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233537 https://bugzilla.suse.com/show_bug.cgi?id=1233537#c2 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar(a)opensuse.org --- Comment #2 from Dominique Leuenberger <dimstar(a)opensuse.org> --- FWIW, this is reproducible in Tumbleweed using evince 48.alpha too (the backtrace does look different though) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235829] [Build 20250108-SELinux] openQA test fails in systemd_nspawn
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235829 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |cathy.hu(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236158] [Build 20250120] qgis: couldn't load SIP module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236158 https://bugzilla.suse.com/show_bug.cgi?id=1236158#c4 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |opensuse(a)dstoecker.de --- Comment #4 from Dominique Leuenberger <dimstar(a)opensuse.org> --- (In reply to hui from comment #3) > Also reported in bug 1236040 pity - so the error was even known before submitting this to Factory SR was created on 2025-01-20T09:37:02 CC dstoecker (2nd assigned maintainer and actually submitter of the request) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236158] New: [Build 20250120] qgis: couldn't load SIP module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236158 Bug ID: 1236158 Summary: [Build 20250120] qgis: couldn't load SIP module Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4794673/modules/qgis /steps/17 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation The error message according to openQA implies an API conflict between different components - sadly, it's cut off and not readable. Very likely we just need to get the full message and then be able to identify the component(s) that need a rebuild (assuming they DO build) openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_gnome@64bit fails in [qgis](https://openqa.opensuse.org/tests/4794673/modules/qgis/steps/17) ## Test suite description Maintainer: QE Core, asmorodskyi. Extra tests which were designed to run on gnome ## Reproducible Fails since (at least) Build [20240528](https://openqa.opensuse.org/tests/4231828) ## Expected result Last good: [20240527](https://openqa.opensuse.org/tests/4227928) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1235671] [Build 20250108-SELinux] tigervnc: openQA test fails in vnc_two_passwords because tigervnc does not ship selinux module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235671 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sndirsch(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235671] [Build 20250108-SELinux] tigervnc: openQA test fails in vnc_two_passwords because tigervnc does not ship selinux module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235671 https://bugzilla.suse.com/show_bug.cgi?id=1235671#c2 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gfx-bugs(a)suse.de |joan.torres(a)suse.com --- Comment #2 from Stefan Dirsch <sndirsch(a)suse.com> --- Joan, could you please dig into this? Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235660] New: SELinux: sshd not allowed to write to wtmpdb socket
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235660 Bug ID: 1235660 Summary: SELinux: sshd not allowed to write to wtmpdb socket Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- wtmpdb got a daemon "wtmpdbd" to solve some possible security problems (https://github.com/thkukuk/wtmpdb/releases/tag/v0.50.0) Communication is done via varlink sockets (/run/wtmpdb/reader.socket and /run/wtmpdb/writer.socket). But sshd-session is not allowed to write to /run/wtmpdb/writer.socket: type=AVC msg=audit(1736520553.205:135): avc: denied { write } for pid=1365 comm="sshd-session" name="writer.socket" dev="tmpfs" ino=2318 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file permissive=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1230118] [SELinux] Select SELinux as default MAC in enforcing mode in the tumbleweed installer
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1230118 Bug 1230118 depends on bug 1235801, which changed state. Bug 1235801 Summary: [Build 20250108-SELinux] openQA test fails in samba server https://bugzilla.suse.com/show_bug.cgi?id=1235801 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235801] [Build 20250108-SELinux] openQA test fails in samba server
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235801 https://bugzilla.suse.com/show_bug.cgi?id=1235801#c4 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #4 from Cathy Hu <cathy.hu(a)suse.com> --- https://build.opensuse.org/request/show/1239232 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216739] New: sssd: support configs and drop-ins in /usr
