October 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1110259] btrfsmaintenance update hangs waiting for job restarts
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1110259 http://bugzilla.suse.com/show_bug.cgi?id=1110259#c15 Diego Assencio <dassencio(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dassencio(a)suse.com --- Comment #15 from Diego Assencio <dassencio(a)suse.com> --- This problem seems the same as bsc#1152092. Can someone please confirm? Thank you very much! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1153167] New: VUL-1: CVE-2019-17264: libfwsi: heap-based buffer over-read in liblnk_location_information_read_data in liblnk_location_information.c
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1153167 Bug ID: 1153167 Summary: VUL-1: CVE-2019-17264: libfwsi: heap-based buffer over-read in liblnk_location_information_read_data in liblnk_location_information.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/244246/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: Greg.Freemyer(a)gmail.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-17264 In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17264 http://www.cvedetails.com/cve/CVE-2019-17264/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17264 https://github.com/libyal/liblnk/issues/38 https://github.com/libyal/liblnk/compare/20181227...20191006 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1153166] New: VUL-1: CVE-2019-17263: libfwsi: heap-based buffer over-read in libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1153166 Bug ID: 1153166 Summary: VUL-1: CVE-2019-17263: libfwsi: heap-based buffer over-read in libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/244245/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: Greg.Freemyer(a)gmail.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-17263 In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17263 http://www.cvedetails.com/cve/CVE-2019-17263/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17263 https://github.com/libyal/libfwsi/issues/13 https://github.com/libyal/libfwsi/compare/20181227...20191006 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1151490] Regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1151490 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com Assignee|security-team(a)suse.de |vcizek(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1153083] gcc-9 pretty printers absent
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1153083 http://bugzilla.suse.com/show_bug.cgi?id=1153083#c1 Richard Biener <rguenther(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #1 from Richard Biener <rguenther(a)suse.com> --- They are now in libstdc++6-pp-gcc9, supplementing gdb and libstdc++, so people do not need libstdc++6-devel to debug. You should have gotten it via the usual upgrading unless you block supplementing by default? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1148679] [Build 20190827] Broken yast command line tests
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1148679 http://bugzilla.suse.com/show_bug.cgi?id=1148679#c7 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(jeriveramoya@suse | |.com) --- Comment #7 from Josef Reidinger <jreidinger(a)suse.com> --- (In reply to Joaquín Rivera from comment #6) > Similar issue with yast2-network 4.2.17-1.1: > https://openqa.opensuse.org/tests/1049949#step/yast2_cmdline/24 sorry, I made typo. In link it is correct. Version with fix is 4.2.19. So at least this version is needed. So if you can trigger it with at least that version ( should be probably now in staging ) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1148679] [Build 20190827] Broken yast command line tests
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1148679 http://bugzilla.suse.com/show_bug.cgi?id=1148679#c6 Joaquín Rivera <jeriveramoya(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jeriveramoya@suse | |.com) | --- Comment #6 from Joaquín Rivera <jeriveramoya(a)suse.com> --- Similar issue with yast2-network 4.2.17-1.1: https://openqa.opensuse.org/tests/1049949#step/yast2_cmdline/24 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1151793] PHP pecl install does not work
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1151793 http://bugzilla.suse.com/show_bug.cgi?id=1151793#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2019:2271-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1145095,1146360,1151793 CVE References: CVE-2019-11041,CVE-2019-11042 Sources used: openSUSE Leap 15.0 (src): php7-7.2.5-lp150.2.25.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1153156] New: Ktouch - Runtime error - file was compiled ahead of time
by bugzilla_noreply＠novell.com 07 Oct '19

07 Oct '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1153156 Bug ID: 1153156 Summary: Ktouch - Runtime error - file was compiled ahead of time Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: Linux Status: NEW Severity: Critical Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: yoray3.14(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- SUMMARY While opening Ktouch an error pops out in a new window containing this message - "Typewriter Trainer has encountered a runtime error and has to be closed" in Details the message states - "qrc:/ktouch/qml/main.qml: File was compiled ahead of time with an incompatible version of Qt and the original file cannot be found. Please recompile" STEPS TO REPRODUCE 1. Open Ktouch OBSERVED RESULT Application crash and error message generated. EXPECTED RESULT Starting Ktouch. SOFTWARE/OS VERSIONS Operating System: openSUSE Tumbleweed 20191003 KDE Plasma Version: 5.16.5 KDE Frameworks Version: 5.62.0 Qt Version: 5.13.1 Kernel Version: 5.3.1-1-default OS Type: 64-bit Processors: 12 × Intel® Core™ i7-3930K CPU @ 3.20GHz Memory: 15.6 GiB of RAM -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1151793] PHP pecl install does not work
by bugzilla_noreply＠novell.com 06 Oct '19

06 Oct '19

http://bugzilla.suse.com/show_bug.cgi?id=1151793 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:11177:important | |obs:running:11176:important | -- You are receiving this mail because: You are on the CC list for the bug.

1 0