July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1227777] New: VUL-0: CVE-2024-6540: otrs: improper filtering of fields when using the export function in the ticket overview of the external interface could allow access to sensitive information
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1227777 Bug ID: 1227777 Summary: VUL-0: CVE-2024-6540: otrs: improper filtering of fields when using the export function in the ticket overview of the external interface could allow access to sensitive information Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/414103/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: chris(a)computersalat.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Improper filtering of fields when using the export function in the ticket overview of the external interface could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-6540 https://www.cve.org/CVERecord?id=CVE-2024-6540 https://otrs.com/release-notes/otrs-security-advisory-2024-07/ -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1222859] New: VUL-0: CVE-2024-32019: netdata: local privilege escalation and command execution via untrusted search path
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1222859 Bug ID: 1222859 Summary: VUL-0: CVE-2024-32019: netdata: local privilege escalation and command execution via untrusted search path Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/401694/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: mia(a)0x0.st Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned executable with the SUID bit set. It only runs a restricted set of external commands, but its search paths are supplied by the `PATH` environment variable. This allows an attacker to control where `ndsudo` looks for these commands, which may be a path the attacker has write access to. This may lead to local privilege escalation. This vulnerability has been addressed in versions 1.45.3 and 1.45.2-169. Users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-32019 https://www.cve.org/CVERecord?id=CVE-2024-32019 https://github.com/netdata/netdata/pull/17377 https://github.com/netdata/netdata/security/advisories/GHSA-pmhq-4cxq-wj93 https://bugzilla.redhat.com/show_bug.cgi?id=2274984 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214211] New: "Loading basic drivers" is printed twice on the screen when loading installation system
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1214211 Bug ID: 1214211 Summary: "Loading basic drivers" is printed twice on the screen when loading installation system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: dheidler(a)suse.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Created attachment 868778 --> https://bugzilla.suse.com/attachment.cgi?id=868778&action=edit screenshot Something like this is printed: Loading basic drivers...Loading basic drivers ok Expected: Loading basic drivers... ok -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1227070] New: gettext.sh missing dependency on envsubst
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1227070 Bug ID: 1227070 Summary: gettext.sh missing dependency on envsubst Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: pafee(a)tycoint.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Using "git submodule status", I see unexpected error text alongside the expected output. $ git submodule status /usr/bin/gettext.sh: line 88: envsubst: command not found /usr/bin/gettext.sh: line 88: envsubst: command not found <expected output follows> Within gettext.sh, line 88 invokes envsubst. This used to be provided by the gettext-runtime package, however has split out into a separate envsubst package (built from the same source RPM as as gettext-runtime. Should the gettext-runtime binary RPM have a "requires" dependency on envsubst? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1221918] New: VUL-0: CVE-2024-2824: jhead: heap-based buffer overflow in function PrintFormatNumber
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1221918 Bug ID: 1221918 Summary: VUL-0: CVE-2024-2824: jhead: heap-based buffer overflow in function PrintFormatNumber Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398716/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-2824 https://www.cve.org/CVERecord?id=CVE-2024-2824 https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip https://github.com/Matthias-Wandel/jhead/issues/84 https://vuldb.com/?ctiid.257711 https://vuldb.com/?id.257711 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1223446] New: zypper dup uninstalls > 100 base packages (guess: because of unknown repo signing key)
by bugzilla_noreply＠suse.com 04 Oct '24

04 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1223446 Bug ID: 1223446 Summary: zypper dup uninstalls > 100 base packages (guess: because of unknown repo signing key) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874527 --> https://bugzilla.suse.com/attachment.cgi?id=874527&action=edit y2logs.tar.xz Environment: a s390x (zSystems) VM on the LinuxOne community cloud (https://linuxone.cloud.marist.edu) originally SLE 15 SP4, upgraded to Tumbleweed. To automate the Tumbleweed updates, I enabled os-update, which basically calls zypper dup -y --auto-agree-with-product-licenses This automated update worked on 2024-04-04. For some (so far unknown) reason, the automated zypper dup on 2024-04-26 uninstalled lots of packages, including quite some base packages (for example sudo, less, vim, file, shadow), and left the system in a half-broken state. At least ssh login and su still worked. After re-creating /etc/resolv.conf and reinstalling the removed packages, I could get some logs and fix the system. (I had a similar breakage on another VM some months ago, but back then, I didn't know the root password and therefore couldn't collect logs.) An interesting detail is that zypper asked me to trust a key today: # zypper ref Repository 'repo-openh264 (%{distver})' is up to date. New repository or package signing key received: Repository: repo-oss (%{distver}) Key Fingerprint: F00C 20EF 1E11 14C9 B5F6 9B22 76CA 4244 F6AB 3975 Key Name: openSUSE:Factory:zSystems OBS Project <openSUSE:Factory:zSystems@build.opensuse.org> Key Algorithm: RSA 2048 Key Created: Tue 02 Aug 2022 11:09:47 PM EDT Key Expires: Thu 10 Oct 2024 11:09:47 PM EDT Rpm Name: gpg-pubkey-f6ab3975-62e9e6fb That might already be a hint what caused the removal of the packages. If I zypper mr -d openSUSE:repo-oss zypper dup it proposes to delete 108 packages - and on a quick look, the list looks similar to what was removed automagically. My _guess_ is that the missing key had a similar result as disabling the repo. Still, even "zypper dup -y" should error out if a repo is signed with an unknown key, instead of silently disabling the repo and removing seemingly "orphaned" packages. I'll attach the y2logs so that you can check if my guess is correct ;-) -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1216797] New: SeaMonkey fails to build with rust >= 1.48
by bugzilla_noreply＠suse.com 03 Oct '24

