July 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 820566] New: wireshark security updates to 1.8.7 and 1.6.15
by bugzilla_noreply＠novell.com 19 Oct '18

19 Oct '18

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c0 Summary: wireshark security updates to 1.8.7 and 1.6.15 Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: All OS/Version: openSUSE 12.3 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: Andreas.Stieger(a)gmx.de QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0 https://www.wireshark.org/docs/relnotes/wireshark-1.8.7.html wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 The RELOAD dissector could go into an infinite loop. wnpa-sec-2013-24 The GTPv2 dissector could crash. wnpa-sec-2013-25 The ASN.1 BER dissector could crash. wnpa-sec-2013-26 The PPP CCP dissector could crash. wnpa-sec-2013-27 The DCP ETSI dissector could crash. wnpa-sec-2013-28 The MPEG DSM-CC dissector could crash. wnpa-sec-2013-29 The Websocket dissector could crash. wnpa-sec-2013-30 The MySQL dissector could go into an infinite loop. wnpa-sec-2013-31 The ETCH dissector could go into a large loop. https://www.wireshark.org/docs/relnotes/wireshark-1.6.15.html 1.6.15 wnpa-sec-2013-25 The ASN.1 BER dissector could crash Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 15

[Bug 974661] New: wicked resets host name after wickedd restart
by bugzilla_noreply＠novell.com 19 Oct '18

19 Oct '18

http://bugzilla.opensuse.org/show_bug.cgi?id=974661 Bug ID: 974661 Summary: wicked resets host name after wickedd restart Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: All OS: openSUSE 42.1 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: johannes.grassler(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:44.0) Gecko/20100101 Firefox/44.0 Build Identifier: We recently had an issue with one of our Jenkins jobs failing due to the machine's host name reverting to 'linux' after wickedd is restarted (see [0] for details). The machine in question had its hostname set to 'cleanvm.openstacklocal' by cloud-init. At a later point our QA script restarted wickedd and wickedd reverted the hostname to 'linux'. The problem appears to be caused by /etc/wicked/extensions/hostname. When we disabled that script by an `exit 0` at the top wicked no longer reset the host name. Adding some debugging output narrowed the problem down to the `install` operation in /etc/wicked/extensions/hostname. Specifically, wickedd set the hostname to `linux` (found in the hostname section of /var/lib/wicked/lease-eth0-dhcp-ipv4.xml but just putting an arbitrary value in there did not reset the host name to that arbitrary value, so probably the source of truth is somewhere else). [0] https://github.com/SUSE-Cloud/automation/pull/945 Reproducible: Always Steps to Reproduce: 1. Boot a VM with this image: http://download.opensuse.org/repositories/openSUSE:/Leap:/42.1:/Images/imag… 2. Set the machine's host name to an arbitrary value (either manually using hostnamectl or through cloud-init) 3. Issue a `systemctl restart wickedd`. After this the machine's run-time host name will change to `linux`. Actual Results: The machine's host name changed to `linux`. Expected Results: The host name should have remained the one originally set by cloud-init and found in /etc/hostname and /proc/sys/kernel/hostname (cleanvm.openstacklocal in the case at hand). -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 916933] New: Tuxwordsmith crashes on automated turn
by bugzilla_noreply＠novell.com 17 Oct '18

