body:
--17224312862.fC7aea.2797
Date: Wed, 31 Jul 2024 13:08:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228659

            Bug ID: 1228659
           Summary: Snapshot 20240730 - unbootable after transactional-update dup
    Classification: openSUSE
           Product: openSUSE Aeon
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Transactional Update
          Assignee: aplanas-at-suse.com
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

All Aeon installations (and I suspect all MicroOS systemd-boot installation=
s)
are failing to boot after a transactional-update dup to the latest snapshot

I suspect the cause is the misbehaviour of the sdbootutil plugin reported
during the transactional-update

Example logs below:

(25/41) Installing: kernel-default-6.10.2-1.1.x86_64 [...
Error: No ESP detected. Legacy system?
...........................................................................=
........................
Error: No ESP detected. Legacy system?
Error: No ESP detected. Legacy system?
dracut[I]: Executing: /usr/bin/dracut -f /boot/initrd-6.10.2-1-default
6.10.2-1-default
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'networkctl' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd-wait-online' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: 35network-legacy: Could not find any command of 'dhclient wicked=
'!
dracut[I]: Module 'dmraid' will not be installed, because command 'dmraid'
could not be found!
dracut[I]: Module 'pcsc' will not be installed, because command 'pcscd' cou=
ld
not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsi-ina=
me'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsiadm'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsid' c=
ould
not be found!
dracut[I]: 95nfs: Could not find any command of 'rpcbind portmap'!
dracut[I]: Module 'nvmf' will not be installed, because command 'nvme' could
not be found!
dracut[I]: Module 'biosdevname' will not be installed, because command
'biosdevname' could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: 35network-legacy: Could not find any command of 'dhclient wicked=
'!
dracut[I]: Module 'dmraid' will not be installed, because command 'dmraid'
could not be found!
dracut[I]: Module 'pcsc' will not be installed, because command 'pcscd' cou=
ld
not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsi-ina=
me'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsiadm'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsid' c=
ould
not be found!
dracut[I]: 95nfs: Could not find any command of 'rpcbind portmap'!
dracut[I]: Module 'nvmf' will not be installed, because command 'nvme' could
not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: *** Including module: systemd ***
dracut[I]: *** Including module: systemd-initrd ***
dracut[I]: *** Including module: i18n ***
dracut[I]: No KEYMAP configured.
dracut[I]: *** Including module: drm ***
dracut[I]: *** Including module: health-checker ***
dracut-install: ERROR: installing 'grub2-editenv'
dracut[E]: FAILED: /usr/lib/dracut/dracut-install -D
/var/tmp/dracut.kGpiZ2/initramfs -a date btrfs awk grub2-editenv
dracut[I]: *** Including module: pcr-signature ***
dracut[I]: *** Including module: transactional-update ***
dracut[I]: *** Including module: btrfs ***
dracut[I]: *** Including module: kernel-modules ***
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
dracut[I]: *** Including module: kernel-modules-extra ***
dracut[I]: *** Including module: rootfs-block ***
dracut[I]: *** Including module: suse-btrfs ***
dracut[I]: *** Including module: suse-xfs ***
dracut[I]: *** Including module: terminfo ***
dracut[I]: *** Including module: udev-rules ***
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
dracut[E]: Failed to detect udev version!
dracut[I]: *** Including module: dracut-systemd ***
dracut[I]: *** Including module: ostree ***
dracut[I]: *** Including module: selinux-microos ***
dracut[I]: *** Including module: usrmount ***
dracut[I]: *** Including module: base ***
dracut[I]: *** Including module: fs-lib ***
dracut[I]: *** Including module: shutdown ***
dracut[I]: *** Including module: suse ***
dracut[I]: *** Including module: suse-initrd ***
dracut[I]: *** Including modules done ***
dracut[I]: *** Installing kernel module dependencies ***
dracut[I]: *** Installing kernel module dependencies done ***
dracut[I]: *** Resolving executable dependencies ***
dracut[I]: *** Resolving executable dependencies done ***
dracut[I]: *** Hardlinking files ***
dracut[I]: *** Hardlinking files done ***
dracut[I]: *** Generating early-microcode cpio image ***
dracut[I]: *** Store current command line parameters ***
dracut[I]: Stored kernel commandline:
dracut[I]:  rd.driver.pre=3Dbtrfs
dracut[I]: rd.driver.pre=3Doverlay
dracut[I]:  root=3DUUID=3D42fc02eb-e038-424f-b5a5-aed45173338d rootfstype=
=3Dbtrfs
rootflags=3Drw,relatime,seclabel,compress=3Dzstd:1,ssd,discard=3Dasync,spac=
e_cache=3Dv2,subvolid=3D403,subvol=3D/@/.snapshots/98/snapshot,subvol=3D@/.=
snapshots/98/snapshot
dracut[I]: *** Stripping files ***
dracut[I]: *** Stripping files done ***
dracut[I]: *** Creating image file '/boot/initrd-6.10.2-1-default' ***
dracut[I]: *** Creating initramfs image file '/boot/initrd-6.10.2-1-default'
done ***
/usr/lib/bootloader/bootloader_entry: line 117: /etc/sysconfig/bootloader: =
No
such file or directory
CA enrolled. Skip /etc/uefi/certs/1F673297.crt
Error: No ESP detected. Legacy system?
...
Error: No ESP detected. Legacy system?
Error: No ESP detected. Legacy system?
/usr/lib/bootloader/bootloader_entry: line 117: /etc/sysconfig/bootloader: =
No
such file or directory
done]
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17224312862.fC7aea.2797
Date: Wed, 31 Jul 2024 13:08:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228659

          Summary
          Snapshot 20240730 - unbootable after transactional-update dup

          Classification
          openSUSE

          Product
          openSUSE Aeon

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Critical

          Priority
          P5 - None

          Component
          Transactional Update

          Assignee
          aplanas@suse.com

          Reporter
          rbrown@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

All Aeon installations (and I suspect all MicroOS systemd-bo=
ot installations)
are failing to boot after a transactional-update dup to the latest snapshot

I suspect the cause is the misbehaviour of the sdbootutil plugin reported
during the transactional-update

Example logs below:

