July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1220260] New: qBittorrent freezes after opening and closing preferences
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1220260 Bug ID: 1220260 Summary: qBittorrent freezes after opening and closing preferences Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: screening-team-bugs(a)suse.de Reporter: piotrus3g(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Operating System: openSUSE Tumbleweed 20240221 KDE Plasma Version: 5.27.10 KDE Frameworks Version: 5.115.0 Qt Version: 5.15.12 Kernel Version: 6.7.5-1-default (64-bit) Graphics Platform: Wayland Processors: 12 × AMD Ryzen 5 5625U with Radeon Graphics Memory: 13,5 GiB of RAM Graphics Processor: AMD Radeon Graphics Manufacturer: LENOVO Product Name: 82SG System Version: IdeaPad 5 15ABA7 Steps to reproduce: 1. Open qbittorrent 2. Open qbittorrent preferences 3. Close preferences window Observed result: qbittorrent freezes. Expected result: qbittorrent doesn't freeze. Additional information: qbittorrent unfreezes after a short time and seems to work properly. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1218101] New: qBittorrent blurry fonts on kde wayland
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1218101 Bug ID: 1218101 Summary: qBittorrent blurry fonts on kde wayland Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Usability Assignee: screening-team-bugs(a)suse.de Reporter: piotrus3g(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 871385 --> https://bugzilla.suse.com/attachment.cgi?id=871385&action=edit Compare the fonts in qBittorrent to the right click menu on the app's titlebar Operating System: openSUSE Tumbleweed 20231213 KDE Plasma Version: 5.27.10 KDE Frameworks Version: 5.112.0 Qt Version: 5.15.11 Kernel Version: 6.6.6-1-default (64-bit) Graphics Platform: Wayland Processors: 12 × AMD Ryzen 5 5625U with Radeon Graphics Memory: 13,5 GiB of RAM Graphics Processor: AMD Radeon Graphics Manufacturer: LENOVO Product Name: 82SG System Version: IdeaPad 5 15ABA7 Issue: qBittorrent fonts are a bit blurry under wayland on kde. Steps to reproduce: Launch qBittorrent and see that the fonts aren't as sharp as other programs. Observed behavior: Fonts are blurrier than other programs. Expected behavior: Fonts are sharp just like every other app. Additional information: I'm not sure if it's related, but right now scaling in kde wayland on tumbleweed is a bit broken, because user has to set scaling by force font dpi and not by display scaling. Scaling works when screen scaling is at 100% and force font dpi is set to apply actual scaling (120dpi in my case for effective 125% scaling). -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1228540] New: [SELinux] avc during boot for int-xenstore-d and qemu-system-i386
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1228540 Bug ID: 1228540 Summary: [SELinux] avc during boot for int-xenstore-d and qemu-system-i386 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: conde.philippe(a)skynet.be QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 876364 --> https://bugzilla.suse.com/attachment.cgi?id=876364&action=edit output of commande ausearch I have a server with latest openSUSE tumbleweed and with KDE. I have a VM (with opensuse tumbleweed also) that I start with virtmgr when needed. I have activated selinux in permissive mode on the host following your advice: https://en.opensuse.org/Portal:SELinux/Setup#Tumbleweed hpprol2:~ # sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: permissive Policy MLS status: enabled Policy deny_unknown status: allowed Memory protection checking: actual (secure) Max kernel policy version: 33 hpprol2:~ # hpprol2:~ # zypper info selinux-policy Loading repository data... Reading installed packages... Information for package selinux-policy: --------------------------------------- Repository : security:SELinux Name : selinux-policy Version : 20240729-249.1 Arch : noarch Vendor : obs://build.opensuse.org/security:SELinux Installed Size : 28.3 KiB Installed : Yes Status : up-to-date Source package : selinux-policy-20240729-249.1.src Upstream URL : https://github.com/fedora-selinux/selinux-policy.git Summary : SELinux policy configuration I boot the xen kernel and receive the errors during boot. as far as I see the problem is with directory /var/lib/xen which is labeled as hpprol2:~ # ls -dZ /var/lib/xen system_u:object_r:xend_var_lib_t:s0 /var/lib/xen hpprol2:~ # ls -lZ /var/lib/xen/* -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 209 Jul 30 10:24 /var/lib/xen/userdata-d.0.00000000-0000-0000-0000-000000000000.libxl-json -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 