September 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 864716] New: AUDIT-0: libKF5Auth4.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.kf5auth.conf
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=864716 https://bugzilla.novell.com/show_bug.cgi?id=864716#c0 Summary: AUDIT-0: libKF5Auth4.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.kf5auth.conf Classification: openSUSE Product: openSUSE Factory Version: 13.2 Milestone 0 Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: hrvoje.senjan(a)gmail.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.91 Safari/537.36 SUSE/33.0.1750.91 Source can be found at KDE:Frameworks5/kauth. As with kinit package, code is just ported to Qt5/KF5. org.kde.kf5auth.conf was renamed from org.kde.auth.conf so it can be co-installed with kdelibs4 package(s) Thus - asking for whitelist =) Thanks! Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 83

[Bug 802278] New: Update to OpenStack 2012.2.3 (including security fixes)
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=802278 https://bugzilla.novell.com/show_bug.cgi?id=802278#c0 Summary: Update to OpenStack 2012.2.3 (including security fixes) Classification: openSUSE Product: openSUSE 12.3 Version: RC 1 Platform: Other OS/Version: Other Status: NEEDINFO Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: vuntz(a)suse.com QAContact: qa-bugs(a)suse.de InfoProvider: maintenance(a)opensuse.org Found By: --- Blocker: --- I'd like to update the following packages in 12.3: openstack-cinder, openstack-dashboard, openstack-glance, openstack-keystone, openstack-nova, openstack-quantum, openstack-swift. This is an update to the 2012.2.3 release which only contains bug fixes, as well as three security fixes (in nova, glance and keystone): https://lists.launchpad.net/openstack/msg20515.html https://lists.launchpad.net/openstack/msg20517.html https://lists.launchpad.net/openstack/msg20689.html (note that the packages have a 2012.2.4+git version; that's because we package from git, which is now tracking 2012.2.4) At the same time, we should update openstack-quickstart (to make it work in 12.3) and python-django_openstack_auth (contains compatibility fixes for 12.3). Here are links to the diffs: https://build.opensuse.org/package/rdiff?opackage=openstack-cinder&oproject… https://build.opensuse.org/package/rdiff?opackage=openstack-dashboard&oproj… https://build.opensuse.org/package/rdiff?opackage=openstack-glance&oproject… https://build.opensuse.org/package/rdiff?opackage=openstack-keystone&oproje… https://build.opensuse.org/package/rdiff?opackage=openstack-nova&oproject=o… https://build.opensuse.org/package/rdiff?opackage=openstack-quantum&oprojec… https://build.opensuse.org/package/rdiff?opackage=openstack-swift&oproject=… https://build.opensuse.org/package/rdiff?opackage=openstack-quickstart&opro… https://build.opensuse.org/package/rdiff?opackage=python-django_openstack_a… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 17

[Bug 785121] New: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=785121 https://bugzilla.novell.com/show_bug.cgi?id=785121#c0 Summary: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012 -5166 OS/Version: Other Status: NEW Keywords: security_vulnerability Severity: Critical Priority: P5 - None Component: 3rd party software AssignedTo: ug(a)suse.com ReportedBy: bernhard.schmidt(a)lrz-muenchen.de QAContact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- A nameserver can be locked up if it can be induced to load a specially crafted combination of resource records. CVE: CVE-2012-5166 Document Version: 2.0 Posting date: 9 October 2012 Program Impacted: BIND Versions affected: 9.2.x -> 9.6.x, 9.4-ESV->9.4-ESV-R5-P1, 9.6-ESV->9.6-ESV-R7-P3, 9.7.0->9.7.6-P3, 9.8.0->9.8.3-P3, 9.9.0->9.9.1-P3 Severity: Critical Exploitable: Remotely Please update to 9.9.1-P4 There is already #784602 for SuSE shipped packages (also not yet fixed) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 757783] New: clone() with CLONE_NEWPID leaks kernel memory
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=757783 https://bugzilla.novell.com/show_bug.cgi?id=757783#c0 Summary: clone() with CLONE_NEWPID leaks kernel memory Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Critical Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers(a)forge.provo.novell.com ReportedBy: ccrssaa(a)karelia.ru QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20120312 Firefox/11.0 SeaMonkey/2.8 Server with vsftpd running started to die in agony with kswapd eating 100% cpu after upgrading to openSUSE 12.1. Turned out that vsftpd isolates each process using CLONE_NEWPID and 3.1.9-1.4 kernel does not free pid_namespace slabs. Reproducible: Always Steps to Reproduce: 1. test.c: #include <stdio.h> #include <errno.h> #include <signal.h> #include <sched.h> #include <linux/sched.h> #include <unistd.h> #include <sys/syscall.h> int main(int argc, char *argv[]) { int i, ret; for (i = 0; i < 10000; i++) { if (0 == (ret = syscall(__NR_clone, CLONE_NEWPID | CLONE_NEWIPC | CLONE_NEWNET | SIGCHLD, NULL))) return 0; if (-1 == ret) { perror("clone"); break; } } return 0; } simulates vsftpd sysdeputil.c 2. gcc -Wall test.c 3. run ./a.out as root Actual Results: # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 10000 10002 2112 3 2 : tunables 24 12 8 : slabdata 3334 3334 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace slabs are freed but pid_namespace stays forever. Expected Results: # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2944 2 2 : tunables 24 12 8 : slabdata 0 0 0 TWIMC: switched from vsftpd to proftpd as a workaround. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 57

