May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1210505] VUL-0: CVE-2023-29013: traefik,traefik1.7: HTTP header parsing DoS
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1210505 https://bugzilla.suse.com/show_bug.cgi?id=1210505#c2 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #2 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- This issue has been fixed in https://build.opensuse.org/request/show/1093393. Traefik 1.7 is no longer available in Factory or Devel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223144] GIMP segmentation fault
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223144 https://bugzilla.suse.com/show_bug.cgi?id=1223144#c5 --- Comment #5 from Paolo Stivanin <pstivanin(a)suse.com> --- I can't reproduce the issue. I see that you are still on 2.10.38. Can you please update TW to the latest snapshot? Thanks -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222919] criterion fails to build on Leap 15.6 - ImportError: cannot import name 'builder'
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222919 https://bugzilla.suse.com/show_bug.cgi?id=1222919#c6 Paolo Stivanin <pstivanin(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(pstivanin(a)suse.co | |m) | --- Comment #6 from Paolo Stivanin <pstivanin(a)suse.com> --- I guess that's because Leap is not using py311 as default (just a guess, I'd have to check), so the following fails: [ 29s] Traceback (most recent call last): [ 29s] File "/usr/bin/nanopb_generator.py", line 36, in <module> [ 29s] import google.protobuf.text_format as text_format [ 29s] ModuleNotFoundError: No module named 'google' [ 29s] --nanopb_out: protoc-gen-nanopb: Plugin failed with status code 1. because /usr/bin/nanopb_generator.py calls python3 and python3 is a symlink to 3.6. Or was the python interpreter changed to 3.11 by default on Leap? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223909] Package vlc fails to build with gcc 14 because of assignments from incompatible pointer types
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223909 https://bugzilla.suse.com/show_bug.cgi?id=1223909#c2 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|CONFIRMED |RESOLVED --- Comment #2 from Dominique Leuenberger <dimstar(a)opensuse.org> --- backported one more commit: https://code.videolan.org/videolan/vlc/-/merge_requests/4665/diffs?commit_i… => https://build.opensuse.org/request/show/1175850 Wit this, vLC now builds using GCC14 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222408] VirtualBox not allowed to access USB devices although user is in vboxusers group
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222408 https://bugzilla.suse.com/show_bug.cgi?id=1222408#c10 --- Comment #10 from Javier Llorente <javier(a)opensuse.org> --- This bug is mentioned in openSUSE-2024-134 - Recommended update for virtualbox; - Setting 0660 as permissions of /dev/vboxusb directory itself was preventing access to this directory by any non-root user, even if member of vboxusers. This results in VBox UI failing to enable USB passthrough. Fix issue by removing all the workarounds for /dev/vboxusb/* as they should no longer be required. Fixes boo#1222408. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224812] New: 'uptime' is missing or package coreutils-systemd intentionally not included?
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224812 Bug ID: 1224812 Summary: 'uptime' is missing or package coreutils-systemd intentionally not included? Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: sunscape1(a)hotmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- As the summary says, 'uptime' isn't present in the default install. Every other tool like ps, top, etc. from procps is there, but uptime was moved to coreutils-systemd. Include coreutils-systemd in the default install? I had no idea it had moved. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1224472] New: dconf settings are not being applied
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224472 Bug ID: 1224472 Summary: dconf settings are not being applied Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Flatpak Assignee: rbrown(a)suse.com Reporter: hotel-brot.0z(a)icloud.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0 Build Identifier: for example, if i enable fractional scaling in dconf, after a reboot dconf still shows that i have enabled it, but it doesn't work. if i then try using the gsettings command, it works. the same with other settings such as theme. changed settings via the terminal are not displayed in dconf. The logs when starting from the terminal show nothing at all. Reproducible: Always Steps to Reproduce: 1.The logs when starting from the terminal show nothing at all. 2.restart 3.notice that the setting has not been applied -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1224473] New: Keyboard shortcuts set in gnome-control-center under the Keyboard category will reset to default after a reboot.
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224473 Bug ID: 1224473 Summary: Keyboard shortcuts set in gnome-control-center under the Keyboard category will reset to default after a reboot. Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Desktop Environment Assignee: rbrown(a)suse.com Reporter: hotel-brot.0z(a)icloud.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0 Build Identifier: Keyboard shortcuts set in gnome-control-center under the Keyboard category will reset to default after a reboot. Reproducible: Always Steps to Reproduce: 1.make a setting such as alt + m to mute the microphone 2.restart 3.determine that the setting has been reset Actual Results: Default settings Expected Results: that the setting is noticed -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1223908] proton-vpn App Crashes On Connection, Breaks Network Connectivity
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223908 https://bugzilla.suse.com/show_bug.cgi?id=1223908#c1 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #1 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- Not sure what happened, but I got another error on my side. The Proton VPN app was slightly outdated, possibly a clash with newer dependencies in Factory. A package update is on the way, see https://build.opensuse.org/request/show/1175810 and https://build.opensuse.org/request/show/1175826. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222159] AUDIT-0: CVE-2024-5148: gnome-remote-desktop: Polkit and D-Bus review for Gnome 46.0
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222159 https://bugzilla.suse.com/show_bug.cgi?id=1222159#c27 --- Comment #27 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- I checked version 46.2 and the fixes seem okay so far. The remaining issues #5 and #9 don't relate to the D-Bus interface, so whitelisting the D-Bus API is okay now. Issue #9 is rather unfortunate though, since upstream doesn't want to remove the insecure CLI invocation style. Depending upon how this ends up in release 47, we could consider adding a patch in our packaging at least, that warns the user when this insecure invocation style is used. -- You are receiving this mail because: You are on the CC list for the bug.

1 0