January 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1213371] New: Dolphin cannot display HEIC images
by bugzilla_noreply＠suse.com 19 Apr '24

19 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213371 Bug ID: 1213371 Summary: Dolphin cannot display HEIC images Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: f.alexander.wilms(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Dolphin does not show thumbnails for .heic files. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1216080] New: cockpit-ws: /etc/cockpit/disallowed-users is ignored
by bugzilla_noreply＠suse.com 19 Apr '24

19 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1216080 Bug ID: 1216080 Summary: cockpit-ws: /etc/cockpit/disallowed-users is ignored Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: Cockpit-bugs(a)suse.de Reporter: amajer(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This affects all cockpit versions, not just TW. The default configuration we show in /etc/cockpit/disallowed-users, # List of users which are not allowed to login to Cockpit root but this list is ignored and root can login. What is missing this in /etc/pam.d/cockpit auth required pam_listfile.so item=user sense=deny file=/etc/cockpit/disallowed-users onerr=succeed followed by rest of the file. So we should either not ship this file, or setup pam accordingly. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1218390] New: "fdectl tpm-present" fails with the combination fdectl v0.7.2 / pcr-oracle v0.5.4
by bugzilla_noreply＠suse.com 18 Apr '24

18 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1218390 Bug ID: 1218390 Summary: "fdectl tpm-present" fails with the combination fdectl v0.7.2 / pcr-oracle v0.5.4 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: per(a)familjenoberg.se QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- At initial installation of tumbleweed fdectl v0.7.2 and pcr-oracle v0.5.4 are installed. Using this combination the command "fdectl tpm-present" fails with " . . . . Excess argument(s) Usage: pcr-oracle [options] pcr-index [updates...] . . . . " when executing "pcr-oracle --algorithm sha256 --input /dev/shm/fde.LD7ot9/sealed_secret --output /dev/shm/fde.LD7ot9/recovered unseal-secret 0,2,4,7,9" The problem is solved if for example pcr-oracle is downgraded to v0.5.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1213073] New: clang13-devel from Backports not installable on SLES 15 SP5
by bugzilla_noreply＠suse.com 18 Apr '24

18 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213073 Bug ID: 1213073 Summary: clang13-devel from Backports not installable on SLES 15 SP5 Classification: openSUSE Product: openSUSE Backports Version: SLE-15-SP5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Packages Assignee: packagehub-bugs(a)suse.com Reporter: amoog(a)psi.de QA Contact: packagehub-bugs(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Trying to install clang13-devel from the Backports repository results in: :~ -> sudo zypper install clang13-devel Loading repository data... Reading installed packages... Resolving package dependencies... Problem: nothing provides 'clang-tools >= 13.0.1' needed by the to be installed clang13-devel-13.0.1-bp155.6.38.x86_64 Solution 1: do not install clang13-devel-13.0.1-bp155.6.38.x86_64 Solution 2: break clang13-devel-13.0.1-bp155.6.38.x86_64 by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/c/d/?] (c): ^C Is there some other repository I am missing? -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1217749] New: No bass in built-in speakers on Lenovo Slim 7 16" AMD
by bugzilla_noreply＠suse.com 17 Apr '24

17 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1217749 Bug ID: 1217749 Summary: No bass in built-in speakers on Lenovo Slim 7 16" AMD Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: variable_valuables761(a)simplelogin.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 871116 --> https://bugzilla.suse.com/attachment.cgi?id=871116&action=edit Output of "hwinfo --sound" for Lenovo 16ARH7 It seems the bass speakers do not work in the latest Tumbleweed KDE snapshot on the Lenovo Slim 7 16" AMD, 16ARH7, 82UX0001US (and this same model is called Yoga outside the United States). This issue appears to be similar to that of the wide range of recently released laptops that have the CS35L41 and TAS2781 amps, however I cannot find that hardware listed in any of my logs or online spec sheets for this laptop. The closest I can find is that is has a Realtek ALC3287 codec. Attached is the output of "hwinfo --sound" Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1213159] New: [request] Lock root account by default
by bugzilla_noreply＠suse.com 17 Apr '24

17 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213159 Bug ID: 1213159 Summary: [request] Lock root account by default Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: milachew(a)mail.lv QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Since MicroOS aims to keep administration as small as possible, it makes sense to consider blocking root account by default. Original comment: https://www.reddit.com/r/openSUSE/comments/14u7ka1/comment/jr60ogz/?utm_sou… P.S. By the way, there have already been similar discussions, but regarding ALP: https://bugzilla.opensuse.org/show_bug.cgi?id=1203978 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1217244] New: mathgl fails to build ==> Fatal error occurred, no output PDF file produced!
by bugzilla_noreply＠suse.com 17 Apr '24

