July 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1173510] VUL-1: CVE-2020-4067: coturn: information leak across client connections
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173510 https://bugzilla.suse.com/show_bug.cgi?id=1173510#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0937-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1173510 CVE References: CVE-2020-4067 Sources used: openSUSE Leap 15.2 (src): coturn-4.5.1.3-lp152.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173460] New: md2workflow: suse-prod jira instance doesn't allow you to set Product field
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173460 Bug ID: 1173460 Summary: md2workflow: suse-prod jira instance doesn't allow you to set Product field Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- jira.suse.com uses two custom fields labeled with product customfield_18500, which is not intended by us and customfield_17225 which is the correct one. suse-prod.conf should use customfield_17225 instead of auto-discovery by name which returns customfield_18500 This is not the case on jira-devel, which works just fine. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1127341] VUL-1: CVE-2019-9215: live555: malformed headers lead to invalid memory access in the parseAuthorizationHeader function
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1127341 https://bugzilla.suse.com/show_bug.cgi?id=1127341#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0944-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1121995,1124159,1127341 CVE References: CVE-2019-7314,CVE-2019-9215 Sources used: openSUSE Leap 15.2 (src): live555-2019.06.28-lp152.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124159] VUL-1: CVE-2019-7314: live555: A use-after-free error causes the RTSP server to crash
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1124159 https://bugzilla.suse.com/show_bug.cgi?id=1124159#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0944-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1121995,1124159,1127341 CVE References: CVE-2019-7314,CVE-2019-9215 Sources used: openSUSE Leap 15.2 (src): live555-2019.06.28-lp152.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1121995] live555: does not build shared libraries
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1121995 https://bugzilla.suse.com/show_bug.cgi?id=1121995#c9 --- Comment #9 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0944-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1121995,1124159,1127341 CVE References: CVE-2019-7314,CVE-2019-9215 Sources used: openSUSE Leap 15.2 (src): live555-2019.06.28-lp152.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173085] Realtek RTL8117 NIC not recognized by Leap 15.2 RC (regression from 15.1)
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173085 https://bugzilla.suse.com/show_bug.cgi?id=1173085#c34 --- Comment #34 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0935-1: An update that solves 16 vulnerabilities and has 117 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1164648,1164777,1164780,1165211,1165975,1166985,1167104,1167651,1168230,1168779,1168838,1169021,1169194,1169514,1169681,1170011,1170442,1170774,1170879,1170891,1170895,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171530,1171662,1171688,1171699,1171739,1171743,1171759,1171828,1171868,1171904,1171915,1171982,1171983,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,1172814,1172823,1172841,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,117306 8,1173085,1173139,1173206,1173271,1173280,1173428,1173438,1173461 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-12656,CVE-2020-12769,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416 Sources used: openSUSE Leap 15.2 (src): kernel-debug-5.3.18-lp152.20.7.1, kernel-default-5.3.18-lp152.20.7.1, kernel-docs-5.3.18-lp152.20.7.1, kernel-kvmsmall-5.3.18-lp152.20.7.1, kernel-obs-build-5.3.18-lp152.20.7.1, kernel-obs-qa-5.3.18-lp152.20.7.1, kernel-preempt-5.3.18-lp152.20.7.1, kernel-source-5.3.18-lp152.20.7.1, kernel-syms-5.3.18-lp152.20.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172366] btrfs balance in endless loop and couldn't be canceled
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172366 https://bugzilla.suse.com/show_bug.cgi?id=1172366#c20 --- Comment #20 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0935-1: An update that solves 16 vulnerabilities and has 117 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1164648,1164777,1164780,1165211,1165975,1166985,1167104,1167651,1168230,1168779,1168838,1169021,1169194,1169514,1169681,1170011,1170442,1170774,1170879,1170891,1170895,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171530,1171662,1171688,1171699,1171739,1171743,1171759,1171828,1171868,1171904,1171915,1171982,1171983,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,1172814,1172823,1172841,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,117306 8,1173085,1173139,1173206,1173271,1173280,1173428,1173438,1173461 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-12656,CVE-2020-12769,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416 Sources used: openSUSE Leap 15.2 (src): kernel-debug-5.3.18-lp152.20.7.1, kernel-default-5.3.18-lp152.20.7.1, kernel-docs-5.3.18-lp152.20.7.1, kernel-kvmsmall-5.3.18-lp152.20.7.1, kernel-obs-build-5.3.18-lp152.20.7.1, kernel-obs-qa-5.3.18-lp152.20.7.1, kernel-preempt-5.3.18-lp152.20.7.1, kernel-source-5.3.18-lp152.20.7.1, kernel-syms-5.3.18-lp152.20.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172073] kernel-devel and kernel-source need Obsolete for previous package rebuilds of the same version
