August 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1102178] VUL-1: CVE-2018-14505: mitmproxy: mitmweb allows DNS Rebinding attacks, related totools/web/app.py.
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1102178 http://bugzilla.suse.com/show_bug.cgi?id=1102178#c5 --- Comment #5 from Karol Babioch <kbabioch(a)suse.com> --- Ah, sorry, the correct address is: security-team(a)suse.de (for future reference). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1102178] VUL-1: CVE-2018-14505: mitmproxy: mitmweb allows DNS Rebinding attacks, related totools/web/app.py.
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1102178 Karol Babioch <kbabioch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kbabioch(a)suse.com |security-team(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1102178] VUL-1: CVE-2018-14505: mitmproxy: mitmweb allows DNS Rebinding attacks, related totools/web/app.py.
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1102178 http://bugzilla.suse.com/show_bug.cgi?id=1102178#c4 Luigi Baldoni <aloisio(a)gmx.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|aloisio(a)gmx.com |kbabioch(a)suse.com Flags|needinfo?(aloisio(a)gmx.com) | --- Comment #4 from Luigi Baldoni <aloisio(a)gmx.com> --- Submission done, however I'm seeing an error with the security account (Assignee: security(a)suse.de did not match anything), so I'm reassigning to you. I hope it's not a problem. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103524] New: glibc-locale doesn't provide its libraries
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1103524 Bug ID: 1103524 Summary: glibc-locale doesn't provide its libraries Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: steiner-reg(a)bio.ifi.lmu.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, not sure if this it a bug or intended, but glibc-locate in leap 15.0 stopped providing most of its libraries. In leap 42.3 every contained .so file is listed in the provides. In 15.0 "rpm -q --provides" only shows these, although the other libraries like ISO8859-1.so etc. are still in the rpm: glibc-locale = 2.26-lp150.11.3.2 glibc-locale(x86-64) = 2.26-lp150.11.3.2 libCNS.so()(64bit) libGB.so()(64bit) libISOIR165.so()(64bit) libJIS.so()(64bit) libJISX0213.so()(64bit) libKSC.so()(64bit) Thus, every rpm requiring one of the others fails to install. E.g. acroread, but also some of our bioinformatics 3rd party software. cu, Frank -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103391] Upgrade Leap 42.3 to 15.0 fails accepting the disk proposal
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1103391 Arvin Schnell <aschnell(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(aschnell(a)suse.com | |) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103391] Upgrade Leap 42.3 to 15.0 fails accepting the disk proposal
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1103391 Knut Alejandro Anderssen González <knut.anderssen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aschnell(a)suse.com, | |knut.anderssen(a)suse.com Flags| |needinfo?(aschnell(a)suse.com | |) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1102178] VUL-1: CVE-2018-14505: mitmproxy: mitmweb allows DNS Rebinding attacks, related totools/web/app.py.
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1102178 http://bugzilla.suse.com/show_bug.cgi?id=1102178#c3 Karol Babioch <kbabioch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |aloisio(a)gmx.com Resolution|FIXED |--- Flags| |needinfo?(aloisio(a)gmx.com) --- Comment #3 from Karol Babioch <kbabioch(a)suse.com> --- First of all: Thank you very much for your submission and taking care of this. The backport itself looks fine. However, there are a couple of formalities we have to insist on: - Please put a bug reference for each fixed bug in the changes file, i.e. something like boo#1102178 in the paragraph describing the fix for this vulnerability. This make sure our automated systems will pick up the change and notice that a particular codestream is fixed. - Please do not close the bug. Re-assign them back to security(a)suse.de/com. We will take it up from there, i.e. make sure that all codestreams are fixed before closing the bug. Thank you again for your contributions, keep up the good work, and don't bother too much about this overhead. This is just a workflow that is working good for us. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103356] nouveau: fan stays on maximum speed after fanboost
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.novell.com/show_bug.cgi?id=1103356 http://bugzilla.novell.com/show_bug.cgi?id=1103356#c11 --- Comment #11 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Takashi Iwai from comment #10) > I'm building a test kernel with the revert of a suspected commit > (800efb4c2857ec543). > It's being built on OBS home:tiwai:bsc1103356 repo. > > Could you give it a try later? Thanks a lot Takashi, I don't have access to the testmachine today, will try tomorrow. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1086739] Kernel panic booting install DVD(s): kernel BUG at ../kernel/resource.c:722
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1086739 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:8075:important |obs:running:8443:important |obs:running:8443:important | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1098626] No wifi on Lenovo Legion Y520-15ikbm laptop
by bugzilla_noreply＠novell.com 02 Aug '18

02 Aug '18

http://bugzilla.suse.com/show_bug.cgi?id=1098626 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:8075:important |obs:running:8443:important |obs:running:8443:important | -- You are receiving this mail because: You are on the CC list for the bug.

1 0