October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1231236] Lastest audit package (audit-rules to be more specific) is not installable in containers
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231236 Enzo Matsumiya <ematsumiya(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |ematsumiya(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231268] [Build 20241001] openQA test fails in cve-2017-17806
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231268 https://bugzilla.suse.com/show_bug.cgi?id=1231268#c2 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tiwai(a)suse.com --- Comment #2 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Avinesh Kumar from comment #1) > > git show ce212d2afca47acd366a2e74c76fe82c31f785ab > commit ce212d2afca47acd366a2e74c76fe82c31f785ab > Author: Herbert Xu <herbert(a)gondor.apana.org.au> > Date: Tue Sep 10 17:30:24 2024 +0800 > > crypto: n2 - Set err to EINVAL if snprintf fails for hmac > > Return EINVAL if the snprintf check fails when constructing the > algorithm names. > > Fixes: 8c20982caca4 ("crypto: n2 - Silence gcc format-truncation false > positive warnings") > Reported-by: kernel test robot <lkp(a)intel.com> > Reported-by: Dan Carpenter <dan.carpenter(a)linaro.org> > Closes: https://lore.kernel.org/r/202409090726.TP0WfY7p-lkp@intel.com/ > Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> > > diff --git a/drivers/crypto/n2_core.c b/drivers/crypto/n2_core.c > index 251e088a53df..b11545cc5cb7 100644 > --- a/drivers/crypto/n2_core.c > +++ b/drivers/crypto/n2_core.c > @@ -1353,6 +1353,7 @@ static int __n2_register_one_hmac(struct n2_ahash_alg > *n2ahash) > ahash->setkey = n2_hmac_async_setkey; > > base = &ahash->halg.base; > + err = -EINVAL; > if (snprintf(base->cra_name, CRYPTO_MAX_ALG_NAME, "hmac(%s)", > p->child_alg) >= CRYPTO_MAX_ALG_NAME) > goto out_free_p; > _______________ > > > this commit might be related which went in 6.12-rc1 is related. Hm, this driver is for Niagara2 on Sparc64, hence it must be irrelevant. But there can be other crypto changes that return -EINVAL. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231271] kiwi-templates-Minimal:kvm-and-xen-grub-bls image fails on sdbootutil
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231271 https://bugzilla.suse.com/show_bug.cgi?id=1231271#c13 Alberto Planas Dominguez <aplanas(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #13 from Alberto Planas Dominguez <aplanas(a)suse.com> --- kiwi-templates-Minimal https://build.opensuse.org/request/show/1205713 openSUSE-MicroOS https://build.opensuse.org/request/show/1205711 We should be OK in this bug now -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231228] jc42 creating temperature alarms with bogus min/max values
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231228 https://bugzilla.suse.com/show_bug.cgi?id=1231228#c1 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jimoe(a)sma-inc.us, | |tiwai(a)suse.com Flags| |needinfo?(jimoe(a)sma-inc.us) --- Comment #1 from Takashi Iwai <tiwai(a)suse.com> --- It's interesting how this stuff came up since 6.11; I don't see any relevant change through a quick glance between 6.10 and 6.11. Could you give the dmesg and hwinfo outputs from both 6.10.x and 6.11.x kernels? Also, to be sure, check the behavior with 6.12-rc1 kernel that is available in OBS Kernel:HEAD repo, too. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231288] xscreensaver-gl package missed
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231288 https://bugzilla.suse.com/show_bug.cgi?id=1231288#c4 hui <sturm-fr(a)web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |INVALID --- Comment #4 from hui <sturm-fr(a)web.de> --- Tumbleweed is using the complete and up to date latest available xscreensaver-6.0.9 upstream source. There are no screensavers like "euphoria" available in the upstream source. So this bugreport is still INVALID. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223269] New: VUL-0: CVE-2023-51791: ffmpeg: buffer overflow via function gen_alias_map in libavcodec/jpegxl_parser.c
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1223269 Bug ID: 1223269 Summary: VUL-0: CVE-2023-51791: ffmpeg: buffer overflow via function gen_alias_map in libavcodec/jpegxl_parser.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/402764/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in gen_alias_map. References: https://ffmpeg.org/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-51791 https://www.cve.org/CVERecord?id=CVE-2023-51791 https://trac.ffmpeg.org/ticket/10738 https://bugzilla.redhat.com/show_bug.cgi?id=2276114 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1223276] New: VUL-0: CVE-2023-51797: ffmpeg: buffer overflow in the showwaves_filter_frame function in libavfilter/avf_showwaves.c
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1223276 Bug ID: 1223276 Summary: VUL-0: CVE-2023-51797: ffmpeg: buffer overflow in the showwaves_filter_frame function in libavfilter/avf_showwaves.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/402769/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:722:24 in showwaves_filter_frame References: https://github.com/FFmpeg/FFmpeg https://ffmpeg.org/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-51797 https://www.cve.org/CVERecord?id=CVE-2023-51797 https://trac.ffmpeg.org/ticket/10756 https://bugzilla.redhat.com/show_bug.cgi?id=2276120 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1224233] New: VUL-0: CVE-2024-30268: cacti: reflected cross-site scripting vulnerability in display_settings
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1224233 Bug ID: 1224233 Summary: VUL-0: CVE-2024-30268: cacti: reflected cross-site scripting vulnerability in display_settings Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/405121/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This issue is fixed in commit a38b9046e9772612fda847b46308f9391a49891e. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-30268 https://www.cve.org/CVERecord?id=CVE-2024-30268 https://github.com/Cacti/cacti/blob/08497b8bcc6a6037f7b1aae303ad8f7dfaf7364… https://github.com/Cacti/cacti/commit/a38b9046e9772612fda847b46308f9391a498… https://github.com/Cacti/cacti/security/advisories/GHSA-9m3v-whmr-pc2q -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1224232] New: VUL-0: CVE-2024-29895: cacti: command injection in cmd_realtime.php
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1224232 Bug ID: 1224232 Summary: VUL-0: CVE-2024-29895: cacti: command injection in cmd_realtime.php Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/405105/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when `register_argc_argv` option of PHP is `On`. In `cmd_realtime.php` line 119, the `$poller_id` used as part of the command execution is sourced from `$_SERVER['argv']`, which can be controlled by URL when `register_argc_argv` option of PHP is `On`. And this option is `On` by default in many environments such as the main PHP Docker image for PHP. Commit 53e8014d1f082034e0646edc6286cde3800c683d contains a patch for the issue, but this commit was reverted in commit 99633903cad0de5ace636249de16f77e57a3c8fc. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-29895 https://www.cve.org/CVERecord?id=CVE-2024-29895 https://github.com/Cacti/cacti/blob/501712998589763d411a68d35e3cda98fd9cfd1… https://github.com/Cacti/cacti/commit/53e8014d1f082034e0646edc6286cde3800c6… https://github.com/Cacti/cacti/commit/99633903cad0de5ace636249de16f77e57a3c… https://github.com/Cacti/cacti/security/advisories/GHSA-cr28-x256-xf5m -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1224789] New: VUL-0: CVE-2024-33900: keepassxc: recovery of cleartext credentials
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1224789 Bug ID: 1224789 Summary: VUL-0: CVE-2024-33900: keepassxc: recovery of cleartext credentials Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/406770/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mrueckert(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- KeePassXC 2.7.7 allows attackers to recover cleartext credentials. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-33900 https://www.cve.org/CVERecord?id=CVE-2024-33900 https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 https://keepassxc.org/blog/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3