--17424050478.77ccC.18651
Date: Wed, 19 Mar 2025 17:24:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239802

            Bug ID: 1239802
           Summary: gnome 48 testing: celluloid crashing on shutdown
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: aloisio-at-gmx.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

(gdb) bt
#0  celluloid_mpv_command_async.isra.0 (mpv=3D0x0, cmd=3D0x7fffa32c74e0) at
../src/celluloid-mpv.c:841
#1  0x0000558b9b06dc79 in celluloid_model_reset_keys (model=3D0x0) at
../src/celluloid-model.c:964
#2  is_active_handler (gobject=3D<optimized out>, pspec=3D<optimized out>,
data=3D<optimized out>) at ../src/celluloid-controller.c:565
#3  is_active_handler (gobject=3D<optimized out>, pspec=3D<optimized out>,
data=3D<optimized out>) at ../src/celluloid-controller.c:555
#4  0x00007fb68b4ec8f8 in g_closure_invoke (closure=3D0x558bb98d5920,
return_value=3D0x0, n_param_values=3D2, param_values=3D0x7fffa32c76e0,
invocation_hint=3D0x7fffa32c7630) at ../gobject/gclosure.c:833
#5  0x00007fb68b5005d3 in signal_emit_unlocked_R
(node=3Dnode@entry=3D0x7fffa32c77d0, detail=3Ddetail@entry=3D938,
instance=3Dinstance@entry=3D0x558bb959ad10,
emission_return=3Demission_return@entry=3D0x0,
instance_and_params=3Dinstance_and_params@entry=3D0x7fffa32c76e0)
    at ../gobject/gsignal.c:3902
#6  0x00007fb68b501fe9 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@entry=3D=
1,
detail=3Ddetail@entry=3D938, var_args=3Dvar_args@entry=3D0x7fffa32c7930) at
../gobject/gsignal.c:3534
#7  0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D1, detail=3D938, var_args=3D0x7fffa32c7930) at ../gobject/gsign=
al.c:3277
#8  0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized out>,
detail=3D<optimized out>) at ../gobject/gsignal.c:3597
#9  0x00007fb68b4f09d4 in g_object_dispatch_properties_changed
(object=3D0x558bb959ad10, n_pspecs=3D<optimized out>, pspecs=3D<optimized o=
ut>) at
../gobject/gobject.c:1827
#10 0x00007fb68b4f466a in g_object_notify_by_spec_internal
(object=3D0x558bb959ad10, pspec=3D0x558bb9511a90) at ../gobject/gobject.c:1=
932
#11 g_object_notify_by_pspec (object=3Dobject@entry=3D0x558bb959ad10,
pspec=3D0x558bb9511a90) at ../gobject/gobject.c:2038
#12 0x00007fb68acbc5da in _gtk_window_set_is_active
(window=3Dwindow@entry=3D0x558bb959ad10, is_active=3Dis_active@entry=3D0) at
../gtk/gtkwindow.c:6052
#13 0x00007fb68acbc628 in gtk_window_unmap (widget=3D0x558bb959ad10) at
../gtk/gtkwindow.c:4047
#14 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb951d3b0,
return_value=3D0x0, instance=3D0x558bb959ad10, args=3D0x7fffa32c7d30, n_par=
ams=3D0,
param_types=3D0x0) at ../gobject/gclosure.c:896
#15 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@entry=3D=
71,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c7d30) at
../gobject/gsignal.c:3438
#16 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D71, detail=3D0, var_args=3D0x7fffa32c7d30) at ../gobject/gsigna=
l.c:3277
#17 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#18 0x00007fb68ac9effa in gtk_widget_unmap (widget=3D0x558bb959ad10) at
../gtk/gtkwidget.c:2923
#19 gtk_widget_unmap (widget=3D0x558bb959ad10) at ../gtk/gtkwidget.c:2911
#20 0x00007fb68acba449 in gtk_window_hide (widget=3D0x558bb959ad10) at
../gtk/gtkwindow.c:3930
#21 gtk_window_destroy (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:6906
#22 0x0000558b9b06d892 in dispose (object=3D0x558bb954c6e0) at
../src/celluloid-controller.c:385
#23 0x00007fb68b4f2298 in g_object_unref (_object=3D0x558bb954c6e0) at
../gobject/gobject.c:4423
#24 0x00007fb68b514148 in g_value_unset (value=3Dvalue@entry=3D0x7fffa32c7e=
c0) at
../gobject/gvalue.c:197
#25 0x00007fb68b501a3d in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb954c6e0, signal_id=3Dsignal_id@entry=3D=
62,
detail=3D<optimized out>, var_args=3Dvar_args@entry=3D0x7fffa32c80d8) at
../gobject/gsignal.c:3568
#26 0x00007fb68b507d8e in g_signal_emit_by_name (instance=3D0x558bb954c6e0,
detailed_signal=3Ddetailed_signal@entry=3D0x558b9b0891f5 "shutdown") at
../gobject/gsignal.c:3638
#27 0x0000558b9b06bd45 in close_request_handler
(view=3Dview@entry=3D0x558bb959ad10, data=3D<optimized out>) at
../src/celluloid-controller.c:572
#28 0x00007fb68aadac51 in _gtk_marshal_BOOLEAN__VOID (n_param_values=3D<opt=
imized
out>, invocation_hint=3D<optimized out>, closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, param_values=3D<optimized out>,
marshal_data=3D<optimized out>)
    at gtk/gtkmarshalers.c:1789
#29 _gtk_marshal_BOOLEAN__VOID (closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, n_param_values=3D<optimized out>,
param_values=3D<optimized out>, invocation_hint=3D<optimized out>,
marshal_data=3D<optimized out>) at gtk/gtkmarshalers.c:1760
#30 0x00007fb68b4ec8f8 in g_closure_invoke (closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, n_param_values=3D1, param_values=3D0x7fffa32=
c8420,
invocation_hint=3D0x7fffa32c8370) at ../gobject/gclosure.c:833
#31 0x00007fb68b5005d3 in signal_emit_unlocked_R
(node=3Dnode@entry=3D0x7fffa32c84f0, detail=3Ddetail@entry=3D0,
instance=3Dinstance@entry=3D0x558bb959ad10,
emission_return=3Demission_return@entry=3D0x7fffa32c8570,=20
    instance_and_params=3Dinstance_and_params@entry=3D0x7fffa32c8420) at
../gobject/gsignal.c:3902
#32 0x00007fb68b5018c9 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@entry=3D=
84,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c8650) at
../gobject/gsignal.c:3547
#33 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D84, detail=3D0, var_args=3D0x7fffa32c8650) at ../gobject/gsigna=
l.c:3277
#34 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#35 0x00007fb68acae9c0 in gtk_window_emit_close_request (window=3D0x558bb95=
9ad10)
at ../gtk/gtkwindow.c:3772
#36 gtk_window_close (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:1384
#37 gtk_window_close (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:1372
#38 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb98ef6a0,
return_value=3D0x0, instance=3D0x558bb95454d0, args=3D0x7fffa32c8a00, n_par=
ams=3D0,
param_types=3D0x0) at ../gobject/gclosure.c:896
#39 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb95454d0, signal_id=3Dsignal_id@entry=3D=
130,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c8a00) at
../gobject/gsignal.c:3438
#40 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb95454d0,
signal_id=3D130, detail=3D0, var_args=3D0x7fffa32c8a00) at ../gobject/gsign=
al.c:3277
#41 0x00007fb68b507b7f in g_signal_emit (instance=3D<optimized out>,
