November 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1057900] traceroute needs to have enabled in it's AppArmor profile RO access to files in /proc/sys/net/ipv4/
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1057900 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5957:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1074247] python-urllib3: fails test suite starting with 31.12.2017
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1074247 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:9284:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 879402] date format of atq is unusable for sorting
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=879402 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| maint:planned:update | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1113894] [Staging] Virtualbox fails to build against puthon 3.7
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1113894 http://bugzilla.suse.com/show_bug.cgi?id=1113894#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1113894) was mentioned in https://build.opensuse.org/request/show/646137 Factory / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1112097] VUL-0: virtualbox: October 2018 release, multiple vulnerabilities
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1112097 http://bugzilla.suse.com/show_bug.cgi?id=1112097#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1112097) was mentioned in https://build.opensuse.org/request/show/646137 Factory / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1113894] [Staging] Virtualbox fails to build against puthon 3.7
by bugzilla_noreply＠novell.com 03 Nov '18

03 Nov '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1113894 http://bugzilla.opensuse.org/show_bug.cgi?id=1113894#c3 --- Comment #3 from Larry Finger <Larry.Finger(a)gmail.com> --- Fixes to build under either Python 3.6 or 3.7 have been pushed to Factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1114434] VUL-0: CVE-2018-18820: icecast: buffer overflow in url-auth
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1114434 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1080244] conflict of liberation-fonts and liberation2-fonts
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1080244 http://bugzilla.suse.com/show_bug.cgi?id=1080244#c24 --- Comment #24 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2018:3612-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 1080244 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): suse-xsl-stylesheets-2.0.7.2-14.6.35 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1057900] traceroute needs to have enabled in it's AppArmor profile RO access to files in /proc/sys/net/ipv4/
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1057900 http://bugzilla.suse.com/show_bug.cgi?id=1057900#c17 --- Comment #17 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2018:3611-1: An update that has 5 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1047937,1057150,1057900,1099452,906858 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): apparmor-2.8.2-51.10.1 SUSE Linux Enterprise Server 12-SP3 (src): apparmor-2.8.2-51.10.1 SUSE Linux Enterprise Desktop 12-SP3 (src): apparmor-2.8.2-51.10.1 SUSE CaaS Platform ALL (src): apparmor-2.8.2-51.10.1 SUSE CaaS Platform 3.0 (src): apparmor-2.8.2-51.10.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1114383] chkstat is not always called after Zypper has installed packages
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1114383 http://bugzilla.suse.com/show_bug.cgi?id=1114383#c9 --- Comment #9 from Björn Voigt <bjoernv(a)arcor.de> --- Sorry, the commenters in #c1, #c2, #c3, #c4 and #c5 misunderstood me a bit. I did NOT wrote this bug report to complain about /usr/lib64/libexec/kcheckpass permissions in package kscreenlocker. The kscreenlocker problem was meant as an example for a more general issue with Zypper and chkstat. #c6 pointed this out correctly. > Entries in /etc/permissions.local actually only work reliably for locally > installed files like in /usr/local/... that are not managed by zypper. Or for > overriding permissions of files that ship with set*id and thus call > %set_permissions and %verify_permissions. I do not think, that it is enough, that single packages call "chkstat --system --set". This may work with the files listed in /etc/permissions /etc/permissions.d/* /etc/permissions.easy /etc/permissions.paranoid /etc/permissions.secure because these files are more or less static and only a limited number of packages are affected. E.g. the files listed in /etc/permissions.easy come from around 40 RPM packages on my TW installation. In theory each of the >=40 packages may call chkstat in postinstall scripts. But Root can list any file in /etc/permissions.local, e.g. files from package A.rpm and B.rpm. During a Zypper run, Zypper can for instance update packages C.rpm and D.rpm. Then it is useless to call "chkstat", if C.rpm and D.rpm does not contain files from /etc/permissions.{easy,paranoid,secure}. But if Zypper updates the packages A.rpm, C.rpm and D.rpm, then Zypper should call chkstat to update the permissions. I find #c7 interesting: > It might work to add > %transfiletriggerin -- / > /usr/bin/chkstat --system > to permissions.spec to run chkstat at the end of every transaction. -- You are receiving this mail because: You are on the CC list for the bug.

1 0