August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1218459] New: rpm scriptlets left over after snasphot updates
by bugzilla_noreply＠suse.com 06 Apr '25

06 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1218459 Bug ID: 1218459 Summary: rpm scriptlets left over after snasphot updates Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: d_werner(a)gmx.net QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I noticed on 2 Tumbleweed systems that since middle of October 2023 rpm scriptlets remain in the /var/tmp directory. For one of the systems the oldest files are related to the update from snapshot 20231012 to snapshot 20231013 on Oct. 15: $ ll -rt /var/tmp/rpm-tmp.* |head -rw------- 1 root root 177 15. Okt 14:07 /var/tmp/rpm-tmp.xEtA52 -rw------- 1 root root 479 15. Okt 14:07 /var/tmp/rpm-tmp.EXLxob -rw------- 1 root root 311 15. Okt 14:07 /var/tmp/rpm-tmp.bjfewF -rw------- 1 root root 648 15. Okt 14:07 /var/tmp/rpm-tmp.ZDYSLb -rw------- 1 root root 179 15. Okt 14:07 /var/tmp/rpm-tmp.BYmaWt -rw------- 1 root root 176 15. Okt 14:07 /var/tmp/rpm-tmp.aXzaBF -rw------- 1 root root 311 17. Okt 16:38 /var/tmp/rpm-tmp.eX0BsI -rw------- 1 root root 638 18. Okt 19:02 /var/tmp/rpm-tmp.F05Leb -rw------- 1 root root 311 18. Okt 19:02 /var/tmp/rpm-tmp.rxs60L -rw------- 1 root root 546 18. Okt 19:02 /var/tmp/rpm-tmp.nnvrQo and new files were created also with the update from snapshot 20231225 to snapshot 20231226 on Dec. 28: $ ll -rt /var/tmp/rpm-tmp.* |tail -rw------- 1 root root 311 22. Dez 19:32 /var/tmp/rpm-tmp.WVqG89 -rw------- 1 root root 1694 22. Dez 19:32 /var/tmp/rpm-tmp.1hF4yH -rw------- 1 root root 166 22. Dez 19:33 /var/tmp/rpm-tmp.eJdGQd -rw------- 1 root root 162 23. Dez 17:30 /var/tmp/rpm-tmp.ZsqgtG -rw------- 1 root root 177 23. Dez 17:30 /var/tmp/rpm-tmp.pPVWkF -rw------- 1 root root 311 23. Dez 17:30 /var/tmp/rpm-tmp.M8ojbB -rw------- 1 root root 311 26. Dez 20:16 /var/tmp/rpm-tmp.SLRu25 -rw------- 1 root root 166 28. Dez 06:08 /var/tmp/rpm-tmp.fYFPnC -rw------- 1 root root 311 28. Dez 06:09 /var/tmp/rpm-tmp.V99rNu -rw------- 1 root root 253 28. Dez 06:09 /var/tmp/rpm-tmp.Kn51G9 I do not find a tmpfiles.d configuration which would cause removal of files in /var/tmp owned by root reaching a certain age, therefore I suspect this started with snapshot 20231013. Currently the directory contains 236 such files on this system: $ ll /var/tmp/rpm-tmp.* |wc -l 236 Seems the files are created during the posttrans step of the snapshot update with zypper dup: stat rpm-tmp.bjfewF File: rpm-tmp.bjfewF Size: 311 Blocks: 8 IO Block: 4096 regular file Device: 254,1 Inode: 662121 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-12-30 18:38:13.806666658 +0100 Modify: 2023-10-15 14:07:33.799999952 +0200 Change: 2023-10-15 14:07:33.799999952 +0200 Birth: 2023-10-15 14:07:33.796666619 +0200 fits to /var/log/zypp/history entry: # 2023-10-15 14:07:33 %posttrans(grub2-x86_64-efi-2.12~rc1-5.1.noarch) script output: # ++ cat /run/fde-tpm-helper/update # ++ uniq The number of files created during snapshot updates varies, probably depending on the updated packages and the related posttrans scriptlets. Content of the files generated on Oct 15: # cat $(ll -rt rpm-tmp.* |grep 'Oct 15' |awk '{print $9}') set -x # Migration to /usr/etc, restore just created .rpmsave for i in logrotate.d/zypp-history.lr; do test -f /etc/${i}.rpmsave && mv -v /etc/${i}.rpmsave /etc/${i} ||: done set -x if test -x /sbin/update-bootloader; then if test -f /run/update-bootloader/reinit; then rm -f -- /run/update-bootloader/reinit /run/update-bootloader/refresh if test -x /usr/libexec/grub2-instdev-fixup.pl; then /usr/libexec/grub2-instdev-fixup.pl || : fi /sbin/update-bootloader --reinit || : elif test -f /run/update-bootloader/refresh; then rm -f /run/update-bootloader/refresh /sbin/update-bootloader --refresh || : fi fi set -x # Launch the issue-generator: we have a new config file in /usr/lib/issue.d that needs to be represented if [ -x /usr/sbin/issue-generator ]; then if [ -x /usr/bin/systemd-tmpfiles ]; then /usr/bin/systemd-tmpfiles --create issue-generator.conf || : fi /usr/sbin/issue-generator || : fi set -x if test -x /sbin/update-bootloader; then if test -f /run/update-bootloader/reinit; then rm -f -- /run/update-bootloader/reinit /run/update-bootloader/refresh if test -x /usr/libexec/grub2-instdev-fixup.pl; then /usr/libexec/grub2-instdev-fixup.pl || : fi /sbin/update-bootloader --reinit || : elif test -f /run/update-bootloader/refresh; then rm -f /run/update-bootloader/refresh /sbin/update-bootloader --refresh || : fi fi if test -f /run/fde-tpm-helper/update; then /usr/libexec/fde/fde-tpm-helper "`cat /run/fde-tpm-helper/update | uniq`" || : rm -f /run/fde-tpm-helper/update fi set -x # Migration to /usr/etc, restore just created .rpmsave for i in logrotate.d/samba pam.d/samba; do test -f /etc/${i}.rpmsave && mv -v /etc/${i}.rpmsave /etc/${i} ||: doneset -x # Migration to /usr/etc, restore just created .rpmsave for i in logrotate.d/samba-winbind ; do test -f /etc/${i}.rpmsave && mv -v /etc/${i}.rpmsave /etc/${i} ||: done -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1221506] New: After several updates sddm on thumbleweed left without symbols or words
by bugzilla_noreply＠suse.com 06 Apr '25