17 Oct '18

http://bugzilla.opensuse.org/show_bug.cgi?id=916933 Bug ID: 916933 Summary: Tuxwordsmith crashes on automated turn Classification: openSUSE Product: openSUSE 13.1 Version: Final Hardware: x86-64 OS: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ez2blost(a)yahoo.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Tuxwordsmith crashes when the computer animates the end of an automated move Traceback (most recent call last): File "/usr/bin/TuxWordSmith", line 51, in <module> x=TuxWordSmithAppWX() File "/usr/lib/python2.7/site-packages/TuxWordSmith/tws_wx.py", line 38, in __init__ mode,level=prog.run() File "/usr/lib/python2.7/site-packages/TuxWordSmith/tws.py", line 451, in run self.take_turn() File "/usr/lib/python2.7/site-packages/TuxWordSmith/tws.py", line 561, in take_turn if self.global_config['TILE_ANIMATIONS']['value']==1: KeyError: 'TILE_ANIMATIONS' (Also tuxwordsmith.sh has typos Tries to run TuxTuxWordSmith instead of TuxWordSmith -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 978057] New: network:samba:TESTING/samba: Bug 'samba-tool' is still missing if Samba package is compiled with AD DC functions
by bugzilla_noreply＠novell.com 12 Oct '18

12 Oct '18

http://bugzilla.opensuse.org/show_bug.cgi?id=978057 Bug ID: 978057 Summary: network:samba:TESTING/samba: Bug 'samba-tool' is still missing if Samba package is compiled with AD DC functions Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: lmuelle(a)suse.com Reporter: bjoernv(a)arcor.de QA Contact: opensuse-communityscreening(a)forge.provo.novell.com CC: ddiss(a)suse.com, jmcdonough(a)suse.com Found By: --- Blocker: --- The Samba 4 package network:samba:TESTING/samba has experimental support for Active Directory Domain Controller (AD DC) functionality. The AD DC function is deactivated by default. But even if the option is activated e.g. with rpmbuild -bb --with dc ~/rpmbuild/SPECS/samba.spec the AD DC setup tool 'samba-tool' is missing in binary packages. Reference: https://bugzilla.opensuse.org/show_bug.cgi?id=794744 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 977812] New: sshd killed by SIGSYS on client connection
by bugzilla_noreply＠novell.com 10 Oct '18

10 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=977812 Bug ID: 977812 Summary: sshd killed by SIGSYS on client connection Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mkubecek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 675044 --> http://bugzilla.suse.com/attachment.cgi?id=675044&action=edit strace output for "/usr/sbin/sshd -ddd" After today's big update, I'm unable to connect to the machine using SSH. With debugging enabled, last things I see on the client are debug2: kex_parse_kexinit: none,zlib(a)openssh.com debug2: kex_parse_kexinit: none,zlib(a)openssh.com debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: mac_setup: found hmac-sha2-512-etm(a)openssh.com debug1: kex: server->client aes128-ctr hmac-sha2-512-etm(a)openssh.com none debug2: mac_setup: found hmac-sha2-512-etm(a)openssh.com debug1: kex: client->server aes128-ctr hmac-sha2-512-etm(a)openssh.com none debug1: sending SSH2_MSG_KEX_ECDH_INIT debug1: expecting SSH2_MSG_KEX_ECDH_REPLY Connection closed by 172.17.1.2 and on the server debug1: kex: client->server aes128-ctr hmac-sha2-512-etm(a)openssh.com none [preauth] debug3: mm_request_send entering: type 118 [preauth] debug3: mm_request_receive_expect entering: type 119 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 118 debug3: mm_request_send entering: type 119 debug2: mac_setup: setup hmac-sha2-512-etm(a)openssh.com [preauth] debug1: kex: server->client aes128-ctr hmac-sha2-512-etm(a)openssh.com none [preauth] debug3: mm_request_send entering: type 118 [preauth] debug3: mm_request_receive_expect entering: type 119 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 118 debug3: mm_request_send entering: type 119 debug1: monitor_read_log: child log fd closed debug3: mm_request_receive entering debug1: do_cleanup debug3: PAM: sshpam_thread_cleanup entering debug1: Killing privsep child 3537 strace says the child was killed by SIGSYS and so does gdb. However, so far I wasn't able to get a core dump or even find where does this happen. Output of strace output is attached, not much interesting in gdb output except Program terminated with signal SIGSYS, Bad system call. The program no longer exists. A little research indicates SIGSYS may have something to do with seccomp and indeed, commenting out the line UsePrivilegeSeparation sandbox # Default for new installations. in sshd_config makes sshd work again. Current openssh version is 6.6p1-11.2 and previous (working) version was 6.6p1-11.1, i.e. this is only a rebuild so that the issue might have been triggered by glibc update. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 942811] New: upgrade OpenSSH
by bugzilla_noreply＠novell.com 08 Oct '18

