- openSUSE Bugs

[Bug 1222289] Keyboard map is not applied in rescue system
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222289 https://bugzilla.suse.com/show_bug.cgi?id=1222289#c6 --- Comment #6 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-RU-2024:1873-1: An update that contains two features and has three fixes can now be installed. Category: recommended (moderate) Bug References: 1218621, 1222289, 1223326 Jira References: SLE-22578, SLE-24584 Maintenance Incident: [SUSE:Maintenance:34035](https://smelt.suse.de/incident/34035/) Sources used: Development Tools Module 15-SP5 (src): linuxrc-7.0.32.8-150500.3.9.4 openSUSE Leap 15.5 (src): linuxrc-7.0.32.8-150500.3.9.4 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221077] New: prm cannot handle filenames with spaces in package
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1221077 Bug ID: 1221077 Summary: prm cannot handle filenames with spaces in package Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- AFAICT the filelist is generated correctly but the rpm scripting fails. https://build.suse.de/build/Devel:Kernel:linux-next/standard/x86_64/kernel-… https://build.suse.de/package/live_build_log/Devel:Kernel:linux-next/kernel… -- You are receiving this mail because: You are on the CC list for the bug.

1 30

[Bug 1225633] New: Migration from MicroOS Desktop to Aeon failed on none EFI system
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225633 Bug ID: 1225633 Summary: Migration from MicroOS Desktop to Aeon failed on none EFI system Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: rbrown(a)suse.com Reporter: vortex(a)z-ray.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 875210 --> https://bugzilla.suse.com/attachment.cgi?id=875210&action=edit tik install log file Hey there, was about to migrate one of my MicroOS Desktop installs to Aeon using the Aeon installer image. After it had backed up the old home, installing the new system and moving the home directory back it failed with the error message: "Command /usr/sbin/efibootmgr -o FAILED" I am aware that Aeon does not support none EFI systems. Might it be possible to do a EFI check before installing everything and tell the user? The full log does confirm that EFI is not enabled. It was just my idiocy that I forgot to enable EFI on my old Laptop beforehand. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189495] %autopatch missing -m and -M parameter
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1189495 https://bugzilla.suse.com/show_bug.cgi?id=1189495#c19 --- Comment #19 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1557-2: An update that solves one vulnerability and has two security fixes can now be installed. Category: security (moderate) Bug References: 1189495, 1191175, 1218686 CVE References: CVE-2021-3521 Maintenance Incident: [SUSE:Maintenance:33599](https://smelt.suse.de/incident/33599/) Sources used: openSUSE Leap 15.6 (src): rpm-4.14.3-150400.59.16.1, python-rpm-4.14.3-150400.59.16.1, rpm-ndb-4.14.3-150400.59.16.1 Basesystem Module 15-SP6 (src): rpm-4.14.3-150400.59.16.1, python-rpm-4.14.3-150400.59.16.1 Development Tools Module 15-SP6 (src): rpm-4.14.3-150400.59.16.1 Public Cloud Module 15-SP6 (src): rpm-ndb-4.14.3-150400.59.16.1 Python 3 Module 15-SP6 (src): python-rpm-4.14.3-150400.59.16.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225659] New: VUL-0: CVE-2024-24686: meshlab: stack-based buffer overflow vulnerabilities exist in the readOFF
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225659 Bug ID: 1225659 Summary: VUL-0: CVE-2024-24686: meshlab: stack-based buffer overflow vulnerabilities exist in the readOFF Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407926/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the faces section of an `.off` file processed via the `readOFF` function. References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-24686 https://www.cve.org/CVERecord?id=CVE-2024-24686 https://bugzilla.redhat.com/show_bug.cgi?id=2283908 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225658] New: VUL-0: CVE-2024-24685: meshlab: stack-based buffer overflow vulnerabilities exist in the readOF
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225658 Bug ID: 1225658 Summary: VUL-0: CVE-2024-24685: meshlab: stack-based buffer overflow vulnerabilities exist in the readOF Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407925/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the vertex section of an `.off` file processed via the `readOFF` function. References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-24685 https://www.cve.org/CVERecord?id=CVE-2024-24685 https://bugzilla.redhat.com/show_bug.cgi?id=2283906 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225656] New: VUL-0: CVE-2024-23951: meshlab: specially crafted .msh file can lead to an out-of-bounds write
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225656 Bug ID: 1225656 Summary: VUL-0: CVE-2024-23951: meshlab: specially crafted .msh file can lead to an out-of-bounds write Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407921/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_element_field` function while handling an `ascii`.msh` file. References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23951 https://www.cve.org/CVERecord?id=CVE-2024-23951 https://bugzilla.redhat.com/show_bug.cgi?id=2283947 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225655] New: VUL-0: CVE-2024-23950: meshlab: specially crafted .msh file can lead to an out-of-bounds write
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225655 Bug ID: 1225655 Summary: VUL-0: CVE-2024-23950: meshlab: specially crafted .msh file can lead to an out-of-bounds write Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407920/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_element_field` function while handling an `binary`.msh` file. References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23950 https://www.cve.org/CVERecord?id=CVE-2024-23950 https://bugzilla.redhat.com/show_bug.cgi?id=2283949 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225657] New: VUL-0: CVE-2024-24684: meshlab: stack-based buffer overflow vulnerabilities exist in the readOFF
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225657 Bug ID: 1225657 Summary: VUL-0: CVE-2024-24684: meshlab: stack-based buffer overflow vulnerabilities exist in the readOFF Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407924/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the header parsing occuring while processing an `.off` file via the `readOFF` function. We can see above that at [0] a stack-based buffer called `comment` is defined with an hardcoded size of `1000 bytes`. The call to `fscanf` at [1] is unsafe and if the first line of the header of the `.off` files is longer than 1000 bytes it will overflow the `header` buffer. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-24684 https://www.cve.org/CVERecord?id=CVE-2024-24684 https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929 https://bugzilla.redhat.com/show_bug.cgi?id=2283904 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1225654] New: VUL-0: CVE-2024-23949: meshlab: pecially crafted .msh file can lead to an out-of-bounds write
by bugzilla_noreply＠suse.com 30 May '24

30 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1225654 Bug ID: 1225654 Summary: VUL-0: CVE-2024-23949: meshlab: pecially crafted .msh file can lead to an out-of-bounds write Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/407919/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: martin.liska(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_node_field` function while handling an `ascii`.msh` file. References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23949 https://www.cve.org/CVERecord?id=CVE-2024-23949 https://bugzilla.redhat.com/show_bug.cgi?id=2283951 -- You are receiving this mail because: You are on the CC list for the bug.

1 1