April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219882] New: Adapt package dd_rescue to build with OpenSSL 3
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1219882 Bug ID: 1219882 Summary: Adapt package dd_rescue to build with OpenSSL 3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: otto.hollmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package dd_rescue requires openssl 1.1.1 that is EOL and we would like to remove it from Factory. > # Workaround for bsc#1193438 > BuildRequires: libopenssl-1_1-devel Please check tracker bug 1219879 for more details. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1215937] New: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1215937 Bug ID: 1215937 Summary: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/380479/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: gabriele.sonnu(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. References: https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffe… http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43907 -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1215641] New: XDG Portal File Picker not working on latest snapshot
by bugzilla_noreply＠suse.com 02 Sep '24

02 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1215641 Bug ID: 1215641 Summary: XDG Portal File Picker not working on latest snapshot Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Usability Assignee: screening-team-bugs(a)suse.de Reporter: socvirnyl.estela(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Snapshot 20230921 has a bug where a user cannot open a filechooser/filepicker. A snippet of the log through `journalctl -f` is shown below: ``` Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Server is missing xdg_foreign support Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Failed to export handle, could not set transient for Sep 24 12:29:37 sentient-slate firefox-bin[3253]: Can't open portal file chooser: GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface “org.freedesktop.portal.FileChooser” on object at path /org/freedesktop/portal/desktop ``` I have to rollback for now to a previous snapshot. -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1213162] New: kf.kio.core: Invalid URL: QUrl("//@/<smtp>.xfb")
by bugzilla_noreply＠suse.com 31 Aug '24

31 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1213162 Bug ID: 1213162 Summary: kf.kio.core: Invalid URL: QUrl("//@/<smtp>.xfb") Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Starting on 06/272023, probably after installing Tumbleweed snapshot 20230625, I no longer can invite people using korganizer, if the invitation mail address has a format like "lastname, firstname" <opensuse(a)mike.franken.de> "firstname lastname" <opensuse(a)mike.franken.de> "anything" <opensuse(a)mike.franken.de> Using such an address produces the following warning messages in my log: kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.xfb") kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.ifb") kontact[4212]: kf.kio.core: Invalid URL: QUrl("//@/opensuse@mike.franken.de.vfb") No invitation mail is sent in this case. Using just <opensuse(a)mike.franken.de> works ok. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1218309] New: systemd-detect-virt does not detect RISC-V QEMU
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1218309 Bug ID: 1218309 Summary: systemd-detect-virt does not detect RISC-V QEMU Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: RISC-V URL: https://openqa.opensuse.org/tests/3829768/modules/firs trun/steps/67 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: --- In a qemu-system-riscv64 -M virt,acpi=off -cpu rv64 VM, systemd-detect-virt returns "none". ## Observation openQA test in scenario opensuse-Tumbleweed-JeOS-for-RISCV-riscv64-jeos@riscv64_cpu_max fails in [firstrun](https://openqa.opensuse.org/tests/3829768/modules/firstrun/steps/… ## Test suite description Maintainer: fvogt, mnowak Start JeOS from the HDD image, configure it using the firstboot wizard and then run basic tests. console=tty0 added as needed for aarch64. ## Reproducible Fails since (at least) Build [20231220](https://openqa.opensuse.org/tests/3829768) (current job) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=riscv64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1222450] New: Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found
by bugzilla_noreply＠suse.com 30 Aug '24

30 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1222450 Bug ID: 1222450 Summary: Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: miika.alikirri(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874124 --> https://bugzilla.suse.com/attachment.cgi?id=874124&action=edit output of podman info On a fresh installation of tumbleweed (version 20240403), podman fails to run as a non-root user when `--memory` option is set. running: ``` podman run --rm --memory 4M tumbleweed echo it works ``` prints out: ``` Error: crun: opening file `memory.max` for writing: No such file or directory: OCI runtime attempted to invoke a command that was not found ``` And running it as sudo runs it correctly and prints: ``` it works ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1222934] New: rsvndump fails to build on Leap 15.6 - missing subversion libraries
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1222934 Bug ID: 1222934 Summary: rsvndump fails to build on Leap 15.6 - missing subversion libraries Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello package rsvndump fails to build on Leap 15.6 due to missing subversion libraries https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 28s] checking for svn_client_open_ra_session in -lsvn_client-1... no [ 28s] configure: error: Neccessary Subversion libraries are missing [ 28s] error: Bad exit status from /var/tmp/rpm-tmp.zq7Yz1 (%build) [ 28s] [ 28s] Could you please have a look? -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1217710] New: icecream fails to compile remotely, falls back to local compilation
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1217710 Bug ID: 1217710 Summary: icecream fails to compile remotely, falls back to local compilation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: jimis(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Icecream fails to find libraries, when executing cc1plus on the remote host. On the remote host we see: cc1plus: error while loading shared libraries: libz.so.1: cannot open shared object file: No such file or directory This causes all compilations to fail and re-run locally. The reason is that the binary is linked to hardware-dependent shared libraries under `/lib64/glibc-hwcaps` directory, and icecream-create-env fails to transfer the generic versions of the libraries too. $ ldd /usr/lib64/gcc/x86_64-suse-linux/13/cc1plus | grep hwcap libz.so.1 => /lib64/glibc-hwcaps/x86-64-v3/libz.so.1.3 (0x00007f8f2020e000) libzstd.so.1 => /lib64/glibc-hwcaps/x86-64-v3/libzstd.so.1.5.5 (0x00007f8f20161000) The fix is already upstream, but icecream hasn't had a release in almost 2 years. Could you please cherry-pick the fix and make icecream usable again? https://github.com/icecc/icecream/pull/602 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1220586] New: sudo wrapper inside $HOME/bin
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1220586 Bug ID: 1220586 Summary: sudo wrapper inside $HOME/bin Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: slawek(a)lach.art.pl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Opensuse allows to ran executables from $HOME/bin. Placing malicious program (for example - bash script), called sudo, could execute code as root. Tbis program would call sudo with absolute path and own arguments. It could also call sudo with arguments passed to this program, but also call it after/before with own arguments. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1214167] New: OBS: nothing provides lzip
by bugzilla_noreply＠suse.com 29 Aug '24

29 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1214167 Bug ID: 1214167 Summary: OBS: nothing provides lzip Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: manfred99(a)gmx.ch QA Contact: adrian.schroeter(a)suse.com Target Milestone: --- Found By: --- Blocker: --- In the package rcs (https://build.opensuse.org/package/show/devel:tools:scm/rcs) there is a build error for Leap 15.4 and Leap 15.5: "unresolvable: nothing provides lzip" Although both distributions provide lzip, and the required "BuildRequires: lzip" is given in the spec file. The issue seems to be, that OBS builds against a subset of packages (drawing by Jan Engelhardt): SLE-15.5-Base `-- SLE-15.5-Update <- devel:tools:scm is pointing here `-- SLE-15.5-Backports <- lzip is available from here `-- Leap:15.5 `-- Leap:15.5:Update Which explains why this can not work. But there are software projects (such as RCS) which only distribute lzip-compressed release tarballs. IMHO such a basic, widely used compression tool should be available in SLE-15.5-Base or SLE-15.5-Update, so that OBS can use it to build packages. Alternatively there should be a mechanism to provide essential building blocks to OBS (outside of SLE-.*), so that OBS can do its duty. At the moment there is no possibility to build software which provides lzip-tarballs. -- You are receiving this mail because: You are on the CC list for the bug.

1 3