April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1220571] New: [META] Packages failing because GCC 14+ treats some warnings as errors
by bugzilla_noreply＠suse.com 23 May '24

23 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1220571 Bug ID: 1220571 Summary: [META] Packages failing because GCC 14+ treats some warnings as errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: mjambor(a)suse.com Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- GCC 14 treats the following situations, which were only warnings before, as errors: -Werror=implicit-int -Werror=implicit-function-declaration -Werror=declaration-missing-parameter-type -Werror=return-mismatch -Werror=int-conversion -Werror=incompatible-pointer-types More details about all of these cases together with the most common ways of addressing them and some associated pitfalls is available at https://gcc.gnu.org/gcc-14/porting_to.html For the record, clang has taken a similar step since clang 16, see for example https://www.redhat.com/en/blog/new-warnings-and-errors-clang-16 The preferred method of dealing with these issues is of course fixing the code. Other distributions have shared patches from their porting efforts on relevant upstream mailing lists and bug trackers, Gentoo and RedHat are perhaps most active in this regard, so you can have a look at what they did for their packages at: - https://bugs.gentoo.org/showdependencytree.cgi?id=870412&hide_resolved=0 - https://gitlab.com/fweimer-rh/fedora-modernc/ In case there is for some reason not possible to fix the code, or at least to fix it in time for adoption of GCC 14, it is possible to turn these back to warnings by adding to the compiler options one of the following: -std=gnu89, -std=c89, or -fpermissive. (Especially if you use -fpermissive as a temporary workaround with intention to fix the underlying issues later, I'd suggest leaving the particular bug opened until it is done so.) -- You are receiving this mail because: You are on the CC list for the bug.

1 21

[Bug 1222761] New: wxWidgets needs to be compiled with spellcheck
by bugzilla_noreply＠suse.com 23 May '24