signal_id=3D<optimized out>, detail=3D<optimized out>) at ../gobject/gsigna=
l.c:3597
#42 0x00007fb68aadcaca in _gtk_marshal_VOID__INT_DOUBLE_DOUBLEv
(closure=3D<optimized out>, return_value=3D<optimized out>, instance=3D<opt=
imized
out>, args=3D<optimized out>, marshal_data=3D<optimized out>, n_params=3D<o=
ptimized
out>, param_types=3D0x558bb9542e40)
    at gtk/gtkmarshalers.c:3688
#43 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bba0217c0,
return_value=3D0x0, instance=3D0x558bb9540b50, args=3D0x7fffa32c8db0, n_par=
ams=3D3,
param_types=3D0x558bb9542e40) at ../gobject/gclosure.c:896
#44 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3Dsignal_id@entry=3D=
119,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c8db0) at
../gobject/gsignal.c:3438
#45 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb9540b50,
signal_id=3D119, detail=3D0, var_args=3D0x7fffa32c8db0) at ../gobject/gsign=
al.c:3277
#46 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3D<optimized out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#47 0x00007fb68ab7e6e6 in gtk_gesture_click_end (gesture=3D0x558bb9540b50,
sequence=3Dsequence@entry=3D0x0) at ../gtk/gtkgestureclick.c:275
#48 0x00007fb68b4efc7d in g_cclosure_marshal_VOID__BOXEDv
(closure=3D0x558bb953fbe0, return_value=3D<optimized out>, instance=3D<opti=
mized
out>, args=3D<optimized out>, marshal_data=3D<optimized out>, n_params=3D<o=
ptimized
out>, param_types=3D0x558bb9540380)
    at ../gobject/gmarshal.c:1686
#49 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb953fbe0,
return_value=3D0x0, instance=3D0x558bb9540b50, args=3D0x7fffa32c91e0, n_par=
ams=3D1,
param_types=3D0x558bb9540380) at ../gobject/gclosure.c:896
#50 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3Dsignal_id@entry=3D=
114,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c91e0) at
../gobject/gsignal.c:3438
#51 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb9540b50,
signal_id=3D114, detail=3D0, var_args=3D0x7fffa32c91e0) at ../gobject/gsign=
al.c:3277
#52 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3D<optimized out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#53 0x00007fb68ab7d42b in _gtk_gesture_set_recognized (gesture=3D0x558bb954=
0b50,
recognized=3D0, sequence=3D0x0) at ../gtk/gtkgesture.c:340
#54 _gtk_gesture_check_recognized (gesture=3Dgesture@entry=3D0x558bb9540b50,
sequence=3Dsequence@entry=3D0x0) at ../gtk/gtkgesture.c:381
--Type <RET> for more, q to quit, c to continue without paging--c
#55 0x00007fb68ab7e1db in gtk_gesture_handle_event (controller=3D0x558bb954=
0b50,
event=3D0x558bb9774ff0, x=3D17.000001907348633, y=3D10) at ../gtk/gtkgestur=
e.c:686
#56 0x00007fb68ab8309e in gtk_gesture_single_handle_event
(controller=3D0x558bb9540b50, event=3D0x558bb9774ff0, x=3D17.00000190734863=
3, y=3D10)
at ../gtk/gtkgesturesingle.c:226
#57 0x00007fb68aca0a46 in gtk_event_controller_handle_event
(controller=3D<optimized out>, event=3D<optimized out>, target=3D<optimized=
 out>,
x=3D<optimized out>, y=3D<optimized out>) at ../gtk/gtkeventcontroller.c:381
#58 gtk_widget_run_controllers (widget=3D0x558bb95454d0, event=3D0x558bb977=
4ff0,
target=3D0x558bb9528fc0, x=3D17.000001907348633, y=3D10, phase=3DGTK_PHASE_=
CAPTURE) at
../gtk/gtkwidget.c:4711
#59 0x00007fb68aca5654 in _gtk_widget_captured_event (widget=3D0x558bb95454=
d0,
event=3D0x558bb9774ff0, target=3D0x558bb9528fc0) at ../gtk/gtkwidget.c:4874
#60 0x00007fb68abbffe6 in gtk_propagate_event_internal (widget=3D0x558bb954=
54d0,
widget@entry=3D0x558bb9528fc0, event=3Devent@entry=3D0x558bb9774ff0,
topmost=3D<optimized out>) at ../gtk/gtkmain.c:1950
#61 0x00007fb68abc014d in gtk_propagate_event
(widget=3Dwidget@entry=3D0x558bb9528fc0, event=3Devent@entry=3D0x558bb9774f=
f0) at
../gtk/gtkmain.c:2032
#62 0x00007fb68abc0ae3 in gtk_main_do_event (event=3D0x558bb9774ff0) at
../gtk/gtkmain.c:1722
#63 0x00007fb68ae2378e in _gdk_marshal_BOOLEAN__POINTERv (closure=3D<optimi=
zed
out>, return_value=3D0x7fffa32c98b0, instance=3D<optimized out>, args=3D<op=
timized
out>, marshal_data=3D<optimized out>, n_params=3D<optimized out>,
param_types=3D0x558bb98ef720)
    at gdk/gdkmarshalers.c:302
#64 0x00007fb68aeb0b99 in gdk_surface_event_marshallerv
(closure=3D0x558bb9ed86f0, return_value=3D0x7fffa32c98b0, instance=3D0x558b=
b98f2d10,
args=3D0x7fffa32c99b0, marshal_data=3D0x0, n_params=3D1, param_types=3D0x55=
8bb98ef720)
at ../gdk/gdksurface.c:470
#65 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb9ed86f0,
return_value=3D0x7fffa32c98b0, instance=3D0x558bb98f2d10, args=3D0x7fffa32c=
99b0,
n_params=3D1, param_types=3D0x558bb98ef720) at ../gobject/gclosure.c:896
#66 0x00007fb68b5013c6 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb98f2d10, signal_id=3Dsignal_id@entry=3D=
296,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c99b0) at
../gobject/gsignal.c:3438
#67 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb98f2d10,
signal_id=3D296, detail=3D0, var_args=3D0x7fffa32c99b0) at ../gobject/gsign=
al.c:3277
#68 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb98f2d10, signal_id=3D<optimized out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#69 0x00007fb68af3d7e7 in gdk_surface_handle_event.isra.0
(event=3Devent@entry=3D0x558bb9774ff0) at ../gdk/gdksurface.c:3100
#70 0x00007fb68ae29f7c in _gdk_event_emit (event=3D0x558bb9774ff0) at
../gdk/gdkevents.c:491
#71 gdk_event_source_dispatch (source=3D<optimized out>, callback=3D<optimi=
zed
out>, user_data=3D<optimized out>) at ../gdk/broadway/gdkeventsource.c:377
#72 0x00007fb68a714638 in g_main_dispatch (context=3D0x558bb945cbb0) at
../glib/gmain.c:3398
#73 g_main_context_dispatch_unlocked (context=3Dcontext@entry=3D0x558bb945c=
bb0) at
../glib/gmain.c:4249
#74 0x00007fb68a716398 in g_main_context_iterate_unlocked
(context=3Dcontext@entry=3D0x558bb945cbb0, block=3Dblock@entry=3D1,
dispatch=3Ddispatch@entry=3D1, self=3D<optimized out>) at ../glib/gmain.c:4=
314
#75 0x00007fb68a716bac in g_main_context_iteration
(context=3Dcontext@entry=3D0x558bb945cbb0, may_block=3Dmay_block@entry=3D1)=
 at
../glib/gmain.c:4379
#76 0x00007fb68a8f8325 in g_application_run
(application=3Dapplication@entry=3D0x558bb943ee30, argc=3Dargc@entry=3D2,
argv=3Dargv@entry=3D0x7fffa32c9db8) at ../gio/gapplication.c:2715
#77 0x0000558b9b069811 in main (argc=3D2, argv=3D0x7fffa32c9db8) at
../src/celluloid-main.c:36
(gdb)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17424050478.77ccC.18651
Date: Wed, 19 Mar 2025 17:24:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239802

