February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207450] New: VUL-0: CVE-2022-44566: rubygem-activerecord-*: Possible Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1207450 Bug ID: 1207450 Summary: VUL-0: CVE-2022-44566: rubygem-activerecord-*: Possible Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mschnitzer(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: --- Blocker: --- Created attachment 864343 --> https://bugzilla.suse.com/attachment.cgi?id=864343&action=edit 7.0 patch Possible Denial of Service Vulnerability in ActiveRecord��s PostgreSQL adapter There is a potential denial of service vulnerability present in ActiveRecord��s PostgreSQL adapter. This has been assigned the CVE identifier CVE-2022-44566. Versions Affected: All. Not affected: None. Fixed Versions: 7.0.4.1, 6.1.7.1 Impact In ActiveRecord <7.0.4.1 and <6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service. Releases The fixed releases are available at the normal locations. Workarounds Ensure that user supplied input which is provided to ActiveRecord clauses do not contain integers wider than a signed 64bit representation or floats. Patches To aid users who aren��t able to upgrade immediately we have provided patches for the supported release series in accordance with our maintenance policy regarding security issues. They are in git-am format and consist of a single changeset. 6-1-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 6.1 series 7-0-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 7.0 series Credits Thank you Jeremy Evans for reporting this! -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1202727] New: Upstream kernel commit 30de14b1884ba makes s390 to stop working on qemu
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1202727 Bug ID: 1202727 Summary: Upstream kernel commit 30de14b1884ba makes s390 to stop working on qemu Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: S/390-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: mpdesouza(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- If the following commit is reverted commit 30de14b1884ba609fc1acfba5b40309e3a6ccefe Author: Sven Schnelle <svens(a)linux.ibm.com> Date: Fri Apr 8 14:51:26 2022 +0200 s390: current_stack_pointer shouldn't be a function qemu can boot a s390 correct. The commit was added in 5.18-rc3. With this commit reverted qemu-kvm can boot v6.0-rc2 without any problem. I found this bug while trying to debug a livepatch issue: https://github.com/SUSE/qa_test_klp/issues/17 I enabled dyndebug while runnig the livepatch testing, but it didn't show anything useful for the bug: [ 863.108916] livepatch: enabling patch 'klp_tc_10_livepatch' [ 863.112892] livepatch: 'klp_tc_10_livepatch': starting patching transition [ 864.310918] livepatch: 'klp_tc_10_livepatch': patching complete [ 864.972595] livepatch: 'klp_tc_10_livepatch': starting unpatching transition [ 866.395047] livepatch: 'klp_tc_10_livepatch': unpatching complete [ 1003.993309] livepatch: enabling patch 'klp_tc_10_livepatch' [ 1003.993320] livepatch: 'klp_tc_10_livepatch': initializing patching transition [ 1003.997171] livepatch: 'klp_tc_10_livepatch': starting patching transition [ 1003.997396] livepatch: klp_try_switch_task: swapper/1:0 is running [ 1003.997435] livepatch: klp_try_switch_task: swapper/2:0 is running [ 1003.997467] livepatch: klp_try_switch_task: swapper/3:0 is running [ 1003.997485] livepatch: klp_try_switch_task: swapper/4:0 is running [ 1003.997504] livepatch: klp_try_switch_task: swapper/5:0 is running [ 1003.997509] livepatch: klp_try_switch_task: swapper/6:0 is running [ 1003.997542] livepatch: klp_try_switch_task: swapper/7:0 is running [ 1003.997575] livepatch: klp_try_switch_task: swapper/8:0 is running [ 1003.997610] livepatch: klp_try_switch_task: swapper/9:0 is running [ 1005.430335] livepatch: 'klp_tc_10_livepatch': completing patching transition [ 1005.430843] livepatch: 'klp_tc_10_livepatch': patching complete [ 1006.878375] livepatch: 'klp_tc_10_livepatch': initializing unpatching transition [ 1006.878421] livepatch: 'klp_tc_10_livepatch': starting unpatching transition [ 1006.878644] livepatch: klp_try_switch_task: swapper/1:0 is running [ 1006.878664] livepatch: klp_try_switch_task: swapper/2:0 is running [ 1006.878693] livepatch: klp_try_switch_task: swapper/3:0 is