April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1207364] VUL-0: CVE-2023-22742: libgit2: failure to verify SSH keys by default
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1207364 https://bugzilla.suse.com/show_bug.cgi?id=1207364#c9 --- Comment #9 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2023:1788-1: An update that solves one vulnerability can now be installed. Category: security (moderate) Bug References: 1207364 CVE References: CVE-2023-22742 Sources used: openSUSE Leap 15.4 (src): libgit2-1.3.0-150400.3.6.1 Development Tools Module 15-SP4 (src): libgit2-1.3.0-150400.3.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206346] go1.20 release tracking
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1206346 https://bugzilla.suse.com/show_bug.cgi?id=1206346#c7 --- Comment #7 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2023:1791-1: An update that solves four vulnerabilities, contains one feature and has one fix can now be installed. Category: security (important) Bug References: 1206346, 1210127, 1210128, 1210129, 1210130 CVE References: CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538 Jira References: PED-1962 Sources used: openSUSE Leap 15.4 (src): go1.20-1.20.3-150000.1.8.1 Development Tools Module 15-SP4 (src): go1.20-1.20.3-150000.1.8.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200441] New: go1.19 release tracking
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1200441 Bug ID: 1200441 Summary: go1.19 release tracking Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: jkowalczyk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- go1.19 (expected August 2022) is a major release of Go. Minor releases of go1.19.x will be provided through August 2023. This issue tracks go1.19.x releases packaged and submitted initially to openSUSE:Factory and can be referenced in submissions to additional repositories. Go Release Cycle https://github.com/golang/go/wiki/Go-Release-Cycle Go Release history https://golang.org/doc/devel/release.html -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c16 --- Comment #16 from Tom de Vries <tdevries(a)suse.com> --- (In reply to Tom de Vries from comment #13) > I haven't seen the problem manifest anymore, but I don't know whether it's > gone or not, maybe it's about coming back from sleep, maybe it's about a > graphics process being started on or migrating to an efficiency-core, maybe > it's about unhooking and rehooking to the dock. No clue. So I'll give it a > few days to see if it reappears. And, it's back. Current theory: it's about coming back from sleep. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209959] net installation iso should install as ftp flavor
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209959 http://bugzilla.opensuse.org/show_bug.cgi?id=1209959#c3 --- Comment #3 from Dominique Leuenberger <dimstar(a)opensuse.org> --- So far the best thing that came to mind was: * openSUSE-release Suggests opensuse-release-ftp Then we need to ensure that: * openSUSE-release-dvd ends up on the DVD (already done) * openSUSE-release-ftp does NOT end up on the DVD (already done) release-dvd needs to be published in the online repo though; otherwise, machines switch to -ftp later on (this needs to be fixed) This would make the two 'standard' use cases pick the right one (except when the DVD is used with online repos enabled; then it will likely pick -ftp; which is not too wrong, the DVD acts pretty much as live install medium with local cache) For the live ISOs, the appliances and containers, we'd be responsible to pick the right flavor whenever we want something special (which is very error prone of course) Better ideas are very much welcome -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210033] [Build 20230401] cp command fails in WSL 1
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210033 https://bugzilla.suse.com/show_bug.cgi?id=1210033#c3 Dirk Mueller <dmueller(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #3 from Dirk Mueller <dmueller(a)suse.com> --- submitted -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1209169] New: Dependencies installation failed
