February 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219882] New: Adapt package dd_rescue to build with OpenSSL 3
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1219882 Bug ID: 1219882 Summary: Adapt package dd_rescue to build with OpenSSL 3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: otto.hollmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package dd_rescue requires openssl 1.1.1 that is EOL and we would like to remove it from Factory. > # Workaround for bsc#1193438 > BuildRequires: libopenssl-1_1-devel Please check tracker bug 1219879 for more details. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1215937] New: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1215937 Bug ID: 1215937 Summary: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/380479/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: gabriele.sonnu(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. References: https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffe… http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43907 -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1215641] New: XDG Portal File Picker not working on latest snapshot
by bugzilla_noreply＠suse.com 02 Sep '24

02 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1215641 Bug ID: 1215641 Summary: XDG Portal File Picker not working on latest snapshot Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Usability Assignee: screening-team-bugs(a)suse.de Reporter: socvirnyl.estela(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Snapshot 20230921 has a bug where a user cannot open a filechooser/filepicker. A snippet of the log through `journalctl -f` is shown below: ``` Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Server is missing xdg_foreign support Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Failed to export handle, could not set transient for Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Can't open portal file chooser: GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface “org.freedesktop.portal.FileChooser” on object at path /org/freedesktop/portal/desktop ``` I have to rollback for now to a previous snapshot. -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1213162] New: kf.kio.core: Invalid URL: QUrl("//@/<smtp>.xfb")
by bugzilla_noreply＠suse.com 31 Aug '24

