November 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231599] hard freezes related to btusb device 04ca:3802
by bugzilla_noreply＠suse.com 02 Nov '24

02 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231599 https://bugzilla.suse.com/show_bug.cgi?id=1231599#c25 --- Comment #25 from Rojon <o.rojon(a)posteo.net> --- (In reply to Rojon from comment #24) > Hello everyone, > > I want to report that even with the patch by Takashi Iwai (thanks!), I am > regularly experiencing hard freezes which force me to hard reboot the > system. While this most often happens when resuming from sleep, I just had a > hard freeze during normal usage (AFAIK). I have been updating my system > daily ever since. > > 1. rpm -q --changelog kernel-default | grep -C2 1231599 > > * Mi Okt 16 2024 tiwai(a)suse.de > - Bluetooth: btmtk: Remove resetting mt7921 before downloading > the fw (bsc#1231599). > - commit a3c998f > > 2. cat /etc/os-release > NAME="openSUSE Tumbleweed" > # VERSION="20241031" > > 3. journalctl -b -2 -p 0 > Nov 02 08:19:35 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 55s! > Nov 02 08:20:06 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 85s! > Nov 02 08:20:36 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 116s! > Nov 02 08:21:07 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 147s! > Nov 02 08:21:38 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 178s! > Nov 02 08:22:08 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 208s! > Nov 02 08:22:39 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 239s! > Nov 02 08:23:10 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 270s! > Nov 02 08:23:41 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 301s! > Nov 02 08:24:11 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 331s! > Nov 02 08:24:42 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 362s! > Nov 02 08:25:13 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 393s! > Nov 02 08:25:43 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 423s! > Nov 02 08:26:15 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 455s! > Nov 02 08:26:45 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 485s! > Nov 02 08:27:16 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 516s! > Nov 02 08:27:46 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 546s! > Nov 02 08:28:18 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 578s! > Nov 02 08:28:50 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 610s! > Nov 02 08:29:20 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 640s! > Nov 02 08:29:51 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 671s! > Nov 02 08:30:22 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 702s! > Nov 02 08:30:52 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 732s! > Nov 02 08:31:23 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 763s! > Nov 02 08:31:35 linux.fritz.box kernel: watchdog: BUG: soft lockup - CPU#9 > stuck for 26s! [bluetoothd:1230] > Nov 02 08:31:54 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 > node=0 flags=0x0 nice=0 stuck for 794s! > > For the moment, I switched over to kernel-longterm to boot from there. If I > can provide additional information, I am happy to provide them. > > Have a good day :) I forgot to mention that when the system enters a hard freeze, I cannot become sudo and thus I have to call journalctl on past sessions. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231599] hard freezes related to btusb device 04ca:3802
by bugzilla_noreply＠suse.com 02 Nov '24

02 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231599 https://bugzilla.suse.com/show_bug.cgi?id=1231599#c24 Rojon <o.rojon(a)posteo.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |o.rojon(a)posteo.net --- Comment #24 from Rojon <o.rojon(a)posteo.net> --- Hello everyone, I want to report that even with the patch by Takashi Iwai (thanks!), I am regularly experiencing hard freezes which force me to hard reboot the system. While this most often happens when resuming from sleep, I just had a hard freeze during normal usage (AFAIK). I have been updating my system daily ever since. 1. rpm -q --changelog kernel-default | grep -C2 1231599 * Mi Okt 16 2024 tiwai(a)suse.de - Bluetooth: btmtk: Remove resetting mt7921 before downloading the fw (bsc#1231599). - commit a3c998f 2. cat /etc/os-release NAME="openSUSE Tumbleweed" # VERSION="20241031" 3. journalctl -b -2 -p 0 Nov 02 08:19:35 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 55s! Nov 02 08:20:06 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 85s! Nov 02 08:20:36 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 116s! Nov 02 08:21:07 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 147s! Nov 02 08:21:38 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 178s! Nov 02 08:22:08 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 208s! Nov 02 08:22:39 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 