July 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 983812] New: [OWASP-ZAP] Possibly wrong run-path in owasp-zap package (security:tools repo)
by bugzilla_noreply＠novell.com 18 Apr '18

18 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=983812 Bug ID: 983812 Summary: [OWASP-ZAP] Possibly wrong run-path in owasp-zap package (security:tools repo) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello! OWASP-ZAP installed from security:tools repo. After installing ZAP doesn't run. Command to run in ZAP.desktop: java -jar zap.jar org.zaproxy.zap.ZAP Tried to run in terminal: ======================= k_mikhail@linux-mk500:~> java -jar zap.jar org.zaproxy.zap.ZAP Error: Unable to access jarfile zap.jar ======================= ======================= k_mikhail@linux-mk500:~> find / -name zap.jar 2>/dev/null k_mikhail@linux-mk500:~> ======================= Helped an advice to replace "java -jar zap.jar org.zaproxy.zap.ZAP" command with "/usr/share/owasp-zap/zap.sh" See topic: https://forums.opensuse.org/showthread.php/518279-OWASP-ZAP-installed-from-… I think, the owasp-zap package on secuirty:tools repo should be re-built with correct run-path (/usr/share/owasp-zap/zap.sh) in ZAP.desktop. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 909153] New: games/cegui: Bug
by bugzilla_noreply＠novell.com 18 Apr '18

18 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=909153 Bug ID: 909153 Summary: games/cegui: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: christian.morales.vega(a)gmail.com Reporter: lorgenheim(a)o2.pl QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- please compile with freetype support : CEGUI::InvalidRequestException in function 'void CEGUI::Font_xmlHandler::createFreeTypeFont(const CEGUI::XMLAttributes&)' (/home/abuild/rpmbuild/BUILD/cegui-0.8.3/cegui/src/Font_xmlHandler.cpp:240) : CEGUI was compiled without freetype support. terminate called after throwing an instance of 'CEGUI::InvalidRequestException' -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 988347] New: CA management: support extendedKeyUsage=timeStamping (RFC 3161 id-kp-timeStamping)
by bugzilla_noreply＠novell.com 18 Apr '18

18 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=988347 Bug ID: 988347 Summary: CA management: support extendedKeyUsage=timeStamping (RFC 3161 id-kp-timeStamping) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: All OS: All Status: NEW Severity: Enhancement Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Help users creating certificates usable for RFC 3161 TSA (Time Stamping Authorities) services with Yast's CA management. Currently Yast CA does not know about "extendedKeyUsage=timeStamping". -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 958083] New: debuginfo packages: 400: no such project
by bugzilla_noreply＠novell.com 18 Apr '18

