October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231805] FTBFS: Telegram (QT_IMPLICIT_QCHAR_CONSTRUCTION removed)
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231805 https://bugzilla.suse.com/show_bug.cgi?id=1231805#c5 --- Comment #5 from Stakanov Schufter <stakanov(a)disroot.org> --- thank you, much appreciated. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231806] New: Thunderbird has wrong icon within Wayland
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231806 Bug ID: 1231806 Summary: Thunderbird has wrong icon within Wayland Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: fkrueger(a)mailbox.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Given TW20241017 with KDE Plasma 6.2.1, MozillaThunderbird-128.3.2-1.1.x86_64 (from Mozilla:repo), and using Wayland, Thunderbird shows the Wayland icon in the taskbar. Changing /usr/share/applications/thunderbird.desktop to .../thunderbird-esr.desktop solves the issue. Using Xorg, it works just fine. Since this happenend (by chance?) after the update to KDE Plasma 6.2.1, I am also cc'ing Fabian Vogt, since I am not sure about the real culprit. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1232551] New: MozillaThunderbird gets generic wayland icon (no matching .desktop file)
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232551 Bug ID: 1232551 Summary: MozillaThunderbird gets generic wayland icon (no matching .desktop file) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Usability Assignee: screening-team-bugs(a)suse.de Reporter: max(a)eterkludd.se QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- MozillaThunderbird has a desktop file "thunderbird.desktop" which gives the application a correct icon in the launcher. However when the application starts it opens a new window that identifies as "thunderbird-esr" (or thunderbird-bin) which has no matching desktop file and thus only gets a generic wayland icon. I am told that it can break more things but the icon is what I noticed. Steps to reproduce: 1. Install MozillaThunderbird from tumbleweed repos 2. Observe correct icon in launcher 3. launch thunderbird, observe that during launching the launch-window has the correct icon 4. after the full application has opened (launch window replaced) observe generic wayland icon. The fix is probably to patch in a different application name for the main window, such that it correctly matches the thunderbird.desktop file. This blog seems to have some information about that: https://nicolasfella.de/posts/fixing-wayland-taskbar-icons/ Workaround that showcases the issue: Copy "thunderbird.desktop" file in /usr/share/applications/ to "thunderbird-esr.desktop" and relaunch thunderbird -> observe correct icon. Creating duplicate .desktop files is probably not the correct way of fixing it, hence "workaround". Sorry if this bug got placed in the wrong category, was not sure where to put it. Please move the issue if its wrong! -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1219988] go1.20,go1.21,go1.22: ensure VERSION file is present in go1.x toolchain GOROOT
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1219988 https://bugzilla.suse.com/show_bug.cgi?id=1219988#c18 --- Comment #18 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3772-1: An update that solves 14 vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243772-1 Category: security (important) Bug References: 1218424, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003, 1221400, 1224017, 1224018, 1225973, 1225974, 1227314, 1230252, 1230253, 1230254 CVE References: CVE-2023-45288, CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785, CVE-2024-24787, CVE-2024-24788, CVE-2024-24789, CVE-2024-24790, CVE-2024-24791, CVE-2024-34155, CVE-2024-34156, CVE-2024-34158 Jira References: PED-1962, SLE-18320 Maintenance Incident: [SUSE:Maintenance:36176](https://smelt.suse.de/incident/36176/) Sources used: openSUSE Leap 15.5 (src): go1.22-openssl-1.22.7.1-150000.1.3.1 Development Tools Module 15-SP5 (src): go1.22-openssl-1.22.7.1-150000.1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1218424] go1.22 release tracking
