January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231599] hard freezes related to btusb device 04ca:3802
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1231599 https://bugzilla.suse.com/show_bug.cgi?id=1231599#c30 --- Comment #30 from Takashi Iwai <tiwai(a)suse.com> --- The latest 6.12.8 seems containing significant changes for Mediatek USB, and this should cover most problems. And, with that, the former downstream patch might be rather harmful (bsc#1235020). I dropped the downstream patch from TW stable git branch now. The test kernel with the drop of the downstream patch is found in bsc#1235020. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234623] DPC: RP PIO log size 0 is invalid (quirk needs to be added)
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234623 https://bugzilla.suse.com/show_bug.cgi?id=1234623#c8 --- Comment #8 from Takashi Iwai <tiwai(a)suse.com> --- ... and verify the behavior with the older kernel (6.12.6 or such). You can check the rpm changelog of the kernel package whether it contains the fix for this bug or not. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234405] New: devel:microos/libeconf: Bug libeconf 0.7.5 causes systemd/sddm/pam/libc crash and prevents login
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234405 Bug ID: 1234405 Summary: devel:microos/libeconf: Bug libeconf 0.7.5 causes systemd/sddm/pam/libc crash and prevents login Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: rbrown(a)suse.com Reporter: pallaswept(a)proton.me QA Contact: screening-team-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 879108 --> https://bugzilla.suse.com/attachment.cgi?id=879108&action=edit output of `journalctl -b -2 |rg dumped -A 40` After today's dup, I rebooted to a desktop with a mouse cursor and otherwise unresponsive. Switching to a TTY showed an error "Unable to start user manager for user 1000". I was unable to login with any account including root. Using the recovery console, I was able to retrieve logs, find this culprit, rollback, and am currently working after locking out the libeconf updates with `sudo zypper al libeconf0 libeconf0-32bit libeconf-devel` Not sure if this is just me, hopefully it is. I did have some custom pam config, which I naturally removed to test, and there was no change, but I did notice that `rpm -qf /etc/pam.d/*` returns several "file foo is not owned by any package", and none of those files are mine. I'm not sure if this is intentional or if it is related. Relevant section of the journal is attached. Please let me know if I can help in any way. -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1234623] DPC: RP PIO log size 0 is invalid (quirk needs to be added)
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234623 https://bugzilla.suse.com/show_bug.cgi?id=1234623#c7 --- Comment #7 from Takashi Iwai <tiwai(a)suse.com> --- The upstream dev seems reluctant to add more quirk entries, and Intel dev wrote that the latest BIOS should cover this. Could you check the latest BIOS on your machine? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235325] New: VUL-0: CVE-2024-45338: gosec: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235325 Bug ID: 1235325 Summary: VUL-0: CVE-2024-45338: gosec: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/433408/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-45338:5.9:(AV:N/AC:H/PR:N/UI:N/ S:U/C:N/I:N/A:H) CVSSv4:SUSE:CVE-2024-45338:8.2:(AV:N/AC:H/AT:P/PR:N/UI :N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Severity: Major Priority: P5 - None Component: Security Assignee: felix.niederwanger(a)suse.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1234794 Target Milestone: --- Found By: --- Blocker: --- An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-45338 https://www.cve.org/CVERecord?id=CVE-2024-45338 https://go.dev/cl/637536 https://go.dev/issue/70906 https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ https://pkg.go.dev/vuln/GO-2024-3333 https://bugzilla.redhat.com/show_bug.cgi?id=2333122 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1234794] New: VUL-0: CVE-2024-45338: golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234794 Bug ID: 1234794 Summary: VUL-0: CVE-2024-45338: golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/433408/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: jmassaguerpla(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-45338 https://www.cve.org/CVERecord?id=CVE-2024-45338 https://go.dev/cl/637536 https://go.dev/issue/70906 https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ https://pkg.go.dev/vuln/GO-2024-3333 https://bugzilla.redhat.com/show_bug.cgi?id=2333122 -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1047218] trackerbug: packages do not build reproducibly from including build time
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1047218 https://bugzilla.suse.com/show_bug.cgi?id=1047218#c238 --- Comment #238 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1047218) was mentioned in https://build.opensuse.org/request/show/1236241 Backports:SLE-15-SP6 / ollama -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220088] Hibernate completes shuts machine off *then* machine automatically turns back on.
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1220088 https://bugzilla.suse.com/show_bug.cgi?id=1220088#c43 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WONTFIX --- Comment #43 from Takashi Iwai <tiwai(a)suse.com> --- So let's close for now. Feel free to reopen if you can reproduce the issue again on the latest TW system. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216091] openQA failures with the update of zypper to 1.14.65 and libzypp to 17.31.21
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1216091 Michael Andres <ma(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(ma(a)suse.com) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220086] New: xfce4-terminal does not honor --geometry parameter under wayland
by bugzilla_noreply＠suse.com 09 Jan '25

09 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1220086 Bug ID: 1220086 Summary: xfce4-terminal does not honor --geometry parameter under wayland Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I decided to play around with wayland instead of x11 to find out, if everything works as expected for me. On thing I found, is that xfce4-terminal does not honor --geometry parameter under wayland. It is always started centered, it seems to use the size parameters, though. Operating System: openSUSE Tumbleweed 20240216 KDE Plasma Version: 5.27.10 KDE Frameworks Version: 5.115.0 Qt Version: 5.15.12 Kernel Version: 6.7.4-1-default (64-bit) Graphics Platform: Wayland Processors: 8 × 11th Gen Intel® Core™ i7-1165G7 @ 2.80GHz Memory: 15,0 GiB of RAM Graphics Processor: Mesa Intel® Xe Graphics Manufacturer: Dell Inc. Product Name: XPS 13 9310 2-in-1 -- You are receiving this mail because: You are on the CC list for the bug.

1 3