October 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 785121] New: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=785121 https://bugzilla.novell.com/show_bug.cgi?id=785121#c0 Summary: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012 -5166 OS/Version: Other Status: NEW Keywords: security_vulnerability Severity: Critical Priority: P5 - None Component: 3rd party software AssignedTo: ug(a)suse.com ReportedBy: bernhard.schmidt(a)lrz-muenchen.de QAContact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- A nameserver can be locked up if it can be induced to load a specially crafted combination of resource records. CVE: CVE-2012-5166 Document Version: 2.0 Posting date: 9 October 2012 Program Impacted: BIND Versions affected: 9.2.x -> 9.6.x, 9.4-ESV->9.4-ESV-R5-P1, 9.6-ESV->9.6-ESV-R7-P3, 9.7.0->9.7.6-P3, 9.8.0->9.8.3-P3, 9.9.0->9.9.1-P3 Severity: Critical Exploitable: Remotely Please update to 9.9.1-P4 There is already #784602 for SuSE shipped packages (also not yet fixed) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 757783] New: clone() with CLONE_NEWPID leaks kernel memory
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=757783 https://bugzilla.novell.com/show_bug.cgi?id=757783#c0 Summary: clone() with CLONE_NEWPID leaks kernel memory Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Critical Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers(a)forge.provo.novell.com ReportedBy: ccrssaa(a)karelia.ru QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20120312 Firefox/11.0 SeaMonkey/2.8 Server with vsftpd running started to die in agony with kswapd eating 100% cpu after upgrading to openSUSE 12.1. Turned out that vsftpd isolates each process using CLONE_NEWPID and 3.1.9-1.4 kernel does not free pid_namespace slabs. Reproducible: Always Steps to Reproduce: 1. test.c: #include <stdio.h> #include <errno.h> #include <signal.h> #include <sched.h> #include <linux/sched.h> #include <unistd.h> #include <sys/syscall.h> int main(int argc, char *argv[]) { int i, ret; for (i = 0; i < 10000; i++) { if (0 == (ret = syscall(__NR_clone, CLONE_NEWPID | CLONE_NEWIPC | CLONE_NEWNET | SIGCHLD, NULL))) return 0; if (-1 == ret) { perror("clone"); break; } } return 0; } simulates vsftpd sysdeputil.c 2. gcc -Wall test.c 3. run ./a.out as root Actual Results: # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 10000 10002 2112 3 2 : tunables 24 12 8 : slabdata 3334 3334 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace slabs are freed but pid_namespace stays forever. Expected Results: # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2944 2 2 : tunables 24 12 8 : slabdata 0 0 0 TWIMC: switched from vsftpd to proftpd as a workaround. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 57

[Bug 715172] New: Review request for connman DBUS and polkit service files
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=715172 https://bugzilla.novell.com/show_bug.cgi?id=715172#c0 Summary: Review request for connman DBUS and polkit service files Classification: openSUSE Product: openSUSE 12.1 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: security-team(a)suse.de ReportedBy: mvyskocil(a)suse.com QAContact: qa(a)suse.de CC: vbotka(a)suse.com Found By: --- Blocker: --- I would like to push Connection Manager (connman) to openSUSE Factory. It's the alternative of NetworkManager written by Intel for Moblin. It installs two DBUS service files and one for polkit /etc/dbus-1/system.d/connman.conf /etc/dbus-1/system.d/connman-nmcompat.conf /usr/share/polkit-1/actions/net.connman.policy Package is in home:mvyskocil:connman connman https://build.opensuse.org/package/show?package=connman&project=home%3Amvys… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 11

[Bug 840026] New: drop opensuse-manuals_*
by bugzilla_noreply＠novell.com 06 Apr '19

06 Apr '19

https://bugzilla.novell.com/show_bug.cgi?id=840026 https://bugzilla.novell.com/show_bug.cgi?id=840026#c0 Summary: drop opensuse-manuals_* Classification: openSUSE Product: openSUSE Factory Version: 13.1 Milestone 4 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation AssignedTo: ke(a)suse.com ReportedBy: lnussel(a)suse.com QAContact: ke(a)suse.com CC: jw(a)suse.com Found By: --- Blocker: --- For 13.1 we would like to provide manuals via active doc online. The offline versions will be no longer necessary then. Please file drop requests for the packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 8

[Bug 899800] New: after suspend, sometimes networkmanager doesn't wake up
by bugzilla_noreply＠novell.com 27 Mar '19