06 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1221506 Bug ID: 1221506 Summary: After several updates sddm on thumbleweed left without symbols or words Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: virex(a)mail.ru QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 873568 --> https://bugzilla.suse.com/attachment.cgi?id=873568&action=edit photo After several updates sddm did not show any symbols. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1220201] New: Firefox on Wayland - download dialog disappearing
by bugzilla_noreply＠suse.com 05 Apr '25

05 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1220201 Bug ID: 1220201 Summary: Firefox on Wayland - download dialog disappearing Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Using Firefox on Wayland the download dialog is disappearing after chosing "save file" and before selecting the download file and directory. One can see the "enter name ..." dialog for a second, then it vanishes. On the same machine this does not happen with Xorg. There is no error or warning in the journal, i.e. for a crash. Operating System: openSUSE Tumbleweed 20240220 KDE Plasma Version: 5.27.10 KDE Frameworks Version: 5.115.0 Qt Version: 5.15.12 Kernel Version: 6.7.5-1-default (64-bit) Graphics Platform: X11 Processors: 8 × 11th Gen Intel® Core™ i7-1165G7 @ 2.80GHz Memory: 15,0 GiB of RAM Graphics Processor: Mesa Intel® Xe Graphics Manufacturer: Dell Inc. Product Name: XPS 13 9310 2-in-1 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1229338] New: ffmpeg fails to build on 32bit arm
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1229338 Bug ID: 1229338 Summary: ffmpeg fails to build on 32bit arm Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4414868/modules/star t_install/steps/3 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: jengelh(a)inai.de Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ffmpeg-6 and ffmpeg-7 fail to build on armv6hl as well as armv7hl, turning desktops uninstallable. This patch should fix it: https://git.videolan.org/?p=ffmpeg.git;a=patch;h=654bd47716c4f36719fb0f3f7f… ## Observation openQA test in scenario opensuse-Tumbleweed-NET-arm-install_only@aarch32 fails in [start_install](https://openqa.opensuse.org/tests/4414868/modules/start_inst… ## Test suite description set HDDSIZE=40 as required for ppc64le (failed w/o it on https://openqa.opensuse.org/tests/390330#step/install_and_reboot/21 ## Reproducible Fails since (at least) Build [20240524](https://openqa.opensuse.org/tests/4222103) ## Expected result Last good: [20240523](https://openqa.opensuse.org/tests/4218706) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=arm&distri=opensuse&f… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1215945] New: ffmpeg-4: Build fails with current Binutils; requires 'asm' fix (15.4, 15.5, Tumbleweed)
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1215945 Bug ID: 1215945 Summary: ffmpeg-4: Build fails with current Binutils; requires 'asm' fix (15.4, 15.5, Tumbleweed) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Keywords: build Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: burnus(a)gmx.de QA Contact: qa-bugs(a)suse.de CC: jengelh(a)inai.de Target Milestone: --- Found By: --- Blocker: --- GNU Binutils 2.41 now reveals a bug in the 'asm' code used in ffmpeg-4: ./libavcodec/x86/mathops.h:125: Error: operand type mismatch for `shr' While Binutils is pending for opensuse:factory, the new version has already landed in 15.4 and 15.5 such that ffmpeg-4 fails there: https://build.opensuse.org/package/show/multimedia:libs/ffmpeg-4 ffmpeg-5/6 seemingly got the fix as I do see no fails for 15.4/15.5 for the build of the 4h old package. Upstream FIX: "Fixes assembling with binutil as >= 2.41" at https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/effadce6c756247ea8bae32… See also https://trac.ffmpeg.org/ticket/10405 or (where I found it): The pending Binutils update for openSUSE:factory update is: https://build.opensuse.org/request/show/1113885 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1213370] New: tesseract-ocr should not be built with experimantal opencl support