[Bug 715172] New: Review request for connman DBUS and polkit service files
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=715172 https://bugzilla.novell.com/show_bug.cgi?id=715172#c0 Summary: Review request for connman DBUS and polkit service files Classification: openSUSE Product: openSUSE 12.1 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: security-team(a)suse.de ReportedBy: mvyskocil(a)suse.com QAContact: qa(a)suse.de CC: vbotka(a)suse.com Found By: --- Blocker: --- I would like to push Connection Manager (connman) to openSUSE Factory. It's the alternative of NetworkManager written by Intel for Moblin. It installs two DBUS service files and one for polkit /etc/dbus-1/system.d/connman.conf /etc/dbus-1/system.d/connman-nmcompat.conf /usr/share/polkit-1/actions/net.connman.policy Package is in home:mvyskocil:connman connman https://build.opensuse.org/package/show?package=connman&project=home%3Amvys… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 11

[Bug 840026] New: drop opensuse-manuals_*
by bugzilla_noreply＠novell.com 06 Apr '19

06 Apr '19

https://bugzilla.novell.com/show_bug.cgi?id=840026 https://bugzilla.novell.com/show_bug.cgi?id=840026#c0 Summary: drop opensuse-manuals_* Classification: openSUSE Product: openSUSE Factory Version: 13.1 Milestone 4 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation AssignedTo: ke(a)suse.com ReportedBy: lnussel(a)suse.com QAContact: ke(a)suse.com CC: jw(a)suse.com Found By: --- Blocker: --- For 13.1 we would like to provide manuals via active doc online. The offline versions will be no longer necessary then. Please file drop requests for the packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 8

[Bug 675064] New: [zypper] no interface to query/set RequestedLocales
by bugzilla_noreply＠novell.com 15 Feb '19

15 Feb '19

https://bugzilla.novell.com/show_bug.cgi?id=675064 https://bugzilla.novell.com/show_bug.cgi?id=675064#c0 Summary: [zypper] no interface to query/set RequestedLocales Classification: openSUSE Product: openSUSE 11.4 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: ma(a)novell.com QAContact: qa(a)suse.de Found By: Community User Blocker: --- Maintaining the RequestedLocales (packages with language support) with zypper is not possible. Also queries for language supporting packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 692694] New: zypper: add using an inferior version to the problem solver
by bugzilla_noreply＠novell.com 14 Feb '19

14 Feb '19

https://bugzilla.novell.com/show_bug.cgi?id=692694 https://bugzilla.novell.com/show_bug.cgi?id=692694#c0 Summary: zypper: add using an inferior version to the problem solver Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: All OS/Version: Linux Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: jengelh(a)medozas.de QAContact: qa(a)suse.de Found By: Beta-Customer Blocker: --- Suppose this happens: 16:15 server01:~ # zypper in php5-xmlwriter Loading repository data... Reading installed packages... Resolving package dependencies... Problem: php5-xmlwriter-5.3.6.201105090040-73.1.x86_64 requires php5 = 5.3.6.201105090040, but this requirement cannot be provided uninstallable providers: php5-5.3.6.201105090040-73.1.i586[server_php] php5-5.3.6.201105090040-73.1.x86_64[server_php] Solution 1: Following actions will be done: replacement of php5-hash-5.3.3-0.17.1.x86_64 with php5-5.3.6.201105090040-73.1.x86_64 install php5-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php install php5-zip-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php [...] install apache2-mod_php5-5.3.6.201105090040-73.1.x86_64 (with vendor change) openSUSE --> obs://build.opensuse.org/server:php Solution 2: do not install php5-xmlwriter-5.3.6.201105090040-73.1.x86_64 Solution 3: break php5-xmlwriter by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/3/c] (c): It would be welcome if zypper could offer a "Solution 4: Install php5-xmlwriter-5.3.3". -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 6

[Bug 500134] New: on checksumm errors yast2 software management produces non-informative message
by bugzilla_noreply＠novell.com 14 Feb '19

