May 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1125035] [osc build] botches Boolean (rich) Dependencies
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1125035 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:10860:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1134072] VUL-1: CVE-2019-11638: gnu-recutils: NULL pointer dereference in the function rec_field_name_equal_p
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1134072 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1134100] New: [doc] 18.2.1 Creating a Root CA
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1134100 Bug ID: 1134100 Summary: [doc] 18.2.1 Creating a Root CA Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: dvcroft(a)arb.com QA Contact: fs(a)suse.com Found By: --- Blocker: --- 18.2.1 Creating a Root CA https://doc.opensuse.org/documentation/leap/security/html/book.security/cha… The module described does not seem to exist and other pages cite that the module has not been re-written. (https://forums.opensuse.org/showthread.php/531653-YAST-CA-not-available-any…!) Is this documentation in need of correction, or will the release sometime in the future make it helpful? Is there a planned date for having some sort of CA management available? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1125035] [osc build] botches Boolean (rich) Dependencies
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1125035 http://bugzilla.suse.com/show_bug.cgi?id=1125035#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2019:1150-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1125035 CVE References: Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): obs-service-format_spec_file-20190312-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132060] VUL-1: CVE-2019-11007: GraphicsMagick,ImageMagick: a heap-based buffer over-read in the ReadMNGImage function of coders/png.c allows attackers to cause a denial of service or information disclosure
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1132060 http://bugzilla.suse.com/show_bug.cgi?id=1132060#c15 --- Comment #15 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2019:1320-1: An update that solves 13 vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1106989,1106996,1107609,1120381,1122033,1124365,1124366,1124368,1128649,1130330,1131317,1132053,1132054,1132060 CVE References: CVE-2018-16412,CVE-2018-16413,CVE-2018-16644,CVE-2018-20467,CVE-2019-10650,CVE-2019-11007,CVE-2019-11008,CVE-2019-11009,CVE-2019-7175,CVE-2019-7395,CVE-2019-7397,CVE-2019-7398,CVE-2019-9956 Sources used: openSUSE Leap 42.3 (src): ImageMagick-6.8.8.1-82.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132054] VUL-0: CVE-2019-11008: GraphicsMagick,ImageMagick: a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c allows remote attackers to cause DOS or other unspecified impact
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1132054 http://bugzilla.suse.com/show_bug.cgi?id=1132054#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2019:1320-1: An update that solves 13 vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1106989,1106996,1107609,1120381,1122033,1124365,1124366,1124368,1128649,1130330,1131317,1132053,1132054,1132060 CVE References: CVE-2018-16412,CVE-2018-16413,CVE-2018-16644,CVE-2018-20467,CVE-2019-10650,CVE-2019-11007,CVE-2019-11008,CVE-2019-11009,CVE-2019-7175,CVE-2019-7395,CVE-2019-7397,CVE-2019-7398,CVE-2019-9956 Sources used: openSUSE Leap 42.3 (src): ImageMagick-6.8.8.1-82.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1128045] New: please consider dropping CONFIG_DEVKMEM
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1128045 Bug ID: 1128045 Summary: please consider dropping CONFIG_DEVKMEM Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Linux Status: NEW Severity: Enhancement Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: eppers(a)posteo.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- It is cool the kernel is built with STRICT_DEVMEM and IO_STRICT_DEVMEM, but why DEVKMEM? I think this is a surprising choice for a production kernel. Could you please confirm CONFIG_DEVKMEM is still needed for something? If there is no concrete use case, I would suggest to disable it. This also seems to be what the rest of the distro universe is doing. Best regards Ed -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1125768] New: go1.10 not built for armv7, which prevent docker images to be built
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1125768 Bug ID: 1125768 Summary: go1.10 not built for armv7, which prevent docker images to be built Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: armv7 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- go1.10 (used by go package) is not built for armv7, which leads to go uninstallable for armv7 on Leap 15.1 armv7, and we get the following unresolvable for docker image: "Nothing provides skopeo needed by kiwi-image-docker-requires, nothing provides umoci needed by kiwi-image-docker-requires" SR already available to enable build of go1.10 on %arm: https://build.opensuse.org/request/show/677107 The update must go through SLE. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1121397] GCC 9: go{1.4,1.9,1.10,1.11} build fails
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1121397 http://bugzilla.suse.com/show_bug.cgi?id=1121397#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2019:1149-1: An update that solves one vulnerability and has two fixes is now available. Category: security (moderate) Bug References: 1121397,1125768,974800 CVE References: CVE-2019-6486 Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): go1.10-1.10.8-1.8.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133579] Package wrong URL prevents successful installation - LEAP 15
by bugzilla_noreply＠novell.com 03 May '19

03 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1133579 http://bugzilla.suse.com/show_bug.cgi?id=1133579#c4 --- Comment #4 from Tony Su <tonysu(a)su-networking.com> --- This was a default 15.1 install with Online Repositories enabled(of course required) to install the LXQt Desktop -- You are receiving this mail because: You are on the CC list for the bug.

1 0