September 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190273] Unzip thinks some files are symlinks
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1190273 https://bugzilla.suse.com/show_bug.cgi?id=1190273#c14 --- Comment #14 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-RU-2024:3129-1: An update that has one fix can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-ru-20243129-1 Category: recommended (moderate) Bug References: 1190273 Maintenance Incident: [SUSE:Maintenance:35382](https://smelt.suse.de/incident/35382/) Sources used: openSUSE Leap 15.5 (src): librcc-0.2.13-150000.1.3.1, librcd-0.1.14-150000.1.3.1, unzip-6.00-150000.4.14.1 openSUSE Leap 15.6 (src): librcc-0.2.13-150000.1.3.1, librcd-0.1.14-150000.1.3.1, unzip-6.00-150000.4.14.1 Basesystem Module 15-SP5 (src): unzip-6.00-150000.4.14.1 Basesystem Module 15-SP6 (src): unzip-6.00-150000.4.14.1 SUSE Package Hub 15 15-SP5 (src): librcc-0.2.13-150000.1.3.1, librcd-0.1.14-150000.1.3.1 SUSE Package Hub 15 15-SP6 (src): librcc-0.2.13-150000.1.3.1, librcd-0.1.14-150000.1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1029961] [META] Finalize UsrMerge
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1029961 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229819] New: VUL-0: CVE-2024-45321: perl-App-cpanminus: code download via insecure HTTP protocol
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1229819 Bug ID: 1229819 Summary: VUL-0: CVE-2024-45321: perl-App-cpanminus: code download via insecure HTTP protocol Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/419013/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: tina.mueller(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-45321 https://www.cve.org/CVERecord?id=CVE-2024-45321 https://github.com/miyagawa/cpanminus/issues/611 https://github.com/miyagawa/cpanminus/pull/674 https://security.metacpan.org/2024/08/26/cpanminus-downloads-code-using-ins… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1215937] New: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1215937 Bug ID: 1215937 Summary: VUL-0: CVE-2023-43907: optipng: global buffer overflow via the 'buffer' variable at gifread.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/380479/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: gabriele.sonnu(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. References: https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffe… http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43907 -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1209266] OVMF firmware hangs when booting SEV or SEV-ES guest
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1209266 https://bugzilla.suse.com/show_bug.cgi?id=1209266#c19 --- Comment #19 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-RU-2024:3134-1: An update that has one fix can now be installed. URL: https://www.suse.com/support/update/announcement/2024/suse-ru-20243134-1 Category: recommended (moderate) Bug References: 1209266 Maintenance Incident: [SUSE:Maintenance:35248](https://smelt.suse.de/incident/35248/) Sources used: openSUSE Leap 15.6 (src): ovmf-202308-150600.5.3.2 SUSE Package Hub 15 15-SP6 (src): ovmf-202308-150600.5.3.2 Server Applications Module 15-SP6 (src): ovmf-202308-150600.5.3.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229737] Suspend mode fails if fstrim.service is active.
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1229737 Michal Koutný <mkoutny(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mkoutny(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230089] VUL-0: CVE-2024-45305: tectonic: gix-path: gix-path uses local config across repos when it is the highest scope
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1230089 https://bugzilla.suse.com/show_bug.cgi?id=1230089#c1 --- Comment #1 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1230089) was mentioned in https://build.opensuse.org/request/show/1198552 Factory / tectonic -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1230083] VUL-0: CVE-2024-45305: obs-service-cargo: gix-path: gix-path uses local config across repos when it is the highest scope
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1230083 https://bugzilla.suse.com/show_bug.cgi?id=1230083#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1230083) was mentioned in https://build.opensuse.org/request/show/1198553 Factory / obs-service-cargo -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229887] New: new pacakge: ZoneMinder
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1229887 Bug ID: 1229887 Summary: new pacakge: ZoneMinder Classification: openSUSE Product: openSUSE Backports Version: SLE-15-SP6 Hardware: Other OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Packages Assignee: packagehub-bugs(a)suse.com Reporter: erico.mendonca(a)suse.com QA Contact: packagehub-bugs(a)suse.com Target Milestone: --- Found By: --- Blocker: --- I'm submitting the stable version of ZoneMinder (From security:zoneminder) to the backports/PackageHub, as a customer expressed interest in having it available for SLE, even if it's "as-is". I'm also submitting a copy of the perl-Sys-Mmap package from devel:languages:perl, which hasn't changed in years, but is a requirement for building ZoneMinder. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1229277] New: Package fakechroot does not build with GCC 14 because of new errors (that were previously warnings)
by bugzilla_noreply＠suse.com 03 Sep '24

03 Sep '24

https://bugzilla.suse.com/show_bug.cgi?id=1229277 Bug ID: 1229277 Summary: Package fakechroot does not build with GCC 14 because of new errors (that were previously warnings) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mjambor(a)suse.com QA Contact: qa-bugs(a)suse.de CC: aavindraa(a)gmail.com Blocks: 1220571 Target Milestone: --- Found By: --- Blocker: --- Package fakechroot fails to build with GCC 14 because of various C99 violations which previously just generated warning s but which cause errors with GCC 14 by default. For more information see https://gcc.gnu.org/gcc-14/porting_to.html and meta bug #1220571. BuildService failures are available online at: https://build.opensuse.org/package/live_build_log/home:rguenther:plgrnd/fak… The build with GCC 14 can now be tried locally with: osc build --clean --alternative-project home:rguenther:nextgcc The (first) error that stops the build is: [ 45s] libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -O2 -Wall -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -g -c ftw64.c -fPIC -DPIC -o .libs/ftw6 4.o [ 45s] ftw.c: In function ‘process_entry’: [ 45s] ftw64.c:37:20: error: implicit declaration of function ‘__fxstatat64’; did you mean ‘fstatat64’? [-Wimplicit-function-dec laration] [ 45s] 37 | # define FXSTATAT __fxstatat64 [ 45s] | ^~~~~~~~~~~~ [ 45s] ftw.c:466:15: note: in expansion of macro ‘FXSTATAT’ [ 45s] 466 | statres = FXSTATAT (_STAT_VER, dir->streamfd, name, &st, [ 45s] | ^~~~~~~~ [ 45s] ftw64.c:35:18: error: implicit declaration of function ‘__lxstat64’; did you mean ‘lstat64’? [-Wimplicit-function-declaration] [ 45s] 35 | # define LXSTAT __lxstat64 [ 45s] | ^~~~~~~~~~ [ 45s] ftw.c:474:20: note: in expansion of macro ‘LXSTAT’ [ 45s] 474 | ? LXSTAT (_STAT_VER, name, &st) [ 45s] | ^~~~~~ [ 45s] ftw64.c:36:17: error: implicit declaration of function ‘__xstat64’; did you mean ‘lstat64’? [-Wimplicit-function-declaration] [ 45s] 36 | # define XSTAT __xstat64 [ 45s] | ^~~~~~~~~ [ 45s] ftw.c:475:20: note: in expansion of macro ‘XSTAT’ [ 45s] 475 | : XSTAT (_STAT_VER, name, &st)); [ 45s] | ^~~~~ [ 45s] make[2]: *** [Makefile:904: ftw64.lo] Error 1 -- You are receiving this mail because: You are on the CC list for the bug.

1 2