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1216739 Bug ID: 1216739 Summary: sssd: support configs and drop-ins in /usr Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: scabrero(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: ckowalczyk(a)suse.com, jengelh(a)inai.de, scabrero(a)suse.com Target Milestone: --- Found By: --- Blocker: --- sssd ships configs in /etc. In order to be able to ship configs as packages, support for having configs in /usr is desireable as well. Any chance to simplement /usr/etc support? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1235767] [Build 20250108-SELinux] openQA test fails in rsync_client
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235767 https://bugzilla.suse.com/show_bug.cgi?id=1235767#c1 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |MOVED --- Comment #1 from Cathy Hu <cathy.hu(a)suse.com> --- test issue, moving to: https://progress.opensuse.org/issues/175890 Reproducer: "server": wget https://raw.githubusercontent.com/os-autoinst/os-autoinst-distri-opensuse/r… -O /etc/rsyncd.conf echo "test42:424242" >> /etc/rsyncd.secrets chmod o-r /etc/rsyncd.secrets mkdir -p /srv/rsync_test/pub echo "fooo test" >> /srv/rsync_test/pub/file1 systemctl start rsyncd "client": export RSYNC_PASSWORD=424242 rsync rsync://test42@localhost/pub/ fails with AVC: ---- time->Tue Jan 21 10:58:37 2025 type=AVC msg=audit(1737453517.712:2452): avc: denied { read } for pid=20348 comm="rsync" name="pub" dev="vda2" ino=259 scontext=system_u:system_r:rsync_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230118] [SELinux] Select SELinux as default MAC in enforcing mode in the tumbleweed installer
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1230118 Bug 1230118 depends on bug 1235767, which changed state. Bug 1235767 Summary: [Build 20250108-SELinux] openQA test fails in rsync_client https://bugzilla.suse.com/show_bug.cgi?id=1235767 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |MOVED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235659] New: fwupd 2.0 polkit-user-privilege and polkit-untracked-privilege
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235659 Bug ID: 1235659 Summary: fwupd 2.0 polkit-user-privilege and polkit-untracked-privilege Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I have been working on updating fwupd to the 2.0 branch - this mostly works fine by now The build succeeds except some rpmlint rules about polkit privileges/additions, that need a review: [ 172s] fwupd.x86_64: E: polkit-user-privilege (Badness: 10000) org.freedesktop.fwupd.emulation-load (auth_admin:no:yes) [ 172s] fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.freedesktop.fwupd.quit (auth_admin:no:auth_admin_keep) [ 172s] fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.freedesktop.fwupd.reset-config (auth_admin:no:auth_admin_keep) [ 172s] fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.freedesktop.fwupd.emulation-save (auth_admin:no:auth_admin_keep) [ 172s] fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.freedesktop.fwupd.emulation-tag (auth_admin:no:auth_admin_keep) The package can be found at https://build.opensuse.org/package/show/home:dimstar:Factory/fwupd for now (builds for openSUSE_Factory in that project succeed, as it does not use the rpmlint-strict policies; the badness factor is set to 10 in this case) -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1233688] abcde queries incorrect database
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233688 https://bugzilla.suse.com/show_bug.cgi?id=1233688#c1 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |martin.wilck(a)suse.com --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- % osc maintainer -e abcde Defined in package: multimedia:apps/abcde bugowner of abcde : stephan(a)kulow.org maintainer of abcde : stephan(a)kulow.org, martin.wilck(a)suse.com Bugzilla does not accept 'stephan(a)kulow.org', assigning to Martin Wilck. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235879] New: io_uring related hang with node.js processes on Leap 15.6