          Summary
          gnome 48 testing: celluloid crashing on shutdown

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          GNOME

          Assignee
          gnome-bugs@suse.de

          Reporter
          mrueckert@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          aloisio@gmx.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

(gdb) bt
#0  celluloid_mpv_command_async.isra.0 (mpv=3D0x0, cmd=3D0x7fffa32c74e0) at
../src/celluloid-mpv.c:841
#1  0x0000558b9b06dc79 in celluloid_model_reset_keys (model=3D0x0) at
../src/celluloid-model.c:964
#2  is_active_handler (gobject=3D<optimized out>, pspec=3D<optimiz=
ed out>,
data=3D<optimized out>) at ../src/celluloid-controller.c:565
#3  is_active_handler (gobject=3D<optimized out>, pspec=3D<optimiz=
ed out>,
data=3D<optimized out>) at ../src/celluloid-controller.c:555
#4  0x00007fb68b4ec8f8 in g_closure_invoke (closure=3D0x558bb98d5920,
return_value=3D0x0, n_param_values=3D2, param_values=3D0x7fffa32c76e0,
invocation_hint=3D0x7fffa32c7630) at ../gobject/gclosure.c:833
#5  0x00007fb68b5005d3 in signal_emit_unlocked_R
(node=3Dnode@entry=3D0x7fffa32c77d0, detail=3Ddetail@entry=3D938,
instance=3Dinstance@entry=3D0x558bb959ad10,
emission_return=3Demission_return@entry=3D0x0,
instance_and_params=3Dinstance_and_params@entry=3D0x7fffa32c76e0)
    at ../gobject/gsignal.c:3902
#6  0x00007fb68b501fe9 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@=
entry=3D1,
detail=3Ddetail@entry=3D938, var_args=3Dvar_args@entry=3D0x7fffa32c=
7930) at
../gobject/gsignal.c:3534
#7  0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D1, detail=3D938, var_args=3D0x7fffa32c7930) at ../gobject/gsign=
al.c:3277
#8  0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized =
out>,
detail=3D<optimized out>) at ../gobject/gsignal.c:3597
#9  0x00007fb68b4f09d4 in g_object_dispatch_properties_changed
(object=3D0x558bb959ad10, n_pspecs=3D<optimized out>, pspecs=3D<op=
timized out>) at
../gobject/gobject.c:1827
#10 0x00007fb68b4f466a in g_object_notify_by_spec_internal
(object=3D0x558bb959ad10, pspec=3D0x558bb9511a90) at ../gobject/gobject.c:1=
932
#11 g_object_notify_by_pspec (object=3Dobject@entry=3D0x558bb959ad10,
pspec=3D0x558bb9511a90) at ../gobject/gobject.c:2038
#12 0x00007fb68acbc5da in _gtk_window_set_is_active
(window=3Dwindow@entry=3D0x558bb959ad10, is_active=3Dis_active@entr=
y=3D0) at
../gtk/gtkwindow.c:6052
#13 0x00007fb68acbc628 in gtk_window_unmap (widget=3D0x558bb959ad10) at
../gtk/gtkwindow.c:4047
#14 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb951d3b0,
return_value=3D0x0, instance=3D0x558bb959ad10, args=3D0x7fffa32c7d30, n_par=
ams=3D0,
param_types=3D0x0) at ../gobject/gclosure.c:896
#15 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@=
entry=3D71,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c7d=
30) at
../gobject/gsignal.c:3438
#16 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D71, detail=3D0, var_args=3D0x7fffa32c7d30) at ../gobject/gsigna=
l.c:3277
#17 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized =
out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#18 0x00007fb68ac9effa in gtk_widget_unmap (widget=3D0x558bb959ad10) at
../gtk/gtkwidget.c:2923
#19 gtk_widget_unmap (widget=3D0x558bb959ad10) at ../gtk/gtkwidget.c:2911
#20 0x00007fb68acba449 in gtk_window_hide (widget=3D0x558bb959ad10) at
../gtk/gtkwindow.c:3930
#21 gtk_window_destroy (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:6906
#22 0x0000558b9b06d892 in dispose (object=3D0x558bb954c6e0) at
../src/celluloid-controller.c:385
#23 0x00007fb68b4f2298 in g_object_unref (_object=3D0x558bb954c6e0) at
../gobject/gobject.c:4423
#24 0x00007fb68b514148 in g_value_unset (value=3Dvalue@entry=3D0x7fffa3=
2c7ec0) at
../gobject/gvalue.c:197
#25 0x00007fb68b501a3d in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb954c6e0, signal_id=3Dsignal_id@=
entry=3D62,
detail=3D<optimized out>, var_args=3Dvar_args@entry=3D0x7fffa32c8=
0d8) at
../gobject/gsignal.c:3568
#26 0x00007fb68b507d8e in g_signal_emit_by_name (instance=3D0x558bb954c6e0,
detailed_signal=3Ddetailed_signal@entry=3D0x558b9b0891f5 "shutdown=
") at
../gobject/gsignal.c:3638
#27 0x0000558b9b06bd45 in close_request_handler
(view=3Dview@entry=3D0x558bb959ad10, data=3D<optimized out>) at
../src/celluloid-controller.c:572
#28 0x00007fb68aadac51 in _gtk_marshal_BOOLEAN__VOID (n_param_values=3D<=
optimized
out>, invocation_hint=3D<optimized out>, closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, param_values=3D<optimized out>,
marshal_data=3D<optimized out>)
    at gtk/gtkmarshalers.c:1789
#29 _gtk_marshal_BOOLEAN__VOID (closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, n_param_values=3D<optimized out>,
param_values=3D<optimized out>, invocation_hint=3D<optimized out&g=
t;,
marshal_data=3D<optimized out>) at gtk/gtkmarshalers.c:1760
#30 0x00007fb68b4ec8f8 in g_closure_invoke (closure=3D0x558bb98d59b0,
return_value=3D0x7fffa32c8390, n_param_values=3D1, param_values=3D0x7fffa32=
c8420,
invocation_hint=3D0x7fffa32c8370) at ../gobject/gclosure.c:833
#31 0x00007fb68b5005d3 in signal_emit_unlocked_R
(node=3Dnode@entry=3D0x7fffa32c84f0, detail=3Ddetail@entry=3D0,
instance=3Dinstance@entry=3D0x558bb959ad10,
emission_return=3Demission_return@entry=3D0x7fffa32c8570,=20
    instance_and_params=3Dinstance_and_params@entry=3D0x7fffa32c8420) at
../gobject/gsignal.c:3902
#32 0x00007fb68b5018c9 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3Dsignal_id@=
entry=3D84,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c86=
50) at
../gobject/gsignal.c:3547
#33 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb959ad10,
signal_id=3D84, detail=3D0, var_args=3D0x7fffa32c8650) at ../gobject/gsigna=
l.c:3277
#34 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb959ad10, signal_id=3D<optimized =
out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#35 0x00007fb68acae9c0 in gtk_window_emit_close_request (window=3D0x558bb95=
9ad10)
at ../gtk/gtkwindow.c:3772
#36 gtk_window_close (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:1384
#37 gtk_window_close (window=3D0x558bb959ad10) at ../gtk/gtkwindow.c:1372
#38 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb98ef6a0,
return_value=3D0x0, instance=3D0x558bb95454d0, args=3D0x7fffa32c8a00, n_par=
ams=3D0,
param_types=3D0x0) at ../gobject/gclosure.c:896
#39 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb95454d0, signal_id=3Dsignal_id@=
entry=3D130,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c8a=
00) at
../gobject/gsignal.c:3438
#40 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb95454d0,
signal_id=3D130, detail=3D0, var_args=3D0x7fffa32c8a00) at ../gobject/gsign=