(25/41) Installing: kernel-default-6.10.2-1.1.x86_64 [...
Error: No ESP detected. Legacy system?
...........................................................................=
........................
Error: No ESP detected. Legacy system?
Error: No ESP detected. Legacy system?
dracut[I]: Executing: /usr/bin/dracut -f /boot/initrd-6.10.2-1-default
6.10.2-1-default
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'networkctl' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd-wait-online' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: 35network-legacy: Could not find any command of 'dhclient wicked=
'!
dracut[I]: Module 'dmraid' will not be installed, because command 'dmraid'
could not be found!
dracut[I]: Module 'pcsc' will not be installed, because command 'pcscd' cou=
ld
not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsi-ina=
me'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsiadm'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsid' c=
ould
not be found!
dracut[I]: 95nfs: Could not find any command of 'rpcbind portmap'!
dracut[I]: Module 'nvmf' will not be installed, because command 'nvme' could
not be found!
dracut[I]: Module 'biosdevname' will not be installed, because command
'biosdevname' could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack=
 and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: 35network-legacy: Could not find any command of 'dhclient wicked=
'!
dracut[I]: Module 'dmraid' will not be installed, because command 'dmraid'
could not be found!
dracut[I]: Module 'pcsc' will not be installed, because command 'pcscd' cou=
ld
not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsi-ina=
me'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsiadm'
could not be found!
dracut[I]: Module 'iscsi' will not be installed, because command 'iscsid' c=
ould
not be found!
dracut[I]: 95nfs: Could not find any command of 'rpcbind portmap'!
dracut[I]: Module 'nvmf' will not be installed, because command 'nvme' could
not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack=
 and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: *** Including module: systemd ***
dracut[I]: *** Including module: systemd-initrd ***
dracut[I]: *** Including module: i18n ***
dracut[I]: No KEYMAP configured.
dracut[I]: *** Including module: drm ***
dracut[I]: *** Including module: health-checker ***
dracut-install: ERROR: installing 'grub2-editenv'
dracut[E]: FAILED: /usr/lib/dracut/dracut-install -D
/var/tmp/dracut.kGpiZ2/initramfs -a date btrfs awk grub2-editenv
dracut[I]: *** Including module: pcr-signature ***
dracut[I]: *** Including module: transactional-update ***
dracut[I]: *** Including module: btrfs ***
dracut[I]: *** Including module: kernel-modules ***
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
dracut[I]: *** Including module: kernel-modules-extra ***
dracut[I]: *** Including module: rootfs-block ***
dracut[I]: *** Including module: suse-btrfs ***
dracut[I]: *** Including module: suse-xfs ***
dracut[I]: *** Including module: terminfo ***
dracut[I]: *** Including module: udev-rules ***
udevadm: error while loading shared libraries: libsystemd-shared-255.so: ca=
nnot
open shared object file: No such file or directory
dracut[E]: Failed to detect udev version!
dracut[I]: *** Including module: dracut-systemd ***
dracut[I]: *** Including module: ostree ***
dracut[I]: *** Including module: selinux-microos ***
dracut[I]: *** Including module: usrmount ***
dracut[I]: *** Including module: base ***
dracut[I]: *** Including module: fs-lib ***
dracut[I]: *** Including module: shutdown ***
dracut[I]: *** Including module: suse ***
dracut[I]: *** Including module: suse-initrd ***
dracut[I]: *** Including modules done ***
dracut[I]: *** Installing kernel module dependencies ***
dracut[I]: *** Installing kernel module dependencies done ***
dracut[I]: *** Resolving executable dependencies ***
dracut[I]: *** Resolving executable dependencies done ***
dracut[I]: *** Hardlinking files ***
dracut[I]: *** Hardlinking files done ***
dracut[I]: *** Generating early-microcode cpio image ***
dracut[I]: *** Store current command line parameters ***
dracut[I]: Stored kernel commandline:
dracut[I]:  rd.driver.pre=3Dbtrfs
dracut[I]: rd.driver.pre=3Doverlay
dracut[I]:  root=3DUUID=3D42fc02eb-e038-424f-b5a5-aed45173338d rootfstype=
=3Dbtrfs
rootflags=3Drw,relatime,seclabel,compress=3Dzstd:1,ssd,discard=3Dasync,spac=
e_cache=3Dv2,subvolid=3D403,subvol=3D/@/.snapshots/98/snapshot,subvol=
=3D@/.snapshots/98/snapshot
dracut[I]: *** Stripping files ***
dracut[I]: *** Stripping files done ***
dracut[I]: *** Creating image file '/boot/initrd-6.10.2-1-default' ***
dracut[I]: *** Creating initramfs image file '/boot/initrd-6.10.2-1-default'
done ***
/usr/lib/bootloader/bootloader_entry: line 117: /etc/sysconfig/bootloader: =
No
such file or directory
CA enrolled. Skip /etc/uefi/certs/1F673297.crt
Error: No ESP detected. Legacy system?
...
Error: No ESP detected. Legacy system?
Error: No ESP detected. Legacy system?
/usr/lib/bootloader/bootloader_entry: line 117: /etc/sysconfig/bootloader: =
No
such file or directory
done]

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17224312862.fC7aea.2797--

pkgs: kernel-source systemd tik-osimage-Aeon


body:
--17225047521.98B5.833
Date: Thu, 1 Aug 2024 09:32:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228728

            Bug ID: 1228728
           Summary: system marked as tainted: unmerged-bin
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

```
    State: running
    Units: 444 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 0 units
    Since: Thu 2024-08-01 00:58:42 UTC; 8h ago
  systemd: 256.4+suse.6.g5bba1ebe17
  Tainted: unmerged-bin
```
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225047521.98B5.833
Date: Thu, 1 Aug 2024 09:32:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228728

          Summary
          system marked as tainted: unmerged-bin

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mrueckert@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

```
    State: running
    Units: 444 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 0 units
    Since: Thu 2024-08-01 00:58:42 UTC; 8h ago
  systemd: 256.4+suse.6.g5bba1ebe17
  Tainted: unmerged-bin
```

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225047521.98B5.833--

summary: system marked as tainted: unmerged-bin


--17225053232.8BdB50.869
Date: Thu, 1 Aug 2024 09:42:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228731

            Bug ID: 1228731
           Summary: AUDIT-0: aaa_base: sysctl.d/50-default.conf has new defaults and a new sysctl.d file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The kernel.pid_max sysctl entry was moved from sysctl.d/50-default.conf to =
an
own sysctl.d/50-pid-max.conf file.

Reason: the value depends on the architecture, the current value does not w=
ork
on e.g. x86 and arm 32bit.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225053232.8BdB50.869
Date: Thu, 1 Aug 2024 09:42:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228731

          Summary
          AUDIT-0: aaa_base: sysctl.d/50-default.conf has new defaults =
and a new sysctl.d file

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          kukuk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The kernel.pid_max sysctl entry was moved from sysctl.d/50-d=
efault.conf to an
own sysctl.d/50-pid-max.conf file.

Reason: the value depends on the architecture, the current value does not w=
ork
on e.g. x86 and arm 32bit.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225053232.8BdB50.869--


--17225140850.582bbDf9b.1199
Date: Thu, 1 Aug 2024 12:08:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228742

            Bug ID: 1228742
           Summary: [SELinux] denied avc when xen VM is started via virtmgr-2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: conde.philippe-at-skynet.be
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876432
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876432&action=3Dedit
ausearchwith denied when stating vm

I have server with last tumbleweed snapshot and KDE.
The server has 16 GB memory and I reserve 2 GB for a Xen VM, via this setti=
ng
in grub
"/boot/xen-4.18.2_06-2.gz placeholder dom0_mem=3D13312M,max:13312M
vga=3Dgfx-1024x768x16 ${xen_rm_opts}"

This VM use a fixed disk as storage (sdc) This disk is not mounted on the d=
mo0
server. The disk has one partition which is see by the xen VM as a disk and
partitioned in / (brtrfs) and /home (ext4)  filesystem
hpprol2:/boot/grub2 # lsblk
NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
sda      8:0    0   300G  0 disk=20
=E2=94=9C=E2=94=80sda1   8:1    0    12G  0 part [SWAP]
=E2=94=9C=E2=94=80sda2   8:2    0   120G  0 part /
=E2=94=94=E2=94=80sda4   8:4    0   168G  0 part /home
sdb      8:16   0   300G  0 disk=20
=E2=94=9C=E2=94=80sdb1   8:17   0   100G  0 part /srv
=E2=94=9C=E2=94=80sdb2   8:18   0   100G  0 part /var
=E2=94=9C=E2=94=80sdb3   8:19   0    50G  0 part /local
=E2=94=94=E2=94=80sdb4   8:20   0    50G  0 part /opt
sdc      8:32   0 238.1G  0 disk=20
=E2=94=94=E2=94=80sdc1   8:33   0   238G  0 part=20
sr0     11:0    1  1024M  0 rom=20=20
sr1     11:1    1  1024M  0 rom=20=20
hpprol2:/boot/grub2 #=20

I activated SELinux following your document
https://en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

hpprol2:/boot/grub2 # sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33

hpprol2:/boot/grub2 # zypper info selinux-policy
Loading repository data...
Reading installed packages...