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1213370 Bug ID: 1213370 Summary: tesseract-ocr should not be built with experimantal opencl support Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: opensuse(a)titlis.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- opencl in tesseract-ocr is considered experimental, according to this thread (https://groups.google.com/g/tesseract-ocr/c/eIQbsurfSEM/m/mVb_4GF1BgAJ) it is considered just an entry point for possible developers. Their own doucmentantion (https://tesseract-ocr.github.io/tessdoc/TesseractOpenCL.html) states: "Important note: OpenCL support in Tesseract is still considered experimental. There are some major bugs associated with it (see issue 837). Building Tesseract with OpenCL support is not recommended (for any version of Tesseract), unless you are a developer and want to improve the OpenCL code" Please remove the flag "--enable-opencl" from https://build.opensuse.org/package/view_file/openSUSE:Factory/tesseract-ocr… This would also resolve https://bugzilla.opensuse.org/show_bug.cgi?id=1207570 PS: I indeed encounter problems with the opencl code path -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1222131] New: VUL-0: CVE-2024-3024: tcpreplay: heap-based buffer overflow
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1222131 Bug ID: 1222131 Summary: VUL-0: CVE-2024-3024: tcpreplay: heap-based buffer overflow Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/399372/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mkubecek(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: carlos.lopez(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-3024 https://www.cve.org/CVERecord?id=CVE-2024-3024 https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psL… https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/view https://vuldb.com/?ctiid.258333 https://vuldb.com/?id.258333 https://vuldb.com/?submit.297866 https://bugzilla.redhat.com/show_bug.cgi?id=2271990 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1218249] New: VUL-0: CVE-2023-4256: tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1218249 Bug ID: 1218249 Summary: VUL-0: CVE-2023-4256: tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/388647/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mkubecek(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: abergmann(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- tcprewrite in tcpreplay v4.4.4 and v.4.4.3 has a double free in function tcpedit_dlt_cleanup in plugins/dlt_plugins.c. It can be triggered by sending a crafted file to the tcprewrite binary. It allows a local attacker to cause Denial of Service or possibly have unspecified other impact. https://github.com/appneta/tcpreplay/issues/813 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4256 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1221324] New: VUL-0: CVE-2023-43279: tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c
by bugzilla_noreply＠suse.com 03 Apr '25

03 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1221324 Bug ID: 1221324 Summary: VUL-0: CVE-2023-43279: tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/397392/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mkubecek(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: abergmann(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43279 https://www.cve.org/CVERecord?id=CVE-2023-43279 https://github.com/appneta/tcpreplay/issues/824 https://bugzilla.redhat.com/show_bug.cgi?id=2269308 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1224402] New: /usr/src/kernel-modules/nvidia-390.157-default/nvidia/nv-procfs.o: warning: objtool: nv_register_procfs() falls through to next function nv_unregister_procfs()
by bugzilla_noreply＠suse.com 02 Apr '25

02 Apr '25

https://bugzilla.suse.com/show_bug.cgi?id=1224402 Bug ID: 1224402 Summary: /usr/src/kernel-modules/nvidia-390.157-default/nvidia/ nv-procfs.o: warning: objtool: nv_register_procfs() falls through to next function nv_unregister_procfs() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Is this a bug in objtool? How would you even go about writing such function? -- You are receiving this mail because: You are on the CC list for the bug.

1 28