April 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1198427] VUL-0: CVE-2022-27536: go1.17,go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198427 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |jkowalczyk(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198423] VUL-0: CVE-2022-24675: go1.17,go1.18: encoding/pem: stack overflow
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198423 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/328950/ CC| |rfrohl(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198424] VUL-0: CVE-2022-28327: go1.17,go1.18: crypto/elliptic: tolerate all oversized scalars in generic P-256
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198424 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/328952/ CC| |rfrohl(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198427] VUL-0: CVE-2022-27536: go1.17,go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198427 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/328954/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198427] VUL-0: CVE-2022-27536: go1.17,go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

1 0

[Bug 1197965] inconsistent parsing of XML with </label> on a new line (Missing some translations in installer (System Role))
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1197965 https://bugzilla.suse.com/show_bug.cgi?id=1197965#c16 --- Comment #16 from Ladislav Slez�k <lslezak(a)suse.com> --- I'll fix both. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198434] New: VUL-0: CVE-2022-27419: rtl_433: Stack overflow in the function acurite_00275rm_decode at /devices/acurite.c
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198434 Bug ID: 1198434 Summary: VUL-0: CVE-2022-27419: rtl_433: Stack overflow in the function acurite_00275rm_decode at /devices/acurite.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/328917/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: mardnh(a)gmx.de Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-27419 rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-27419 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27419 https://github.com/merbanan/rtl_433/issues/2012 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1198433] New: VUL-1: CVE-2022-27418: tcpreplay: Heap-based buffer overflow in do_checksum_math
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198433 Bug ID: 1198433 Summary: VUL-1: CVE-2022-27418: tcpreplay: Heap-based buffer overflow in do_checksum_math Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/328918/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: mkubecek(a)suse.com Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-27418 Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-27418 https://github.com/appneta/tcpreplay/issues/703 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27418 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1197994] Tracker bug for -z now global enablement in factory for Full RELRO
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1197994 http://bugzilla.opensuse.org/show_bug.cgi?id=1197994#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1197994) was mentioned in https://build.opensuse.org/request/show/969706 Factory / php7 https://build.opensuse.org/request/show/969707 Factory / php8 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198420] Gnome-Setting can't open after Logout,
by bugzilla_noreply＠suse.com 13 Apr '22

13 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198420 https://bugzilla.suse.com/show_bug.cgi?id=1198420#c6 --- Comment #6 from Jiarui Wang <wangjiarui4(a)outlook.com> --- (In reply to Alynx Zhou from comment #5) > (In reply to Jiarui Wang from comment #2) > > I tried to regenerate the bug, > > 0. Set Video Card mode to Nvidia Only > > 1. install Nvidia Driver > > 2. Set Video Card mode to Intel-Nvidia > > 3. Can��t see the gnome control panel > > Where did you select Video Card? Laptop BIOS? > > > > > > gnome-control-center > > Gdk-Message:13:52:25:289: Error flushing display :Protocol error Yes, in bios -- You are receiving this mail because: You are on the CC list for the bug.

1 0