Information for package selinux-policy:
---------------------------------------
Repository     : security:SELinux
Name           : selinux-policy
Version        : 20240731-252.2
Arch           : noarch
Vendor         : obs://build.opensuse.org/security:SELinux
Installed Size : 28.3 KiB
Installed      : Yes
Status         : out-of-date (version 20240729-250.1 installed)
Source package : selinux-policy-20240731-252.2.src
Upstream URL   : https://github.com/fedora-selinux/selinux-policy.git

I attach the output of  ausearch -ts today -m avc

I thing that some errors are related to the raw disk sdc which should  have=
=20
another label so that it can be read/write for the xen VM but I don't known
with type is needed. Also how to protect the new label type for /dev/sdc=20
against a new selinux_policy installed?

Other errors are more difficult to understand: seems that something related=
 to
udevadm, /run/udev can't be accessed by xen VM.

Many thanks in advance
Philippe
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225140850.582bbDf9b.1199
Date: Thu, 1 Aug 2024 12:08:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228742

          Summary
          [SELinux] denied avc when xen VM is started via virtmgr-2

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          conde.philippe@skynet.be

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created at=
tachment 876432 [details]
ausearchwith denied when stating vm

I have server with last tumbleweed snapshot and KDE.
The server has 16 GB memory and I reserve 2 GB for a Xen VM, via this setti=
ng
in grub
"/boot/xen-4.18.2_06-2.gz placeholder dom0_mem=3D13312M,max:13312M
vga=3Dgfx-1024x768x16 ${xen_rm_opts}"

This VM use a fixed disk as storage (sdc) This disk is not mounted on the d=
mo0
server. The disk has one partition which is see by the xen VM as a disk and
partitioned in / (brtrfs) and /home (ext4)  filesystem
hpprol2:/boot/grub2 # lsblk
NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
sda      8:0    0   300G  0 disk=20
=E2=94=9C=E2=94=80sda1   8:1    0    12G  0 part [SWAP]
=E2=94=9C=E2=94=80sda2   8:2    0   120G  0 part /
=E2=94=94=E2=94=80sda4   8:4    0   168G  0 part /home
sdb      8:16   0   300G  0 disk=20
=E2=94=9C=E2=94=80sdb1   8:17   0   100G  0 part /srv
=E2=94=9C=E2=94=80sdb2   8:18   0   100G  0 part /var
=E2=94=9C=E2=94=80sdb3   8:19   0    50G  0 part /local
=E2=94=94=E2=94=80sdb4   8:20   0    50G  0 part /opt
sdc      8:32   0 238.1G  0 disk=20
=E2=94=94=E2=94=80sdc1   8:33   0   238G  0 part=20
sr0     11:0    1  1024M  0 rom=20=20
sr1     11:1    1  1024M  0 rom=20=20
hpprol2:/boot/grub2 #=20

I activated SELinux following your document
https:/=
/en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

hpprol2:/boot/grub2 # sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33

hpprol2:/boot/grub2 # zypper info selinux-policy
Loading repository data...
Reading installed packages...

Information for package selinux-policy:
---------------------------------------
Repository     : security:SELinux
Name           : selinux-policy
Version        : 20240731-252.2
Arch           : noarch
Vendor         : obs://build.opensuse.org/security:SELinux
Installed Size : 28.3 KiB
Installed      : Yes
Status         : out-of-date (version 20240729-250.1 installed)
Source package : selinux-policy-20240731-252.2.src
Upstream URL   : https://github.com/fedora-selinux/selinux-policy.git

I attach the output of  ausearch -ts today -m avc

I thing that some errors are related to the raw disk sdc which should  have=
=20
another label so that it can be read/write for the xen VM but I don't known
with type is needed. Also how to protect the new label type for /dev/sdc=20
against a new selinux_policy installed?

Other errors are more difficult to understand: seems that something related=
 to
udevadm, /run/udev can't be accessed by xen VM.

Many thanks in advance
Philippe

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225140850.582bbDf9b.1199--


--17225190793.A1305.1574
Date: Thu, 1 Aug 2024 13:31:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228750

            Bug ID: 1228750
           Summary: 'python-gobject' not provided by zenmap-7.95-1.1.x86_64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tbohaning-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

nothing provides 'python-gobject' needed by the to be installed
zenmap-7.95-1.1.x86_64

python-gobject2 is installed
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225190793.A1305.1574
Date: Thu, 1 Aug 2024 13:31:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228750

          Summary
          'python-gobject' not provided by zenmap-7.95-1.1.x86_64

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          tbohaning@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

nothing provides 'python-gobject' needed by the to be instal=
led
zenmap-7.95-1.1.x86_64

python-gobject2 is installed

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225190793.A1305.1574--


body:
--17225820490.0B7b.2773
Date: Fri, 2 Aug 2024 07:00:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228777

            Bug ID: 1228777
           Summary: VUL-0: CVE-2024-42458: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/416161/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mvetter-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate =
the
security type.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42458
https://www.cve.org/CVERecord?id=3DCVE-2024-42458
https://github.com/any1/neatvnc/commit/cc71650a69abc2573a0d96d082409d246880=
2d47
https://github.com/any1/neatvnc/compare/v0.8.0...v0.8.1
https://github.com/any1/neatvnc/releases/tag/v0.8.1
http://www.openwall.com/lists/oss-security/2024/08/02/1
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225820490.0B7b.2773
Date: Fri, 2 Aug 2024 07:00:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228777

          Summary
          VUL-0: CVE-2024-42458: server.c in Neat VNC (aka neatvnc) bef=
ore 0.8.1 does not properly validate the security type.

