July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1156133] VUL-1: CVE-2019-18797: libsass: Uncontrolled recursion in Sass:Eval:operator()(Sass:Binary_Expression*) in eval.cpp
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1156133 https://bugzilla.suse.com/show_bug.cgi?id=1156133#c2 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WONTFIX Assignee|cbosdonnat(a)suse.com |security-team(a)suse.de Status|NEW |RESOLVED --- Comment #2 from Wolfgang Frisch <wolfgang.frisch(a)suse.com> --- Crashed marked WONTFIX by upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1174366] VUL-1: CVE-2020-15890: lua51-luajit: out-of-bounds read because __gc handler frame traversal is mishandled
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1174366 https://bugzilla.suse.com/show_bug.cgi?id=1174366#c1 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Assignee|lnussel+factory(a)suse.de |security-team(a)suse.de Resolution|--- |FIXED --- Comment #1 from Wolfgang Frisch <wolfgang.frisch(a)suse.com> --- The assignee has left the company. Upstream fix: https://github.com/LuaJIT/LuaJIT/commit/53f82e6e2e858a0a62fd1a2ff47e9866693… Fixed in all supported codestreams. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170582] VUL-0: CVE-2020-12267: libqt5-qtbase: the setMarkdown() function has a use-after-free related to QTextMarkdownImporter:insertBlock
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1170582 https://bugzilla.suse.com/show_bug.cgi?id=1170582#c10 Wolfgang Frisch <wolfgang.frisch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fabian(a)ritter-vogt.de |security-team(a)suse.de Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #10 from Wolfgang Frisch <wolfgang.frisch(a)suse.com> --- Fixed in all supported codestreams a long time ago. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227394] [Build 20240703] openQA test fails in qgis: gdal failed to build against poppler 24.06
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227394 Stefan Brüns <stefan.bruens(a)rwth-aachen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|stefan.bruens(a)rwth-aachen.d |screening-team-bugs(a)suse.de |e | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227394] [Build 20240703] openQA test fails in qgis: gdal failed to build against poppler 24.06
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227394 https://bugzilla.suse.com/show_bug.cgi?id=1227394#c2 --- Comment #2 from Stefan Brüns <stefan.bruens(a)rwth-aachen.de> --- Incompatibility with poppler >= 24.04, fixed with GDAL 3.9.0 and later: https://github.com/OSGeo/gdal/commit/60dcddbf5fab917338caf433b3e7dca283cf97… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227394] [Build 20240703] openQA test fails in qgis: gdal failed to build against poppler 24.06
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227394 https://bugzilla.suse.com/show_bug.cgi?id=1227394#c1 Bruno Friedmann <bruno(a)ioda-net.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #1 from Bruno Friedmann <bruno(a)ioda-net.ch> --- Will create updated package anyway gdal 3.9.1 is out. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227356] wireplumber segfault when attempting to use bluetooth earbuds
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227356 https://bugzilla.suse.com/show_bug.cgi?id=1227356#c6 --- Comment #6 from Pablo Sanchez <pablo(a)blueoakdb.com> --- (In reply to Pablo Sanchez from comment #5) > > Dumb question: how do I go about pulling the latest version? Perhaps my > searching skills are lacking but I couldn't find a web doc. > Ten minutes ago TW 20240702 dropped and it includes wireplumber 0.5.5: wireplumber (0.5.4+git2.96dc045 -> 0.5.5) I'll report back after I'm done installing it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227345] Kernel 6.9 (MicroOS): a single cpu core is available.
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227345 https://bugzilla.suse.com/show_bug.cgi?id=1227345#c3 --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Maxime Thirion from comment #2) > (In reply to Takashi Iwai from comment #1) > > IIRC, there were relevant bugs in the early 6.9.x kernels, and it's been > > fixed in the recent 6.9.x release (around 6.9.4). > > If I've understood correctly, with the first buggy kernels the cores > appeared, but tasks weren't always sent to the other cores? > > Here, the cores disappeared from the system with kernel 6.9. > Only dmidecode shows me the 4 cores, but only one is activated. > > And I have the same problem with the latest kernel available on > MicroOS/Tumbleweed: > > cloud:~ # uname -a > Linux cloud 6.9.7-1-default #1 SMP PREEMPT_DYNAMIC Fri Jun 28 05:50:47 UTC > 2024 (a5efffa) x86_64 x86_64 x86_64 GNU/Linux > > cloud:~ # dmidecode -t processor |grep Core > Family: Core 2 Duo > Version: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz > Core Count: 4 > Core Enabled: 1 Then it's a different bug from what I originally thought. Please check with the latest 6.10-rc kernel in OBS Kernel:HEAD repo, and if the issue is reproducible, better report to the upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227313] New: /usr/etc/X11/xinit/xinitrc.common leaves behind zombie nvidia-settings process
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227313 Bug ID: 1227313 Summary: /usr/etc/X11/xinit/xinitrc.common leaves behind zombie nvidia-settings process Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Minor Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: alanas.00(a)mail.ru QA Contact: sndirsch(a)suse.com Target Milestone: --- Found By: --- Blocker: --- this is very similar to #1218458 but not FIXED for me here is copy+paste from htop (user threads hidden by pressing H): S CPU% MEM% TIME+ Command S 0.0 0.0 0:00.31 ├─ /usr/sbin/lightdm S 0.7 0.3 0:23.78 │ ├─ /usr/bin/Xorg.bin :0 -seat seat0 -auth /run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch S 0.0 0.0 0:00.03 │ └─ lightdm --session-child 13 20 S 0.0 0.1 0:00.05 │ └─ /usr/bin/startplasma-x11 Z 0.0 0.0 0:00.03 │ ├─ nvidia-settings S 0.0 0.0 0:00.00 │ ├─ /usr/bin/ssh-agent /usr/bin/gpg-agent --sh --daemon --keep-display /usr/libexec/xinit/xinitrc S 0.0 0.0 0:00.05 │ └─ /usr/bin/gpg-agent --sh --daemon --keep-display /usr/libexec/xinit/xinitrc notice nvidia-settings line contains "Z", that means process is zombie (exited but not waited) nvidia-settings is started by bash script "/usr/etc/X11/xinit/xinitrc.common": # # Load nvidia settings # if test -r $HOME/.nvidia-settings-rc && type -p nvidia-settings > /dev/null ; then nvidia-settings --load-config-only > /dev/null 2>&1 & fi theory what happened: 1. bash started nvidia-settings 2. bash replaced itself with startplasma-x11 3. nvidia-settings exited 4. startplasma-x11 didn't wait nvidia-settings -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1227304] New: open build service raises 'Failed build dependencies' when new BuildRequires tag added during build runtime
by bugzilla_noreply＠suse.com 04 Jul '24

04 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1227304 Bug ID: 1227304 Summary: open build service raises 'Failed build dependencies' when new BuildRequires tag added during build runtime Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: fijik19(a)gmail.com QA Contact: adrian.schroeter(a)suse.com Target Milestone: --- Found By: --- Blocker: --- When i added code to _service, which formats .spec file adding BuildRequires tags at buildtime, futher build failes with 'Failed build dependencies', instead of installing these build dependencies -- You are receiving this mail because: You are on the CC list for the bug.

1 9