https://bugzilla.redhat.com/show_bug.cgi?id=2210415
Bug ID: 2210415
Summary: gajim-1.8.0 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: gajim
Keywords: FutureFeature, Triaged
Assignee: mschmidt(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
lemenkov(a)gmail.com, mschmidt(a)redhat.com,
redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de
Target Milestone: ---
Classification: Fedora
Releases retrieved: 1.8.0
Upstream release that is considered latest: 1.8.0
Current version/release in rawhide: 1.7.3-2.fc39
URL: https://gajim.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/870/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/gajim
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2210415
https://bugzilla.redhat.com/show_bug.cgi?id=2283623
Bug ID: 2283623
Summary: segfault at 42 ip 00007fd6b507bb37 sp 00007ffe6bd7d380
error 4 in libdcmnet.so.14.3.6.4[7fd6b4ff1000+fe000] -
dcmtk-3.6.4-11.el8.x86_64
Product: Fedora EPEL
Version: epel8
Hardware: x86_64
OS: Linux
Status: NEW
Component: dcmtk
Severity: high
Assignee: sanjay.ankur(a)gmail.com
Reporter: kkmaslowski(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
igor.raits(a)gmail.com,
neuro-sig(a)lists.fedoraproject.org,
sanjay.ankur(a)gmail.com, troels(a)arvin.dk
Target Milestone: ---
Classification: Fedora
Description of problem:
Tools from dcmtk RPM in latest version 3.6.4-11.el8.x86_64 segfaults.
Version 3.6.4-9.el8.x86_64 works correctly.
Version-Release number of selected component (if applicable):
dcmtk-3.6.4-11.el8.x86_64 - segfaults
How reproducible:
Steps to Reproduce:
Run for example echoscu command: echoscu -aet local_test -aec NRSTORE
$(hostname) 104
Actual results:
[root@nr2 ~]# echoscu -aet local_test -aec NRSTORE $(hostname) 104
Segmentation fault (core dumped)
Expected results:
No segfault after running command
Additional info:
Logs:
May 27 09:32:43 nr2 kernel: movescu[2264818]: segfault at 8 ip 00007f81c7725b42
sp 00007ffc8dabf730 error 4 in libdcmnet.so.14.3.6.4[7f81c769b000+fe000]
May 27 09:36:15 nr2 kernel: movescu[2270694]: segfault at 8 ip 00007fa5ecd2fb42
sp 00007ffef43b6020 error 4 in libdcmnet.so.14.3.6.4[7fa5ecca5000+fe000]
May 27 12:30:16 nr2 kernel: movescu[2593333]: segfault at 7fa6a06d ip
00007fa6a0f23b42 sp 00007ffdf12e4c60 error 4 in
libdcmnet.so.14.3.6.4[7fa6a0e99000+fe000]
May 28 09:11:04 nr2 kernel: findscu[683071]: segfault at 312e42 ip
00007f103837db37 sp 00007ffe3944a9d0 error 4 in
libdcmnet.so.14.3.6.4[7f10382f3000+fe000]
May 28 11:06:44 nr2 kernel: movescu[882155]: segfault at 558700312e42 ip
00007f2f447aeb37 sp 00007ffd63558bb0 error 4 in
libdcmnet.so.14.3.6.4[7f2f44724000+fe000]
May 28 11:09:14 nr2 kernel: movescu[886915]: segfault at 560200312e42 ip
00007f89007ccb37 sp 00007ffd84e82670 error 4 in
libdcmnet.so.14.3.6.4[7f8900742000+fe000]
May 28 11:24:32 nr2 kernel: echoscu[917101]: segfault at 42 ip 00007f52e58a5b37
sp 00007ffc07427990 error 4 in libdcmnet.so.14.3.6.4[7f52e581b000+fe000]
May 28 11:24:47 nr2 kernel: echoscu[917910]: segfault at 42 ip 00007fd6b507bb37
sp 00007ffe6bd7d380 error 4 in libdcmnet.so.14.3.6.4[7fd6b4ff1000+fe000]
Before update (dcmtk-3.6.4-9.el8.x86_64):
[root@nr2 ~]# echoscu -aet local_test -aec NRSTORE $(hostname) 104
[root@nr2 ~]#
After update:
[root@nr2 ~]# echoscu -aet local_test -aec NRSTORE $(hostname) 104
Segmentation fault (core dumped)
[root@nr2 ~]#
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2283623
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2093358
Bug ID: 2093358
Summary: CVE-2021-46790 ntfs-3g: heap-based buffer overflow in
ntfsck
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: ddepaula(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
jferlan(a)redhat.com, kparal(a)redhat.com,
ngompa13(a)gmail.com, rjones(a)redhat.com,
spotrh(a)gmail.com, virt-maint(a)redhat.com
Target Milestone: ---
Classification: Other
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving
buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated;
however, it is shipped by some Linux distributions.
