July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1219282] New: Distorted sound in some applications, apparently occurring under system heavier load
by bugzilla_noreply＠suse.com 27 Aug '24

27 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1219282 Bug ID: 1219282 Summary: Distorted sound in some applications, apparently occurring under system heavier load Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: bartoletti.stefano(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 872253 --> https://bugzilla.suse.com/attachment.cgi?id=872253&action=edit sound devices I'm experiencing some annoying sound problems, that are occurring only during some circumstances (apparently under heavier system load, but I don't know if this is a factor), and appeared starting from about a month ago (end of December 2023). Before that, everything was working normally. I'm running a fully updated tumbleweed, and I can notice this problem mainly when running games under Wine. Basically, the game starts fine, and after a while (there is not a fixed time), the audio starts crackling/scratching. Sometimes this just distorts the sound output, sometimes it is so severe to mute any sound completely. - It does not happen with every application. At the moment, browsers, VLC, spotify, and so on play sound correctly. Games run under Wine (through flatpak) and some other Linux games (still flatpak) have this problem. When this happens, when I close an app that causes this problem, sometimes even other apps (said browsers, spotify, etc) have their sounds distorted, at least for a while. - I'm not sure about this, but I think that I noticed this problem more often when there is a heavier system load (especially disk I/O), but to be honest, after all this time trying to figure this out without results, it may be me drawing unrelated conclusions. - This problem occurs only with a specific audio device, that controls my laptop built-in speakers: an "AMD Family 17h/19h HD Audio". My system is also equipped with an "AMD Renoir Radeon High Definition Audio" device that controls audio from the HDMI port, which works correctly when I connect it to i.e. an external TV. Everything is also working correctly with Bluetooth headphones or wired headphones connected to the jack port. This problem is occurring with every possible configuration that I can't test: - Both with pipewire (my default engine, which was working correctly until a month ago) and pulseaudio - Both with my user account and with a brand new test account that I created just for testing this - By logging in both with Wayland and X11 (and even ICEWM) - With every Kernel that I was able to test right now (current 6.7.x, 6.6.x, 6.5.x), but only starting from the end of December (before that, no problems even with these versions) I'm very puzzled and mildly annoyed by my inability to find a solution. From what I can see, this seems to be unrelated to my specific user config and I am unable to understand what should I do. Every possible related issue that I found by googling is mainly related to not having sound at all, which is easily diagnosed, while in my case this occurs in ways that I am not able to correctly pinpoint and troubleshoot. If it is useful, I've opened a question on Superuser, but it has received much attention. Anyway, it's here https://superuser.com/q/1827353/170331 I'm adding some useful info as attachments, feel free to ask for more. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1228524] New: xfwm4: add missing break to fix use-after-free when alt-tabbing
by bugzilla_noreply＠suse.com 27 Aug '24

27 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228524 Bug ID: 1228524 Summary: xfwm4: add missing break to fix use-after-free when alt-tabbing Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 URL: https://gitlab.xfce.org/xfce/xfwm4/-/issues/762 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: ohering(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- xfwm4 crashes often for me due to invalid pointer usage in tabwinRemoveClient. This is apparently fixed upstream. Process 12345 (xfwm4) of user 1000 dumped core. Stack trace of thread 12345: #0 tabwinRemoveClient (xfwm4 + 0x469e9) #1 clientCycleEventFilter (xfwm4 + 0x20a6c) #2 eventXfwmFilter (xfwm4 + 0x22f12) #3 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf) #4 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e1a2) #5 gdk_display_get_event (libgdk-3.so.0 + 0x388e0) #6 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42) #7 g_main_dispatch (libglib-2.0.so.0 + 0x5afac) #8 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0) #9 g_main_loop_run (libglib-2.0.so.0 + 0x5d402) #10 gtk_main (libgtk-3.so.0 + 0x1fa945) #11 clientCycle (xfwm4 + 0x21028) #12 handleKeyPress (xfwm4 + 0x25324) #13 eventXfwmFilter (xfwm4 + 0x22f12) #14 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf) #15 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e099) #16 gdk_display_get_event (libgdk-3.so.0 + 0x388e0) #17 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42) #18 g_main_dispatch (libglib-2.0.so.0 + 0x5afac) #19 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0) #20 g_main_loop_run (libglib-2.0.so.0 + 0x5d402) #21 gtk_main (libgtk-3.so.0 + 0x1fa945) #22 main (xfwm4 + 0x11123) #23 __libc_start_call_main (libc.so.6 + 0x40eec) #24 __libc_start_main_impl (libc.so.6 + 0x40fb5) #25 _start (xfwm4 + 0x11291) -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1226463] New: algif_hash in kernel-obs-build causes an openssl-1_1 test failure
by bugzilla_noreply＠suse.com 27 Aug '24

27 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226463 Bug ID: 1226463 Summary: algif_hash in kernel-obs-build causes an openssl-1_1 test failure Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: jslaby(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 875539 --> https://bugzilla.suse.com/attachment.cgi?id=875539&action=edit diff of lsinitrd From https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… : > [ 248s] ../test/recipes/30-test_afalg.t (Wstat: 256 (exited 1) Tests: 1 Failed: 1) Comparing /proc/modules in the build VM shows: +algif_hash 12288 0 - Live 0x0000000000000000 (E) +af_alg 36864 1 algif_hash, Live 0x0000000000000000 (E) So apparently, algif_hash brings af_alg and that for some unknown reason breaks the test. If I rm algif_hash from KERNEL_MODULES, it works again. -- You are receiving this mail because: You are on the CC list for the bug.

