May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1216537] New: xdg-utils perl requirement
by bugzilla_noreply＠suse.com 25 Jul '24

25 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1216537 Bug ID: 1216537 Summary: xdg-utils perl requirement Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: simonf.lees(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jslaby(a)suse.com Target Milestone: --- Found By: --- Blocker: --- xdg-utils requires perl via /usr/bin/xdg-screensaver. On minimal systems we'd like to avoid any extra script interpreters. Any chance to avoid using perl there? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1218640] New: The libxkbregistry-devel-32bit package is missing
by bugzilla_noreply＠suse.com 25 Jul '24

25 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1218640 Bug ID: 1218640 Summary: The libxkbregistry-devel-32bit package is missing Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: fgouget(a)codeweavers.com QA Contact: gfx-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The libxkbregistry-devel-32bit package is missing: suset-64:~ # zypper install libxkbregistry-devel-32bit Loading repository data... Reading installed packages... Package 'libxkbregistry-devel-32bit' not found. Resolving package dependencies... Nothing to do. Wine uses this package to run 32-bit Windows applications when using Wayland for the graphics layer. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1221006] New: GCC 14: linux-atm package fails
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1221006 Bug ID: 1221006 Summary: GCC 14: linux-atm package fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: michal.jires(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jbohac(a)suse.com Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Building linux-atm with GCC 14 fails here: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… Due to (exhaustive list of errors): 100 | fprintf(stderr,"internal error: len %d %% %d\n",req.length, conn.c: In function ‘accept_conn’: conn.c:414:57: error: passing argument 3 of ‘accept’ from incompatible pointer type [-Wincompatible-pointer-types] 414 | fd = accept(conn->fd, (struct sockaddr *)&addr, &len); | ^~~~ | | | size_t * {aka long unsigned int *} In file included from ../../src/include/atm.h:10, from conn.c:42: /usr/include/sys/socket.h:307:42: note: expected ‘socklen_t * restrict’ {aka ‘unsigned int * restrict’} but argument is of type ‘size_t *’ {aka ‘long unsigned int *’} 307 | socklen_t *__restrict __addr_len); | ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~ See the meta bug#1220571 for more info. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1223210] New: KDE6: Can not record screen on Wayland - Spectacle error
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1223210 Bug ID: 1223210 Summary: KDE6: Can not record screen on Wayland - Spectacle error Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: rpm(a)fthiessen.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874413 --> https://bugzilla.suse.com/attachment.cgi?id=874413&action=edit Console output when running spectacle On current Tumbleweed (KDE 6.0.4) Spectacle at least does not segfault anymore when trying to screen record (ref: boo#1222064). But now after clicking "stop" Spectacle shows a failure and the recording fails: "Failed to export video: Temporary file URL must be an existing local file" I have attached the console output of Spectacle. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1219720] New: VUL-0: CVE-2024-24815: python-django-ckeditor: attackers could inject malformed HTML content bypassing Advanced Content Filtering mechanism
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1219720 Bug ID: 1219720 Summary: VUL-0: CVE-2024-24815: python-django-ckeditor: attackers could inject malformed HTML content bypassing Advanced Content Filtering mechanism Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/393367/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: dmueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-page editing mode or enabled CDATA elements in Advanced Content Filtering configuration (defaults to `script` and `style` elements). The vulnerability allows attackers to inject malformed HTML content bypassing Advanced Content Filtering mechanism, which could result in executing JavaScript code. An attacker could abuse faulty CDATA content detection and use it to prepare an intentional attack on the editor. A fix is available in version 4.24.0-lts. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-24815 https://www.cve.org/CVERecord?id=CVE-2024-24815 https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dtd.html#property-S… https://ckeditor.com/docs/ckeditor4/latest/features/fullpage.html) https://ckeditor.com/docs/ckeditor4/latest/guide/dev_advanced_content_filte… https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-fq6h-4g8v-qq… https://ckeditor.com/docs/ckeditor4/latest/features/fullpage.html Patch: https://github.com/ckeditor/ckeditor4/commit/8ed1a3c93d0ae5f49f4ecff5738ab8… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225457] New: [Build 20240527] openQA test fails in apache2_changehat
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225457 Bug ID: 1225457 Summary: [Build 20240527] openQA test fails in apache2_changehat Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4227639/modules/apac he2_changehat/steps/10 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta(a)cboltz.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation aa-teardown fails with errors like: /lib/apparmor/rc.apparmor.functions: line 259: printf: write error: No such file or directory openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit fails in [apache2_changehat](https://openqa.opensuse.org/tests/4227639/modules/apache… ## Test suite description Maintained by QE Security ## Reproducible Fails since (at least) Build [20240527](https://openqa.opensuse.org/tests/4226865) ## Expected result Last good: [20240524](https://openqa.opensuse.org/tests/4221575) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1220103] New: parcellite locks up when 'clear option is selected from the toolbar popup menu
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1220103 Bug ID: 1220103 Summary: parcellite locks up when 'clear option is selected from the toolbar popup menu Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- parcellite-1.2.1-bp155.3.13.x86_64 When the 'clear' option is selected from parcellite toolbar popup menu a dialog with two buttons is displayed. It does not react to mouse clicks not keyboard input, and blocks further interaction with parcellite. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1224407] New: parcellite dumps core when clicking on one entry of the history list
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1224407 Bug ID: 1224407 Summary: parcellite dumps core when clicking on one entry of the history list Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: manfred.h(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- parcellite-1.2.4.0-1.1.x86_64 crashes when one entry of the history list is left clicked. This is on XFCE as the desktop manager. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1224869] New: crm_resource command core dumped
by bugzilla_noreply＠suse.com 23 Jul '24