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235879 Bug ID: 1235879 Summary: io_uring related hang with node.js processes on Leap 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: david(a)qzx.se QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- We're hosting kubernetes nodes using OpenSUSE Leap 15.6. The last couple of days when trying to drain them for upgrades, three nodes have failed due to unkillable node.js processes. The node processes do not react to kill -9 as expected. Kernel version is the latest available: Linux <..> 6.4.0-150600.23.30-default #1 SMP PREEMPT_DYNAMIC Sat Dec 7 08:37:53 UTC 2024 (8c25a0a) x86_64 x86_64 x86_64 GNU/Linux Checking /proc/<pid>/stack gives: sudo cat /proc/21449/stack [<0>] io_uring_del_tctx_node+0x59/0xb0 [<0>] io_uring_clean_tctx+0x5b/0xb0 [<0>] io_uring_cancel_generic+0x2b0/0x300 [<0>] do_exit+0x17c/0xb60 [<0>] do_group_exit+0x2d/0x80 [<0>] __x64_sys_exit_group+0x14/0x20 [<0>] do_syscall_64+0x5b/0x80 [<0>] entry_SYSCALL_64_after_hwframe+0x7c/0xe6 .. which makes me suspect that it might be related to https://lore.kernel.org/io-uring/3d913aef-8c44-4f50-9bdf-7d9051b08941@app.f… There are some backports mentioned in that thread (like "io_uring: always lock __io_cqring_overflow_flush"), could the OpenSUSE kernel possibly be missing one or more of these? -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1236009] New: Build failure on Leap 15.5/15.6 due to unsupported GCC flag -mstack-protector-guard for aarch64 cross-compiler
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236009 Bug ID: 1236009 Summary: Build failure on Leap 15.5/15.6 due to unsupported GCC flag -mstack-protector-guard for aarch64 cross-compiler Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: richard.lyu(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I attempted to build the package on both openSUSE Leap 15.5 and Leap 15.6. During the build process, it failed with the following error: ``` aarch64-suse-linux-gcc: error: unrecognized command line option '-mstack-protector-guard=global'; did you mean '-fstack-protector-all'? ``` It appears that the aarch64-suse-linux-gcc cross-compiler does not support the -mstack-protector-guard flag. Based on GCC's documentation, this flag is supported across architectures except for LOONGARCH64. If the issue lies in the toolchain, it might require updating or patching the cross-compiler to ensure compatibility. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1233537] evince dumps core zooming in on PDF
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1233537 https://bugzilla.suse.com/show_bug.cgi?id=1233537#c1 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |gnome-bugs(a)suse.de Component|Other |GNOME --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- % osc maintainer -e evince Defined in project: GNOME:Factory bugowner of evince : os.gnome.maintainers(a)gmail.com maintainer of evince : dimstar(a)opensuse.org, sreeves(a)suse.com, factory-repo-checker(a)kulow.org, -, -, - -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236047] Why NetworkManager-dns-dnsmasq doesn’t Require dnsmasq?
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236047 https://bugzilla.suse.com/show_bug.cgi?id=1236047#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1236047) was mentioned in https://build.opensuse.org/request/show/1239210 Factory / NetworkManager-dns-dnsmasq -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225965] New: Improve KDE Discover bug reporting button
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1225965 Bug ID: 1225965 Summary: Improve KDE Discover bug reporting button Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: Andreas.Stieger(a)gmx.de QA Contact: qa-bugs(a)suse.de CC: shundhammer(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Whenever we have a generic package issues that affects multiple users like (bug 1225174), we get a whole to of bug reports and duplicates. All that users seem to be doing is copy the text "<html>Dependency resolution failed: [...] </html>", report a bug in a random component. Bonus: If the component is YaST, Huha gets angry like in bug 1225949. We do not see the bugs that were not reported due to bugzilla pointing out the possible duplicate, but in the example above we got 14 reports. These users may or may not have read through the duplicated bug, or read the recommendation there. https://github.com/KDE/discover/blob/d644b2a1000c04f084d39a4ef8a3402abf6417… Let's improve user experience here. Some ideas: 0. Direct the user to zypper/YaST for self-service resolution of the conflict. 1. Direct the user to a landing page with instructions for #0. 2. Direct the user to bugzilla search first 3. Take the message - extract package names only, strip arch/installed version, sort, and make a hash from it. Use that as the bug alias for automatic reduplication. 4. or even a fuzzy hash 5. Use a bugzilla whiteboard field with self-service fix instructions -- You are receiving this mail because: You are on the CC list for the bug.

