- openSUSE Bugs

[Bug 1223794] New: VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223794 Bug ID: 1223794 Summary: VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/403566/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: asarai(a)suse.com Reporter: camila.matos(a)suse.com QA Contact: qa-bugs(a)suse.de CC: camila.matos(a)suse.com, qa-bugs(a)suse.de, screening-team-bugs(a)suse.de, smash_bz(a)suse.de Blocks: 1223793 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1223793 +++ Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46565 https://www.cve.org/CVERecord?id=CVE-2023-46565 https://github.com/osrg/gobgp/issues/2725 https://bugzilla.redhat.com/show_bug.cgi?id=2278569 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223793 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |security-team(a)suse.de QA Contact|qa-bugs(a)suse.de |security-team(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223793 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|Leap 15.5 |Leap 15.6 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223793] VUL-0: CVE-2023-46565: TRACKERBUG: gobgp: buffer overflow via handlingError() function in pkg/server/fsm.go
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223793 Camila Camargo de Matos <camila.matos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|Current |Leap 15.5 Product|openSUSE Tumbleweed |openSUSE Distribution Component|Network |Network -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223820] GCC 14 fails to build libstorage-ng
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223820 https://bugzilla.suse.com/show_bug.cgi?id=1223820#c4 Martin Jambor <mjambor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://gcc.gnu.org/bugzill | |a/show_bug.cgi?id=114935 --- Comment #4 from Martin Jambor <mjambor(a)suse.com> --- This now https://gcc.gnu.org/bugzilla/show_bug.cgi?id=114935 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223609] New: kernel panic - unable to mount root fs on unknown-block - first boot into 15.6 RC from a simple 15.5 via zypper dup
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223609 Bug ID: 1223609 Summary: kernel panic - unable to mount root fs on unknown-block - first boot into 15.6 RC from a simple 15.5 via zypper dup Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: abittner(a)opensuse.org QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- simple 15.5 x64, on rather old amd hardware but worked fine in 15.5 system has come a long way with upgrades from previous leaps with a single sata HDD completely updated in 15.5 before then zypper via releasever=15.6 and zypper ref and zypper dup, download-in-advance. upgraded thousands of packages, then rebooted. then never came back alive. looking at the machine physically, I see it in a kernel panic error message telling me (copy paste from a photo/picture, text OCR, sorry for errs) --------- 0.63410711 T11 Kernel panic not syncing: UPS: Unable to mount root fs on unknown-block(0,0) 711 CPU: 2 PID: 1 Соми: змарриг/6 Not tainted 6.4.0-150600.16-default #1 SLE15-SP6 38db936c6f7776667f67c71a8b5f453a65a8919f 0.63428110 T1] Hardware name: Systen manufacturer Systen Product Name/F2A85-U PRO, BIOS 6503 07/10/2014 0.63452011 0.63470611 T11 Call Trace: T1] <TASK> 0.63476831 8.63482311 711 dump_stack_lul+0x44/8x69 0.63491710 T11 panic+0x189/8x2c0 8.63499211 711 mount_root_generic+0x114/9x110 0.63508810 8.63517311 T11 ? mount root+6x146/9x190 0.63528811 T11 7 pfx_ignore_unknown_bootoption+0x10/0x10 T11 prepare namespace+8x1a6/8x200 0.63538210 Til kernel init_freeable+0x25c/8x298 8.63540110 0.63557410 Til?pix kernel_init+0x10/8x10 T11 kernel Init+0x16/0x130 fron_fork+0x2c/0x50 8.63565511 Til ret TLI TASK 0.635739][ 6.63585511 Til Kernel Offset: 0x1f660000 from 0xffffffff81000000 (relocation range: 6xffffffff80000000-0xreeeeeerbeeeeeee) 6.63667411 T1]-[end Kernel panic not syncing: UFS: Unable to mount root fs on unknown-block(0,0) 1 ----------- grub2 bootmenu appears fine, I didnt try safe modes or other stuff there just yet. I tried another boot (ctrl alt del) but it ends up in the smiliar or same kernel panic, sometimes other cpu cores shown. thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1207155] Missing dependency for perl-Spreadsheet-ReadSXC
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1207155 https://bugzilla.suse.com/show_bug.cgi?id=1207155#c7 Wolfgang Engel <wolfgang.engel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #7 from Wolfgang Engel <wolfgang.engel(a)suse.com> --- > --- Comment #5 from Wolfgang Engel <wolfgang.engel(a)suse.com> --- > Hello Bob, I'm sorry. This bug went out of my focus :( > > Happens to me all the time. ;-} ;-) > It looks like that Spreadsheet::ParseODS was introduced in a later version > which is included in SP5 but not SP4. > > Are you meanwhile on SP5 and might give it a try ? > > Things seem to be OK here now. After a few momemts of confusion, I've > discovered that installing Spreadsheet::ReadSXC 0.37 in 15.5 now brings > Spreadsheet::ParseODS 0.37 along with it: > > rogers@orion> fgrep PRETTY /etc/os-release > PRETTY_NAME="openSUSE Leap 15.5" > rogers@orion> perl -e 'use Spreadsheet::ReadSXC;' > rogers@orion> rpm -q perl-Spreadsheet-ReadSXC > perl-Spreadsheet-ReadSXC-0.37-bp155.1.4.noarch > rogers@orion> rpm -q perl-Spreadsheet-ParseODS > package perl-Spreadsheet-ParseODS is not installed > rogers@orion> rpm -qa | fgrep ParseODS > rogers@orion> find /usr/lib/perl5 -name ParseODS.pm > /usr/lib/perl5/vendor_perl/5.26.1/Spreadsheet/ParseODS.pm > rogers@orion> rpm -qf > /usr/lib/perl5/vendor_perl/5.26.1/Spreadsheet/ParseODS.pm > perl-Spreadsheet-ReadSXC-0.37-bp155.1.4.noarch > rogers@orion> > Thanks, I also checked on SP6 and got the same results. Just to be sure that there is no regression. I'm closing this bug as fixed, please re-open if you still see this issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223820] New: GCC 14 fails to build libstorage-ng
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223820 Bug ID: 1223820 Summary: GCC 14 fails to build libstorage-ng Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: aschnell(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874637 --> https://bugzilla.suse.com/attachment.cgi?id=874637&action=edit tiny program to reproduce problem The testsuite of libstorage-ng fails with gcc14: double free or corruption (fasttop) I have created a small program to reproduce the problem. Could that be a gcc bug? Or is the program wrong? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1223378] New: rstudio fails to build against boost 1.85
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223378 Bug ID: 1223378 Summary: rstudio fails to build against boost 1.85 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ana.guerrero(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- rstudio failed to build in openSUSE:Factory after boost had been updated to version 1.85, see https://build.opensuse.org/package/live_build_log/openSUSE:Factory/rstudio/… -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1213297] New: No clang-tools package needed by clang >=13 from PackageHub repo
by bugzilla_noreply＠suse.com 03 May '24

