January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1222098] tpm resource manager - tpm2_save-context failed with error 0x0901
by bugzilla_noreply＠suse.com 07 Jan '25

07 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1222098 https://bugzilla.suse.com/show_bug.cgi?id=1222098#c12 --- Comment #12 from William Brown <william.brown(a)suse.com> --- Nope didn't lead anywhere :( But I've found ways to work around the issue now so it's not a high priority. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235142] New: Tor-browser with firejail will fail to start when AppArmor active and (unmodified) firejail-profiles (torbrowser-launcher)
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235142 Bug ID: 1235142 Summary: Tor-browser with firejail will fail to start when AppArmor active and (unmodified) firejail-profiles (torbrowser-launcher) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: All OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: opensuse.k1akb(a)slmail.me QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This is likely a consequence in conjunction with reported bug #1235080. (Incorrect AppArmor profile for tor-browser, i.e. torbrowser-launcher package, fails to enforce apparmor-protections because of errors in apparmor-profile for torbrowser.) After having fixed the above, `firejail` fails to run Tor-browser (as installed by the TorBrowser-launcher). This is likely (IIUC) due to the default configuration of firejail (`/etc/firejail/firejail.config`) and the intended additional actions as described in the firejail torbrowser-launcher profile (`/etc/firejail/torbrowser-launcher.profile`). What happens: With AppArmor now correctly enforcing policies according to the torbrowser-launcher profile, tor-browser will start in an already somewhat restricted mode. Now, if launched with `firejail`, which is able to cooperate with AppArmor, it fails to start `tor` and consequently will not be able to establish any connections or any interaction at all with the tor network. There is no logging, but given some other behavior, it is very likely that the `tor` process will not even start/spawn. Likely due to necessary permissions being denied. To be specific, in facts: - `/etc/firejail/firejail.config` notes that `apparmor` support is enabled by default. - `/etc/firejail/torbrowser-launcher.profile` notes that `apparmor` is disabled by default, due to a note marked "IMPORTANT" that outlines extra steps that need to be taken: 1-line change in the AppArmor-profile in `/etc/apparmor.d/local/firejail-default`, i.e. "the relevant rule [..] will need to be uncommented [..]". - the mentioned rule is not uncommented by default. Resolution: I think it is relatively straight-forward but would like to have another pair of eyes that can confirm, that indeed 'apparmor' setting in firejail is active by default, and consequently there is a conflict due to documented additional requirement as mentioned in item 2. So, either default firejail config should disable 'apparmor' config by default (does not seem very appealing) or `apparmor` package should have this additional line uncommented by default. Right now, AppArmor and/or firejail cause issues when used with tor-browser due to either this or the other bug mentioned at the start of this post. It would be good to have configurations properly aligned. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228016] VNC login results in black screen on KDE
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1228016 https://bugzilla.suse.com/show_bug.cgi?id=1228016#c4 --- Comment #4 from Dev Guy <devguy.ca(a)gmail.com> --- Created attachment 879424 --> https://bugzilla.suse.com/attachment.cgi?id=879424&action=edit Remote Admi UI -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228016] VNC login results in black screen on KDE
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1228016 https://bugzilla.suse.com/show_bug.cgi?id=1228016#c3 --- Comment #3 from Dev Guy <devguy.ca(a)gmail.com> --- @Fabian Vogt, there is no way to select what vnc server to run. Have you actually look at the "Remove Administration" UI? See attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235076] New: virtualenvwrapper, operating difficulties
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235076 Bug ID: 1235076 Summary: virtualenvwrapper, operating difficulties Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: dadrohrer66(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello, virtualenvwrapper has been installed on tumbleweed with zypper. I am unable to use the mkvirtualenv, workon and rmvirtualenv commands after installation. I have searched the entire machine for the virtualenvwrapper.sh file, without success. The following .bashrc modifications are therefore inoperative. export WORKON_HOME=$HOME/.virtualenvs export VIRTUALENVWRAPPER_PYTHON=/usr/bin/python3 export VIRTUALENVWRAPPER_VIRTUALENV_ARGS=' -p /usr/bin/python3 ' export PROJECT_HOME=$HOME/Devel source /usr/local/bin/virtualenvwrapper.sh As pip should not be operated outside a virtual environment, I created one. Then virutalenvwrapper could be installed with pip and the necessary files created. I suspect that this way of installing virtualenvwrapper is based on security issues. Unfortunately, I don't have the knowledge to install it properly. I would be grateful to learn how to install this software cleanly and following a given method for the use of a user. Thank you for your understanding and help. Daniel -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1235095] VUL-0: CVE-2025-22376: perl-Net-OAuth: Default nonce for Net:OAuth package for perl is not cryptographically strong