03 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1216797 Bug ID: 1216797 Summary: SeaMonkey fails to build with rust >= 1.48 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: CONFIRMED Severity: Normal Priority: P5 - None Component: Firefox Assignee: factory-mozilla(a)lists.opensuse.org Reporter: psychonaut(a)nothingisreal.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- SeaMonkey was failing to build with rust >= 1.48 due to upstream bug <https://bugzilla.mozilla.org/show_bug.cgi?id=1860935>. To fix this issue, I have added a patch to the SeaMonkey 2.53.17.1 packages provided by the mozilla/seamonkey package on OBS: <https://build.opensuse.org/package/show/mozilla/seamonkey>. I am requesting that these changes be included in Leap 15.4 and 15.5. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225688] New: [tw] [hexchat] gnome-shell The program 'hexchat' received an X Window System error when connecting to netwok
by bugzilla_noreply＠suse.com 03 Oct '24

03 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1225688 Bug ID: 1225688 Summary: [tw] [hexchat] gnome-shell The program 'hexchat' received an X Window System error when connecting to netwok Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 URL: https://openqa.opensuse.org/tests/4236088/modules/hexc hat/steps/28 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: richard.fan(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Description The issue is a sporadic one, but I can see the issue several times in openQA automation tests. it can be seen on both x86_64 and aarch64 platforms. Steps to reproduce the issue: 1. Upgrade the system from leap15.x to tw 2. start hexchat 3. config a nickname and connect to "Libera.Chat" Error logs like below: >May 30 09:49:37.300575 susetest gnome-shell[30709]: The program 'hexchat' received an X Window System error. >May 30 09:49:37.300575 susetest gnome-shell[30709]: This probably reflects a bug in the program. >May 30 09:49:37.307179 susetest gnome-shell[30709]: The error was 'BadWindow (invalid Window parameter)'. >May 30 09:49:37.307179 susetest gnome-shell[30709]: (Details: serial 6056 error_code 3 request_code 38 minor_code 0) >May 30 09:49:37.307179 susetest gnome-shell[30709]: (Note to programmers: normally, X errors are reported asynchronously; >May 30 09:49:37.307179 susetest gnome-shell[30709]: that is, you will receive the error a while after causing it. >May 30 09:49:37.307179 susetest gnome-shell[30709]: To debug your program, run it with the --sync command line >May 30 09:49:37.307179 susetest gnome-shell[30709]: option to change this behavior. You can then get a meaningful >May 30 09:49:37.307179 susetest gnome-shell[30709]: backtrace from your debugger if you break on the gdk_x_error() function.) Please refer to the attached log for more information. ## openQA Observation as below: openQA test in scenario opensuse-Tumbleweed-NET-aarch64-zdup-Leap-15.5-gnome@aarch64 fails in [hexchat](https://openqa.opensuse.org/tests/4236088/modules/hexchat/steps/28) ## Test suite description Maintained by qe-core ## Reproducible Fails since (at least) Build [20240529](https://openqa.opensuse.org/tests/4235968) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1228652] New: ibus-setup-libpinyin crashes on a fresh Leap 15.6
by bugzilla_noreply＠suse.com 02 Oct '24

02 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1228652 Bug ID: 1228652 Summary: ibus-setup-libpinyin crashes on a fresh Leap 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: hillwoodroc(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- hillwood@hillwood-HP:~> /usr/lib64/ibus/ibus-setup-libpinyin (ibus-setup-libpinyin:13262): Gtk-CRITICAL **: 20:30:15.860: _gtk_css_lookup_resolve: assertion '(((__extension__ ({ GTypeInstance *__inst = (GTypeInstance*) ((provider)); GType __t = ((_gtk_style_provider_private_get_type ())); gboolean __r; if (!__inst) __r = (0); else if (__inst->g_class && __inst->g_class->g_type == __t) __r = (!(0)); else __r = g_type_check_instance_is_a (__inst, __t); __r; }))))' failed /usr/share/ibus-libpinyin/setup/main2.py:78: Warning: g_object_set_data_full: assertion 'G_IS_OBJECT (object)' failed self.__builder.add_from_file("ibus-libpinyin-preferences.ui") (ibus-setup-libpinyin:13262): Gtk-ERROR **: 20:30:15.864: Can't create a GtkStyleContext without a display connection 追踪与中断点陷阱 (核心已转储) -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1227464] New: Please subpackage the grub binaries into grub2-bin
by bugzilla_noreply＠suse.com 02 Oct '24

02 Oct '24

https://bugzilla.suse.com/show_bug.cgi?id=1227464 Bug ID: 1227464 Summary: Please subpackage the grub binaries into grub2-bin Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs(a)suse.de Reporter: daan.j.demeyer(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Currently the grub2 package contains both all the grub binaries and configures the system to use grub as the bootloader. As such it correctly conflicts with sdbootutil-rpm-scriptlets, causing failures when trying to install grub2 on a system with systemd-boot already installed. I want to be able to install the grub binaries without configuring the system to use grub as the bootloader. So please introduce a subpackage grub2-bin or so that contains all the grub binaries (everything from grub in /usr/bin) so that the grub binaries can be installed independently from making the system use grub as the bootloader. -- You are receiving this mail because: You are on the CC list for the bug.

1 2