Overview
Request 875151 superseded
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
due to insecure tmp file usage. (bsc#1180669)
Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
files.
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
- Created by varkoly
- In state superseded
- Supersedes 873673
- Superseded by 875214
- Open review for opensuse-review-team
- Open review for openSUSE:Factory:Staging:B
Sorry for asking: but without a source change to the previous submitted revision:
what makes you believe it now builds?
it won't - and it can't
Maybe you should setup your devel project accordingly to SHOW you the error in the devel project. For one, you don't build the cyrus-sals-bdb flavor there (osc linkpac network cyrus-sasl network cyrus-sasl-bdb
would help you show the issue)
The issue is rather simple: you have a dangling symlink of libsasl2.so to libsasl.so.3
libsasl2 is built as part of the MAIN package; the build script even explicitly rm -f libsasl2.so.3* (line 215 of cyrus-sasl-bdb.spec)
currently, there are two spec files that would be producing libsasl2-3: this is a no-go. only one package must produce the binary name at any given time.
Request History
varkoly created request
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
due to insecure tmp file usage. (bsc#1180669)
Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
files.
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
licensedigger accepted review
ok
RBrownSUSE set openSUSE:Factory:Staging:B as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:B"
RBrownSUSE accepted review
Picked "openSUSE:Factory:Staging:B"
superseded by 875214