https://bugzilla.redhat.com/show_bug.cgi?id=2064172
Bug ID: 2064172
Summary: CVE-2021-44961 slic3r: specially crafted stl files can
exhaust available memory
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: mhroncok(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Other
A memory leakage flaw exists in the class PerimeterGenerator of Slic3r
libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can
exhaust available memory. An attacker can provide malicious files to trigger
this vulnerability.
Reference:
https://hackmd.io/nDT_UKLyRQendxDwil9A4w
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064172
https://bugzilla.redhat.com/show_bug.cgi?id=2064173
Bug ID: 2064173
Summary: CVE-2021-44961 slic3r: specially crafted stl files can
exhaust available memory [fedora-all]
Product: Fedora
Version: 35
Status: NEW
Component: slic3r
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mhroncok(a)redhat.com
Reporter: mrehak(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: mhroncok(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064173
https://bugzilla.redhat.com/show_bug.cgi?id=2046373
Bug ID: 2046373
Summary: CVE-2021-45847 slic3r: NULL pointer dereference in 3MF
XML via a crafted 3MF input file [fedora-all]
Product: Fedora
Version: 35
Status: NEW
Component: slic3r
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: mhroncok(a)redhat.com
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: mhroncok(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2046373
https://bugzilla.redhat.com/show_bug.cgi?id=1971453
Bug ID: 1971453
Summary: perl-Crypt-RandPasswd-0.06-17.fc35 FTBFS randomly:
t/01-word.t: Use of uninitialized value $last_unit in
hash element at
Crypt-RandPasswd-0.06/blib/lib/Crypt/RandPasswd.pm
line 2205
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Crypt-RandPasswd
Assignee: emmanuel(a)seyman.fr
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
perl-Crypt-RandPasswd-0.06-17.fc35 fails to build randomly because t/01-word.t
fails with 0.07 chance:
$ I=0; while prove -b -v t/01-word.t; do I=$((I+1)); echo $I; done
[...]
45
t/01-word.t ..
1..20
ok 1 - create random word of length 10
ok 2 - create random word of length 11
ok 3 - create random word of length 12
ok 4 - create random word of length 13
ok 5 - create random word of length 14
ok 6 - create random word of length 15
ok 7 - create random word of length 16
ok 8 - create random word of length 17
ok 9 - create random word of length 18
ok 10 - create random word of length 19
ok 11 - create random word of length 5 .. 10
ok 12 - create random word of length 6 .. 11
ok 13 - create random word of length 7 .. 12
ok 14 - create random word of length 8 .. 13
ok 15 - create random word of length 9 .. 14
ok 16 - create random word of length 10 .. 15
ok 17 - create random word of length 11 .. 16
ok 18 - create random word of length 12 .. 17
ok 19 - create random word of length 13 .. 18
Use of uninitialized value $last_unit in hash element at
/home/test/fedora/perl-Crypt-RandPasswd/Crypt-RandPasswd-0.06/blib/lib/Crypt/RandPasswd.pm
line 2205.
Failed 1/20 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2031448
Bug ID: 2031448
Summary: Please branch and build perl-XML-TreePP in epel9
Product: Fedora EPEL
Version: epel9
Status: NEW
Component: perl-XML-TreePP
Assignee: marianne(a)tuxette.fr
Reporter: gary.buhrmaster(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: marianne(a)tuxette.fr,
perl-devel(a)lists.fedoraproject.org,
vanmeeuwen+fedora(a)kolabsys.com
Target Milestone: ---
Classification: Fedora
Please branch and build perl-XML-TreePP in epel9.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2031448
https://bugzilla.redhat.com/show_bug.cgi?id=1990904
Bug ID: 1990904
Summary: Requesting EPEL 8 branch
Product: Fedora
Version: rawhide
Hardware: x86_64
OS: Linux
Status: NEW
Component: slic3r
Assignee: mhroncok(a)redhat.com
Reporter: jeffclay(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: mhroncok(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Requesting build for EPEL 8.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2060186
Bug ID: 2060186
Summary: perl-Devel-PPPort-3.66 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Devel-PPPort
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, mspacek(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 3.66
Current version/release in rawhide: 3.64-1.fc36
URL: http://search.cpan.org/dist/Devel-PPPort/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/5760/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2060186
https://bugzilla.redhat.com/show_bug.cgi?id=2092367
Bug ID: 2092367
Summary: Upgrade perl-V to 0.16
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-V
Assignee: jvromans(a)squirrel.nl
Reporter: jplesnik(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jvromans(a)squirrel.nl,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest Fedora delivers 0.15 version. Upstream released 0.16. When you have free
time, please upgrade it.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2092367
https://bugzilla.redhat.com/show_bug.cgi?id=2082759
Bug ID: 2082759
Summary: perl-Net-eBay-0.62 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Net-eBay
Keywords: FutureFeature, Triaged
Assignee: xavier(a)bachelot.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
xavier(a)bachelot.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 0.62
Current version/release in rawhide: 0.61-19.fc36
URL: http://search.cpan.org/dist/Net-eBay/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/3149/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2082759