July 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 886411] New: NTP can be abused to amplify denial-of-service attack traffic
by bugzilla_noreply＠novell.com 22 Jul '14

22 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=886411 https://bugzilla.novell.com/show_bug.cgi?id=886411#c0 Summary: NTP can be abused to amplify denial-of-service attack traffic Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: tschaefer(a)t-online.de QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0 http://www.kb.cert.org/vuls/id/348126 Despite the workaround, I would expect an update. http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html Reproducible: Always Steps to Reproduce: Install a new system, make all updates. (switch off firewall) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 1

[Bug 765948] AUDIT-0: qemu and kvm setuid bridge helper setuid binary
by bugzilla_noreply＠novell.com 22 Jul '14

22 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=765948 https://bugzilla.novell.com/show_bug.cgi?id=765948#c Sebastian Krahmer <krahmer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |afaerber(a)suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 888177] New: Documentation of "_service" is not so wonderful.
by bugzilla_noreply＠novell.com 22 Jul '14

22 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=888177 https://bugzilla.novell.com/show_bug.cgi?id=888177#c0 Summary: Documentation of "_service" is not so wonderful. Classification: Internal Novell Products Product: openSUSE Build Service Version: master Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: source services AssignedTo: adrian(a)suse.com ReportedBy: osynge(a)suse.com QAContact: adrian(a)suse.com Found By: Development Blocker: No I have found very little documentation on the source service functions of OBS. http://en.opensuse.org/openSUSE:Build_Service_Concept_SourceService Being an example that should either be deprecated or at the least link to some thing more useful. The best documentation I have found is here: http://saschpe.wordpress.com/2013/11/08/obs-introducting-the-refresh_patche… I would like to see a minimum of all fields and attributes in the following "_service" file being documented. <services> <service name="tar_scm" mode="disabled"> <param name="url">git@github.com:ceph/remoto.git</param> <param name="scm">git</param> <param name="exclude">.git</param> <param name="exclude">.gitreview</param> <param name="filename">python-remoto</param> <param name="versionformat">@PARENT_TAG@</param> <param name="revision">0.0.19</param> </service> <service name="recompress" mode="disabled"> <param name="file">python-remoto*.tar</param> <param name="compression">bz2</param> </service> <service name="set_version" mode="disabled"> <param name="basename">python-remoto</param> </service> </services> The author of the code will realise that I rename the git checkout from remoto to python-remote. I searched the documentation but could not see how to do this, and resorted to asking on IRC. In an ideal world we would store what people wanted to do and link to how to do it, but I realise this is very very hard. So I propose simpler would be to do the bonus closing of this bug solution. For bonus marks in closing this bug, it would be good to get at least 3 example "_service" files, with the functions they provide and each field broken down. 1) Very basic setup such as shown above. 2) Highly automated setup doing everything and brush the dog. 3) A different highly automated system for cat lovers. These should be gathered from existing projects using this feature and each field broken down in these cases. Best regards Owen -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 1

[Bug 888295] New: texlive 13.1 update bug
by bugzilla_noreply＠novell.com 22 Jul '14

22 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=888295 https://bugzilla.novell.com/show_bug.cgi?id=888295#c0 Summary: texlive 13.1 update bug Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: werner(a)suse.com ReportedBy: meissner(a)suse.com QAContact: qa-bugs(a)suse.de CC: embar(a)super.lt Found By: --- Blocker: --- Visit https://build.opensuse.org/package/show/openSUSE:13.1:Update/patchinfo.2684 Mindaugas Baranauskas wrote in package openSUSE:13.1:Update/patchinfo.2684: Seems that texlive-pdfcrop-bin is broken, because I installed it (32 bit version) and it contain no files. There is no such /usr/bin/pdfcrop inside -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 1

[Bug 887872] New: Could a 'mytestbed' project namespace be created on OBS?
by bugzilla_noreply＠novell.com 22 Jul '14

