February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1023536] Upgrade sparse to version 20161117
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023536 http://bugzilla.suse.com/show_bug.cgi?id=1023536#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1023536) was mentioned in https://build.opensuse.org/request/show/454634 Factory / sparse https://build.opensuse.org/request/show/454635 42.2 / sparse -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023552] update-ca-certificates deletes installed certs
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023552 http://bugzilla.suse.com/show_bug.cgi?id=1023552#c1 --- Comment #1 from Jo Schulze <jo(a)feuersee.de> --- Instead of "It is unclear where self created CA certs have to be placed." it should read "It is unclear where self created non CA certs have to be placed." What I did: I created my own CA and installed it by copying to /etc/pki/trust/anchors/ then executed update-ca-certificates Then I signed 3 certs with my CA and did copy them to /etc/ssl/certs and .../private (the keys). However, whenever update-ca-certificates is executed, these certs are deleted from /etc/ssl and services relying on them fail. Either it's a bug that update-ca-certificates deletes unknown certs or there is a need for documentation where to put system-wide used non-CA certs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1022446] New: VUL-1: CVE-2017-5612: wordpress: A cross-site scripting (XSS) in posts list table
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1022446 Bug ID: 1022446 Summary: VUL-1: CVE-2017-5612: wordpress: A cross-site scripting (XSS) in posts list table Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/217 ============================================ A cross-site scripting (XSS) vulnerability was discovered in the posts list table. Reported by Ian Dunn of the WordPress Security Team. https://github.com/WordPress/WordPress/commit/4482f9207027de8f36630737ae085… ============================================ Assigned: CVE-2017-5612 https://software.opensuse.org/package/wordpress 4.6.1 version for TW|42.(1|2) in server:php:applications repo. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1022445] New: VUL-1: CVE-2017-5611: wordpress: SQLi when passing unsafe data
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1022445 Bug ID: 1022445 Summary: VUL-1: CVE-2017-5611: wordpress: SQLi when passing unsafe data Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/217 ============================================ WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we've added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Mo Jangda (batmoo). https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56… ============================================ Assigned: CVE-2017-5611 https://software.opensuse.org/package/wordpress 4.6.1 version for TW|42.(1|2) in server:php:applications repo. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1022444] New: VUL-1: CVE-2017-5610: wordpress: unauthorized user's bypass
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1022444 Bug ID: 1022444 Summary: VUL-1: CVE-2017-5610: wordpress: unauthorized user's bypass Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/217 ============================================ The user interface for assigning taxonomy terms in Press This is shown to users who do not have permissions to use it. Reported by David Herrera of Alley Interactive. https://github.com/WordPress/WordPress/commit/21264a31e0849e6ff793a06a17de8… ============================================ Assigned: CVE-2017-5610 https://software.opensuse.org/package/wordpress 4.6.1 version for TW|42.(1|2) in server:php:applications repo. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1006651] Blurry text on scaled display
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1006651 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:6354:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1015761] jsoncpp: pkgconf script causing build issues
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1015761 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:6355:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1000519] [KDE Plasma 5.8 beta] after changing icons, some icons remain same even after re-login
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1000519 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:6354:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1015761] jsoncpp: pkgconf script causing build issues
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1015761 http://bugzilla.suse.com/show_bug.cgi?id=1015761#c7 --- Comment #7 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1015761) was mentioned in https://build.opensuse.org/request/show/454622 42.2 / jsoncpp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1015761] New: devel:libraries:c_c /jsoncpp: Please, bump version at least to 1.7.4 on Leap 42.2
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1015761 Bug ID: 1015761 Summary: devel:libraries:c_c /jsoncpp: Please, bump version at least to 1.7.4 on Leap 42.2 Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: crrodriguez(a)opensuse.org Reporter: szotsaki(a)gmail.com QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- jsoncpp 1.7.3 (which one is in Leap 42.2) has a severe issue which breaks all builds in which its -devel package is included: their pkgconf script is broken. More info here: - https://github.com/open-source-parsers/jsoncpp/commit/101fcf0806bbdf8a9202c… - https://github.com/open-source-parsers/jsoncpp/pull/493 - https://github.com/open-source-parsers/jsoncpp/releases/tag/1.7.4 Please, bump (at least) to 1.7.4 on Leap 42.2. Thank you! -- You are receiving this mail because: You are on the CC list for the bug.

1 8