June 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1073748] Segfault in libpython2.7.so.1
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1073748 http://bugzilla.suse.com/show_bug.cgi?id=1073748#c38 --- Comment #38 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:1524-1: An update that solves three vulnerabilities and has 18 fixes is now available. Category: security (moderate) Bug References: 1027282,1041090,1042670,1073269,1073748,1078326,1078485,1081750,1084650,1086001,1149792,1153830,1155094,1159035,1162224,1162367,1162825,1165894,1170411,1171561,945401 CVE References: CVE-2019-18348,CVE-2019-9674,CVE-2020-8492 Sources used: SUSE OpenStack Cloud Crowbar 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE OpenStack Cloud 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE OpenStack Cloud 7 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Workstation Extension 12-SP5 (src): python-base-2.7.17-28.42.1 SUSE Linux Enterprise Workstation Extension 12-SP4 (src): python-base-2.7.17-28.42.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): python-rpm-macros-20200207.5feb6c1-3.19.1 SUSE Linux Enterprise Software Development Kit 12-SP4 (src): python-base-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server for SAP 12-SP1 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP5 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP4 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP1-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Enterprise Storage 5 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 HPE Helion Openstack 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1041090] trackerbug: packages do not build reproducibly from unsorted input
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1041090 http://bugzilla.suse.com/show_bug.cgi?id=1041090#c50 --- Comment #50 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:1524-1: An update that solves three vulnerabilities and has 18 fixes is now available. Category: security (moderate) Bug References: 1027282,1041090,1042670,1073269,1073748,1078326,1078485,1081750,1084650,1086001,1149792,1153830,1155094,1159035,1162224,1162367,1162825,1165894,1170411,1171561,945401 CVE References: CVE-2019-18348,CVE-2019-9674,CVE-2020-8492 Sources used: SUSE OpenStack Cloud Crowbar 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE OpenStack Cloud 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE OpenStack Cloud 7 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Workstation Extension 12-SP5 (src): python-base-2.7.17-28.42.1 SUSE Linux Enterprise Workstation Extension 12-SP4 (src): python-base-2.7.17-28.42.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): python-rpm-macros-20200207.5feb6c1-3.19.1 SUSE Linux Enterprise Software Development Kit 12-SP4 (src): python-base-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server for SAP 12-SP1 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP5 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP4 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Linux Enterprise Server 12-SP1-LTSS (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 SUSE Enterprise Storage 5 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 HPE Helion Openstack 8 (src): python-2.7.17-28.42.1, python-base-2.7.17-28.42.1, python-doc-2.7.17-28.42.1, python-rpm-macros-20200207.5feb6c1-3.19.1, shared-python-startup-0.1-1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1152987] VUL-0: CVE-2019-16328: python-rpyc: a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1152987 http://bugzilla.suse.com/show_bug.cgi?id=1152987#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0763-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1152987 CVE References: CVE-2019-16328 Sources used: openSUSE Backports SLE-15-SP1 (src): python-rpyc-4.1.5-bp151.2.3.1, python-rpyc-test-4.1.5-bp151.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 833999] use /etc/os-release instead of /etc/SuSE-release
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=833999 http://bugzilla.suse.com/show_bug.cgi?id=833999#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0762-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1047218,1166114,833999 CVE References: Sources used: openSUSE Backports SLE-15-SP1 (src): shorewall-5.2.4.4-bp151.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1166114] security:netfilter/shorewall: Bug non-major, point/dot release `zypper up` incorrectly stops/blocks running shorewall svc
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1166114 http://bugzilla.suse.com/show_bug.cgi?id=1166114#c30 --- Comment #30 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0762-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1047218,1166114,833999 CVE References: Sources used: openSUSE Backports SLE-15-SP1 (src): shorewall-5.2.4.4-bp151.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1047218] trackerbug: packages do not build reproducibly from including build time
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1047218 http://bugzilla.suse.com/show_bug.cgi?id=1047218#c70 --- Comment #70 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0762-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1047218,1166114,833999 CVE References: Sources used: openSUSE Backports SLE-15-SP1 (src): shorewall-5.2.4.4-bp151.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 682920] strange defaults in mailman
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=682920 http://bugzilla.suse.com/show_bug.cgi?id=682920#c10 --- Comment #10 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0764-1: An update that solves one vulnerability and has one errata is now available. Category: security (moderate) Bug References: 1171363,682920 CVE References: CVE-2020-12108 Sources used: openSUSE Backports SLE-15-SP1 (src): mailman-2.1.29-bp151.5.9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 776058] Go language - go get/install fails with permission denied
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=776058 http://bugzilla.suse.com/show_bug.cgi?id=776058#c26 --- Comment #26 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:0766-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 776058 CVE References: Sources used: openSUSE Backports SLE-15-SP1 (src): golang-packaging-15.0.12-bp151.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1149931] VUL-0: CVE-2016-10937: imapfilter: improper validation of hostname in an SSL certificate
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1149931 http://bugzilla.suse.com/show_bug.cgi?id=1149931#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0765-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1149931 CVE References: CVE-2016-10937 Sources used: openSUSE Backports SLE-15-SP1 (src): imapfilter-2.6.16-bp151.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172273] snapper rollback considered harmful
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1172273 http://bugzilla.suse.com/show_bug.cgi?id=1172273#c5 --- Comment #5 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Thorsten Kukuk from comment #4) > As Ignaz wrote: we can assume that a system is using transactional-updates, > if the root filesystem is read-only. > > So, if the root filesystem is read-only and snapper rollback is called, This also matches the case when booting into a read-only snapshot on plain TW, so it would need some additional criteria. > map > the given snapshot number or the current snapshot number to a btrfs ID and > make it the new default: > btrfs subvolume set-default $BTRFS_ID /.snapshots > > afterwards, remove any cleaning algorithm from that snapshot: > snapper ${SNAPPER_NO_DBUS} modify -c '' ${ROLLBACK_SNAPSHOT} -- You are receiving this mail because: You are on the CC list for the bug.

1 0