http://bugzilla.suse.com/show_bug.cgi?id=1037210 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |lslezak@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c3 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ma@suse.com Component|libzypp |YaST2 Assignee|zypp-maintainers@forge.prov |yast2-maintainers@suse.de |o.novell.com | Summary|zypper download crashes |yast2-pkg-bindings download |when trying to download a |of source packages would |srcpackage |crash QA Contact|qa-bugs@suse.de |jsrain@suse.com Flags|needinfo?(lslezak@suse.com) | --- Comment #3 from Michael Andres --- libzypp-16.10.0 / zypper-1.13.26 now use the same workflow for downloading packages or source packages. This includes the same way of reporting and handling the package signature checks. @Ladislav: libzypp-16.10.0 (TW,Leap-42.{2,3},SLE12-SP{2,3}) has the gpg signature check for SrcPackages _disabled_ if $YAST_IS_RUNNING. Please drop me a note, once fixed package-bindings have been released for all of the above distros. We will enable it for yast thereafter. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 Stefan Hundhammer changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c5 Imobach Gonzalez Sosa changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |igonzalezsosa@suse.com --- Comment #5 from Imobach Gonzalez Sosa --- Hi Michael, I've submitted the code to all the distributions: SLE 12 GA: https://build.suse.de/request/show/133610 SLE 12 SP1: https://build.suse.de/request/show/133593 SLE 12 SP2: https://build.suse.de/request/show/133597 SLE 12 SP3: https://build.suse.de/request/show/133566 Factory: https://build.opensuse.org/request/show/500555 I would spec SP1 and SP2 patches to reach 42.1 and 42.2. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:4516:low |ibs:running:4516:low | |ibs:running:4514:low | |ibs:running:4515:low -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c8 Imobach Gonzalez Sosa changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Imobach Gonzalez Sosa --- You're welcome! I will close the bug report. Please, let me know if something is missing. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:4516:moderate | |ibs:running:4514:low | |ibs:running:4515:low | -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c9 --- Comment #9 from Swamp Workflow Management --- SUSE-RU-2017:1652-1: An update that has 5 recommended fixes can now be installed. Category: recommended (low) Bug References: 1032152,1032259,1037210,1037783,1041889 CVE References: Sources used: SUSE Linux Enterprise Server for SAP 12 (src): SUSEConnect-0.3.1-9.30.1, libzypp-14.45.4-2.65.4, yast2-pkg-bindings-3.1.20.4-14.1, zypper-1.11.65-2.61.1 SUSE Linux Enterprise Server 12-LTSS (src): SUSEConnect-0.3.1-9.30.1, libzypp-14.45.4-2.65.4, yast2-pkg-bindings-3.1.20.4-14.1, zypper-1.11.65-2.61.1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c11 --- Comment #11 from Swamp Workflow Management --- SUSE-RU-2017:1657-1: An update that has 16 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1017267,1017486,1021117,1028661,1030686,1031093,1032152,1032259,1032279,1032632,1035344,1035729,1037210,1037254,1037783,1041889 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP2 (src): libzypp-16.12.0-27.14.5, yast2-pkg-bindings-devel-doc-3.1.36-6.5.5 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): SUSEConnect-0.3.1-19.11.2, libzypp-16.12.0-27.14.5, yast2-pkg-bindings-3.1.36-6.5.5, zypper-1.13.28-18.8.5 SUSE Linux Enterprise Server 12-SP2 (src): SUSEConnect-0.3.1-19.11.2, libzypp-16.12.0-27.14.5, yast2-pkg-bindings-3.1.36-6.5.5, zypper-1.13.28-18.8.5 SUSE Linux Enterprise Desktop 12-SP2 (src): SUSEConnect-0.3.1-19.11.2, libzypp-16.12.0-27.14.5, yast2-pkg-bindings-3.1.36-6.5.5, zypper-1.13.28-18.8.5 OpenStack Cloud Magnum Orchestration 7 (src): SUSEConnect-0.3.1-19.11.2, libzypp-16.12.0-27.14.5, zypper-1.13.28-18.8.5 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:6918:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1037210 http://bugzilla.suse.com/show_bug.cgi?id=1037210#c17 --- Comment #17 from Swamp Workflow Management --- SUSE-SU-2018:2688-1: An update that solves four vulnerabilities and has 13 fixes is now available. Category: security (important) Bug References: 1036304,1037210,1038984,1045735,1048315,1054088,1070851,1076192,1079334,1088705,1091624,1092413,1096803,1099847,1100028,1101349,1102429 CVE References: CVE-2017-7435,CVE-2017-7436,CVE-2017-9269,CVE-2018-7685 Sources used: SUSE Linux Enterprise Server 12-LTSS (src): libzypp-14.45.17-2.82.1, zypper-1.11.70-2.69.2 -- You are receiving this mail because: You are on the CC list for the bug.