September 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1203130] VUL-0: CVE-2022-39049: otrs: An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203130 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203128] VUL-0: CVE-2022-39831: pspp: heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203128 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203127] VUL-0: CVE-2022-39832: pspp: heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203127 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184817] System becomes unstable and unusable when using wired network
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1184817 https://bugzilla.suse.com/show_bug.cgi?id=1184817#c35 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(teo8976(a)gmail.com | |) --- Comment #35 from Takashi Iwai <tiwai(a)suse.com> --- Hmm, it still doesn't show any indication of such behavior from the kernel log *at all* (except for the IRQ 9 warning that was already found in the previous log). That said, from the kernel perspective, everything is still normal. I believe we need some more easier test case than heavy apps like Chrome or FF. If the problem happens, can you check about the network reachability by some other command-line tool? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203128] New: VUL-0: CVE-2022-39831: pspp: heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1203128 Bug ID: 1203128 Summary: VUL-0: CVE-2022-39831: pspp: heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/341501/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: blp(a)cs.stanford.edu Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#2124263 An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact. This issue is different from CVE-2018-20230. Upstream ticket: https://savannah.gnu.org/bugs/?62977 References: https://bugzilla.redhat.com/show_bug.cgi?id=2124263 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-39831 https://www.cve.org/CVERecord?id=CVE-2022-39831 https://savannah.gnu.org/bugs/?62977 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1202707] kernel-firmware-{amdgpu,radeon} update breaks VA-API: Incorrect video output on Radeon RX 6900 (Navi 21/CHIP_SIENNA_CICHLID)
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202707 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs(a)opensuse.org |tiwai(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203087] New: kernel-default failed to enroll UEFI keys on Raspberry PI
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203087 Bug ID: 1203087 Summary: kernel-default failed to enroll UEFI keys on Raspberry PI Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On my Raspberry PI I get: Failed to enroll new keys Failed to import /etc/uefi/certs/1F673297.crt warning: %post(kernel-default-5.19.2-1.2.aarch64) scriptlet failed, exit status 255 ...........done] kernel-update aborts with an error, thus transactional-update throws the snapshot away. Update of MicroOS on aarch64 is not possible. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c13 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk(a)suse.com --- Comment #13 from Takashi Iwai <tiwai(a)suse.com> --- *** Bug 1203087 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203127] New: VUL-0: CVE-2022-39832: pspp: heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1203127 Bug ID: 1203127 Summary: VUL-0: CVE-2022-39832: pspp: heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/341500/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: blp(a)cs.stanford.edu Reporter: thomas.leroy(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#2124264 An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Upstream ticket: https://savannah.gnu.org/bugs/index.php?63000 References: https://bugzilla.redhat.com/show_bug.cgi?id=2124264 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-39832 https://www.cve.org/CVERecord?id=CVE-2022-39832 https://savannah.gnu.org/bugs/index.php?63000 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1190269] VUL-0: MozillaFirefox: multiple vulnerabilities fixed in ESR 78.14, ESR 91.1, 92
by bugzilla_noreply＠suse.com 05 Sep '22

05 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1190269 https://bugzilla.suse.com/show_bug.cgi?id=1190269#c26 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #26 from Marcus Meissner <meissner(a)suse.com> --- released -- You are receiving this mail because: You are on the CC list for the bug.

1 0