March 2008 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 186180] VUL-0: other php 5.1.3 issues
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=186180 User crrodriguez(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=186180#c13 Cristian Rodriguez <crrodriguez(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #13 from Cristian Rodriguez <crrodriguez(a)novell.com> 2008-03-06 10:11:13 MST --- about this two bugs: the first is fixed in all products the second is fixed in SLE10 SP2, 10.2, 10.3, STABLE already. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 362576] New: autoyast: Create reference profile does not work
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=362576 Summary: autoyast: Create reference profile does not work Product: openSUSE 11.0 Version: Alpha 2 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: captain.magnus(a)opensuse.org QAContact: jsrain(a)novell.com Found By: --- When trying to create a reference profile in autoyast, nothing happens. Attaching the y2log. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 5

[Bug 367449] New: segfaults in unchecked_decompress_buf
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=367449 Summary: segfaults in unchecked_decompress_buf Product: openSUSE 11.0 Version: Alpha 2 Platform: x86-64 OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: jkupec(a)novell.com QAContact: dmacvicar(a)novell.com Found By: Development Created an attachment (id=198879) --> (https://bugzilla.novell.com/attachment.cgi?id=198879) zypper install zypper Hi, can someone help me with these? I'm getting segfaults when doing zypper search foo or zypper install foo in current trunk (r9022). Attaching valgrind output in a while. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 6

[Bug 117079] Firefox does not use aoss
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=117079 User sbrabec(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=117079#c14 --- Comment #14 from Stanislav Brabec <sbrabec(a)novell.com> 2008-03-06 09:58:07 MST --- It's fixed in Factory, but the fix is not fully correct: if [ -d /proc/asound -a -e /usr/$LIB/libaoss.so ]; then export LD_PRELOAD=/usr/\$LIB/libaoss.so${LD_PRELOAD:+:$LD_PRELOAD} fi It will cause errors, if alsa-lib and alsa-oss-32bit is not installed and nspluginwrapper is in use. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 152123] SuSE 10.0 (and not only) supply kernels with no support for grsecurity nor even PaX & w/ this AppArmor is enabled for only some apps. :/
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=152123 User lnussel(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=152123#c11 Ludwig Nussel <lnussel(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |WONTFIX --- Comment #11 from Ludwig Nussel <lnussel(a)novell.com> 2008-03-06 09:52:27 MST --- Nothing left for use to do AFAICS. The buildservice can nowadays be used to publish custom kernels. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 334767] New: SuSEfirewall does not work from time to time in combination with vmware interfaces
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=334767 Summary: SuSEfirewall does not work from time to time in combination with vmware interfaces Product: openSUSE 10.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: choeger(a)open-xchange.com QAContact: qa(a)suse.de Found By: --- I'm using VMWare (WS5.5.5) with vmnet8 now since 10.0 and have the very same SuSEfirewall configuration since then: FW_DEV_EXT="any eth1" FW_DEV_INT="eth0 vmnet8" On my host system runs an nfs server which exports to my development vms. Since 10.3 I have to restart SuSEfirewall from time to time before the vm can reach the nfs server (timeout in connects). Looks like a timing issue somehow. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 12

[Bug 331043] New: Su allows echo from stdin when no other distro I can find does.
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=331043 Summary: Su allows echo from stdin when no other distro I can find does. Product: openSUSE 10.3 Version: Final Platform: Other OS/Version: openSUSE 10.3 Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: fm0nk3y(a)yahoo.co.uk QAContact: qa(a)suse.de Found By: --- As the title says I think this is a major security flaw. After checking with another distro I find that this command won't work but does on Suse 10.3. echo "passwd" | su -c ifconfig Now on the surface this doesn't seem that bad but when it turns in to something like this for i in `egrep '^.{5,5}$' /var/lib/dict/words`; { echo $i | sed 's/o/0/g' | su -c ifconfig;} I hope you can see my concerns, so my question is this a design detail or a slip as having had some feedback I also find this is applicable to 10.1. I also suspect 10.2 and a few other versions. If this is a design detail may ask the reason as I for one can't see a reasoning to allow su to take the passwd from stdin. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9

[Bug 186180] VUL-0: other php 5.1.3 issues
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=186180 User lnussel(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=186180#c12 Ludwig Nussel <lnussel(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team(a)suse.de |crrodriguez(a)novell.com Status|REOPENED |NEW --- Comment #12 from Ludwig Nussel <lnussel(a)novell.com> 2008-03-06 09:26:15 MST --- is this still current or should it be closed as INVALID/WONTFIX? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 186180] VUL-0: other php 5.1.3 issues
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=186180 User lnussel(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=186180#c11 Ludwig Nussel <lnussel(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|LATER | --- Comment #11 from Ludwig Nussel <lnussel(a)novell.com> 2008-03-06 09:25:38 MST --- reopen -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 188142] awstats 6.6 updates doesn't work with GeoIP Org plugin
by bugzilla_noreply＠novell.com 06 Mar '08

06 Mar '08

https://bugzilla.novell.com/show_bug.cgi?id=188142 User lnussel(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=188142#c13 Ludwig Nussel <lnussel(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|LATER |WONTFIX --- Comment #13 from Ludwig Nussel <lnussel(a)novell.com> 2008-03-06 09:23:21 MST --- package was dropped meanwhile -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0