November 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1216782] New: [Build 548.2] openQA test fails in updates_packagekit_kde - sddm doesn't appear
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216782 Bug ID: 1216782 Summary: [Build 548.2] openQA test fails in updates_packagekit_kde - sddm doesn't appear Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://openqa.opensuse.org/tests/3692082/modules/upda tes_packagekit_kde/steps/2 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation This issue happened after https://build.opensuse.org/request/show/1117807 openQA test in scenario opensuse-15.6-DVD-x86_64-kde@64bit-2G fails in [updates_packagekit_kde](https://openqa.opensuse.org/tests/3692082/modules/u… ## Test suite description TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in kde@USBboot_64 scenario. Added by : oorlov; Related ticket: poo#37000 ## Reproducible Fails since (at least) Build [545.1](https://openqa.opensuse.org/tests/3670746) ## Expected result Last good: [538.1](https://openqa.opensuse.org/tests/3640704) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209294] New Thinkpad T14s GPU reset/crash with openSUSE Tumbleweed
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1209294 https://bugzilla.suse.com/show_bug.cgi?id=1209294#c6 --- Comment #6 from Martin Jambor <mjambor(a)suse.com> --- (In reply to Jiri Slaby from comment #4) > Martin left the company. Are you still reachable here? Was this a company > laptop (IOW can you still test)? Yes, it was a company laptop, Martin is unlikely to be able to test unless he bought/got exactly the same laptop afterwards. (I have (probably/almost?) the same notebook but fortunately never encountered this issue (yet).) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216682] [Build 20231028] openQA test fails: no panel shown on Xfce fesktop
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216682 Manfred Hollstein <manfred.h(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |manfred.h(a)gmx.net -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210306] 32-bit versions of SDL helper libraries no longer available
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1210306 David Gow <david(a)davidgow.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1216780 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216780] New: 32-bit version of SDL2_ttf no longer available
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216780 Bug ID: 1216780 Summary: 32-bit version of SDL2_ttf no longer available Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: david(a)davidgow.net QA Contact: jsrain(a)suse.com CC: dimstar(a)opensuse.org, jsrain(a)suse.com Depends on: 1210306 Target Milestone: --- Found By: --- Blocker: --- See also Bug #1210306 While the Simple Directmedia Layer (SDL) libraries are still available as 32-bit packages, SDL2_ttf is only available as a 64-bit package. This is despite SDL_ttf (the older, SDL 1.2 version) being available in both 64- and 32-bit variants. Some games depend on 32-bit SDL2_ttf, and while many of them do bundle a copy, some do not, and others may benefit from using a newer distro-provided package instead. I'd also personally appreciate the -devel-32bit variant, as I use them quite regularly to build wrappers and to cross-compile simple games, etc, but that's definitely more niche than having the binaries. It is available for the SDL 1.2-based SDL_ttf as well as for SDL2_devel, so all of its dependencies should be available. Thanks very much! -- David -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216736] New: Re-enable CONFIG_NFS_V4_2_READ_PLUS in master
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216736 Bug ID: 1216736 Summary: Re-enable CONFIG_NFS_V4_2_READ_PLUS in master Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Filesystems Assignee: kernel-fs(a)suse.de Reporter: ptesarik(a)suse.com QA Contact: qa-bugs(a)suse.de CC: mkubecek(a)suse.com, nfbrown(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 870533 --> https://bugzilla.suse.com/attachment.cgi?id=870533&action=edit patch against kernel-source commit 2d6110a1547f CONFIG_NFS_V4_2_READ_PLUS config option was unselected by commit ff9060bd2d19 ("Update to 5.10 final"). This is understandable given the observed failures with xfstests mentioned in mainline commit 21e31401fc45 ("NFS: Disable READ_PLUS by default"). However, it seems that all issues have been worked out, see mainline commit 9cf2744d2491 ("NFS: Enable the READ_PLUS operation by default"). I suggest we re-enable CONFIG_NFS_V4_2_READ_PLUS in master now. It allows to transfer sparse files more efficiently. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1209294] New Thinkpad T14s GPU reset/crash with openSUSE Tumbleweed
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1209294 https://bugzilla.suse.com/show_bug.cgi?id=1209294#c5 Santiago Zarate <santiago.zarate(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |santiago.zarate(a)suse.com --- Comment #5 from Santiago Zarate <santiago.zarate(a)suse.com> --- (In reply to Jiri Slaby from comment #4) > Martin left the company. Are you still reachable here? Was this a company > laptop (IOW can you still test)? It looks like I have the same bug (and > hardware) and this is an upstream bug: > https://gitlab.freedesktop.org/drm/amd/-/issues/2220 If somebody gets me that laptop or a similar one, I can help testing and/or ask Zaoliang Luo from my team to help with the manual validation of laptops -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216774] New: VUL-0: CVE-2023-46250: pypdf: infinite loop condition may be triggered to cause denial of service
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216774 Bug ID: 1216774 Summary: VUL-0: CVE-2023-46250: pypdf: infinite loop condition may be triggered to cause denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/383718/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: simonf.lees(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case when the pypdf-user manipulates an incoming malicious PDF e.g. by merging it with another PDF or by adding annotations. The issue was fixed in version 3.17.0. As a workaround, apply the patch manually by modifying `pypdf/generic/_data_structures.py`. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46250 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1216773] New: VUL-0: CVE-2023-36810: pypdf: An attacker who uses this vulnerability can craft a PDF which leads to unexpected long runtime
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216773 Bug ID: 1216773 Summary: VUL-0: CVE-2023-36810: pypdf: An attacker who uses this vulnerability can craft a PDF which leads to unexpected long runtime Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/371004/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: simonf.lees(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses this vulnerability can craft a PDF which leads to unexpected long runtime. This quadratic runtime blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. This issue has been addressed in PR 808 and versions from 1.27.9 include this fix. Users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36810 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1216772] New: VUL-0: CVE-2023-36807: pypdf: In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop.
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216772 Bug ID: 1216772 Summary: VUL-0: CVE-2023-36807: pypdf: In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/371003/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: simonf.lees(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if the user extracted metadata from such a malformed PDF. Versions prior to 2.10.5 throw an error, but do not hang forever. This issue was fixed with https://github.com/py-pdf/pypdf/pull/1331 which has been included in release 2.10.6. Users are advised to upgrade. Users unable to upgrade should modify `PyPDF2/generic/_data_structures.py::read_object` to an an error throwing case. See GHSA-hm9v-vj3r-r55m for details. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36807 -- You are receiving this mail because: You are on the CC list for the bug.

1 1