al.c:3277
#41 0x00007fb68b507b7f in g_signal_emit (instance=3D<optimized out>,
signal_id=3D<optimized out>, detail=3D<optimized out>) at ../go=
bject/gsignal.c:3597
#42 0x00007fb68aadcaca in _gtk_marshal_VOID__INT_DOUBLE_DOUBLEv
(closure=3D<optimized out>, return_value=3D<optimized out>, ins=
tance=3D<optimized
out>, args=3D<optimized out>, marshal_data=3D<optimized out>=
, n_params=3D<optimized
out>, param_types=3D0x558bb9542e40)
    at gtk/gtkmarshalers.c:3688
#43 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bba0217c0,
return_value=3D0x0, instance=3D0x558bb9540b50, args=3D0x7fffa32c8db0, n_par=
ams=3D3,
param_types=3D0x558bb9542e40) at ../gobject/gclosure.c:896
#44 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3Dsignal_id@=
entry=3D119,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c8d=
b0) at
../gobject/gsignal.c:3438
#45 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb9540b50,
signal_id=3D119, detail=3D0, var_args=3D0x7fffa32c8db0) at ../gobject/gsign=
al.c:3277
#46 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3D<optimized =
out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#47 0x00007fb68ab7e6e6 in gtk_gesture_click_end (gesture=3D0x558bb9540b50,
sequence=3Dsequence@entry=3D0x0) at ../gtk/gtkgestureclick.c:275
#48 0x00007fb68b4efc7d in g_cclosure_marshal_VOID__BOXEDv
(closure=3D0x558bb953fbe0, return_value=3D<optimized out>, instance=
=3D<optimized
out>, args=3D<optimized out>, marshal_data=3D<optimized out>=
, n_params=3D<optimized
out>, param_types=3D0x558bb9540380)
    at ../gobject/gmarshal.c:1686
#49 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb953fbe0,
return_value=3D0x0, instance=3D0x558bb9540b50, args=3D0x7fffa32c91e0, n_par=
ams=3D1,
param_types=3D0x558bb9540380) at ../gobject/gclosure.c:896
#50 0x00007fb68b502135 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3Dsignal_id@=
entry=3D114,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c91=
e0) at
../gobject/gsignal.c:3438
#51 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb9540b50,
signal_id=3D114, detail=3D0, var_args=3D0x7fffa32c91e0) at ../gobject/gsign=
al.c:3277
#52 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb9540b50, signal_id=3D<optimized =
out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#53 0x00007fb68ab7d42b in _gtk_gesture_set_recognized (gesture=3D0x558bb954=
0b50,
recognized=3D0, sequence=3D0x0) at ../gtk/gtkgesture.c:340
#54 _gtk_gesture_check_recognized (gesture=3Dgesture@entry=3D0x558bb954=
0b50,
sequence=3Dsequence@entry=3D0x0) at ../gtk/gtkgesture.c:381
--Type <RET> for more, q to quit, c to continue without paging--c
#55 0x00007fb68ab7e1db in gtk_gesture_handle_event (controller=3D0x558bb954=
0b50,
event=3D0x558bb9774ff0, x=3D17.000001907348633, y=3D10) at ../gtk/gtkgestur=
e.c:686
#56 0x00007fb68ab8309e in gtk_gesture_single_handle_event
(controller=3D0x558bb9540b50, event=3D0x558bb9774ff0, x=3D17.00000190734863=
3, y=3D10)
at ../gtk/gtkgesturesingle.c:226
#57 0x00007fb68aca0a46 in gtk_event_controller_handle_event
(controller=3D<optimized out>, event=3D<optimized out>, target=
=3D<optimized out>,
x=3D<optimized out>, y=3D<optimized out>) at ../gtk/gtkeventcon=
troller.c:381
#58 gtk_widget_run_controllers (widget=3D0x558bb95454d0, event=3D0x558bb977=
4ff0,
target=3D0x558bb9528fc0, x=3D17.000001907348633, y=3D10, phase=3DGTK_PHASE_=
CAPTURE) at
../gtk/gtkwidget.c:4711
#59 0x00007fb68aca5654 in _gtk_widget_captured_event (widget=3D0x558bb95454=
d0,
event=3D0x558bb9774ff0, target=3D0x558bb9528fc0) at ../gtk/gtkwidget.c:4874
#60 0x00007fb68abbffe6 in gtk_propagate_event_internal (widget=3D0x558bb954=
54d0,
widget@entry=3D0x558bb9528fc0, event=3Devent@entry=3D0x558bb9774ff0,
topmost=3D<optimized out>) at ../gtk/gtkmain.c:1950
#61 0x00007fb68abc014d in gtk_propagate_event
(widget=3Dwidget@entry=3D0x558bb9528fc0, event=3Devent@entry=3D0x55=
8bb9774ff0) at
../gtk/gtkmain.c:2032
#62 0x00007fb68abc0ae3 in gtk_main_do_event (event=3D0x558bb9774ff0) at
../gtk/gtkmain.c:1722
#63 0x00007fb68ae2378e in _gdk_marshal_BOOLEAN__POINTERv (closure=3D<opt=
imized
out>, return_value=3D0x7fffa32c98b0, instance=3D<optimized out>, a=
rgs=3D<optimized
out>, marshal_data=3D<optimized out>, n_params=3D<optimized out=
>,
param_types=3D0x558bb98ef720)
    at gdk/gdkmarshalers.c:302
#64 0x00007fb68aeb0b99 in gdk_surface_event_marshallerv
(closure=3D0x558bb9ed86f0, return_value=3D0x7fffa32c98b0, instance=3D0x558b=
b98f2d10,
args=3D0x7fffa32c99b0, marshal_data=3D0x0, n_params=3D1, param_types=3D0x55=
8bb98ef720)
at ../gdk/gdksurface.c:470
#65 0x00007fb68b4ecb21 in _g_closure_invoke_va (closure=3D0x558bb9ed86f0,
return_value=3D0x7fffa32c98b0, instance=3D0x558bb98f2d10, args=3D0x7fffa32c=
99b0,
n_params=3D1, param_types=3D0x558bb98ef720) at ../gobject/gclosure.c:896
#66 0x00007fb68b5013c6 in signal_emit_valist_unlocked
(instance=3Dinstance@entry=3D0x558bb98f2d10, signal_id=3Dsignal_id@=
entry=3D296,
detail=3Ddetail@entry=3D0, var_args=3Dvar_args@entry=3D0x7fffa32c99=
b0) at
../gobject/gsignal.c:3438
#67 0x00007fb68b507ad2 in g_signal_emit_valist (instance=3D0x558bb98f2d10,
signal_id=3D296, detail=3D0, var_args=3D0x7fffa32c99b0) at ../gobject/gsign=
al.c:3277
#68 0x00007fb68b507b7f in g_signal_emit
(instance=3Dinstance@entry=3D0x558bb98f2d10, signal_id=3D<optimized =
out>,
detail=3Ddetail@entry=3D0) at ../gobject/gsignal.c:3597
#69 0x00007fb68af3d7e7 in gdk_surface_handle_event.isra.0
(event=3Devent@entry=3D0x558bb9774ff0) at ../gdk/gdksurface.c:3100
#70 0x00007fb68ae29f7c in _gdk_event_emit (event=3D0x558bb9774ff0) at
../gdk/gdkevents.c:491
#71 gdk_event_source_dispatch (source=3D<optimized out>, callback=3D&=
lt;optimized
out>, user_data=3D<optimized out>) at ../gdk/broadway/gdkeventsour=
ce.c:377
#72 0x00007fb68a714638 in g_main_dispatch (context=3D0x558bb945cbb0) at
../glib/gmain.c:3398
#73 g_main_context_dispatch_unlocked (context=3Dcontext@entry=3D0x558bb=
945cbb0) at
../glib/gmain.c:4249
#74 0x00007fb68a716398 in g_main_context_iterate_unlocked
(context=3Dcontext@entry=3D0x558bb945cbb0, block=3Dblock@entry=3D1,
dispatch=3Ddispatch@entry=3D1, self=3D<optimized out>) at ../glib=
/gmain.c:4314
#75 0x00007fb68a716bac in g_main_context_iteration
(context=3Dcontext@entry=3D0x558bb945cbb0, may_block=3Dmay_block@en=
try=3D1) at
../glib/gmain.c:4379
#76 0x00007fb68a8f8325 in g_application_run
(application=3Dapplication@entry=3D0x558bb943ee30, argc=3Dargc@entr=
y=3D2,
argv=3Dargv@entry=3D0x7fffa32c9db8) at ../gio/gapplication.c:2715
#77 0x0000558b9b069811 in main (argc=3D2, argv=3D0x7fffa32c9db8) at
../src/celluloid-main.c:36
(gdb)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17424050478.77ccC.18651--