239s! Nov 02 08:23:10 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 270s! Nov 02 08:23:41 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 301s! Nov 02 08:24:11 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 331s! Nov 02 08:24:42 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 362s! Nov 02 08:25:13 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 393s! Nov 02 08:25:43 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 423s! Nov 02 08:26:15 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 455s! Nov 02 08:26:45 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 485s! Nov 02 08:27:16 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 516s! Nov 02 08:27:46 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 546s! Nov 02 08:28:18 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 578s! Nov 02 08:28:50 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 610s! Nov 02 08:29:20 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 640s! Nov 02 08:29:51 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 671s! Nov 02 08:30:22 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 702s! Nov 02 08:30:52 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 732s! Nov 02 08:31:23 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 763s! Nov 02 08:31:35 linux.fritz.box kernel: watchdog: BUG: soft lockup - CPU#9 stuck for 26s! [bluetoothd:1230] Nov 02 08:31:54 linux.fritz.box kernel: BUG: workqueue lockup - pool cpus=6 node=0 flags=0x0 nice=0 stuck for 794s! For the moment, I switched over to kernel-longterm to boot from there. If I can provide additional information, I am happy to provide them. Have a good day :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227196] mygnuhealth fails on startup with "ModuleNotFoundError: No module named 'bleak'" in Tumbleweed container
by bugzilla_noreply＠suse.com 02 Nov '24

02 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1227196 https://bugzilla.suse.com/show_bug.cgi?id=1227196#c3 Axel Braun <axel.braun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #3 from Axel Braun <axel.braun(a)gmx.de> --- python-bleak is in TW in between, so I consider this as fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231589] python-M2Crypto fails to build with Swig 4.3.0
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231589 https://bugzilla.suse.com/show_bug.cgi?id=1231589#c2 Matej Cepl <mcepl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #2 from Matej Cepl <mcepl(a)suse.com> --- SR accepted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230906] python312: has some mtime based .pyc files
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1230906 https://bugzilla.suse.com/show_bug.cgi?id=1230906#c8 --- Comment #8 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:3879-1: An update that solves one vulnerability and has one security fix can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243879-1 Category: security (moderate) Bug References: 1230906, 1232241 CVE References: CVE-2024-9287 Maintenance Incident: [SUSE:Maintenance:36159](https://smelt.suse.de/incident/36159/) Sources used: openSUSE Leap 15.3 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1, python3-documentation-3.6.15-150300.10.75.1 openSUSE Leap Micro 5.5 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 openSUSE Leap 15.5 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1, python3-documentation-3.6.15-150300.10.75.1 openSUSE Leap 15.6 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1, python3-documentation-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro for Rancher 5.3 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro 5.3 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro for Rancher 5.4 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro 5.4 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro 5.5 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 Basesystem Module 15-SP5 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 Basesystem Module 15-SP6 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 Development Tools Module 15-SP5 (src): python3-core-3.6.15-150300.10.75.1 Development Tools Module 15-SP6 (src): python3-core-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro 5.2 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): python3-core-3.6.15-150300.10.75.1, python3-3.6.15-150300.10.75.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232721] New: rebar3 local install fails