14 Feb '19

http://bugzilla.novell.com/show_bug.cgi?id=500134 Summary: on checksumm errors yast2 software management produces non-informative message Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: i686 OS/Version: openSUSE 11.1 Status: NEW Severity: Minor Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: grey-olli(a)ya.ru QAContact: jsrain(a)novell.com Found By: --- Created an attachment (id=289482) --> (http://bugzilla.novell.com/attachment.cgi?id=289482) 1st time the problem found User-Agent: Opera/9.64 (X11; Linux i686; U; en) Presto/2.1.1 On start of software management repository refresh is started. If checksumm is wrong for a file related to the repository the resulting message doesn't inform to which repository it relates. So if you've a few repositories installed the message is non-informative. Reproducible: Always Expected Results: Should at least tell to which repository the problem relates. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9

[Bug 787382] New: 'zypper rm -u' is not thorough enough when dealing with patterns
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

https://bugzilla.novell.com/show_bug.cgi?id=787382 https://bugzilla.novell.com/show_bug.cgi?id=787382#c0 Summary: 'zypper rm -u' is not thorough enough when dealing with patterns Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: x86-64 OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers(a)forge.provo.novell.com ReportedBy: yoshi314(a)gmail.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20100101 Firefox/16.0 A simple example to illustate the problem : ------------------------------------------------------------------ a system is installed with no kde4 related patterns. rpm -qa |grep pattern patterns-openSUSE-base-12.2-5.5.1.x86_64 patterns-openSUSE-enhanced_base-12.2-5.5.1.x86_64 patterns-openSUSE-fonts-12.2-5.5.1.x86_64 patterns-openSUSE-minimal_base-12.2-5.5.1.x86_64 patterns-openSUSE-sw_management-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_install_wf-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_basis-12.2-5.5.1.x86_64 A command to install kde4 pattern is issued : ~ # zypper in -t pattern kde4 after installation, a command to remove the same pattern is issued : ~ # zypper rm -u patterns-openSUSE-kde4 ~ # rpm -qa |grep pattern patterns-openSUSE-base-12.2-5.5.1.x86_64 patterns-openSUSE-x11-12.2-5.5.1.x86_64 patterns-openSUSE-enhanced_base-12.2-5.5.1.x86_64 patterns-openSUSE-fonts-12.2-5.5.1.x86_64 patterns-openSUSE-non_oss-12.2-5.5.1.x86_64 patterns-openSUSE-minimal_base-12.2-5.5.1.x86_64 patterns-openSUSE-x11_opt-12.2-5.5.1.x86_64 patterns-openSUSE-imaging-12.2-5.5.1.x86_64 patterns-openSUSE-sw_management-12.2-5.5.1.x86_64 patterns-openSUSE-non_oss_opt-12.2-5.5.1.x86_64 patterns-openSUSE-kde4_basis-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_install_wf-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_basis-12.2-5.5.1.x86_64 ------------------------------------------------------------------------------ A diff of those two outputs : --- pre_pattern.txt 2012-10-30 09:58:46.123122931 -0400 +++ post_pattern.txt 2012-10-30 10:09:09.267068467 -0400 @@ -1,7 +1,13 @@ patterns-openSUSE-base-12.2-5.5.1.x86_64 +patterns-openSUSE-x11-12.2-5.5.1.x86_64 patterns-openSUSE-enhanced_base-12.2-5.5.1.x86_64 patterns-openSUSE-fonts-12.2-5.5.1.x86_64 +patterns-openSUSE-non_oss-12.2-5.5.1.x86_64 patterns-openSUSE-minimal_base-12.2-5.5.1.x86_64 +patterns-openSUSE-x11_opt-12.2-5.5.1.x86_64 +patterns-openSUSE-imaging-12.2-5.5.1.x86_64 patterns-openSUSE-sw_management-12.2-5.5.1.x86_64 +patterns-openSUSE-non_oss_opt-12.2-5.5.1.x86_64 +patterns-openSUSE-kde4_basis-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_install_wf-12.2-5.5.1.x86_64 patterns-openSUSE-yast2_basis-12.2-5.5.1.x86_64 Some patterns remain, even though they were just installed as dependencies for kde4 pattern and should be classified as optional. Reproducible: Always Steps to Reproduce: 1. Install a pattern that pulls in other (not yet installed) patterns 2. Uninstall that pattern with zypper rm -u 3. Subpatterns that were installed as dependencies in 1. are still installed. Actual Results: Pulled in subpatterns remain installed Expected Results: Pulled in subpatterns should be removed if they were not explictly installed by user and are not depended upon by some other packages openSUSE 12.2 ; libzypp 11.6.2-2.1.2.x86_64 zypper-1.7.3-1.2.2.x86_64 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 6