October 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1230992] ddclient 3.10.0 is a real mess (known issues) - please use upstream 3.11.2 at least
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1230992 https://bugzilla.suse.com/show_bug.cgi?id=1230992#c2 Giacomo Comes <gcomes.obs(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gcomes.obs(a)gmail.com --- Comment #2 from Giacomo Comes <gcomes.obs(a)gmail.com> --- I have been using ddclient for many years and never got a problem. Since the update to version 3.10.0 I observe on several machines the following error message repeated during the day many times: WARNING: cannot connect to checkip.dyndns.org:80 socket: IO::Socket::INET: Bad hostname 'checkip.dyndns.org' WARNING: found neither IPv4 nor IPv6 address WARNING: cannot connect to api.xxx.com:80 socket: IO::Socket::INET: Bad hostname 'api.xxx.com' FAILED: updating <hostname>: Could not connect to api.xxx.com. On the machines that produced a lot of such error messages I updated ddclient to version 3.11.2 and now the error messages are gone. I'm therefore ditching ddclient 3.10.0 from all my Leap 15.6 installations replacing it with ddclient 3.11.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232596] New: VUL-0: CVE-2024-50602: vtk: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232596 Bug ID: 1232596 Summary: VUL-0: CVE-2024-50602: vtk: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: stefan.bruens(a)rwth-aachen.de Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232605] New: VUL-0: CVE-2024-50602: SimGear: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232605 Bug ID: 1232605 Summary: VUL-0: CVE-2024-50602: SimGear: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: stefan.bruens(a)rwth-aachen.de Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232612] New: VUL-0: CVE-2024-50602: Coin,Coin4: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232612 Bug ID: 1232612 Summary: VUL-0: CVE-2024-50602: Coin,Coin4: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: stefan.bruens(a)rwth-aachen.de Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232580] VUL-0: CVE-2024-50602: xsd: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232580 https://bugzilla.suse.com/show_bug.cgi?id=1232580#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1232580) was mentioned in https://build.opensuse.org/request/show/1219581 Factory / xsd https://build.opensuse.org/request/show/1219582 Backports:SLE-15-SP5 / xsd https://build.opensuse.org/request/show/1219583 Backports:SLE-15-SP6 / xsd -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231686] AusweisApp and AusweisApp2 broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 https://bugzilla.suse.com/show_bug.cgi?id=1231686#c12 OpenSSL Maintainers <openssl-maintainers(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(openssl-maintaine | |rs(a)suse.de) | CC| |meissner(a)suse.com --- Comment #12 from OpenSSL Maintainers <openssl-maintainers(a)suse.de> --- (In reply to John Paul Adrian Glaubitz from comment #11) > This is something the OpenSSL maintainers need to comment on. Hi, We blocked non approved EC curves for the FIPS 140-3 certification round in the context of bsc#1221786 and we would like to keep the code as is. I'm adding also Marcus in CC also to see if we could relax this in Factory. Otherwise, I think we could follow the same approach as Fedora, this is using the patch [0] mentioned in comment#8. Regarding the openssl-3 versions in Factory, we do have version 3.1.7 at this moment and the version 3.2.3 is about to be released. Once this one is out, we'll move to 3.3.2 asap. [0] https://src.fedoraproject.org/rpms/AusweisApp2/blob/rawhide/f/AusweisApp2-2… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232581] New: VUL-0: CVE-2024-50602: seamonkey: libexpat: DoS via XML_ResumeParser
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232581 Bug ID: 1232581 Summary: VUL-0: CVE-2024-50602: seamonkey: libexpat: DoS via XML_ResumeParser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other URL: https://smash.suse.de/issue/425799/ OS: Other Status: NEW Whiteboard: CVSSv3.1:SUSE:CVE-2024-50602:5.5:(AV:L/AC:L/PR:N/UI:R/ S:U/C:N/I:N/A:H) Severity: Normal Priority: P5 - None Component: Security Assignee: psychonaut(a)nothingisreal.com Reporter: andrea.mattiazzo(a)suse.com QA Contact: security-team(a)suse.de Blocks: 1232579 Target Milestone: --- Found By: --- Blocker: --- An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 https://github.com/libexpat/libexpat/pull/915 https://bugzilla.redhat.com/show_bug.cgi?id=2321987 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 https://bugzilla.suse.com/show_bug.cgi?id=1232567#c7 --- Comment #7 from Larry Rainey <llrainey15(a)gmail.com> --- Confirmed - it is fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1231686] AusweisApp and AusweisApp2 broken with OpenSSL 3.3
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1231686 https://bugzilla.suse.com/show_bug.cgi?id=1231686#c11 John Paul Adrian Glaubitz <adrian.glaubitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |openssl-maintainers(a)suse.de Flags| |needinfo?(openssl-maintaine | |rs(a)suse.de) --- Comment #11 from John Paul Adrian Glaubitz <adrian.glaubitz(a)suse.com> --- This is something the OpenSSL maintainers need to comment on. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1232567] With Firefox 132 cannot download files - firefox is from mozilla repo
by bugzilla_noreply＠suse.com 30 Oct '24

30 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1232567 https://bugzilla.suse.com/show_bug.cgi?id=1232567#c6 --- Comment #6 from René Neumaier <r.neumaier(a)mailbox.org> --- Same here, it's working fine with 132.0-lp156.5.1. -- You are receiving this mail because: You are on the CC list for the bug.

1 0