May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1221863] New: GCC 14: cyrus-sasl package fails
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1221863 Bug ID: 1221863 Summary: GCC 14: cyrus-sasl package fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: michal.jires(a)suse.com QA Contact: qa-bugs(a)suse.de CC: varkoly(a)suse.com Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Building cyrus-sasl with GCC 14 fails here: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… Or built using: osc build --alternative-project openSUSE:Factory:Staging:Gcc7 Due to: saslutil.c: In function ‘sasl_mkchal’: saslutil.c:280:3: error: implicit declaration of function ‘time’ [-Wimplicit-function-declaration] 280 | time(&now); | ^~~~ saslutil.c:66:1: note: ‘time’ is defined in header ‘<time.h>’; this is probably fixable by adding ‘#include <time.h>’ 65 | #include "saslint.h" +++ |+#include <time.h> 66 | #include <saslutil.h> saslutil.c: In function ‘getranddata’: saslutil.c:364:41: error: implicit declaration of function ‘clock’ [-Wimplicit-function-declaration] 364 | ret[1] ^= (unsigned short) (clock() & 0xFFFF); | ^~~~~ saslutil.c:364:41: note: ‘clock’ is defined in header ‘<time.h>’; this is probably fixable by adding ‘#include <time.h>’ See the meta bug#1220571 for more info. ---------- Seems to be fixed upstream https://github.com/cyrusimap/cyrus-sasl/commit/266f0acf7f5e029afbb3e2634370… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1223892] New: Gimp does not build with GCC 14 because of use of incompatible pointer types
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223892 Bug ID: 1223892 Summary: Gimp does not build with GCC 14 because of use of incompatible pointer types Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Gimp fails when built with GCC 14 because of use incompatible pointer types, which used to be warnings in previous versions of GCC but are errors by default in GCC 14. For more information, see https://gcc.gnu.org/gcc-14/porting_to.html Upstream issues seem to be: - https://gitlab.gnome.org/GNOME/gimp/-/issues/8807 and - https://gitlab.gnome.org/GNOME/gimp/-/issues/8649 but perhaps there are others. Corresponding Gentoo bug is https://bugs.gentoo.org/875413 Failed build log is available at: https://build.opensuse.org/package/live_build_log/home:rguenther:plgrnd/gim… -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1225197] New: util-linux depends on libmagic
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225197 Bug ID: 1225197 Summary: util-linux depends on libmagic Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: sbrabec(a)suse.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de CC: bci-internal(a)suse.de Target Milestone: --- Found By: --- Blocker: --- util-linux has a hard dependency on libmagic1 and thus file-magic, which is rather big (~9MiB). It's only pulled in because /usr/bin/more links against it. Can this dependency be avoided for instance by removing libmagic support from more? That's what Debian, Fedora and Ubuntu do as well. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1222755] New: Pipewire, missing pipewire group
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222755 Bug ID: 1222755 Summary: Pipewire, missing pipewire group Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: kailed(a)kailed.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- pipewire group is needed for advanced/proaudio settings. Like audio group is needed for jack. Please add it. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1222452] New: Firefox hardware decoding is not working
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222452 Bug ID: 1222452 Summary: Firefox hardware decoding is not working Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: o.malek.cz(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874125 --> https://bugzilla.suse.com/attachment.cgi?id=874125&action=edit firefox about_support raw hardware decoding is not working.json Only H264 is working. Same for Firefox and Firefox ESR tried: 1. reinstall by opi codecs 2. enable vaapi in firefox media.ffmpeg.vaapi.enabled = true Operating System: openSUSE Tumbleweed 20240405 KDE Plasma Version: 6.0.3 KDE Frameworks Version: 6.0.0 Qt Version: 6.6.3 Kernel Version: 6.8.2-1-default (64-bit) Graphics Platform: Wayland Processors: 12 × AMD Ryzen 5 5600U with Radeon Graphics Memory: 38,0 GiB of RAM Graphics Processor: AMD Radeon Graphics Manufacturer: LENOVO Product Name: 20X70042CK System Version: ThinkPad L15 Gen 2a As discussed on reddit https://www.reddit.com/r/openSUSE/comments/1bwngwq/firefox_hardware_decodin… ``` $ vainfo [24/04/8|10:18] Trying display: wayland libva info: VA-API version 1.20.0 libva info: Trying to open /usr/lib64/dri/radeonsi_drv_video.so libva info: Found init function __vaDriverInit_1_20 libva info: va_openDriver() returns 0 vainfo: VA-API version: 1.20 (libva 2.20.1) vainfo: Driver version: Mesa Gallium driver 24.0.3 