October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231254] New: python-panel: package-lock.json reproducible builds issue
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231254 Bug ID: 1231254 Summary: python-panel: package-lock.json reproducible builds issue Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: code(a)bnavigator.de Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: badshah400(a)gmail.com Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our python-panel package always varies in package-lock.json because it embeds a random HTTP port "node_modules/@babel/runtime": { "version": "7.25.6", - "resolved": "http://localhost:42741/-/@babel-runtime-7.25.6.tgz", + "resolved": "http://localhost:33549/-/@babel-runtime-7.25.6.tgz", "integrity": "sha512-VBj9MYyDb9tuLq7yzqjgzt6Q+IBQLrGZfdjOekyEirZPHxXWoTSGUTMrpsfi58Up73d13NfYLv8HT9vmznjzhQ==", "license": "MIT", "dependencies": { dropping or normalizing after the build does not work, because /usr/lib/python3.10/site-packages/panel-1.5.0.dist-info/RECORD contains a hash of the generated package-lock.json -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214211] New: "Loading basic drivers" is printed twice on the screen when loading installation system
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214211 Bug ID: 1214211 Summary: "Loading basic drivers" is printed twice on the screen when loading installation system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: dheidler(a)suse.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 868778 --> https://bugzilla.suse.com/attachment.cgi?id=868778&action=edit screenshot Something like this is printed: Loading basic drivers...Loading basic drivers ok Expected: Loading basic drivers... ok -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1227070] New: gettext.sh missing dependency on envsubst
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1227070 Bug ID: 1227070 Summary: gettext.sh missing dependency on envsubst Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: pafee(a)tycoint.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Using "git submodule status", I see unexpected error text alongside the expected output. $ git submodule status /usr/bin/gettext.sh: line 88: envsubst: command not found /usr/bin/gettext.sh: line 88: envsubst: command not found <expected output follows> Within gettext.sh, line 88 invokes envsubst. This used to be provided by the gettext-runtime package, however has split out into a separate envsubst package (built from the same source RPM as as gettext-runtime. Should the gettext-runtime binary RPM have a "requires" dependency on envsubst? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1229324] [Gnome] Artifacts in applications due to shipping unstable version of gtk4
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1229324 https://bugzilla.suse.com/show_bug.cgi?id=1229324#c3 hui <sturm-fr(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #3 from hui <sturm-fr(a)web.de> --- Tumbleweed and Slowroll are using the latest stable gtk4 4.16.2 release. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1214612] rootless ipv6 containers can't be started
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214612 https://bugzilla.suse.com/show_bug.cgi?id=1214612#c6 --- Comment #6 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- CNI also uses ip6_tables, we should have this module loaded in SLE/Leap as CNI can still be used as the default network backend. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1214612] rootless ipv6 containers can't be started
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214612 https://bugzilla.suse.com/show_bug.cgi?id=1214612#c5 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS --- Comment #5 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- Yes, if we switch we might be able to drop, but for now, it is required in Tumbleweed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230115] kernel: Intel HDA (0x8086:0x7a50) sound fails to configure for Lenovo Thinkpad P16 Gen 2 (21FA000AGE)
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230115 https://bugzilla.suse.com/show_bug.cgi?id=1230115#c15 --- Comment #15 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Ulrich Windl from comment #14) > (In reply to Takashi Iwai from comment #13) > > Please don't use yast2-sound. > > It seems yast getes fewer and fewer functions in recent releases, I did not > know that. Forgive an old user. YaST shall disappear in future. > > Then install the latest sof-firmware package from OBS multimedia:libs repo > > http://download.opensuse.org/repositories/multimedia:/libs/15.6/ > > and retest. The sof-firmware package of the current Leap 15.6 might be too > > old for the newer kernels. > > So the configuration will happen "automagically", and the official firmware > is too old to work? Please read the text more carefully. It *might* be too old for *newer* kernels. The current sof-firmware package for Leap 15.6 contains the files at the time Leap 15.6 was initially developed. That is, it was the latest stuff at that time. OTOH, you are using a much newer (unofficial) kernel package (6.11), and the firmware *might* have become outdated for it. > As a side note: In current debian-based Tails live system the Raptor Lake > sound worked out of the box; I only had to select the correct audio device. 6.11 must be much newer than what Debian has, and if anything doens't work with it, it implies that it's a breakage in the upstream. Blame upstream if something is broken there. And, my suggestion to test the newer sof-firmware came from the wild guess from the kernel messages. Verify it at first. OK? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c12 --- Comment #12 from Michael Chang <mchang(a)suse.com> --- The SR to Base:System/grub2 https://build.opensuse.org/request/show/1205654 waiting my companion's review. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230115] kernel: Intel HDA (0x8086:0x7a50) sound fails to configure for Lenovo Thinkpad P16 Gen 2 (21FA000AGE)
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230115 https://bugzilla.suse.com/show_bug.cgi?id=1230115#c14 --- Comment #14 from Ulrich Windl <Ulrich.Windl(a)rz.uni-regensburg.de> --- (In reply to Takashi Iwai from comment #13) > Please don't use yast2-sound. It seems yast getes fewer and fewer functions in recent releases, I did not know that. Forgive an old user. > Then install the latest sof-firmware package from OBS multimedia:libs repo > http://download.opensuse.org/repositories/multimedia:/libs/15.6/ > and retest. The sof-firmware package of the current Leap 15.6 might be too > old for the newer kernels. So the configuration will happen "automagically", and the official firmware is too old to work? As a side note: In current debian-based Tails live system the Raptor Lake sound worked out of the box; I only had to select the correct audio device. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231292] New: VUL-0: CVE-2024-25590: pdns-recursor: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231292 Bug ID: 1231292 Summary: VUL-0: CVE-2024-25590: pdns-recursor: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/422688/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: amajer(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for these sets can lead to a denial of service. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-25590 https://seclists.org/oss-sec/2024/q4/3 https://bugzilla.redhat.com/show_bug.cgi?id=2316309 https://www.cve.org/CVERecord?id=CVE-2024-25590 https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-20… -- You are receiving this mail because: You are on the CC list for the bug.

1 1