May 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 864716] New: AUDIT-0: libKF5Auth4.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.kf5auth.conf
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=864716 https://bugzilla.novell.com/show_bug.cgi?id=864716#c0 Summary: AUDIT-0: libKF5Auth4.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.kf5auth.conf Classification: openSUSE Product: openSUSE Factory Version: 13.2 Milestone 0 Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: hrvoje.senjan(a)gmail.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.91 Safari/537.36 SUSE/33.0.1750.91 Source can be found at KDE:Frameworks5/kauth. As with kinit package, code is just ported to Qt5/KF5. org.kde.kf5auth.conf was renamed from org.kde.auth.conf so it can be co-installed with kdelibs4 package(s) Thus - asking for whitelist =) Thanks! Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 83

[Bug 802278] New: Update to OpenStack 2012.2.3 (including security fixes)
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=802278 https://bugzilla.novell.com/show_bug.cgi?id=802278#c0 Summary: Update to OpenStack 2012.2.3 (including security fixes) Classification: openSUSE Product: openSUSE 12.3 Version: RC 1 Platform: Other OS/Version: Other Status: NEEDINFO Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: vuntz(a)suse.com QAContact: qa-bugs(a)suse.de InfoProvider: maintenance(a)opensuse.org Found By: --- Blocker: --- I'd like to update the following packages in 12.3: openstack-cinder, openstack-dashboard, openstack-glance, openstack-keystone, openstack-nova, openstack-quantum, openstack-swift. This is an update to the 2012.2.3 release which only contains bug fixes, as well as three security fixes (in nova, glance and keystone): https://lists.launchpad.net/openstack/msg20515.html https://lists.launchpad.net/openstack/msg20517.html https://lists.launchpad.net/openstack/msg20689.html (note that the packages have a 2012.2.4+git version; that's because we package from git, which is now tracking 2012.2.4) At the same time, we should update openstack-quickstart (to make it work in 12.3) and python-django_openstack_auth (contains compatibility fixes for 12.3). Here are links to the diffs: https://build.opensuse.org/package/rdiff?opackage=openstack-cinder&oproject… https://build.opensuse.org/package/rdiff?opackage=openstack-dashboard&oproj… https://build.opensuse.org/package/rdiff?opackage=openstack-glance&oproject… https://build.opensuse.org/package/rdiff?opackage=openstack-keystone&oproje… https://build.opensuse.org/package/rdiff?opackage=openstack-nova&oproject=o… https://build.opensuse.org/package/rdiff?opackage=openstack-quantum&oprojec… https://build.opensuse.org/package/rdiff?opackage=openstack-swift&oproject=… https://build.opensuse.org/package/rdiff?opackage=openstack-quickstart&opro… https://build.opensuse.org/package/rdiff?opackage=python-django_openstack_a… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 17