1 24

[Bug 1236148] New: <html>Dependency resolution failed: problem with the installed librist4-0.2.7-1699.1.pm.29.x86_64</html>
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236148 Bug ID: 1236148 Summary: <html>Dependency resolution failed: problem with the installed librist4-0.2.7-1699.1.pm.29.x86_64</html> Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: screening-team-bugs(a)suse.de Reporter: alansorge(a)comcast.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- <html>Dependency resolution failed: problem with the installed librist4-0.2.7-1699.1.pm.29.x86_64</html> 4 weeks or more. I do use packman for video packages. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1235671] [Build 20250108-SELinux] tigervnc: openQA test fails in vnc_two_passwords because tigervnc does not ship selinux module
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235671 https://bugzilla.suse.com/show_bug.cgi?id=1235671#c1 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|cathy.hu(a)suse.com |gfx-bugs(a)suse.de Summary|[Build 20250108-SELinux] |[Build 20250108-SELinux] |openQA test fails in |tigervnc: openQA test fails |vnc_two_passwords |in vnc_two_passwords | |because tigervnc does not | |ship selinux module --- Comment #1 from Cathy Hu <cathy.hu(a)suse.com> --- Hi, we are working on moving the default MAC in tumbleweed from AppArmor to SELinux (see bsc#1230118) and we found a problem during testing with tigervnc. Could you have a look? Reproducer: install a current tumbleweed VM and during installation select SELinux in enforcing mode as Mandatory Access control system, then: sudo zypper in tigervnc echo -e ":37=root\n" >> /etc/tigervnc/vncserver.users systemctl start vncserver@:37 Logs: $ journalctl -eu vncserver@:37.service ... Jan 21 09:48:25 localhost.localdomain systemd[1]: Starting Remote desktop service (VNC)... Jan 21 09:48:25 localhost.localdomain (on-start)[19429]: vncserver@:37.service: Failed to change SELinux context to system_u:system_r:vnc_session_t:s0: Operation not permitted Jan 21 09:48:25 localhost.localdomain (on-start)[19429]: vncserver@:37.service: Failed at step SELINUX_CONTEXT spawning /usr/libexec/vncsession-start: Operation not permitted Jan 21 09:48:25 localhost.localdomain systemd[1]: vncserver@:37.service: Control process exited, code=exited, status=229/SELNUX_CONTEXT Jan 21 09:48:25 localhost.localdomain systemd[1]: vncserver@:37.service: Failed with result 'exit-code'. Jan 21 09:48:25 localhost.localdomain systemd[1]: Failed to start Remote desktop service (VNC). also: $ ls -alZ /usr/sbin/vncsession -rwxr-xr-x. 1 root root system_u:object_r:bin_t:s0 22648 Nov 4 12:25 /usr/sbin/vncsession the type should not be bin_t, but vnc_session_exec_t Fix: Include tigervnc SELinux module provided by upstream: https://github.com/TigerVNC/tigervnc/tree/master/unix/vncserver/selinux You can have a look how the packaging in fedora is done: https://src.fedoraproject.org/rpms/tigervnc/blob/rawhide/f/tigervnc.spec Please let me know if you have any questions, thanks :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132282] libncurses.so.6 uses the ncurses reentrant ABI
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1132282 https://bugzilla.suse.com/show_bug.cgi?id=1132282#c15 --- Comment #15 from Dr. Werner Fink <werner(a)suse.com> --- It should be noted that the ncurses GUI of YaST2 depends on pthreads and hence on reentrant ncurses -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235659] AUDIT-WHITELIST: fwupd: new polkit action ins version 2.0
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235659 https://bugzilla.suse.com/show_bug.cgi?id=1235659#c9 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|AUDIT-0: fwupd: new polkit |AUDIT-WHITELIST: fwupd: new |action ins version 2.0 |polkit action ins version | |2.0 --- Comment #9 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Well that went quick. I'll go ahead whitelisting the missing action. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221429] New: Presence dialog for ssh id_ed25519_sk keys not showing up
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1221429 Bug ID: 1221429 Summary: Presence dialog for ssh id_ed25519_sk keys not showing up Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: felix.niederwanger(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When logging in via ssh using a id_ed25519_sk key (e.g. Yubikey), typically ssh prompts a dialog, prompting the user to push the presence key on the hardware dongle. In Plasma6 when doing ssh against a host that requires this presence button to be pushed, the dialog does not show up. The login still works, ssh just blocks and when I push the button it works, but the confirmation dialog does not show up anymore. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1236047] New: Why NetworkManager-dns-dnsmasq doesn’t Require dnsmasq?