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/416161/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mvetter@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

server.c in Neat VNC (aka neatvnc) before 0.8.1 does not pro=
perly validate the
security type.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42458
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-42458
https://github.com/any1/neatvnc/commit/cc71650a69abc2573a0=
d96d082409d2468802d47
https:/=
/github.com/any1/neatvnc/compare/v0.8.0...v0.8.1
https://git=
hub.com/any1/neatvnc/releases/tag/v0.8.1
http://=
www.openwall.com/lists/oss-security/2024/08/02/1

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225820490.0B7b.2773--

pkgs: neatvnc wayvnc


--17225847350.fB9Aa.2887
Date: Fri, 2 Aug 2024 07:45:35 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228778

            Bug ID: 1228778
           Summary: windows:mingw:win{32|64}: Problems building with symbol support for native packages
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: ralf.habacker-at-freenet.de
          Reporter: ralf.habacker-at-freenet.de
        QA Contact: screening-team-bugs-at-suse.de
                CC: mkbosmans-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

If a package creates packages for native applications in addition to the
cross-compiled binary files (mingw..-cross-*) and the generation of debug i=
nfos
is activated, errors occur during packaging=20

    RPM build errors:
    Installed (but unpackaged) file(s) found:=20

Currently in this case the recipe on
https://en.opensuse.org/Build:projects:windows:mingw:win32#Adding_debug_inf=
o/source_packages_to_native_binaries
is necessary. However, this recipe leads to packaging errors if the creatio=
n of
debug info is disabled in the project or package.=20=20=20

    Could not open %files file
/home/abuild/rpmbuild/BUILD/.../debugsourcefiles.list: No such file or
directory
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17225847350.fB9Aa.2887
Date: Fri, 2 Aug 2024 07:45:35 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228778

          Summary
          windows:mingw:win{32|64}: Problems building with symbol suppo=
rt for native packages

          Classification
          openSUSE

          Product
          openSUSE.org

          Version
          unspecified

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          3rd party software

          Assignee
          ralf.habacker@freenet.de

          Reporter
          ralf.habacker@freenet.de

          QA Contact
          screening-team-bugs@suse.de

          CC
          mkbosmans@gmail.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

If a package creates packages for native applications in add=
ition to the
cross-compiled binary files (mingw..-cross-*) and the generation of debug i=
nfos
is activated, errors occur during packaging=20

    RPM build errors:
    Installed (but unpackaged) file(s) found:=20

Currently in this case the recipe on
https://en.opensuse.org/Bu=
ild:projects:windows:mingw:win32#Adding_debug_info/source_packages_to_nativ=
e_binaries
is necessary. However, this recipe leads to packaging errors if the creatio=
n of
debug info is disabled in the project or package.=20=20=20

    Could not open %files file
/home/abuild/rpmbuild/BUILD/.../debugsourcefiles.list: No such file or
directory

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17225847350.fB9Aa.2887--


--17226752390.aa06Afa.470
Date: Sat, 3 Aug 2024 08:53:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228824

            Bug ID: 1228824
           Summary: libbotan 2 > 3 switch breaks dependencies?
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: t.rother-at-netzwissen.de
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After the latest tumbleweed update I had problems with starting keepassxc

LSB Version:    n/a
Distributor ID: openSUSE
Description:    openSUSE Tumbleweed
Release:        20240801
Codename:       n/a

- current keepassxc 2.7.9 requires libbotan-2-19.x and crashes without it on
startup.
- only botan 3.x is available in the tumbleweed repos
- this affects both the classic rpm and the flathub package

Current workaround: install libbotan 2.x manually from leap 15 and have both
packages in parallel:

S  | Name           | Summary                     | Type
---+----------------+-----------------------------+--------
i+ | libbotan-2-19  | A C++ Crypto Library        | package
i+ | libbotan-3-5   | A C++ Crypto Library        | package

With this setup at least the flathub package works normal:

KeePassXC  org.keepassxc.KeePassXC  2.7.9  stable           system

Note: severity "major" as the password manager is a critical application for
most users
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17226752390.aa06Afa.470
Date: Sat, 3 Aug 2024 08:53:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228824

          Summary
          libbotan 2 > 3 switch breaks dependencies?

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Upgrade Problems

          Assignee
          screening-team-bugs@suse.de

          Reporter
          t.rother@netzwissen.de

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After the latest tumbleweed update I had problems with start=
ing keepassxc

LSB Version:    n/a
Distributor ID: openSUSE
Description:    openSUSE Tumbleweed
Release:        20240801
Codename:       n/a

- current keepassxc 2.7.9 requires libbotan-2-19.x and crashes without it on
startup.
- only botan 3.x is available in the tumbleweed repos
- this affects both the classic rpm and the flathub package

Current workaround: install libbotan 2.x manually from leap 15 and have both
packages in parallel:

S  | Name           | Summary                     | Type
---+----------------+-----------------------------+--------
i+ | libbotan-2-19  | A C++ Crypto Library        | package
i+ | libbotan-3-5   | A C++ Crypto Library        | package

With this setup at least the flathub package works normal:

KeePassXC  org.keepassxc.KeePassXC  2.7.9  stable           system

Note: severity "major" as the password manager is a critical appl=
ication for
most users

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17226752390.aa06Afa.470--


body:
--17227906661.EfecFe.196
Date: Sun, 4 Aug 2024 16:57:46 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228836

            Bug ID: 1228836
           Summary: scrcpy contains pre-built binaries
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: munix9-at-googlemail.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

scrcpy seems to contain pre-built binaries:

URL:            https://github.com/Genymobile/scrcpy
Source0:=20=20=20=20=20=20=20
%{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
Source1:        %{url}/releases/download/v%{version}/scrcpy-server-v%{versi=
on}

$  file scrcpy-server-v2.6.1
scrcpy-server-v2.6.1: Android package (APK), with gradle
app-metadata.properties

https://github.com/Genymobile/scrcpy/blob/master/doc/build.md#build
https://github.com/Genymobile/scrcpy/blob/master/doc/build.md#option-2-use-=
prebuilt-server

This appears to be in violation of packaging policy:
https://en.opensuse.org/openSUSE:Packaging_guidelines#No_inclusion_of_pre-b=
uilt_binaries_or_libraries

If the package can be made functional without this BLOB, please do so. If n=
ot,
built the binary from sources either in the package or as a separate packag=
e.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17227906661.EfecFe.196
Date: Sun, 4 Aug 2024 16:57:46 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228836

          Summary
          scrcpy contains pre-built binaries

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          munix9@googlemail.com

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

scrcpy seems to contain pre-built binaries:

URL:            https://gi=
thub.com/Genymobile/scrcpy
Source0:=20=20=20=20=20=20=20
%{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
Source1:        %{url}/releases/download/v%{version}/scrcpy-server-v%{versi=
on}

$  file scrcpy-server-v2.6.1
scrcpy-server-v2.6.1: Android package (APK), with gradle
app-metadata.properties

https://github.com/Genymobile/scrcpy/blob/master/doc/build.md#build
https://github.com/Genymobile/scrcpy/blob/maste=
r/doc/build.md#option-2-use-prebuilt-server

This appears to be in violation of packaging policy:
https://en.opensuse.org/openSUSE:Pac=
kaging_guidelines#No_inclusion_of_pre-built_binaries_or_libraries

If the package can be made functional without this BLOB, please do so. If n=
ot,
built the binary from sources either in the package or as a separate packag=
e.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17227906661.EfecFe.196--

summary: scrcpy contains pre-built binaries


body:
--17228458073.8CFF4DAe8.574
Date: Mon, 5 Aug 2024 08:16:47 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228854

            Bug ID: 1228854
           Summary: lvm2-monitor.service fails to start
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4381452/modules/jour
                    nal_check/steps/9
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: glass.su-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: ghe-at-suse.com, heming.zhao-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

Aug 04 14:42:49.238412 localhost systemd[1]: lvm2-monitor.service: Main pro=
cess
exited, code=3Dexited, status=3D5/NOTINSTALLED
Aug 04 14:42:49.238420 localhost systemd[1]: lvm2-monitor.service: Failed w=
ith
result 'exit-code'.
Aug 04 14:42:49.249029 localhost lvm[1013]:   Failed to create /etc/lvm/dev=
ices
2
Aug 04 14:42:49.249029 localhost lvm[1013]:   Failed to set up devices.

