August 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1143711] New: spec-cleaner replaces pkg-config by pkgconfig
by bugzilla_noreply＠novell.com 01 Aug '19

01 Aug '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1143711 Bug ID: 1143711 Summary: spec-cleaner replaces pkg-config by pkgconfig Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: tchvatal(a)suse.com Reporter: sbrabec(a)suse.com QA Contact: qa-bugs(a)suse.de CC: qzhao(a)suse.com Found By: --- Blocker: --- spec-cleaner replaces Requires: pkg-config by Requires: pkgconfig It is not correct for SUSE spec files. The package was renamed from pkgconfig to pkg-config in 2007 by both upstream and SUSE. The virtual symbol pkgconfig is kept only for compatibility with Fedora (Fedora did never the package rename to the new upstream name). -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1102247] fstrim on bcache enabled file system produces an Oops
by bugzilla_noreply＠novell.com 01 Aug '19

01 Aug '19

http://bugzilla.suse.com/show_bug.cgi?id=1102247 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:12094:important |ibs:running:12094:important |ibs:running:12098:important |ibs:running:12098:important |ibs:running:12092:important |ibs:running:12092:important | |ibs:running:12118:important -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1143747] New: VUL-0: CVE-2019-14465: schismtracker: heap-based buffer overflow in fmt_mtm_load_song in fmt/mtm.c
by bugzilla_noreply＠novell.com 01 Aug '19

01 Aug '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1143747 Bug ID: 1143747 Summary: VUL-0: CVE-2019-14465: schismtracker: heap-based buffer overflow in fmt_mtm_load_song in fmt/mtm.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/238554/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-14465 fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-14465 http://www.cvedetails.com/cve/CVE-2019-14465/ -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1143743] New: VUL-0: CVE-2019-5020: yara: An exploitable denial of service vulnerability exists in the object lookup functionality of Yara
by bugzilla_noreply＠novell.com 01 Aug '19

01 Aug '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1143743 Bug ID: 1143743 Summary: VUL-0: CVE-2019-5020: yara: An exploitable denial of service vulnerability exists in the object lookup functionality of Yara Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/238547/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Greg.Freemyer(a)gmail.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-5020 An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-5020 http://www.cvedetails.com/cve/CVE-2019-5020/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5020 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0781 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133485] In the OBS web interface for Staging Dashboard, blocks with groups are sometimes displayed crookedly
by bugzilla_noreply＠novell.com 01 Aug '19

01 Aug '19

1 0