January 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1120255] libselinux build requires python3 caused additional build cycle
by bugzilla_noreply＠novell.com 07 Jan '19

07 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1120255 http://bugzilla.novell.com/show_bug.cgi?id=1120255#c2 --- Comment #2 from Max Lin <mlin(a)suse.com> --- Please submit to SLE15 SP1 also. Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1120275] system freezes at KDE sddm after doing nothing for around 2 hours
by bugzilla_noreply＠novell.com 07 Jan '19

07 Jan '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1120275 http://bugzilla.opensuse.org/show_bug.cgi?id=1120275#c3 --- Comment #3 from Zhiyuan Gao <zgao(a)suse.com> --- (In reply to Zhiyuan Gao from comment #2) > (In reply to Bart Van Assche from comment #1) > > On my desktop sddm hangs after bootup. I'm using kernel version 4.19.12 and > > the i915 display driver. This problem does not occur if I use the gdm > > display manager. Which kernel version and which display driver are you > > using? Does switching to another display manager help (update-alternatives > > --config default-displaymanager && systemctl restart display-manager)? > > Thank you for replying! > > This bug happened under below environment. > OS Information: > 1. 4.12.14-lp150.11-default openSUSE Leap15 KDE > 2. 4.20-rc6 openSUSE Leap15 KDE > 3. 4.18.16-300.fc29.x86_64 fedora29 Gnome > > Display Driver: > nouveau > > I presume it might not be relevant to sddm ---- as once in a while, this bug > hits me when sddm is not on. An update on OS Information OS Information: 1. 4.12.14-lp150.11-default openSUSE Leap15 KDE 2. 4.20-rc6 openSUSE Leap15 KDE 3. 4.12.14-lp150.12.4 openSUSE Leap15 KDE I was wondering if it is a problem with my laptop hardware so now I switched to Fedora29 gnome and let's see if the problem still hits me or not. Thank you for following this bug! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118869] erlang maintenance update: 20.3.8.15
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1118869 http://bugzilla.novell.com/show_bug.cgi?id=1118869#c4 Matwey Kornilov <matwey.kornilov(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Matwey Kornilov <matwey.kornilov(a)gmail.com> --- Update released. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118867] erlang maintenance update: 18.3.4.11
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1118867 http://bugzilla.novell.com/show_bug.cgi?id=1118867#c4 Matwey Kornilov <matwey.kornilov(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Matwey Kornilov <matwey.kornilov(a)gmail.com> --- Update released. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082747] VUL-0: CVE-2018-7440: leptonica: The gplotMakeOutputfunction allows command injection via a $(command) approach in the gplotrootname argument. This issue exists because of an incomplete fix forCV
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1082747 http://bugzilla.novell.com/show_bug.cgi?id=1082747#c1 Kyrill Detinov <lazy.kent(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Kyrill Detinov <lazy.kent(a)opensuse.org> --- Fixed in 1.77.0. https://build.opensuse.org/request/show/658973 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082748] VUL-0: CVE-2018-7442: leptonica: The gplotMakeOutputfunction does not block '/' characters in the gplot rootname argument,potentially leading to path traversal and arbitrary file overwrite.
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1082748 http://bugzilla.novell.com/show_bug.cgi?id=1082748#c1 Kyrill Detinov <lazy.kent(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Kyrill Detinov <lazy.kent(a)opensuse.org> --- Fixed in 1.77.0. https://build.opensuse.org/request/show/658973 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082749] VUL-0: CVE-2018-7441: leptonica: hardcoded /tmp pathnames are being used, which might allow local users to overwrite arbitrary files or have unspecified other impact by creatingfiles in advance or winning a race condition, as demonstra
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1082749 http://bugzilla.novell.com/show_bug.cgi?id=1082749#c1 Kyrill Detinov <lazy.kent(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Kyrill Detinov <lazy.kent(a)opensuse.org> --- Fixed in 1.77.0. https://build.opensuse.org/request/show/658973 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082843] VUL-0: CVE-2017-18196: Leptonica 1.74.4 constructs unintended pathnames (containing duplicated pathcomponents) when operating on files in /tmp subdirectories, which might allowlocal users to bypass intended file restrictions by leveraging
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1082843 http://bugzilla.novell.com/show_bug.cgi?id=1082843#c1 Kyrill Detinov <lazy.kent(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Kyrill Detinov <lazy.kent(a)opensuse.org> --- Fixed in 1.77.0. https://build.opensuse.org/request/show/658973 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1120205] VUL-0: CVE-2018-19960: python-onionshare: debug_mode function might allow local users to overwrite files or obtain sensitive information
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1120205 http://bugzilla.novell.com/show_bug.cgi?id=1120205#c2 Axel Braun <axel.braun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #2 from Axel Braun <axel.braun(a)gmx.de> --- Deployed to Factory -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1119636] Backintime-qt4 does not start with ModuleNotFoundError: No module named 'PyQt4.sip'
by bugzilla_noreply＠novell.com 06 Jan '19

06 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1119636 http://bugzilla.novell.com/show_bug.cgi?id=1119636#c10 --- Comment #10 from Tejas Guruswamy <masterpatricko(a)gmail.com> --- Thank you Wolfgang, your python-sip changes look good to me, please submit them to KDE:Qt and Factory. I will keep the bug open till the patch is accepted but this should be all that is needed (at least until backintime moves to qt5). -- You are receiving this mail because: You are on the CC list for the bug.

1 0