gpp_maybe
Fixing security issues on obs toolchain
SUSE-SLE-SDK-12-SP2-2017-2028
This OBS toolchain update fixes the following issues: Package 'build': - CVE-2010-4226: force use of bsdtar for VMs (bnc#665768) - CVE-2017-14804: Improve file name check extractbuild (bsc#1069904) - switch baselibs scheme for debuginfo packages from foo-debuginfo-32bit to foo-32bit-debuginfo (fate#323217) Package 'obs-service-source_validator': - CVE-2017-9274: Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556). - Update to version 0.7 - use spec_query instead of output_versions using the specfile parser from the build package (boo#1059858) Package 'osc': - update to version 0.162.0 - add Recommends: ca-certificates to enable TLS verification without manually installing them. (bnc#1061500)
-
Release DateDec 8 2017
-
ReferencesBugzilla: 665768, 1069904, 938556, 1059858, 1061500
CVEs: CVE-2017-14804, CVE-2017-9274, CVE-2010-4226 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12.2 aarch64
-
Packagesbuild
A Script to Build SUSE Linux RPMsbuild-mkbaselibs20171128-9.3.2 lock rpm lock src
Tools to generate base lib packagesobs-service-source_validator20171128-9.3.2 lock rpm
An OBS source service: running all the osc source-validator checksosc0.7-9.3.1 lock rpm lock src
Open Build Service Commander0.162.0-15.3.1 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 12.2 ppc64le
-
Packagesbuild
A Script to Build SUSE Linux RPMsbuild-mkbaselibs20171128-9.3.2 lock rpm lock src
Tools to generate base lib packagesobs-service-source_validator20171128-9.3.2 lock rpm
An OBS source service: running all the osc source-validator checksosc0.7-9.3.1 lock rpm lock src
Open Build Service Commander0.162.0-15.3.1 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 12.2 s390x
-
Packagesbuild
A Script to Build SUSE Linux RPMsbuild-initvm-s39020171128-9.3.2 lock rpm lock src
Virtualization initializer for emulated cross architecture buildsbuild-mkbaselibs20171128-9.3.2 lock rpm
Tools to generate base lib packagesobs-service-source_validator20171128-9.3.2 lock rpm
An OBS source service: running all the osc source-validator checksosc0.7-9.3.1 lock rpm lock src
Open Build Service Commander0.162.0-15.3.1 lock rpm lock src
SUSE Linux Enterprise Software Development Kit 12.2 x86_64
-
Packagesbuild
A Script to Build SUSE Linux RPMsbuild-initvm-x86_6420171128-9.3.2 lock rpm lock src
Virtualization initializer for emulated cross architecture buildsbuild-mkbaselibs20171128-9.3.2 lock rpm
Tools to generate base lib packagesobs-service-source_validator20171128-9.3.2 lock rpm
An OBS source service: running all the osc source-validator checksosc0.7-9.3.1 lock rpm lock src
Open Build Service Commander0.162.0-15.3.1 lock rpm lock src