February 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1195390] switch default build environment from glibc-locale to glibc-locale-base
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1195390 http://bugzilla.opensuse.org/show_bug.cgi?id=1195390#c1 --- Comment #1 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1195390) was mentioned in https://build.opensuse.org/request/show/950425 Factory / rpm -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195391] identify and declare bash dependencies explicitly
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1195391 http://bugzilla.opensuse.org/show_bug.cgi?id=1195391#c1 --- Comment #1 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1195391) was mentioned in https://build.opensuse.org/request/show/950425 Factory / rpm -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180570] New: VUL-0: CVE-2020-35678: python-autobahn: allows redirect header injection
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1180570 Bug ID: 1180570 Summary: VUL-0: CVE-2020-35678: python-autobahn: allows redirect header injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/274062/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: steven.kowalik(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de CC: dmueller(a)suse.com Found By: Security Response Team Blocker: --- rh#1911314 Autobahn|Python before 20.12.3 allows redirect header injection. Reference and upstream patch: https://github.com/crossbario/autobahn-python/pull/1439 References: https://bugzilla.redhat.com/show_bug.cgi?id=1911314 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35678 https://access.redhat.com/security/cve/CVE-2020-35678 https://github.com/crossbario/autobahn-python/pull/1439 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35678 https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3 https://github.com/crossbario/autobahn-python https://pypi.org/project/autobahn/20.12.3/ https://autobahn.readthedocs.io/en/latest/changelog.html -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1191743] VUL-1: CVE-2021-28021: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1191743 https://bugzilla.suse.com/show_bug.cgi?id=1191743#c8 Adrian Schr�ter <adrian.schroeter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #8 from Adrian Schr�ter <adrian.schroeter(a)suse.com> --- this is fixed in 15.3 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195386] VUL-0: CVE-2022-23853: ktexteditor,kate: Missing validation of binaries executed via QProcess
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195386 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195343] cmangos issues building with boost because it cannot find static libraries
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195343 https://bugzilla.suse.com/show_bug.cgi?id=1195343#c11 --- Comment #11 from Adam Majer <amajer(a)suse.com> --- (In reply to Zombie Ryushu from comment #10) > Can we attempt to package cMangos-wotlk? Nobody tries too, You are welcome to package it. It compiles without much tweaks. The only problem for inclusion of this in any distro seems to be the warning right in the sources so maybe it would not be accepted, https://github.com/cmangos/mangos-wotlk/blob/master/WARNING -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195343] cmangos issues building with boost because it cannot find static libraries
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195343 https://bugzilla.suse.com/show_bug.cgi?id=1195343#c10 Zombie Ryushu <zombie.ryushu(a)zoho.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo? --- Comment #10 from Zombie Ryushu <zombie.ryushu(a)zoho.com> --- Can we attempt to package cMangos-wotlk? Nobody tries too, -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195288] CUPS complains about "Read-only file system" although it is writable
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195288 Johannes Meixner <jsmeix(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|https://build.opensuse.org/ |https://bugzilla.suse.com/s |request/show/925363 |how_bug.cgi?id=1195289 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195288] CUPS complains about "Read-only file system" although it is writable
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195288 https://bugzilla.suse.com/show_bug.cgi?id=1195288#c13 --- Comment #13 from Johannes Meixner <jsmeix(a)suse.com> --- Because cups-filters in Tumbleweed has already the hardening of cups-browsed.service since about Oct 2021 and I got no bugs about cups-browsed because of this I leave the hardening of cups-browsed.service as is. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1195288] CUPS complains about "Read-only file system" although it is writable
by bugzilla_noreply＠suse.com 01 Feb '22

01 Feb '22

https://bugzilla.suse.com/show_bug.cgi?id=1195288 https://bugzilla.suse.com/show_bug.cgi?id=1195288#c12 --- Comment #12 from Johannes Meixner <jsmeix(a)suse.com> --- Now I understand why there are not tons of such bug reports: https://build.opensuse.org/request/show/950381 shows that the initial hardening of cupsd.service via harden_cups.service.patch had somehow never made it into openSUSE:Factory - as far as I understand it. So the Product "openSUSE Tumbleweed" seems plain wrong in this bug report here and actually it happened only to those users who use CUPS from the OBS Printing development project - so bug #1195289 is the actually right description with the actually right fix. See also https://bugzilla.suse.com/show_bug.cgi?id=1193216#c3 Now let's wait and see how hell breaks loose when that hardening of cupsd.service appears in Tumbleweed ;-) -- You are receiving this mail because: You are on the CC list for the bug.

1 0