March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1084388] Update ocaml to current upstream version (4.06.1)
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084388 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com Assignee|security-team(a)suse.de |ohering(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084385] Update swipl to current stable upstream version (7.6.4)
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084385 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com Assignee|security-team(a)suse.de |k0da(a)opensuse.org -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083948] VUL-1: CVE-2018-7667: adminer: SSRF via the server parameter
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083948 Andreas Stieger <astieger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1002214 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083843] Wrong license for bladeRF-fx3-firmware in hardware:sdr
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083843 http://bugzilla.suse.com/show_bug.cgi?id=1083843#c3 --- Comment #3 from Stefan Brüns <stefan.bruens(a)rwth-aachen.de> --- (In reply to Martin Hauke from comment #2) > I'm not a lawyer but I would say it's the MIT license. > > https://github.com/Nuand/bladeRF/tree/master/legal/licenses > https://github.com/Nuand/bladeRF/blob/master/debian/copyright Although the sources created by Nuand (are where they hold the copyright via copyright assignment) are licensed as MIT, this does not apply to the firmware image as a whole. The bladeRF-fx3-firmware package contains the linked firmware binary. Creating the firmware image requires one to download the SDK from Cypress. To download the SDK, one has to acknowledge a license agreement (which is officially only contained in the SDK, i.e. you can read it only after acknowledging it). IANAL either, but after careful reading the the license and posts from Cypress representatives in their forum, a SDK based firmware can be freely redistributable, but is not "free software" in any form. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084388] New: Update ocaml to current upstream version (4.06.1)
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084388 Bug ID: 1084388 Summary: Update ocaml to current upstream version (4.06.1) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: gyoergy.kohut(a)uni-dortmund.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The current version in the repository is 4.05.0 (released on Jul 12, 2017), please update ocaml to the current upstream version 4.06.1 (released on Feb 16, 2018). Starting with version 4.06.0 a bug has been fixed in 4.05.0 that could also be considered security related. Excerpt from the change log: https://github.com/ocaml/ocaml/blob/81dc8e8fcf923baa5e5208f9bc4228930c7c3d5… OCaml 4.06.0 (3 Nov 2017): ... MPR#7640, GPR#1414: reimplementation of Unix.execvpe to fix issues with the 4.05 implementation. The main issue is that the current directory was always searched (last), even if the current directory is not listed in the PATH. (I'm sorry if this is not the correct category for this bug, after a few minutes looking around I didn't find it entirely clear where to submit update request type bugs for packages. As it could be considered somewhat security related, I submitted it here. Thanks.) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084365] systemd-cryptsetup@luks.service not found at first boot on install with encrypted lvm
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084365 http://bugzilla.suse.com/show_bug.cgi?id=1084365#c1 Arvin Schnell <aschnell(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Arvin Schnell <aschnell(a)suse.com> --- Looks like a duplicate of bug #1071350. *** This bug has been marked as a duplicate of bug 1071350 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1071350] Installer failed to create "/etc/crypttab"
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1071350 http://bugzilla.suse.com/show_bug.cgi?id=1071350#c6 Arvin Schnell <aschnell(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mgoppold(a)web.de --- Comment #6 from Arvin Schnell <aschnell(a)suse.com> --- *** Bug 1084365 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1080435] [arm] Unable to handle kernel paging request in arm_copy_to_user
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1080435 http://bugzilla.suse.com/show_bug.cgi?id=1080435#c2 --- Comment #2 from Matwey Kornilov <matwey.kornilov(a)gmail.com> --- It sounds reasonable. From the other hand, why this issue doesn't appear with 4.15 in Factory? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084385] New: Update swipl to current stable upstream version (7.6.4)
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084385 Bug ID: 1084385 Summary: Update swipl to current stable upstream version (7.6.4) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: gyoergy.kohut(a)uni-dortmund.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The current version in the repository is 7.4.1 (released on Mar 2, 2017), please update swipl to the current stable upstream version 7.6.4 (released on Jan 12, 2018). The newer release has several improvements over the old and notably a security vulnerability fix: http://www.swi-prolog.org/news/4bdf6790-6d90-11e7-aede-00163e986a2a http://www.swi-prolog.org/ChangeLog?branch=stable&from=7.4.2&to=7.6.0-rc1 (I'm sorry if this is not the correct category for this bug, after a few minutes looking around I didn't find it entirely clear where to submit update request type bugs for packages. As it's partially security related, I submitted it here. Thanks.) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1080435] [arm] Unable to handle kernel paging request in arm_copy_to_user
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1080435 http://bugzilla.suse.com/show_bug.cgi?id=1080435#c1 --- Comment #1 from Alexander Graf <agraf(a)suse.com> --- Arnd Bergmann from Linaro suggested to disable MEMCPY optimization to see if that's the culprit. -- You are receiving this mail because: You are on the CC list for the bug.

1 0