June 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226186] VUL-0: CVE-2024-5480: python-torch: remote code execution in torch.distributed.rpc framework
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226186 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226186] VUL-0: CVE-2024-5480: python-torch: remote code execution in torch.distributed.rpc framework
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226186 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2024-5480 | |:9.8:(AV:N/AC:L/PR:N/UI:N/S | |:U/C:H/I:H/A:H) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226170] Chromium - widevine not being loaded in arm64 Linux
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226170 https://bugzilla.suse.com/show_bug.cgi?id=1226170#c1 Callum Farmer <gmbr3(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS Product|openSUSE.org |openSUSE Tumbleweed Component|3rd party software |Other CC| |Andreas.Stieger(a)gmx.de Version|unspecified |Current QA Contact|screening-team-bugs(a)suse.de |qa-bugs(a)suse.de --- Comment #1 from Callum Farmer <gmbr3(a)opensuse.org> --- Makes sense. I'll update the package later. Callum -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226186] VUL-0: CVE-2024-5480: python-torch: remote code execution in torch.distributed.rpc framework
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226186 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|qa-bugs(a)suse.de |security-team(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226186] VUL-0: CVE-2024-5480: python-torch: remote code execution in torch.distributed.rpc framework
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

1 0

[Bug 1226105] Snapshot 20240606 breaks libvirt NAT networks
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226105 https://bugzilla.suse.com/show_bug.cgi?id=1226105#c5 --- Comment #5 from Alexander Graul <alexander.graul(a)suse.com> --- Created attachment 875421 --> https://bugzilla.suse.com/attachment.cgi?id=875421&action=edit Output of virsh test-slem5 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226105] Snapshot 20240606 breaks libvirt NAT networks
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226105 https://bugzilla.suse.com/show_bug.cgi?id=1226105#c4 --- Comment #4 from Alexander Graul <alexander.graul(a)suse.com> --- Created attachment 875420 --> https://bugzilla.suse.com/attachment.cgi?id=875420&action=edit Output of virsh net-dumpxml default -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1226105] Snapshot 20240606 breaks libvirt NAT networks
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1226105 https://bugzilla.suse.com/show_bug.cgi?id=1226105#c3 Alexander Graul <alexander.graul(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |alexander.graul(a)suse.com Resolution|INVALID |--- --- Comment #3 from Alexander Graul <alexander.graul(a)suse.com> --- I have the same issue. Existing or new VMs alike can't communicate to external hosts, e.g.: localhost:~ # tracepath suse.com 1?: [LOCALHOST] pmtu 1500 1: 192.168.122.1 0.159ms 1: 192.168.122.1 0.077ms 2: no reply 3: no reply The VM has the following network configuration: localhost:~ # ip a [ skipping lo device ] 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 52:54:00:2d:e6:f1 brd ff:ff:ff:ff:ff:ff altname enp1s0 inet 192.168.122.40/24 brd 192.168.122.255 scope global dynamic noprefixroute eth0 valid_lft 2946sec preferred_lft 2946sec inet6 fe80::5054:ff:fe2d:e6f1/64 scope link noprefixroute valid_lft forever preferred_lft forever localhost:~ # ip r default via 192.168.122.1 dev eth0 proto dhcp src 192.168.122.40 metric 20100 192.168.122.0/24 dev eth0 proto kernel scope link src 192.168.122.40 metric 100 `virsh domifaddr test-slem5` reports the same from the host (running 20240609). I'm running the modular deamons (libvirtd.service is not running) and will attach the output of `virsh dumpxml test-slem5` and `virsh net-dumpxml default`. I also tried other NAT networks I have defined, with the same result (all packets are dropped, tracepath only shows one hop to the hypervisor). Please let me if there is anything else I can share to track this down. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1213879] Could not allocate memory for RTAS (When booting from CD ISO image)
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1213879 https://bugzilla.suse.com/show_bug.cgi?id=1213879#c12 --- Comment #12 from Michal Suchanek <msuchanek(a)suse.com> --- Thanks for testing. cd: and hd: media don't work because the depmod file is bad. Will try to rebuild the medium with different patch. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223783] Upgrade lapack to 3.12.0
by bugzilla_noreply＠suse.com 11 Jun '24

11 Jun '24

https://bugzilla.suse.com/show_bug.cgi?id=1223783 https://bugzilla.suse.com/show_bug.cgi?id=1223783#c18 --- Comment #18 from Egbert Eich <eich(a)suse.com> --- @Atri, thanks for doing all this work! (In reply to Atri Bhattacharya from comment #14) > > Perhaps difficult to work out given the structure of blas, cblas, > lapack, and lapacke libraries, but it would be useful to look at > installing the man files as part of the appropriate devel package > instead of a separate -man package like we have now. The current status > is the cleanest from the packaging point of view, but not the most > end-user/dev friendly (lapack-man needs to be installed manually). Wouldn't it work to make the man page package a dependency (ie Recommends:) of the -devel packages? This way, one can avoid installation if not required but it will be installed by default. Would you mind setting the package in your home to 'publish' so I'm actually able to install it? -- You are receiving this mail because: You are on the CC list for the bug.

1 0