body:
t/537.36 (KHTML,
like Gecko) Chrome/134.0.0.0 Safari/537.36
Build Identifier:=20

I have a LENOVO V14 G4 AMN laptop with a Realtek 8852BE network card, it do=
es
not detect the 5 Ghz SSIDs.

On Feb 11, 2025, there was an update wifi card firmware that landed into the
upstream Linux firmware. And I would like to know if it can be included in =
Aeon

Reproducible: Always

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17424099392.c087.18780--

summary: Unable to get 5GHz WiFi working in Realtek 8822CE.


body:
--17424561612.ef4F.19272
Date: Thu, 20 Mar 2025 07:36:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239816

            Bug ID: 1239816
           Summary: SSH Agent not running after startup
    Classification: openSUSE
           Product: openSUSE Aeon
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Base
          Assignee: rbrown-at-suse.com
          Reporter: lorenzholzbauer-at-ikmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The ssh agent is not being run after boot. This means that the $SSH_AUTH_SO=
CK
variable is not set. It is happening since snapshot 2025-03-20, the GNOME 48
Update. Not having the $SSH_AUTH_SOCK variable set means that KeepassXC can=
't
add SSH keys to the agent.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17424561612.ef4F.19272
Date: Thu, 20 Mar 2025 07:36:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239816

          Summary
          SSH Agent not running after startup

          Classification
          openSUSE

          Product
          openSUSE Aeon

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Base

          Assignee
          rbrown@suse.com

          Reporter
          lorenzholzbauer@ikmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The ssh agent is not being run after boot. This means that t=
he $SSH_AUTH_SOCK
variable is not set. It is happening since snapshot 2025-03-20, the GNOME 48
Update. Not having the $SSH_AUTH_SOCK variable set means that KeepassXC can=
't
add SSH keys to the agent.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17424561612.ef4F.19272--

summary: SSH Agent not running after startup


body:
Gecko/20100101
Firefox/136.0
Build Identifier:=20

I am reinstalling Aeon on my desktop machine. I think I use the 20250318
snapshot, which I wrote to a USB stick using Impression. During the
installation, shortly after the image is deployed, I get an error message t=
hat
says "/usr/bin/chroot /var/lib/tik/encrypt/mnt sdbootutil -vv --esp-pa=
th
/boot/efi --no-variables install", and the installation terminates.=20

Reproducible: Always

Steps to Reproduce:
install the image
Actual Results:=20=20
An error pops out, the whole process terminates, and the system shuts down.

Expected Results:=20=20
Installation succeeds.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17424919102.CCdDC1.21945--

summary: Installation Error after deploying an OS image


body:
--17425429941.Dcf105AD8.22650
Date: Fri, 21 Mar 2025 07:43:14 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239877

            Bug ID: 1239877
           Summary: broken rpm provides in bcm43xx-firmware
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

TW 20250318 ; zypper --no-refresh info --provides bcm43xx-firmware
....
    firmware(brcm/brcmfmac4356-pcie.txt)
    model-zero-2-w.bin)
    vega-s95-telos.txt)
    bcm43xx-firmware =3D 20180314-16.5
...

I guess only 'firmware(something)' should be provided.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17425429941.Dcf105AD8.22650
Date: Fri, 21 Mar 2025 07:43:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239877

          Summary
          broken rpm provides in bcm43xx-firmware

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ohering@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

TW 20250318 ; zypper --no-refresh info --provides bcm43xx-fi=
rmware
....
    firmware(brcm/brcmfmac4356-pcie.txt)
    model-zero-2-w.bin)
    vega-s95-telos.txt)
    bcm43xx-firmware =3D 20180314-16.5
...

I guess only 'firmware(something)' should be provided.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17425429941.Dcf105AD8.22650--

summary: broken rpm provides in bcm43xx-firmware


--17425574802.5EB735F.23319
Date: Fri, 21 Mar 2025 11:44:40 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239892

            Bug ID: 1239892
           Summary: VUL-0: CVE-2025-30346: varnish: client-side desynchronization when handling certain malformed HTTP/1 requests
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/446294/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow
client-side desync via HTTP/1 requests.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-30346
https://bugzilla.redhat.com/show_bug.cgi?id=3D2354008
https://www.cve.org/CVERecord?id=3DCVE-2025-30346
https://varnish-cache.org/security/VSV00015.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17425574802.5EB735F.23319
Date: Fri, 21 Mar 2025 11:44:40 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239892

          Summary
          VUL-0: CVE-2025-30346: varnish: client-side desynchronization=
 when handling certain malformed HTTP/1 requests

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/446294/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jengelh@inai.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0=
.13r10 allow
client-side desync via HTTP/1 requests.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-30346
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2354008
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-30346
https://varnis=
h-cache.org/security/VSV00015.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17425574802.5EB735F.23319--


--17425820495.11BA673.24215
Date: Fri, 21 Mar 2025 18:34:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239917

            Bug ID: 1239917
           Summary: VUL-0: CVE-2025-2592: doomsday: assimp: InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/446323/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com, security-team-at-suse.de
            Blocks: 1239913
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1239913 +++

A vulnerability, which was classified as critical, has been found in Open A=
sset
Import Library Assimp 5.4.3. This issue affects the function
CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The
manipulation leads to heap-based buffer overflow. The attack may be initiat=
ed
remotely. The exploit has been disclosed to the public and may be used. The
patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended =
to
apply a patch to fix this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2592
https://www.cve.org/CVERecord?id=3DCVE-2025-2592
https://github.com/assimp/assimp/commit/2690e354da0c681db000cfd892a55226788=
f2743
https://github.com/assimp/assimp/issues/6010
https://github.com/assimp/assimp/issues/6010#issue-2877368110
https://github.com/assimp/assimp/pull/6052
https://vuldb.com/?ctiid.300575
https://vuldb.com/?id.300575
https://vuldb.com/?submit.517782
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/2xxx/CVE-2025-=
2592.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17425820495.11BA673.24215
Date: Fri, 21 Mar 2025 18:34:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239917

          Summary
          VUL-0: CVE-2025-2592: doomsday: assimp: InternReadFile of the=
 file code/AssetLib/CSM/CSMLoader.cpp

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/446323/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          jengelh@inai.de

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com, security-team@suse.de

          Blocks
          1239913

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1239913 +++

A vulnerability, which was classified as critical, has been found in Open A=
sset
Import Library Assimp 5.4.3. This issue affects the function
CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The
manipulation leads to heap-based buffer overflow. The attack may be initiat=
ed
remotely. The exploit has been disclosed to the public and may be used. The
patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended =
to
apply a patch to fix this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2592
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-2592
https://github.com/assimp/assimp/commit/2690e354da0c681db=
000cfd892a55226788f2743
https://github.com=
/assimp/assimp/issues/6010
h=
ttps://github.com/assimp/assimp/issues/6010#issue-2877368110
https://github.com/a=
ssimp/assimp/pull/6052
https://vuldb.com/?ctiid.300575=

https://vuldb.com/?id.300575
https://vuldb.com/?submit.5177=
82
https://github.com/CVEProject/cvelistV5/blob/main//cv=
es/2025/2xxx/CVE-2025-2592.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17425820495.11BA673.24215--


--17426062551.21cA.24515
Date: Sat, 22 Mar 2025 01:17:35 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239926

            Bug ID: 1239926
           Summary: GNU Emacs 30.1-2.1: loading theme has side effects
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: felix-at-dumbeck.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I start Emacs with `emacs -q`
then evaluate `(load-theme 'modus-operandi-tinted)` and `(delete-selection-=
mode
t)`. When i now select text and type something the text is overwritten as
expected. When i evaluate the load theme function again, the text will no
longer be overwritten, by typing while it is selected.

This does not occur when I just do `./configure --with-xpm=3Difavailable`, =
`make`
and `./src/emacs -q` in the .tar.gz, included in the package.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17426062551.21cA.24515
Date: Sat, 22 Mar 2025 01:17:35 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239926

          Summary
          GNU Emacs 30.1-2.1: loading theme has side effects

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          felix@dumbeck.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I start Emacs with `emacs -q`
then evaluate `(load-theme 'modus-operandi-tinted)` and `(delete-selection-=
mode
t)`. When i now select text and type something the text is overwritten as
expected. When i evaluate the load theme function again, the text will no
longer be overwritten, by typing while it is selected.

This does not occur when I just do `./configure --with-xpm=3Difavailable`, =
`make`
and `./src/emacs -q` in the .tar.gz, included in the package.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17426062551.21cA.24515--


--17426067962.3eb71.24518
Date: Sat, 22 Mar 2025 01:26:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239927

            Bug ID: 1239927
           Summary: GNU Emacs 30.1-2.1: multi line copying doesn't work with system clipboard
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: felix-at-dumbeck.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I start emacs with `emacs -q`, select multiple lines from the splash screen=
 and
save them to the kill-ring with `M-w`. I can see they correctly appear in t=
he
kill-ring, but when I inspect my system clipboard (KDE plasma wayland), (wi=
th
windows key+v) i can see they a new entry has been added, that is empty.

If i do the same thing with a self compiled emacs (using the .tar.gz includ=
ed
in the package): `./configure --with-xpm=3Difavailable`, `make` and `./src/=
emacs
-q` in the .tar.gz, The multi line copy appears correctly in the system
clipboard.

Also when saving a multi-line section, collapsed to a single line e.g. an
org-mode source block, it shows up in the system clipboard correctly.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17426067962.3eb71.24518
Date: Sat, 22 Mar 2025 01:26:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239927

          Summary
          GNU Emacs 30.1-2.1: multi line copying doesn't work with syst=
em clipboard

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          felix@dumbeck.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I start emacs with `emacs -q`, select multiple lines from th=
e splash screen and
save them to the kill-ring with `M-w`. I can see they correctly appear in t=
he
kill-ring, but when I inspect my system clipboard (KDE plasma wayland), (wi=
th
windows key+v) i can see they a new entry has been added, that is empty.