FWICT this is because lvm2-monitor.service starts before
systemd-remount-fs.service, so /etc is still read-only.

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-AArch64-aarch64-jeos-extra@aarch64-HD20G fails=
 in
[journal_check](https://openqa.opensuse.org/tests/4381452/modules/journal_c=
heck/steps/9)

## Test suite description
Same as jeos, plus some more tests.

## Reproducible

Fails since (at least) Build
[20240611](https://openqa.opensuse.org/tests/4267101)

## Expected result

Last good: [20240610](https://openqa.opensuse.org/tests/4263108) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Daarch64&distri=3Do=
pensuse&flavor=3DJeOS-for-AArch64&machine=3Daarch64-HD20G&test=3Djeos-extra=
&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17228458073.8CFF4DAe8.574
Date: Mon, 5 Aug 2024 08:16:47 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228854

          Summary
          lvm2-monitor.service fails to start

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4381452/modules/journal_che=
ck/steps/9

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          glass.su@suse.com

          Reporter
          fvogt@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          ghe@suse.com, heming.zhao@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

Aug 04 14:42:49.238412 localhost systemd[1]: lvm2-monitor.se=
rvice: Main process
exited, code=3Dexited, status=3D5/NOTINSTALLED
Aug 04 14:42:49.238420 localhost systemd[1]: lvm2-monitor.service: Failed w=
ith
result 'exit-code'.
Aug 04 14:42:49.249029 localhost lvm[1013]:   Failed to create /etc/lvm/dev=
ices
2
Aug 04 14:42:49.249029 localhost lvm[1013]:   Failed to set up devices.

FWICT this is because lvm2-monitor.service starts before
systemd-remount-fs.service, so /etc is still read-only.

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-AArch64-aarch64-jeos-extra@aarch64-HD20G f=
ails in
[journal_check](https://openqa.opensuse.org/tests/4381452/modules/=
journal_check/steps/9)

## Test suite description
Same as jeos, plus some more tests.

## Reproducible

Fails since (at least) Build
[20240611](https://op=
enqa.opensuse.org/tests/4267101)

## Expected result

Last good: [20240610](https://openqa.opensuse.org/tests/4263108) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensu=
se.org/tests/latest?arch=3Daarch64&distri=3Dopensuse&flavor=3DJeOS-=
for-AArch64&machine=3Daarch64-HD20G&test=3Djeos-extra&version=
=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17228458073.8CFF4DAe8.574--

summary: lvm2-monitor.service fails to start


--17228814671.9dCe2c88E.1947
Date: Mon, 5 Aug 2024 18:11:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228876

            Bug ID: 1228876
           Summary: Some Plasma 6 kirigami components aren't installed, preventing Plasma System Settings from loading many of its pages.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: ars2swim-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876484
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876484&action=3Dedit
The "Error loading QML file" after attempting to open the Global Theme menu

After a fresh install of openSUSE Tumbleweed with the latest iso (20240803)=
, I
noticed that I can't load some setings pages, such as the Global Theme page=
, or
the Touchpad settings. Instead, I get "Error loading QML file".

I'm pretty sure this is because the package kf6-kirigami isn't installed. B=
ut
it definitely should be preinstalled with the KDE Plasma 6 Desktop Base
pattern.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17228814671.9dCe2c88E.1947
Date: Mon, 5 Aug 2024 18:11:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228876

          Summary
          Some Plasma 6 kirigami components aren't installed, preventin=
g Plasma System Settings from loading many of its pages.

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          ars2swim@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 876484 [d=
etails]
The "Error loading QML file" after attempting to open the Global =
Theme menu

After a fresh install of openSUSE Tumbleweed with the latest iso (20240803)=
, I
noticed that I can't load some setings pages, such as the Global Theme page=
, or
the Touchpad settings. Instead, I get "Error loading QML file".

I'm pretty sure this is because the package kf6-kirigami isn't installed. B=
ut
it definitely should be preinstalled with the KDE Plasma 6 Desktop Base
pattern.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17228814671.9dCe2c88E.1947--


--17229373812.bDcF8A23.725
Date: Tue, 6 Aug 2024 09:43:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228901

            Bug ID: 1228901
           Summary: VUL-0: CVE-2024-42010: mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/416384/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a
insufficiently filters Cascading Style Sheets (CSS) token sequences in rend=
ered
e-mail messages, allowing a remote attacker to obtain sensitive information.

References:
https://github.com/roundcube/roundcubemail/releases
https://github.com/roundcube/roundcubemail/releases/tag/1.5.8
https://github.com/roundcube/roundcubemail/releases/tag/1.6.8
https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8
https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-=
scripting-vulnerability-in-roundcube-webmail/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42010
https://www.cve.org/CVERecord?id=3DCVE-2024-42010
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17229373812.bDcF8A23.725
Date: Tue, 6 Aug 2024 09:43:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228901

          Summary
          VUL-0: CVE-2024-42010: mod_css_styles in Roundcube through 1.=
5.7 and 1.6.x through 1.6.7 allows a insufficiently filters Cascading Style=
 Sheets (CSS) token sequences in rendered e-mail messages, allowing a remot=
e attacker to obtain sensitive information.

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/416384/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          aj@ajaissle.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

mod_css_styles in Roundcube through 1.5.7 and 1.6.x through =
1.6.7 allows a
insufficiently filters Cascading Style Sheets (CSS) token sequences in rend=
ered
e-mail messages, allowing a remote attacker to obtain sensitive information.

References:
https://git=
hub.com/roundcube/roundcubemail/releases
h=
ttps://github.com/roundcube/roundcubemail/releases/tag/1.5.8
h=
ttps://github.com/roundcube/roundcubemail/releases/tag/1.6.8
https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.=
5.8
https://sonarsour=
ce.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnera=
bility-in-roundcube-webmail/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42010
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-42010

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17229373812.bDcF8A23.725--


--17229373511.0a8B.722
Date: Tue, 6 Aug 2024 09:42:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228900

            Bug ID: 1228900
           Summary: VUL-0: CVE-2024-42009: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_bo ...
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/416383/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x
through 1.6.7 allows a remote attacker to steal and send emails of a victim=
 via
a crafted e-mail message that abuses a Desanitization issue in message_body=
()
in program/actions/mail/show.php.

