March 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1182657] VUL-0: CVE-2021-21309: redis: Integer overflow on 32-bit systems
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182657 https://bugzilla.suse.com/show_bug.cgi?id=1182657#c3 Ruediger Oertel <ro(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ro(a)suse.com Assignee|ro(a)suse.de |bbobrov(a)suse.com --- Comment #3 from Ruediger Oertel <ro(a)suse.com> --- Boris, do you want to take this one ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172867] The upgrade crash if there are repos using ${releasever}
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1172867 https://bugzilla.suse.com/show_bug.cgi?id=1172867#c15 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carlos.e.r(a)opensuse.org --- Comment #15 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- *** Bug 1181965 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181965] 15.2 DVD upgrade doesn't understand ${releasever} in repo definition
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1181965 https://bugzilla.suse.com/show_bug.cgi?id=1181965#c2 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |ancor(a)suse.com Resolution|--- |DUPLICATE --- Comment #2 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- This is a duplicate of bug#1172867 As you can see there, the bug was already fixed so Leap 15.3 should not be affected. But we don't have any mechanism in openSUSE to update the ISO of an already released product like 15.2. *** This bug has been marked as a duplicate of bug 1172867 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1090209] New: Package libgccjit
by bugzilla_noreply＠novell.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1090209 Bug ID: 1090209 Summary: Package libgccjit Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: adam(a)mizerski.pl QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- GCC provides libgccjit. I'd be grateful if it was packaged. https://gcc.gnu.org/onlinedocs/jit/internals/index.html#packaging-notes -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1182657] VUL-0: CVE-2021-21309: redis: Integer overflow on 32-bit systems
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182657 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2021-2130 | |9:7.4:(AV:N/AC:H/PR:N/UI:N/ | |S:U/C:N/I:H/A:H) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182838] [Build 90.1] openQA test fails in yast2_firstboot - yast2 registration failed on root password screen
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182838 https://bugzilla.suse.com/show_bug.cgi?id=1182838#c5 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast2-maintainers(a)suse.de |lubos.kocman(a)suse.com --- Comment #5 from Stefan Hundhammer <shundhammer(a)suse.com> --- In that case I guess it's up to the Leap release manager to take care of this. Reassigning. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182838] [Build 90.1] openQA test fails in yast2_firstboot - yast2 registration failed on root password screen
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182838 https://bugzilla.suse.com/show_bug.cgi?id=1182838#c4 --- Comment #4 from Stefan Hundhammer <shundhammer(a)suse.com> --- We just discussed this in IRC. jreidinger wrote that the "if" in the yast2-firstboot.spec file does not have any effect here since the package is built against SLE and just taken as it is, i.e. in the SLE version which does call the registration. So possible solutions are: - Rebuild the package for Leap so the "if" takes effect. - Check at runtime if yast2-registration is installed and skip the registration step; however, that might not be so simple since we are using a very generic mechanism for the worflow which uses information from constrol.xml / installation.xml, so we'd have to do this differently. IMHO the more robust approach would be to simply rebuild the yast2-firstboot package for Leap. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1157943] New: gcc: crash at __libc_start_main ./csu/libc-start.c:308
by bugzilla_noreply＠novell.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1157943 Bug ID: 1157943 Summary: gcc: crash at __libc_start_main ./csu/libc-start.c:308 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: matwey.kornilov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 825091 --> http://bugzilla.opensuse.org/attachment.cgi?id=825091&action=edit bitRotateRight.ii When compiling this: https://github.com/ClickHouse/ClickHouse with this command: /usr/bin/c++ -DBOOST_SYSTEM_NO_DEPRECATED -DLZ4_DISABLE_DEPRECATE_WARNINGS=1 -DPOCO_STATIC -DPOCO_UNBUNDLED_ZLIB -DWITH_GZFILEOP -DZLIB_COMPAT -Idbms/src/Functions/include -Idbms/src/Core/include -I../dbms/src -Idbms/src -I../libs/libcommon/include -Ilibs/libcommon/include -I../contrib/zlib-ng -Icontrib/zlib-ng -I../contrib/cityhash102/include -I../contrib/croaring -I../libs/libmysqlxx/include -I../contrib/mariadb-connector-c/include -Icontrib/mariadb-connector-c/include -I../libs/consistent-hashing -I../libs/consistent-hashing-sumbur -I../contrib/libfarmhash -I../contrib/murmurhash/include -isystem ../contrib/libdivide -isystem ../contrib/libmetrohash/src -isystem ../contrib/sparsehash-c11 -isystem ../contrib/base64/include -isystem ../contrib/lz4/lib -isystem ../contrib/h3/src/h3lib/include -isystem ../contrib/rapidjson/include -isystem ../contrib/pdqsort -isystem ../contrib/libpcg-random/include -isystem ../contrib/double-conversion -isystem ../contrib/re2 -isystem ../contrib/poco/Util/include -isystem ../contrib/poco/Foundation/include -isystem ../contrib/poco/XML/include -isystem ../contrib/poco/JSON/include -isystem ../contrib/boost -isystem ../contrib/poco/Net/include -isystem contrib/re2_st -isystem ../contrib/ssl/include -isystem contrib/h3/src/h3lib/include -fdiagnostics-color=always -fsized-deallocation -march=native -fno-omit-frame-pointer -Wall -Wnon-virtual-dtor -Wno-array-bounds -Wextra -Werror -Wshadow -O3 -DNDEBUG -D OS_LINUX -fno-tree-loop-distribute-patterns -g0 -std=c++17 -MD -MT dbms/src/Functions/CMakeFiles/clickhouse_functions.dir/bitRotateRight.cpp.o -MF dbms/src/Functions/CMakeFiles/clickhouse_functions.dir/bitRotateRight.cpp.o.d -o dbms/src/Functions/CMakeFiles/clickhouse_functions.dir/bitRotateRight.cpp.o -c ../dbms/src/Functions/bitRotateRight.cpp this happens: during RTL pass: expand In file included from ../dbms/src/Functions/bitRotateRight.cpp:2: ../dbms/src/Functions/FunctionBinaryArithmetic.h: In static member function ‘static void DB::BinaryOperationImplBase<A, B, Op, ResultType_>::vector_constant(DB::PaddedPODArray<T>&, B, DB::PaddedPODArray<ResultType_>&) [with A = unsigned char; B = long unsigned int; Op = DB::BitRotateRightImpl<unsigned char, long unsigned int>; ResultType_ = long unsigned int]’: ../dbms/src/Functions/FunctionBinaryArithmetic.h:73:13: internal compiler error: in expand_shift_1, at expmed.c:2635 73 | c[i] = Op::template apply<ResultType>(a[i], b); | ^ 0xffffa8a013eb __libc_start_main ../csu/libc-start.c:308 Please submit a full bug report, with preprocessed source if appropriate. Please include the complete backtrace with any bug report. See <https://bugs.opensuse.org/> for instructions. with this system: > gcc -v Using built-in specs. COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/lib64/gcc/aarch64-suse-linux/9/lto-wrapper Target: aarch64-suse-linux Configured with: ../configure --prefix=/usr --infodir=/usr/share/info --mandir=/usr/share/man --libdir=/usr/lib64 --libexecdir=/usr/lib64 --enable-languages=c,c++,objc,fortran,obj-c++,ada,go,d --disable-werror --with-gxx-include-dir=/usr/include/c++/9 --enable-ssp --disable-libssp --disable-libvtv --disable-cet --disable-libcc1 --enable-plugin --with-bugurl=https://bugs.opensuse.org/ --with-pkgversion='SUSE Linux' --with-slibdir=/lib64 --with-system-zlib --enable-libstdcxx-allocator=new --disable-libstdcxx-pch --enable-libphobos --enable-version-specific-runtime-libs --with-gcc-major-version-only --enable-linker-build-id --enable-linux-futex --enable-gnu-indirect-function --program-suffix=-9 --without-system-libunwind --enable-fix-cortex-a53-835769 --enable-fix-cortex-a53-843419 --with-build-config=bootstrap-lto-lean --enable-link-mutex --build=aarch64-suse-linux --host=aarch64-suse-linux Thread model: posix gcc version 9.2.1 20190903 [gcc-9-branch revision 275330] (SUSE Linux) > uname -a Linux localhost 5.3.8-1-default #1 SMP Wed Oct 30 07:12:05 UTC 2019 (ea4c828) aarch64 aarch64 aarch64 GNU/Linux I instead expect this code to compile properly because of gcc bug report hint. Attached here is gzipped unreduced bitRotateRight.ii -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1182212] request to add susepaste to installation system on rescue media
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

