May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1222593] VUL-0: CVE-2024-3119: sngrep: buffer overflow due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222593 https://bugzilla.suse.com/show_bug.cgi?id=1222593#c3 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger(a)gmx.de Blocks| |1225537 --- Comment #3 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Missing in Leap 15.6. Please process incoming submission or fix in Leap 15.6 in your chosen way. (bug 1225537) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216429] VUL-0: CVE-2023-46267: roundcube: XSS via a text/html e-mail message containing an SVG image with a USE element
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1216429 https://bugzilla.suse.com/show_bug.cgi?id=1216429#c4 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger(a)gmx.de Blocks| |1225537 --- Comment #4 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Missing in Leap 15.6. Please process incoming submission or fix in Leap 15.6 in your chosen way. (bug 1225537) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216403] VUL-0: CVE-2023-46009: gifsicle: floating point exception vulnerability via resize_stream at src/xform.c
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1216403 https://bugzilla.suse.com/show_bug.cgi?id=1216403#c3 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- CC| |Andreas.Stieger(a)gmx.de Blocks| |1225537 --- Comment #3 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Reopening: Missing in Leap 15.6. Please process incoming submission or fix in Leap 15.6 in your chosen way. (bug 1225537) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223420] VUL-0: CVE-2024-31755: cJSON: NULL pointer dereference via cJSON_SetValuestring()
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223420 https://bugzilla.suse.com/show_bug.cgi?id=1223420#c4 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1225537 --- Comment #4 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- (In reply to Andreas Stieger from comment #2) > Please process https://build.opensuse.org/request/show/1176529 Still missing in Leap 15.6. Please process. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1217918] VUL-0: tor: UAF and NULL pointer dereference crash on Exit relays (TROVE-2023-007)
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1217918 https://bugzilla.suse.com/show_bug.cgi?id=1217918#c4 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Assignee|security-team(a)suse.de |bwiedemann(a)suse.com Resolution|FIXED |--- Blocks| |1225537 --- Comment #4 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- Reopening: Missing in Leap 15.6. Please process incoming submission or fix in Leap 15.6 in your chosen way. (bug 1225537) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224165] AUDIT-0: openSUSE Leap 15.6 Gold Master security audit
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224165 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1225537 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225526] Tumbleweed KDE install does not include terminus-bitmap fonts or set /etc/vconsole.conf properly on hiDPI systems
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225526 https://bugzilla.suse.com/show_bug.cgi?id=1225526#c4 --- Comment #4 from Eric Benton <erbenton(a)comcast.net> --- Well,it seems to me if the laptop or pc screen resolution and dpi is properly detected, which should be a simple task, a decision can easily be made, no? The terminus-bitmap font can be installed by default - that's easy enough, then the selected font to use in /etc/vconsole.conf can be determined by the screen resolution. I guess I don't see a blocking issue to resolving this, which is going to help out a lot of people and will need to be dealt with sooner or later as hi res screens become more and more prevalent. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225536] New: latest ICU headers fails when compiling against them:
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225536 Bug ID: 1225536 Summary: latest ICU headers fails when compiling against them: Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: jengelh(a)inai.de Reporter: mrueckert(a)suse.com QA Contact: qa-bugs(a)suse.de CC: qzhao(a)suse.com Target Milestone: --- Found By: --- Blocker: --- https://build.opensuse.org/package/live_build_log/home:darix:apps/rubygem-c… ``` compiling transliterator.cpp cc1plus: warning: command-line option ‘-std=gnu99’ is valid for C/ObjC but not for C++ In file included from /usr/include/unicode/unistr.h:39, from /usr/include/unicode/translit.h:27, from transliterator.cpp:5: /usr/include/unicode/stringpiece.h:133:29: error: ‘enable_if_t’ in namespace ‘std’ does not name a template type 133 | typename = std::enable_if_t< | ^~~~~~~~~~~ /usr/include/unicode/stringpiece.h:133:24: note: ‘std::enable_if_t’ is only available from C++14 onwards 133 | typename = std::enable_if_t< | ^~~ /usr/include/unicode/stringpiece.h:133:40: error: expected ‘>’ before ‘<’ token 133 | typename = std::enable_if_t< | ^ In file included from /usr/include/unicode/uenum.h:25, from /usr/include/unicode/utrans.h:22, from /usr/include/unicode/translit.h:29: /usr/include/unicode/localpointer.h:561:26: error: parameter declared ‘auto’ 561 | template <typename Type, auto closeFunction> | ^~~~ /usr/include/unicode/localpointer.h:573:76: error: template argument 2 is invalid 573 | explicit LocalOpenPointer(std::unique_ptr<Type, decltype(closeFunction)> &&p) | ^ /usr/include/unicode/localpointer.h:583:78: error: template argument 2 is invalid 583 | LocalOpenPointer &operator=(std::unique_ptr<Type, decltype(closeFunction)> &&p) { | ^ /usr/include/unicode/localpointer.h:599:59: error: template argument 2 is invalid 599 | operator std::unique_ptr<Type, decltype(closeFunction)> () && { | ^ /usr/include/unicode/uenum.h:69:1: note: invalid template non-type parameter 69 | U_DEFINE_LOCAL_OPEN_POINTER(LocalUEnumerationPointer, UEnumeration, uenum_close); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ /usr/include/unicode/uset.h:358:1: note: invalid template non-type parameter 358 | U_DEFINE_LOCAL_OPEN_POINTER(LocalUSetPointer, USet, uset_close); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ /usr/include/unicode/utrans.h:258:1: note: invalid template non-type parameter 258 | U_DEFINE_LOCAL_OPEN_POINTER(LocalUTransliteratorPointer, UTransliterator, utrans_close); ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1225526] Tumbleweed KDE install does not include terminus-bitmap fonts or set /etc/vconsole.conf properly on hiDPI systems
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225526 https://bugzilla.suse.com/show_bug.cgi?id=1225526#c3 Christophe Marin <christophe(a)krop.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|qa-bugs(a)suse.de |jsrain(a)suse.com Assignee|opensuse-kde-bugs@opensuse. |yast2-maintainers(a)suse.de |org | Component|KDE Workspace (Plasma) |Installation --- Comment #3 from Christophe Marin <christophe(a)krop.fr> --- That's also not a KDE issue. We have no reason to require this particular font. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225526] Tumbleweed KDE install does not include terminus-bitmap fonts or set /etc/vconsole.conf properly on hiDPI systems
by bugzilla_noreply＠suse.com 28 May '24

28 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225526 https://bugzilla.suse.com/show_bug.cgi?id=1225526#c2 --- Comment #2 from Stefan Hundhammer <shundhammer(a)suse.com> --- First of all, what packages get installed is a matter of the software patterns. The installer (YaST) uses the patterns that the project managers provide. If they are missing something, it's not the fault of the installer. As for default console font, that might depend on a gazillion factors. A laptop screen with 4k resolution is just about the worst case scenario; of course any font that would not be insanely huge on a normal screen will be much too tiny on that setup. If you have such a setup, it might be time for some manual interaction, especially for a graphical console. How large you want your fonts to be is also a matter of personal preferences and use case. You might have to edit some config file manually. Any attempt of a one-fits-all installer automatic is bound to fail, and one or the other group of users is always going to be mad at us. -- You are receiving this mail because: You are on the CC list for the bug.

1 0