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236047 Bug ID: 1236047 Summary: Why NetworkManager-dns-dnsmasq doesn’t Require dnsmasq? Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: mcepl(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- That’s it: it seems absolutely obvious that the tool which bridges NM with dnsmasq would require both of these tools to be present. Why would anybody install the package when they wouldn’t want to use dnsmasq? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1236147] virtnetworkd[2716]: internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 2
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236147 https://bugzilla.suse.com/show_bug.cgi?id=1236147#c4 --- Comment #4 from John Shand <jshand2013(a)gmail.com> --- (In reply to James Fehlig from comment #3) > This sounds similar to SLE bug#1235809, although not sure if you are able to > access it. > > Is the named service running on your host? If so, are you able to start the > libvirt default network after stopping named? i turned off named and default network was active and running. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236154] New: Does not start in gnome-boxes
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236154 Bug ID: 1236154 Summary: Does not start in gnome-boxes Classification: openSUSE Product: openSUSE Distribution Version: Leap 16.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: bittin(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hey! Installed yesterdays Alpha https://download.opensuse.org/distribution/leap/16.0/installer/iso/agama-in… in gnome-boxes in Arch Linux yesterday but after the install the system does not want to mount the installed system disk and start the system its stuck on trying to mount the disk for 15-30 minutes -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1236151] New: VUL-0: CVE-2025-24014: vim: segmentation fault in win_line() in Vim < 9.1.1043
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236151 Bug ID: 1236151 Summary: VUL-0: CVE-2025-24014: vim: segmentation fault in win_line() in Vim < 9.1.1043 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437493/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.schreiner(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-24014 https://seclists.org/oss-sec/2025/q1/34 https://github.com/vim/vim/security/advisories/GHSA-j3g9-wg22-v955 https://github.com/vim/vim/commit/9d1bed5eccdbb46a26b8a484f5e9163c40e63919 https://www.cve.org/CVERecord?id=CVE-2025-24014 https://bugzilla.redhat.com/show_bug.cgi?id=2339074 http://www.openwall.com/lists/oss-security/2025/01/20/4 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1236153] New: VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in Easy-RSA
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236153 Bug ID: 1236153 Summary: VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in Easy-RSA Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437492/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: seroton10(a)gmail.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-13454 https://bugzilla.redhat.com/show_bug.cgi?id=2339062 https://www.cve.org/CVERecord?id=CVE-2024-13454 https://community.openvpn.net/openvpn/wiki/CVE-2024-13454 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1236152] New: VUL-0: CVE-2025-0411: 7zip, p7zip: Mark-of-the-Web Bypass Vulnerability
by bugzilla_noreply＠suse.com 21 Jan '25

21 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236152 Bug ID: 1236152 Summary: VUL-0: CVE-2025-0411: 7zip, p7zip: Mark-of-the-Web Bypass Vulnerability Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/437501/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: antonio.teixeira(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Fixed in 7-Zip version 24.09 References: https://www.zerodayinitiative.com/advisories/ZDI-25-045/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-0411 -- You are receiving this mail because: You are on the CC list for the bug.

1 2