April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1212476] patch shebang line match the python version required in the package
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1212476 https://bugzilla.suse.com/show_bug.cgi?id=1212476#c17 --- Comment #17 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1212476) was mentioned in https://build.opensuse.org/request/show/1170823 Factory / gnome-tweaks https://build.opensuse.org/request/show/1170824 Factory / gnome-shell https://build.opensuse.org/request/show/1170825 Factory / gnome-music -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223544] kernel config: enable CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223544 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |colyli(a)suse.com, | |tiwai(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1204762] glibc error "Cannot stat: No such file or directory" during build of git
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1204762 https://bugzilla.suse.com/show_bug.cgi?id=1204762#c11 Michael Schröder <mls(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #11 from Michael Schröder <mls(a)suse.com> --- I think this can be closed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223541] New: VUL-0: CVE-2024-27322: R-base: issue with deserialization of untrusted data
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223541 Bug ID: 1223541 Summary: VUL-0: CVE-2024-27322: R-base: issue with deserialization of untrusted data Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/403509/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: detlef.steuer(a)gmx.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: abergmann(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-27322 https://www.cve.org/CVERecord?id=CVE-2024-27322 https://hiddenlayer.com/research/r-bitrary-code-execution/ -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1220821] Cannot install musescore in 15.6 alpha
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1220821 https://bugzilla.suse.com/show_bug.cgi?id=1220821#c13 --- Comment #13 from Cor Blom <cornelis(a)solcon.nl> --- (In reply to Takashi Iwai from comment #12) > (In reply to Giacomo Comes from comment #11) > > The musescore specfile contains: > > Requires: ( alsa-plugins-pulse if pulseaudio ) > > Requires: ( pipewire-alsa if pipewire ) > > The latter one is the culprit, and it's an utterly unnecessary dependency. > > The misunderstanding is that the installation of pipewire doesn't mean to > use it for the audio at all. I'd suggest rather to drop the second line > while keeping the first one. Submitted a request with this change. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221320] IceWM given generic name in YAST2 patterns & during install
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221320 https://bugzilla.suse.com/show_bug.cgi?id=1221320#c3 --- Comment #3 from Rory A <rory.ashton(a)gmail.com> --- (In reply to Dominique Leuenberger from comment #1) > Thanks for the report. IceWM is just used as the fallback WM in many places > whenever the others cannot be started. > > I think it's fair to rewrite/rename this to > > A very basic desktop (based on IceWM) Sounds like a good solution. Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1214136] perl 5.38.0 breaks rxvt-unicode's handling of UTF-8 characters
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214136 https://bugzilla.suse.com/show_bug.cgi?id=1214136#c10 Michael Schröder <mls(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #10 from Michael Schröder <mls(a)suse.com> --- Closing this as an update has been released. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1214303] In zypper dist-upgrade, 79 "keep obsolete" due to perl-5.38.0
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214303 https://bugzilla.suse.com/show_bug.cgi?id=1214303#c4 --- Comment #4 from Michael Schröder <mls(a)suse.com> --- Perl does not provide API compatibility with the minor version, i.e. you can't run 5.36 binary modules with 5.38 perl. The API is compatible with patch versions, that's why there are the perl(:MODULE_COMPAT_XXX) provides. If a new patch version is released, a new provides is added so that all the old patch versions are still provided. The version requires is a result of the search path built into perl. For example, perl -V will show the following include path: /usr/lib/perl5/site_perl/5.38.2/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.38.2 /usr/lib/perl5/vendor_perl/5.38.2/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.38.2 /usr/lib/perl5/5.38.2/x86_64-linux-thread-multi /usr/lib/perl5/5.38.2 /usr/lib/perl5/vendor_perl/5.38.0/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.38.0 /usr/lib/perl5/site_perl As you can see, perl looks both in the 5.38.2 and 5.38.0 directories for modules. A module compiled for an old version is simply not in the search path and thus cannot be found. So the requires in the package is needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220821] Cannot install musescore in 15.6 alpha
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1220821 https://bugzilla.suse.com/show_bug.cgi?id=1220821#c12 --- Comment #12 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Giacomo Comes from comment #11) > The musescore specfile contains: > Requires: ( alsa-plugins-pulse if pulseaudio ) > Requires: ( pipewire-alsa if pipewire ) The latter one is the culprit, and it's an utterly unnecessary dependency. The misunderstanding is that the installation of pipewire doesn't mean to use it for the audio at all. I'd suggest rather to drop the second line while keeping the first one. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1214980] New: mozilla-nss: FTBFS because expired certificate since 2023-09-04
by bugzilla_noreply＠suse.com 29 Apr '24

29 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214980 Bug ID: 1214980 Summary: mozilla-nss: FTBFS because expired certificate since 2023-09-04 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: ana.guerrero(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- mozilla-nss doesn't build because because expired certificate since 2023-09-04 Bernhard M. Wiedemann already made a nice report at upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1813401 A fix in progress: https://phabricator.services.mozilla.com/D185088 -- You are receiving this mail because: You are on the CC list for the bug.

1 6