April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190740] TLS reference in /usr/lib64/libLLVM.so mismatches non-TLS reference in /usr/lib64/libLLVM.so when linking to LLVM on s390x
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1190740 https://bugzilla.suse.com/show_bug.cgi?id=1190740#c66 --- Comment #66 from Sarah Kriesch <ada.lovelace(a)gmx.de> --- @Reinhard can we close this bugreport after the memory improvement by IBM? I did not recognize any failures in the last days any more. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220085] Data races reported by KCSAN on s390x
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1220085 Sarah Kriesch <ada.lovelace(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ada.lovelace(a)gmx.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222086] zypper as non-root always reports repositories are out-of-date (regression)
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222086 Michael Andres <ma(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222195] New: required library not installed when package is selected in yast software UI, here libjack0
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222195 Bug ID: 1222195 Summary: required library not installed when package is selected in yast software UI, here libjack0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: ohering(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 873955 --> https://bugzilla.suse.com/attachment.cgi?id=873955&action=edit var-log-zypp-history.txt.xz A fresh install of todays Leap 15.6 status, likely RC1, with XFCE pattern. In the installed system: open yast open software repos add "packman" community repo close software repos open software selection show repositories select "packman" select "switch system to this repo" select also the "ffmpeg-6" package install continue on terminal, run "ffmpeg -version" fails with "libjack.so.0" not found. workaround: zypper in libjack0, to install the missing library See attached /var/log/zypp/history for the order of events. It seems libavdevice60 lists the required "libjack.so.0" properly. So somehow yast and/or libzypp fails to recognize that libjack0.rpm is required. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1219739] Seamonkey requires python2(EOL) to build
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1219739 https://bugzilla.suse.com/show_bug.cgi?id=1219739#c5 --- Comment #5 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-RU-2024:0099-1: An update that has one recommended fix can now be installed. Category: recommended (important) Bug References: 1219739 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP5 (src): seamonkey-2.53.18.2-bp155.2.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222234] New: /usr/bin/lcov should be executable
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222234 Bug ID: 1222234 Summary: /usr/bin/lcov should be executable Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- For some reason, /usr/bin/lcov from the lcov package does not have executable permission, making the package unusable without root intervention. (this is on TW 20240329) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1198683] VUL-1: CVE-2022-1245: keycloak: Privilege escalation vulnerability on Token Exchange
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1198683 https://bugzilla.suse.com/show_bug.cgi?id=1198683#c2 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fstrba(a)suse.com |security-team(a)suse.de --- Comment #2 from Fridrich Strba <fstrba(a)suse.com> --- The package lives here https://build.opensuse.org/package/show/Java:binaries/keycloak and the version there is the repackaged 24.0.2 which is having this one fixed. I don't see it anywhere in backports, so most likely it is not there. Reassigning to security to know what to do: close or not to close. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1211784] VUL-0: CVE-2023-1664: keycloak: Untrusted Certificate Validation
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1211784 https://bugzilla.suse.com/show_bug.cgi?id=1211784#c1 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fstrba(a)suse.com |security-team(a)suse.de --- Comment #1 from Fridrich Strba <fstrba(a)suse.com> --- The package lives here https://build.opensuse.org/package/show/Java:binaries/keycloak and the version there is the repackaged 24.0.2 which is having this one fixed. I don't see it anywhere in backports, so most likely it is not there. Reassigning to security to know what to do: close or not to close. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198920] VUL-0: CVE-2022-1466: keycloak: Improper authorization for master realm
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1198920 https://bugzilla.suse.com/show_bug.cgi?id=1198920#c6 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fstrba(a)suse.com |security-team(a)suse.de --- Comment #6 from Fridrich Strba <fstrba(a)suse.com> --- The package lives here https://build.opensuse.org/package/show/Java:binaries/keycloak and the version there is the repackaged 24.0.2 which is having this one fixed. I don't see it anywhere in backports, so most likely it is not there. Reassigning to security to know what to do: close or not to close. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221356] UEFI Installation Parameter ifcfg/netsetup with static ip ignored for network interface
by bugzilla_noreply＠suse.com 02 Apr '24

02 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221356 https://bugzilla.suse.com/show_bug.cgi?id=1221356#c6 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #6 from Stefan Hundhammer <shundhammer(a)suse.com> --- Duh; I overlooked the part that they were not added to the kernel parameters. Please try that; I am sure then it will be successful. -- You are receiving this mail because: You are on the CC list for the bug.

1 0