May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1225199] VUL-0: CVE-2024-5274: chromium: Type Confusion in V8
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225199 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|VUL-0: CVE-2024-5274: |VUL-0: CVE-2024-5274: |chromium: Type Confusion in |chromium: Type Confusion in |V8 fixed in CVE-2024-5274 |V8 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225199] VUL-0: CVE-2024-5274: chromium: Type Confusion in V8 fixed in CVE-2024-5274
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225199 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/407623/ CC| |rfrohl(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224782] VUL-0: CVE-2024-36048: qtnetworkauth: data race and poor seeding in generateRandomString()
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224782 https://bugzilla.suse.com/show_bug.cgi?id=1224782#c2 --- Comment #2 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-SU-2024:0138-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1224782 CVE References: CVE-2024-36048 JIRA References: Sources used: openSUSE Backports SLE-15-SP5 (src): qt6-networkauth-6.4.2-bp155.2.3.1, qt6-networkauth-docs-6.4.2-bp155.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225217] OpenSUSE TW won’t boot without the “dis_ucode_ldr” parameter
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225217 https://bugzilla.suse.com/show_bug.cgi?id=1225217#c3 --- Comment #3 from Charaf Rais <charafweb(a)gmail.com> --- Thank you for you reply. To give you unbiased information, I made a fresh install, update the system, installed latest ucode via "Yast Software Management" without installing gpu related drivers. I booted using "dis_ucode_ldr", and I downloaded bellow kernels from your repos, then tested them one by one: please check hwinfo in attached file. -------------------------------------------------------- kernel-default-6.1.12-1.1.g373f017.x86_64.rpm kernel-default-devel-6.1.12-1.1.g373f017.x86_64.rpm --> Boots normally! rais@192:~> sudo dmesg | grep -i microcode [sudo] password for root: [ 0.000000] [ T0] microcode: microcode updated early to revision 0xf0, date = 2021-11-12 [ 0.076111] [ T0] SRBDS: Mitigation: Microcode [ 0.505522] [ T0] microcode: sig=0x506e3, pf=0x20, revision=0xf0 [ 0.505739] [ T1] microcode: Microcode Update Driver: v2.2. -------------------------------------------------------- kernel-default-6.2.12-1.1.geb3255d.x86_64.rpm kernel-default-devel-6.2.12-1.1.geb3255d.x86_64.rpm --> Boots normally! rais@192:~> sudo dmesg | grep -i microcode [sudo] password for root: [ 0.000000] [ T0] microcode: microcode updated early to revision 0xf0, date = 2021-11-12 [ 0.078794] [ T0] SRBDS: Mitigation: Microcode [ 0.512834] [ T1] microcode: Microcode Update Driver: v2.2. -------------------------------------------------------- kernel-default-6.3.9-1.1.g0df701d.x86_64.rpm kernel-default-devel-6.3.9-1.1.g0df701d.x86_64.rpm HANGS on first boot Hangs on second boot 3d boot, I pushed "e" then F10 (without any editing) and the boot successed! 4 boot, passed without "e" + F10 5 boot Hangs 6 boot hangs 7 boot hangs even with "e" F10 trick 8 boot passed using dis_ucode_ldr 9,10 ... tested using dis_ucode_ldr , boot succeddfully evry time rais@192:~> sudo dmesg | grep -i microcode [sudo] password for root: [ 0.000000] [ T0] microcode: updated early: 0xc6 -> 0xf0, date = 2021-11-12 [ 0.078876] [ T0] SRBDS: Mitigation: Microcode [ 0.976939] [ T1] microcode: Microcode Update Driver: v2.2. -------------------------------------------------------- kernel-default-6.4.12-1.1.gf5aa89b.x86_64.rpm kernel-default-devel-6.4.12-1.1.gf5aa89b.x86_64.rpm --> Working ! rais@192:~> sudo dmesg | grep -i microcode [sudo] password for root: [ 0.000000] [ T0] microcode: updated early: 0xc6 -> 0xf0, date = 2021-11-12 [ 0.071282] [ T0] SRBDS: Mitigation: Microcode [ 0.514596] [ T1] microcode: Microcode Update Driver: v2.2. --------------------------------------------------------- kernel-default-6.5.9-1.1.g1823166.x86_64.rpm kernel-default-devel-6.5.9-1.1.g1823166.x86_64.rpm --> NOT BOOTING. -------------------------------------------------------- kernel-default-6.6.11-1.1.g05ae4ad.x86_64.rpm kernel-default-devel-6.6.11-1.1.g05ae4ad.x86_64.rpm --> Not booting -------------------------------------------------------- kernel-default-6.7.9-1.1.gc6dad0c.x86_64.rpm kernel-default-devel-6.7.9-1.1.gc6dad0c.x86_64.rpm --> Not booting --------------------------------------------------------- Kernel v 6.8 & 6.9 has been tested and they are not booting without dis_ucode_ldr. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225217] OpenSUSE TW won’t boot without the “dis_ucode_ldr” parameter
