September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190190] New: kmod: manpage of modprobe.d not correctly rendered
by bugzilla_noreply＠suse.com 21 Jun '22

21 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1190190 Bug ID: 1190190 Summary: kmod: manpage of modprobe.d not correctly rendered Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: sebix+novell.com(a)sebix.at QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The manpage of modprobe.d looks broken: man modprobe.d | head MODPROBE.D(5) modprobe.d MODPROBE.D(5) .SH "NAME" modprobe.d - Configuration directory for modprobe .SH "SYNOPSIS" .PP /lib/modprobe.d/*.conf .PP /usr/lib/modprobe.d/*.conf The corresponding package `kmod` does not have a bugowner assigned in OBS, so I chose none. Using TW 20210831. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1137383] New: python-virtualenv: creating virtualenvs fails in directories with colons
by bugzilla_noreply＠novell.com 21 Jun '22

21 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1137383 Bug ID: 1137383 Summary: python-virtualenv: creating virtualenvs fails in directories with colons Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: sebix+novell.com(a)sebix.at QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I was unable to add the address of the maintainer (according to OBS) as assignee. With colons -> error: ----- username@computername:~/tmp/path:with:colons> python3 -m virtualenv -p python3 testingvenv Already using interpreter /usr/bin/python3 Using base prefix '/usr' New python executable in /home/username/tmp/path:with:colons/testingvenv/bin/python3 Also creating executable in /home/username/tmp/path:with:colons/testingvenv/bin/python Fatal Python error: initfsencoding: Unable to get the locale encoding ModuleNotFoundError: No module named 'encodings' Current thread 0x00007ff630c0e680 (most recent call first): ERROR: The executable /home/username/tmp/path:with:colons/testingvenv/bin/python3 is not functioning ERROR: It thinks sys.prefix is '/home/username/tmp/path:with:colons' (should be '/home/username/tmp/path:with:colons/testingvenv') ERROR: virtualenv is not compatible with this system or executable ----- username@computername:~/tmp/path:with:colons> python2 -m virtualenv -p python2 testingvenv2 Already using interpreter /usr/bin/python2 New python executable in /home/username/tmp/path:with:colons/testingvenv2/bin/python2 Also creating executable in /home/username/tmp/path:with:colons/testingvenv2/bin/python ImportError: No module named site ERROR: The executable /home/username/tmp/path:with:colons/testingvenv2/bin/python2 is not functioning ERROR: It thinks sys.prefix is u'/home/username/tmp/path:with:colons' (should be u'/home/username/tmp/path:with:colons/testingvenv2') ERROR: virtualenv is not compatible with this system or executable ------ Without colons -> no error: ----- username@computername:~/tmp/pathwithoutcolons> python3 -m virtualenv -p python3 testingvenv Already using interpreter /usr/bin/python3 Using base prefix '/usr' New python executable in /home/username/tmp/pathwithoutcolons/testingvenv/bin/python3 Also creating executable in /home/username/tmp/pathwithoutcolons/testingvenv/bin/python Installing setuptools, pip, wheel... done. ----- -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1091291] New: GNOME:Factory/gnome-disk-utility: function bd_loop_setup_from_fd not found
by bugzilla_noreply＠novell.com 21 Jun '22

21 Jun '22

2 1

[Bug 1176388] New: OMEMO plugin for Tumbleweed doesn't work
by bugzilla_noreply＠suse.com 21 Jun '22

21 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1176388 Bug ID: 1176388 Summary: OMEMO plugin for Tumbleweed doesn't work Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: opensuse(a)trummer.xyz QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- (from https://build.opensuse.org/package/show/network/gajim#comment-1305719 ) It seems that Gajim 1.2 doesn't work with the old OMEMO plugin version 2.6.29 anymore. The easiest way would be to just update the plugin to the latest version for the 1.2 branch - 2.6.80, see https://dev.gajim.org/gajim/gajim-plugins/-/blob/master/README.md But the Gajim 1.1 branch that Leap 15.2 and 15.1 have only works with the plugin until version 2.6.30: https://dev.gajim.org/gajim/gajim-plugins/-/blob/gajim_1.1/omemo/CHANGELOG -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1183669] New: AUDIT-0: pleaser: security audit for permissions-file-setuid-bit
by bugzilla_noreply＠suse.com 18 Jun '22