209 Jul 30 10:24 /var/lib/xen/userdata-d.1.00000000-0000-0000-0000-000000000000.libxl-json -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul 5 22:43 /var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Jul 5 22:43 /var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul 5 12:01 /var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2181 Jul 5 12:01 /var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Mar 17 11:47 /var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Mar 17 11:47 /var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Oct 20 2023 /var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml -rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Oct 20 2023 /var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json I attach the ausearch -ts today -m avc output related to this problem version of xen-tools Information for package xen-tools: ---------------------------------- Repository : Main Repository (OSS) Name : xen-tools Version : 4.18.2_06-2.1 Arch : x86_64 Vendor : openSUSE Installed Size : 2.8 MiB Installed : Yes (automatically) Status : up-to-date Source package : xen-4.18.2_06-2.1.src Upstream URL : http://www.cl.cam.ac.uk/Research/SRG/netos/xen/ Summary : Xen Virtualization: Control tools for domain 0 My vm défintion /etc/libvirt/libxl/opensusetumbleweed.xml  <domain type="xen"> <name>opensusetumbleweed</name> <uuid>c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad</uuid> <metadata> <libosinfo:libosinfo> <libosinfo:os id="http://opensuse.org/opensuse/tumbleweed"/> </libosinfo:libosinfo> </metadata> <memory unit="KiB">2097152</memory> <currentMemory unit="KiB">2097152</currentMemory> <vcpu placement="static">2</vcpu> <os> <type arch="x86_64" machine="xenfv">hvm</type> <loader type="rom">/usr/lib/xen/boot/hvmloader</loader> <boot dev="hd"/> </os> <features> <acpi/> <apic/> <pae/> </features> <clock offset="utc"/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/lib/xen/bin/qemu-system-i386</emulator> <disk type="block" device="disk"> <driver name="phy" type="raw"/> <source dev="/dev/disk/by-id/scsi-3600508b1001c21d488c454a46bc39f22-part1"/> <target dev="hda" bus="ide"/> <address type="drive" controller="0" bus="0" target="0" unit="0"/> </disk> <disk type="block" device="cdrom"> <driver name="qemu" type="raw"/> <source dev="/dev/sr0"/> <target dev="hdb" bus="ide"/> <readonly/> <address type="drive" controller="0" bus="0" target="0" unit="1"/> </disk> <controller type="xenbus" index="0"/> <controller type="ide" index="0"/> <interface type="bridge"> <mac address="00:16:3e:9c:13:3e"/> <source bridge="br0"/> </interface> <serial type="pty"> <target port="0"/> </serial> <console type="pty"> <target type="serial" port="0"/> </console> <input type="mouse" bus="ps2"/> <input type="keyboard" bus="ps2"/> <graphics type="vnc" port="-1" autoport="yes"> <listen type="address"/> </graphics> <video> <model type="vga" vram="16384" heads="1" primary="yes"/> </video> <memballoon model="xen"/> </devices> </domain> -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1215865] New: VUL-0: CVE-2023-0809: mosquitto: excessive memory being allocated based on malicious initial packets that are not CONNECT packets
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1215865 Bug ID: 1215865 Summary: VUL-0: CVE-2023-0809: mosquitto: excessive memory being allocated based on malicious initial packets that are not CONNECT packets Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mardnh(a)gmx.de Reporter: abergmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://security-tracker.debian.org/tracker/DSA-5511-1 CVE-2023-0809 Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1215864] New: VUL-0: CVE-2023-3592: mosquitto: memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types
by bugzilla_noreply＠suse.com 04 Nov '24

04 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1215864 Bug ID: 1215864 Summary: VUL-0: CVE-2023-3592: mosquitto: memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mardnh(a)gmx.de Reporter: abergmann(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- https://security-tracker.debian.org/tracker/DSA-5511-1 CVE-2023-3592 Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1218784] New: ark cannot open tar archives which contain files with non-ascii chars in filename like umlauts äöÜ etc
by bugzilla_noreply＠suse.com 03 Nov '24

03 Nov '24

