July 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1187749] rpmlint 2.0 fails
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187749 https://bugzilla.suse.com/show_bug.cgi?id=1187749#c13 --- Comment #13 from Martin Li��ka <martin.liska(a)suse.com> --- (In reply to Dirk Mueller from comment #11) > please tell the factory maintainers to update the prjconf. (the stuff in > obs-build is just a snapshot of that) Ah, ok, good to know. I'm going to ask them.. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187910] [netcdf-fortran] Nothing provides nf-config
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187910 https://bugzilla.suse.com/show_bug.cgi?id=1187910#c2 --- Comment #2 from Peter Hill <zed.three(a)gmail.com> --- +1 for renaming back to `nf-config` -- this is the standard name that many build tools will be looking for. As far as I can tell, OpenSUSE is the only OS that names it this way. The package name is a little bit confusing too: - nc-config is provided by netcdf-devel - ncxx4-config is provided by netcdf-cxx4-tools - nf-fortran-config is provided by netcdf-fortran_4_5_3-gnu-hpc Would it be possible to have the `*-config` utilities be provided by the `*-devel` packages? It's not clear to me why they are packaged separately. Even having them as recommended packages would be useful. >> Separately, there is no non-environment module `netcdf-fortran` package. > No, there isn't. This is not a bug. Please could you say why this is? Clearly there's a reason, but I find it a bit confusing that there are non-environment module versions of the C and C++ libraries, just not for Fortran. The .mod files obviously depend on the compiler, but I would expect the system package to require the system compiler. `hdf5-devel`, for example, does include the Fortran .mod files in the non-module package. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187917] VUL-1: CVE-2020-36403: libhts: out-of-bounds write access in vcf_parse_format()
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187917 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182227] combustion [# combustion: network] does not work
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1182227 https://bugzilla.suse.com/show_bug.cgi?id=1182227#c31 --- Comment #31 from Marius Tomaschewski <mt(a)suse.com> --- OK, we've just discussed the importance of this issue with my Team-Lead just now and I'll spend next week to implement the bootstrap part (`ip=dhcp` and `rd.neednet=1`, the other network opts if possible too). Going to create pull request with the cleanup mentioned above now. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187919] New: VUL-1: CVE-2021-36080: libredwg: double-free in bit_chain_free()
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1187919 Bug ID: 1187919 Summary: VUL-1: CVE-2021-36080: libredwg: double-free in bit_chain_free() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/303338/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-36080 GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36080 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724 https://github.com/LibreDWG/libredwg/commit/9b6e0ff9ef02818df034fc42c3bd149… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36080 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1187814] IMA/EVM is not enabled in the RPM package
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187814 Jeffrey Cheung <jcheung(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jcheung(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187918] New: VUL-1: CVE-2020-36407: libavif: out-of-bounds write in avifDecoderDataFillImageGrid()
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1187918 Bug ID: 1187918 Summary: VUL-1: CVE-2020-36407: libavif: out-of-bounds write in avifDecoderDataFillImageGrid() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/303339/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-36407 libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-36407 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24811 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36407 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavif/OSV-2020-1… https://github.com/AOMediaCodec/libavif/commit/0a8e7244d494ae98e9756355dfbf… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1186913] games:tools/ags: Bug
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1186913 https://bugzilla.suse.com/show_bug.cgi?id=1186913#c1 Dirk Stoecker <opensuse(a)dstoecker.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|opensuse(a)dstoecker.de |screening-team-bugs(a)suse.de --- Comment #1 from Dirk Stoecker <opensuse(a)dstoecker.de> --- I have nothing to do with this. Maintainer is mailaender(a)opensuse.org. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187718] variety fail with error is ImportError: No module named requests
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187718 https://bugzilla.suse.com/show_bug.cgi?id=1187718#c1 Dirk Stoecker <opensuse(a)dstoecker.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|opensuse(a)dstoecker.de |screening-team-bugs(a)suse.de --- Comment #1 from Dirk Stoecker <opensuse(a)dstoecker.de> --- Sorry, but I have nothing to do with this software. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187910] [netcdf-fortran] Nothing provides nf-config
by bugzilla_noreply＠suse.com 01 Jul '21

01 Jul '21

https://bugzilla.suse.com/show_bug.cgi?id=1187910 https://bugzilla.suse.com/show_bug.cgi?id=1187910#c1 --- Comment #1 from Egbert Eich <eich(a)suse.com> --- (In reply to Peter Hill from comment #0) > Nothing provides the netCDF Fortran configuration utility `nf-config`. For > the C API, `/usr/bin/nc-config` is provided by `netcdf-devel`; > `netcdf-cxx4-tools` provides the C++ version `/usr/bin/ncxx4-config`. There is, it's called nf-fortran-config. I don't recall why I renamed it, though. I may change this back. > Separately, there is no non-environment module `netcdf-fortran` package. No, there isn't. This is not a bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0