References:
https://github.com/roundcube/roundcubemail/releases
https://github.com/roundcube/roundcubemail/releases/tag/1.5.8
https://github.com/roundcube/roundcubemail/releases/tag/1.6.8
https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8
https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-=
scripting-vulnerability-in-roundcube-webmail/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42009
https://www.cve.org/CVERecord?id=3DCVE-2024-42009
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17229373511.0a8B.722
Date: Tue, 6 Aug 2024 09:42:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228900

          Summary
          VUL-0: CVE-2024-42009: A Cross-Site Scripting vulnerability i=
n Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker =
to steal and send emails of a victim via a crafted e-mail message that abus=
es a Desanitization issue in message_bo ...

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/416383/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          aj@ajaissle.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A Cross-Site Scripting vulnerability in Roundcube through 1.=
5.7 and 1.6.x
through 1.6.7 allows a remote attacker to steal and send emails of a victim=
 via
a crafted e-mail message that abuses a Desanitization issue in message_body=
()
in program/actions/mail/show.php.

References:
https://git=
hub.com/roundcube/roundcubemail/releases
h=
ttps://github.com/roundcube/roundcubemail/releases/tag/1.5.8
h=
ttps://github.com/roundcube/roundcubemail/releases/tag/1.6.8
https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.=
5.8
https://sonarsour=
ce.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnera=
bility-in-roundcube-webmail/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-42009
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-42009

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17229373511.0a8B.722--


--17229835840.600D3a.3907
Date: Tue, 6 Aug 2024 22:33:04 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228929

            Bug ID: 1228929
           Summary: kernel installation fails to build an initrd
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: dracut-maintainers-at-suse.de
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
                CC: martin.wilck-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876513
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876513&action=3Dedit
journal .tgz

Initial summary:
kernel installation fails to build an initrd

# inxi -S
System:
  Host: p5bse Kernel: 6.7.9-1-default arch: x86_64 bits: 64
  Console: pty pts/0 Distro: openSUSE Tumbleweed 20240806
# df /
Filesystem     1K-blocks    Used Available Use% Mounted on
/dev/sda14       6456747 5140673    984658  84% /
# zypper --no-refresh se -s -i scriptl | grep 'package '
i  | suse-module-tools-scriptlets | package | 16.0.48-1.1 | x86_64 | OSS
# time rpm -ivh ./kernel-default-6.8.9-1.1.x86_64.rpm   ###     . is an NFS
mount
Verifying...                          ################################# [10=
0%]
Preparing...                          ################################# [10=
0%]
Updating / installing...
   1:kernel-default-6.8.9-1.1         ################################# [10=
0%]

real    0m40.537s
user    0m24.840s
sys     0m1.679s
# ls -lrtGg /boot | tail
-rw-----


--17230151653.e7df67e05.5416
Date: Wed, 7 Aug 2024 07:19:25 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228940

            Bug ID: 1228940
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 127.0.6533.72
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

[$11000][349198731] High CVE-2024-6988: Use after free in Downloads. Report=
ed
by lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on
2024-06-25
[$8000][349342289] High CVE-2024-6989: Use after free in Loader. Reported by
Anonymous on 2024-06-25
[TBD][346618785] High CVE-2024-6991: Use after free in Dawn. Reported by
wgslfuzz on 2024-06-12
[$8000][339686368] Medium CVE-2024-6994: Heap buffer overflow in Layout.
Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2024-05-10
[$6000][343938078] Medium CVE-2024-6995: Inappropriate implementation in
Fullscreen. Reported by Alesandro Ortiz on 2024-06-01
[$5000][333708039] Medium CVE-2024-6996: Race in Frames. Reported by Louis
Jannett (Ruhr University Bochum) on 2024-04-10
[$3000][325293263] Medium CVE-2024-6997: Use after free in Tabs. Reported by
Sven Dysthe (@svn-dys) on 2024-02-15
[$2000][340098902] Medium CVE-2024-6998: Use after free in User Education.
Reported by Sven Dysthe (@svn-dys) on 2024-05-13
[$2000][340893685] Medium CVE-2024-6999: Inappropriate implementation in Fe=
dCM.
Reported by Alesandro Ortiz on 2024-05-15
[$500][339877158] Medium CVE-2024-7000: Use after free in CSS. Reported by
Anonymous on 2024-05-11
[TBD][347509736] Medium CVE-2024-7001: Inappropriate implementation in HTML.
Reported by Jake Archibald on 2024-06-17
[$2000][338233148] Low CVE-2024-7003: Inappropriate implementation in FedCM.
Reported by Alesandro Ortiz on 2024-05-01
[TBD][40063014] Low CVE-2024-7004: Insufficient validation of untrusted inp=
ut
in Safe Browsing. Reported by Anonymous on 2023-02-10
[TBD][40068800] Low CVE-2024-7005: Insufficient validation of untrusted inp=
ut
in Safe Browsing. Reported by Umar Farooq  on 2023-08-04
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17230151653.e7df67e05.5416
Date: Wed, 7 Aug 2024 07:19:25 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228940

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 127.0.6533.72

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          gianluca.gabrielli@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

[$11000][349198731] High CVE-2024-6988: Use after free in Do=
wnloads. Reported
by lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on
2024-06-25
[$8000][349342289] High CVE-2024-6989: Use after free in Loader. Reported by
Anonymous on 2024-06-25
[TBD][346618785] High CVE-2024-6991: Use after free in Dawn. Reported by
wgslfuzz on 2024-06-12
[$8000][339686368] Medium CVE-2024-6994: Heap buffer overflow in Layout.
Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2024-05-10
[$6000][343938078] Medium CVE-2024-6995: Inappropriate implementation in
Fullscreen. Reported by Alesandro Ortiz on 2024-06-01
[$5000][333708039] Medium CVE-2024-6996: Race in Frames. Reported by Louis
Jannett (Ruhr University Bochum) on 2024-04-10
[$3000][325293263] Medium CVE-2024-6997: Use after free in Tabs. Reported by
Sven Dysthe (@svn-dys) on 2024-02-15
[$2000][340098902] Medium CVE-2024-6998: Use after free in User Education.
Reported by Sven Dysthe (@svn-dys) on 2024-05-13
[$2000][340893685] Medium CVE-2024-6999: Inappropriate implementation in Fe=
dCM.
Reported by Alesandro Ortiz on 2024-05-15
[$500][339877158] Medium CVE-2024-7000: Use after free in CSS. Reported by
Anonymous on 2024-05-11
[TBD][347509736] Medium CVE-2024-7001: Inappropriate implementation in HTML.
Reported by Jake Archibald on 2024-06-17
[$2000][338233148] Low CVE-2024-7003: Inappropriate implementation in FedCM.
Reported by Alesandro Ortiz on 2024-05-01
[TBD][40063014] Low CVE-2024-7004: Insufficient validation of untrusted inp=
ut
in Safe Browsing. Reported by Anonymous on 2023-02-10
[TBD][40068800] Low CVE-2024-7005: Insufficient validation of untrusted inp=
ut
in Safe Browsing. Reported by Umar Farooq  on 2023-08-04

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17230151653.e7df67e05.5416--


--17230152978.44fe6e.5452
Date: Wed, 7 Aug 2024 07:21:37 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228941

            Bug ID: 1228941
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 127.0.6533.99
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