18 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=958083 Bug ID: 958083 Summary: debuginfo packages: 400: no such project Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Software Portal Assignee: benji(a)opensuse.org Reporter: dmitry.ashkadov(a)gmail.com QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- Hello! If I enter "plasma5-workspace-debuginfo" on software.opensuse.org then I got result. Although there is large green button, I got error if I click it: Error connecting to http://api-opensuse.suse.de///published/openSUSE:Leap:42.1:Update/standard_…: Response was: #<Net::HTTPBadRequest:0x007f6ac0f1c8e0> <status code="400"> <summary>no such project</summary> </status> Thank you. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 975835] New: Repository information should not be writable by any user for security reasons
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=975835 Bug ID: 975835 Summary: Repository information should not be writable by any user for security reasons Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Wiki Assignee: ddemaio(a)novell.com Reporter: bjoernv(a)arcor.de QA Contact: adrian(a)suse.com Found By: --- Blocker: --- Because of incorrect or outdated repository information here https://de.opensuse.org/Paket_Repositorys (version from 2015-04-14) I messed up the packages on one of my systems. Tumbleweed repos pointed to openSUSE-current (which is currently Leap 42.1 and I didn't verified this). I updated the Wiki page, so that other users will not go into this trap. I think, the more general problem is, that every authenticated openSUSE user can publish false repository information. An attacker could create a website (let's say: opensus.org with a missing "e" in openSUSE) with malware infected openSUSE packages. Then he changes the repository information on some Wiki pages. E.g. the main repository for Leap 42.1 can be changed from http://download.opensuse.org/tumbleweed/repo/oss/ to http://download.opensus.org/tumbleweed/repo/oss/ Verifying GPG keys is costly for users, so probably also a false GPG key will be accepted. I suggest to change the access rights of Wiki pages like https://en.opensuse.org/Package_repositories and https://de.opensuse.org/Paket_Repositorys so that only SuSE employees (or a subset of SuSE employees) can change this page. Unfortunately also other Wiki pages can contain false repository information, e.g. installation HOWTOs like https://en.opensuse.org/openSUSE:Tumbleweed_installation And even if the access rights for additional pages can be restricted too, an attacker can create new Wiki pages. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 960440] New: The Inkscape Bug #1109812 reported by Christopher B. Wright on 2013-01-29 still available in openSUSE 42.1
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=960440 Bug ID: 960440 Summary: The Inkscape Bug #1109812 reported by Christopher B. Wright on 2013-01-29 still available in openSUSE 42.1 Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: x86-64 OS: openSUSE 42.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: kiv(a)mail.orbitel.bg QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- There is a bug in Inkscape 0.91 when in KDE are used GTK programs using oxygen-gtk. The bug prevents to create guides in Inkscape by dragging them from the rulers in to drawing area. But there is a work around helping to create such guides. Even if users create such guides they can not manipulate them - move or delete them. Here is a lengthy discussion about this bug and there is stated how to solve it: https://bugs.launchpad.net/inkscape/+bug/1109812 The solution they found, is described as follows: " Maggio (dev-maggio) wrote on 2014-06-16: #13 Hello, I confirm this bug. We can fix this bug by replacing "TRUE" by "FALSE" at : http://bazaar.launchpad.net/~inkscape.dev/inkscape/RELEASE_0_48_BRANCH/view… PS: "TRUE to stop other handlers from being invoked for the event. FALSE to propagate the event further." " Yes I know that using different gtk theme may prevent this behaviour. But oxigen is the default setting in many cases. Also there are many users who could not realize this and are not happy with the Inkscape 0.91 in openSUSE. So my kind suggestion is - possibly to ask some SUSE software engineer, to found the right place in the source code used by SUSE for Inkscape, and possibly to change this "TRUE" by "FALSE". This can make the use of Inkscape by the regular users of openSUSE much more fun. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 936309] New: cupsd hangs when DefaultPolicy is switched to "allowallforanybody"
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=936309 Bug ID: 936309 Summary: cupsd hangs when DefaultPolicy is switched to "allowallforanybody" Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: x86-64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Printing Assignee: jsmeix(a)suse.com Reporter: reinhard.hennig(a)freenet.de QA Contact: jsmeix(a)suse.com Found By: --- Blocker: --- If you set DefaultPolicy from default to allowallforanybody, which is risky but quite popular, all requests like lpstat -v or lpq hang and must be interrupted by ctrl-c. Prnting is not possible. no problems occur on older versions of opensuse (e.g. 12.2). -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 990209] New: [Build 0109] install on a partition with incomplete previous cryptlvm installation stalls
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=990209 Bug ID: 990209 Summary: [Build 0109] install on a partition with incomplete previous cryptlvm installation stalls Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: okurz(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 685247 --> http://bugzilla.suse.com/attachment.cgi?id=685247&action=edit YaST installer logs ## observation Trying to install on a partition with incomplete previous cryptlvm installation stalls when preparing disks in new installation. ## steps to reproduce * start installation using cryptlvm * when installation started, e.g. after partitions have been created, abort to simulate failed installation * restart installation * observe error in step "preparing disks" ## problem Reproduced multiple times with different partition setups. As it looks like Leap42.2 in Build 0109 can not cope with this. I could recover from this problem using Tumbleweed in current version as of 20160722. Maybe superblock probing or similar has a problem here. A potential workaround for the user could be to zero the superblock and hard disk content before continuing with the installation but I did not try that yet. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 984855] New: KDE compositor problems with opengl 2.0
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=984855 Bug ID: 984855 Summary: KDE compositor problems with opengl 2.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: rene.braeunling(a)yalwa.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In Leap 42.1 there is a problem with AMD graphics and openGL 2.0. The screen starts flashing and flickering from time to time. The problem is occures every day for about 50% of the time working. After changing the compositor under: Configure Desktop -> Display and Monitor -> Compositor -> Rendering backend from openGL 2.0 to 3.1 there is not any problem. Is there any possibility to set this option in the autoyast file? -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 914883] New: Missing dot or newline in mke2fs output
by bugzilla_noreply＠novell.com 17 Apr '18

17 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=914883 Bug ID: 914883 Summary: Missing dot or newline in mke2fs output Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ohering(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- There should be eiher a dot or a newline between "eingehängtTrotzdem". root@optiplex:/ # time mke2fs -j -L WD20_SL12 -b 1024 -m 1 /dev/disk/by-label/WD20_SL12 mke2fs 1.42.12 (29-Aug-2014) /dev/disk/by-label/WD20_SL12 hat ein ext3-Dateisystem mit Namen „WD20_SL12“ zuletzt auf /WD20_SL12 auf Tue Jan 27 09:01:44 2015 eingehängtTrotzdem fortfahren? (j,n) -- You are receiving this mail because: You are on the CC list for the bug.

1 6