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235095 https://bugzilla.suse.com/show_bug.cgi?id=1235095#c2 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tina.mueller(a)suse.com --- Comment #2 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Fixed package in devel:languages:perl:autoupdate/perl-Net-OAuth Maybe ingest the boo# and issue an update? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230499] New: hppa-suse-linux-ld: cannot find libgcc.a: No such file or directory
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1230499 Bug ID: 1230499 Summary: hppa-suse-linux-ld: cannot find libgcc.a: No such file or directory Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mardnh(a)gmx.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I just wanted to compile a development version of seabios-hppa to make use of current features of qemu-system-hppa. $ git clone -b devel https://github.com/hdeller/seabios-hppa During the linking stage the build fails ... --- $ make parisc V=1 CROSS_PREFIX=hppa-suse-linux- DIRS="" OUT=out/ BITS=32 BIT_SUFFIX="" CROSS_PREFIX=hppa-linux-gnu- make -f Makefile.parisc all make[1]: Entering directory '/home/mhauke/tmp/seabios-hppa' Linking out/hppa-firmware.img cpp -P -MD -MT out/hppa-firmware.img -Isrc -D__ASSEMBLY__ -DBITS=32 src/parisc/pafirmware.lds.S -o out/pafirmware.lds hppa-suse-linux-gcc -Iout/ -Isrc -Ivgasrc -Os -MD -g -Wall -Wno-strict-aliasing -Wold-style-definition -Wno-address-of-packed-member -Wno-stringop-overflow -Wno-array-bounds -Wtype-limits -fomit-frame-pointer -freg-struct-return -ffreestanding -fno-delete-null-pointer-checks -fdata-sections -fno-common -fno-merge-constants -mdisable-fpregs -fno-builtin-printf -fno-ipa-sra -fno-pie -fno-stack-protector -fstack-check=no -mfast-indirect-calls -DMODE16=0 -DMODESEGMENT=0 -c src/version.c -o out/version.o hppa-suse-linux-ld -N -T out/pafirmware.lds out/head.o out/version.o -X -o out/hppa-firmware.img -e startup --as-needed out/ccode32flat.o libgcc.a hppa-suse-linux-ld: cannot find libgcc.a: No such file or directory make[1]: *** [Makefile.parisc:172: out/hppa-firmware.img] Error 1 ---- It seems that all cross-XXX-gcc packages don't have the arch specific libgcc.a packaged ... --- $ /usr/bin/hppa-suse-linux-gcc -print-libgcc-file-name libgcc.a $ /usr/bin/arm-suse-linux-gnueabi-gcc -print-libgcc-file-name libgcc.a --- vs --- $ /usr/bin/gcc -print-libgcc-file-name /usr/lib64/gcc/x86_64-suse-linux/14/libgcc.a $ /usr/bin/gcc -m32 -print-libgcc-file-name /usr/lib64/gcc/x86_64-suse-linux/14/32/libgcc.a --- Wouldn't it make sense to ship arch specific libgcc.a in cross-XXX-gcc packges ? -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1235095] VUL-0: CVE-2025-22376: perl-Net-OAuth: Default nonce for Net:OAuth package for perl is not cryptographically strong
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235095 https://bugzilla.suse.com/show_bug.cgi?id=1235095#c1 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(security-team@sus | |e.de) CC| |Andreas.Stieger(a)gmx.de, | |security-team(a)suse.de --- Comment #1 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Something seems to be off in the way the bugowner was determined. Neither "osc maintainer" nor "osc bugowner" mention this user, which seems to be inactive for years? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191723] fractal package should require gstreamer-plugins-good-gtk
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1191723 https://bugzilla.suse.com/show_bug.cgi?id=1191723#c1 Bjørn Lie <bjorn.lie(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED CC| |bjorn.lie(a)gmail.com Status|NEW |RESOLVED --- Comment #1 from Bjørn Lie <bjorn.lie(a)gmail.com> --- https://build.opensuse.org/request/show/1235406 Closing as resolved fixed (fix on its way). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228176] New: Missing gstreamer-plugins-good-32bit package
by bugzilla_noreply＠suse.com 06 Jan '25

06 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1228176 Bug ID: 1228176 Summary: Missing gstreamer-plugins-good-32bit package Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: obs.coke518(a)passinbox.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Wine needs this package to play videos in some 32bit games. The following error is logged: winegstreamer: failed to create deinterlace, are 32-bit GStreamer "good" plugins installed? -- You are receiving this mail because: You are on the CC list for the bug.

1 2