[Bug 2185716] New: CVE-2023-1906 ImageMagick: heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c [epel-8]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2185716
Bug ID: 2185716
Summary: CVE-2023-1906 ImageMagick: heap-based buffer overflow
in ImportMultiSpectralQuantum() in
MagickCore/quantum-import.c [epel-8]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ImageMagick
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, davide(a)cavalca.name,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2185714
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2185716
1 year
[Bug 2196644] New: CVE-2023-30861 python-flask: flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2196644
Bug ID: 2196644
Summary: CVE-2023-30861 python-flask: flask: Possible
disclosure of permanent session cookie due to missing
Vary: Cookie header [fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: python-flask
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: fzatlouk(a)redhat.com
Reporter: mbenatto(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: danielmyoung(a)gmail.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fzatlouk(a)redhat.com, hushan.jia(a)gmail.com,
karlthered(a)gmail.com, patrick(a)puiterwijk.org,
python-packagers-sig(a)lists.fedoraproject.org,
tdawson(a)redhat.com, tflink(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2196643
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2196644
1 year
[Bug 2203386] New: [abrt] nemo: __strcmp_avx2(): nemo killed by SIGSEGV
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2203386
Bug ID: 2203386
Summary: [abrt] nemo: __strcmp_avx2(): nemo killed by SIGSEGV
Product: Fedora
Version: 38
Hardware: x86_64
Status: NEW
Whiteboard: abrt_hash:99394516a0e196608b50270f5deb839d5c001b3b;VAR
IANT_ID=cinnamon;
Component: nemo
Assignee: leigh123linux(a)googlemail.com
Reporter: ingobeh(a)hotmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
leigh123linux(a)googlemail.com, riehecky(a)fnal.gov
Target Milestone: ---
Classification: Fedora
Version-Release number of selected component:
nemo-5.6.4-1.fc38
Additional info:
reporter: libreport-2.17.9
backtrace_rating: 4
cmdline: /usr/bin/nemo
reason: nemo killed by SIGSEGV
crash_function: __strcmp_avx2
package: nemo-5.6.4-1.fc38
cgroup: 0::/user.slice/user-1000.slice/session-4.scope
type: CCpp
runlevel: N 5
uid: 1000
journald_cursor:
s=73f5e300f4d44bf0b8d33a2571820641;i=56928;b=4322ac57adbe4f41a7add5b251b22443;m=1143608a;t=5fb7c09330779;x=582eb515dc046aec
kernel: 6.2.14-300.fc38.x86_64
rootdir: /
executable: /usr/bin/nemo
Truncated backtrace:
Thread no. 1 (15 frames)
#0 __strcmp_avx2 at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:994
#1 cache_alias_lookup at ../gio/xdgmime/xdgmimecache.c:333
#2 __gio_xdg_cache_unalias_mime_type at ../gio/xdgmime/xdgmimecache.c:988
#3 __gio_xdg_cache_mime_type_subclass at ../gio/xdgmime/xdgmimecache.c:911
#4 __gio_xdg_mime_type_subclass at ../gio/xdgmime/xdgmime.c:844
#5 _gio_xdg_mime_type_subclass at ../gio/xdgmime/xdgmime.c:884
#6 g_content_type_guess at ../gio/gcontenttype.c:857
#7 get_content_type at ../gio/glocalfileinfo.c:1413
#8 _g_local_file_info_get at ../gio/glocalfileinfo.c:2092
#9 g_local_file_enumerator_next_file at ../gio/glocalfileenumerator.c:409
#10 g_file_enumerator_next_file at ../gio/gfileenumerator.c:238
#11 visit_directory at ../libnemo-private/nemo-search-engine-advanced.c:912
#12 search_thread_func at
../libnemo-private/nemo-search-engine-advanced.c:1054
#13 g_thread_proxy at ../glib/gthread.c:831
#15 clone3 at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2203386
1 year
[Bug 2187812] New: Blender RPM is missing all add-ons except cycles
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2187812
Bug ID: 2187812
Summary: Blender RPM is missing all add-ons except cycles
Product: Fedora
Version: 37
OS: Linux
Status: NEW
Component: blender
Keywords: Desktop, Regression
Severity: high
Assignee: luya_tfz(a)thefinalzone.net
Reporter: bruno(a)postle.net
QA Contact: extras-qa(a)fedoraproject.org
CC: code(a)musicinmybrain.net,
design-devel(a)lists.fedoraproject.org,
epel-packagers-sig(a)lists.fedoraproject.org,
kwizart(a)gmail.com, luya_tfz(a)thefinalzone.net,
negativo17(a)gmail.com, promac(a)gmail.com
Target Milestone: ---
Classification: Fedora
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101
Firefox/112.0
Build Identifier:
'Edit > Preferences > Add-ons' should list a large number of add-ons that ship
with blender but are not enabled by default.
