June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1217042] SELinux Tool sealert-gui Nonfunctional Due to Missing Dependency
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1217042 https://bugzilla.suse.com/show_bug.cgi?id=1217042#c15 Zdenek Kubala <zkubala(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(colony.three@prot | |onmail.ch) | --- Comment #15 from Zdenek Kubala <zkubala(a)suse.com> --- Small update. I'm working on submitting libreport and satyr into devel project of devel:libraries:c_c++ . -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225923] New: Package rubygem-rdiscount does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225923 Bug ID: 1225923 Summary: Package rubygem-rdiscount does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package rubygem-rdiscount fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc The (first) error (that halts the build) is: [ 9s] gethopt.c:48:1: error: type of ‘val’ defaults to ‘int’ [-Wimplicit-int] [ 9s] gethopt.c: In function ‘gethopt’: [ 9s] gethopt.c:59:1: warning: old-style function definition [-Wold-style-definition] [ 9s] 59 | gethopt(ctx, opts, nropts) [ 9s] | ^~~~~~~ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225922] New: Package rubygem-nokogiri does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225922 Bug ID: 1225922 Summary: Package rubygem-nokogiri does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package rubygem-nokogiri fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc The corresponding Gentoo bug might be: https://bugs.gentoo.org/923107 The (first) error (that halts the build) is: [ 17s] html4_document.c: In function ‘rb_html_document_s_read_io’: [ 17s] html4_document.c:49:52: error: passing argument 2 of ‘xmlSetStructuredErrorFunc’ from incompatible pointer type [-Wincompatible-pointer-types] [ 17s] 49 | xmlSetStructuredErrorFunc((void *)rb_error_list, Nokogiri_error_array_pusher); [ 17s] | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ [ 17s] | | [ 17s] | void (*)(void *, xmlError *) {aka void (*)(void *, struct _xmlError *)} [ 17s] In file included from /usr/include/libxml/valid.h:15, [ 17s] from /usr/include/libxml/parser.h:19, [ 17s] from ./nokogiri.h:35, [ 17s] from html4_document.c:1: [ 17s] /usr/include/libxml/xmlerror.h:898:57: note: expected ‘xmlStructuredErrorFunc’ {aka ‘void (*)(void *, const struct _xmlError *)’} but argument is of type ‘void (*)(void *, xmlError *)’ {aka ‘void (*)(void *, struct _xmlError *)’} [ 17s] 898 | xmlStructuredErrorFunc handler); [ 17s] | ~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225921] New: Package rubygem-hpricot does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225921 Bug ID: 1225921 Summary: Package rubygem-hpricot does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package rubygem-hpricot fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc The corresponding Gentoo bug might be https://bugs.gentoo.org/884257 The (first) error (that halts the build) is: [ 7s] fast_xs.c: In function ‘fast_xs’: [ 7s] fast_xs.c:165:46: error: passing argument 3 of ‘rb_rescue’ from incompatible pointer type [-Wincompatible-pointer-types] [ 7s] 165 | array = rb_rescue(unpack_utf8, self, unpack_uchar, self); [ 7s] | ^~~~~~~~~~~~ [ 7s] | | [ 7s] | VALUE (*)(VALUE) {aka long unsigned int (*)(long unsigned int)} [ 7s] In file included from /usr/include/ruby-3.3.0/ruby/ruby.h:41, [ 7s] from /usr/include/ruby-3.3.0/ruby.h:38, [ 7s] from fast_xs.c:1: [ 7s] /usr/include/ruby-3.3.0/ruby/internal/iterator.h:364:62: note: expected ‘VALUE (*)(VALUE, VALUE)’ {aka ‘long unsigned int (*)(long unsigned int, long unsigned int)’} but argument is of type ‘VALUE (*)(VALUE)’ {aka ‘long unsigned int (*)(long unsigned int)’} [ 7s] 364 | VALUE rb_rescue(VALUE (*b_proc)(VALUE), VALUE data1, VALUE (*r_proc)(VALUE, VALUE), VALUE data2); [ 7s] | ~~~~~~~~^~~~~~~~~~~~~~~~~~~~~ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225920] New: Package rubygem-grpc does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225920 Bug ID: 1225920 Summary: Package rubygem-grpc does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package rubygem-grpc fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc A related Gentoo bug might (but only might) be: https://bugs.gentoo.org/921103 The (first) error (that halts the build) is: [ 15s] rb_compression_options.c:301:56: error: passing argument 2 of ‘grpc_compression_algorithm_name’ from incompatible pointer type [-Wincompatible-pointer-types] [ 15s] 301 | if (!grpc_compression_algorithm_name(internal_value, &algorithm_name)) { [ 15s] | ^~~~~~~~~~~~~~~ [ 15s] | | [ 15s] | char ** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225919] New: Package rrdtool does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225919 Bug ID: 1225919 Summary: Package rrdtool does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package rrdtool fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc We probably need patches listed at: https://gitlab.com/fweimer-rh/fedora-modernc/-/blob/main/pkg/r/rrdtool.md?r… The (first) error (that halts the build) is: [ 41s] rrd_tune.c: In function 'rrd_tune_r': [ 41s] rrd_tune.c:239:35: error: passing argument 3 of 'optparse_init' from incompatible pointer type [-Wincompatible-pointer-types] [ 41s] 239 | optparse_init(&options, argc, argv); /* re-initialize optparse */ [ 41s] | ^~~~ [ 41s] | | [ 41s] | const char ** [ 41s] In file included from rrd_tool.h:49, [ 41s] from rrd_tune.c:46: [ 41s] optparse.h:68:63: note: expected 'char **' but argument is of type 'const char **' [ 41s] 68 | void optparse_init(struct optparse *options, int argc, char **argv); [ 41s] | ~~~~~~~^~~~ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225910] Package polkit does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225910 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225918] New: Package redland does not build with gcc14 because of new errors
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225918 Bug ID: 1225918 Summary: Package redland does not build with gcc14 because of new errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- GCC 14 newly by default treats as errors a number of situations which before were only warnings. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. Because of this, package redland fails to compile. This can be seen online at: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc The (first) error (that halts the build) is: [ 21s] rdf_files.c: In function 'librdf_files_temporary_file_name': [ 21s] rdf_files.c:96:6: error: implicit declaration of function 'mkostemp'; did you mean 'mkstemp'? [-Wimplicit-function-declaration] [ 21s] 96 | fd=mkostemp(name, O_CLOEXEC); [ 21s] | ^~~~~~~~ [ 21s] | mkstemp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225917] New: VUL-0: CVE-2024-4253: gradio: command injection within the test-functional.yml workflow
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225917 Bug ID: 1225917 Summary: VUL-0: CVE-2024-4253: gradio: command injection within the test-functional.yml workflow Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/408611/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: wolfgang.engel(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or secrets exfiltration. The issue affects versions up to and including '@gradio/video@0.6.12'. The flaw is present in the workflow's handling of GitHub context information, where it echoes the full name of the head repository, the head branch, and the workflow reference without adequate sanitization. This could potentially lead to the exfiltration of sensitive secrets such as 'GITHUB_TOKEN', 'COMMENT_TOKEN', and 'CHROMATIC_PROJECT_TOKEN'. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-4253 https://www.cve.org/CVERecord?id=CVE-2024-4253 https://github.com/gradio-app/gradio/commit/a0e70366a8a406fdd80abb21e8c88a3… https://huntr.com/bounties/23cb3749-8ae9-4e1a-9023-4a20ca6b675e -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225906] New: GCC14: Package openvswitch fails to build
by bugzilla_noreply＠suse.com 04 Jun '24

04 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1225906 Bug ID: 1225906 Summary: GCC14: Package openvswitch fails to build Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220574 Target Milestone: --- Found By: --- Blocker: --- Package openvswitch foes not build with GCC 14: It can be reproduced locally with command: osc build --clean --alternative-project home:rguenther:nextgcc but is also visible online: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… Even though it looks like it is one of the new errors of GCC 14 that used to be warnings, adding -fpermissive leads to link issues. Instead we need: https://github.com/openvswitch/ovs/commit/335a5deac3ff91448ca14651e92f39dfd… -- You are receiving this mail because: You are on the CC list for the bug.

1 1