July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1141667] VUL-1: CVE-2019-1010004: sox: 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219.
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1141667 https://bugzilla.suse.com/show_bug.cgi?id=1141667#c3 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Product|openSUSE Distribution |openSUSE Tumbleweed Version|Leap 15.1 |Current Assignee|forgotten_GfSLLQGSl_(a)user.n |wolfgang.frisch(a)suse.com |et | Component|Security |Security --- Comment #3 from Wolfgang Frisch <wolfgang.frisch(a)suse.com> --- This seems to have been forgotten. The original bug assignee is gone, so I simply submitted a fix myself. https://build.opensuse.org/request/show/1185145 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226664] Wicked crashing with macvlan interface since recent `zypper patch` in systemd-nspawn container
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1226664 https://bugzilla.suse.com/show_bug.cgi?id=1226664#c6 Marius Tomaschewski <mt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS CC| |mt(a)suse.com --- Comment #6 from Marius Tomaschewski <mt(a)suse.com> --- Increasing priority to P2 -- we've working on / testing a fix and will submit updates ASAP to all code streams. The SIGSEGV happens in the wicked client which is missing a loop guard while trying to log the interface hierarchy/changes (as debug), visible (as notice) in the new `wicked ifup --dry-run all`, but the trigger is in the backend/wickedd as described by Clemens above. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212476] patch shebang line match the python version required in the package
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1212476 Enzo Matsumiya <ematsumiya(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|ematsumiya(a)suse.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1141671] VUL-1: CVE-2019-13590: sox: An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1141671 https://bugzilla.suse.com/show_bug.cgi?id=1141671#c2 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Assignee|forgotten_GfSLLQGSl_(a)user.n |security-team(a)suse.de |et | Status|NEW |RESOLVED --- Comment #2 from Wolfgang Frisch <wolfgang.frisch(a)suse.com> --- Already fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227330] New: weakobsoletes for 15.5 are missing in 15.6 release package
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227330 Bug ID: 1227330 Summary: weakobsoletes for 15.5 are missing in 15.6 release package Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Patterns Assignee: lubos.kocman(a)suse.com Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- rpm -q --provides openSUSE-release | grep -c weakremover 16997 on the registry.opensuse.org/opensuse/leap:15.6 indicates that there is a problem, because weakobsoletes.inc has over 39000 lines. so something is cutting the rest of the file off, including all of the weakobsoletes for 15.5 maintenance updates. example $ rpm -q --provides openSUSE-release | grep -c libpoppler126 0 however this is in the original source file as can be seen by unpacking curl -O https://download.opensuse.org/repositories/openSUSE:/Leap:/15.6/standard/sr… $ grep libpoppler126 weakremovers.inc Provides: weakremover(libpoppler126) -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1227348] New: windows:mingw:win{32|64}/mingw{32|64}-gdb: TypeError: a bytes-like object is required, not 'str'
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227348 Bug ID: 1227348 Summary: windows:mingw:win{32|64}/mingw{32|64}-gdb: TypeError: a bytes-like object is required, not 'str' Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: ralf.habacker(a)freenet.de Reporter: ralf.habacker(a)freenet.de QA Contact: screening-team-bugs(a)suse.de CC: mkbosmans(a)gmail.com Target Milestone: --- Found By: --- Blocker: --- When running cross compiled gdb with a test program linked against libstdc++ and installed pretty printers the following error message appears: Traceback (most recent call last): File "Z:\usr/i686-w64-mingw32/sys-root/mingw/share/gdb/python\gdb\__init__.py", line 148, in _execute_file compiled = compile(file.read().replace('\r\n','\n'), filepath, 'exec') TypeError: a bytes-like object is required, not 'str' How to reproduce: 1. on an openSUSE Leap host run sudo zypper install mingw32-gdb mingw32-libstdc++-gdb-printer wine <your-test-program> 2. run wine /usr/i686-w64-mingw32/sys-root/mingw/bin/gdb.exe -ex "set auto-load safe-path /" <test-program> (gdb) b main (gdb) r -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1227349] Installation not working - failed to compute default context
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227349 https://bugzilla.suse.com/show_bug.cgi?id=1227349#c1 Richard Brown <rbrown(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ruebe(a)mailbox.org Flags| |needinfo?(ruebe(a)mailbox.org | |) --- Comment #1 from Richard Brown <rbrown(a)suse.com> --- What's the journal from the installed system? as you've added a rootpassword via ignition you should be able to log into emergency mode and use "journalctl -xb" to view the system logs -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225861] Package libyui does not build with gcc14
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225861 https://bugzilla.suse.com/show_bug.cgi?id=1225861#c4 --- Comment #4 from Stefan Hundhammer <shundhammer(a)suse.com> --- Looks like we should compile with the '-std=c++11' (or c++14 or c++17) option if they introduced incompatible standards like this in C++20. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225861] Package libyui does not build with gcc14
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225861 https://bugzilla.suse.com/show_bug.cgi?id=1225861#c3 --- Comment #3 from Stefan Hundhammer <shundhammer(a)suse.com> --- https://stackoverflow.com/questions/71978335/class-templates-constructor-de… ?!? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225697] openSUSE Leap 15.6 i915 driver problems
by bugzilla_noreply＠suse.com 03 Jul '24

03 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1225697 https://bugzilla.suse.com/show_bug.cgi?id=1225697#c17 --- Comment #17 from Stefan Dirsch <sndirsch(a)suse.com> --- I don't get this. You could then try also eglinfo for which you need to install Mesa-demo package. -- You are receiving this mail because: You are on the CC list for the bug.

1 0