October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219884] New: Adapt package libzrtpcpp to build with OpenSSL 3
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1219884 Bug ID: 1219884 Summary: Adapt package libzrtpcpp to build with OpenSSL 3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: otto.hollmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package libzrtpcpp requires openssl 1.0.0 that is EOL and we would like to remove it from Factory. > BuildRequires: libopenssl-1_0_0-devel Please check tracker bug 1219879 for more details. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1232448] Licensing issue: python-nltk contains non-commercial licenses
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232448 https://bugzilla.suse.com/show_bug.cgi?id=1232448#c4 Daniel Garcia <daniel.garcia(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #4 from Daniel Garcia <daniel.garcia(a)suse.com> --- Fixed now in Factory -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232452] New: Licensing issue: python-fpdf2 contains non-commercial licenses
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232452 Bug ID: 1232452 Summary: Licensing issue: python-fpdf2 contains non-commercial licenses Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Any non commercial: 1 files fpdf2-2.7.9/test/text_shaping/SBL_Hbrw.ttf The license text says: 2. You may use this font software free of charge for all non-commercial purposes. If you wish to obtain a license for commercial use of this font software, please contact the Society of Biblical Literature at sblfonts(a)sbl-site.org, or write to license(a)tiro.com. Fees for commercial licenses are at the individual discretion of the Society of Biblical Literature and Tiro Typeworks. Nothing seems to depend on fpdf2 - so removing from Factory might be the most sensible/easy way -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1232545] New: VUL-0: CVE-2024-42460,CVE-2024-42461,CVE-2024-42459: python-pytest-html: elliptic: Multiple vulnerabilities fixed in elliptic version 6.5.7
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232545 Bug ID: 1232545 Summary: VUL-0: CVE-2024-42460,CVE-2024-42461,CVE-2024-42459: python-pytest-html: elliptic: Multiple vulnerabilities fixed in elliptic version 6.5.7 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/416168/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-42459:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) CVSSv3.1:SUSE:CVE-2024-42460:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) CVSSv3.1:SUSE:CVE-2024-42461:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) Severity: Normal Priority: P5 - None Component: Security Assignee: daniel.garcia(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232538 Target Milestone: --- Found By: --- Blocker: --- CVE-2024-42459: In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended. CVE-2024-42460: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero. CVE-2024-42461: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. The upstream fix for all the above mentioned CVEs is accb61e [0] and was part of version 6.5.7. References: https://github.com/indutny/elliptic/pull/317 [0] https://github.com/indutny/elliptic/commit/accb61e9c1a005e5c8ff96a8b3389310… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1214160] libvirt-routed firewalld zone not functional
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214160 Santiago Zarate <santiago.zarate(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |santiago.zarate(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232568] New: arm-none-eabi tools are broken
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232568 Bug ID: 1232568 Summary: arm-none-eabi tools are broken Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: aaron.w2(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I am running into issues with the arm-none-eabi cross toolchain from the devel:gcc repository. It appears to be missing some key components compared to the official ARM release. For example, the libc_nano/libg_nano components are missing. This is related to Bug 1208585. The nano libraries should be included with the arm-none-eabi tools. The official ARM toolchain can be downloaded at https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads Note that the latest official release is gcc-13. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1232566] VUL-0: chromium: 130.0.6723.91 stable release
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232566 https://bugzilla.suse.com/show_bug.cgi?id=1232566#c1 --- Comment #1 from Ruediger Oertel <ro(a)suse.com> --- any hints on where/how to get to a tarball while their download server is still broken ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232434] New: schily: cdda2wav varies from build host kernel version
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232434 Bug ID: 1232434 Summary: schily: cdda2wav varies from build host kernel version Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: jengelh(a)inai.de Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our schily/cdda2wav package varies from build host kernel version: /usr/bin/cdda2wav differed thus: 2e1a0 2066696c 65206e61 6d657320 6f72202d file names or - 2e1b0 20666f72 20737461 6e646172 64206f75 for standard ou 2e1c0 74707574 2e0a0000 5f6c696e 75785f36 tput...._linux_6 - 2e1d0 2e392e33 2d312d64 65666175 6c745f78 .9.3-1-default_x - 2e1e0 38365f36 345f7838 365f3634 00000000 86_64_x86_64.... + 2e1d0 2e31302e 322d312d 64656661 756c745f .10.2-1-default_ + 2e1e0 7838365f 36345f78 38365f36 34000000 x86_64_x86_64... 2e1f0 43616e6e 6f742072 65646972 65637420 Cannot redirect 2e200 6f757470 75742074 6f206664 2025642e output to fd %d. Testing showed that this comes from schily-2024-03-21/smake/archconf.c define_var("MAKE_OSREL", un.release); /* uname -r */ With my reproducibleopensuse tools, I can trigger the diff with vmtype=--vm-type=podman rbk comparing a build in podman to one in KVM. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1231599] hard freezes related to btusb device 04ca:3802
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231599 https://bugzilla.suse.com/show_bug.cgi?id=1231599#c23 --- Comment #23 from Ely G <elydgolden(a)gmail.com> --- Yep, kernel changelog mentions the fix :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232550] superlu: build fails with --nocheck
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232550 https://bugzilla.suse.com/show_bug.cgi?id=1232550#c3 --- Comment #3 from Atri Bhattacharya <badshah400(a)gmail.com> --- (In reply to Christoph G from comment #2) > I am not sure this helps. In line 46 the remaining EXAMPLE files are > deleted. Without the checks, they would stay and not being packaged. Right? The EXAMPLE dir is not in buildroot, so I don't see a problem. I just ran > ~> osc build --noservice --nocheck -M serial standard locally and it built successfully. However, perhaps I misunderstand what you're saying? -- You are receiving this mail because: You are on the CC list for the bug.

1 0