November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1167335] VUL-0: CVE-2020-10804: phpMyAdmin: SQL injection with processing username (PMASA-2020-2)
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1167335 https://bugzilla.suse.com/show_bug.cgi?id=1167335#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1806-1: An update that solves 5 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1167335,1167336,1167337,1177561,1177562,1177842 CVE References: CVE-2020-10802,CVE-2020-10803,CVE-2020-10804,CVE-2020-26934,CVE-2020-26935 JIRA References: Sources used: openSUSE Leap 15.1 (src): phpMyAdmin-4.9.7-lp151.2.24.1 openSUSE Backports SLE-15-SP1 (src): phpMyAdmin-4.9.7-bp151.3.24.1 openSUSE Backports SLE-15 (src): phpMyAdmin-4.9.7-bp150.43.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176142] New: xgettext crash while creating POT file
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176142 Bug ID: 1176142 Summary: xgettext crash while creating POT file Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: opensuse.lietuviu.kalba(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 841364 --> https://bugzilla.suse.com/attachment.cgi?id=841364&action=edit full build log of PSPP while compiling from latest GIT [ 753s] xgettext --copyright-holder="Free Software Foundation, Inc." --package-name=pspp --package-version=1.5.0 --msgid-bugs-address=pspp-dev(a)gnu.org --from-code=UTF-8 --add-comments='TRANSLATORS:' --directory=. --its=./po/metainfo.its -j src/ui/gui/org.fsf.pspp.metainfo.xml.in -o po/pspp.pot,tmp [ 753s] make[2]: *** [Makefile:12154: po/pspp.pot] Segmentation fault [ 753s] make[2]: Leaving directory '/home/abuild/rpmbuild/BUILD/pspp-20200903.5d8094efe' [ 753s] make[2]: *** Waiting for unfinished jobs.... This is known bug and fixed upstream. openSUSE has gettext 0.19.8.1 on 15.2 - the same as Debian buster. It works on Debian buster. Debian has backported some patches from upstream and they are at 0.19.8.1-9. You can find Debian source package via https://packages.debian.org/buster/gettext : http://deb.debian.org/debian/pool/main/g/gettext/gettext_0.19.8.1-9.debian.… archive contains "patches" directory. Seems to be 05-fix-crash-xgettext-with-its.patch Can we, please, backport relevant patches for Leap too? -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1177745] New: Connects to wifi network despite wired network being available
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1177745 Bug ID: 1177745 Summary: Connects to wifi network despite wired network being available Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: teo8976(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I have a wifi network configured and set to connect automatically. I boot with the ethernet cable already plugged in. Expected: should connect only to wired network Observed: connects to both the wired and wifi network Also see bug 1177744 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1177878] New: cups fails to print PDF: no pages found
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1177878 Bug ID: 1177878 Summary: cups fails to print PDF: no pages found Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Printing Assignee: jsmeix(a)suse.com Reporter: axel.braun(a)gmx.de QA Contact: jsmeix(a)suse.com Found By: --- Blocker: --- I have a 2 pages PDF that I want to print from Okular. It creates a postscript file in /var/spool/cups, but cups reports 'no pages found'. Printing the same document from Master PDF Editor works. (as it is confidential content I do not want to add the document here) Please provide a contact or procedure to follow up Operating System: openSUSE Tumbleweed 20201014 KDE Plasma Version: 5.20.0 KDE Frameworks Version: 5.75.0 Qt Version: 5.15.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1175305] NFSv4.1: timeout and endless unsuccessful retries