If i do the same thing with a self compiled emacs (using the .tar.gz includ=
ed
in the package): `./configure --with-xpm=3Difavailable`, `make` and `./src/=
emacs
-q` in the .tar.gz, The multi line copy appears correctly in the system
clipboard.

Also when saving a multi-line section, collapsed to a single line e.g. an
org-mode source block, it shows up in the system clipboard correctly.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17426067962.3eb71.24518--


--17428010460.3e21BeE57.25374
Date: Mon, 24 Mar 2025 07:24:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239972

            Bug ID: 1239972
           Summary: network:messaging:xmpp/dino: Lot's of vertical whitespace at beginning of each message
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: jubalh-at-iodoru.org
          Reporter: sebix+novell.com-at-sebix.at
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 881235
  --> https://bugzilla.suse.com/attachment.cgi?id=3D881235&action=3Dedit
Screenshot of a dino message

At the top of each message shown in dino, there are about 100px vertical
whitespace between the beginning of the message (header) and the content/te=
xt
of the message. In some chats it's even about 1000px (spanning the whole
vertical screen size).

I'm now on 20250321, but the problem first appeared with an update a few da=
ys
earlier.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428010460.3e21BeE57.25374
Date: Mon, 24 Mar 2025 07:24:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239972

          Summary
          network:messaging:xmpp/dino: Lot's of vertical whitespace at =
beginning of each message

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          jubalh@iodoru.org

          Reporter
          sebix+novell.com@sebix.at

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachmen=
t 881235 [details]
Screenshot of a dino message

At the top of each message shown in dino, there are about 100px vertical
whitespace between the beginning of the message (header) and the content/te=
xt
of the message. In some chats it's even about 1000px (spanning the whole
vertical screen size).

I'm now on 20250321, but the problem first appeared with an update a few da=
ys
earlier.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428010460.3e21BeE57.25374--


body:
--17428199430.97c3642.26121
Date: Mon, 24 Mar 2025 12:39:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239982

            Bug ID: 1239982
           Summary: Disable gnu-hpc builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: nicolas.morey-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

SLFO will not have an HPC product.
Therefore, disable all gnu-hpc build flavours from the various mpi and
following packages as they are not needed anymore.

gnu-hpc specific code in spec file is kept for now just in case some packag=
es
needs to be brought back.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428199430.97c3642.26121
Date: Mon, 24 Mar 2025 12:39:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239982

          Summary
          Disable gnu-hpc builds

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          nicolas.morey@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

SLFO will not have an HPC product.
Therefore, disable all gnu-hpc build flavours from the various mpi and
following packages as they are not needed anymore.

gnu-hpc specific code in spec file is kept for now just in case some packag=
es
needs to be brought back.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428199430.97c3642.26121--

summary: Disable gnu-hpc builds


--17428296312.2903F24ac.26589
Date: Mon, 24 Mar 2025 15:20:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239992

            Bug ID: 1239992
           Summary: btrfsprogs btrfs-find-root command doesn't exist unless debug package installed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Filesystems
          Assignee: kernel-fs-at-suse.de
          Reporter: ilgaz-at-ilgaz.gen.tr
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Existing in btrfsprogs package, btrfs-find-root is a very important package=
 for
btrfs file system corruption workarounds since it finds all the root file
system generations on a volume with sector numbers. Under openSUSE tumblewe=
ed,
it is nowhere to be found in a normal installation. It was somehow decided =
to
include it _only_ with the *debug variation the package.
It should be installed regularly like the other parts of btrfsprogs.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428296312.2903F24ac.26589
Date: Mon, 24 Mar 2025 15:20:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239992

          Summary
          btrfsprogs btrfs-find-root command doesn't exist unless debug=
 package installed

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Filesystems

          Assignee
          kernel-fs@suse.de

          Reporter
          ilgaz@ilgaz.gen.tr

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Existing in btrfsprogs package, btrfs-find-root is a very im=
portant package for
btrfs file system corruption workarounds since it finds all the root file
system generations on a volume with sector numbers. Under openSUSE tumblewe=
ed,
it is nowhere to be found in a normal installation. It was somehow decided =
to
include it _only_ with the *debug variation the package.
It should be installed regularly like the other parts of btrfsprogs.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428296312.2903F24ac.26589--


--17428448402.f25a.27069
Date: Mon, 24 Mar 2025 19:34:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1239998

            Bug ID: 1239998
           Summary: nginx-module-vts: remove unused pcre-devel build dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: jengelh-at-inai.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

nginx-module-vts.spec contains:=20
BuildRequires:  pcre-devel

This does not seem to be needed. Can you remove it?

Context:
https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/thread/=
BK3SPPFOM3LI6K5PTXPKZMKMIUIPOEXS/
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428448402.f25a.27069
Date: Mon, 24 Mar 2025 19:34:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1239998

          Summary
          nginx-module-vts: remove unused pcre-devel build dependency

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Other

          Assignee
          jengelh@inai.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

nginx-module-vts.spec contains:=20
BuildRequires:  pcre-devel

This does not seem to be needed. Can you remove it?

Context:
https://lists.opensuse.or=
g/archives/list/factory@lists.opensuse.org/thread/BK3SPPFOM3LI6K5PTXPKZ=
MKMIUIPOEXS/

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428448402.f25a.27069--


--17428961370.5Dacf.27837
Date: Tue, 25 Mar 2025 09:48:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240014

            Bug ID: 1240014
           Summary: VUL-0: CVE-2025-2750: assimp: A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp:CSMImporter:InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the compo ...
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/446711/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: christophe-at-krop.fr
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A vulnerability, which was classified as critical, was found in Open Asset
Import Library Assimp 5.4.3. This affects the function
Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader=
.cpp
of the component CSM File Handler. The manipulation leads to out-of-bounds
write. It is possible to initiate the attack remotely. The exploit has been
disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2750
https://www.cve.org/CVERecord?id=3DCVE-2025-2750
https://github.com/assimp/assimp/issues/6011
https://github.com/assimp/assimp/issues/6011#issue-2877369004
https://vuldb.com/?ctiid.300855
https://vuldb.com/?id.300855
https://vuldb.com/?submit.517783
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428961370.5Dacf.27837
Date: Tue, 25 Mar 2025 09:48:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240014

          Summary
          VUL-0: CVE-2025-2750: assimp: A vulnerability, which was clas=
sified as critical, was found in Open Asset Import Library Assimp 5.4.3. Th=
is affects the function Assimp:CSMImporter:InternReadFile of the file code/=
AssetLib/CSM/CSMLoader.cpp of the compo ...

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/446711/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          christophe@krop.fr

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A vulnerability, which was classified as critical, was found=
 in Open Asset
Import Library Assimp 5.4.3. This affects the function
Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader=
.cpp
of the component CSM File Handler. The manipulation leads to out-of-bounds
write. It is possible to initiate the attack remotely. The exploit has been
disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2750
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-2750
https://github.com=
/assimp/assimp/issues/6011
h=
ttps://github.com/assimp/assimp/issues/6011#issue-2877369004
https://vuldb.com/?ctiid.300855=

https://vuldb.com/?id.300855
https://vuldb.com/?submit.5177=
83

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428961370.5Dacf.27837--


--17428962140.a01ec6b2c.27846
Date: Tue, 25 Mar 2025 09:50:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240016

            Bug ID: 1240016
           Summary: VUL-0: CVE-2025-2751: assimp: A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp:CSMImporter:InternReadFile of the file code/AssetLib/CSM/CSMLoader.cp ...
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/446712/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: christophe-at-krop.fr
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and
classified as problematic. This vulnerability affects the function
Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader=
.cpp
of the component CSM File Handler. The manipulation of the argument na lead=
s to
out-of-bounds read. The attack can be initiated remotely. The exploit has b=
een
disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2751
https://www.cve.org/CVERecord?id=3DCVE-2025-2751
https://github.com/assimp/assimp/issues/6012
https://github.com/assimp/assimp/issues/6012#issue-2877369817
https://vuldb.com/?ctiid.300856
https://vuldb.com/?id.300856
https://vuldb.com/?submit.517785
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428962140.a01ec6b2c.27846
Date: Tue, 25 Mar 2025 09:50:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240016

          Summary
          VUL-0: CVE-2025-2751: assimp: A vulnerability has been found =
in Open Asset Import Library Assimp 5.4.3 and classified as problematic. Th=
is vulnerability affects the function Assimp:CSMImporter:InternReadFile of =
the file code/AssetLib/CSM/CSMLoader.cp ...