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172073 https://bugzilla.suse.com/show_bug.cgi?id=1172073#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0935-1: An update that solves 16 vulnerabilities and has 117 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1164648,1164777,1164780,1165211,1165975,1166985,1167104,1167651,1168230,1168779,1168838,1169021,1169194,1169514,1169681,1170011,1170442,1170774,1170879,1170891,1170895,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171530,1171662,1171688,1171699,1171739,1171743,1171759,1171828,1171868,1171904,1171915,1171982,1171983,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,1172814,1172823,1172841,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,117306 8,1173085,1173139,1173206,1173271,1173280,1173428,1173438,1173461 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-12656,CVE-2020-12769,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416 Sources used: openSUSE Leap 15.2 (src): kernel-debug-5.3.18-lp152.20.7.1, kernel-default-5.3.18-lp152.20.7.1, kernel-docs-5.3.18-lp152.20.7.1, kernel-kvmsmall-5.3.18-lp152.20.7.1, kernel-obs-build-5.3.18-lp152.20.7.1, kernel-obs-qa-5.3.18-lp152.20.7.1, kernel-preempt-5.3.18-lp152.20.7.1, kernel-source-5.3.18-lp152.20.7.1, kernel-syms-5.3.18-lp152.20.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172017] Thinkpad T570 ALSA regression, tinny audio / low volume
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172017 https://bugzilla.suse.com/show_bug.cgi?id=1172017#c33 --- Comment #33 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0935-1: An update that solves 16 vulnerabilities and has 117 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1164648,1164777,1164780,1165211,1165975,1166985,1167104,1167651,1168230,1168779,1168838,1169021,1169194,1169514,1169681,1170011,1170442,1170774,1170879,1170891,1170895,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171530,1171662,1171688,1171699,1171739,1171743,1171759,1171828,1171868,1171904,1171915,1171982,1171983,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,1172814,1172823,1172841,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,117306 8,1173085,1173139,1173206,1173271,1173280,1173428,1173438,1173461 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-12656,CVE-2020-12769,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416 Sources used: openSUSE Leap 15.2 (src): kernel-debug-5.3.18-lp152.20.7.1, kernel-default-5.3.18-lp152.20.7.1, kernel-docs-5.3.18-lp152.20.7.1, kernel-kvmsmall-5.3.18-lp152.20.7.1, kernel-obs-build-5.3.18-lp152.20.7.1, kernel-obs-qa-5.3.18-lp152.20.7.1, kernel-preempt-5.3.18-lp152.20.7.1, kernel-source-5.3.18-lp152.20.7.1, kernel-syms-5.3.18-lp152.20.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171904] kvm is applying L1TF mitigations on AMD EPYC CPUs
by bugzilla_noreply＠suse.com 07 Jul '20

07 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1171904 https://bugzilla.suse.com/show_bug.cgi?id=1171904#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:0935-1: An update that solves 16 vulnerabilities and has 117 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1164648,1164777,1164780,1165211,1165975,1166985,1167104,1167651,1168230,1168779,1168838,1169021,1169194,1169514,1169681,1170011,1170442,1170774,1170879,1170891,1170895,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171530,1171662,1171688,1171699,1171739,1171743,1171759,1171828,1171868,1171904,1171915,1171982,1171983,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,1172814,1172823,1172841,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,117306 8,1173085,1173139,1173206,1173271,1173280,1173428,1173438,1173461 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-12656,CVE-2020-12769,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416 Sources used: openSUSE Leap 15.2 (src): kernel-debug-5.3.18-lp152.20.7.1, kernel-default-5.3.18-lp152.20.7.1, kernel-docs-5.3.18-lp152.20.7.1, kernel-kvmsmall-5.3.18-lp152.20.7.1, kernel-obs-build-5.3.18-lp152.20.7.1, kernel-obs-qa-5.3.18-lp152.20.7.1, kernel-preempt-5.3.18-lp152.20.7.1, kernel-source-5.3.18-lp152.20.7.1, kernel-syms-5.3.18-lp152.20.7.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0