31 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1213162 Bug ID: 1213162 Summary: kf.kio.core: Invalid URL: QUrl("//@/<smtp>.xfb") Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Starting on 06/272023, probably after installing Tumbleweed snapshot 20230625, I no longer can invite people using korganizer, if the invitation mail address has a format like "lastname, firstname" <opensuse(a)mike.franken.de> "firstname lastname" <opensuse(a)mike.franken.de> "anything" <opensuse(a)mike.franken.de> Using such an address produces the following warning messages in my log: kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.xfb") kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.ifb") kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.vfb") No invitation mail is sent in this case. Using just <opensuse(a)mike.franken.de> works ok. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1218309] New: systemd-detect-virt does not detect RISC-V QEMU
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1218309 Bug ID: 1218309 Summary: systemd-detect-virt does not detect RISC-V QEMU Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: RISC-V URL: https://openqa.opensuse.org/tests/3829768/modules/firs trun/steps/67 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: --- In a qemu-system-riscv64 -M virt,acpi=off -cpu rv64 VM, systemd-detect-virt returns "none". ## Observation openQA test in scenario opensuse-Tumbleweed-JeOS-for-RISCV-riscv64-jeos@riscv64_cpu_max fails in [firstrun](https://openqa.opensuse.org/tests/3829768/modules/firstrun/steps/… ## Test suite description Maintainer: fvogt, mnowak Start JeOS from the HDD image, configure it using the firstboot wizard and then run basic tests. console=tty0 added as needed for aarch64. ## Reproducible Fails since (at least) Build [20231220](https://openqa.opensuse.org/tests/3829768) (current job) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=riscv64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1217710] New: icecream fails to compile remotely, falls back to local compilation
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1217710 Bug ID: 1217710 Summary: icecream fails to compile remotely, falls back to local compilation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: jimis(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Icecream fails to find libraries, when executing cc1plus on the remote host. On the remote host we see: cc1plus: error while loading shared libraries: libz.so.1: cannot open shared object file: No such file or directory This causes all compilations to fail and re-run locally. The reason is that the binary is linked to hardware-dependent shared libraries under `/lib64/glibc-hwcaps` directory, and icecream-create-env fails to transfer the generic versions of the libraries too. $ ldd /usr/lib64/gcc/x86_64-suse-linux/13/cc1plus | grep hwcap libz.so.1 => /lib64/glibc-hwcaps/x86-64-v3/libz.so.1.3 (0x00007f8f2020e000) libzstd.so.1 => /lib64/glibc-hwcaps/x86-64-v3/libzstd.so.1.5.5 (0x00007f8f20161000) The fix is already upstream, but icecream hasn't had a release in almost 2 years. Could you please cherry-pick the fix and make icecream usable again? https://github.com/icecc/icecream/pull/602 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1220586] New: sudo wrapper inside $HOME/bin
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1220586 Bug ID: 1220586 Summary: sudo wrapper inside $HOME/bin Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: slawek(a)lach.art.pl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Opensuse allows to ran executables from $HOME/bin. Placing malicious program (for example - bash script), called sudo, could execute code as root. Tbis program would call sudo with absolute path and own arguments. It could also call sudo with arguments passed to this program, but also call it after/before with own arguments. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1214167] New: OBS: nothing provides lzip
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1214167 Bug ID: 1214167 Summary: OBS: nothing provides lzip Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: manfred99(a)gmx.ch QA Contact: adrian.schroeter(a)suse.com Target Milestone: --- Found By: --- Blocker: --- In the package rcs (https://build.opensuse.org/package/show/devel:tools:scm/rcs) there is a build error for Leap 15.4 and Leap 15.5: "unresolvable: nothing provides lzip" Although both distributions provide lzip, and the required "BuildRequires: lzip" is given in the spec file. The issue seems to be, that OBS builds against a subset of packages (drawing by Jan Engelhardt): SLE-15.5-Base `-- SLE-15.5-Update <- devel:tools:scm is pointing here `-- SLE-15.5-Backports <- lzip is available from here `-- Leap:15.5 `-- Leap:15.5:Update Which explains why this can not work. But there are software projects (such as RCS) which only distribute lzip-compressed release tarballs. IMHO such a basic, widely used compression tool should be available in SLE-15.5-Base or SLE-15.5-Update, so that OBS can use it to build packages. Alternatively there should be a mechanism to provide essential building blocks to OBS (outside of SLE-.*), so that OBS can do its duty. At the moment there is no possibility to build software which provides lzip-tarballs. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1215219] New: xdg-utils: cannot open https/https urls, malformed character
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1215219 Bug ID: 1215219 Summary: xdg-utils: cannot open https/https urls, malformed character Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: gianmarco.torti(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- package installed info: Information for package xdg-utils: ---------------------------------- Repository : openSUSE-Tumbleweed-Oss Name : xdg-utils Version : 1.1.3+20230830-1.1 Arch : noarch Vendor : openSUSE Installed Size : 348.4 KiB Installed : Yes Status : up-to-date Source package : xdg-utils-1.1.3+20230830-1.1.src Upstream URL : https://www.freedesktop.org/wiki/Software/xdg-utils/ with this version is not possible to open any url with http / https prefix , this is the error: xdg-open https://www.kernel.org start : This command cannot be run due to the error: The system cannot find the file specified. At line:1 char:1 + start https\www.kernel.org + ~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidOperation: (:) [Start-Process], InvalidOperationException + FullyQualifiedErrorId : InvalidOperationException,Microsoft.PowerShell.Commands.StartProcessCommand NOTE: opensuse tumbleweed installed in WSL subsystem with older version xdg-utils-1.1.3+20210805-2.3.noarch there are no problems -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1217312] New: Google websites do not work in Firefox
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1217312 Bug ID: 1217312 Summary: Google websites do not work in Firefox Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: bart.vanassche+novell(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Since more than a year, multiple Google websites, e.g. Google Search, Google Docs and Gmail, do not work well with the Firefox software included with openSUSE Tumbleweed. It often happens that loading one of these websites stalls. Logging in to a Google account doesn't work at all. I don't see this issue if I download Firefox binaries from the Mozilla website and load my existing profile (firefox/firefox -profileManager). Does this perhaps mean that there is a problem with changes made to the Firefox software that is available from openSUSE? Tumbleweed version: $ rpm -qf /etc/issue.net openSUSE-release-20231117-2596.1.x86_64 Firefox versions: $ rpm -q MozillaFirefox MozillaFirefox-119.0.1-1.1.x86_64 Binary downloaded from the Mozilla website: firefox-119.0.1.tar.bz2 -- You are receiving this mail because: You are on the CC list for the bug.

1 3