April 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1131253] New: Please update PHPunit from 7.0 to 8
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1131253 Bug ID: 1131253 Summary: Please update PHPunit from 7.0 to 8 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: jweberhofer(a)weberhofer.at QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- As the support for phpunit 7 ends in february 2020, please replace it by phpunit 8. I have created two requests: * https://build.opensuse.org/request/show/690584 * https://build.opensuse.org/request/show/690585 Please add also php-csfixer which we need in some cases to update some syntactical changes in phpunit-tests. There is currently only a request to include to factory: https://build.opensuse.org/request/show/688888 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131235] [Build 8.17] openQA test fails in live_installation: YaST internal error
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131235 http://bugzilla.suse.com/show_bug.cgi?id=1131235#c6 --- Comment #6 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Ancor Gonzalez Sosa from comment #5) > Ludwig, any reason for that package to not be in the live image?(In reply to > Fabian Vogt from comment #4) > > (In reply to Ancor Gonzalez Sosa from comment #2) > > > Apparently the package yast2-netp-client is just missing from the media. > > > > Which can only happen if the package dependencies are not enough - I guess > > autoyast2-installation needs to require yast2-ntp-client? > > It may be, but I'm not so sure. > > The YaST installer is very configurable in terms of what steps must be > executed during the process and which installer features would be used. That > depends on the person(s) defining the control file used to configure the > installer and defining the installation media content. In this case it seems to be a top-level YaST.import call though, so I don't see a way around a hard requires here. > Introducing a hard dependency on all the possibilities (depending on the > configuration, the installer may use 5 or 55 YaST modules) is not an option. > > All that be said, I would bet the current problem was introduced already a > year ago, here: > https://github.com/yast/yast-autoinstallation/pull/371 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131244] cronie 1.5.3 only executes one line from each crontab file
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131244 Jiachen Zhang <jiachen.zhang(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |rbrown(a)suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131235] [Build 8.17] openQA test fails in live_installation: YaST internal error
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131235 http://bugzilla.suse.com/show_bug.cgi?id=1131235#c5 --- Comment #5 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- Ludwig, any reason for that package to not be in the live image?(In reply to Fabian Vogt from comment #4) > (In reply to Ancor Gonzalez Sosa from comment #2) > > Apparently the package yast2-netp-client is just missing from the media. > > Which can only happen if the package dependencies are not enough - I guess > autoyast2-installation needs to require yast2-ntp-client? It may be, but I'm not so sure. The YaST installer is very configurable in terms of what steps must be executed during the process and which installer features would be used. That depends on the person(s) defining the control file used to configure the installer and defining the installation media content. Introducing a hard dependency on all the possibilities (depending on the configuration, the installer may use 5 or 55 YaST modules) is not an option. All that be said, I would bet the current problem was introduced already a year ago, here: https://github.com/yast/yast-autoinstallation/pull/371 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1001167] LO Impress extremely slow when libreoffice-gtk3 is installed
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1001167 http://bugzilla.suse.com/show_bug.cgi?id=1001167#c11 Tomáš Chvátal <tchvatal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #11 from Tomáš Chvátal <tchvatal(a)suse.com> --- Based on the activity here this should be fixed. Feel free to reopen/new ticket if you are still reproducing it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1085088] LibreOffice is not able connect to remote mysql / mariadb by native drivers and crashes
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1085088 http://bugzilla.suse.com/show_bug.cgi?id=1085088#c1 Tomáš Chvátal <tchvatal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Tomáš Chvátal <tchvatal(a)suse.com> --- 1 year later but native clients rewrite finished the mariadb is now directly tied to the libreoffice starting with release 6.2 with that these crashes should happen no more. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131245] New: CVE-2019-0197: mod_http2, possible crash on late upgrade
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1131245 Bug ID: 1131245 Summary: CVE-2019-0197: mod_http2, possible crash on late upgrade Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: pgajdos(a)suse.com Reporter: dcermak(a)suse.com QA Contact: bnc-team-screening(a)forge.provo.novell.com CC: draht(a)schaltsekun.de, kstreitova(a)suse.com Found By: --- Blocker: --- Forward from of a bug report received via the OSS-security mailing list: CVE-2019-0197: mod_http2, possible crash on late upgrade Severity: Low Vendor: The Apache Software Foundation Versions Affected: httpd 2.4.34 to 2.4.38 Description: When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Servers that never enabled the h2 protocol or only enabled it for https: and did not set"H2Upgrade on" are unaffected by this issue. Mitigation: All httpd users deploying mod_http2 should upgrade to 2.4.39 or later. Credit: The issue was discovered by Stefan Eissing, greenbytes.de. References: https://httpd.apache.org/security/vulnerabilities_24.html -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1131243] New: CVE-2019-0215: mod_ssl access control bypass
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1131243 Bug ID: 1131243 Summary: CVE-2019-0215: mod_ssl access control bypass Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: pgajdos(a)suse.com Reporter: dcermak(a)suse.com QA Contact: bnc-team-screening(a)forge.provo.novell.com CC: draht(a)schaltsekun.de, kstreitova(a)suse.com Found By: --- Blocker: --- Forward of a bug report received via the OSS-security mailing list: CVE-2019-0215: mod_ssl access control bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: httpd 2.4.27 to 2.4.38 Description: In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions. Mitigation: This issue can be mitigated by disabling the TLSv1.3 protocol for a VirtualHost which requires per-location or per-directory client certificate authentication. Credit: The issue was discovered by Michael Kaufmann. References: https://httpd.apache.org/security/vulnerabilities_24.html -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1131235] [Build 8.17] openQA test fails in live_installation: YaST internal error
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131235 http://bugzilla.suse.com/show_bug.cgi?id=1131235#c4 --- Comment #4 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Ancor Gonzalez Sosa from comment #2) > Apparently the package yast2-netp-client is just missing from the media. Which can only happen if the package dependencies are not enough - I guess autoyast2-installation needs to require yast2-ntp-client? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131235] [Build 8.17] openQA test fails in live_installation: YaST internal error
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131235 http://bugzilla.suse.com/show_bug.cgi?id=1131235#c3 --- Comment #3 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- yast2-ntp-client, I meant. Obviously. -- You are receiving this mail because: You are on the CC list for the bug.

1 0