August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1228863] System asking for recovery key while booting a default mode encrypted Aeon system after automatic update
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228863 Han Hui Teoh <teohhanhui(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |teohhanhui(a)gmail.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228929] kernel installation fails to build an initrd
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228929 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(mrmazda@earthlink | |.net) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228929] kernel installation fails to build an initrd
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228929 https://bugzilla.suse.com/show_bug.cgi?id=1228929#c2 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #2 from Martin Wilck <martin.wilck(a)suse.com> --- I can't reproduce this. initrds were created just fine here. I notice that your kernel version is older than current TW, and that the previously installed kernel was pretty old (6.1.12). Is this slowroll? Anyway, please provide the zypper.log file (the part that corresponds to the transaction shown in the journal). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1224308] New: VUL-0: CVE-2024-4068: traefik: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1224308 Bug ID: 1224308 Summary: VUL-0: CVE-2024-4068: traefik: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/405385/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: alexandre.vicenzi(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: gabriele.sonnu(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- The NPM package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5d… https://github.com/micromatch/braces/issues/35 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1228269] Internal microphone not working on Lenovo Thinkpad E16 Gen 2 (Model 21M5)
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228269 https://bugzilla.suse.com/show_bug.cgi?id=1228269#c32 --- Comment #32 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2802-1: An update that solves 118 vulnerabilities, contains four features and has 31 security fixes can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242802-1 Category: security (important) Bug References: 1194869, 1215199, 1215587, 1218442, 1218730, 1218820, 1219832, 1220138, 1220427, 1220430, 1220942, 1221057, 1221647, 1221654, 1221656, 1221659, 1222326, 1222328, 1222438, 1222463, 1222768, 1222775, 1222779, 1222893, 1223010, 1223021, 1223570, 1223731, 1223740, 1223778, 1223804, 1223806, 1223807, 1223813, 1223815, 1223836, 1223863, 1224414, 1224422, 1224490, 1224499, 1224512, 1224516, 1224544, 1224545, 1224589, 1224604, 1224636, 1224641, 1224743, 1224767, 1225088, 1225172, 1225272, 1225489, 1225600, 1225601, 1225711, 1225717, 1225719, 1225744, 1225745, 1225746, 1225752, 1225753, 1225757, 1225805, 1225810, 1225830, 1225835, 1225839, 1225840, 1225843, 1225847, 1225851, 1225856, 1225894, 1225895, 1225896, 1226202, 1226213, 1226502, 1226519, 1226750, 1226757, 1226783, 1226866, 1226883, 1226915, 1226993, 1227103, 1227149, 1227282, 1227362, 1227363, 1227383, 1227432, 1227433, 1227434, 1227435, 1227443, 1227446, 1227447, 1227487, 1227573, 1227626, 1227716, 1227719, 1227723, 1227730, 1227736, 1227755, 1227757, 1227762, 1227763, 1227779, 1227780, 1227783, 1227786, 1227788, 1227789, 1227797, 1227800, 1227801, 1227803, 1227806, 1227813, 1227814, 1227836, 1227855, 1227862, 1227866, 1227886, 1227899, 1227910, 1227913, 1227926, 1228090, 1228192, 1228193, 1228211, 1228269, 1228289, 1228327, 1228328, 1228403, 1228405, 1228408, 1228417 CVE References: CVE-2023-38417, CVE-2023-47210, CVE-2023-51780, CVE-2023-52435, CVE-2023-52472, CVE-2023-52751, CVE-2023-52775, CVE-2024-25741, CVE-2024-26615, CVE-2024-26623, CVE-2024-26633, CVE-2024-26635, CVE-2024-26636, CVE-2024-26641, CVE-2024-26663, CVE-2024-26665, CVE-2024-26691, CVE-2024-26734, CVE-2024-26785, CVE-2024-26826, CVE-2024-26863, CVE-2024-26944, CVE-2024-27012, CVE-2024-27015, CVE-2024-27016, CVE-2024-27019, CVE-2024-27020, CVE-2024-27025, CVE-2024-27064, CVE-2024-27065, CVE-2024-27402, CVE-2024-27404, CVE-2024-35805, CVE-2024-35853, CVE-2024-35854, CVE-2024-35890, CVE-2024-35893, CVE-2024-35899, CVE-2024-35908, CVE-2024-35934, CVE-2024-35942, CVE-2024-36003, CVE-2024-36004, CVE-2024-36889, CVE-2024-36901, CVE-2024-36902, CVE-2024-36909, CVE-2024-36910, CVE-2024-36911, CVE-2024-36912, CVE-2024-36913, CVE-2024-36914, CVE-2024-36922, CVE-2024-36930, CVE-2024-36940, CVE-2024-36941, CVE-2024-36942, CVE-2024-36944, CVE-2024-36946, CVE-2024-36947, CVE-2024-36949, CVE-2024-36950, CVE-2024-36951, CVE-2024-36955, CVE-2024-36959, CVE-2024-36974, CVE-2024-38558, CVE-2024-38586, CVE-2024-38598, CVE-2024-38604, CVE-2024-38659, CVE-2024-39276, CVE-2024-39468, CVE-2024-39472, CVE-2024-39473, CVE-2024-39474, CVE-2024-39475, CVE-2024-39479, CVE-2024-39481, CVE-2024-39482, CVE-2024-39487, CVE-2024-39490, CVE-2024-39494, CVE-2024-39496, CVE-2024-39498, CVE-2024-39502, CVE-2024-39504, CVE-2024-39507, CVE-2024-40901, CVE-2024-40906, CVE-2024-40908, CVE-2024-40919, CVE-2024-40923, CVE-2024-40925, CVE-2024-40928, CVE-2024-40931, CVE-2024-40935, CVE-2024-40937, CVE-2024-40940, CVE-2024-40947, CVE-2024-40948, CVE-2024-40953, CVE-2024-40960, CVE-2024-40961, CVE-2024-40966, CVE-2024-40970, CVE-2024-40972, CVE-2024-40975, CVE-2024-40979, CVE-2024-40998, CVE-2024-40999, CVE-2024-41006, CVE-2024-41011, CVE-2024-41013, CVE-2024-41014, CVE-2024-41017, CVE-2024-41090, CVE-2024-41091 