[Bug 785121] New: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=785121 https://bugzilla.novell.com/show_bug.cgi?id=785121#c0 Summary: network/bind: VUL-0: CVE-2012-5166: bind: Specially crafted RDATA causes bind to stop working Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012 -5166 OS/Version: Other Status: NEW Keywords: security_vulnerability Severity: Critical Priority: P5 - None Component: 3rd party software AssignedTo: ug(a)suse.com ReportedBy: bernhard.schmidt(a)lrz-muenchen.de QAContact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- A nameserver can be locked up if it can be induced to load a specially crafted combination of resource records. CVE: CVE-2012-5166 Document Version: 2.0 Posting date: 9 October 2012 Program Impacted: BIND Versions affected: 9.2.x -> 9.6.x, 9.4-ESV->9.4-ESV-R5-P1, 9.6-ESV->9.6-ESV-R7-P3, 9.7.0->9.7.6-P3, 9.8.0->9.8.3-P3, 9.9.0->9.9.1-P3 Severity: Critical Exploitable: Remotely Please update to 9.9.1-P4 There is already #784602 for SuSE shipped packages (also not yet fixed) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 757783] New: clone() with CLONE_NEWPID leaks kernel memory
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=757783 https://bugzilla.novell.com/show_bug.cgi?id=757783#c0 Summary: clone() with CLONE_NEWPID leaks kernel memory Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Critical Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers(a)forge.provo.novell.com ReportedBy: ccrssaa(a)karelia.ru QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20120312 Firefox/11.0 SeaMonkey/2.8 Server with vsftpd running started to die in agony with kswapd eating 100% cpu after upgrading to openSUSE 12.1. Turned out that vsftpd isolates each process using CLONE_NEWPID and 3.1.9-1.4 kernel does not free pid_namespace slabs. Reproducible: Always Steps to Reproduce: 1. test.c: #include <stdio.h> #include <errno.h> #include <signal.h> #include <sched.h> #include <linux/sched.h> #include <unistd.h> #include <sys/syscall.h> int main(int argc, char *argv[]) { int i, ret; for (i = 0; i < 10000; i++) { if (0 == (ret = syscall(__NR_clone, CLONE_NEWPID | CLONE_NEWIPC | CLONE_NEWNET | SIGCHLD, NULL))) return 0; if (-1 == ret) { perror("clone"); break; } } return 0; } simulates vsftpd sysdeputil.c 2. gcc -Wall test.c 3. run ./a.out as root Actual Results: # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 10000 10002 2112 3 2 : tunables 24 12 8 : slabdata 3334 3334 0 user_namespace 0 0 1072 7 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2560 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace slabs are freed but pid_namespace stays forever. Expected Results: # ./a.out # sleep 60 # cat /proc/slabinfo | grep namespace pid_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 net_namespace 0 0 2944 2 2 : tunables 24 12 8 : slabdata 0 0 0 TWIMC: switched from vsftpd to proftpd as a workaround. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 57

[Bug 715172] New: Review request for connman DBUS and polkit service files
by bugzilla_noreply＠novell.com 01 May '19

01 May '19

https://bugzilla.novell.com/show_bug.cgi?id=715172 https://bugzilla.novell.com/show_bug.cgi?id=715172#c0 Summary: Review request for connman DBUS and polkit service files Classification: openSUSE Product: openSUSE 12.1 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: security-team(a)suse.de ReportedBy: mvyskocil(a)suse.com QAContact: qa(a)suse.de CC: vbotka(a)suse.com Found By: --- Blocker: --- I would like to push Connection Manager (connman) to openSUSE Factory. It's the alternative of NetworkManager written by Intel for Moblin. It installs two DBUS service files and one for polkit /etc/dbus-1/system.d/connman.conf /etc/dbus-1/system.d/connman-nmcompat.conf /usr/share/polkit-1/actions/net.connman.policy Package is in home:mvyskocil:connman connman https://build.opensuse.org/package/show?package=connman&project=home%3Amvys… -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 11

[Bug 909037] New: Frequent kernel errors on Intel i915 GPU driver
by bugzilla_noreply＠novell.com 19 Apr '19

19 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=909037 Bug ID: 909037 Summary: Frequent kernel errors on Intel i915 GPU driver Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: x86-64 OS: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: christoph(a)stop.pe QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 616413 --> http://bugzilla.opensuse.org/attachment.cgi?id=616413&action=edit Error message from /var/log/messages I recently updated my openSUSE 13.1 installation to 13.2 on DELL Latitude E7440 hardware (if you need some standarized hardware report, please let me know). Since then the laptop freezes from time to time and i see several error messages like in the attached file in /var/log/messages. This happened >3.000 times in the last four weeks. Please let me know if i can help in any way resolving this issue. kind regards, Christoph Stoppe -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 840026] New: drop opensuse-manuals_*
by bugzilla_noreply＠novell.com 06 Apr '19

