[Bug 2097310] CVE-2022-2068 openssl: the c_rehash script allows command injection
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
Marian Rehak <mrehak(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|qe_staff, security, team |
|ocp_embargoes |
CC| |bootloader-eng-team@redhat.
| |com, cfergeau(a)redhat.com,
| |crobinso(a)redhat.com,
| |crypto-team(a)lists.fedorapro
| |ject.org, dueno(a)redhat.com,
| |elima(a)redhat.com,
| |epel-packagers-sig(a)lists.fe
| |doraproject.org,
| |erik-fedora(a)vanpienbroek.nl
| |, f4bug(a)amsat.org,
| |fmartine(a)redhat.com,
| |ktietz(a)redhat.com,
| |marcandre.lureau(a)redhat.com
| |, michel(a)michel-slm.name,
| |mjg59(a)srcf.ucam.org,
| |mspacek(a)redhat.com,
| |pjones(a)redhat.com,
| |redhat-bugzilla(a)linuxnetz.d
| |e, rharwood(a)redhat.com,
| |rh-spice-bugs(a)redhat.com,
| |rjones(a)redhat.com,
| |sahana(a)redhat.com,
| |tm(a)t8m.info,
| |virt-maint(a)lists.fedoraproj
| |ect.org,
| |virt-maint(a)redhat.com
Deadline|2022-06-21 |
Summary|EMBARGOED CVE-2022-2068 |CVE-2022-2068 openssl: the
|openssl: the c_rehash |c_rehash script allows
|script allows command |command injection
|injection |
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
1 year, 10 months
[Bug 2098889] New: F37FailsToInstall: python3-django-q
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2098889
Bug ID: 2098889
Summary: F37FailsToInstall: python3-django-q
Product: Fedora
Version: rawhide
Status: NEW
Component: python-django-q
Assignee: michel(a)michel-slm.name
Reporter: mhroncok(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
infra-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
python-sig(a)lists.fedoraproject.org
Blocks: 2045109 (F37FailsToInstall,RAWHIDEFailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically. If you feel that
this output has mistakes, please contact me via email (mhroncok(a)redhat.com).
Your package (python-django-q) Fails To Install in Fedora 37:
can't install python3-django-q:
- nothing provides python(abi) = 3.10 needed by
python3-django-q-1.3.9-3.fc36.noarch
- nothing provides python3.10dist(django) >= 2.2 needed by
python3-django-q-1.3.9-3.fc36.noarch
- nothing provides (python3.10dist(blessed) < 2~~ with
python3.10dist(blessed) >= 1.17.6) needed by
python3-django-q-1.3.9-3.fc36.noarch
- nothing provides (python3.10dist(django-picklefield) < 4~~ with
python3.10dist(django-picklefield) >= 3.0.1) needed by
python3-django-q-1.3.9-3.fc36.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai...),
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors. To reproduce, use the
koji/local repo only, e.g. in mock:
$ mock -r fedora-37-x86_64 --disablerepo='*' --enablerepo=local install
python3-django-q
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter...
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2045109
[Bug 2045109] Fedora 37 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2098889
1 year, 10 months
[Bug 2091812] New: ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2091812
Bug ID: 2091812
Summary: ImageMagick: outside the range of representable values
of type 'unsigned long' at coders/pcl.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
In ImageMagick version < 7.1.0-29, there is an outside the range of
representable values of type 'unsigned long' at coders/pcl.c.
References:
https://github.com/ImageMagick/ImageMagick/issues/4985
https://github.com/ImageMagick/ImageMagick/pull/4986
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2091812
1 year, 10 months
[Bug 2095122] New: CVE-2022-32546 ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2095122
Bug ID: 2095122
Summary: CVE-2022-32546 ImageMagick: outside the range of
representable values of type 'unsigned long' at
coders/pcl.c [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: ImageMagick
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: luya_tfz(a)thefinalzone.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2095122
1 year, 10 months
[Bug 2095123] New: CVE-2022-32546 ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c [epel-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2095123
Bug ID: 2095123
Summary: CVE-2022-32546 ImageMagick: outside the range of
representable values of type 'unsigned long' at
coders/pcl.c [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ImageMagick
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: luya_tfz(a)thefinalzone.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2095123
1 year, 10 months
[Bug 2091811] New: ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2091811
Bug ID: 2091811
Summary: ImageMagick: outside the range of representable values
of type 'unsigned char' at coders/psd.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
In ImageMagick version < 7.1.0-28, there is an outside the range of
representable values of type 'unsigned char' at coders/psd.c.
References:
https://github.com/ImageMagick/ImageMagick/issues/4962
https://github.com/ImageMagick/ImageMagick/pull/4963
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2091811
1 year, 10 months
[Bug 2096516] New: CVE-2022-32545 ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c [epel-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2096516
Bug ID: 2096516
Summary: CVE-2022-32545 ImageMagick: outside the range of
representable values of type 'unsigned char' at
coders/psd.c [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ImageMagick
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: luya_tfz(a)thefinalzone.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2096516
1 year, 10 months
[Bug 2096515] New: CVE-2022-32545 ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2096515
Bug ID: 2096515
Summary: CVE-2022-32545 ImageMagick: outside the range of
representable values of type 'unsigned char' at
coders/psd.c [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: ImageMagick
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: luya_tfz(a)thefinalzone.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2096515
1 year, 10 months