22 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=887872 https://bugzilla.novell.com/show_bug.cgi?id=887872#c0 Summary: Could a 'mytestbed' project namespace be created on OBS? Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: OBS Request AssignedTo: mrueckert(a)suse.com ReportedBy: Olivier.Mehani(a)nicta.com.au QAContact: adrian(a)suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0 Hi, We maintain and develop a set of tools for repeatable experiments over at mytestbed.net [0]. We have been using OBS for a while to build most of our packages (save for Arch, I'm not sure what to upload...) in the home namespace of one of our guys [1,2]. However, he has recently left, and we thought it might be a good time to get a project-specific namespace. Would it be possible to create a 'mytestbed' namespace in OBS for us to migrate the existing builds from [1,2], and use from then on? If needed, my OBS username is shtrom. It might however be better to make a meta user to own the namespace, with email address mytestbed(a)mytestbed.net. I can create the user manually if needed. Thanks. [0] http://www.mytestbed.net/ [1] https://build.opensuse.org/project/show/home:cdwertmann:oml [2] https://build.opensuse.org/project/show/home:cdwertmann:oml-staging Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 878744] New: s2disk segfault when trying to hibernate using KDE "suspend to disk" menu item.
by bugzilla_noreply＠novell.com 21 Jul '14

21 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=878744 https://bugzilla.novell.com/show_bug.cgi?id=878744#c0 Summary: s2disk segfault when trying to hibernate using KDE "suspend to disk" menu item. Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: lichte(a)gmail.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36 When I try to hibernate my system, the screen turns blank and then comes right back up to a lock screen. I'm able to log back in to the system and everything seems to be working as normal. I found the following line in my dmesg: kernel: [ 2920.542784] s2disk[2543]: segfault at 10024 ip 00007f2c1d52790b sp 00007f2c1c800df0 error 4 in libfusion-1.6.so.0.3.0[7f2c1d522000+e000] systemd[1]: systemd-hibernate.service: main process exited, code=exited, status=1/FAILURE systemd[1]: Failed to start Hibernate. systemd[1]: Dependency failed for Hibernate. Reproducible: Always Steps to Reproduce: 1. Click on "Suspend to disk" menu item in KDE 2. 3. Actual Results: The system blanks for a moment, then a lock screen appears. Expected Results: The system should hibernate. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 5

[Bug 888170] New: apache2 logrotate-script refers to init.d-apache script
by bugzilla_noreply＠novell.com 21 Jul '14

21 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=888170 https://bugzilla.novell.com/show_bug.cgi?id=888170#c0 Summary: apache2 logrotate-script refers to init.d-apache script Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Apache AssignedTo: bnc-team-apache(a)forge.provo.novell.com ReportedBy: wiethoff(a)tfh-bochum.de QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:30.0) Gecko/20100101 Firefox/30.0 The logrotate-script in /etc/logrotate.d/apache2 refers to the vanished /etc/init.d/apache2 Reproducible: Always A solution would be: replacing /etc/init.d/apache2 with /usr/sbin/rcapache2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 887850] New: susefirewall2 / ip6tables not configured properly to allow inbound dhcpv6 replies
by bugzilla_noreply＠novell.com 21 Jul '14