23 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222761 Bug ID: 1222761 Summary: wxWidgets needs to be compiled with spellcheck Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: aaron.w2(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I am trying to build an updated kiCad 8.0 and it requires wxWidgets and wxPython with Python > 3.6. Kicad requires wxWidgets >= 3.0.5 so I am trying to build with wxWidgets 3.2. Unfortunately, the wxWidgets supplied with OpenSUSE is not built with spellcheck enabled which is required for wxPython. Can wxWidgets be built with --enable-spellcheck in the configure phase? -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1222408] New: VirtualBox not allowed to access USB devices although user is in vboxusers group
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222408 Bug ID: 1222408 Summary: VirtualBox not allowed to access USB devices although user is in vboxusers group Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: michael.nickol(a)t-online.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- same as bug #1222186 but now for leap 15.5 after update today (7. april 2024) symptom: Silentmax:~ # /usr/lib/virtualbox/vboxdrv.sh status chmod: cannot access '/etc/vboxusb/': No such file or directory chmod: cannot access '/etc/vboxusb/*': No such file or directory chmod: cannot access '/etc/vboxusb/*/*': No such file or directory VirtualBox kernel modules (vboxdrv, vboxnetflt, vboxnetadp) are loaded. Silentmax:~ # uname -a Linux Silentmax.fritz.box 5.14.21-150500.55.52-default #1 SMP PREEMPT_DYNAMIC Tue Mar 5 16:53:41 UTC 2024 (a62851f) x86_64 x86_64 x86_64 GNU/Linux virtualbox - VirtualBox is an Emulator Version: 7.0.14-lp155.2.19.1 Installed: 7.0.14-lp155.2.19.1 Size: 84.7 MiB Media No.: 0 License: GPL-2.0-or-later Source Package: virtualbox-7.0.14-lp155.2.19.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1222875] New: ghostwriter crash on start
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222875 Bug ID: 1222875 Summary: ghostwriter crash on start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: hol.jimis(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I can not tell from what tumbleweed update it started not working but version 24.02.1-1.3 crashes with segmentation fault (core dumped) ghostwriter The only output I have is Command "pandoc" is not available. Command "multimarkdown" is not available. Command "cmark" is not available. [1] 12170 segmentation fault (core dumped) ghostwriter I installed pandoc, it finds it ok, but the crash seems irrelevant to previous output. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1222676] New: EFI Firmware Updates downloaded, but not installed
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222676 Bug ID: 1222676 Summary: EFI Firmware Updates downloaded, but not installed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: gp(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This has been going on for some months where regardless of whether I use fwupdtool or GNOME Software available firmware updates are shown, downloaded, and a reboot offered, alas when I reboot these updates are not installed. After running whatever update tool, updates are present under /boot/efi/EFI/opensuse/fw. After reboot they are gone - but apparently not installed (and indeed there is nothing unusual during the power on and boot sequence, like I believe I saw in the past when firmware updates were applied): % ls -l /boot/efi/EFI/opensuse/fw -rwxr-xr-x 1 root root 1243680 Apr 1 16:09 fwupd-279599d4-78c7-4c99-84ea-4a7c8d2b10e1.cap -rwxr-xr-x 1 root root 9431077 Apr 1 16:09 fwupd-4e78ce68-5389-4a95-bf10-e3568c30caf8.cap -rwxr-xr-x 1 root root 28843840 Apr 1 16:09 fwupd-a0fd4aef-f691-4c90-a089-7dd4f4481db0.cap % ls -l /boot/efi/EFI/opensuse/ total 4,5M -rwxr-xr-x 1 root root 847k Apr 1 03:39 MokManager.efi -rwxr-xr-x 1 root root 58 Apr 1 03:39 boot.csv drwxr-xr-x 2 root root 4,1k Apr 1 16:09 fw -rwxr-xr-x 1 root root 64k Feb 25 2023 fwupdx64.efi -rwxr-xr-x 1 root root 203 Apr 1 03:39 grub.cfg -rwxr-xr-x 1 root root 2,1M Apr 1 03:39 grub.efi -rwxr-xr-x 1 root root 541k Apr 1 03:39 grubx64.efi -rwxr-xr-x 1 root root 935k Apr 1 03:39 shim.efi Asking naively: is /boot/efi/EFI/opensuse/fw the right directory for these updates to be put in? It looks is if they are not "found", yet "something" removes them upon startup? Hardware is a ThinkPad X1 Yoga Gen 8. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1223144] New: GIMP segmentation fault
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223144 Bug ID: 1223144 Summary: GIMP segmentation fault Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: oberkut(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874375 --> https://bugzilla.suse.com/attachment.cgi?id=874375&action=edit Crash log GIMP Segmentation fault 1.Open GIMP. 2.Create Project. 3.Draw any image. 4.Close GIMP (Not saved changes). -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1222825] New: VUL-0: CVE-2024-28869: traefik: denial of service
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222825 Bug ID: 1222825 Summary: VUL-0: CVE-2024-28869: traefik: denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/401695/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: thomas.leroy(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28869 https://www.cve.org/CVERecord?id=CVE-2024-28869 https://doc.traefik.io/traefik/routing/entrypoints/#respondingtimeouts https://github.com/traefik/traefik/commit/240b83b77351dfd8cadb91c305b84e9d2… https://github.com/traefik/traefik/releases/tag/v2.11.2 https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5 https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw https://bugzilla.redhat.com/show_bug.cgi?id=2274987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1217806] New: VUL-0: CVE-2023-47124: traefik: Potential DDoS whith ACME HTTPChallenge
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217806 Bug ID: 1217806 Summary: VUL-0: CVE-2023-47124: traefik: Potential DDoS whith ACME HTTPChallenge Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/386932/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge (50 seconds) can be exploited by attackers to achieve a `slowloris attack`. This vulnerability has been patch in version 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. Users unable to upgrade should replace the `HTTPChallenge` with the `TLSChallenge` or the `DNSChallenge`. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47124 https://doc.traefik.io/traefik/https/acme/#dnschallenge https://github.com/traefik/traefik/releases/tag/v2.10.6 https://github.com/traefik/traefik/releases/tag/v3.0.0-beta5 https://github.com/traefik/traefik/security/advisories/GHSA-8g85-whqh-cr2f -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1217804] New: VUL-0: CVE-2023-47106: traefik: incorrect processing of fragment in the URL leads to authorization bypass
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217804 Bug ID: 1217804 Summary: VUL-0: CVE-2023-47106: traefik: incorrect processing of fragment in the URL leads to authorization bypass Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/386931/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates RFC 7230 because in the origin-form the URL should only contain the absolute path and the query. When this is combined with another frontend proxy like Nginx, it can be used to bypass frontend proxy URI-based access control restrictions. This vulnerability has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47106 https://github.com/traefik/traefik/releases/tag/v2.10.6 https://github.com/traefik/traefik/releases/tag/v3.0.0-beta5 https://github.com/traefik/traefik/security/advisories/GHSA-fvhj-4qfh-q2hm -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1217807] New: VUL-0: CVE-2023-47633: traefik: 100% CPU usage when self-serving as backend
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217807 Bug ID: 1217807 Summary: VUL-0: CVE-2023-47633: traefik: 100% CPU usage when self-serving as backend Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/386934/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47633 -- You are receiving this mail because: You are on the CC list for the bug.

1 3