June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1223210] New: KDE6: Can not record screen on Wayland - Spectacle error
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1223210 Bug ID: 1223210 Summary: KDE6: Can not record screen on Wayland - Spectacle error Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: rpm(a)fthiessen.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874413 --> https://bugzilla.suse.com/attachment.cgi?id=874413&action=edit Console output when running spectacle On current Tumbleweed (KDE 6.0.4) Spectacle at least does not segfault anymore when trying to screen record (ref: boo#1222064). But now after clicking "stop" Spectacle shows a failure and the recording fails: "Failed to export video: Temporary file URL must be an existing local file" I have attached the console output of Spectacle. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1227129] New: chromium GPU errors
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227129 Bug ID: 1227129 Summary: chromium GPU errors Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: elatllat(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Fresh Tumbleweed GNOME install in KVM. Chromium hangs before any GUI shows up. # chromium libva error: /usr/lib64/dri/virtio_gpu_drv_video.so init failed [28135:28135:0626/115134.122807:ERROR:viz_main_impl.cc(166)] Exiting GPU process due to errors during initialization # /usr/bin/chromium --enable-features=UseOzonePlatform --ozone-platform=wayland --force-dark-mode --enable-features=WebUIDarkMode libEGL warning: egl: failed to create dri2 screen libEGL warning: egl: failed to create dri2 screen libEGL warning: NEEDS EXTENSION: falling back to kms\_swrast libva error: /usr/lib64/dri/virtio\_gpu\_drv\_video.so init failed \[28226:28226:0626/115232.941494:ERROR:viz\_main\_impl.cc(166)\] Exiting GPU process due to errors during initialization -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 1219720] New: VUL-0: CVE-2024-24815: python-django-ckeditor: attackers could inject malformed HTML content bypassing Advanced Content Filtering mechanism
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1219720 Bug ID: 1219720 Summary: VUL-0: CVE-2024-24815: python-django-ckeditor: attackers could inject malformed HTML content bypassing Advanced Content Filtering mechanism Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/393367/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: dmueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-page editing mode or enabled CDATA elements in Advanced Content Filtering configuration (defaults to `script` and `style` elements). The vulnerability allows attackers to inject malformed HTML content bypassing Advanced Content Filtering mechanism, which could result in executing JavaScript code. An attacker could abuse faulty CDATA content detection and use it to prepare an intentional attack on the editor. A fix is available in version 4.24.0-lts. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-24815 https://www.cve.org/CVERecord?id=CVE-2024-24815 https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dtd.html#property-S… https://ckeditor.com/docs/ckeditor4/latest/features/fullpage.html) https://ckeditor.com/docs/ckeditor4/latest/guide/dev_advanced_content_filte… https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-fq6h-4g8v-qq… https://ckeditor.com/docs/ckeditor4/latest/features/fullpage.html Patch: https://github.com/ckeditor/ckeditor4/commit/8ed1a3c93d0ae5f49f4ecff5738ab8… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225457] New: [Build 20240527] openQA test fails in apache2_changehat
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225457 Bug ID: 1225457 Summary: [Build 20240527] openQA test fails in apache2_changehat Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4227639/modules/apac he2_changehat/steps/10 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta(a)cboltz.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation aa-teardown fails with errors like: /lib/apparmor/rc.apparmor.functions: line 259: printf: write error: No such file or directory openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit fails in [apache2_changehat](https://openqa.opensuse.org/tests/4227639/modules/apache… ## Test suite description Maintained by QE Security ## Reproducible Fails since (at least) Build [20240527](https://openqa.opensuse.org/tests/4226865) ## Expected result Last good: [20240524](https://openqa.opensuse.org/tests/4221575) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1220103] New: parcellite locks up when 'clear option is selected from the toolbar popup menu
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1220103 Bug ID: 1220103 Summary: parcellite locks up when 'clear option is selected from the toolbar popup menu Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- parcellite-1.2.1-bp155.3.13.x86_64 When the 'clear' option is selected from parcellite toolbar popup menu a dialog with two buttons is displayed. It does not react to mouse clicks not keyboard input, and blocks further interaction with parcellite. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1224407] New: parcellite dumps core when clicking on one entry of the history list
by bugzilla_noreply＠suse.com 24 Jul '24