https://bugzilla.suse.com/show_bug.cgi?id=1218784 Bug ID: 1218784 Summary: ark cannot open tar archives which contain files with non-ascii chars in filename like umlauts äöÜ etc Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: otto47(a)bk13.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- create two files bla.txt and test-ö.txt, then put them into a new tar achive. Opening this archive by ark throws a message "The archive you're trying to open is corrupt. Some files may be missing or damaged." It offers two buttons "Open as Read-Only" plus " Don't Open". Opening as Read-Only displays only one file bla.txt in the archive -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1221250] New: glibc-locale-base missing locale() provides
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1221250 Bug ID: 1221250 Summary: glibc-locale-base missing locale() provides Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: georg.pfuetzenreuter(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hi, the glibc-locale package ships with "Provide"s for the different locales it ships: ``` $ rpm -q --provides glibc-locale|head glibc-locale = 2.38-6.1 glibc-locale(x86-64) = 2.38-6.1 locale(glibc:aa_DJ) locale(glibc:aa_DJ.utf8) locale(glibc:aa_ER) locale(glibc:aa_ER@saaho) locale(glibc:aa_ET) locale(glibc:af_ZA) locale(glibc:af_ZA.utf8) locale(glibc:agr_PE) ``` There are two locales which are shipped in glibc-locale-base - en_US.utf8 and C.utf8. Upon packaging something which requires one of them, I noticed that glibc-locale-base is not shipping any `locale()` "Provide"s. ``` $ rpm -q --provides glibc-locale-base glibc-locale-base = 2.38-6.1 glibc-locale-base(x86-64) = 2.38-6.1 libCNS.so()(64bit) libGB.so()(64bit) libISOIR165.so()(64bit) libJIS.so()(64bit) libJISX0213.so()(64bit) libKSC.so()(64bit) ``` I would expect glibc-locale-base to Provide `locale(glibc:C.utf8)` and `locale(glibc:en_US.utf8)` - both to have providers for all locales in the distribution and to make packaging easier. Unfortunately I could not figure out how the "Provide"s in glibc.spec are generated myself, hence I am opening this report instead. Cheers, Georg -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1213339] New: Segmentation fault when setting up database with sqlite3 gda-control-center-6.0
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1213339 Bug ID: 1213339 Summary: Segmentation fault when setting up database with sqlite3 gda-control-center-6.0 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: vojta.kottas(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0 Build Identifier: When setting up a sqlite database using gda-control-center-6.0 as a test in a folder (/tmp/test_db in my case), the gui crashed and the command line showed that a segmentation fault had occurred. This issue does not happen on other distros. Reproducible: Always Steps to Reproduce: 1. Run gda-control-center-6.0 2. Set up database with sqlite Actual Results: Segmentation fault Expected Results: A database is set up in the specified folder. This all came from me trying to install the Pano extension, which upon install crashed the gnome-shell. I tracked the issue to this github issue: https://github.com/oae/gnome-shell-pano/issues/178 Which further tracks the issue down to a problem with the sqlite3 package on openSUSE. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1219526] New: Update Definitions in MicroOS ISO Installer to reflect Aeon and Kalpa branding
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1219526 Bug ID: 1219526 Summary: Update Definitions in MicroOS ISO Installer to reflect Aeon and Kalpa branding Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: MicroOS Assignee: kubic-bugs(a)opensuse.org Reporter: sfalken(a)cloverleaf-linux.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Update the wording in the MicroOS ISO and Yast based installer, to reflect the Aeon and Kalpa branding, for the Gnome and KDE desktop variants, respectively. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1226021] New: VUL-0: CVE-2024-5171: chromium: libaom: heap buffer overflow in img_alloc_helper() caused by integer overflow
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1226021 Bug ID: 1226021 Summary: VUL-0: CVE-2024-5171: chromium: libaom: heap buffer overflow in img_alloc_helper() caused by integer overflow Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/408840/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: rfrohl(a)suse.com QA Contact: qa-bugs(a)suse.de CC: coldpool(a)suse.de, rfrohl(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Depends on: 1226020 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1226020 +++ Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-5171 https://www.cve.org/CVERecord?id=CVE-2024-5171 https://issues.chromium.org/issues/332382766 -- You are receiving this mail because: You are on the CC list for the bug.

1 3