November 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 970706] boost-devel does not pull libboost_context shlib package
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=970706 http://bugzilla.suse.com/show_bug.cgi?id=970706#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2016:2575-2: An update that has three recommended fixes can now be installed. Category: recommended (low) Bug References: 925309,970706,996917 CVE References: Sources used: SUSE Enterprise Storage 3 (src): boost-1.54.0-20.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 970669] Inconsistent osrelease handling on sle11 sp3 and probably older distros
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=970669 http://bugzilla.suse.com/show_bug.cgi?id=970669#c13 --- Comment #13 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2016:2070-2: An update that has 10 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 970669,972311,978150,979448,983017,983512,985661,988506,989193,989798 CVE References: Sources used: SUSE Enterprise Storage 3 (src): salt-2015.8.7-17.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 852073] [libyui-qt-pkg][PATCHish] Not installed packages are listed twice in View->Package Groups
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=852073 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jreidinger(a)suse.c | |om) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 852073] [libyui-qt-pkg][PATCHish] Not installed packages are listed twice in View->Package Groups
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=852073 Lukas Ocilka <locilka(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(jreidinger(a)suse.c | |om) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 998152] Error in setting default boot entry (due non-latin symbols)
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=998152 http://bugzilla.suse.com/show_bug.cgi?id=998152#c6 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #6 from Josef Reidinger <jreidinger(a)suse.com> --- fix merged. If it still happen in TW with yast2-bootloader 3.2.5 or newer, please reopen with fresh logs. Thanks -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 852073] [libyui-qt-pkg][PATCHish] Not installed packages are listed twice in View->Package Groups
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=852073 http://bugzilla.suse.com/show_bug.cgi?id=852073#c22 --- Comment #22 from Josef Reidinger <jreidinger(a)suse.com> --- (In reply to Mindaugas Baranauskas from comment #21) > Please backport to 42.2, 13.2 I expect you missing also 42.1, but in general I think that showing package twice is not so serious problem, that deserve additional work with backporting. Workaround is trivial, do not cause crash nor data loss. So currently I am not convinced that we should create maintenance update for this issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 852073] [libyui-qt-pkg][PATCHish] Not installed packages are listed twice in View->Package Groups
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=852073 http://bugzilla.suse.com/show_bug.cgi?id=852073#c21 --- Comment #21 from Mindaugas Baranauskas <opensuse.lietuviu.kalba(a)gmail.com> --- Please backport to 42.2, 13.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1005047] New: cabal-rpm does not add documentation to files to install
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.opensuse.org/show_bug.cgi?id=1005047 Bug ID: 1005047 Summary: cabal-rpm does not add documentation to files to install Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- To build packages with documentation I have to patch cabal-rpm generated spec like this @@ -125,6 +125,8 @@ %files -f %{name}.files %defattr(-,root,root,-) %doc LICENSE +%docdir /usr/share/%{pkg_name}-%{version} +/usr/share/%{pkg_name}-%{version} Since the change is generic and independent of the actual package it can be generated by cabal-rpm to start with Sure, some packages have documentation and some not. However, it is easier to delete pre-generated spec lines than it is to add them. Also I think it preferable to support documented packages out of the box and require manual intervention on undocumented packages rather than the other way around. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1007886] missing bugfix in netfront.c
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.suse.com/show_bug.cgi?id=1007886 Charles Arnold <carnold(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|xen-bugs(a)suse.de |jbeulich(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1007866] New: Memcached: 1.4.32 and earlier buffer overflow
by bugzilla_noreply＠novell.com 01 Nov '16

01 Nov '16

http://bugzilla.opensuse.org/show_bug.cgi?id=1007866 Bug ID: 1007866 Summary: Memcached: 1.4.32 and earlier buffer overflow Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Reference: [1] http://seclists.org/oss-sec/2016/q4/290 [1]: =================================================== Release notes with tarball here: https://github.com/memcached/memcached/wiki/ReleaseNotes1433 Copy/paste from the relase notes: Serious remote code execution bugs are fixed in this release. The bugs are related to the binary protocol as well as SASL authentication of the binary protocol. If you do not use the binary protocol at all, a workaround is to start memcached with -B ascii - otherwise you will need the patch in this release. The diff may apply cleanly to older versions as the affected code has not changed in a long time. Full details of the issues may be found here: http://blog.talosintel.com/2016/10/memcached-vulnerabilities.html In summary: two binary protocol parsing errors, and a SASL authentication parsing error allows buffer overflows of keys into arbitrary memory space. With enough work undesireable effects are possible. CVE's were requested and assigned by the reporter. I unfortunately don't have them handy :( -Dormando =================================================== [2] https://software.opensuse.org/package/memcached [2]: =================================================== TW: 1.4.25 42.1: 1.4.22 13.2: 1.4.20 network:utilities repo: 1.4.25 server:php:extensions repo: 1.4.25 filesystems:openATTIC repo: 1.4.25 =================================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 2