September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1186282] %sysusers_create_inline needs awkward syntax
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1186282 https://bugzilla.suse.com/show_bug.cgi?id=1186282#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice SUSE-RU-2021:2899-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1186282,1187332 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): systemd-rpm-macros-8-7.18.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): systemd-rpm-macros-8-7.18.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187332] zypper ignores the ordering constraints specified by OrderWithRequires
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1187332 https://bugzilla.suse.com/show_bug.cgi?id=1187332#c32 --- Comment #32 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice openSUSE-RU-2021:2899-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1186282,1187332 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): systemd-rpm-macros-8-7.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186282] %sysusers_create_inline needs awkward syntax
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1186282 https://bugzilla.suse.com/show_bug.cgi?id=1186282#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice openSUSE-RU-2021:2899-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1186282,1187332 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): systemd-rpm-macros-8-7.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185952] [Build 20210510] PostgreSQL 12 and 13 fail to build with LLVM12 on s390x
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185952 https://bugzilla.suse.com/show_bug.cgi?id=1185952#c30 --- Comment #30 from Sarah Kriesch <ada.lovelace(a)gmx.de> --- Hi Reinhard, can you tell "which error messages" are happening (or give me a link to the log), that I can look what is happening there, please? 2 weeks ago I did a small change in our project config of ZSystems because filesystems was not buildable with the existing config. I would be surprised about the incompatibility of all LLVM versions with PostgreSQL. If I know the bugs, I would look to Fedora as my first step, how they are doing their workarounds then. That is the upstream development Linux distribution (with the highest priority) of IBM. Therefore, that is the place for testing upstream solution implementation (besides of Enterprise distributions). -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1094678] VUL-0: CVE-2018-11412 kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

1 0

[Bug 1190048] VUL-1: CVE-2021-34434: mosquitto: Existing subscriptions for that client are not revoked
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190048 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190048] New: VUL-1: CVE-2021-34434: mosquitto: Existing subscriptions for that client are not revoked
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190048 Bug ID: 1190048 Summary: VUL-1: CVE-2021-34434: mosquitto: Existing subscriptions for that client are not revoked Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/308605/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mardnh(a)gmx.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de CC: mrueckert(a)suse.com Found By: Security Response Team Blocker: --- rh#1999865 In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked. https://bugs.eclipse.org/bugs/show_bug.cgi?id=575324 References: https://bugzilla.redhat.com/show_bug.cgi?id=1999865 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34434 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34434 https://bugs.eclipse.org/bugs/show_bug.cgi?id=575324 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1190046] New: diffutils testsuite failure
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190046 Bug ID: 1190046 Summary: diffutils testsuite failure Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: christian.voegl(a)suse.com Reporter: schwab(a)suse.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- https://build.opensuse.org/package/live_build_log/Base:System/diffutils/ope… [ 1837s] FAIL: test-c-stack.sh [ 1837s] ===================== [ 1837s] [ 1837s] ./test-c-stack.sh: line 7: 12134 Aborted ${CHECKER} ./test-c-stack${EXEEXT} 2> t-c-stack.tmp [ 1837s] FAIL test-c-stack.sh (exit status: 1) [ [ 1837s] FAIL: test-sigsegv-catch-stackoverflow1 [ 1837s] ======================================= [ 1837s] [ 1837s] FAIL test-sigsegv-catch-stackoverflow1 (exit status: 139) [ 1837s] [ 1837s] FAIL: test-sigsegv-catch-stackoverflow2 [ 1837s] ======================================= [ 1837s] [ 1837s] Starting recursion pass 1. [ 1837s] Stack overflow 1 missed. [ 1837s] FAIL test-sigsegv-catch-stackoverflow2 (exit status: 1) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190005] Ruby warning on console: URI.unescape is obsolete
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190005 https://bugzilla.suse.com/show_bug.cgi?id=1190005#c3 --- Comment #3 from David Diaz <dgonzalez(a)suse.com> --- (In reply to Ladislav Slez�k from comment #2) > Looks like a new Ruby warning, I found these usages in YaST: > Actually, the warning has been there for a while, see [1] But it's true that I started to see it after Ruby 2.7... Anyway, documentation[2] recommends using URI.decode_www_form or URI.decode_www_form_component. [1] https://github.com/ruby/ruby/commit/238b979f1789f95262a267d8df6239806f2859cc [2] https://ruby-doc.org/stdlib-2.7.1/libdoc/uri/rdoc/URI/Escape.html#method-i-… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190044] New: Bogus lto-no-text-in-archive
by bugzilla_noreply＠suse.com 01 Sep '21

01 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190044 Bug ID: 1190044 Summary: Bogus lto-no-text-in-archive Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: dmueller(a)suse.com Reporter: schwab(a)suse.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- [ 1888s] glibc-profile.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libanl_p.a [ 1888s] glibc-profile.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdl_p.a [ 1888s] glibc-profile.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libpthread_p.a [ 1888s] glibc-profile.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/librt_p.a [ 1888s] glibc-profile.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libutil_p.a [ 1888s] glibc-devel-static.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libanl.a [ 1888s] glibc-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdl.a [ 1888s] glibc-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libpthread.a [ 1888s] glibc-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/librt.a [ 1888s] glibc-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libutil.a -- You are receiving this mail because: You are on the CC list for the bug.

1 0