[TBD][350528343] Critical CVE-2024-7532: Out of bounds memory access in ANG=
LE.
Reported by wgslfuzz on 2024-07-02
[$11000][353552540] High CVE-2024-7533: Use after free in Sharing. Reported=
 by
lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-0=
7-17
[$7000][355256380] High CVE-2024-7550: Type Confusion in V8. Reported by
Zhenghang Xiao (@Kipreyyy) on 2024-07-25
[TBD][352467338] High CVE-2024-7534: Heap buffer overflow in Layout. Report=
ed
by Tashita Software Security on 2024-07-11
[TBD][352690885] High CVE-2024-7535: Inappropriate implementation in V8.
Reported by Tashita Software Security on 2024-07-12
[TBD][354847246] High CVE-2024-7536: Use after free in WebAudio. Reported by
Cassidy Kim(@cassidy6564) on 2024-07-23
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17230152978.44fe6e.5452
Date: Wed, 7 Aug 2024 07:21:37 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228941

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 127.0.6533.99

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          gianluca.gabrielli@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

[TBD][350528343] Critical CVE-2024-7532: Out of bounds memor=
y access in ANGLE.
Reported by wgslfuzz on 2024-07-02
[$11000][353552540] High CVE-2024-7533: Use after free in Sharing. Reported=
 by
lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on 20=
24-07-17
[$7000][355256380] High CVE-2024-7550: Type Confusion in V8. Reported by
Zhenghang Xiao (@Kipreyyy) on 2024-07-25
[TBD][352467338] High CVE-2024-7534: Heap buffer overflow in Layout. Report=
ed
by Tashita Software Security on 2024-07-11
[TBD][352690885] High CVE-2024-7535: Inappropriate implementation in V8.
Reported by Tashita Software Security on 2024-07-12
[TBD][354847246] High CVE-2024-7536: Use after free in WebAudio. Reported by
Cassidy Kim(@cassidy6564) on 2024-07-23

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17230152978.44fe6e.5452--


--17230153342.46Ed30F.5470
Date: Wed, 7 Aug 2024 07:22:14 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228942

            Bug ID: 1228942
           Summary: VUL-0: chromium: multiple vulnerabilities fixed in 127.0.6533.72
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-des=
ktop_23.html

The Stable channel has been updated to 127.0.6533.72/73 for Windows, Mac and
127.0.6533.72 for Linux which will roll out over the coming days/weeks. A f=
ull
list of changes in this build is available in the Log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majori=
ty
of users are updated with a fix. We will also retain restrictions if the bug
exists in a third party library that other projects similarly depend on, but
haven=E2=80=99t yet fixed.

This update includes 22 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

High CVE-2024-6988: Use after free in Downloads. Reported by lime(@limeSec_)
from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-06-25

High CVE-2024-6989: Use after free in Loader. Reported by Anonymous on
2024-06-25

High CVE-2024-6991: Use after free in Dawn. Reported by wgslfuzz on 2024-06=
-12

Medium CVE-2024-6994: Heap buffer overflow in Layout. Reported by Huang Xil=
in
of Ant Group Light-Year Security Lab on 2024-05-10

Medium CVE-2024-6995: Inappropriate implementation in Fullscreen. Reported =
by
Alesandro Ortiz on 2024-06-01

Medium CVE-2024-6996: Race in Frames. Reported by Louis Jannett (Ruhr
University Bochum) on 2024-04-10

Medium CVE-2024-6997: Use after free in Tabs. Reported by Sven Dysthe
(@svn-dys) on 2024-02-15

Medium CVE-2024-6998: Use after free in User Education. Reported by Sven Dy=
sthe
(@svn-dys) on 2024-05-13

Medium CVE-2024-6999: Inappropriate implementation in FedCM. Reported by
Alesandro Ortiz on 2024-05-15

Medium CVE-2024-7000: Use after free in CSS. Reported by Anonymous on
2024-05-11

Medium CVE-2024-7001: Inappropriate implementation in HTML. Reported by Jake
Archibald on 2024-06-17

Low CVE-2024-7003: Inappropriate implementation in FedCM. Reported by Alesa=
ndro
Ortiz on 2024-05-01

Low CVE-2024-7004: Insufficient validation of untrusted input in Safe Brows=
ing.
Reported by Anonymous on 2023-02-10

Low CVE-2024-7005: Insufficient validation of untrusted input in Safe Brows=
ing.
Reported by Umar Farooq  on 2023-08-04
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17230153342.46Ed30F.5470
Date: Wed, 7 Aug 2024 07:22:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228942

          Summary
          VUL-0: chromium: multiple vulnerabilities fixed in 127.0.6533=
.72

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          thomas.leroy@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://chromereleases.googleblog.c=
om/2024/07/stable-channel-update-for-desktop_23.html

The Stable channel has been updated to 127.0.6533.72/73 for Windows, Mac and
127.0.6533.72 for Linux which will roll out over the coming days/weeks. A f=
ull
list of changes in this build is available in the Log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majori=
ty
of users are updated with a fix. We will also retain restrictions if the bug
exists in a third party library that other projects similarly depend on, but
haven=E2=80=99t yet fixed.

This update includes 22 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

High CVE-2024-6988: Use after free in Downloads. Reported by lime(@lime=
Sec_)
from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-06-25

High CVE-2024-6989: Use after free in Loader. Reported by Anonymous on
2024-06-25

High CVE-2024-6991: Use after free in Dawn. Reported by wgslfuzz on 2024-06=
-12

Medium CVE-2024-6994: Heap buffer overflow in Layout. Reported by Huang Xil=
in
of Ant Group Light-Year Security Lab on 2024-05-10

Medium CVE-2024-6995: Inappropriate implementation in Fullscreen. Reported =
by
Alesandro Ortiz on 2024-06-01

Medium CVE-2024-6996: Race in Frames. Reported by Louis Jannett (Ruhr
University Bochum) on 2024-04-10

Medium CVE-2024-6997: Use after free in Tabs. Reported by Sven Dysthe
(@svn-dys) on 2024-02-15

Medium CVE-2024-6998: Use after free in User Education. Reported by Sven Dy=
sthe
(@svn-dys) on 2024-05-13

Medium CVE-2024-6999: Inappropriate implementation in FedCM. Reported by
Alesandro Ortiz on 2024-05-15

Medium CVE-2024-7000: Use after free in CSS. Reported by Anonymous on
2024-05-11

Medium CVE-2024-7001: Inappropriate implementation in HTML. Reported by Jake
Archibald on 2024-06-17

Low CVE-2024-7003: Inappropriate implementation in FedCM. Reported by Alesa=
ndro
Ortiz on 2024-05-01

Low CVE-2024-7004: Insufficient validation of untrusted input in Safe Brows=
ing.
Reported by Anonymous on 2023-02-10

Low CVE-2024-7005: Insufficient validation of untrusted input in Safe Brows=
ing.
Reported by Umar Farooq  on 2023-08-04

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17230153342.46Ed30F.5470--


--17230372893.4fFd55.962
Date: Wed, 7 Aug 2024 13:28:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228951

            Bug ID: 1228951
           Summary: [SELinux] container-selinux Post process failed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876526
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876526&action=3Dedit
output of semodule -l