for AMD Radeon Graphics (radeonsi, renoir, LLVM 18.1.2, DRM 3.57, 6.8.2-1-default) vainfo: Supported profile and entrypoints VAProfileMPEG2Simple : VAEntrypointVLD VAProfileMPEG2Main : VAEntrypointVLD VAProfileVC1Simple : VAEntrypointVLD VAProfileVC1Main : VAEntrypointVLD VAProfileVC1Advanced : VAEntrypointVLD VAProfileH264ConstrainedBaseline: VAEntrypointVLD VAProfileH264ConstrainedBaseline: VAEntrypointEncSlice VAProfileH264Main : VAEntrypointVLD VAProfileH264Main : VAEntrypointEncSlice VAProfileH264High : VAEntrypointVLD VAProfileH264High : VAEntrypointEncSlice VAProfileHEVCMain : VAEntrypointVLD VAProfileHEVCMain : VAEntrypointEncSlice VAProfileHEVCMain10 : VAEntrypointVLD VAProfileHEVCMain10 : VAEntrypointEncSlice VAProfileJPEGBaseline : VAEntrypointVLD VAProfileNone : VAEntrypointVideoProc ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1225774] New: VUL-0: CVE-2024-36041: ksmserver: Unauthorized users can access session manager
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225774 Bug ID: 1225774 Summary: VUL-0: CVE-2024-36041: ksmserver: Unauthorized users can access session manager Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: fabian(a)ritter-vogt.de Reporter: fabian(a)ritter-vogt.de QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- CVE-2024-36041 https://kde.org/info/security/advisory-20240531-1.txt Needs two patches added to plasma5-workspace in 15.5 + 15.6 as well as plasma6-workspace in Tumbleweed. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1217442] New: Upgrade of selinux-policy-targetd to 20231030-1.1 breaks privileged containers
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1217442 Bug ID: 1217442 Summary: Upgrade of selinux-policy-targetd to 20231030-1.1 breaks privileged containers Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: boris(a)pruessmann.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After selinux-policy-targetd got updated from 20231012-1.1 to 20231030-1.1, I am having issues running Longhorn on my SELinux enabled systems. Investigation by the Longhorn team resulted in https://github.com/k3s-io/k3s-selinux/issues/53 being filed, but I strongly suspect that this is rather related to selinux-policy commit "Update to version 20231030: Big policy sync with upstream policy". I am not a SELinux expert and have no idea about the correct behavior. I can just say that this seemed to work properly beforehand. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1222938] New: thunar-plugin-vcs fails to build on Leap 15.6
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1222938 Bug ID: 1222938 Summary: thunar-plugin-vcs fails to build on Leap 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello package thunar-plugin-vcs fails to build on Leap 15.6 https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15… [ 40s] /usr/lib64/gcc/x86_64-suse-linux/7/../../../../x86_64-suse-linux/bin/ld: /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC' [ 40s] collect2: error: ld returned 1 exit status [ 40s] make[2]: *** [Makefile:620: tvp-svn-helper] Error 1 [ 40s] make[2]: Leaving directory '/home/abuild/rpmbuild/BUILD/thunar-vcs-plugin-0.2.0/tvp-svn-helper' [ 40s] make[1]: *** [Makefile:486: all-recursive] Error 1 [ 40s] make[1]: Leaving directory '/home/abuild/rpmbuild/BUILD/thunar-vcs-plugin-0.2.0' [ 40s] make: *** [Makefile:418: all] Error 2 [ 40s] error: Bad exit status from /var/tmp/rpm-tmp.ozgrvm (%build) [ 40s] [ 40s] Could you please have a look? We're at RC code submission deadline so the sooner the better. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1221211] New: /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC'
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1221211 Bug ID: 1221211 Summary: /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC' Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: manfred.h(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Package libserf BuildRequires libopenssl-devel, but libopenssl-devel-3.* in Leap 15.6 no longer provides the symbol `ERR_GET_FUNC'. We either need an updated version of libserf, or libopenssl-devel < 3! -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1223373] New: VUL-0: CVE-2024-32879: python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django
by bugzilla_noreply＠suse.com 10 Jun '24

10 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223373 Bug ID: 1223373 Summary: VUL-0: CVE-2024-32879: python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/403106/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-32879 https://www.cve.org/CVERecord?id=CVE-2024-32879 https://github.com/python-social-auth/social-app-django/commit/31c3e0c7edb1… https://github.com/python-social-auth/social-app-django/pull/566 https://github.com/python-social-auth/social-app-django/security/advisories… https://bugzilla.redhat.com/show_bug.cgi?id=2277035 -- You are receiving this mail because: You are on the CC list for the bug.

1 2