October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231347] javapackages-tools should require which
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231347 https://bugzilla.suse.com/show_bug.cgi?id=1231347#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1231347) was mentioned in https://build.opensuse.org/request/show/1206227 Factory / javapackages-tools -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231368] New: efivar: builds with -march=native
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231368 Bug ID: 1231368 Summary: efivar: builds with -march=native Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: glin(a)suse.com Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1100677 Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our efivar package builds with -march=native which will cause problems when building on new machines and running on older machines. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1230236] Opensuse 15.6 Tiger Lake-LP Smart Sound Technology Audio Controller no output
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230236 https://bugzilla.suse.com/show_bug.cgi?id=1230236#c22 --- Comment #22 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Randy Dunlap from comment #21) > I have a similar issue with a common Dell laptop (not Chromebook), no NVIDIA. > Tiger Lake audio is not listed in "Soundcards recognized by ALSA" in > alsa-info.txt. (see > http://alsa-project.org/db/?f=b574926bd6e8a2a8b030113c8f67a58d21f939af) It shows like: !!Soundcards recognised by ALSA !!----------------------------- 0 [sofhdadsp ]: sof-hda-dsp - sof-hda-dsp DellInc.-Inspiron155510--076F7Y ... and this looks correct to me. In your case, SOF HD-audio driver is deployed as expected. Or am I missing anything? The update of sof-firmware package for Leap 15.6 is on its way, BTW. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231320] New: unable to update system
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231320 Bug ID: 1231320 Summary: unable to update system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: vasia.orelec(a)ukr.net QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 877754 --> https://bugzilla.suse.com/attachment.cgi?id=877754&action=edit the text displayed by the update program unable to update the system -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1231365] New: Wine 32 Dependency resolution failed
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231365 Bug ID: 1231365 Summary: Wine 32 Dependency resolution failed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: mstick(a)gmail.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- <html>Dependency resolution failed:<br/><br/>the installed wine-32bit-9.18-1775.1.x86_64 requires 'libavcodec.so.61(LIBAVCODEC_61.3_SUSE)', but this requirement cannot be provided nothing provides 'this-is-only-for-build-envs' needed by the to be installed ffmpeg-7-mini-libs-7.1-1.1.x86_64</html> -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231366] New: network disconnects and reconnects
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231366 Bug ID: 1231366 Summary: network disconnects and reconnects Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: iqgrande(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The most recent update (20241006) seems to have caused some serious issues with network reliability. I notice the following from `sudo journalctl -fu NetworkManager`. The network reliability seems to impact the Ethernet (output below) and Wi-Fi connections. Thoughts? Thank you for your help with this. # Hardware Information ``` $ lspci -nn | grep -i ethernet 04:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev 15) ``` # Output from Disconnecting and Reconnecting ``` $ sudo journalctl -fu NetworkManager [sudo] password for root: Oct 07 18:39:16 babel NetworkManager[1524]: <info> [1728347956.7160] policy: set 'Wired connection 1' (enp4s0) as default for IPv6 routing and DNS Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.2849] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132, acd pending Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.4403] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132 Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.4406] policy: set 'Wired connection 1' (enp4s0) as default for IPv4 routing and DNS Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.5772] device (enp4s0): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed') Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.6072] device (enp4s0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed') Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.6073] device (enp4s0): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed') Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.6076] manager: NetworkManager state is now CONNECTED_SITE Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.6079] device (enp4s0): Activation: successful, device activated. Oct 07 18:39:17 babel NetworkManager[1524]: <info> [1728347957.7541] manager: NetworkManager state is now CONNECTED_GLOBAL Oct 07 18:43:10 babel NetworkManager[1524]: <info> [1728348190.9962] audit: op="statistics" interface="enp4s0" ifindex=2 args="2000" pid=2184 uid=1000 result="success" Oct 07 18:43:16 babel NetworkManager[1524]: <info> [1728348196.6858] audit: op="statistics" interface="enp4s0" ifindex=2 args="2000" pid=2184 uid=1000 result="success" Oct 07 18:43:17 babel NetworkManager[1524]: <info> [1728348197.9158] audit: op="statistics" interface="enp4s0" ifindex=2 args="2000" pid=2184 uid=1000 result="success" Oct 07 18:44:10 babel NetworkManager[1524]: <info> [1728348250.5916] device (enp4s0): state change: activated -> unavailable (reason 'carrier-changed', sys-iface-state: 'managed') Oct 07 18:44:10 babel NetworkManager[1524]: <info> [1728348250.5916] dhcp4 (enp4s0): canceled DHCP transaction Oct 07 18:44:10 babel NetworkManager[1524]: <info> [1728348250.5917] dhcp4 (enp4s0): activation: beginning transaction (timeout in 45 seconds) Oct 07 18:44:10 babel NetworkManager[1524]: <info> [1728348250.5917] dhcp4 (enp4s0): state changed no lease Oct 07 18:44:10 babel NetworkManager[1524]: <info> [1728348250.7939] manager: NetworkManager state is now DISCONNECTED Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1866] device (enp4s0): carrier: link connected Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1867] device (enp4s0): state change: unavailable -> disconnected (reason 'carrier-changed', sys-iface-state: 'managed') Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1872] policy: auto-activating connection 'Wired connection 1' (fe567d9e-f7f1-3998-8975-291702fe75c8) Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1875] device (enp4s0): Activation: starting connection 'Wired connection 1' (fe567d9e-f7f1-3998-8975-291702fe75c8) Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1876] device (enp4s0): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1878] manager: NetworkManager state is now CONNECTING Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.1879] device (enp4s0): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.2008] device (enp4s0): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:15 babel NetworkManager[1524]: <info> [1728348255.2011] dhcp4 (enp4s0): activation: beginning transaction (timeout in 45 seconds) Oct 07 18:44:21 babel NetworkManager[1524]: <info> [1728348261.1245] policy: set 'Wired connection 1' (enp4s0) as default for IPv6 routing and DNS Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.5337] device (enp4s0): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.5407] device (enp4s0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.5408] device (enp4s0): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.5410] manager: NetworkManager state is now CONNECTED_SITE Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.5413] device (enp4s0): Activation: successful, device activated. Oct 07 18:44:22 babel NetworkManager[1524]: <info> [1728348262.7120] manager: NetworkManager state is now CONNECTED_GLOBAL Oct 07 18:44:24 babel NetworkManager[1524]: <info> [1728348264.1491] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132, acd pending Oct 07 18:44:24 babel NetworkManager[1524]: <info> [1728348264.3069] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132 Oct 07 18:44:24 babel NetworkManager[1524]: <info> [1728348264.3071] policy: set 'Wired connection 1' (enp4s0) as default for IPv4 routing and DNS Oct 07 18:44:38 babel NetworkManager[1524]: <info> [1728348278.2744] device (enp4s0): state change: activated -> unavailable (reason 'carrier-changed', sys-iface-state: 'managed') Oct 07 18:44:38 babel NetworkManager[1524]: <info> [1728348278.2745] dhcp4 (enp4s0): canceled DHCP transaction Oct 07 18:44:38 babel NetworkManager[1524]: <info> [1728348278.2745] dhcp4 (enp4s0): activation: beginning transaction (timeout in 45 seconds) Oct 07 18:44:38 babel NetworkManager[1524]: <info> [1728348278.2745] dhcp4 (enp4s0): state changed no lease Oct 07 18:44:38 babel NetworkManager[1524]: <info> [1728348278.4773] manager: NetworkManager state is now DISCONNECTED Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8376] device (enp4s0): carrier: link connected Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8378] device (enp4s0): state change: unavailable -> disconnected (reason 'carrier-changed', sys-iface-state: 'managed') Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8383] policy: auto-activating connection 'Wired connection 1' (fe567d9e-f7f1-3998-8975-291702fe75c8) Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8386] device (enp4s0): Activation: starting connection 'Wired connection 1' (fe567d9e-f7f1-3998-8975-291702fe75c8) Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8388] device (enp4s0): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8389] manager: NetworkManager state is now CONNECTING Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8391] device (enp4s0): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8510] device (enp4s0): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:42 babel NetworkManager[1524]: <info> [1728348282.8513] dhcp4 (enp4s0): activation: beginning transaction (timeout in 45 seconds) Oct 07 18:44:46 babel NetworkManager[1524]: <info> [1728348286.6806] policy: set 'Wired connection 1' (enp4s0) as default for IPv6 routing and DNS Oct 07 18:44:47 babel NetworkManager[1524]: <info> [1728348287.7075] device (enp4s0): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:47 babel NetworkManager[1524]: <info> [1728348287.7149] device (enp4s0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:47 babel NetworkManager[1524]: <info> [1728348287.7150] device (enp4s0): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed') Oct 07 18:44:47 babel NetworkManager[1524]: <info> [1728348287.7153] manager: NetworkManager state is now CONNECTED_SITE Oct 07 18:44:47 babel NetworkManager[1524]: <info> [1728348287.7156] device (enp4s0): Activation: successful, device activated. Oct 07 18:44:48 babel NetworkManager[1524]: <info> [1728348288.8712] manager: NetworkManager state is now CONNECTED_GLOBAL Oct 07 18:44:52 babel NetworkManager[1524]: <info> [1728348292.2499] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132, acd pending Oct 07 18:44:52 babel NetworkManager[1524]: <info> [1728348292.4569] dhcp4 (enp4s0): state changed new lease, address=192.168.247.132 Oct 07 18:44:52 babel NetworkManager[1524]: <info> [1728348292.4571] policy: set 'Wired connection 1' (enp4s0) as default for IPv4 routing and DNS ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231372] New: VUL-0: CVE-2024-43365: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231372 Bug ID: 1231372 Summary: VUL-0: CVE-2024-43365: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/423125/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: nix(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is an open source performance and fault management framework. The`consolenewsection` parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in `index.php`, finally leading to stored XSS. Users with the privilege to create external links can manipulate the “consolenewsection” parameter in the http post request while creating external links to perform stored XSS attacks. The vulnerability known as XSS (Cross-Site Scripting) occurs when an application allows untrusted user input to be displayed on a web page without proper validation or escaping. This issue has been addressed in release version 1.2.28. All users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-43365 https://www.cve.org/CVERecord?id=CVE-2024-43365 https://github.com/Cacti/cacti/security/advisories/GHSA-49f2-hwx9-qffr https://bugzilla.redhat.com/show_bug.cgi?id=2317076 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231369] New: VUL-0: CVE-2024-43362: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231369 Bug ID: 1231369 Summary: VUL-0: CVE-2024-43362: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/423122/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: nix(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized when saving external links in `links.php` . Morever, the said fileurl is placed in some html code which is passed to the `print` function in `link.php` and `index.php`, finally leading to stored XSS. Users with the privilege to create external links can manipulate the `fileurl` parameter in the http post request while creating external links to perform stored XSS attacks. The vulnerability known as XSS (Cross-Site Scripting) occurs when an application allows untrusted user input to be displayed on a web page without proper validation or escaping. This issue has been addressed in release version 1.2.28. All users are advised to upgrade. There are no known workarounds for this issue. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-43362 https://www.cve.org/CVERecord?id=CVE-2024-43362 https://github.com/Cacti/cacti/security/advisories/GHSA-wh9c-v56x-v77c https://bugzilla.redhat.com/show_bug.cgi?id=2317075 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231371] New: VUL-0: CVE-2024-43364: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231371 Bug ID: 1231371 Summary: VUL-0: CVE-2024-43364: cacti: Stored Cross-site Scripting (XSS) when creating external links in Cacti Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/423124/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: nix(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is an open source performance and fault management framework. The `title` parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users with the privilege to create external links can manipulate the `title` parameter in the http post request while creating external links to perform stored XSS attacks. The vulnerability known as XSS (Cross-Site Scripting) occurs when an application allows untrusted user input to be displayed on a web page without proper validation or escaping. This issue has been addressed in release version 1.2.28. All users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-43364 https://www.cve.org/CVERecord?id=CVE-2024-43364 https://github.com/Cacti/cacti/security/advisories/GHSA-fgc6-g8gc-wcg5 https://bugzilla.redhat.com/show_bug.cgi?id=2317078 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1231370] New: VUL-0: CVE-2024-43363: cacti: Remote code execution via Log Poisoning in Cacti
by bugzilla_noreply＠suse.com 08 Oct '24

08 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231370 Bug ID: 1231370 Summary: VUL-0: CVE-2024-43363: cacti: Remote code execution via Log Poisoning in Cacti Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/423123/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: nix(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to complete the steps before or after it) to use a php file as the cacti log file. After having the malicious hostname end up in the logs (log poisoning), one can simply go to the log file url to execute commands to achieve RCE. This issue has been addressed in version 1.2.28 and all users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-43363 https://www.cve.org/CVERecord?id=CVE-2024-43363 https://github.com/Cacti/cacti/security/advisories/GHSA-gxq4-mv8h-6qj4 https://bugzilla.redhat.com/show_bug.cgi?id=2317073 -- You are receiving this mail because: You are on the CC list for the bug.

1 1