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/446712/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          christophe@krop.fr

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A vulnerability has been found in Open Asset Import Library =
Assimp 5.4.3 and
classified as problematic. This vulnerability affects the function
Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader=
.cpp
of the component CSM File Handler. The manipulation of the argument na lead=
s to
out-of-bounds read. The attack can be initiated remotely. The exploit has b=
een
disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2751
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-2751
https://github.com=
/assimp/assimp/issues/6012
h=
ttps://github.com/assimp/assimp/issues/6012#issue-2877369817
https://vuldb.com/?ctiid.300856=

https://vuldb.com/?id.300856
https://vuldb.com/?submit.5177=
85

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428962140.a01ec6b2c.27846--


body:
--17428973693.DbbEdfFA.27915
Date: Tue, 25 Mar 2025 10:09:29 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240022

            Bug ID: 1240022
           Summary: chromium 134.0.6998.165 released
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

no CVE listed yet
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17428973693.DbbEdfFA.27915
Date: Tue, 25 Mar 2025 10:09:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240022

          Summary
          chromium 134.0.6998.165 released

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ro@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

no CVE listed yet

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17428973693.DbbEdfFA.27915--

summary: chromium 134.0.6998.165 released


--17429009030.3483fbC3.28059
Date: Tue, 25 Mar 2025 11:08:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240027

            Bug ID: 1240027
           Summary: VUL-0: CVE-2025-2757: assimp: This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD ...
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/446725/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: christophe-at-krop.fr
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A vulnerability classified as critical was found in Open Asset Import Libra=
ry
Assimp 5.4.3. This vulnerability affects the function
AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cp=
p of
the component MD5 File Handler. The manipulation of the argument data leads=
 to
heap-based buffer overflow. The attack can be initiated remotely. The explo=
it
has been disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2757
https://www.cve.org/CVERecord?id=3DCVE-2025-2757
https://github.com/assimp/assimp/issues/6019
https://github.com/assimp/assimp/issues/6019#issue-2877376386
https://vuldb.com/?ctiid.300862
https://vuldb.com/?id.300862
https://vuldb.com/?submit.517817
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17429009030.3483fbC3.28059
Date: Tue, 25 Mar 2025 11:08:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240027

          Summary
          VUL-0: CVE-2025-2757: assimp: This vulnerability affects the =
function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5=
Parser.cpp of the component MD ...

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/446725/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          christophe@krop.fr

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A vulnerability classified as critical was found in Open Ass=
et Import Library
Assimp 5.4.3. This vulnerability affects the function
AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cp=
p of
the component MD5 File Handler. The manipulation of the argument data leads=
 to
heap-based buffer overflow. The attack can be initiated remotely. The explo=
it
has been disclosed to the public and may be used.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2757
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-2757
https://github.com=
/assimp/assimp/issues/6019
h=
ttps://github.com/assimp/assimp/issues/6019#issue-2877376386
https://vuldb.com/?ctiid.300862=

https://vuldb.com/?id.300862
https://vuldb.com/?submit.5178=
17

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17429009030.3483fbC3.28059--


--17429127121.a8b1A.28473
Date: Tue, 25 Mar 2025 14:25:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240043

            Bug ID: 1240043
           Summary: [Build 20250324] openQA test fails in gdal
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4948409/modules/gdal
                    /steps/17
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

gdal failed to rebuild, resuling in the package no longer being installable
after hdf5 changed soname

[   40s] CMake Error at /usr/lib64/cmake/zstd/zstdTargets.cmake:107 (messag=
e):
[   40s]   The imported target "zstd::libzstd_static" references the file
[   40s]=20
[   40s]      "/usr/lib64/libzstd.a"
[   40s]=20
[   40s]   but this file does not exist.  Possible reasons include:
[   40s]=20
[   40s]   * The file was deleted, renamed, or moved to another location.
[   40s]=20
[   40s]   * An install or uninstall procedure did not complete successfull=
y.
[   40s]=20
[   40s]   * The installation package was faulty and contained
[   40s]=20
[   40s]      "/usr/lib64/cmake/zstd/zstdTargets.cmake"
[   40s]=20
[   40s]   but not all the files it references.
[   40s]=20
[   40s] Call Stack (most recent call first):
[   40s]   /usr/lib64/cmake/zstd/zstdConfig.cmake:42 (include)
[   40s]   cmake/helpers/CheckDependentLibrariesCommon.cmake:141 (find_pack=
age)
[   40s]   cmake/helpers/CheckDependentLibraries.cmake:160 (gdal_check_pack=
age)
[   40s]   gdal.cmake:69 (include)
[   40s]   CMakeLists.txt:225 (include)

The relevant change comes from the zstd package, switching to cmake.

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_textmode@64bit fails in
[gdal](https://openqa.opensuse.org/tests/4948409/modules/gdal/steps/17)

## Test suite description
Maintainer: slindomansilla-at-suse.de.
Mainly post-installation console extra tests.

## Reproducible

Fails since (at least) Build
[20240702](https://openqa.opensuse.org/tests/4315747)

## Expected result

Last good: [20240611](https://openqa.opensuse.org/tests/4267371) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dextra_tests_textmode&version=3DT=
umbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17429127121.a8b1A.28473
Date: Tue, 25 Mar 2025 14:25:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240043

          Summary
          [Build 20250324] openQA test fails in gdal

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4948409/modules/gdal/steps/=
17

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

gdal failed to rebuild, resuling in the package no longer being installable
after hdf5 changed soname

[   40s] CMake Error at /usr/lib64/cmake/zstd/zstdTargets.cmake:107 (messag=
e):
[   40s]   The imported target "zstd::libzstd_static" references =
the file
[   40s]=20
[   40s]      "/usr/lib64/libzstd.a"
[   40s]=20
[   40s]   but this file does not exist.  Possible reasons include:
[   40s]=20
[   40s]   * The file was deleted, renamed, or moved to another location.
[   40s]=20
[   40s]   * An install or uninstall procedure did not complete successfull=
y.
[   40s]=20
[   40s]   * The installation package was faulty and contained
[   40s]=20
[   40s]      "/usr/lib64/cmake/zstd/zstdTargets.cmake"
[   40s]=20
[   40s]   but not all the files it references.
[   40s]=20
[   40s] Call Stack (most recent call first):
[   40s]   /usr/lib64/cmake/zstd/zstdConfig.cmake:42 (include)
[   40s]   cmake/helpers/CheckDependentLibrariesCommon.cmake:141 (find_pack=
age)
[   40s]   cmake/helpers/CheckDependentLibraries.cmake:160 (gdal_check_pack=
age)
[   40s]   gdal.cmake:69 (include)
[   40s]   CMakeLists.txt:225 (include)

The relevant change comes from the zstd package, switching to cmake.

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_textmode@64bit fails in
[gdal](https://openqa.opensuse.org/tests/4948409/modules/gdal/steps/17)

## Test suite description
Maintainer: slindomansilla&#6=
4;suse.de.
Mainly post-installation console extra tests.

## Reproducible

Fails since (at least) Build
[20240702](https://op=
enqa.opensuse.org/tests/4315747)

## Expected result

Last good: [20240611](https://openqa.opensuse.org/tests/4267371) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests=
/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D=
64bit&test=3Dextra_tests_textmode&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17429127121.a8b1A.28473--


--17429162902.BF4c.28625
Date: Tue, 25 Mar 2025 15:24:50 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240047

            Bug ID: 1240047
           Summary: gdb suggests user to use yum to install missing separate debuginfo
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tdevries-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

With 15.2 based package on tumbleweed:
...
$ sleep 1000&
[1] 10429
$ kill -SIGABRT 10429
$ ls core.*
core.sleep.10429.6a709f42a6b1.1742914534
$ gdb -q --core=3Dcore.sleep.10429.6a709f42a6b1.1742914534=20
[New LWP 10429]
Missing separate debuginfo for the main executable file.
Try: yum --enablerepo=3D'*debug*' install
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c2
Core was generated by `sleep 1000'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f04a22ff837 in ?? ()
(gdb)=20
...