running [ 1006.878722] livepatch: klp_try_switch_task: swapper/4:0 is running [ 1006.878748] livepatch: klp_try_switch_task: swapper/5:0 is running [ 1006.878780] livepatch: klp_try_switch_task: swapper/6:0 is running [ 1006.878811] livepatch: klp_try_switch_task: swapper/7:0 is running [ 1006.878830] livepatch: klp_try_switch_task: swapper/8:0 is running [ 1006.878853] livepatch: klp_try_switch_task: swapper/9:0 is running [ 1008.390362] livepatch: 'klp_tc_10_livepatch': completing unpatching transition [ 1008.394954] livepatch: 'klp_tc_10_livepatch': unpatching complete I believe that maybe the two issues can be linked, due to the nature of the patch, which can have some impacts on ftrace. Any advice would be welcome. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 25

[Bug 1178596] New: mailto: links don't open in Thunderbird (or at all)
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1178596 Bug ID: 1178596 Summary: mailto: links don't open in Thunderbird (or at all) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: teo8976(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 843427 --> http://bugzilla.opensuse.org/attachment.cgi?id=843427&action=edit the error message To reproduce: 1. In your browser (tested with Chrome and Firefox) visit: https://output.jsbin.com/woyufanaki 2. Click on the link, which is a mailto: link Expected: should open in my default email client, which in my case is Thunderbird Observed: this cryptic error message (see attached screenshot) -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1208238] New: libyui build failure with GCC 13
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208238 Bug ID: 1208238 Summary: libyui build failure with GCC 13 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: shundhammer(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- This is a Bugzilla mirror of libyui/gh#91 https://github.com/libyui/libyui/issues/91 reported by marxin (Martin Li��ka): libyui build failures with GCC 13 because of warnings "'virtual bool NCPopup::postAgain()' was hidden [-Werror=overloaded-virtual=]". Since we promote compiler warnings to errors, that warning causes the build to fail. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1135212] New: LTO: libqt5-qtwebkit build fails
by bugzilla_noreply＠novell.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1135212 Bug ID: 1135212 Summary: LTO: libqt5-qtwebkit build fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Fails here: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… with: [ 2250s] /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/CallFrame.cpp:200: undefined reference to `vmEntryRecord' [ 2250s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/CallFrame.cpp:200: undefined reference to `vmEntryRecord' [ 2250s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/testair.Ki1BSG.ltrans38.ltrans.o: in function `JSC::construct(JSC::ExecState*, JSC::JSValue, JSC::ConstructType, JSC::ConstructData const&, JSC::ArgList const&, JSC::JSValue)': [ 2250s] /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/Interpreter.cpp:1106: undefined reference to `vmEntryToNative' [ 2250s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/testair.Ki1BSG.ltrans38.ltrans.o: in function `JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)': [ 2250s] /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/Interpreter.cpp:1036: undefined reference to `vmEntryToNative' [ 2250s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/testair.Ki1BSG.ltrans54.ltrans.o: in function `JSC::Debugger::stepOutOfFunction()': [ 2250s] /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/CallFrame.cpp:200: undefined reference to `vmEntryRecord' [ 2250s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/testair.Ki1BSG.ltrans54.ltrans.o: in function `JSC::Debugger::didExecuteProgram(JSC::ExecState*)': [ 2250s] /home/abuild/rpmbuild/BUILD/qtwebkit-5.212.0-alpha2/Source/JavaScriptCore/interpreter/CallFrame.cpp:200: undefined reference to `vmEntryRecord' ... -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1133242] New: LTO: libqt5-qtbase build fails
