July 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1077230] python3: build python3-xml as part of python3-base
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1077230 https://bugzilla.suse.com/show_bug.cgi?id=1077230#c20 --- Comment #20 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1077230) was mentioned in https://build.opensuse.org/request/show/818631 Factory / python3 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1050653] python3.6 should provide python3-typing (python-Sphinx concerned)
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1050653 https://bugzilla.suse.com/show_bug.cgi?id=1050653#c19 --- Comment #19 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1050653) was mentioned in https://build.opensuse.org/request/show/818631 Factory / python3 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1049186] python-3.6 packages do not build reproducibly
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1049186 https://bugzilla.suse.com/show_bug.cgi?id=1049186#c25 --- Comment #25 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1049186) was mentioned in https://build.opensuse.org/request/show/818631 Factory / python3 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1041090] trackerbug: packages do not build reproducibly from unsorted input
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1041090 https://bugzilla.suse.com/show_bug.cgi?id=1041090#c53 --- Comment #53 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1041090) was mentioned in https://build.opensuse.org/request/show/818631 Factory / python3 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169628] New: VUL-0: virtualbox: Oracle 2020 April CPU (update to 6.0.20 and 6.1.6)
by bugzilla_noreply＠novell.com 03 Jul '20

03 Jul '20

http://bugzilla.suse.com/show_bug.cgi?id=1169628 Bug ID: 1169628 Summary: VUL-0: virtualbox: Oracle 2020 April CPU (update to 6.0.20 and 6.1.6) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: Larry.Finger(a)gmail.com Reporter: atoptsoglou(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- CVE-2020-2741 CVE-2020-2742 CVE-2020-2743 CVE-2020-2748 CVE-2020-2758 CVE-2020-2894 CVE-2020-2902 CVE-2020-2905 CVE-2020-2907 CVE-2020-2908 CVE-2020-2909 CVE-2020-2910 CVE-2020-2911 CVE-2020-2913 CVE-2020-2914 CVE-2020-2929 CVE-2020-2951 CVE-2020-2958 CVE-2020-2959 Leap should be upgraded to 6.0.20 and Factory to 6.1.6 https://www.oracle.com/security-alerts/cpuapr2020.html -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 1133297] LTO: zstd build fails
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1133297 https://bugzilla.suse.com/show_bug.cgi?id=1133297#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:1396-2: An update that contains security fixes can now be installed. Category: security (moderate) Bug References: 1082318,1133297 CVE References: Sources used: SUSE Linux Enterprise Server for SAP 15 (src): zstd-1.4.4-1.3.1 SUSE Linux Enterprise Server 15-LTSS (src): zstd-1.4.4-1.3.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): zstd-1.4.4-1.3.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): zstd-1.4.4-1.3.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): zstd-1.4.4-1.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173022] json-c hangs when rdrand is broken; it's used to read luks2
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173022 https://bugzilla.suse.com/show_bug.cgi?id=1173022#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:1839-1: An update that solves three vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 1159819,1168669,1169746,1170908,1171978,1173022 CVE References: CVE-2019-17006,CVE-2020-12399,CVE-2020-12402 Sources used: SUSE OpenStack Cloud Crowbar 9 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud Crowbar 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 9 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 7 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Enterprise Storage 5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 HPE Helion Openstack 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169746] GCC 10: mozilla-nss build fails on i586
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1169746 https://bugzilla.suse.com/show_bug.cgi?id=1169746#c9 --- Comment #9 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:1839-1: An update that solves three vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 1159819,1168669,1169746,1170908,1171978,1173022 CVE References: CVE-2019-17006,CVE-2020-12399,CVE-2020-12402 Sources used: SUSE OpenStack Cloud Crowbar 9 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud Crowbar 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 9 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE OpenStack Cloud 7 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 SUSE Enterprise Storage 5 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 HPE Helion Openstack 8 (src): mozilla-nspr-4.25-19.15.1, mozilla-nss-3.53.1-58.48.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171271] VUL-0: CVE-2020-12672: GraphicsMagick: heap-based buffer overflow in ReadMNGImage in coders/png.c.
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1171271 https://bugzilla.suse.com/show_bug.cgi?id=1171271#c7 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from Marcus Meissner <meissner(a)suse.com> --- released -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173699] Replace the AutoYaST modules registry with a better alternative
by bugzilla_noreply＠suse.com 03 Jul '20

03 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173699 https://bugzilla.suse.com/show_bug.cgi?id=1173699#c2 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #2 from Josef Reidinger <jreidinger(a)suse.com> --- merged -- You are receiving this mail because: You are on the CC list for the bug.

1 0