August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1228384] virt-install generates unwanted libvirt storage pools when running with --dry-run --print-xml
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228384 https://bugzilla.suse.com/show_bug.cgi?id=1228384#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1228384) was mentioned in https://build.opensuse.org/request/show/1191255 Factory / virt-manager -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228812] Discover cannot update bash-completion package because of version number conflict
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228812 https://bugzilla.suse.com/show_bug.cgi?id=1228812#c5 --- Comment #5 from Don Siders <don.siders(a)gmail.com> --- journalctrl output in attachment. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228812] Discover cannot update bash-completion package because of version number conflict
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228812 https://bugzilla.suse.com/show_bug.cgi?id=1228812#c4 --- Comment #4 from Don Siders <don.siders(a)gmail.com> --- Created attachment 876461 --> https://bugzilla.suse.com/attachment.cgi?id=876461&action=edit journalctrl -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228815] New: VUL-0: CVE-2024-28570: freeimage: buffer overflow in processMakerNote()
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228815 Bug ID: 1228815 Summary: VUL-0: CVE-2024-28570: freeimage: buffer overflow in processMakerNote() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398665/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the processMakerNote() function when reading images in JPEG format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28570 https://bugzilla.redhat.com/show_bug.cgi?id=2270973 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28570 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1228814] New: VUL-0: CVE-2024-28577: freeimage: null pointer dereference in jpeg_read_exif_profile_raw()
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228814 Bug ID: 1228814 Summary: VUL-0: CVE-2024-28577: freeimage: null pointer dereference in jpeg_read_exif_profile_raw() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398654/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28577 https://bugzilla.redhat.com/show_bug.cgi?id=2270956 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28577 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1228813] Podman can't kill mariadb containers
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228813 https://bugzilla.suse.com/show_bug.cgi?id=1228813#c1 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alexandre.vicenzi(a)suse.com, | |dev.dorrejo(a)gmail.com Flags| |needinfo?(dev.dorrejo@gmail | |.com) --- Comment #1 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- Hi, Please, provide more details about which MariaDB image you are using. This can be taken from `podman images` output. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228812] Discover cannot update bash-completion package because of version number conflict
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228812 https://bugzilla.suse.com/show_bug.cgi?id=1228812#c2 --- Comment #2 from Don Siders <don.siders(a)gmail.com> --- > Is it just the installation or also fetching of available update that fails? This is a failure in the Discover application when its Update All button is clicked. > Please attach the full journal of that boot. This is not a boot issue. And I do not know what log (other than the error message displayed by Discover) tou are referring to. > Do "pkcon get-updates" and "pkcon update" work? pkcon get-updates reports no updates are available. But I have a Discover notification that indicated bash-completion has an update which it cannot install. Hope that helps... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227739] chromium 126 keeps dumping core
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1227739 https://bugzilla.suse.com/show_bug.cgi?id=1227739#c23 --- Comment #23 from Callum Farmer <gmbr3(a)opensuse.org> --- (In reply to Ruediger Oertel from comment #22) > just stumbled across this one: > https://salsa.debian.org/chromium-team/chromium/-/commit/ > e9a877c236209d8700f9adf6e58ead3fb6be01a9 > > I guess we might have to go the same way ... I flagged this last time around Cr123 I think, if libstdc++ doesn't work, this package is dropped. Using libc++ means no unbundling (aka no benefit to users) and that message for Debian pretty much confirms Google playing hard and fast with memory allocation which poses a major security risk unless this is actually libstdc++ misbehaving internally. We'd have to keep chromedriver for openQA. Callum -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228366] Missing package for Application:Geo/qgis: causes fatal error std::bad_alloc on loading plugin
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228366 https://bugzilla.suse.com/show_bug.cgi?id=1228366#c6 Matej Cepl <mcepl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mcepl(a)suse.com --- Comment #6 from Matej Cepl <mcepl(a)suse.com> --- (In reply to Grant Pearson from comment #5) > I successfully installed python311-pyproj 3.6.1 from a Tumbleweed community > project (grab binary and install with YaST Software) : > https://software.opensuse.org/package/python311-pyproj > > I have all Python symbolic links pointing to version 3.11 > There's still Python 3.6 module relics on my system - packages that are yet > to be updated to 3.11 for Leap 15.6. (List uploaded) I don’t believe installing any python311-* package should have much of any effect on any python36-* ones. If it does, there might be some bug somewhere. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228810] New: After recent upgrade to release 20240801 with kernel 6.10.2-1 nvidia driver is not working anymore
by bugzilla_noreply＠suse.com 02 Aug '24

02 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228810 Bug ID: 1228810 Summary: After recent upgrade to release 20240801 with kernel 6.10.2-1 nvidia driver is not working anymore Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Kernel:Drivers Assignee: kernel-bugs(a)suse.de Reporter: M.Traxler(a)gsi.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After recent upgrade to release 20240801 with kernel 6.10.2-1 nvidia driver is not working anymore. The message in the journal is: Aug 02 18:36:21 l10 after.local[2869]: modprobe: ERROR: could not find module by name='nvidia' Aug 02 18:36:21 l10 after.local[2869]: modprobe: ERROR: could not insert 'nvidia': Unknown symbol in module, or unknown parameter (see dmesg) When booting with "old" kernel 6.9.9-1-default everything is fine again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0