November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1177806] New: graphics:darktable:master/darktable Tumbleweed build is Failing since git1086.3a42bcc83
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1177806 Bug ID: 1177806 Summary: graphics:darktable:master/darktable Tumbleweed build is Failing since git1086.3a42bcc83 Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: asn(a)cryptomilk.org Reporter: paka(a)opensuse.org QA Contact: screening-team-bugs(a)suse.de Found By: --- Blocker: --- a new git submodule was added after version git1086.3a42bcc83 build has not completed since. fwiw: home:darix:darktable:master/darktable is working and at git1117.ca78dde3b -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1176791] VUL-0: CVE-2020-15960,CVE-2020-15961,CVE-2020-15962,CVE-2020-15963,CVE-2020-15964,CVE-2020-15965,CVE-2020-15966: chromium: Update to 85.0.4183.121
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176791 https://bugzilla.suse.com/show_bug.cgi?id=1176791#c7 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |atoptsoglou(a)suse.com Resolution|--- |FIXED --- Comment #7 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1177936] VUL-0: chromium: update to 86.0.4240.111
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1177936 https://bugzilla.suse.com/show_bug.cgi?id=1177936#c9 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #9 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- Fixed -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176306] New: VUL-0: CVE-2020-6573,CVE-2020-6574,CVE-2020-6575,CVE-2020-6576,CVE-2020-15959: chromium: Update to 85.0.4183.102
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176306 Bug ID: 1176306 Summary: VUL-0: CVE-2020-6573,CVE-2020-6574,CVE-2020-6575,CVE-2020-657 6,CVE-2020-15959: chromium: Update to 85.0.4183.102 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: tchvatal(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- CVE-2020-6573: Use after free in video. CVE-2020-6574: Insufficient policy enforcement in installer. CVE-2020-6575: Race in Mojo. CVE-2020-6576: Use after free in offscreen canvas. CVE-2020-15959: Insufficient policy enforcement in networking. Reference https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-des… -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1176910] VUL-1: CVE-2020-25866: wireshark: BLIP dissector crash
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176910 https://bugzilla.suse.com/show_bug.cgi?id=1176910#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:3166-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1175204,1176908,1176909,1176910 CVE References: CVE-2020-17498,CVE-2020-25862,CVE-2020-25863,CVE-2020-25866 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): wireshark-3.2.7-3.41.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176909] VUL-1: CVE-2020-25862: wireshark: TCP dissector crash
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176909 https://bugzilla.suse.com/show_bug.cgi?id=1176909#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:3166-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1175204,1176908,1176909,1176910 CVE References: CVE-2020-17498,CVE-2020-25862,CVE-2020-25863,CVE-2020-25866 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): wireshark-3.2.7-3.41.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176908] VUL-1: CVE-2020-25863: wireshark: MIME Multipart dissector crash
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176908 https://bugzilla.suse.com/show_bug.cgi?id=1176908#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:3166-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1175204,1176908,1176909,1176910 CVE References: CVE-2020-17498,CVE-2020-25862,CVE-2020-25863,CVE-2020-25866 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): wireshark-3.2.7-3.41.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178478] New: [rpm4.16] apache2 fails to build
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178478 Bug ID: 1178478 Summary: [rpm4.16] apache2 fails to build Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Apache Assignee: bnc-team-apache(a)forge.provo.novell.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Tumbleweed is currently preparing to upgrade to RPM 4.16. Apache2 is one of the packages failing this: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… >[ 202s] Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.7LI2vq >[ 202s] + umask 022 >[ 202s] + cd /home/abuild/rpmbuild/BUILD >[ 202s] + /usr/bin/rm -rf /home/abuild/rpmbuild/BUILDROOT/apache2-2.4.46-9.2.x86_64 >[ 202s] + /usr/bin/mkdir -p /home/abuild/rpmbuild/BUILDROOT >[ 202s] + /usr/bin/mkdir /home/abuild/rpmbuild/BUILDROOT/apache2-2.4.46-9.2.x86_64 >[ 202s] + cd httpd-2.4.46 >[ 202s] + cat >[ 202s] /var/tmp/rpm-tmp.7LI2vq: line 36: /home/abuild/rpmbuild/BUILDROOT/apache2-2.4.46-9.2.x86_64//usr/lib64/apache2_MMN: No such file or directory >[ 202s] error: Bad exit status from /var/tmp/rpm-tmp.7LI2vq (%install) The reson for this lies in the changed behavior of RPM 4.16, which forcibly empties DESTDIR at the beginning of %install and apache2.spec abusivly installing files already during the %build phase. I actually recommend to changethis package to a _multibuild and build each flavor sepearately (see for example how I converted bogofilter - https://build.opensuse.org/request/show/846028 ) -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1175204] VUL-0: CVE-2020-17498: wireshark: Kafka dissector crash (wnpa-sec-2020-10)
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1175204 https://bugzilla.suse.com/show_bug.cgi?id=1175204#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:3166-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1175204,1176908,1176909,1176910 CVE References: CVE-2020-17498,CVE-2020-25862,CVE-2020-25863,CVE-2020-25866 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): wireshark-3.2.7-3.41.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): wireshark-3.2.7-3.41.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1151997] memory-constraints doesn't change the -flto value
by bugzilla_noreply＠suse.com 05 Nov '20

05 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1151997 https://bugzilla.suse.com/show_bug.cgi?id=1151997#c4 --- Comment #4 from Martin Liška <martin.liska(a)suse.com> --- (In reply to Martin Liška from comment #3) > (In reply to Tomáš Chvátal from comment #2) > > @Martin: any idea here, as we override the variables after the lto is > > defined there probably is no smart way how to redux it right? > > You can append to $optflags a -flto=12345 value. Anyway, memory-constraints > is a workaround, a proper fix would be this: > https://github.com/openSUSE/open-build-service/issues/1953 Which is currently available in OBS. I would close this is invalid. -- You are receiving this mail because: You are on the CC list for the bug.

1 0