1 22

[Bug 1220707] New: openSUSE:Factory:PowerPC:ToTest images not built
by bugzilla_noreply＠suse.com 27 Aug '24

27 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1220707 Bug ID: 1220707 Summary: openSUSE:Factory:PowerPC:ToTest images not built Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: liv.dywan(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- OBSRSync regularly fail to sync openSUSE:Factory:PowerPC:ToTest with openQA on o3, which is reflected in minion job failures https://openqa.opensuse.org/minion/jobs?id=3467803 https://build.opensuse.org/repositories/openSUSE:Factory:PowerPC:ToTest/ seems to confirm images are not published. See also https://progress.opensuse.org/issues/155743 Note: I'm not sure I filed this in the right place, so please feel free to move as necessary. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1226497] New: No boot from software RAID after upgrade to 15.6 on Supermicro H12DSi-NT6
by bugzilla_noreply＠suse.com 27 Aug '24

27 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226497 Bug ID: 1226497 Summary: No boot from software RAID after upgrade to 15.6 on Supermicro H12DSi-NT6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: georg.pfuetzenreuter(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hi, this follows https://progress.opensuse.org/issues/162401. Background: We have several hypervisors with a software RAID (MDADM) setup, which also houses /boot and /boot/efi. This always worked very well on Supermicro platforms and avoided the need for additional tricks to keep the EFI partition redundant and in sync. Situation: The upgrade to 15.6 on one such machine (with a Supermicro H12SSL-NT board) worked fine. A second machine (with a Supermicro H12DSi-NT6 board) however freezes at POST during the reboot while printing "Ready to boot" (after which it would usually execute to the OS bootloader) after the 15.6 upgrade. Entering a chroot from a live environment, downgrading the GRUB packages to the ones used on 15.5 grub2-2.06-150500.29.25.12.x86_64.rpm grub2-i386-pc-2.06-150500.29.25.12.noarch.rpm grub2-x86_64-efi-2.06-150500.29.25.12.noarch.rpm and `bash -x /usr/lib/bootloader/grub2-efi/install` makes the machine boot again. Advice would be appreciated - we have several more of the H12DSi-NT6 machines which we cannot upgrade to 15.6 because of this. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1224062] New: VUL-0: CVE-2024-34244: libmodbus: buffer overflow via the modbus_write_bits function
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1224062 Bug ID: 1224062 Summary: VUL-0: CVE-2024-34244: libmodbus: buffer overflow via the modbus_write_bits function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/404865/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially crafted input, which leads to out-of-bounds read and can potentially cause a crash or other unintended behaviors. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-34244 https://www.cve.org/CVERecord?id=CVE-2024-34244 https://github.com/stephane/libmodbus/issues/743 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1223697] New: VUL-0: CVE-2023-26793: libmodbus: heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1223697 Bug ID: 1223697 Summary: VUL-0: CVE-2023-26793: libmodbus: heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/403923/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26793 https://www.cve.org/CVERecord?id=CVE-2023-26793 https://github.com/stephane/libmodbus/issues/683 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1225833] New: VUL-0: CVE-2024-36845: libmodbus: denial of service due to an invalid pointer in the modbus_receive() function
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225833 Bug ID: 1225833 Summary: VUL-0: CVE-2024-36845: libmodbus: denial of service due to an invalid pointer in the modbus_receive() function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/408372/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36845 https://www.cve.org/CVERecord?id=CVE-2024-36845 https://github.com/stephane/libmodbus/issues/750 https://bugzilla.redhat.com/show_bug.cgi?id=2284259 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1225828] New: VUL-0: CVE-2024-36844: libmodbus: use-after-free via the ctx->backend pointer in modbus.c
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225828 Bug ID: 1225828 Summary: VUL-0: CVE-2024-36844: libmodbus: use-after-free via the ctx->backend pointer in modbus.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/408371/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36844 https://www.cve.org/CVERecord?id=CVE-2024-36844 https://github.com/stephane/libmodbus/issues/749 https://bugzilla.redhat.com/show_bug.cgi?id=2284255 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225826] New: VUL-0: CVE-2024-36843: libmodbus: heap overflow via the modbus_mapping_free() function
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225826 Bug ID: 1225826 Summary: VUL-0: CVE-2024-36843: libmodbus: heap overflow via the modbus_mapping_free() function Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/408370/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36843 https://www.cve.org/CVERecord?id=CVE-2024-36843 https://github.com/stephane/libmodbus/issues/748 https://bugzilla.redhat.com/show_bug.cgi?id=2284252 -- You are receiving this mail because: You are on the CC list for the bug.

1 5