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232721 Bug ID: 1232721 Summary: rebar3 local install fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: Other URL: https://openqa.opensuse.org/tests/4610756/modules/erla ng_smoke_test/steps/99 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: volodymyr.katkalov(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation openQA test in scenario microos-Tumbleweed-MicroOS-Image-x86_64-stack_tests_erlang@64bit fails in [erlang_smoke_test](https://openqa.opensuse.org/tests/4610756/modules/erlang… `rebar3 local install` fails: ===> Expanded command sequence to be run: [] ===> Running provider: do ===> Expanded command sequence to be run: [{local,install}] ===> Running provider: {local,install} ===> Uncaught error in rebar_core. Run with DIAGNOSTIC=1 to see stacktrace or consult rebar3.crashdump ===> Uncaught error: {badmatch,false} ===> Stack trace to the error location: [{rebar_prv_local_install,extract_escript,2, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar_prv_local_install.erl"}, {line,74}]}, {rebar_core,do,2, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar_core.erl"}, {line,155}]}, {rebar_prv_do,do_task,5, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar_prv_do.erl"}, {line,87}]}, {rebar_core,do,2, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar_core.erl"}, {line,155}]}, {rebar3,run_aux,2, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar3.erl"}, {line,205}]}, {rebar3,main,1, [{file,"/home/abuild/rpmbuild/BUILD/rebar3-3.23.0/apps/rebar/src/rebar3.erl"}, {line,66}]}, {erl_eval,local_func,8,[{file,"erl_eval.erl"},{line,646}]}, {escript,interpret,4,[{file,"escript.erl"},{line,780}]}] ===> When submitting a bug report, please include the output of `rebar3 report "your command"` pkNZa-1- Additionally, `mkdir -p ~/.config/rebar3/; rebar3 new app $app_name` fails with template `app` not found unless `cp -r /usr/lib64/erlang/lib/rebar3-*/priv/templates ~/.config/rebar3/` is done prior. ## Test suite description ## Reproducible Fails since (at least) Build [20241031](https://openqa.opensuse.org/tests/4610422) ## Expected result Last good: [20241031](https://openqa.opensuse.org/tests/4609146) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229057] New: createrepo_c - man8 link for createrepo.8.gz to createrepo_c.8.gz fails due to spurious '\' in file
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1229057 Bug ID: 1229057 Summary: createrepo_c - man8 link for createrepo.8.gz to createrepo_c.8.gz fails due to spurious '\' in file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: drankinatty(a)suddenlinkmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- createrepo_c includes the man page accessible through "man createrepo_c" and through the traditional name "man createrepo", e.g. /usr/share/man/man8/createrepo.8.gz /usr/share/man/man8/createrepo_c.8.gz The contents of createrepo.8.gz contain an additional '\' escaping the underscore that breaks this functionality. The contents are: $ zcat /usr/share/man/man8/createrepo.8.gz .so man8/createrepo\_c.8 Attempting to access the man page through "man createrepo" results in: $ man createrepo man: can't resolve man8/createrepo\_c.8 No manual entry for createrepo Possibly, man page is not installed, try online at: https://manpages.opensuse.org/createrepo Removing the '\' allows it to work normally. Thanks to Georg Pfuetzenreuter via openSUSE Users <users(a)lists.opensuse.org> for the investigation. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1231797] [ppc64le] continuous workqueue and soft lockups when executing nfs test with fsstress
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231797 Petr Vorel <petr.vorel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |petr.vorel(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232714] ffmpeg-7 not installable on actual Slowroll
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232714 Santiago Zarate <santiago.zarate(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |santiago.zarate(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175930] mc: Midnight Commander start slow
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1175930 https://bugzilla.suse.com/show_bug.cgi?id=1175930#c6 Lubos Kocman <lubos.kocman(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lubos.kocman(a)suse.com --- Comment #6 from Lubos Kocman <lubos.kocman(a)suse.com> --- I noticed this in distrobox TW containers too! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1060506] xerces-c serialization varies across builds
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1060506 https://bugzilla.suse.com/show_bug.cgi?id=1060506#c15 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(fvogt(a)suse.com), | |needinfo?(bwiedemann(a)suse.c | |om) | --- Comment #15 from Petr Gajdos <pgajdos(a)suse.com> --- This will need more evaluation, sorry. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216304] cockpit virtual machines starts failed because ::1 address in template cannot be determined if ipv6 disabled
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1216304 https://bugzilla.suse.com/show_bug.cgi?id=1216304#c4 Alice Brooks <alice.brooks(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Alice Brooks <alice.brooks(a)suse.com> --- I can confirm this one is downstream now so this issue can be resolved -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230090] New: VUL-0: CVE-2024-45305: watchexec: gix-path: gix-path uses local config across repos when it is the highest scope