https://bugzilla.suse.com/show_bug.cgi?id=1182212 https://bugzilla.suse.com/show_bug.cgi?id=1182212#c2 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(mrmazda@earthlink | |.net) --- Comment #2 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- (In reply to Ancor Gonzalez Sosa from comment #1) > I hope that makes it https://github.com/openSUSE/installation-images/pull/463 As pointed by Steffen, my pull request adds susepaste only to the rescue system. That's what I understood from the bugzilla entry title/description. Felix, can you clarify where is needed? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172846] New: gcc10 regression: C++ nondeterministic debuginfo generation
by bugzilla_noreply＠suse.com 02 Mar '21

02 Mar '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1172846 Bug ID: 1172846 Summary: gcc10 regression: C++ nondeterministic debuginfo generation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: rguenther(a)suse.com Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: matz(a)suse.com Found By: Development Blocker: --- Since we switched to gcc10 as default compiler last week, several formerly reproducible packages have changed status to unreproducible in my reproducible-builds tests for openSUSE. Examples are dustrac libzypp rosegarden solarus spirv-tools watchman z3 When building without debuginfo, objdump -s only shows a diff in the .note.gnu.build-id section But when building with debuginfo, many more diffs appear in debug files. All these builds pull in gcc10-c++-10.1.1 so the problem might be limited to C++ . -- You are receiving this mail because: You are on the CC list for the bug.

1 3