Jira References: PED-8644, PED-8688, PED-8701, PED-8954 Maintenance Incident: [SUSE:Maintenance:34919](https://smelt.suse.de/incident/34919/) Sources used: openSUSE Leap 15.6 (src): kernel-obs-build-6.4.0-150600.23.17.1, kernel-livepatch-SLE15-SP6_Update_3-1-150600.13.3.1, kernel-syms-6.4.0-150600.23.17.1, kernel-source-6.4.0-150600.23.17.1, kernel-default-base-6.4.0-150600.23.17.1.150600.12.6.2, kernel-obs-qa-6.4.0-150600.23.17.1 Basesystem Module 15-SP6 (src): kernel-default-base-6.4.0-150600.23.17.1.150600.12.6.2, kernel-source-6.4.0-150600.23.17.1 Development Tools Module 15-SP6 (src): kernel-syms-6.4.0-150600.23.17.1, kernel-obs-build-6.4.0-150600.23.17.1, kernel-source-6.4.0-150600.23.17.1 SUSE Linux Enterprise Live Patching 15-SP6 (src): kernel-livepatch-SLE15-SP6_Update_3-1-150600.13.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228770] After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228770 https://bugzilla.suse.com/show_bug.cgi?id=1228770#c9 --- Comment #9 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2804-1: An update that solves one vulnerability can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242804-1 Category: security (moderate) Bug References: 1228770 CVE References: CVE-2013-4235 Maintenance Incident: [SUSE:Maintenance:35066](https://smelt.suse.de/incident/35066/) Sources used: openSUSE Leap 15.4 (src): shadow-4.8.1-150400.10.21.1 openSUSE Leap 15.5 (src): shadow-4.8.1-150400.10.21.1 SUSE Linux Enterprise Micro for Rancher 5.3 (src): shadow-4.8.1-150400.10.21.1 SUSE Linux Enterprise Micro 5.3 (src): shadow-4.8.1-150400.10.21.1 Basesystem Module 15-SP5 (src): shadow-4.8.1-150400.10.21.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228770] After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228770 https://bugzilla.suse.com/show_bug.cgi?id=1228770#c8 --- Comment #8 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2806-1: An update that solves one vulnerability can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242806-1 Category: security (moderate) Bug References: 1228770 CVE References: CVE-2013-4235 Maintenance Incident: [SUSE:Maintenance:35067](https://smelt.suse.de/incident/35067/) Sources used: openSUSE Leap 15.3 (src): shadow-4.8.1-150300.4.18.1 SUSE Linux Enterprise Micro 5.1 (src): shadow-4.8.1-150300.4.18.1 SUSE Linux Enterprise Micro 5.2 (src): shadow-4.8.1-150300.4.18.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): shadow-4.8.1-150300.4.18.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228770] After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228770 https://bugzilla.suse.com/show_bug.cgi?id=1228770#c7 --- Comment #7 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2807-1: An update that solves one vulnerability can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242807-1 Category: security (moderate) Bug References: 1228770 CVE References: CVE-2013-4235 Maintenance Incident: [SUSE:Maintenance:35065](https://smelt.suse.de/incident/35065/) Sources used: SUSE Linux Enterprise Micro for Rancher 5.4 (src): shadow-4.8.1-150400.3.12.1 SUSE Linux Enterprise Micro 5.4 (src): shadow-4.8.1-150400.3.12.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228770] After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228770 https://bugzilla.suse.com/show_bug.cgi?id=1228770#c6 --- Comment #6 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2808-1: An update that solves one vulnerability can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242808-1 Category: security (moderate) Bug References: 1228770 CVE References: CVE-2013-4235 Maintenance Incident: [SUSE:Maintenance:35063](https://smelt.suse.de/incident/35063/) Sources used: openSUSE Leap 15.6 (src): shadow-4.8.1-150600.17.6.1 Basesystem Module 15-SP6 (src): shadow-4.8.1-150600.17.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228770] After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory
by bugzilla_noreply＠suse.com 07 Aug '24

07 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228770 https://bugzilla.suse.com/show_bug.cgi?id=1228770#c5 --- Comment #5 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:2809-1: An update that solves one vulnerability can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242809-1 Category: security (moderate) Bug References: 1228770 CVE References: CVE-2013-4235 Maintenance Incident: [SUSE:Maintenance:35064](https://smelt.suse.de/incident/35064/) Sources used: openSUSE Leap Micro 5.5 (src): shadow-4.8.1-150500.3.9.1 SUSE Linux Enterprise Micro 5.5 (src): shadow-4.8.1-150500.3.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0