21 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=887850 https://bugzilla.novell.com/show_bug.cgi?id=887850#c0 Summary: susefirewall2 / ip6tables not configured properly to allow inbound dhcpv6 replies Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: i686 OS/Version: openSUSE 12.3 Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: abittner(a)abittner.de QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:30.0) Gecko/20100101 Firefox/30.0 susefirewall2 / ip6tables not configured properly to allow inbound dhcpv6 replies having some dhcp-based inet provider (e.g. cable inet) that recently does ipv6 via dhcpv6 at certain locations only to find out that opensuse (susefirewall2) apparently simply doesnt care for dhcpv6 offer/reply packets and doesnt accept them, doesnt receive them, filters/drops them. was browsing around on the net on how other distros do this and if or when they solved these ipv6 things found redhat/fedora: <https://bugzilla.redhat.com/show_bug.cgi?id=591630> Bug 591630 - DHCPv6 responses are not allowed by default ip6tables ruleset <https://en.wikipedia.org/wiki/DHCPv6#Example> Experimenting a bit with opensuse 12.3/x86 and adding this line: ip6tables -I INPUT -m udp -p udp --dport 546 --sport 547 -s fe80::/64 -d fe80::/64 -j ACCEPT makes dhclient show at least proper ipv6 related outputs, or disabling susefirewall2 completely also achieves the same results. # ip6tables -I INPUT -m udp -p udp --dport 546 --sport 547 -s fe80::/64 -d fe80::/64 -j ACCEPT # dhclient -6 eth0 -v Internet Systems Consortium DHCP Client 4.2.5-P1 Copyright 2004-2013 Internet Systems Consortium. All rights reserved. For info, please visit https://www.isc.org/software/dhcp/ Bound to *:546 Listening on Socket/eth0 Sending on Socket/eth0 PRC: Soliciting for leases (INIT). XMT: Forming Solicit, 0 ms elapsed. XMT: X-- IA_NA 26:01:24:01 XMT: | X-- Request renew in +3600 XMT: | X-- Request rebind in +5400 XMT: Solicit on eth0, interval 1060ms. RCV: Advertise message on eth0 from fe80::1. RCV: X-- Server ID: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx message status code NoAddrsAvail: "No addresses available on Link 'cmts-1" PRC: Lease failed to satisfy. RCV: Advertise message on eth0 from fe80::1. RCV: X-- Server ID: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx message status code NoAddrsAvail: "No addresses available on Link 'cmts-1" PRC: Lease failed to satisfy. ^C If the rule is not present or deleted again then the output is as follows: # ip6tables -D INPUT -m udp -p udp --dport 546 --sport 547 -s fe80::/64 -d fe80::/64 -j ACCEPT # dhclient -6 eth0 -v Internet Systems Consortium DHCP Client 4.2.5-P1 Copyright 2004-2013 Internet Systems Consortium. All rights reserved. For info, please visit https://www.isc.org/software/dhcp/ Bound to *:546 Listening on Socket/eth0 Sending on Socket/eth0 PRC: Soliciting for leases (INIT). XMT: Forming Solicit, 0 ms elapsed. XMT: X-- IA_NA 26:01:24:01 XMT: | X-- Request renew in +3600 XMT: | X-- Request rebind in +5400 XMT: Solicit on eth0, interval 1010ms. XMT: Forming Solicit, 1010 ms elapsed. XMT: X-- IA_NA 26:01:24:01 XMT: | X-- Request renew in +3600 XMT: | X-- Request rebind in +5400 XMT: Solicit on eth0, interval 2010ms. ^C Please fix these elementary things about ipv6 with dhcpv6 replies. In contrast, having configured eth0 as ext device with susefirewall2/yast2 dhcpv4 works just fine on this ext=eth0 device, so why isnt dhcpv6 being treated the same way? thanks for fixing and enhancing this. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 7

[Bug 783002] New: Standard firewall blocks IPv6 UDP ports 546 and 5353
by bugzilla_noreply＠novell.com 21 Jul '14

21 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=783002 https://bugzilla.novell.com/show_bug.cgi?id=783002#c0 Summary: Standard firewall blocks IPv6 UDP ports 546 and 5353 Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: x86-64 OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: f.de.kruijf(a)gmail.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20100101 Firefox/15.0.1 It appears that the IPv4 UDP ports 46 (DHCP) and 5353 (mDNS) are opened by default in SuSEfirewall2, however the equivalent ports in IPv6 UDP port 546 and UDP 5353 are blocked (dropped). This causes problems in establishing a stable connection using NetworkManager. See bug#778434. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 63

[Bug 765948] AUDIT-0: qemu and kvm setuid bridge helper setuid binary
by bugzilla_noreply＠novell.com 21 Jul '14

21 Jul '14

https://bugzilla.novell.com/show_bug.cgi?id=765948 https://bugzilla.novell.com/show_bug.cgi?id=765948#c28 Sebastian Krahmer <krahmer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |REOPENED InfoProvider|krahmer(a)suse.com | --- Comment #28 from Sebastian Krahmer <krahmer(a)suse.com> 2014-07-21 08:08:49 UTC --- removing NEEDINFO -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0