24 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1224407 Bug ID: 1224407 Summary: parcellite dumps core when clicking on one entry of the history list Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: manfred.h(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- parcellite-1.2.4.0-1.1.x86_64 crashes when one entry of the history list is left clicked. This is on XFCE as the desktop manager. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1224869] New: crm_resource command core dumped
by bugzilla_noreply＠suse.com 23 Jul '24

23 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1224869 Bug ID: 1224869 Summary: crm_resource command core dumped Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: High Availability Assignee: ha-bugs(a)suse.de Reporter: xliang(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- crm_resource command core dumped when calling: # crm_resource --show-metadata stonith:null Segmentation fault (core dumped) And the output was in a mess when calling: # crm_resource --show-metadata stonith:external/sbd <?xml version="1.0"?> <resource-agent name="external/sbd"> <version>1.1</version> <longdesc lang="en"> ��XU </longdesc> <shortdesc lang="en">g��XU</shortdesc> �~� <actions> <action name="start" timeout="20s" /> <action name="stop" timeout="15s" /> <action name="status" timeout="20s" /> <action name="monitor" timeout="20s" interval="3600s" /> <action name="meta-data" timeout="15s" /> </actions> <special tag="heartbeat"> <version>2.0</version> </special> </resource-agent> Related versions: # rpm -qa|grep pacemaker pacemaker-schemas-2.1.7+20240411.81041cf0b-1.1.noarch pacemaker-libs-2.1.7+20240411.81041cf0b-1.1.x86_64 pacemaker-cli-2.1.7+20240411.81041cf0b-1.1.x86_64 python3-pacemaker-2.1.7+20240411.81041cf0b-1.1.noarch pacemaker-2.1.7+20240411.81041cf0b-1.1.x86_64 # rpm -qa|grep cluster-glue cluster-glue-libs-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 cluster-glue-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 cluster-glue-devel-1.0.12+v1.git.1663933145.1619d044-2.3.x86_64 # cat /etc/os-release NAME="openSUSE Tumbleweed" # VERSION="20240423" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20240423" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" # CPE 2.3 format, boo#1217921 CPE_NAME="cpe:2.3:o:opensuse:tumbleweed:20240423:*:*:*:*:*:*:*" #CPE 2.2 format #CPE_NAME="cpe:/o:opensuse:tumbleweed:20240423" BUG_REPORT_URL="https://bugzilla.opensuse.org" SUPPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo-Tumbleweed" -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1222319] New: kernel-firmware-* packages have duplicate WHENCE license files
by bugzilla_noreply＠suse.com 22 Jul '24

