February 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1159017] gajim: certificate path changed while packaging, so that plugin installer doesn't work
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1159017 http://bugzilla.suse.com/show_bug.cgi?id=1159017#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0157-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1116161,1123247,1159017 CVE References: Sources used: openSUSE Leap 15.1 (src): gajim-1.1.3-lp151.3.3.1, python-nbxmpp-0.6.10-lp151.2.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123247] Gajim requires nbxmpp version that's not available
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1123247 http://bugzilla.suse.com/show_bug.cgi?id=1123247#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0157-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1116161,1123247,1159017 CVE References: Sources used: openSUSE Leap 15.1 (src): gajim-1.1.3-lp151.3.3.1, python-nbxmpp-0.6.10-lp151.2.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1116161] Gajim is missing 'precis-i18n'
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1116161 http://bugzilla.suse.com/show_bug.cgi?id=1116161#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0157-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1116161,1123247,1159017 CVE References: Sources used: openSUSE Leap 15.1 (src): gajim-1.1.3-lp151.3.3.1, python-nbxmpp-0.6.10-lp151.2.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1161207] i915 0000:00:02.0: GPU HANG: ecode 9:1:0x00000000, hang on rcs0
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1161207 http://bugzilla.opensuse.org/show_bug.cgi?id=1161207#c16 --- Comment #16 from Stefan Dirsch <sndirsch(a)suse.com> --- (In reply to Clarence Dillon from comment #15) > The down-side of this as a solution is that nvidia drivers do not build on > kernel 5.5 and AFAIK, nvidia isn't planning to apply any patches until > upstream of their current driver v440.44 . I'm just limping along with no > use of the dGPU. Meanwhile we have such a patch available: https://build.opensuse.org/package/view_file/X11:Drivers:Video/nvidia-gfxG0… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160293] socat fails with -fno-common
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1160293 http://bugzilla.suse.com/show_bug.cgi?id=1160293#c3 Martin Liška <martin.liska(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Martin Liška <martin.liska(a)suse.com> --- Fixed in devel project. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160244] [META] -fno-common package failures
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1160244 Bug 1160244 depends on bug 1160293, which changed state. Bug 1160293 Summary: socat fails with -fno-common http://bugzilla.suse.com/show_bug.cgi?id=1160293 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162656] New: VUL-1: CVE-2020-5236: python-waitress: DOS attack whena header that contains invalid characters is received
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162656 Bug ID: 1162656 Summary: VUL-1: CVE-2020-5236: python-waitress: DOS attack whena header that contains invalid characters is received Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/252361/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmueller(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-5236 Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions. This allows an attacker to send a single request with an invalid header and take the service offline. This issue was introduced in version 1.4.2 when the regular expression was updated to attempt to match the behaviour required by errata associated with RFC7230. The regular expression that is used to validate incoming headers has been updated in version 1.4.3, it is recommended that people upgrade to the new version of Waitress as soon as possible. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-5236 https://github.com/Pylons/waitress/security/advisories/GHSA-73m2-3pwg-5fgc https://github.com/Pylons/waitress/commit/6e46f9e3f014d64dd7d1e258eaf626e39… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5236 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1160293] socat fails with -fno-common
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1160293 http://bugzilla.suse.com/show_bug.cgi?id=1160293#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1160293) was mentioned in https://build.opensuse.org/request/show/769984 Factory / socat -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1161687] [Build 20200121] openQA test fails in yast2_nfs_client: YaST breaks rpcbind.socket
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1161687 http://bugzilla.suse.com/show_bug.cgi?id=1161687#c4 Rodion Iafarov <riafarov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |riafarov(a)suse.com --- Comment #4 from Rodion Iafarov <riafarov(a)suse.com> --- Visible in SLES 15 SP2 too. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1098188] iptables geoip is not working kernel 4.12.14-lp150.12.4-default
by bugzilla_noreply＠novell.com 04 Feb '20

04 Feb '20

1 0