23 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1224869 Bug ID: 1224869 Summary: crm_resource command core dumped Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: High Availability Assignee: ha-bugs(a)suse.de Reporter: xliang(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- crm_resource command core dumped when calling: # crm_resource --show-metadata stonith:null Segmentation fault (core dumped) And the output was in a mess when calling: # crm_resource --show-metadata stonith:external/sbd <?xml version="1.0"?> <resource-agent name="external/sbd"> <version>1.1</version> <longdesc lang="en"> ��XU </longdesc> <shortdesc lang="en">g��XU</shortdesc> �~� <actions> <action name="start" timeout="20s" /> <action name="stop" timeout="15s" /> <action name="status" timeout="20s" /> <action name="monitor" timeout="20s" interval="3600s" /> <action name="meta-data" timeout="15s" /> </actions> <special tag="heartbeat"> <version>2.0</version> </special> </resource-agent> Related versions: # rpm -qa|grep pacemaker pacemaker-schemas-2.1.7+20240411.81041cf0b-1.1.noarch pacemaker-libs-2.1.7+20240411.81041cf0b-1.1.x86_64 pacemaker-cli-2.1.7+20240411.81041cf0b-1.1.x86_64 python3-pacemaker-2.1.7+20240411.81041cf0b-1.1.noarch pacemaker-2.1.7+20240411.81041cf0b-1.1.x86_64 # rpm -qa|grep cluster-glue cluster-glue-libs-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 cluster-glue-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 cluster-glue-devel-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 # cat /etc/os-release NAME="openSUSE Tumbleweed" # VERSION="20240423" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20240423" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" # CPE 2.3 format, boo#1217921 CPE_NAME="cpe:2.3:o:opensuse:tumbleweed:20240423:*:*:*:*:*:*:*" #CPE 2.2 format #CPE_NAME="cpe:/o:opensuse:tumbleweed:20240423" BUG_REPORT_URL="https://bugzilla.opensuse.org" SUPPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo-Tumbleweed" -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1222319] New: kernel-firmware-* packages have duplicate WHENCE license files
by bugzilla_noreply＠suse.com 22 Jul '24

22 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1222319 Bug ID: 1222319 Summary: kernel-firmware-* packages have duplicate WHENCE license files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de CC: tiwai(a)suse.com Target Milestone: --- Found By: --- Blocker: --- The "WHENCE" file is >300K and included as %license in all kernel-firmware-* packages: /usr/share/licenses/kernel-firmware-usb-network/WHENCE /usr/share/licenses/kernel-firmware-ueagle/WHENCE /usr/share/licenses/kernel-firmware-ti/WHENCE /usr/share/licenses/kernel-firmware-sound/WHENCE /usr/share/licenses/kernel-firmware-serial/WHENCE /usr/share/licenses/kernel-firmware-realtek/WHENCE /usr/share/licenses/kernel-firmware-radeon/WHENCE /usr/share/licenses/kernel-firmware-qcom/WHENCE /usr/share/licenses/kernel-firmware-platform/WHENCE /usr/share/licenses/kernel-firmware-nfp/WHENCE /usr/share/licenses/kernel-firmware-network/WHENCE /usr/share/licenses/kernel-firmware-mwifiex/WHENCE /usr/share/licenses/kernel-firmware-mediatek/WHENCE /usr/share/licenses/kernel-firmware-media/WHENCE /usr/share/licenses/kernel-firmware-marvell/WHENCE /usr/share/licenses/kernel-firmware-intel/WHENCE /usr/share/licenses/kernel-firmware-i915/WHENCE /usr/share/licenses/kernel-firmware-dpaa2/WHENCE /usr/share/licenses/kernel-firmware-bnx2/WHENCE /usr/share/licenses/kernel-firmware-bluetooth/WHENCE /usr/share/licenses/kernel-firmware-atheros/WHENCE /usr/share/licenses/kernel-firmware-ath12k/WHENCE /usr/share/licenses/kernel-firmware-ath11k/WHENCE /usr/share/licenses/kernel-firmware-ath10k/WHENCE /usr/share/licenses/kernel-firmware-amdgpu/WHENCE This could be optimized by moving common files into a separate package or maybe not shipping this at all. I'm not sure whether the info inside is actually necessary, it mostly just links to the actual license files? -- You are receiving this mail because: You are on the CC list for the bug.

1 4