July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226546] New: gnome terminal fails to start on aarch64 Live
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226546 Bug ID: 1226546 Summary: gnome terminal fails to start on aarch64 Live Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 URL: https://openqa.opensuse.org/tests/4285143/modules/gnom e_terminal/steps/5 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes Created attachment 875588 --> https://bugzilla.suse.com/attachment.cgi?id=875588&action=edit journal.log ## Observation openQA test in scenario opensuse-Tumbleweed-GNOME-Live-aarch64-gnome-live@USBboot_aarch64 fails in [gnome_terminal](https://openqa.opensuse.org/tests/4285143/modules/gnome_ter… Log: Jun 20 03:00:55.266967 susetest systemd[1774]: Started Application launched by gnome-shell. Jun 20 03:00:55.298298 susetest gnome-shell[10671]: # Locale not supported by C library. Jun 20 03:00:55.298679 susetest gnome-shell[10671]: # Using the fallback 'C' locale. Jun 20 03:00:55.370814 susetest dbus-daemon[1969]: [session uid=1000 pid=1969] Activating via systemd: service name='org.gnome.Terminal' unit='gnome-terminal-server.service' requested by ':1.73' (uid=1000 pid=10671 comm="gnome-terminal") Jun 20 03:00:55.372369 susetest systemd[1774]: Created slice Slice /app/org.gnome.Terminal. Jun 20 03:00:55.390332 susetest systemd[1774]: Starting GNOME Terminal Server... Jun 20 03:00:55.451283 susetest gnome-terminal-server[10675]: Locale not supported. Jun 20 03:00:55.453825 susetest systemd[1774]: gnome-terminal-server.service: Main process exited, code=exited, status=9/n/a Jun 20 03:00:55.453931 susetest systemd[1774]: gnome-terminal-server.service: Failed with result 'exit-code'. Jun 20 03:00:55.454169 susetest systemd[1774]: Failed to start GNOME Terminal Server. Jun 20 03:01:20.415387 susetest gnome-shell[10671]: # Error constructing proxy for org.gnome.Terminal:/org/gnome/Terminal/Factory0: Error calling StartServiceByName for org.gnome.Terminal: Timeout was reached ## Test suite description Maintainer: dimstar(a)opensuse.org Test for openSUSE GNOME Next Live-Media EXCLUDE_MODULES is a workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1138401#c10 (except for opensuse_welcome, which is blacklisted on the GNOME live for space reasons) ## Reproducible Fails since (at least) Build [20240617](https://openqa.opensuse.org/tests/4279106) ## Expected result Last good: [20240614](https://openqa.opensuse.org/tests/4276064) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1227326] New: Machine running dnsmasq no longer answers DHCP requests
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227326 Bug ID: 1227326 Summary: Machine running dnsmasq no longer answers DHCP requests Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Kernel:Networking Assignee: kernel-bugs(a)suse.de Reporter: rainer.klute(a)gmx.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After a recent update of my server, dnsmasq no longer answers DHCP requests. Or rather, dnsmasq seems to produce answers, but clients don’t receive them. I used wireshark on the server as well as on one of the clients to have a closer look. On the server, wireshark shows incoming DHCPDISCOVER and outgoing DHCPOFFER messages as should be. However, on the client, wireshark only shows the outgoing DHCPDISCOVER messages but no corresponding incoming DHCPOFFER messages. So the packets seem to get lost between wireshark logging them and the packets actually hitting the wire (or rather the WiFi antenna). This problem affects all clients, including Android smartphones, so the problem is clearly on the server side. Dnsmasq hasn’t been updated since months, so it likely isn’t the culprit. I didn’t change any relevant system configuration, e.g. firewall settings. I observed this behavior under kernel 6.9.7. Reverting back to 6.9.6 didn’t help, however. By the way, dnsmasq answers DNS queries still just fine. Any ideas? What else could I try? -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1223886] New: mlterm does not build with gcc14
by bugzilla_noreply＠suse.com 26 Aug '24

