Am Sonntag, 23. Dezember 2018, 01:14:21 CET schrieb Stefan Brüns:
On Samstag, 22. Dezember 2018 18:19:23 CET Michael Ströder wrote:
On 12/22/18 4:32 PM, Axel Braun wrote:
Am Samstag, 22. Dezember 2018, 15:00:01 CET schrieb Dominique Leuenberger:
- update to perl-5.28.1
* [CVE-2018-18311] Integer overflow leading to buffer overflow * [CVE-2018-18312] Heap-buffer-overflow write in S_regatom
I guess this is the issue for:
T520:/home/docb # zypper dup -dl
3 Probleme: Problem: perl-Gtk2-Ex-FormFactory-0.67-1.21.noarch benötigt perl(:MODULE_COMPAT_5.26.2), kann jedoch nicht zur Verfügung gestellt werden Problem: perl-5.26.2-1.4.x86_64 benötigt perl-base = 5.26.2, kann jedoch nicht zur Verfügung gestellt werden Problem: perl-CBOR-XS-1.71-5.1.x86_64 benötigt perl(:MODULE_COMPAT_5.26.2), kann jedoch nicht zur Verfügung gestellt werden
It seems more Perl-based packages are affected by this and also PHP-based packages, e.g. nextcloud.
You are aware perl-Gtk2-Ex-FormFactory is not a Factory package, but only in e.g. devel:languages:perl?
This is strange, as I do not have this repo enabled. So my gues is that this is some orphaned package from former times (which is basically confirmed by zypper se --requires perl-Gtk2-Ex-FormFactory giving no result Thanks Axel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org