June 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1137139] VUL-1: CVE-2019-12589: firejail: seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1137139 http://bugzilla.suse.com/show_bug.cgi?id=1137139#c4 --- Comment #4 from Robert Frohl <rfrohl(a)suse.com> --- (In reply to Sebastian Wagner from comment #3) > (In reply to Robert Frohl from comment #1) > > Only affects Factory > > Why is the distribution of the bug "15.1" then? This is a problem in the tooling/the bugzilla setup. We are currently working on improving the situation. But the current solution adopted in the security team for Tumbleweed/specialized repos is to assign tickets to the latest Leap release. The reasoning is that in this case there is at least a record. We also try to assign the tickets to the right person. But sometimes this fails. > I added the CVE-number and the bug number to the changelog and submitted it > to Factory: https://build.opensuse.org/request/show/707400 Thank you -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123131] libreoffice: KDE UI
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1123131 http://bugzilla.suse.com/show_bug.cgi?id=1123131#c30 --- Comment #30 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Tomáš Chvátal from comment #28) > (In reply to Ednilson Miura from comment #25) > > Hello, I'm testing S:M:11056:193563 (libreoffice for SLE12SP3/SP4). is there > > any modification necessary to make this VCL work? > > I mean, I get VLC: gtk2 even exporting SAL_USE_VCLPLUGIN=kde5. > > Also, I'm running kde5 from packagehub and there's no WAYLAND_DISPLAY being > > exported. > > KDE is not supported as an interface for SLE. We would have to rebuild > libreoffice with all the support libraries for KDE in Packagehub to provide > it. It would be enough to build just the plugin in packagehub. Not sure whether the LO build system makes this easy to do though... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137139] VUL-1: CVE-2019-12589: firejail: seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1137139 http://bugzilla.suse.com/show_bug.cgi?id=1137139#c3 Sebastian Wagner <sebix+novell.com(a)sebix.at> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |sebix+novell.com(a)sebix.at --- Comment #3 from Sebastian Wagner <sebix+novell.com(a)sebix.at> --- (In reply to Robert Frohl from comment #1) > Only affects Factory Why is the distribution of the bug "15.1" then? I added the CVE-number and the bug number to the changelog and submitted it to Factory: https://build.opensuse.org/request/show/707400 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123131] libreoffice: KDE UI
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1123131 Martin Pluskal <mpluskal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mpluskal(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137030] Rename yast2-online-update-configuration module to automatic-online-update
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1137030 http://bugzilla.suse.com/show_bug.cgi?id=1137030#c2 Jiri Srain <jsrain(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jsrain(a)suse.com) | --- Comment #2 from Jiri Srain <jsrain(a)suse.com> --- I agree that this name is far from optimal, but I'm not really convinced about the suggestion either (and we should avoid unnecessary multiple renames). In any case, the module is also available in SLES, therefore - if we agree on a rename (which would involve the UX team), we probably need Jira tracking to get it covered by release notes (remember e.g. impact on AutoYaST profiles if we change more than the name at the icon). Least intrusive option would be just to change label from "Online Update Configuration" to "Automatic Online Update" in the control center and module heading. That would assure the backwards compatibility. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137139] VUL-1: CVE-2019-12589: firejail: seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1137139 http://bugzilla.suse.com/show_bug.cgi?id=1137139#c2 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|tiwai(a)suse.com |sebix+novell.com(a)sebix.at --- Comment #2 from Robert Frohl <rfrohl(a)suse.com> --- Just saw that version 0.9.60 is already in Virtualization/firejail. Added sebix, so he knows this ticket exists. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1128844] New: scdoc with flawed pkgconfig file
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1128844 Bug ID: 1128844 Summary: scdoc with flawed pkgconfig file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mvetter(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In the pc file of scdoc 1.9.4 on TW we have 'prefix=/usr/local' which is wrong. For this reason sway 1.0 is detecting scdoc 1.9.4 but is not able to find the correct path to it. This happened because PREFIX=%{_prefix} was set for make install but not for make. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1137181] New: Postfix - TLS is required, but our TLS engine is unavailable
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1137181 Bug ID: 1137181 Summary: Postfix - TLS is required, but our TLS engine is unavailable Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: 64bit OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: allesklein(a)gmx.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Looks like there is a bug in SuSE's implementation of postfix tls certificate handling. smtp_tls_CAfile = Deutsche_Telekom_Root_CA_2.pem smtp_tls_CApath = /var/lib/ca-certificates/openssl or any other combination of CApath and CAfile does not work. The certificate (the pem-file) cannot be found. Simply do smtp_tls_CAfile = /var/lib/ca-certificates/openssl/Deutsche_Telekom_Root_CA_2.pem smtp_tls_CApath = /var/lib/ca-certificates/openssl and all is well. :-) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1069468] Packages should no longer use /var/adm/fillup-templates
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1069468 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|maint:planned:update |maint:planned:update | |obs:running:10351:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137006] devel:languages:misc/nim: Bug config file in wrong location
by bugzilla_noreply＠novell.com 04 Jun '19

04 Jun '19

http://bugzilla.suse.com/show_bug.cgi?id=1137006 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:10352:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0