August 2008 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 414612] New: VUL-0: openttd remote buffer overflow
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=414612 User krahmer(a)novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=414612#c493714 Summary: VUL-0: openttd remote buffer overflow Product: openSUSE 11.0 Version: Final Platform: Other OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: Development AssignedTo: kssingvo(a)novell.com ReportedBy: krahmer(a)novell.com QAContact: qa(a)suse.de CC: security-team(a)suse.de Found By: --- Date: Mon, 4 Aug 2008 20:53:14 +0200 From: Nico Golde <oss-security+ml(a)ngolde.de> To: oss-security(a)lists.openwall.com Mail-Followup-To: oss-security(a)lists.openwall.com X-Mailer: netcat 1.10 X-GPG: 0x73647cff Subject: [oss-security] CVE id request: openttd [-- PGP output follows (current time: Tue 05 Aug 2008 08:31:05 AM CEST) --] gpg: Signature made Mon 04 Aug 2008 08:53:13 PM CEST using DSA key ID 73647CFF gpg: Can't check signature: public key not found [-- End of PGP output --] [-- The following data is signed --] Hi, Can I get a CVE id for the following security issues fixed in openttd 6.2? "OpenTTD servers of version 0.6.1 and below are susceptible to a remotely exploitable buffer overflow when the server is filled with companies and clients with names that are (near) the maximum allowed length for names. In the worst case OpenTTD will write the following (mostly remotely changable bytes) into 1460 bytes of malloc-ed memory: up to 11 times (amount of players) 118 bytes up to 8 times (amount of companies) 124 bytes and 7 "header" bytes Resulting in up to 2297 bytes being written in 1460 bytes of malloc-ed memory. This makes it possible to remotely crash the game or change the gamestate into an unrecoverable state. " This is Debian bug #493714. I didn't yet have the time to check the diff between the versions. Kind regards Nico -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 408215] New: Real player crash
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=408215 Summary: Real player crash Product: openSUSE 11.0 Version: Final Platform: PC OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: marko.suoanttila(a)gmail.com QAContact: qa(a)suse.de Found By: --- Created an attachment (id=227164) --> (https://bugzilla.novell.com/attachment.cgi?id=227164) Real player bug report Real player crash, don't have details anymore. See attached bug report. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 5

[Bug 252218] New: php5 command line interpreter hangs in libedit startup when started in background
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=252218 Summary: php5 command line interpreter hangs in libedit startup when started in background Product: openSUSE 10.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development AssignedTo: anosek(a)novell.com ReportedBy: florian(a)void.s.bawue.de QAContact: qa(a)suse.de CC: judas_iscariote(a)shorewall.net This is a problem with the php5-5.2.1-17.1 package from BuildService: When you try to run any php script in the background like so: bash$ php5 script.php & The php interpreter then becomes Blocked and will only unblock if you send the process to the foreground again. I think it is waiting for the TTY. This happens before the first line of the php script is executed, and I think it happens in the libedit initialization. If you use a non-tty file for the input, for example /dev/null, the script runs fine. I can reproduce this on OpenSUSE 10.2 (32-bit) with php5-5.2.1-17.1 and libedit-2.9.snap20061022-8 and on SUSE 10.0 (64-bit) with php5-5.2.1-17.1 and libedit-2.10.snap20061228-6.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 9

[Bug 403907] Need MS SQL Support in PHP
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=403907 Cristian Rodriguez <crrodriguez(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Info Provider|cnelson(a)sorenson.com |cfarrell(a)novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 414021] New: opensuse 11.1a fails to install as a PV guest
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=414021 Summary: opensuse 11.1a fails to install as a PV guest Product: openSUSE 11.1 Version: Factory Platform: x86-64 OS/Version: openSUSE 11.0 Status: NEW Severity: Critical Priority: P5 - None Component: Xen AssignedTo: cgriffin(a)novell.com ReportedBy: plc(a)novell.com QAContact: qa(a)suse.de Found By: Development Tried to install opensuse 11.1a1 as a PV guest. See attached log. dom0 configuaration: x86_64 opensuse 11.0 AMD Turion(tm) 64 X2 Mobile Technology TL-60 MemTotal: 1802880 kB VM config options: All defaults, just set the cdrom ISO 512 mem 1 vcpu Install iso: openSUSE-11.1-Alpha1-DVD-x86_64.iso -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 5