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1218424 https://bugzilla.suse.com/show_bug.cgi?id=1218424#c44 --- Comment #44 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3772-1: An update that solves 14 vulnerabilities, contains two features and has two security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243772-1 Category: security (important) Bug References: 1218424, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003, 1221400, 1224017, 1224018, 1225973, 1225974, 1227314, 1230252, 1230253, 1230254 CVE References: CVE-2023-45288, CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785, CVE-2024-24787, CVE-2024-24788, CVE-2024-24789, CVE-2024-24790, CVE-2024-24791, CVE-2024-34155, CVE-2024-34156, CVE-2024-34158 Jira References: PED-1962, SLE-18320 Maintenance Incident: [SUSE:Maintenance:36176](https://smelt.suse.de/incident/36176/) Sources used: openSUSE Leap 15.5 (src): go1.22-openssl-1.22.7.1-150000.1.3.1 Development Tools Module 15-SP5 (src): go1.22-openssl-1.22.7.1-150000.1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229122] go1.23 release tracking
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1229122 https://bugzilla.suse.com/show_bug.cgi?id=1229122#c27 --- Comment #27 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3773-1: An update that solves three vulnerabilities, contains one feature and has one security fix can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243773-1 Category: security (important) Bug References: 1229122, 1230252, 1230253, 1230254 CVE References: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158 Jira References: SLE-18320 Maintenance Incident: [SUSE:Maintenance:36173](https://smelt.suse.de/incident/36173/) Sources used: Development Tools Module 15-SP5 (src): go1.23-openssl-1.23.2.2-150000.1.3.1 openSUSE Leap 15.5 (src): go1.23-openssl-1.23.2.2-150000.1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232550] New: superlu: build fails with --nocheck
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232550 Bug ID: 1232550 Summary: superlu: build fails with --nocheck Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: foss(a)grueninger.de Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: badshah400(a)gmail.com Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our superlu package fails to build without tests: osc build --noservice --nocheck -M serial standard Packages should be able to build without the %check section and should produce the same rpms as with %check. build.log says: error: File not found: /home/abuild/rpmbuild/BUILDROOT/superlu-7.0.0-0.x86_64/usr/share/doc/packages/superlu-devel/README.fortran -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232548] New: VUL-0: CVE-2024-42460,CVE-2024-42461,CVE-2024-42459: deepin-manual: elliptic: Multiple vulnerabilities fixed in elliptic version 6.5.7
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232548 https://bugzilla.suse.com/show_bug.cgi?id=1232548#c1 Bug ID: 1232548 Summary: VUL-0: CVE-2024-42460,CVE-2024-42461,CVE-2024-42459: deepin-manual: elliptic: Multiple vulnerabilities fixed in elliptic version 6.5.7 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/416168/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-42459:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) CVSSv3.1:SUSE:CVE-2024-42460:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) CVSSv3.1:SUSE:CVE-2024-42461:5.3:(AV:N/AC:L/PR:N/UI:N/ S:U/C:L/I:N/A:N) Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: gianluca.gabrielli(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232538 Target Milestone: --- Found By: --- Blocker: --- --- Comment #1 from Gianluca Gabrielli <gianluca.gabrielli(a)suse.com> --- CVE-2024-42459: In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended. CVE-2024-42460: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero. CVE-2024-42461: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. The upstream fix for all the above mentioned CVEs is accb61e [0] and was part of version 6.5.7. References: https://github.com/indutny/elliptic/pull/317 [0] https://github.com/indutny/elliptic/commit/accb61e9c1a005e5c8ff96a8b3389310… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1232539] [Build 20241027] openQA test fails in fanotify22 - -ltp-syscalls
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232539 Petr Vorel <petr.vorel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs(a)opensuse.org |jack(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232539] [Build 20241027] openQA test fails in fanotify22 - -ltp-syscalls
by bugzilla_noreply＠suse.com 29 Oct '24

29 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232539 https://bugzilla.suse.com/show_bug.cgi?id=1232539#c1 Petr Vorel <petr.vorel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED CC| |petr.vorel(a)suse.com --- Comment #1 from Petr Vorel <petr.vorel(a)suse.com> --- Kernel bug, Jan Kara has posted a fix for it [1], IMHO not yet merged. Also tracked in LTP bugtracker. [1] https://lore.kernel.org/linux-ext4/20241004221556.19222-1-jack@suse.cz/ [2] https://github.com/linux-test-project/ltp/issues/1206 -- You are receiving this mail because: You are on the CC list for the bug.

1 0