by bugzilla_noreply＠novell.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1133242 Bug ID: 1133242 Summary: LTO: libqt5-qtbase build fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Fails due to: [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x0): undefined reference to `qt_version_tag' [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x10): undefined reference to `qt_version_tag' [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x20): undefined reference to `qt_version_tag' [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x30): undefined reference to `qt_version_tag' [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x40): undefined reference to `qt_version_tag' [ 958s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x50): more undefined references to `qt_version_tag' follow -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1133241] New: LTO: libqt5-qtscript build fails
by bugzilla_noreply＠novell.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1133241 Bug ID: 1133241 Summary: LTO: libqt5-qtscript build fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Fails with LTO due to a usage of top level assembler. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1130608] qtkeychain-qt5-devel package has invalid qt_Qt5Keychain.pri
by bugzilla_noreply＠suse.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1130608 http://bugzilla.opensuse.org/show_bug.cgi?id=1130608#c7 Christophe Marin <christophe(a)krop.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #7 from Christophe Marin <christophe(a)krop.fr> --- The bug was fixed long ago, closing -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118737] New: KDE:Qt/python-qt4: Bug QtWebKit is missing
by bugzilla_noreply＠novell.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1118737 Bug ID: 1118737 Summary: KDE:Qt/python-qt4: Bug QtWebKit is missing Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: dmueller(a)suse.com Reporter: jayvdb(a)gmail.com QA Contact: bnc-team-screening(a)forge.provo.novell.com Found By: --- Blocker: --- Build logs show [ 101s] /bin/sh: gdb: command not found [ 101s] /bin/sh: line 0: test: -gt: unary operator expected [ 101s] Checking to see if the QtWebKit module should be built... [ 101s] /usr/bin/qmake -o cfgtest_QtWebKit.mk cfgtest_QtWebKit.pro [ 101s] make -f cfgtest_QtWebKit.mk [ 101s] g++ -c -pipe -g -Wall -W -D_REENTRANT -DQT_WEBKIT_LIB -DQT_GUI_LIB -DQT_NETWORK_LIB -DQT_CORE_LIB -DQT_SHARED -I/usr/share/qt4/mkspecs/default -I. -I/usr/include/QtCore -I/usr/include/QtNetwork -I/usr/include/QtGui -I/usr/include/QtWebKit -I/usr/include -I. -o cfgtest_QtWebKit.o cfgtest_QtWebKit.cpp [ 101s] cfgtest_QtWebKit.cpp:1:10: fatal error: qwebpage.h: No such file or directory [ 101s] #include <qwebpage.h> [ 101s] ^~~~~~~~~~~~ [ 101s] compilation terminated. [ 101s] make: *** [cfgtest_QtWebKit.mk:211: cfgtest_QtWebKit.o] Error 1 https://build.opensuse.org/build/KDE:Qt/openSUSE_Factory/i586/python-qt4/_l… As a result, PyQt4.QtWebKit is missing, and doesnt appear to be in any other package. This is the cause of: - https://bugzilla.opensuse.org/show_bug.cgi?id=1075879 - https://bugzilla.opensuse.org/show_bug.cgi?id=1096732 - https://bugzilla.opensuse.org/show_bug.cgi?id=1099875 Probably also: - https://bugzilla.opensuse.org/show_bug.cgi?id=1099874 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1115112] New: Qt-Creator Documentation is not found out-of-the-box
by bugzilla_noreply＠novell.com 28 Feb '23

28 Feb '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1115112 Bug ID: 1115112 Summary: Qt-Creator Documentation is not found out-of-the-box Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: novell(a)howorth.org.uk QA Contact: qa-bugs(a)suse.de CC: gorgoglione(a)gmail.com Depends on: 976384 Found By: --- Blocker: --- In Qt-Creator 4.6.1 from the standard repositories, selecting the first tutorial in the Tutorials page (Build and Run Examples) takes me to a web page <https://doc.qt.io/qtcreator/creator-build-example-application.html> which is for version 4.7.2. That occurs on the first time of clicking on that link. Clicking on it again a day or so later takes me to the installed help pages for 4.6.1, so something is misconfigured in the installed package, and perhaps some of the other button clicking I did in the meantime made the problem go away. Very annoying, and a total waste of my time. PS Why is openSUSE Leap 15.0 not listed in the options for OS when reporting a bug? -- You are receiving this mail because: You are on the CC list for the bug.

2 2