In contrast, with 14.2 based package on Leap 15.6:
...
$ sleep 10000 &
[1] 9452
$ kill -SIGABRT 9452
[1]+  Aborted                 (core dumped) sleep 10000
$ ls core.*
core.sleep.9452.xerxes.1742912733
$ gdb --core=3Dcore.sleep.9452.xerxes.1742912733
[New LWP 9452]
Missing separate debuginfo for the main executable file.
The debuginfo package for this file is probably broken.
Core was generated by `sleep 10000'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f355faf1503 in ?? ()
(gdb)=20
...

This relevant feature is finding packages from a build id, which fedora doe=
s by
calling dnf.

Zypper has comparable functionality:
...
$ zypper search -f
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c=20=20=20=
=20=20=20
Loading repository data...
Reading installed packages...

S  | Name                | Summary                                 | Type
---+---------------------+-----------------------------------------+--------
i+ | coreutils-debuginfo | Debug information for package coreutils | package
...
just that it only works if it's already installed.

After "zypper rm coreutils-debuginfo" we get:
...
$ zypper search -f
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c
Loading repository data...
Reading installed packages...
No matching items found.
...
so, this doesn't work when we need it.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17429162902.BF4c.28625
Date: Tue, 25 Mar 2025 15:24:50 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240047

          Summary
          gdb suggests user to use yum to install missing separate debu=
ginfo

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          tdevries@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

With 15.2 based package on tumbleweed:
...
$ sleep 1000&
[1] 10429
$ kill -SIGABRT 10429
$ ls core.*
core.sleep.10429.6a709f42a6b1.1742914534
$ gdb -q --core=3Dcore.sleep.10429.6a709f42a6b1.1742914534=20
[New LWP 10429]
Missing separate debuginfo for the main executable file.
Try: yum --enablerepo=3D'*debug*' install
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c2
Core was generated by `sleep 1000'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f04a22ff837 in ?? ()
(gdb)=20
...

In contrast, with 14.2 based package on Leap 15.6:
...
$ sleep 10000 &
[1] 9452
$ kill -SIGABRT 9452
[1]+  Aborted                 (core dumped) sleep 10000
$ ls core.*
core.sleep.9452.xerxes.1742912733
$ gdb --core=3Dcore.sleep.9452.xerxes.1742912733
[New LWP 9452]
Missing separate debuginfo for the main executable file.
The debuginfo package for this file is probably broken.
Core was generated by `sleep 10000'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f355faf1503 in ?? ()
(gdb)=20
...

This relevant feature is finding packages from a build id, which fedora doe=
s by
calling dnf.

Zypper has comparable functionality:
...
$ zypper search -f
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c=20=20=20=
=20=20=20
Loading repository data...
Reading installed packages...

S  | Name                | Summary                                 | Type
---+---------------------+-----------------------------------------+--------
i+ | coreutils-debuginfo | Debug information for package coreutils | package
...
just that it only works if it's already installed.

After "zypper rm coreutils-debuginfo" we get:
...
$ zypper search -f
/usr/lib/debug/.build-id/bd/c3d1c138bd2b393771eb6d4f5920a41e36f7c
Loading repository data...
Reading installed packages...
No matching items found.
...
so, this doesn't work when we need it.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17429162902.BF4c.28625--


--17429780581.b9B0.1367
Date: Wed, 26 Mar 2025 08:34:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240084

            Bug ID: 1240084
           Summary: VUL-0: CVE-2025-2783: chromium: Incorrect handle
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in Chromium 134.0.6998.177:

CVE-2025-2783: Incorrect handle provided in unspecified circumstances in Mo=
jo
on Windows.
[...]
Google is aware of reports that an exploit for CVE-2025-2783 exists in the
wild.

This issue does not affect openSUSE.

References:
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-des=
ktop_25.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17429780581.b9B0.1367
Date: Wed, 26 Mar 2025 08:34:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240084

          Summary
          VUL-0: CVE-2025-2783: chromium: Incorrect handle

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          security-team@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in Chromium 134.0.6998.177:

CVE-2025-2783: Incorrect handle provided in unspecified circumstances in Mo=
jo
on Windows.
[...]
Google is aware of reports that an exploit for CVE-2025-2783 exists in the
wild.

This issue does not affect openSUSE.

References:
https://chromereleases.googleblog.com/2025/03/stab=
le-channel-update-for-desktop_25.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17429780581.b9B0.1367--


body:
--17430883730.8bB943.4966
Date: Thu, 27 Mar 2025 15:12:53 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240166

            Bug ID: 1240166
           Summary: nginx installs an error page to /srv
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rein+suse-at-purelymail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

nginx currently uses /srv/www/htdocs as a default webroot

This is fine but it also installs its default html pages (currently only
50x.html) there.

Packages shouldn't install any files into /srv, it's against the FHS.

I am curious if it would be possible to move 50x.html to /usr/share/nginx/h=
tml
or not installing it at all, while keeping the default webroot at
/srv/www/htdocs and not breaking existing installations.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17430883730.8bB943.4966
Date: Thu, 27 Mar 2025 15:12:53 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240166

          Summary
          nginx installs an error page to /srv

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          rein+suse@purelymail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

nginx currently uses /srv/www/htdocs as a default webroot

This is fine but it also installs its default html pages (currently only
50x.html) there.

Packages shouldn't install any files into /srv, it's against the FHS.

I am curious if it would be possible to move 50x.html to /usr/share/nginx/h=
tml
or not installing it at all, while keeping the default webroot at
/srv/www/htdocs and not breaking existing installations.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17430883730.8bB943.4966--

summary: nginx installs an error page to /srv


--17431518031.DBBae0.5980
Date: Fri, 28 Mar 2025 08:50:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1240236

            Bug ID: 1240236
           Summary: VUL-0: CVE-2025-2849: upx: UPX p_lx_elf.cpp un_DT_INIT heap-based overflow
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/447180/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A vulnerability, which was classified as problematic, was found in UPX up to
5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of the file
src/p_lx_elf.cpp. The manipulation leads to heap-based buffer overflow. It =
is
possible to launch the attack on the local host. The exploit has been discl=
osed
to the public and may be used. The patch is identified as
e0b6ff192412f5bb5364c1948f4f6b27a0cd5ea2. It is recommended to apply a patc=
h to
fix this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2849
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/2xxx/CVE-2025-=
2849.json
https://www.cve.org/CVERecord?id=3DCVE-2025-2849
https://github.com/upx/upx/commit/e0b6ff192412f5bb5364c1948f4f6b27a0cd5ea2
https://github.com/upx/upx/issues/898
https://github.com/upx/upx/issues/898#issuecomment-2734082143
https://github.com/user-attachments/files/19307868/input.zip
https://vuldb.com/?ctiid.301494
https://vuldb.com/?id.301494
https://vuldb.com/?submit.522371
https://bugzilla.redhat.com/show_bug.cgi?id=3D2355330
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17431518031.DBBae0.5980
Date: Fri, 28 Mar 2025 08:50:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1240236

          Summary
          VUL-0: CVE-2025-2849: upx: UPX p_lx_elf.cpp un_DT_INIT heap-b=
ased overflow

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/447180/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jengelh@inai.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A vulnerability, which was classified as problematic, was fo=
und in UPX up to
5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of the file
src/p_lx_elf.cpp. The manipulation leads to heap-based buffer overflow. It =
is
possible to launch the attack on the local host. The exploit has been discl=
osed
to the public and may be used. The patch is identified as
e0b6ff192412f5bb5364c1948f4f6b27a0cd5ea2. It is recommended to apply a patc=
h to
fix this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-2849
https://github.com/CVEProject/cvelistV5/blob/main//cv=
es/2025/2xxx/CVE-2025-2849.json
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-2849
https://github.com/upx/upx/commit/e0b6ff192412f5bb5364c1948f4f6=
b27a0cd5ea2
https://github.com/upx/up=
x/issues/898
h=
ttps://github.com/upx/upx/issues/898#issuecomment-2734082143
ht=
tps://github.com/user-attachments/files/19307868/input.zip
https://vuldb.com/?ctiid.301494=

https://vuldb.com/?id.301494
https://vuldb.com/?submit.5223=
71
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2355330

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17431518031.DBBae0.5980--