All of these add-ons are missing except for 'cycles'.
Reproducible: Always
Steps to Reproduce:
Only one add-on is shipped with 3.5.0-1:
$ rpm -qlp blender-3.5.0-1.fc37.x86_64.rpm | grep addons
The previous 3.4.1-2 rpm has over one hundred addons:
$ rpm -qlp blender-3.4.1-2.fc37.x86_64.rpm | grep addons
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2187812
1 year
[Bug 2196841] New: [abrt] gnome-calendar: g_type_check_instance_is_fundamentally_a(): gnome-calendar killed by SIGSEGV
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2196841
Bug ID: 2196841
Summary: [abrt] gnome-calendar:
g_type_check_instance_is_fundamentally_a():
gnome-calendar killed by SIGSEGV
Product: Fedora
Version: 38
Hardware: x86_64
Status: NEW
Whiteboard: abrt_hash:df228ecd7c084664f7b089ed5a1b0e387d9afc12;VAR
IANT_ID=workstation;
Component: gnome-calendar
Assignee: gnome-sig(a)lists.fedoraproject.org
Reporter: lray+redhatbugzilla(a)mailbox.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
gnome-sig(a)lists.fedoraproject.org,
igor.raits(a)gmail.com, klember(a)redhat.com
Target Milestone: ---
Classification: Fedora
Version-Release number of selected component:
gnome-calendar-44.1-1.fc38
Additional info:
reporter: libreport-2.17.9
type: CCpp
reason: gnome-calendar killed by SIGSEGV
journald_cursor:
s=f1c927778ab54699bd81c0f1cf030a6d;i=8c50e3;b=d5ab157295b247f9929fc5cf9df049cc;m=14f60bc5f8;t=5fb55bb7d27a2;x=7c96bceb7a7f0a17
executable: /usr/bin/gnome-calendar
cmdline: /usr/bin/gnome-calendar --gapplication-service
cgroup:
0::/user.slice/user-1000.slice/user@1000.service/app.slice/dbus-:1.2-org.gnome.Calendar@0.service
rootdir: /
uid: 1000
kernel: 6.2.14-300.fc38.x86_64
package: gnome-calendar-44.1-1.fc38
runlevel: N 5
backtrace_rating: 4
crash_function: g_type_check_instance_is_fundamentally_a
Truncated backtrace:
Thread no. 1 (8 frames)
#0 g_type_check_instance_is_fundamentally_a at ../gobject/gtype.c:4166
#1 g_object_ref at ../gobject/gobject.c:3775
#2 g_cclosure_marshal_generic_va at ../gobject/gclosure.c:1642
#3 _g_closure_invoke_va at ../gobject/gclosure.c:895
#6 update_event_in_idle_cb at ../src/core/gcal-calendar-monitor.c:1101
#10 g_main_context_iterate.isra.0 at ../glib/gmain.c:4276
#11 g_main_context_iteration at ../glib/gmain.c:4343
#12 g_application_run at ../gio/gapplication.c:2573
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2196841
1 year
[Bug 2181846] New: ImageMagick-7.1.1.5 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2181846
Bug ID: 2181846
Summary: ImageMagick-7.1.1.5 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: ImageMagick
Keywords: FutureFeature, Triaged
Assignee: luya_tfz(a)thefinalzone.net
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, davide(a)cavalca.name,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 7.1.1.5
Upstream release that is considered latest: 7.1.1.5
Current version/release in rawhide: 7.1.1.4-2.fc39
URL: https://imagemagick.org
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release...
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/328484/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/ImageMagick
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2181846
1 year
[Bug 2196513] New: Many script files are missing
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2196513
Bug ID: 2196513
Summary: Many script files are missing
Product: Fedora
Version: 37
Hardware: x86_64
OS: Linux
Status: NEW
Component: blender
Keywords: Regression
Severity: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: sunhaitao(a)devtaste.com
QA Contact: extras-qa(a)fedoraproject.org
CC: code(a)musicinmybrain.net,
design-devel(a)lists.fedoraproject.org,
epel-packagers-sig(a)lists.fedoraproject.org,
kwizart(a)gmail.com, luya_tfz(a)thefinalzone.net,
negativo17(a)gmail.com
Target Milestone: ---
Classification: Fedora
It seems that many first-party add-ons are missing from the blender 3.5
package.
Reproducible: Always
Steps to Reproduce:
1. Click "Edit / Preferences" from the main menu bar.
2. Click "Add-ons" from the dialog popped up.
Actual Results:
A lot of "Missing script files" messages appear.
Expected Results:
No such message exists.
Fedora 38 is also affected.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2196513
1 year