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225217 https://bugzilla.suse.com/show_bug.cgi?id=1225217#c2 --- Comment #2 from Charaf Rais <charafweb(a)gmail.com> --- Created attachment 875081 --> https://bugzilla.suse.com/attachment.cgi?id=875081&action=edit hwinfo -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219983] amdgpu : "kernel NULL pointer dereference" kernel 6.7.4-1
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1219983 https://bugzilla.suse.com/show_bug.cgi?id=1219983#c12 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Flags|needinfo?(alanemmanuel5@gma | |il.com) | Status|NEW |RESOLVED --- Comment #12 from Takashi Iwai <tiwai(a)suse.com> --- Ah, then it's maybe a different issue the upstream tracker hitting. Let's close this entry. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219983] amdgpu : "kernel NULL pointer dereference" kernel 6.7.4-1
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1219983 https://bugzilla.suse.com/show_bug.cgi?id=1219983#c11 --- Comment #11 from Alan Lima <alanemmanuel5(a)gmail.com> --- i have been using the regular kernel from the official repos for a few months and i'm no longer able to reproduce the bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225147] Kernel hard lockup under mild GPU load
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225147 https://bugzilla.suse.com/show_bug.cgi?id=1225147#c3 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(llyyr.public@gmai | |l.com) CC| |llyyr.public(a)gmail.com --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- Thanks. As a blind shot (as it's a 6.7 regression), could you try later a test patched kernel in OBS home:tiwai:bsc1219983 repo? Once after the build finishes, the package will appear at http://download.opensuse.org/repositories/home:/tiwai:/bsc1219983/standard/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219983] amdgpu : "kernel NULL pointer dereference" kernel 6.7.4-1
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1219983 https://bugzilla.suse.com/show_bug.cgi?id=1219983#c10 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alanemmanuel5(a)gmail.com Flags| |needinfo?(alanemmanuel5@gma | |il.com) --- Comment #10 from Takashi Iwai <tiwai(a)suse.com> --- The upstream tracker entry is still open, and seems persistent on 6.9.x kernel. I'm building a test kernel with the workaround patch suggested in https://gitlab.freedesktop.org/drm/amd/-/issues/3142 It's being built in OBS home:tiwai:bsc1219983. Once after the build finishes, the package will appear at http://download.opensuse.org/repositories/home:/tiwai:/bsc1219983/standard/ Please give it a try later. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222175] New: rustc 1.77 adds spurious -Cstrip=debuginfo to buildline
by bugzilla_noreply＠suse.com 24 May '24

24 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222175 Bug ID: 1222175 Summary: rustc 1.77 adds spurious -Cstrip=debuginfo to buildline Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: brunopitrus(a)hotmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This produces policy-violating packages with missing debuginfo. See eg. bitwarden build log: https://build.opensuse.org/package/live_build_log/devel:languages:nodejs/bi… Seems to be a regression from rust 1.76. A robust workaround is to explicitely add `Cstrip=none` to RUSTFLAGS. (This is e.g. what Fedora already does) -- You are receiving this mail because: You are on the CC list for the bug.

1 3