When running zypper dup I get in the postscript calling part of the output:

```
%posttrans(container-selinux-2.232.1-1.1.noarch) script output:
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
Problems processing filecon rules
Failed post db handling
Post process failed
/usr/sbin/semodule:  Failed!
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
```

Using these selinux-packages (on MicroOS):

milic:~ $ rpm -qa \*selinux\*
selinux-tools-3.7-1.1.x86_64
selinux-policy-targeted-20240731-1.1.noarch
selinux-policy-20240731-1.1.noarch
libselinux1-3.7-1.1.x86_64
flatpak-selinux-1.15.8-2.1.noarch
container-selinux-2.232.1-1.1.noarch
passt-selinux-20240624.1ee2eca-2.1.noarch
patterns-microos-selinux-5.0-89.1.x86_64
python311-selinux-3.7-1.1.x86_64
milic:~ $
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17230372893.4fFd55.962
Date: Wed, 7 Aug 2024 13:28:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228951

          Summary
          [SELinux] container-selinux Post process failed

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 87652=
6 [details]
output of semodule -l

When running zypper dup I get in the postscript calling part of the output:

```
%posttrans(container-selinux-2.232.1-1.1.noarch) script output:
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
Problems processing filecon rules
Failed post db handling
Post process failed
/usr/sbin/semodule:  Failed!
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
++ SELINUX=3Denforcing
++ SELINUXTYPE=3Dtargeted
```

Using these selinux-packages (on MicroOS):

milic:~ $ rpm -qa \*selinux\*
selinux-tools-3.7-1.1.x86_64
selinux-policy-targeted-20240731-1.1.noarch
selinux-policy-20240731-1.1.noarch
libselinux1-3.7-1.1.x86_64
flatpak-selinux-1.15.8-2.1.noarch
container-selinux-2.232.1-1.1.noarch
passt-selinux-20240624.1ee2eca-2.1.noarch
patterns-microos-selinux-5.0-89.1.x86_64
python311-selinux-3.7-1.1.x86_64
milic:~ $

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17230372893.4fFd55.962--


--17230992351.Bde1.6463
Date: Thu, 8 Aug 2024 06:40:35 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228971

            Bug ID: 1228971
           Summary: Install compile_commands.json in kernel live patching devel package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: mvetter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876549
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876549&action=3Dedit
First version of the change

Marcos asked me to change the kernel package to install the
compile_commands.json

At home:jubalh:sepfile/kernel-source I have a change to the kernel-default.=
spec
that should install the compile_commands.json in the
kernel-default-livepatch-devel.
This file contains the command line options used to compile every C file.
Apparently this is useful for the livepatching team.

I don't know much about the livepatching workflow nor the kernel package it=
self
yet, thus opening this bug to gather feedback and learn about the proper
workflow to apply the change.

I'll attach the diff as well.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17230992351.Bde1.6463
Date: Thu, 8 Aug 2024 06:40:35 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228971

          Summary
          Install compile_commands.json in kernel live patching devel p=
ackage

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          mvetter@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 876549 [details]
First version of the change

Marcos asked me to change the kernel package to install the
compile_commands.json

At home:jubalh:sepfile/kernel-source I have a change to the kernel-default.=
spec
that should install the compile_commands.json in the
kernel-default-livepatch-devel.
This file contains the command line options used to compile every C file.
Apparently this is useful for the livepatching team.

I don't know much about the livepatching workflow nor the kernel package it=
self
yet, thus opening this bug to gather feedback and learn about the proper
workflow to apply the change.

I'll attach the diff as well.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17230992351.Bde1.6463--


body:
Gecko/20100101
Firefox/115.0
Build Identifier:=20

After start KVM VM I have this error:

"Error starting domain: internal error: QEMU unexpectedly closed the m=
onitor
(vm=3D=E2=80=98win10=E2=80=99): qxl_send_events: spice-server bug: guest st=
opped, ignoring
2024-08-08T01:45:51.824474Z qemu-system-x86_64: -device
{=E2=80=9Cdriver=E2=80=9D:=E2=80=9Cvfio-pci=E2=80=9D,=E2=80=9Chost=E2=80=9D=
:=E2=80=9C0000:0b:00.0=E2=80=9D,=E2=80=9Cid=E2=80=9D:=E2=80=9Chostdev0=E2=
=80=9D,=E2=80=9Cbus=E2=80=9D:=E2=80=9Cpci.2=E2=80=9D,=E2=80=9Caddr=E2=80=9D=
:=E2=80=9C0x0=E2=80=9D}:
vfio 0000:0b:00.0: group 83 is not viable
Please ensure all devices within the iommu_group are bound to their vfio bus
driver."

The Intel I350-T2 NIC card is properly configured for VFIO passthrough, it =
was
working correct without any single issue up to kernel
6.4.0-150600.23.14-default.=20

After I did upgrade to latest stable 6.4.0-150600.23.17-default the error
described above happened.=20

I have 2 servers which do exactly the same thing after the upgrade to latest
stable kernel.

I have also tried to passthrough the built in Intel I-217 with the same res=
ult.

If I revert to the old one 6.4.0-150600.23.14-default everything is working=
 as
supposed to be without any single issue.

Reproducible: Always

Steps to Reproduce:
1.Enable the iommu for Intel on /etc/default/grub
2.Assign the NIC to the VM for passthrough via Virtual Machine Manager (On =
VM
Add Hardware / PCI Host device)
3.Start the VM guest.
Actual Results:=20=20
"Error starting domain: internal error: QEMU unexpectedly closed the m=
onitor
(vm=3D=E2=80=98win10=E2=80=99): qxl_send_events: spice-server bug: guest st=
opped, ignoring
2024-08-08T01:45:51.824474Z qemu-system-x86_64: -device
{=E2=80=9Cdriver=E2=80=9D:=E2=80=9Cvfio-pci=E2=80=9D,=E2=80=9Chost=E2=80=9D=
:=E2=80=9C0000:0b:00.0=E2=80=9D,=E2=80=9Cid=E2=80=9D:=E2=80=9Chostdev0=E2=
=80=9D,=E2=80=9Cbus=E2=80=9D:=E2=80=9Cpci.2=E2=80=9D,=E2=80=9Caddr=E2=80=9D=
:=E2=80=9C0x0=E2=80=9D}:
vfio 0000:0b:00.0: group 83 is not viable
Please ensure all devices within the iommu_group are bound to their vfio bus
driver."

Expected Results:=20=20
Start the VM guest with the NIC passthrough properly and successfully.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17231684041.C5cD7Ef.2630--

summary: KVM:Starting KVM error "ensure all devices within the iommu_group are bound to their vfio bus driver" after kernel update


--17232311833.9f29afB.1240
Date: Fri, 9 Aug 2024 19:19:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1229042

            Bug ID: 1229042
           Summary: Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: mpdesouza-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Remove the condition that currently only applies to openSUSE Tumbleweed.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17232311833.9f29afB.1240
Date: Fri, 9 Aug 2024 19:19:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1229042

          Summary
          Enable kernel-default-livepatch-devel for TW since it's alrea=
dy enabled on Leap

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          mpdesouza@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Remove the condition that currently only applies to openSUSE=
 Tumbleweed.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17232311833.9f29afB.1240--