03 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1213297 Bug ID: 1213297 Summary: No clang-tools package needed by clang >=13 from PackageHub repo Classification: openSUSE Product: openSUSE Backports Version: SLE-15-SP5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Packages Assignee: packagehub-bugs(a)suse.com Reporter: oleksandr.shchirskyi(a)intel.com QA Contact: packagehub-bugs(a)suse.com Target Milestone: --- Found By: --- Blocker: No There is an issues with LLVM versions >=13 on SLES15 SP5. None of the Package Hub versions can be installed because the Clang-tool dependency is missing. For example, LLVM for SLES15 SP4 includes Clang-tool, but for SP5 it doesn't: https://packagehub.suse.com/packages/llvm13/ The same issue applies to LLVM 14. Here's a brief log example: # grep PRETTY /etc/os-release PRETTY_NAME="SUSE Linux Enterprise Server 15 SP5" # zypper install clang14-devel Refreshing service 'Basesystem_Module_15_SP5_x86_64'. Refreshing service 'Desktop_Applications_Module_15_SP5_x86_64'. Refreshing service 'Development_Tools_Module_15_SP5_x86_64'. Refreshing service 'Legacy_Module_15_SP5_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_Server_15_SP5_x86_64'. Refreshing service 'SUSE_Package_Hub_15_SP5_x86_64'. Refreshing service 'Server_Applications_Module_15_SP5_x86_64'. Loading repository data... Reading installed packages... Resolving package dependencies... Problem: nothing provides 'clang-tools >= 14.0.6' needed by the to be installed clang14-devel-14.0.6-bp155.4.10.x86_64 Solution 1: do not install clang14-devel-14.0.6-bp155.4.10.x86_64 Solution 2: break clang14-devel-14.0.6-bp155.4.10.x86_64 by ignoring some of its dependencies # zypper info clang14-devel Refreshing service 'Basesystem_Module_15_SP5_x86_64'. Refreshing service 'Desktop_Applications_Module_15_SP5_x86_64'. Refreshing service 'Development_Tools_Module_15_SP5_x86_64'. Refreshing service 'Legacy_Module_15_SP5_x86_64'. Refreshing service 'SUSE_Linux_Enterprise_Server_15_SP5_x86_64'. Refreshing service 'SUSE_Package_Hub_15_SP5_x86_64'. Refreshing service 'Server_Applications_Module_15_SP5_x86_64'. Loading repository data... Reading installed packages... Information for package clang14-devel: -------------------------------------- Repository : SUSE-PackageHub-15-SP5-Backports-Pool Name : clang14-devel Version : 14.0.6-bp155.4.10 Arch : x86_64 Vendor : openSUSE Support Level : unknown Installed Size : 17.3 MiB Installed : No Status : not installed Source package : llvm14-14.0.6-bp155.4.10.src Upstream URL : https://www.llvm.org/ Summary : CLANG frontend for LLVM (devel package) Description : This package contains the clang (C language) frontend for LLVM. (development files) # zypper search clang | grep tools # At the same moment it's possible to install LLVM >=13 from OpenSUSE repos, for example, adding this to repos config "http://download.opensuse.org/distribution/leap/15.5/repo/oss/" -- You are receiving this mail because: You are on the CC list for the bug.

1 2