17 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1217244 Bug ID: 1217244 Summary: mathgl fails to build ==> Fatal error occurred, no output PDF file produced! Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello mathgl does not build on Leap 15.6. This should be fixed before Beta (Feb 2023). https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Build log from Leap 15.6 https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 500s] /home/abuild/rpmbuild/BUILD/mathgl-8.0.1/python3_build/texinfo/samples.texi:142 [ 500s] 6: ==> Fatal error occurred, no output PDF file produced! [ 500s] Transcript written on mathgl_en.log. [ 500s] /usr/bin/texi2dvi: pdfetex exited with bad status, quitting. [ 500s] make[2]: *** [texinfo/CMakeFiles/doc_en.dir/build.make:243: texinfo/mathgl_en.pdf] Error 1 [ 500s] make[2]: Leaving directory '/home/abuild/rpmbuild/BUILD/mathgl-8.0.1/python3_build' [ 500s] make[1]: *** [CMakeFiles/Makefile2:1486: texinfo/CMakeFiles/doc_en.dir/all] Error 2 [ 500s] make: *** [Makefile:139: all] Error 2 [ 500s] error: Bad exit status from /var/tmp/rpm-tmp.nATkRq (%build) -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1217254] New: python-Django1 fails to build as test_delete_signals fails
by bugzilla_noreply＠suse.com 17 Apr '24

17 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1217254 Bug ID: 1217254 Summary: python-Django1 fails to build as test_delete_signals fails Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello python-Django1 does not build on Leap 15.6. This should be fixed before Beta (Feb 2023). https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Build log from Leap 15.6 https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 154s] ====================================================================== [ 154s] FAIL: test_delete_signals (signals.tests.SignalTests) [ 154s] ---------------------------------------------------------------------- [ 154s] Traceback (most recent call last): [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 59, in testPartExecutor [ 154s] yield [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 608, in run [ 154s] self.tearDown() [ 154s] File "/home/abuild/rpmbuild/BUILD/Django-1.11.29/tests/signals/tests.py", line 33, in tearDown [ 154s] self.assertEqual(self.pre_signals, post_signals) [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 829, in assertEqual [ 154s] assertion_func(first, second, msg=msg) [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 1039, in assertTupleEqual [ 154s] self.assertSequenceEqual(tuple1, tuple2, msg, seq_type=tuple) [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 1010, in assertSequenceEqual [ 154s] self.fail(msg) [ 154s] File "/usr/lib64/python3.6/unittest/case.py", line 670, in fail [ 154s] raise self.failureException(msg) [ 154s] AssertionError: Tuples differ: (1, 0, 2, 1) != (1, 0, 2, 0) [ 154s] [ 154s] First differing element 3: [ 154s] 1 [ 154s] 0 [ 154s] [ 154s] - (1, 0, 2, 1) [ 154s] ? ^ [ 154s] [ 154s] + (1, 0, 2, 0) [ 154s] ? ^ [ 154s] -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1214027] New: All user may connect to this network should not be enable by default
by bugzilla_noreply＠suse.com 16 Apr '24

16 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214027 Bug ID: 1214027 Summary: All user may connect to this network should not be enable by default Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cosmin.tanczel(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Whenever a new connection is created using the network manager applet in KDE, the option "All user may connect to this network" should not be enabled by default. Reasoning: 1. Security - there are users that just input the root password so the created connection is available for everybody, even though this should not be the case. (I know, if the user has root access he should know what he's doing, but still) 2. Unnecessary step in the creation of a new connection process. Might be there is a reasoning to have it enabled by default, so please let me know if this is the case. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214176] New: VUL-0: CVE-2023-39959: nextcloud: calendar or address book existence leak via DAV
by bugzilla_noreply＠suse.com 16 Apr '24

16 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214176 Bug ID: 1214176 Summary: VUL-0: CVE-2023-39959: nextcloud: calendar or address book existence leak via DAV Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/374996/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- CVE-2023-39959 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV request which reveals whether a calendar or an address book with the given identifier exists for the victim. Nextcloud Server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. No known workarounds are available. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39959 https://www.cve.org/CVERecord?id=CVE-2023-39959 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g… https://github.com/nextcloud/server/pull/38747 https://hackerone.com/reports/1832126 -- You are receiving this mail because: You are on the CC list for the bug.

1 1