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209169 Bug ID: 1209169 Summary: Dependencies installation failed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: sadko_sobaka(a)rambler.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Since 2023-03-11 my automated build on github failed to install development packages for cairo and libfreetype2 with the following error: ``` Run zypper --non-interactive --no-gpg-checks in tar gzip gcc gcc-c++ clang lld git make php8-cli valgrind libstdc++-devel libX11-devel libXrandr-devel libjack-devel cairo-devel freetype2-devel libsndfile-devel ...... Reading installed packages... 'tar' is already installed. No update candidate for 'tar-1.34-10.1.x86_64'. The highest available version is already installed. 'gzip' is already installed. No update candidate for 'gzip-1.12-3.1.x86_64'. The highest available version is already installed. Resolving package dependencies... 2 Problems: Problem: the to be installed freetype2-devel-2.12.1-6.1.x86_64 requires 'pkgconfig(libbrotlidec)', but this requirement cannot be provided Problem: the to be installed cairo-devel-1.17.6-1.2.x86_64 requires 'pkgconfig(freetype2) >= 9.7.3', but this requirement cannot be provided Problem: the to be installed freetype2-devel-2.12.1-6.1.x86_64 requires 'pkgconfig(libbrotlidec)', but this requirement cannot be provided not installable providers: libbrotli-devel-1.0.9-2.1.i586[repo-oss] libbrotli-devel-1.0.9-2.1.x86_64[repo-oss] libbrotli-devel-32bit-1.0.9-2.1.x86_64[repo-oss] Solution 1: downgrade of libbrotlicommon1-1.0.9-3.1.x86_64 to libbrotlicommon1-1.0.9-2.1.x86_64 Solution 2: do not install freetype2-devel-2.12.1-6.1.x86_64 Solution 3: break freetype2-devel-2.12.1-6.1.x86_64 by ignoring some of its dependencies Choose from above solutions by number or skip, retry or cancel [1/2/3/s/r/c/d/?] (c): c Error: Process completed with exit code 4. ``` The related run on github: https://github.com/lsp-plugins/lsp-plugins-ab-tester/actions/runs/438824447… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1209300] x86-64-v3 packages do not get installed automatically without --recommends
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1209300 http://bugzilla.opensuse.org/show_bug.cgi?id=1209300#c6 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #6 from Dominique Leuenberger <dimstar(a)opensuse.org> --- (In reply to dziobian from comment #3) > Does inr --no-recommends resolve all supplements? (In my experience, > Supplements tend to be useful while Recommends are all over the place) Recommends and Supplements are the same - just from a different angle pkg a recommends b is the same as pkg b supplements a the only difference is in the 'pattern' itself where we have so-called 'hardware supplements' - which are handled by inr --no-recommends (as per man page, hardware supplements and languages are handled specifically) install-new-recommends (inr) [options] Install newly added packages recommended by already installed ones. This command basically re-evaluates the recommendations of all installed packages and fills up the system accordingly. You don��t want to call this unconditionally on small or minimal systems, as it may easily add a large number of packages. Called as zypper inr --no-recommends, it restricts the command to just look for packages supporting available hardware, languages or filesystems. Usefull after having added e.g. new hardware or driver repos. This is also the default behavior if you have set [zypp.conf:solver.onlyRequires]. See https://manpages.opensuse.org/Tumbleweed/zypper/zypper.8.en.html -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210208] konsole slow in showing effect of key strokes (due to tearing?)
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1210208 https://bugzilla.suse.com/show_bug.cgi?id=1210208#c15 --- Comment #15 from Takashi Iwai <tiwai(a)suse.com> --- The easiest way would be to get kernel-default.rpm, kernel-default-extra.rpm and kernel-default-optional.rpm from OBS Kernel:SLE15-SP5 repo http://download.opensuse.org/repositories/Kernel:/SLE15-SP5/pool/ and install them just on top of your existing Leap 15.4 system. The repo contains the build from the latest git branch. The known drawback is that it's an unofficial build, hence it'll be difficult to boot with Secure Boot. The firmware might be needed, but I guess it's still OK for i915 without updating. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208257] cannot activate online repositories when installing Tumbleweed-i586
by bugzilla_noreply＠suse.com 06 Apr '23

06 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208257 http://bugzilla.opensuse.org/show_bug.cgi?id=1208257#c2 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS --- Comment #2 from Dominique Leuenberger <dimstar(a)opensuse.org> --- WIP: https://github.com/openSUSE/download.o.o/pull/42 -- You are receiving this mail because: You are on the CC list for the bug.

1 0