26 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1223886 Bug ID: 1223886 Summary: mlterm does not build with gcc14 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- With gcc14 incompatible pointer assignment becomes an error, and mlterm has a lot of cases of incompatible pointer assignments in the source. This is something that needs to be addressed with upstream over time. Build with -fpermissive for now. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1226438] New: Nvidia drivers not loaded with kernel bigger than 6.3.9-1
by bugzilla_noreply＠suse.com 25 Aug '24

25 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226438 Bug ID: 1226438 Summary: Nvidia drivers not loaded with kernel bigger than 6.3.9-1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Drivers Assignee: kernel-bugs(a)suse.de Reporter: ioannis.bonatakis(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I running TW on 6.3.9-1-default and until that version the Nvidia drivers works ``` ❯ lspci | grep -i nvidia 0000:65:00.0 VGA compatible controller: NVIDIA Corporation GP107GL [Quadro P600] (rev a1) 0000:65:00.1 Audio device: NVIDIA Corporation GP107GL High Definition Audio Controller (rev a1) S | Name | Summary | Type ---+---------------------------+-----------------------------------------------------------------------+-------- i+ | kernel-firmware-nvidia | Kernel firmware files for Nvidia Tegra and graphics drivers | package i | libnvidia-egl-wayland1 | The EGLStream-based Wayland external platform | package il | nvidia-computeG05 | NVIDIA driver for computing with GPGPU | package il | nvidia-computeG05-32bit | 32bit NVIDIA driver for computing with GPGPU | package il | nvidia-gfxG05-kmp-default | NVIDIA graphics driver kernel module for GeForce 600 series and newer | package il | nvidia-glG05 | NVIDIA OpenGL libraries for OpenGL acceleration | package il | nvidia-glG05-32bit | 32bit NVIDIA OpenGL libraries for OpenGL acceleration | package il | x11-video-nvidiaG05 | NVIDIA graphics driver for GeForce 600 series and newer | package il | x11-video-nvidiaG05-32bit | 32bit NVIDIA graphics driver for GeForce 600 series and newer | package ``` However with every kernel version after this, there is a prompt for MOK, which is accepted and then, after boot screen is black. The Nvidia drivers are not loaded. I tried the steps in the documentation and also installed nvidiaG07 but I think there was the same problem -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1228642] New: nvidia-compute-G06 of CUDA repository conflicts with libOpenCL1
by bugzilla_noreply＠suse.com 25 Aug '24

25 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228642 Bug ID: 1228642 Summary: nvidia-compute-G06 of CUDA repository conflicts with libOpenCL1 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 3rd Party Driver Assignee: gfx-bugs(a)suse.de Reporter: sndirsch(a)suse.com QA Contact: sndirsch(a)suse.com Target Milestone: --- Found By: --- Blocker: --- nvidia-compute-G06 of CUDA repository can't be installed if libOpenCL1 package is installed on the system due to a conflict. This was changed to update-alternatives since sle15-sp1 and later removed completely, but 1) nVidia is apparently still building the packages on a sle15-sp0 system 2) nVidia didn't update the changes, where this conflict was removed completely @nVidia: Please update your package sources https://github.com/openSUSE/nvidia-driver-G06/commit/2bb92f91d73160efb962d8… diff --git a/nvidia-video-G06.spec b/nvidia-video-G06.spec index 15dac5f..d951611 100644 --- a/nvidia-video-G06.spec +++ b/nvidia-video-G06.spec @@ -94,11 +94,7 @@ Conflicts: nvidia-computeG05 Provides: nvidia-computeG06 = %{version} Obsoletes: nvidia-computeG06 < %{version} Recommends: nvidia-compute-G06-32bit -%if (0%{?sle_version} >= 150100 || 0%{?suse_version} >= 1550) Requires(pre): update-alternatives -%else -Conflicts: libOpenCL1 -%endif %description -n nvidia-compute-G06 NVIDIA driver for computing with GPGPUs using CUDA or OpenCL. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1225784] New: clang: Please subpackage compiler-rt libraries
by bugzilla_noreply＠suse.com 24 Aug '24