22 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1222319 Bug ID: 1222319 Summary: kernel-firmware-* packages have duplicate WHENCE license files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de CC: tiwai(a)suse.com Target Milestone: --- Found By: --- Blocker: --- The "WHENCE" file is >300K and included as %license in all kernel-firmware-* packages: /usr/share/licenses/kernel-firmware-usb-network/WHENCE /usr/share/licenses/kernel-firmware-ueagle/WHENCE /usr/share/licenses/kernel-firmware-ti/WHENCE /usr/share/licenses/kernel-firmware-sound/WHENCE /usr/share/licenses/kernel-firmware-serial/WHENCE /usr/share/licenses/kernel-firmware-realtek/WHENCE /usr/share/licenses/kernel-firmware-radeon/WHENCE /usr/share/licenses/kernel-firmware-qcom/WHENCE /usr/share/licenses/kernel-firmware-platform/WHENCE /usr/share/licenses/kernel-firmware-nfp/WHENCE /usr/share/licenses/kernel-firmware-network/WHENCE /usr/share/licenses/kernel-firmware-mwifiex/WHENCE /usr/share/licenses/kernel-firmware-mediatek/WHENCE /usr/share/licenses/kernel-firmware-media/WHENCE /usr/share/licenses/kernel-firmware-marvell/WHENCE /usr/share/licenses/kernel-firmware-intel/WHENCE /usr/share/licenses/kernel-firmware-i915/WHENCE /usr/share/licenses/kernel-firmware-dpaa2/WHENCE /usr/share/licenses/kernel-firmware-bnx2/WHENCE /usr/share/licenses/kernel-firmware-bluetooth/WHENCE /usr/share/licenses/kernel-firmware-atheros/WHENCE /usr/share/licenses/kernel-firmware-ath12k/WHENCE /usr/share/licenses/kernel-firmware-ath11k/WHENCE /usr/share/licenses/kernel-firmware-ath10k/WHENCE /usr/share/licenses/kernel-firmware-amdgpu/WHENCE This could be optimized by moving common files into a separate package or maybe not shipping this at all. I'm not sure whether the info inside is actually necessary, it mostly just links to the actual license files? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1225407] New: GNU tar hangs when extracting certain symlinks
by bugzilla_noreply＠suse.com 22 Jul '24

22 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225407 Bug ID: 1225407 Summary: GNU tar hangs when extracting certain symlinks Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: psychonaut(a)nothingisreal.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- The version of GNU tar 1.35 packaged for openSUSE Tumbleweed hangs when using --wildcards to extract a symlink to another file in the archive that does not match the wildcard. The problem may be specific to the openSUSE RPMs; I cannot reproduce it when using GNU tar 1.35 compiled from source. An example of an archive that can reproduce this problem is at <http://files.nothingisreal.com/tmp/news002f1.tar.bz2>. Using the command line tar xavf news002f1.tar.bz2 the archive is successfully extracted. But if I add a --wildcards option such as tar xavf news002f1.tar.bz2 --wildcards '*trek*' then tar hangs when it gets to the file news002f1/b5/net.startrek/24. This file, which matches the wildcard, is a symlink to the file news002f1/b5/net.sf-lovers/141, which does not match the wildcard. Running tar with strace shows that tar gets stuck in a loop: mkdirat(AT_FDCWD, "news002f1", 0755) = -1 EEXIST (File exists) mkdirat(AT_FDCWD, "news002f1/b5", 0755) = -1 EEXIST (File exists) mkdirat(AT_FDCWD, "news002f1/b5/net.startrek", 0755) = -1 EEXIST (File exists) newfstatat(AT_FDCWD, "news002f1/b5/net.startrek", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 linkat(AT_FDCWD, "news002f1/b5/net.sf-lovers/141", AT_FDCWD, "news002f1/b5/net.startrek/24", 0) = -1 ENOENT (No such file or directory) newfstatat(AT_FDCWD, "news002f1/b5/net.sf-lovers/141", 0x7fffcaca26a0, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory) By contrast, GNU tar 1.35 compiled from source does not hang; it instead emits the error messages of the following sort for the affected symlinks and then continues processing the archive: Cannot hard link to ‘news002f1/b5/net.sf-lovers/141’: No such file or directory -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1226850] New: Useradd doesn't create a group under the same name despite not using the -N flag
by bugzilla_noreply＠suse.com 22 Jul '24

22 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1226850 Bug ID: 1226850 Summary: Useradd doesn't create a group under the same name despite not using the -N flag Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: alice.brooks(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- So I've downloaded the latest Tumbleweed image (20240621) and ran it inside a vm, however any user that's created is no longer created with a matching named group, this includes ones from the initial installer and any new ones created via useradd You can recreate this either by running through the installer as mentioned above, or something like below: ``` sudo useradd -m test cat /etc/group | grep test ``` Prints out nothing, as the group test was never created -- You are receiving this mail because: You are on the CC list for the bug.

1 5