18 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1183669 Bug ID: 1183669 Summary: AUDIT-0: pleaser: security audit for permissions-file-setuid-bit Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: ed-suse.com(a)s5h.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello, Would you mind performing a security review for me? please is a memory safe sudo alternative that focuses on assigning rules with familiar regex syntax. The pacakge is at https://build.opensuse.org/package/show/home:eneville/pleaser. Upstream source is at https://gitlab.com/edneville/please The message from the build service is: [ 174s] please.x86_64: E: permissions-file-setuid-bit (Badness: 10) /usr/bin/please is packaged with setuid/setgid bits (04755) [ 174s] please.x86_64: E: permissions-file-setuid-bit (Badness: 10) /usr/bin/pleaseedit is packaged with setuid/setgid bits (04755) [ 174s] If the package is intended for inclusion in any SUSE product please open a [ 174s] bug report to request review of the package by the security team. Please [ 174s] refer to [ 174s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 174s] more information. Thank you very much in advance. Ed Neville -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1189423] New: VUL-0: tensorflow2: update to 2.6.0, multiple CVEs
by bugzilla_noreply＠suse.com 18 Jun '22

18 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1189423 Bug ID: 1189423 Summary: VUL-0: tensorflow2: update to 2.6.0, multiple CVEs Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: cgoll(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: --- Blocker: --- excerpt from the changelog: Security Fixes a heap out of bounds access in sparse reduction operations (CVE-2021-37635) Fixes a floating point exception in SparseDenseCwiseDiv (CVE-2021-37636) Fixes a null pointer dereference in CompressElement (CVE-2021-37637) Fixes a null pointer dereference in RaggedTensorToTensor (CVE-2021-37638) Fixes a null pointer dereference and a heap OOB read arising from operations restoring tensors (CVE-2021-37639) Fixes an integer division by 0 in sparse reshaping (CVE-2021-37640) Fixes a division by 0 in ResourceScatterDiv (CVE-2021-37642) Fixes a heap OOB in RaggedGather (CVE-2021-37641) Fixes a std::abort raised from TensorListReserve (CVE-2021-37644) Fixes a null pointer dereference in MatrixDiagPartOp (CVE-2021-37643) Fixes an integer overflow due to conversion to unsigned (CVE-2021-37645) Fixes a bad allocation error in StringNGrams caused by integer conversion (CVE-2021-37646) Fixes a null pointer dereference in SparseTensorSliceDataset (CVE-2021-37647) Fixes an incorrect validation of SaveV2 inputs (CVE-2021-37648) Fixes a null pointer dereference in UncompressElement (CVE-2021-37649) Fixes a segfault and a heap buffer overflow in {Experimental,}DatasetToTFRecord (CVE-2021-37650) Fixes a heap buffer overflow in FractionalAvgPoolGrad (CVE-2021-37651) Fixes a use after free in boosted trees creation (CVE-2021-37652) Fixes a division by 0 in ResourceGather (CVE-2021-37653) Fixes a heap OOB and a CHECK fail in ResourceGather (CVE-2021-37654) Fixes a heap OOB in ResourceScatterUpdate (CVE-2021-37655) Fixes an undefined behavior arising from reference binding to nullptr in RaggedTensorToSparse (CVE-2021-37656) Fixes an undefined behavior arising from reference binding to nullptr in MatrixDiagV* ops (CVE-2021-37657) Fixes an undefined behavior arising from reference binding to nullptr in MatrixSetDiagV* ops (CVE-2021-37658) Fixes an undefined behavior arising from reference binding to nullptr and heap OOB in binary cwise ops (CVE-2021-37659) Fixes a division by 0 in inplace operations (CVE-2021-37660) Fixes a crash caused by integer conversion to unsigned (CVE-2021-37661) Fixes an undefined behavior arising from reference binding to nullptr in boosted trees (CVE-2021-37662) Fixes a heap OOB in boosted trees (CVE-2021-37664) Fixes vulnerabilities arising from incomplete validation in QuantizeV2 (CVE-2021-37663) Fixes vulnerabilities arising from incomplete validation in MKL requantization (CVE-2021-37665) Fixes an undefined behavior arising from reference binding to nullptr in RaggedTensorToVariant (CVE-2021-37666) Fixes an undefined behavior arising from reference binding to nullptr in unicode encoding (CVE-2021-37667) Fixes an FPE in tf.raw_ops.UnravelIndex (CVE-2021-37668) Fixes a crash in NMS ops caused by integer conversion to unsigned (CVE-2021-37669) Fixes a heap OOB in UpperBound and LowerBound (CVE-2021-37670) Fixes an undefined behavior arising from reference binding to nullptr in map operations (CVE-2021-37671) Fixes a heap OOB in SdcaOptimizerV2 (CVE-2021-37672) Fixes a CHECK-fail in MapStage (CVE-2021-37673) Fixes a vulnerability arising from incomplete validation in MaxPoolGrad (CVE-2021-37674) Fixes an undefined behavior arising from reference binding to nullptr in shape inference (CVE-2021-37676) Fixes a division by 0 in most convolution operators (CVE-2021-37675) Fixes vulnerabilities arising from missing validation in shape inference for Dequantize (CVE-2021-37677) Fixes an arbitrary code execution due to YAML deserialization (CVE-2021-37678) Fixes a heap OOB in nested tf.map_fn with RaggedTensors (CVE-2021-37679) Fixes a division by zero in TFLite (CVE-2021-37680) Fixes an NPE in TFLite (CVE-2021-37681) Fixes a vulnerability arising from use of unitialized value in TFLite (CVE-2021-37682) Fixes an FPE in TFLite division operations (CVE-2021-37683) Fixes an FPE in TFLite pooling operations (CVE-2021-37684) Fixes an infinite loop in TFLite (CVE-2021-37686) Fixes a heap OOB in TFLite (CVE-2021-37685) Fixes a heap OOB in TFLite's Gather* implementations (CVE-2021-37687) Fixes an undefined behavior arising from null pointer dereference in TFLite (CVE-2021-37688) Fixes an undefined behavior arising from null pointer dereference in TFLite MLIR optimizations (CVE-2021-37689) Fixes a FPE in LSH in TFLite (CVE-2021-37691) Fixes a segfault on strings tensors with mismatched dimensions, arising in Go code (CVE-2021-37692) Fixes a use after free and a potential segfault in shape inference functions (CVE-2021-37690) -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1191066] New: kdump: finish UsrMerge, install to /usr
by bugzilla_noreply＠suse.com 17 Jun '22

