October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1232591] New: VUL-0: CVE-2024-50602: tdom: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232591 Bug ID: 1232591 Summary: VUL-0: CVE-2024-50602: tdom: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: max(a)suse.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1232568] arm-none-eabi tools are broken
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232568 https://bugzilla.suse.com/show_bug.cgi?id=1232568#c2 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aaron.w2(a)gmail.com Flags| |needinfo?(aaron.w2(a)gmail.co | |m) --- Comment #2 from Stefan Hundhammer <shundhammer(a)suse.com> --- "xy is broken" or "running into issues" is not a useful bug report. https://en.opensuse.org/openSUSE:How_to_Write_a_Good_Bugreport Also, this is a bug report against the openSUSE Leap 15.6 distribution where no package with "arm-none-eabi" even exists. You mention devel:gcc which clearly is a repo for developing the gcc packages, not a part of any released SUSE distribution. What exact package(s) are you talking about? When I search for "arm-none-eabi" at https://build.opensuse.org, the only results are in some developers' home projects; none of which we do provide any support for. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231465] Kernel 6.11.2-1 only a fraction of ram is available
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231465 https://bugzilla.suse.com/show_bug.cgi?id=1231465#c46 --- Comment #46 from Felix Niederwanger <felix.niederwanger(a)suse.com> --- Created attachment 878298 --> https://bugzilla.suse.com/attachment.cgi?id=878298&action=edit dmesg for bc2846c7ab029f0660fef1774c6d02a1ec021aaa dmesg for bc2846c7ab029f0660fef1774c6d02a1ec021aaa from https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231465] Kernel 6.11.2-1 only a fraction of ram is available
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231465 https://bugzilla.suse.com/show_bug.cgi?id=1231465#c45 --- Comment #45 from Felix Niederwanger <felix.niederwanger(a)suse.com> --- Created attachment 878297 --> https://bugzilla.suse.com/attachment.cgi?id=878297&action=edit dmesg for 2e6871a632a99d9b9e2ce3a7847acabe99e5a26e dmesg for 2e6871a632a99d9b9e2ce3a7847acabe99e5a26e from https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231465] Kernel 6.11.2-1 only a fraction of ram is available
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231465 https://bugzilla.suse.com/show_bug.cgi?id=1231465#c44 --- Comment #44 from Felix Niederwanger <felix.niederwanger(a)suse.com> --- I did another test, with the commits 2e6871a632a99d9b9e2ce3a7847acabe99e5a26e and bc2846c7ab029f0660fef1774c6d02a1ec021aaa from the upstream Kernel as requested by Jiri: > 2e6871a632a99d9b9e2ce3a7847acabe99e5a26e: fail > bc2846c7ab029f0660fef1774c6d02a1ec021aaa: ok This confirms the result of the bisection that 2e6871a632a99d9b9e2ce3a7847acabe99e5a26e is (likely) the culprit. I will also add the dmesg for both commits here. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231465] Kernel 6.11.2-1 only a fraction of ram is available
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231465 https://bugzilla.suse.com/show_bug.cgi?id=1231465#c43 --- Comment #43 from Felix Niederwanger <felix.niederwanger(a)suse.com> --- Created attachment 878296 --> https://bugzilla.suse.com/attachment.cgi?id=878296&action=edit dmesg of 6.11.5-10-default As requested by Jiri Slaby, I tested the updated 6.11.5-10-default kernel from https://download.opensuse.org/repositories/home:jirislaby:kernel-bsc1231465…. 6.11.5-10-default works from cold boot (showing 32 GiB) I'm attaching the dmesg of the current boot in that kernel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108098] Network Manager UI shows VLAN's as bluetooth devices.
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1108098 https://bugzilla.suse.com/show_bug.cgi?id=1108098#c1 Jonathan Kang <songchuan.kang(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |songchuan.kang(a)suse.com Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Jonathan Kang <songchuan.kang(a)suse.com> --- VLAN support has been removed from gnome-control-center. So this issue won't apply in latest Leap 15.6. Closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230118] [SELinux] Select SELinux as default MAC in enforcing mode in the tumbleweed installer
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230118 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1232648 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232648] [tw][selinux][wireguard] serial-getty@hvc0.service: Deactivated after wireguard tests and caused openQA test fail
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232648 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1230118 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231514] [Build 20241008-SELinux] openQA test fails in wireguard
by bugzilla_noreply＠suse.com 31 Oct '24

31 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231514 https://bugzilla.suse.com/show_bug.cgi?id=1231514#c2 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|MOVED |DUPLICATE --- Comment #2 from Cathy Hu <cathy.hu(a)suse.com> --- *** This bug has been marked as a duplicate of bug 1232648 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0