24 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225784 Bug ID: 1225784 Summary: clang: Please subpackage compiler-rt libraries Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: daan.j.demeyer(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- In systemd when building with sanitizers we link against clang's shared ASAN libraries with -shared-libasan. The opensuse rpm we build with sanitizers is then installed into the initramfs. Currently we have to install the entire clang package into the initramfs to make sure the shared ASAN libraries are available. Please create a compiler-rt subpackage (as exists on Fedora, CentOS and Arch Linux already) which contains the shared ASAN libraries among other things so we don't have to install the full clang package into the initramfs when building with sanitizers. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1223909] New: Package vlc fails to build with gcc 14 because of assignments from incompatible pointer types
by bugzilla_noreply＠suse.com 24 Aug '24

24 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1223909 Bug ID: 1223909 Summary: Package vlc fails to build with gcc 14 because of assignments from incompatible pointer types Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Vlc fails when built with GCC 14 because of use incompatible pointer types, which used to be warnings in previous versions of GCC but are errors by default in GCC 14: https://build.opensuse.org/package/live_build_log/home:rguenther:plgrnd/vlc… The bug seems to have been reported upstream as https://code.videolan.org/videolan/vlc/-/issues/28441 and to Gentoo as https://bugs.gentoo.org/919068. but there is also yet unresolved) Gentoo issue https://bugs.gentoo.org/919296 so the particular error might not be the only one. For more information on porting to gcc 14, see https://gcc.gnu.org/gcc-14/porting_to.html -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1227305] New: VUL-0: CVE-2024-38519: yt-dlp: improper file extension limitations lead to to arbitrary filenames being created in the download folder
by bugzilla_noreply＠suse.com 23 Aug '24

23 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227305 Bug ID: 1227305 Summary: VUL-0: CVE-2024-38519: yt-dlp: improper file extension limitations lead to to arbitrary filenames being created in the download folder Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/412693/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- `yt-dlp` is a command-line audio/video downloader. Prior to version 2024.07.01, `yt-dlp` does not limit the extensions of downloaded files, which could lead to aribitrary filenames being created in the download folder (and path traversal on Windows). Since `yt-dlp` also reads config from the working directory (and on Windows executables will be executed from the yt-dlp directory) this could lead to arbitrary code being executed. `yt-dlp` version 2024.07.01 fixes this issue by whitelisting the allowed extensions. This might mean some very uncommon extensions might not get downloaded, however it will also limit the possible exploitation surface. In addition to upgrading, have `.%(ext)s` at the end of the output template and make sure the user trusts the websites that they are downloading from. Also, make sure to never download to a directory within PATH or other sensitive locations like one's user directory, `system32`, or other binaries locations. For users who are not able to upgrade, keep the default output template (`-o "%(title)s [%(id)s].%(ext)s`); make sure the extension of the media to download is a common video/audio/sub/... one; try to avoid the generic extractor; and/or use `--ignore-config --config-location ...` to not load config from common locations. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38519 https://www.cve.org/CVERecord?id=CVE-2024-38519 https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090c… https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01 https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1226420] New: VUL-0: CVE-2024-38448: global: htags may allow code execution via untrusted dbpath
by bugzilla_noreply＠suse.com 23 Aug '24

23 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226420 Bug ID: 1226420 Summary: VUL-0: CVE-2024-38448: global: htags may allow code execution via untrusted dbpath Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/411058/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sleep_walker(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38448 https://www.cve.org/CVERecord?id=CVE-2024-38448 https://cvs.savannah.gnu.org/viewvc/global/global/htags/htags.c?revision=1.… https://lists.gnu.org/archive/html/bug-global/2024-05/msg00009.html -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1225638] New: VUL-0: CVE-2024-35434: sngrep: Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
by bugzilla_noreply＠suse.com 23 Aug '24

23 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225638 Bug ID: 1225638 Summary: VUL-0: CVE-2024-35434: sngrep: Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/408095/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mardnh(a)gmx.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35434 https://www.cve.org/CVERecord?id=CVE-2024-35434 https://github.com/inputzero/Security-Advisories/blob/main/CVE-XXXX-XXXX.md -- You are receiving this mail because: You are on the CC list for the bug.

1 3