[Bug 409504] New: kernel attempts to write on a DVD, which contains an encrypted reiserfs image.
by bugzilla_noreply＠novell.com 05 Aug '08

05 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=409504 Summary: kernel attempts to write on a DVD, which contains an encrypted reiserfs image. Product: openSUSE 10.3 Version: Final Platform: i686 OS/Version: openSUSE 10.3 Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: robin.listas(a)telefonica.net QAContact: kernel-maintainers(a)forge.provo.novell.com Found By: --- While investigating Bug 345039, I discovered this little problem: I mount a DVD (/dev/hdc), which contains an LUKS encrypted reiserfs filesystem (details at the end). It is of course not writable, but the kernel attempts to write to it - or so it seems to me: Jul 16 12:24:29 nimrodel kernel: REISERFS (device dm-6): found reiserfs format "3.6" with standard journal Jul 16 12:24:29 nimrodel kernel: REISERFS (device dm-6): using ordered data mode Jul 16 12:24:29 nimrodel kernel: reiserfs: using flush barriers Jul 16 12:24:29 nimrodel kernel: REISERFS (device dm-6): journal params: device dm-6, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 Jul 16 12:24:29 nimrodel kernel: REISERFS (device dm-6): checking transaction log (dm-6) Jul 16 12:24:29 nimrodel kernel: reiserfs: disabling flush barriers on dm-6 Jul 16 12:24:30 nimrodel kernel: REISERFS (device dm-6): Using r5 hash to sort names Jul 16 12:25:03 nimrodel kernel: hdc: command error: status=0x51 { DriveReady SeekComplete Error } Jul 16 12:25:03 nimrodel kernel: hdc: command error: error=0x50 { LastFailedSense=0x05 } Jul 16 12:25:03 nimrodel kernel: ide: failed opcode was: unknown Jul 16 12:25:03 nimrodel kernel: ATAPI device hdc: Jul 16 12:25:03 nimrodel kernel: Error: Illegal request -- (Sense key=0x05) Jul 16 12:25:03 nimrodel kernel: Invalid field in command packet -- (asc=0x24, ascq=0x00) Jul 16 12:25:03 nimrodel kernel: The failed "Write 10" packet command was: Jul 16 12:25:03 nimrodel kernel: "2a 00 00 00 41 26 00 00 02 00 00 00 00 00 00 00 " Jul 16 12:25:03 nimrodel kernel: end_request: I/O error, dev hdc, sector 66712 Jul 16 12:25:03 nimrodel kernel: Buffer I/O error on device hdc, logical block 8339 Jul 16 12:25:03 nimrodel kernel: lost page write due to I/O error on hdc Mount command: nimrodel:~ # /etc/init.d/boot.crypto start /dev/dvd.l Please enter passphrase for /dev/dvd.l (mycrypt_mm_dvd): Please enter passphrase for /dev/dvd.l (mycrypt_mm_dvd): key slot 0 unlocked. Please enter passphrase for /dev/dvd.l (mycrypt_mm_dvd): Command successful. /dev/dvd.l... done Notes on the encryption system used: nimrodel:~ # l /dev/dvd.l lrwxrwxrwx 1 root root 8 Jul 15 18:13 /dev/dvd.l -> /dev/dvd /etc/crypttab: #DVD: mycrypt_mm_dvd /dev/dvd.l none noauto,loop # writeable dvd, reiserfs image, used to burn the above DVD: cr_crypta_f3_dvd.mm.r /Grande/imgs/crypta_f3_dvd.mm.r none noauto /etc/fstab: /dev/mapper/mycrypt_mm_dvd /mnt/dvd.crypta.x auto ro,noauto,user,noatime,nodiratime 0 0 /dev/mapper/cr_crypta_f3_dvd.mm.r /mnt/crypta.mm_dvd3.r reiserfs acl,user_xattr,noauto 0 0 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9