17 Jun '22

https://bugzilla.suse.com/show_bug.cgi?id=1191066 Bug ID: 1191066 Summary: kdump: finish UsrMerge, install to /usr Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: ptesarik(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: db7532(a)qq.com Blocks: 1191054 Found By: --- Blocker: --- Following up on the discussion on the Factory list https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message… All packages installing files into /bin, /sbin, /lib and /lib64 should change the location to the counterpart in /usr instead. Please consider doing that for kdump. If kdump still needs to build for released distros you may keep the legacy locations within a "%if %suse_version < 1550" block of course. If you do that, please do *NOT* install symlinks from/to /usr as it was done with some packages in the past. Move the files in question instead. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1170826] New: Go packages miss binutils-gold dependency
by bugzilla_noreply＠novell.com 17 Jun '22

17 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1170826 Bug ID: 1170826 Summary: Go packages miss binutils-gold dependency Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On arm and aarch64, 'go' requires 'binutils-gold' dependency at runtime, but go packages only require it as BuildRequires. So, binutils-gold must be installed manually, which breaks some builds in OBS, such as rclone [0]. Without 'binutils-gold', we ge the following error: [ 138s] /usr/lib64/go/1.11/pkg/tool/linux_arm64/link: running gcc failed: exit status 1 [ 138s] collect2: fatal error: cannot find 'ld' So, we need to add 'Requires: binutils-gold' to all go1.x packages. [0]: https://build.opensuse.org/package/show/network/rclone -- You are receiving this mail because: You are on the CC list for the bug.

2 8

[Bug 1173720] New: No sound after upgrade from Leap 15.1
by bugzilla_noreply＠suse.com 17 Jun '22

17 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1173720 Bug ID: 1173720 Summary: No sound after upgrade from Leap 15.1 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: alberto.zacchetti(a)tiscali.it QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After upgrading from Leap 15.1 to Leap 15.2, the system no longer plays any sound (even from Yast sound setting) although the snd-hda-intel driver appears to be loaded. The chipset is a C600/X79 and it worked wonderfully on Leap 15.1. Now in Yast I see all the volume controls, but I don't hear any sound on headphones. Also in KDE the only item that appears is the digital output (which I can't verify) while every other analog output has disappeared. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1179584] New: Installing python3-gobject but not python3-cairo breaks `pip3 check`
by bugzilla_noreply＠suse.com 16 Jun '22

16 Jun '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1179584 Bug ID: 1179584 Summary: Installing python3-gobject but not python3-cairo breaks `pip3 check` Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: openSUSE Leap 15.2 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: me(a)manueljacob.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Setup: zypper install -y python3-pip python3-gobject Expected behavior: `pip3 check` succeeds and prints ��No broken requirements found.��. Actual behavior: `pip3 check` fails and prints ��pygobject 3.34.0 requires pycairo, which is not installed.��. Workaround: Install package python3-cairo. -- You are receiving this mail because: You are on the CC list for the bug.

1 7