February 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1162482] New: VUL-0: CVE-2020-8516: tor: daemon does not verify that a rendezvous node is known before attempting to connect
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162482 Bug ID: 1162482 Summary: VUL-0: CVE-2020-8516: tor: daemon does not verify that a rendezvous node is known before attempting to connect Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/252273/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: bwiedemann(a)suse.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8516 The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8516 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8516 https://www.hackerfactor.com/blog/index.php?/archives/868-Deanonymizing-Tor… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1161835] libvirt 6.0 and kernel 5.4.13: issues with ARP to VMs
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1161835 http://bugzilla.suse.com/show_bug.cgi?id=1161835#c2 --- Comment #2 from Michael Ströder <michael(a)stroeder.com> --- kernel-default-5.4.14-1.1.x86_64 has the same problem. kernel-vanilla-5.4.14-1.1.x86_64 seems to work fine. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162418] wxWidgets-3_0-nostl cause a crash in audacity-2.3.3 when built with LTO
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162418 http://bugzilla.suse.com/show_bug.cgi?id=1162418#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1162418) was mentioned in https://build.opensuse.org/request/show/769494 Factory / audacity -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1039394] python2-docutils fails to install (error in post scriptlet)
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1039394 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:13891:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137056] Automatically add a custom generated key to initrd when installing to LVM/LUKS
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1137056 http://bugzilla.suse.com/show_bug.cgi?id=1137056#c12 --- Comment #12 from Alexander Shchadilov <alexander.shchadilov(a)gmail.com> --- For anyone interested: I submitted Andreas Stieger's suggestion from https://bugzilla.suse.com/show_bug.cgi?id=1137056#c1 to GRUB bug tracker: https://savannah.gnu.org/bugs/?57678 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160292] New: sharutils fails with -fno-common
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1160292 Bug ID: 1160292 Summary: sharutils fails with -fno-common Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The package fails here: https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… Please take a look at the META issue for the instructions. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1162471] New: [Build 20200131] Kernel 5.5/btrfs 'eats' disk space
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162471 Bug ID: 1162471 Summary: [Build 20200131] Kernel 5.5/btrfs 'eats' disk space Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1161687/modules/gimp /steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-kde@64bit fails in [gimp](https://openqa.opensuse.org/tests/1161687/modules/gimp/steps/15) This is just an example test run - there were more. for Snapshot 0131, the kernel was updated to version 5.5.0. The test fails with 'no space left' on the disk. Considering that this test runs on VM with HDD configured for 40GB, this is unlikely to happen. I reproduced this locally in a VM (based on the not-published snapshot). After the machine was up for a while and I keep on installing programs (while monitoring the disk usage) I saw an immediate jump at one point from 31GB free storage to 0 bytes free. After running btrfs balance, the 31GB where quite immediately reclaimed. ## Test suite description TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in kde@USBboot_64 scenario. Added by : oorlov; Related ticket: poo#37000 ## Reproducible Fails since (at least) Build [20200131](https://openqa.opensuse.org/tests/1161309) ## Expected result Last good: [20200130](https://openqa.opensuse.org/tests/1160013) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162261] New: Bump protobuf 3.9.1 to 3.9.2+ to build TensorFlow2
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162261 Bug ID: 1162261 Summary: Bump protobuf 3.9.1 to 3.9.2+ to build TensorFlow2 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- protobuf has been updated to 3.9.1 in SLE15-SP2 / Leap 15.2 for TensorFlow 1.x. But TensorFlow 2.x requires protobuf >= 3.9.2. So, it would be interesting to update protobuf to latest 3.9.x bugfix release, which is 3.9.2 from Factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1162468] New: conversion-double is too old for TensorFlow 2.1.0
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162468 Bug ID: 1162468 Summary: conversion-double is too old for TensorFlow 2.1.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- double-conversion (last package dep from SLE) requires an update to have TensorFlow2 in Leap 15.2. We need to update from version 2.0.1 to 3.1.5 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1160812] Vague zypper warning message
by bugzilla_noreply＠novell.com 03 Feb '20

03 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1160812 http://bugzilla.suse.com/show_bug.cgi?id=1160812#c6 Michael Andres <ma(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #6 from Michael Andres <ma(a)suse.com> --- Thanks for the note. So it is another variation of a broken database index. 'rpm --rebuilddb' is usually sufficient to fix such an issue. There should be no further action needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0