[Bug 413409] New: Please update rdiff-backup to latest (1.2.0)
by bugzilla_noreply＠novell.com 04 Aug '08

04 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=413409 Summary: Please update rdiff-backup to latest (1.2.0) Product: openSUSE 11.1 Version: Factory Platform: x86-64 OS/Version: openSUSE 11.0 Status: NEW Severity: Enhancement Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: jnelson-suse(a)jamponi.net QAContact: qa(a)suse.de Found By: --- I've got a working build here, based on the existing package for opensuse 11.0: https://build.opensuse.org/package/show?package=rdiff-backup&project=home%3… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 390213] New: Enhance partitioner to be more user friendly
by bugzilla_noreply＠novell.com 04 Aug '08

04 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=390213 Summary: Enhance partitioner to be more user friendly Product: openSUSE 11.1 Version: Alpha 0 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: captain.magnus(a)opensuse.org QAContact: jsrain(a)novell.com Found By: --- Created an attachment (id=215130) --> (https://bugzilla.novell.com/attachment.cgi?id=215130) Screenshot Enhance partitioner to be more user friendly. It be much easier for people to have a GUI representation of used disk space. Something like what's in partition magic, where you can use your mouse to modify the size etc. See attached screenshot -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 10

[Bug 414075] New: KEditFileType crashes
by bugzilla_noreply＠novell.com 04 Aug '08

04 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=414075 User b.a.koenig(a)googlemail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=414075#c5 Summary: KEditFileType crashes Product: openSUSE 11.0 Version: Final Platform: 64bit OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: KDE4 Workspace AssignedTo: kde-maintainers(a)suse.de ReportedBy: b.a.koenig(a)googlemail.com QAContact: qa(a)suse.de Found By: --- KEditFileType crashes pretty often when changing the file preferences for a certain file type, e.g. changing the command line "emacs %f" to "emacs -fn 10x20 %f". Here's a possible backtrace: [?1034h(no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread 0x7fe9d9cd2700 (LWP 11655)] (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) [KCrash handler] #5 0x00007fe9d8bee703 in KSycocaDict::Private::hashKey () from /usr/lib64/libkdecore.so.5 #6 0x00007fe9d8beec6d in KSycocaDict::Private::offsetForKey () from /usr/lib64/libkdecore.so.5 #7 0x00007fe9d8beee86 in KSycocaDict::find_string () from /usr/lib64/libkdecore.so.5 #8 0x00007fe9d8b6dccb in KServiceFactory::findServiceByDesktopPath () from /usr/lib64/libkdecore.so.5 #9 0x00007fe9d8b647b8 in KService::serviceByDesktopPath () from /usr/lib64/libkdecore.so.5 #10 0x0000000000411588 in _start () #0 0x00007fe9d37b9230 in nanosleep () from /lib64/libc.so.6 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 6

[Bug 410396] New: Automatic Compiling of Kernel Modules
by bugzilla_noreply＠novell.com 04 Aug '08

04 Aug '08

https://bugzilla.novell.com/show_bug.cgi?id=410396 Summary: Automatic Compiling of Kernel Modules Product: openSUSE 11.1 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: marcel(a)hilzinger.hu QAContact: qa(a)suse.de Found By: --- The Standard Linux-Kernel provides a lot of hardware drivers/kernel modules. Nevertheless there are still devices not supported by the kernel. If a user compiles a kernel module by himself, he has to redo this step after each kernel update (if he is aware at all, that this step is needed). My idea was to install kernel-source, kernel-syms, gcc and make with each standard installation and to define a standard directory for the source code of kernel modules, e.g /usr/src/updates. When a Kernel Update is done, the system looks on boot in /usr/src/updates for directories and does there a 'make' and 'make install'. (build a kmp-package ?) If this could become a standard for other distributions (LSB) as well and corresponding init scripts would exist, third party kernel modules could be installed automagically after extracting code to /usr/src/update, so there would be some kind of standard for installing external kernel modules. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4