06 Apr '19

https://bugzilla.novell.com/show_bug.cgi?id=840026 https://bugzilla.novell.com/show_bug.cgi?id=840026#c0 Summary: drop opensuse-manuals_* Classification: openSUSE Product: openSUSE Factory Version: 13.1 Milestone 4 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation AssignedTo: ke(a)suse.com ReportedBy: lnussel(a)suse.com QAContact: ke(a)suse.com CC: jw(a)suse.com Found By: --- Blocker: --- For 13.1 we would like to provide manuals via active doc online. The offline versions will be no longer necessary then. Please file drop requests for the packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 8

[Bug 909567] New: scangearmp2 produces segfault in libpthread-2.18.so
by bugzilla_noreply＠novell.com 05 Apr '19

05 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=909567 Bug ID: 909567 Summary: scangearmp2 produces segfault in libpthread-2.18.so Classification: openSUSE Product: openSUSE 13.1 Version: Final Hardware: x86-64 OS: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Commercial Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.gu(a)intergga.ch QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0 Build Identifier: The application scangearmp2 is downloaded from http://de.canon.ch/Support/Consumer_Products/products/Fax__Multifunctionals… Installation with YaST or install.sh does not produce any error. But a start results in a memory access error. dmesg shows scangearmp2[9080]: segfault at 30 ip 00007fa0cf0f1294 sp 00007ffff2277a20 error 4 in libpthread-2.18.so[7fa0cf0e7000+18000] This error occurres with or withour a Canon Pixma MG7550 attached / switched on. Reproducible: Always Steps to Reproduce: 1.install scangearmp2 2.run scangearmp2 3. Actual Results: Application crashes with error message "Speicherzugriffsfehler" (memory access error) Expected Results: The application should be up and running, allowing to scan images I reported the error to Canon but I was informed that this is an error of the distribution (in libpthread-2.18.so) and that I should get help there. Unfortunately SANE does not yet support the Canon pixma MG7550 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 955986] New: Caff unusable
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=955986 Bug ID: 955986 Summary: Caff unusable Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: holgi(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- It is impossible to use caff since it reports syntac error no matter which options or flags you are using: holgi@opti:~> rpm -q signing-party signing-party-2.1-4.2.noarch holgi@opti:~> caff --version syntax error at /usr/bin/caff line 776, near "$handles{" Global symbol "@infhs" requires explicit package name at /usr/bin/caff line 778. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 779. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 781. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 783. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 784. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 786. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 786. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 786. Global symbol "$handles" requires explicit package name at /usr/bin/caff line 788. Global symbol "@infhs" requires explicit package name at /usr/bin/caff line 788. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 788. Global symbol "$handles" requires explicit package name at /usr/bin/caff line 789. Global symbol "@infhs" requires explicit package name at /usr/bin/caff line 789. Global symbol "$handles" requires explicit package name at /usr/bin/caff line 790. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 790. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 793. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 793. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 793. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 794. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 794. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 799. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 799. Global symbol "@outfhs" requires explicit package name at /usr/bin/caff line 799. Global symbol "%fh" requires explicit package name at /usr/bin/caff line 811. Global symbol "%fh" requires explicit package name at /usr/bin/caff line 812. Global symbol "%fh" requires explicit package name at /usr/bin/caff line 817. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 818. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 819. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 820. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 820. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 823. Global symbol "%opts" requires explicit package name at /usr/bin/caff line 826. Global symbol "%fh" requires explicit package name at /usr/bin/caff line 831. syntax error at /usr/bin/caff line 844, near "}" /usr/bin/caff has too many errors. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 918402] New: gpg2: signing-party does not work
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=918402 Bug ID: 918402 Summary: gpg2: signing-party does not work Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: vcizek(a)suse.com Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: astieger(a)suse.com Found By: --- Blocker: --- signing-party does not work with gpg on 13.2. gpg: Fatal: '/suse/meissner/.caff/gnupghome/trustdb.gpg' kann nicht geöffnet werden: Datei oder Verzeichnis nicht gefunden Not all keys could be imported from your normal GnuPGHOME. Andreas debugged this: Bug in gpg2. http://bugs.g10code.com/gnupg/issue1622 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=07006c99… https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751266 -- You are receiving this mail because: You are on the CC list for the bug.

1 11