References:
https://github.com/tuxera/ntfs-3g/issues/16http://www.openwall.com/lists/oss-security/2022/05/26/1
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093358
https://bugzilla.redhat.com/show_bug.cgi?id=2093363
Bug ID: 2093363
Summary: CVE-2021-46790 ntfs-3g-system-compression: ntfs-3g:
heap-based buffer overflow in ntfsck [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ntfs-3g-system-compression
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: kparal(a)redhat.com
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
kparal(a)redhat.com, ngompa13(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093363
https://bugzilla.redhat.com/show_bug.cgi?id=2093348
Bug ID: 2093348
Summary: CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a
heap-based buffer overflow in
ntfs_check_log_client_array
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: ddepaula(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
jferlan(a)redhat.com, kparal(a)redhat.com,
ngompa13(a)gmail.com, rjones(a)redhat.com,
spotrh(a)gmail.com, virt-maint(a)redhat.com
Target Milestone: ---
Classification: Other
A crafted NTFS image can cause a heap-based buffer overflow in
ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
References:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4xhttps://github.com/tuxera/ntfs-3g/releases
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093348
https://bugzilla.redhat.com/show_bug.cgi?id=2093353
Bug ID: 2093353
Summary: CVE-2022-30789 ntfs-3g-system-compression: ntfs-3g:
crafted NTFS image can cause a heap-based buffer
overflow in ntfs_check_log_client_array [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ntfs-3g-system-compression
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: kparal(a)redhat.com
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
kparal(a)redhat.com, ngompa13(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093353
https://bugzilla.redhat.com/show_bug.cgi?id=2093340
Bug ID: 2093340
Summary: CVE-2022-30788 ntfs-3g: crafted NTFS image can cause a
heap-based buffer overflow in ntfs_mft_rec_alloc
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: ddepaula(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
jferlan(a)redhat.com, kparal(a)redhat.com,
ngompa13(a)gmail.com, rjones(a)redhat.com,
spotrh(a)gmail.com, virt-maint(a)redhat.com
Target Milestone: ---
Classification: Other
A crafted NTFS image can cause a heap-based buffer overflow in
ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
References:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4xhttps://github.com/tuxera/ntfs-3g/releases
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093340
https://bugzilla.redhat.com/show_bug.cgi?id=2093343
Bug ID: 2093343
Summary: CVE-2022-30788 ntfs-3g-system-compression: ntfs-3g:
crafted NTFS image can cause a heap-based buffer
overflow in ntfs_mft_rec_alloc [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: ntfs-3g-system-compression
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: kparal(a)redhat.com
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
kparal(a)redhat.com, ngompa13(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093343
https://bugzilla.redhat.com/show_bug.cgi?id=2093333
Bug ID: 2093333
Summary: CVE-2022-30787 ntfs-3g: integer underflow in
fuse_lib_readdir enables arbitrary memory read
operations
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: ddepaula(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
jferlan(a)redhat.com, kparal(a)redhat.com,
ngompa13(a)gmail.com, rjones(a)redhat.com,
spotrh(a)gmail.com, virt-maint(a)redhat.com
Target Milestone: ---
Classification: Other
An integer underflow in fuse_lib_readdir enables arbitrary memory read
operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
References:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58https://github.com/tuxera/ntfs-3g/releases
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2093333