November 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1112920] [Build 20181022] openQA test fails in start_install as plasma5-desktop package not built for ppc64 (BE)
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1112920 http://bugzilla.suse.com/show_bug.cgi?id=1112920#c21 --- Comment #21 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Michel Normand from comment #20) > Created attachment 788317 [details] > bug1112920_qt5_12_QtQuick_Controls.log > > (In reply to Fabian Vogt from comment #19) > > FYIO, it seems I need to add more packages builds: > > libqt5-qtbase > libqt5-qtdeclarative > libqt5-qtgraphicaleffects > libqt5-qtquickcontrol > libqt5-qtxmlpatterns > > with those 5.12 packages I was able to run in my ppc64 guest without error > the command /usr/bin/qmlplugindump-qt5 -v QtQuick.Controls 1 > as detailed in attached file. Perfect, with that you should be able to build plasma5-desktop as well. > Do we already have a target for Qt 5.12 in Tumbleweed ? It's currently in beta, 5.12.0 Beta 3 is in a staging. As soon as it's finally out (end of this month) it'll get merged. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108632] VUL-0: CVE-2018-17098: soundtouch: remote denial of service (heap corruption from size inconsistency) in the WavFileBase class in WavFile.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108632 http://bugzilla.suse.com/show_bug.cgi?id=1108632#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3610-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): soundtouch-1.8.0-3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 (src): soundtouch-1.8.0-3.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108631] VUL-0: CVE-2018-17097: soundtouch: remote denial of service (double free) in the WavFileBase class in WavFile.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108631 http://bugzilla.suse.com/show_bug.cgi?id=1108631#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3610-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): soundtouch-1.8.0-3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 (src): soundtouch-1.8.0-3.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108630] VUL-0: CVE-2018-17096: soundtouch: remote denial of service (assertion failure and application exit) in the BPMDetect class in BPMDetect.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108630 http://bugzilla.suse.com/show_bug.cgi?id=1108630#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3610-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): soundtouch-1.8.0-3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 (src): soundtouch-1.8.0-3.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108632] VUL-0: CVE-2018-17098: soundtouch: remote denial of service (heap corruption from size inconsistency) in the WavFileBase class in WavFile.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108632 http://bugzilla.suse.com/show_bug.cgi?id=1108632#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3606-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Workstation Extension 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Software Development Kit 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Server 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Desktop 12-SP3 (src): soundtouch-1.7.1-5.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108631] VUL-0: CVE-2018-17097: soundtouch: remote denial of service (double free) in the WavFileBase class in WavFile.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108631 http://bugzilla.suse.com/show_bug.cgi?id=1108631#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3606-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Workstation Extension 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Software Development Kit 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Server 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Desktop 12-SP3 (src): soundtouch-1.7.1-5.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108630] VUL-0: CVE-2018-17096: soundtouch: remote denial of service (assertion failure and application exit) in the BPMDetect class in BPMDetect.cpp
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108630 http://bugzilla.suse.com/show_bug.cgi?id=1108630#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:3606-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1108630,1108631,1108632 CVE References: CVE-2018-17096,CVE-2018-17097,CVE-2018-17098 Sources used: SUSE Linux Enterprise Workstation Extension 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Software Development Kit 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Server 12-SP3 (src): soundtouch-1.7.1-5.6.1 SUSE Linux Enterprise Desktop 12-SP3 (src): soundtouch-1.7.1-5.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1112920] [Build 20181022] openQA test fails in start_install as plasma5-desktop package not built for ppc64 (BE)
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1112920 http://bugzilla.suse.com/show_bug.cgi?id=1112920#c20 Michel Normand <normand(a)linux.vnet.ibm.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(normand(a)linux.vne | |t.ibm.com) | --- Comment #20 from Michel Normand <normand(a)linux.vnet.ibm.com> --- Created attachment 788317 --> http://bugzilla.suse.com/attachment.cgi?id=788317&action=edit bug1112920_qt5_12_QtQuick_Controls.log (In reply to Fabian Vogt from comment #19) FYIO, it seems I need to add more packages builds: libqt5-qtbase libqt5-qtdeclarative libqt5-qtgraphicaleffects libqt5-qtquickcontrol libqt5-qtxmlpatterns with those 5.12 packages I was able to run in my ppc64 guest without error the command /usr/bin/qmlplugindump-qt5 -v QtQuick.Controls 1 as detailed in attached file. Do we already have a target for Qt 5.12 in Tumbleweed ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1114382] "Optional update to add gcc8" is incomplete
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1114382 http://bugzilla.suse.com/show_bug.cgi?id=1114382#c2 --- Comment #2 from Ulrich Windl <Ulrich.Windl(a)rz.uni-regensburg.de> --- (In reply to Marcus Meissner from comment #1) > zypper in gcc8 > > to get the compiler. This is all very much confusing: You say "gcc8" for "zypper in" installs the compiler, while installing "Optional update to add gcc8" with Yast seems NOT to install "gcc8". Also, in Yast the description for "Optional update to add gcc8" says: "This update adds the GNU Compiler Collection 8 to openSUSE...". To me this should include at least one compiler... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1108672] VUL-0: CVE-2018-17088: jhead: Integer overflow in gpsinfo.c while running jhead
by bugzilla_noreply＠novell.com 02 Nov '18

02 Nov '18

http://bugzilla.suse.com/show_bug.cgi?id=1108672 http://bugzilla.suse.com/show_bug.cgi?id=1108672#c6 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #6 from Marcus Meissner <meissner(a)suse.com> --- done -- You are receiving this mail because: You are on the CC list for the bug.

1 0