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1175305 https://bugzilla.suse.com/show_bug.cgi?id=1175305#c4 Ralf Kölmel <ralf.koelmel(a)kit.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #4 from Ralf Kölmel <ralf.koelmel(a)kit.edu> --- closing issue because the problem was not anymore occuring -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163744] QtWebEngine video playback doesn't start (after update to Qt 5.14.1)
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1163744 https://bugzilla.suse.com/show_bug.cgi?id=1163744#c27 --- Comment #27 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1804-1: An update that solves 8 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1126826,1126829,1126831,1140126,1142649,1143609,1153768,1153770,1157755,1160254,1160590,1163333,1163744 CVE References: CVE-2019-12972,CVE-2019-14250,CVE-2019-14444,CVE-2019-17450,CVE-2019-17451,CVE-2019-9074,CVE-2019-9075,CVE-2019-9077 JIRA References: Sources used: openSUSE Leap 15.2 (src): binutils-2.35-lp152.4.3.1, cross-aarch64-binutils-2.35-lp152.4.3.1, cross-arm-binutils-2.35-lp152.4.3.1, cross-avr-binutils-2.35-lp152.4.3.1, cross-epiphany-binutils-2.35-lp152.4.3.1, cross-hppa-binutils-2.35-lp152.4.3.1, cross-hppa64-binutils-2.35-lp152.4.3.1, cross-i386-binutils-2.35-lp152.4.3.1, cross-ia64-binutils-2.35-lp152.4.3.1, cross-m68k-binutils-2.35-lp152.4.3.1, cross-mips-binutils-2.35-lp152.4.3.1, cross-ppc-binutils-2.35-lp152.4.3.1, cross-ppc64-binutils-2.35-lp152.4.3.1, cross-ppc64le-binutils-2.35-lp152.4.3.1, cross-riscv64-binutils-2.35-lp152.4.3.1, cross-rx-binutils-2.35-lp152.4.3.1, cross-s390-binutils-2.35-lp152.4.3.1, cross-s390x-binutils-2.35-lp152.4.3.1, cross-sparc-binutils-2.35-lp152.4.3.1, cross-sparc64-binutils-2.35-lp152.4.3.1, cross-spu-binutils-2.35-lp152.4.3.1, cross-xtensa-binutils-2.35-lp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1163333] LTO: binutils build fails
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1163333 https://bugzilla.suse.com/show_bug.cgi?id=1163333#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1804-1: An update that solves 8 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1126826,1126829,1126831,1140126,1142649,1143609,1153768,1153770,1157755,1160254,1160590,1163333,1163744 CVE References: CVE-2019-12972,CVE-2019-14250,CVE-2019-14444,CVE-2019-17450,CVE-2019-17451,CVE-2019-9074,CVE-2019-9075,CVE-2019-9077 JIRA References: Sources used: openSUSE Leap 15.2 (src): binutils-2.35-lp152.4.3.1, cross-aarch64-binutils-2.35-lp152.4.3.1, cross-arm-binutils-2.35-lp152.4.3.1, cross-avr-binutils-2.35-lp152.4.3.1, cross-epiphany-binutils-2.35-lp152.4.3.1, cross-hppa-binutils-2.35-lp152.4.3.1, cross-hppa64-binutils-2.35-lp152.4.3.1, cross-i386-binutils-2.35-lp152.4.3.1, cross-ia64-binutils-2.35-lp152.4.3.1, cross-m68k-binutils-2.35-lp152.4.3.1, cross-mips-binutils-2.35-lp152.4.3.1, cross-ppc-binutils-2.35-lp152.4.3.1, cross-ppc64-binutils-2.35-lp152.4.3.1, cross-ppc64le-binutils-2.35-lp152.4.3.1, cross-riscv64-binutils-2.35-lp152.4.3.1, cross-rx-binutils-2.35-lp152.4.3.1, cross-s390-binutils-2.35-lp152.4.3.1, cross-s390x-binutils-2.35-lp152.4.3.1, cross-sparc-binutils-2.35-lp152.4.3.1, cross-sparc64-binutils-2.35-lp152.4.3.1, cross-spu-binutils-2.35-lp152.4.3.1, cross-xtensa-binutils-2.35-lp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160254] libtool failure with -fno-common
