May 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1189946] New: [trackerbug] Ancient patch cleanup
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189946 Bug ID: 1189946 Summary: [trackerbug] Ancient patch cleanup Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: jeffm(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jeffm(a)suse.com, mkubecek(a)suse.com Found By: --- Blocker: --- This is the tracker bug for cleaning up old patches in the master branch. -- You are receiving this mail because: You are on the CC list for the bug.

1 27

[Bug 1189976] New: cleanup: remove or document patches.suse/dm-mpath-no-partitions-feature
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189976 Bug ID: 1189976 Summary: cleanup: remove or document patches.suse/dm-mpath-no-partitions-feature Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: jeffm(a)suse.com Reporter: jeffm(a)suse.com QA Contact: jeffm(a)suse.com Blocks: 1189946 Found By: --- Blocker: --- This is an automated report to queue a potentially obsolete patch for removal. The patch patches.suse/dm-mpath-no-partitions-feature will be removed from the master branch in 30 days if the assignee does not remove it before then. Alternatively, the assignee may update the patch tags and this report to indicate what efforts are being made to land the patch in the upstream kernel or to justify why it should require ongoing maintenance effort. Thank you for your cooperation. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1189965] New: cleanup: remove or document patches.suse/suse-hv-guest-os-id.patch
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189965 Bug ID: 1189965 Summary: cleanup: remove or document patches.suse/suse-hv-guest-os-id.patch Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: ohering(a)suse.com Reporter: jeffm(a)suse.com QA Contact: jeffm(a)suse.com Blocks: 1189946 Found By: --- Blocker: --- This is an automated report to queue a potentially obsolete patch for removal. The patch patches.suse/suse-hv-guest-os-id.patch will be removed from the master branch in 30 days if the assignee does not remove it before then. Alternatively, the assignee may update the patch tags and this report to indicate what efforts are being made to land the patch in the upstream kernel or to justify why it should require ongoing maintenance effort. Thank you for your cooperation. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1189962] New: cleanup: remove or document patches.suse/dm-mpath-leastpending-path-update
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189962 Bug ID: 1189962 Summary: cleanup: remove or document patches.suse/dm-mpath-leastpending-path-update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: hare(a)suse.com Reporter: jeffm(a)suse.com QA Contact: jeffm(a)suse.com Blocks: 1189946 Found By: --- Blocker: --- This is an automated report to queue a potentially obsolete patch for removal. The patch patches.suse/dm-mpath-leastpending-path-update will be removed from the master branch in 30 days if the assignee does not remove it before then. Alternatively, the assignee may update the patch tags and this report to indicate what efforts are being made to land the patch in the upstream kernel or to justify why it should require ongoing maintenance effort. Thank you for your cooperation. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1189963] New: cleanup: remove or document patches.suse/dm-table-switch-to-readonly
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189963 Bug ID: 1189963 Summary: cleanup: remove or document patches.suse/dm-table-switch-to-readonly Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: hare(a)suse.com Reporter: jeffm(a)suse.com QA Contact: jeffm(a)suse.com Blocks: 1189946 Found By: --- Blocker: --- This is an automated report to queue a potentially obsolete patch for removal. The patch patches.suse/dm-table-switch-to-readonly will be removed from the master branch in 30 days if the assignee does not remove it before then. Alternatively, the assignee may update the patch tags and this report to indicate what efforts are being made to land the patch in the upstream kernel or to justify why it should require ongoing maintenance effort. Thank you for your cooperation. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189972] New: cleanup: remove or document patches.suse/reset-raspberrypi-don-t-reset-usb-if-already-up.patch
by bugzilla_noreply＠suse.com 09 Dec '22

09 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1189972 Bug ID: 1189972 Summary: cleanup: remove or document patches.suse/reset-raspberrypi-don-t-reset-usb-if-alre ady-up.patch Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: ptesarik(a)suse.com Reporter: jeffm(a)suse.com QA Contact: jeffm(a)suse.com Blocks: 1189946 Found By: --- Blocker: --- This is an automated report to queue a potentially obsolete patch for removal. The patch patches.suse/reset-raspberrypi-don-t-reset-usb-if-already-up.patch will be removed from the master branch in 30 days if the assignee does not remove it before then. Alternatively, the assignee may update the patch tags and this report to indicate what efforts are being made to land the patch in the upstream kernel or to justify why it should require ongoing maintenance effort. Thank you for your cooperation. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1199003] New: VUL-0: CVE-2022-1515: matio: memory leak in Mat_VarReadNextInfo5() in mat5.c
by bugzilla_noreply＠suse.com 08 Dec '22

08 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1199003 Bug ID: 1199003 Summary: VUL-0: CVE-2022-1515: matio: memory leak in Mat_VarReadNextInfo5() in mat5.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/330277/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmitry(a)roshchin.org Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#2079986 A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS. Reference: https://github.com/tbeu/matio/issues/186 Upstream patch: https://github.com/tbeu/matio/commit/b53b62b756920f4c1509f4ee06427f66c3b5c9… References: https://bugzilla.redhat.com/show_bug.cgi?id=2079986 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1515 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1193873] New: VUL-0: CVE-2020-36428: matio: heap-based buffer overflow in ReadInt32DataDouble
by bugzilla_noreply＠suse.com 08 Dec '22

08 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1193873 Bug ID: 1193873 Summary: VUL-0: CVE-2020-36428: matio: heap-based buffer overflow in ReadInt32DataDouble Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/304604/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: badshah400(a)gmail.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). References: https://bugzilla.redhat.com/show_bug.cgi?id=1985239 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-36428 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21421 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2020-799… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36428 http://www.cvedetails.com/cve/CVE-2020-36428/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1193874] New: VUL-0: CVE-2021-36977: matio: heap-based buffer overflow in H5MM_memcpy()
by bugzilla_noreply＠suse.com 08 Dec '22

08 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1193874 Bug ID: 1193874 Summary: VUL-0: CVE-2021-36977: matio: heap-based buffer overflow in H5MM_memcpy() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/304598/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: badshah400(a)gmail.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry). References: https://bugzilla.redhat.com/show_bug.cgi?id=1984613 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36977 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36977 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2021-440… -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1173926] New: osc lbl terrible slow
by bugzilla_noreply＠suse.com 07 Dec '22

07 Dec '22

https://bugzilla.suse.com/show_bug.cgi?id=1173926 Bug ID: 1173926 Summary: osc lbl terrible slow Classification: Internal Novell Products Product: openSUSE Build Service Version: master Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: osc Assignee: adrian.schroeter(a)suse.com Reporter: marco.strigl(a)suse.com QA Contact: adrian.schroeter(a)suse.com Found By: --- Blocker: --- With big build logs, doing osc lbl takes a long time: $ time isc lbl > /dev/null real 0m34.623s user 0m34.507s sys 0m0.069s $ time cat /var/tmp/build-root/standard-x86_64/.build.log > /dev/null real 0m0.315s user 0m0.001s sys 0m0.079s -- You are receiving this mail because: You are on the CC list for the bug.

1 9