June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226247] New: VUL-0: CVE-2024-36761: oculante: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226247 Bug ID: 1226247 Summary: VUL-0: CVE-2024-36761: oculante: naga: front-end aborts due to a stack overflow when given too many parenthesis as input Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/410376/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mantarimay(a)pm.me Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Blocks: 1226242 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1226242 +++ naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36761 https://www.cve.org/CVERecord?id=CVE-2024-36761 https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-3676… https://github.com/gfx-rs/naga/issues/2591 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1226251] New: Sway was build without tray support
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226251 Bug ID: 1226251 Summary: Sway was build without tray support Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: hjensen(a)mailbox.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When starting sway I get the error message "sway was built without tray suport". because I configured the tray in the config file. I have a Tumbleweed installation where tray support was compiled in sway. Please build sway with tray support. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226242] VUL-0: CVE-2024-36761: TRACKERBUG: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226242 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1226250 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226242] VUL-0: CVE-2024-36761: TRACKERBUG: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226242 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1226249 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226242] VUL-0: CVE-2024-36761: TRACKERBUG: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226242 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1226248 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226116] nvidia-open-driver-G06 ... 550.90.07: Fails suspend/recover from powersaving
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226116 https://bugzilla.suse.com/show_bug.cgi?id=1226116#c5 --- Comment #5 from Stefan Dirsch <sndirsch(a)suse.com> --- (In reply to Tobias Burnus from comment #4) > > For this you need to edit > > /usr/lib/modprobe.d/50-nvidia-default.conf > > I guess you mean: /usr/lib/modprobe.d/59-nvidia-default.conf > of nvidia-open-driver-G06-signed-kmp-default-550.90.07_k6.9.3_1-1.1.x86_64 Yes, you're right. I apologize. > I can confirm that with /proc/driver/nvidia/params > PreserveVideoMemoryAllocations: 0 > suspending + unsuspending/waking up works and I also do not see any > glitches, but I have not tried much. > > nvidia-smi also works. > > * * * > > Initially, I forgot to run: > dracut --force > systemctl disable nvidia-suspend.service > systemctl disable nvidia-hibernate.service > systemctl disable nvidia-resume.service > > and at least 'status' for suspend/resume showed that they were enabled, but > also with them enabled it did work as described above. That's interesting, but I'm afraid it's needed when using GNOME Wayland. May I ask which desktop you're using? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226242] VUL-0: CVE-2024-36761: TRACKERBUG: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226242 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1226247 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226242] VUL-0: CVE-2024-36761: TRACKERBUG: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226242 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1226246 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226245] New: VUL-0: CVE-2024-36761: halloy: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226245 Bug ID: 1226245 Summary: VUL-0: CVE-2024-36761: halloy: naga: front-end aborts due to a stack overflow when given too many parenthesis as input Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/410376/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mantarimay(a)pm.me Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Blocks: 1226242 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1226242 +++ naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36761 https://www.cve.org/CVERecord?id=CVE-2024-36761 https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-3676… https://github.com/gfx-rs/naga/issues/2591 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1226244] New: VUL-0: CVE-2024-36761: deno: naga: front-end aborts due to a stack overflow when given too many parenthesis as input
by bugzilla_noreply＠suse.com 12 Jun '24

12 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226244 Bug ID: 1226244 Summary: VUL-0: CVE-2024-36761: deno: naga: front-end aborts due to a stack overflow when given too many parenthesis as input Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/410376/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: aavindraa(a)gmail.com Reporter: camila.matos(a)suse.com QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Blocks: 1226242 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1226242 +++ naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36761 https://www.cve.org/CVERecord?id=CVE-2024-36761 https://github.com/MageWeiG/VulnerabilityCollection/blob/main/CVE-2024-3676… https://github.com/gfx-rs/naga/issues/2591 -- You are receiving this mail because: You are on the CC list for the bug.

1 2