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1160254 https://bugzilla.suse.com/show_bug.cgi?id=1160254#c9 --- Comment #9 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1804-1: An update that solves 8 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1126826,1126829,1126831,1140126,1142649,1143609,1153768,1153770,1157755,1160254,1160590,1163333,1163744 CVE References: CVE-2019-12972,CVE-2019-14250,CVE-2019-14444,CVE-2019-17450,CVE-2019-17451,CVE-2019-9074,CVE-2019-9075,CVE-2019-9077 JIRA References: Sources used: openSUSE Leap 15.2 (src): binutils-2.35-lp152.4.3.1, cross-aarch64-binutils-2.35-lp152.4.3.1, cross-arm-binutils-2.35-lp152.4.3.1, cross-avr-binutils-2.35-lp152.4.3.1, cross-epiphany-binutils-2.35-lp152.4.3.1, cross-hppa-binutils-2.35-lp152.4.3.1, cross-hppa64-binutils-2.35-lp152.4.3.1, cross-i386-binutils-2.35-lp152.4.3.1, cross-ia64-binutils-2.35-lp152.4.3.1, cross-m68k-binutils-2.35-lp152.4.3.1, cross-mips-binutils-2.35-lp152.4.3.1, cross-ppc-binutils-2.35-lp152.4.3.1, cross-ppc64-binutils-2.35-lp152.4.3.1, cross-ppc64le-binutils-2.35-lp152.4.3.1, cross-riscv64-binutils-2.35-lp152.4.3.1, cross-rx-binutils-2.35-lp152.4.3.1, cross-s390-binutils-2.35-lp152.4.3.1, cross-s390x-binutils-2.35-lp152.4.3.1, cross-sparc-binutils-2.35-lp152.4.3.1, cross-sparc64-binutils-2.35-lp152.4.3.1, cross-spu-binutils-2.35-lp152.4.3.1, cross-xtensa-binutils-2.35-lp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1157755] LD from binutils 2.33.1 is broken on aarch64
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1157755 https://bugzilla.suse.com/show_bug.cgi?id=1157755#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1804-1: An update that solves 8 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1126826,1126829,1126831,1140126,1142649,1143609,1153768,1153770,1157755,1160254,1160590,1163333,1163744 CVE References: CVE-2019-12972,CVE-2019-14250,CVE-2019-14444,CVE-2019-17450,CVE-2019-17451,CVE-2019-9074,CVE-2019-9075,CVE-2019-9077 JIRA References: Sources used: openSUSE Leap 15.2 (src): binutils-2.35-lp152.4.3.1, cross-aarch64-binutils-2.35-lp152.4.3.1, cross-arm-binutils-2.35-lp152.4.3.1, cross-avr-binutils-2.35-lp152.4.3.1, cross-epiphany-binutils-2.35-lp152.4.3.1, cross-hppa-binutils-2.35-lp152.4.3.1, cross-hppa64-binutils-2.35-lp152.4.3.1, cross-i386-binutils-2.35-lp152.4.3.1, cross-ia64-binutils-2.35-lp152.4.3.1, cross-m68k-binutils-2.35-lp152.4.3.1, cross-mips-binutils-2.35-lp152.4.3.1, cross-ppc-binutils-2.35-lp152.4.3.1, cross-ppc64-binutils-2.35-lp152.4.3.1, cross-ppc64le-binutils-2.35-lp152.4.3.1, cross-riscv64-binutils-2.35-lp152.4.3.1, cross-rx-binutils-2.35-lp152.4.3.1, cross-s390-binutils-2.35-lp152.4.3.1, cross-s390x-binutils-2.35-lp152.4.3.1, cross-sparc-binutils-2.35-lp152.4.3.1, cross-sparc64-binutils-2.35-lp152.4.3.1, cross-spu-binutils-2.35-lp152.4.3.1, cross-xtensa-binutils-2.35-lp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 890595] xscreensaver (5.22) displays a nag-screen to update it
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=890595 https://bugzilla.suse.com/show_bug.cgi?id=890595#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:1796-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1101393,1165170,890595 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): xscreensaver-5.44-lp152.6.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0