August 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1091376] Mozilla Thunderbird for i586 is not built
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1091376 http://bugzilla.suse.com/show_bug.cgi?id=1091376#c15 --- Comment #15 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:2174-1: An update that fixes 11 vulnerabilities is now available. Category: security (moderate) Bug References: 1076907,1085780,1091376,1098998,1100079,1100081,1100082,1100780 CVE References: CVE-2018-12359,CVE-2018-12360,CVE-2018-12362,CVE-2018-12363,CVE-2018-12364,CVE-2018-12365,CVE-2018-12366,CVE-2018-12372,CVE-2018-12373,CVE-2018-12374,CVE-2018-5188 Sources used: SUSE Linux Enterprise Workstation Extension 15 (src): MozillaThunderbird-52.9.1-3.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1076907] package MozillaFirefox does not provide mimehandler(text/html)
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1076907 http://bugzilla.suse.com/show_bug.cgi?id=1076907#c31 --- Comment #31 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:2174-1: An update that fixes 11 vulnerabilities is now available. Category: security (moderate) Bug References: 1076907,1085780,1091376,1098998,1100079,1100081,1100082,1100780 CVE References: CVE-2018-12359,CVE-2018-12360,CVE-2018-12362,CVE-2018-12363,CVE-2018-12364,CVE-2018-12365,CVE-2018-12366,CVE-2018-12372,CVE-2018-12373,CVE-2018-12374,CVE-2018-5188 Sources used: SUSE Linux Enterprise Workstation Extension 15 (src): MozillaThunderbird-52.9.1-3.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1101938] kgapi logs full oauth traffic to the journal
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1101938 http://bugzilla.suse.com/show_bug.cgi?id=1101938#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2018:2170-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1101938 CVE References: Sources used: openSUSE Leap 15.0 (src): libkgapi-17.12.3-lp150.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103597] New: VUL-0: CVE-2018-0498, CVE-2018-0497: mbedtls: Two plaintext recovery issues
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1103597 Bug ID: 1103597 Summary: VUL-0: CVE-2018-0498, CVE-2018-0497: mbedtls: Two plaintext recovery issues Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/212136/ OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Security Assignee: mpluskal(a)suse.com Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1611638 CVE-2018-0497 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169. CVE-2018-0498 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack. References: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advi… https://bugzilla.redhat.com/show_bug.cgi?id=1611638 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1096414] Storage::Exception on upgrading from Leap 42.3 to Leap 15
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1096414 http://bugzilla.suse.com/show_bug.cgi?id=1096414#c20 --- Comment #20 from Ole-Bjørn Tuftedal <ole-bjorn(a)trilho.org> --- (In reply to Knut Alejandro Anderssen González from comment #18) > (In reply to Andreas Schallenberg from comment #17) > > Upgrading the desktop computer worked for me. The laptop has its root > > partition encrypted so I cannot use that workaround (it includes disabling > > the partition in fstab). > > Taking in account the last comment, I will consider it as fixed. If you see my report below, comment 19, it seems there may still be a problem if the system partition is a raid volume. This is not my case, so I could not test that. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1096414] Storage::Exception on upgrading from Leap 42.3 to Leap 15
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1096414 http://bugzilla.suse.com/show_bug.cgi?id=1096414#c19 Ole-Bjørn Tuftedal <ole-bjorn(a)trilho.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(ole-bjorn@trilho. | |org) | --- Comment #19 from Ole-Bjørn Tuftedal <ole-bjorn(a)trilho.org> --- I have been 2000 km away from the computer, but now I have tried the upgrade. I followed Ancor Gonzalez Sosa's procedure A, posted as comment 22 on 2018-06-19 16:10:56 UTC to bug 1094749: A) Use the YaST self-update feature to get a completely up-to-date (but not so well tested) version of the installer. Boot with the Leap 15.0 ISO and add this boot option while selecting the "Upgrade" option in Linuxrc (that is, in this screen[2]) SELF_UPDATE=https://download.opensuse.org/repositories/home:/ancorgs:/test_… The installer could not mount the raid, but did not crash as before. As the raid does not contain system partitions, that meant I could do the upgrade. The error message was: "The partition /dev/md0 could not be mounted. mount: /mnt/data special device /dev/md0 does not exist. If you are sure that the partition is not necessary for the update (not a system partition), click Continue." -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103320] screen running with TERM=screen.xterm is broken
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1103320 http://bugzilla.suse.com/show_bug.cgi?id=1103320#c8 Michael Schröder <mls(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |werner(a)suse.com --- Comment #8 from Michael Schröder <mls(a)suse.com> --- Wow, I wonder how that screen.xterm entry got created. It's insane that there are so many differences. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1095096] Leap 42.3: update broke boot with encrypted partitions on NVMe
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1095096 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:7961:moderate |ibs:running:8096:moderate |ibs:running:8096:moderate |maint:planned:update -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1074578] CVE-2017-5753/CVE-2017-5754/CVE-2017-5715) Meltdown / Spectre fixes / Intel PTI changes missing
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

1 0

[Bug 907387] nut systemd service file (nut-driver.service) has wrong ExecStart/Stop entry.
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=907387 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|maint:planned:update |obs:running:8433:important |obs:running:8433:important | -- You are receiving this mail because: You are on the CC list for the bug.

1 0