27 Mar '19

http://bugzilla.opensuse.org/show_bug.cgi?id=899800 Bug ID: 899800 Summary: after suspend, sometimes networkmanager doesn't wake up Classification: openSUSE Product: openSUSE Factory Version: 201409* Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: jnelson-suse(a)jamponi.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Since upgrading to Factory from 13.1, I'm *deeply* impressed at the awesomeness I find. Pretty much everything works as well as, or better than, before. One thing doesn't: networkmanager sometimes needs to be kicked after restart. Not every time, but only some times. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 900099] New: smartmontools: generate_smartd_opts refers to init script
by bugzilla_noreply＠novell.com 08 Mar '19

08 Mar '19

http://bugzilla.suse.com/show_bug.cgi?id=900099 Bug ID: 900099 Summary: smartmontools: generate_smartd_opts refers to init script Classification: openSUSE Product: openSUSE Factory Version: 201410* Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: sbrabec(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- - /usr/lib/smartmontools/generate_smartd_opts refers to an init script that no longer exists - /usr/lib/smartmontools/generate_smartd_opts is never called AFAICS unless one uses YaST to edit /etc/sysconfig/smartmontools. Maybe the service file should call it before launching smartd? - /var/lib/smartmontools/smartd_opts should probably be moved to /run - rcsmartd symlink is missing -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 675064] New: [zypper] no interface to query/set RequestedLocales
by bugzilla_noreply＠novell.com 15 Feb '19

15 Feb '19

https://bugzilla.novell.com/show_bug.cgi?id=675064 https://bugzilla.novell.com/show_bug.cgi?id=675064#c0 Summary: [zypper] no interface to query/set RequestedLocales Classification: openSUSE Product: openSUSE 11.4 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: ma(a)novell.com QAContact: qa(a)suse.de Found By: Community User Blocker: --- Maintaining the RequestedLocales (packages with language support) with zypper is not possible. Also queries for language supporting packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 899819] New: YaST (Qt4) loads gnome icons instead of oxygen
by bugzilla_noreply＠novell.com 15 Feb '19

15 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=899819 Bug ID: 899819 Summary: YaST (Qt4) loads gnome icons instead of oxygen Classification: openSUSE Product: openSUSE Factory Version: 201409* Hardware: i586 OS: openSUSE 13.2 Status: NEW Severity: Minor Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: quentin(a)links2linux.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Since a couple of weeks (on factory), YaST in Qt4 loads gnome icons instead of the default KDE ones (oxygen). Here is the list of yast packages on my system: http://paste.opensuse.org/81871809 -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 692694] New: zypper: add using an inferior version to the problem solver
by bugzilla_noreply＠novell.com 14 Feb '19

14 Feb '19

https://bugzilla.novell.com/show_bug.cgi?id=692694 https://bugzilla.novell.com/show_bug.cgi?id=692694#c0 Summary: zypper: add using an inferior version to the problem solver Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: All OS/Version: Linux Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: jengelh(a)medozas.de QAContact: qa(a)suse.de Found By: Beta-Customer Blocker: --- Suppose this happens: 16:15 server01:~ # zypper in php5-xmlwriter Loading repository data... Reading installed packages... Resolving package dependencies... Problem: php5-xmlwriter-5.3.6.201105090040-73.1.x86_64 requires php5 = 5.3.6.201105090040, but this requirement cannot be provided uninstallable providers: php5-5.3.6.201105090040-73.1.i586[server_php] php5-5.3.6.201105090040-73.1.x86_64[server_php] Solution 1: Following actions will be done: replacement of php5-hash-5.3.3-0.17.1.x86_64 with php5-5.3.6.201105090040-73.1.x86_64 install php5-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php install php5-zip-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php [...] install apache2-mod_php5-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php Solution 2: do not install php5-xmlwriter-5.3.6.201105090040-73.1.x86_64 Solution 3: break php5-xmlwriter by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/3/c] (c): It would be welcome if zypper could offer a "Solution 4: Install php5-xmlwriter-5.3.3". -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 6

[Bug 500134] New: on checksumm errors yast2 software management produces non-informative message
by bugzilla_noreply＠novell.com 14 Feb '19

14 Feb '19

http://bugzilla.novell.com/show_bug.cgi?id=500134 Summary: on checksumm errors yast2 software management produces non-informative message Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: i686 OS/Version: openSUSE 11.1 Status: NEW Severity: Minor Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: grey-olli(a)ya.ru QAContact: jsrain(a)novell.com Found By: --- Created an attachment (id=289482) --> (http://bugzilla.novell.com/attachment.cgi?id=289482) 1st time the problem found User-Agent: Opera/9.64 (X11; Linux i686; U; en) Presto/2.1.1 On start of software management repository refresh is started. If checksumm is wrong for a file related to the repository the resulting message doesn't inform to which repository it relates. So if you've a few repositories installed the message is non-informative. Reproducible: Always Expected Results: Should at least tell to which repository the problem relates. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9