May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223793 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1223795 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207155] Missing dependency for perl-Spreadsheet-ReadSXC
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1207155 https://bugzilla.suse.com/show_bug.cgi?id=1207155#c6 Bob Rogers <rogers-suse(a)rgrjr.dyndns.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(rogers-suse@rgrjr | |.dyndns.org) | --- Comment #6 from Bob Rogers <rogers-suse(a)rgrjr.dyndns.org> --- From: bugzilla_noreply(a)suse.com Date: Thu, 02 May 2024 13:48:07 +0000 Wolfgang Engel <wolfgang.engel(a)suse.com> has asked Bob Rogers <rogers-suse(a)rgrjr.dyndns.org> for needinfo: Bug 1207155: Missing dependency for perl-Spreadsheet-ReadSXC https://bugzilla.suse.com/show_bug.cgi?id=1207155 --- Comment #5 from Wolfgang Engel <wolfgang.engel(a)suse.com> --- Hello Bob, I'm sorry. This bug went out of my focus :( Happens to me all the time. ;-} It looks like that Spreadsheet::ParseODS was introduced in a later version which is included in SP5 but not SP4. Are you meanwhile on SP5 and might give it a try ? Things seem to be OK here now. After a few momemts of confusion, I've discovered that installing Spreadsheet::ReadSXC 0.37 in 15.5 now brings Spreadsheet::ParseODS 0.37 along with it: rogers@orion> fgrep PRETTY /etc/os-release PRETTY_NAME="openSUSE Leap 15.5" rogers@orion> perl -e 'use Spreadsheet::ReadSXC;' rogers@orion> rpm -q perl-Spreadsheet-ReadSXC perl-Spreadsheet-ReadSXC-0.37-bp155.1.4.noarch rogers@orion> rpm -q perl-Spreadsheet-ParseODS package perl-Spreadsheet-ParseODS is not installed rogers@orion> rpm -qa | fgrep ParseODS rogers@orion> find /usr/lib/perl5 -name ParseODS.pm /usr/lib/perl5/vendor_perl/5.26.1/Spreadsheet/ParseODS.pm rogers@orion> rpm -qf /usr/lib/perl5/vendor_perl/5.26.1/Spreadsheet/ParseODS.pm perl-Spreadsheet-ReadSXC-0.37-bp155.1.4.noarch rogers@orion> Thanks, -- Bob -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223793 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1223794 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

1 0

[Bug 1223775] installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 https://bugzilla.suse.com/show_bug.cgi?id=1223775#c4 --- Comment #4 from Dominique Leuenberger <dimstar(a)opensuse.org> --- (In reply to Steffen Winterfeldt from comment #2) > # du -s gettext-runtime* > 2476 gettext-runtime > 3760 gettext-runtime-mini > > But what do I know... Heh, what a luck 'mini' refers to the build deps and not the size. Still a very interesting effect -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223775] installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 https://bugzilla.suse.com/show_bug.cgi?id=1223775#c3 Steffen Winterfeldt <snwint(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #3 from Steffen Winterfeldt <snwint(a)suse.com> --- Fixed: - https://github.com/openSUSE/installation-images/pull/709 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223775] installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 https://bugzilla.suse.com/show_bug.cgi?id=1223775#c2 Steffen Winterfeldt <snwint(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #2 from Steffen Winterfeldt <snwint(a)suse.com> --- # du -s gettext-runtime* 2476 gettext-runtime 3760 gettext-runtime-mini But what do I know... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223775] installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 https://bugzilla.suse.com/show_bug.cgi?id=1223775#c1 --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- Created attachment 874630 --> https://bugzilla.suse.com/attachment.cgi?id=874630&action=edit Disk Usage of gettext-runtime gettext-runtime on my Leap 15.5: 2.0 MiB But most of /usr/share of that package can easily be omitted, and that would be 548 kiB less. /usr/share/locale is already 352 kiB that nobody needs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223775] installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast2-maintainers(a)suse.de |snwint(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223775] New: installation-images wrongly uses gettext-runtime-mini
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223775 Bug ID: 1223775 Summary: installation-images wrongly uses gettext-runtime-mini Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- installation-images has been identified to wrongly pull in gettext-runtime-mini. All -mini flavors are not supposed to leave OBS and be used in anything else bug the build system. Installation-images does not match that description. A recent change on gettext-runtime (adding the this-is-only-for-build-envs requires) revealed i-i as failing on this. https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… [ 136s] resolving package dependencies... [ 136s] : nothing provides this-is-only-for-build-envs needed by gettext-runtime-mini-0.22.5-1.1.x86_64 [ 136s] in data/base/base.file_list line 179. [ 136s] make: *** [Makefile:83: base] Error 25 The correct package to be used would be gettext-runtime -- You are receiving this mail because: You are on the CC list for the bug.

1 0