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1230090 Bug ID: 1230090 Summary: VUL-0: CVE-2024-45305: watchexec: gix-path: gix-path uses local config across repos when it is the highest scope Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: Other URL: https://smash.suse.de/issue/419537/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: david.anes(a)suse.com Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de CC: danilo.spinella(a)suse.com Blocks: 1230079 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1230079 +++ gix-path is a crate of the gitoxide project dealing with git paths and their conversions. `gix-path` executes `git` to find the path of a configuration file that belongs to the `git` installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped configuration is found. In rare cases, this causes a less trusted repository to be treated as more trusted, or leaks sensitive information from one repository to another, such as sending credentials to another repository's remote. In `gix_path::env`, the underlying implementation of the `installation_config` and `installation_config_prefix` functions calls `git config -l --show-origin` and parses the first line of the output to extract the path to the configuration file holding the configuration variable of highest scope. It is believed to be very difficult to exploit this vulnerability deliberately, due to the need either to anticipate a situation in which higher-scoped configuration variables would be absent, or to arrange for this to happen. Although any operating system may be affected, users running Apple Git on macOS are much less likely to be affected. This issue has been addressed in release version 0.10.10. All users are advised to upgrade. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-45305 https://www.cve.org/CVERecord?id=CVE-2024-45305 https://git-scm.com/docs/git-config#SCOPES https://github.com/Byron/gitoxide/blob/12251eb052df30105538fa831e641eea557f… https://github.com/Byron/gitoxide/blob/12251eb052df30105538fa831e641eea557f… https://github.com/Byron/gitoxide/security/advisories/GHSA-v26r-4c9c-h3j6 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232559] VUL-0: CVE-2024-48921: kyverno: kyverno: a kyverno ClusterPolicy can be overridden by the creation of a PolicyException in a random namespace, allowing users with privileges to non-kyverno namespaces to create exceptions
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232559 https://bugzilla.suse.com/show_bug.cgi?id=1232559#c4 Johannes Kastl <opensuse_buildservice(a)ojkastl.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(camila.matos@suse | |.com) --- Comment #4 from Johannes Kastl <opensuse_buildservice(a)ojkastl.de> --- SR#1219416 was accepted to Factory. So I guess we can close this one? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232650] Lenovo Yoga Pro 7 14ASP9 fails to wake up from suspend mode
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232650 https://bugzilla.suse.com/show_bug.cgi?id=1232650#c20 --- Comment #20 from Takashi Iwai <tiwai(a)suse.com> --- If nomodeset works, it implies that the problem is in AMDGPU driver. Since the problem is still found in the latest upstream kernel, it'd be better to report to the upstream devs, e.g. gitlab.freedesktop.org Issues DRM/AMD. (Or search similar entries from there.) Care to do that? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231686] AusweisApp and AusweisApp2 broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 https://bugzilla.suse.com/show_bug.cgi?id=1231686#c21 --- Comment #21 from John Paul Adrian Glaubitz <adrian.glaubitz(a)suse.com> --- Submitted an update to Factory now. I will also take care of Leap. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230628] zdup 15.6: not installable providers: cpp-build-13-slfo.1.1.3.x86_64
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1230628 https://bugzilla.suse.com/show_bug.cgi?id=1230628#c35 --- Comment #35 from Max Lin <mlin(a)suse.com> --- @Giacomo I did check installcheck result in the last Leap build, there are only 2 relative uninstallables can't install gnuplot-5.4.10-slfo.1.1.6.src: nothing provides gcc-build-c++ needed by gnuplot-5.4.10-slfo.1.1.6.src and can't install libstdc++-build-devel-32bit-13-slfo.1.2.1.x86_64: nothing provides libstdc++-build-devel needed by libstdc++-build-devel-32bit-13-slfo.1.2.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232608] New: VUL-0: CVE-2024-50602: audacity: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 01 Nov '24

01 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1232608 Bug ID: 1232608 Summary: VUL-0: CVE-2024-50602: audacity: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: davejplater(a)gmail.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 5