May 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1185653] python-pyside2 missing
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185653 https://bugzilla.suse.com/show_bug.cgi?id=1185653#c8 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|FIXED |DUPLICATE --- Comment #8 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Axel Braun from comment #7) > (In reply to Fabian Vogt from comment #6) > > Known issue: python3-pyside fails to build because libqt5-qttools from SLE > > is incompatible with the llvm fork in backports. > > > > *** This bug has been marked as a duplicate of bug 1185203 *** > > one more reason for a version bump of qt5/KDE in Leap 15.3..... That won't help. The issue is that SLE uses clang 7 as default which libqt5-qttools builds against, but in openSUSE the default is clang 11 and the header files are incomptaible. Marking as duplicate again, because it's not fixed yet. *** This bug has been marked as a duplicate of bug 1185203 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185203] libqt5-qttools-doc should not require clang7
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185203 https://bugzilla.suse.com/show_bug.cgi?id=1185203#c16 --- Comment #16 from Fabian Vogt <fvogt(a)suse.com> --- *** Bug 1185653 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185203] libqt5-qttools-doc should not require clang7
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185203 https://bugzilla.suse.com/show_bug.cgi?id=1185203#c15 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |fvogt(a)suse.com Severity|Normal |Critical --- Comment #15 from Fabian Vogt <fvogt(a)suse.com> --- Antonio submitted the llvm7 and libqt5-qttools changes as https://maintenance.suse.de/incident/19402/ to SLE some time ago. Adjusting severity to be the same as bug 1185653. As a temporary fix it might be possible to rebuild lilbqt5-qttools in backports as well, to pick up the matching version of clang. I would suggest that only if it can be undone at a later point though, but due to the vendor change that might not be easy. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185717] New: VUL-0: CVE-2021-31800: python-impacket: Multiple path traversal vulnerabilities in smbserver.py
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185717 Bug ID: 1185717 Summary: VUL-0: CVE-2021-31800: python-impacket: Multiple path traversal vulnerabilities in smbserver.py Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/283508/ OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Network Assignee: mardnh(a)gmx.de Reporter: gianluca.gabrielli(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-31800 Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key. References: https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/releases https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c… https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… References: https://bugzilla.redhat.com/show_bug.cgi?id=1957426 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-31800 https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c… https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31800 https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161… https://github.com/SecureAuthCorp/impacket/releases -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1185653] python-pyside2 missing
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185653 https://bugzilla.suse.com/show_bug.cgi?id=1185653#c7 Axel Braun <axel.braun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|DUPLICATE |FIXED --- Comment #7 from Axel Braun <axel.braun(a)gmx.de> --- (In reply to Fabian Vogt from comment #6) > Known issue: python3-pyside fails to build because libqt5-qttools from SLE > is incompatible with the llvm fork in backports. > > *** This bug has been marked as a duplicate of bug 1185203 *** one more reason for a version bump of qt5/KDE in Leap 15.3..... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185653] python-pyside2 missing
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185653 https://bugzilla.suse.com/show_bug.cgi?id=1185653#c6 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |fvogt(a)suse.com Resolution|--- |DUPLICATE --- Comment #6 from Fabian Vogt <fvogt(a)suse.com> --- Known issue: python3-pyside fails to build because libqt5-qttools from SLE is incompatible with the llvm fork in backports. *** This bug has been marked as a duplicate of bug 1185203 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185203] libqt5-qttools-doc should not require clang7
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185203 https://bugzilla.suse.com/show_bug.cgi?id=1185203#c14 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |axel.braun(a)gmx.de --- Comment #14 from Fabian Vogt <fvogt(a)suse.com> --- *** Bug 1185653 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185653] python-pyside2 missing
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185653 https://bugzilla.suse.com/show_bug.cgi?id=1185653#c5 Axel Braun <axel.braun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fabian(a)ritter-vogt.de |screening-team-bugs(a)suse.de --- Comment #5 from Axel Braun <axel.braun(a)gmx.de> --- In the python-context: python-cairo resp. python-pycairo is outdated (from 2017) as well - I just send a SR to Leap 15.3, as some applications will not work with this version -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185653] New: python-pyside2 missing
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185653 Bug ID: 1185653 Summary: python-pyside2 missing Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: axel.braun(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Leap 15.3 RC as of today (05 may 2021) misses python-pyside2: localhost:/home/test # zypper se pyside2 Loading repository data... Reading installed packages... No matching items found. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1185717] VUL-0: CVE-2021-31800: python-impacket: Multiple path traversal vulnerabilities in smbserver.py
by bugzilla_noreply＠suse.com 06 May '21

06 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185717 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0