08 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=942811 Bug ID: 942811 Summary: upgrade OpenSSH Classification: openSUSE Product: openSUSE Factory Version: 201505* Hardware: Other OS: Other Status: CONFIRMED Severity: Normal Priority: P5 - None Component: Network Assignee: pcerny(a)suse.com Reporter: pcerny(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Upgrade OpenSSH in openSUSE including forward porting the patches for now not working only in SLE. Potentially upgrade 13.1/.2 as well. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 959854] New: plasmashell: High CPU load
by bugzilla_noreply＠novell.com 07 Oct '18

07 Oct '18

http://bugzilla.opensuse.org/show_bug.cgi?id=959854 Bug ID: 959854 Summary: plasmashell: High CPU load Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: axel.braun(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 660002 --> http://bugzilla.opensuse.org/attachment.cgi?id=660002&action=edit output of top Plasmashell creates 'suddenly' a high CPU load, see attachement. 'Suddenly' n this case means that I could not really determine the reason for this up to now. It mostly happens after a resume from S2RAM (but not always), after a switch to a different activity in plasma (but not always), and after a change in WIFI-network (but not always) Any idea how I could get to the root cause of this problem? -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 960460] New: Error when adding a new repository
by bugzilla_noreply＠novell.com 04 Oct '18

04 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=960460 Bug ID: 960460 Summary: Error when adding a new repository Classification: openSUSE Product: openSUSE Tumbleweed Version: 2015* Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: silviu_marin-caea(a)otpbank.ro QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 660604 --> http://bugzilla.suse.com/attachment.cgi?id=660604&action=edit YaST/Software Repositories Error Cannot add a new repository with YaST/Software Repositories. Gives error from the attached screenshot. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 943757] New: yast storage with ncurses does not due to nokogiri error message
by bugzilla_noreply＠novell.com 04 Oct '18

04 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=943757 Bug ID: 943757 Summary: yast storage with ncurses does not due to nokogiri error message Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: aschnell(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- For various ruby programs I have installed a bunch of gems from different sources (which I have no overview of). Anyway, many ruby programs print an error during startup, this can be show using irb: aschnell@thalassa:~> irb irb(main):001:0> require "dbus" WARNING: Nokogiri was built against LibXML version 2.9.2, but has dynamically loaded 2.9.1 => true Unfortunately for yast ncurses this causes a program termination since stderr is in a bad state (I suppose closed): [Y2Ruby] binary/Y2RubyUtils.cc(y2_require):25 cannot require yast:Bad file descriptor @ io_write - <STDERR> at /usr/lib64/ruby/gems/2.1.0/gems/nokogiri-1.6.6.2/lib/nokogiri/version.rb:94:in `write' The rest of y2log is very misleading, e.g. stating the Storage.rb does not provide the module Storage. But with the Qt frontend YaST does start. The system is openSUSE 13.2 with YaST:Head and various ruby gems. -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 944302] New: php5 and openhpi fails to build if MD5 and DES support disabled in net-snmp
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=944302 Bug ID: 944302 Summary: php5 and openhpi fails to build if MD5 and DES support disabled in net-snmp Classification: openSUSE Product: openSUSE Factory Version: 201505* Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: meissner(a)suse.com Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The latest net-snmp SR https://build.opensuse.org/request/show/323040 has disabled md5 and des support, however php5 and openhpi fails to build then. The same issue also effected Leap as https://build.opensuse.org/request/show/325654 which has the similar changes and pending in Leap for same reason. -- You are receiving this mail because: You are on the CC list for the bug.

1 18