October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1226021] New: VUL-0: CVE-2024-5171: chromium: libaom: heap buffer overflow in img_alloc_helper() caused by integer overflow
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1226021 Bug ID: 1226021 Summary: VUL-0: CVE-2024-5171: chromium: libaom: heap buffer overflow in img_alloc_helper() caused by integer overflow Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://smash.suse.de/issue/408840/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: rfrohl(a)suse.com QA Contact: qa-bugs(a)suse.de CC: coldpool(a)suse.de, rfrohl(a)suse.com, security-team(a)suse.de, smash_bz(a)suse.de Depends on: 1226020 Target Milestone: --- Found By: Security Response Team Blocker: --- +++ This bug was initially created as a clone of Bug #1226020 +++ Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-5171 https://www.cve.org/CVERecord?id=CVE-2024-5171 https://issues.chromium.org/issues/332382766 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1231686] AusweisApp and AusweisApp2 broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 https://bugzilla.suse.com/show_bug.cgi?id=1231686#c8 Klitzing <aklitzing(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aklitzing(a)gmail.com --- Comment #8 from Klitzing <aklitzing(a)gmail.com> --- Looks like you used a patch [1] from Fedora project. That patch will disable raw EC API of openssl. The only work-around is to use legacy openssl API [2] as Fedora does. This will do the same but with legacy API as the "security patch" of openssl disables new API only. The AusweisApp CANNOT change that as this EC usage is a defined protocol with server, app and identity card. See Fedora bug report 2259403 [3] for this. [1] https://build.opensuse.org/projects/security:tls/packages/openssl-3/files/o… [2] https://src.fedoraproject.org/rpms/AusweisApp2/blob/rawhide/f/AusweisApp2-2… [3] https://bugzilla.redhat.com/show_bug.cgi?id=2259403 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232619] New: seadrive-gui version 3.0.11 can no longer mount cloud storage
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232619 Bug ID: 1232619 Summary: seadrive-gui version 3.0.11 can no longer mount cloud storage Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: gerald_chen(a)foxmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- With seadrive-gui version 3.0.11 and seadrive-fuse version 2.0.28 introduce in snapshot 20241021, previously working client can no longer mount cloud storage in user's home directory as intended. I can still log in with my account, but "$HOME/SeaDrive/My Libraries" became empty, showing a modified time of Jan 1 1970 00:00 at UTC0. Log said that: ``` qt.qpa.plugin: Could not find the Qt platform plugin "wayland" in "" Attribute Qt::AA_EnableHighDpiScaling must be set before QCoreApplication is created. lang = English, translation = (null), locale.name() = en_US /usr/bin/fusermount: entry for /home/<username>/SeaDrive not found in /etc/mtab /usr/bin/fusermount: entry for /home/<username>/SeaDrive not found in /etc/mtab (process:1256382): GLib-WARNING **: 19:51:53.729: (../glib/gerror.c:290):g_error_new_valist: runtime check failed: (domain != 0) ``` I wonder whether this is a problem of the client or my cloud provider. Best regards, Gerald -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232603] New: VUL-0: CVE-2024-50602: chromium: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232603 Bug ID: 1232603 Summary: VUL-0: CVE-2024-50602: chromium: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: ro(a)suse.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1228593] New: thinkpad x13s aarch64 continue reset during grub2 load kernel
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1228593 Bug ID: 1228593 Summary: thinkpad x13s aarch64 continue reset during grub2 load kernel Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: macromarship(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I just bought a thinkpad x13s aarch64. Following HCL:suse I have successfully installed latest version. And I have copied the dtb file to system_drv partition as page requested. But after grub2 load kernel, the computer continues reset. About 7-8 times failed then 1 success. This makes I am afraid to reboot computer because next time will take more tries to come in. I notice the UEFI version is 1.60 or 1.70, which is a higher version than 1.58. Upgrade your UEFI firmware to the newer versions which can support LINUX boot v1.49 or later versions. The latest version tested: v1.58 I have read all the tickets on this website. Can any help guide how to resolve this? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1231424] podman: switch to natively using nftables support
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231424 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231323] core dump (Segmentation fault) when ending repository management
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231323 https://bugzilla.suse.com/show_bug.cgi?id=1231323#c37 --- Comment #37 from Michael Andres <ma(a)suse.com> --- pstree: yast---y2start-+-sh---yast---Zypp-main---3*[{Zypp-main}] `-2*[{y2start}] pstree -t: yast---y2start-+-sh---yast---Zypp-main-+-{Zypp-Log} | |-{ruby-timer-thr} | `-{y2start} |-{ruby-timer-thr} `-{y2start} We start the Zypp-Log thread. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232584] New: VUL-0: CVE-2024-50602: python312: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232584 Bug ID: 1232584 Summary: VUL-0: CVE-2024-50602: python312: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: mcepl(a)suse.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232614] New: transactional-update doesn't work togehter with systemd-sysext
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232614 Bug ID: 1232614 Summary: transactional-update doesn't work togehter with systemd-sysext Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: MicroOS Assignee: forgotten_u0-bnvADNc(a)user.net Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- If you use systemd-sysext, transactional-update script stops working and bails out with syntax errors. /dev/mapper/cr_root / btrfs ro,seclabel,relatime,space_cache=v2,subvolid=333,subvol=/(a)/.snapshots/56/snapshot 0 0 sysext /usr overlay ro,seclabel,nodev,relatime,lowerdir=/run/systemd/sysext/meta/usr:/run/systemd/sysext/extensions/strace/usr:/usr 0 0 node122:~ # transactional-update dup --no-selfupdate transactional-update 4.8.3 started Options: dup --no-selfupdate Separate /var detected. /sbin/transactional-update: line 1505: [: /: integer expression expected -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1232611] New: VUL-0: CVE-2024-50602: gama,giada: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232611 Bug ID: 1232611 Summary: VUL-0: CVE-2024-50602: gama,giada: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3