February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1023616] New: APACHE_CONF_INCLUDE_DIRS order change wrt. loadmodules, from 13.1 to tumbleweed
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023616 Bug ID: 1023616 Summary: APACHE_CONF_INCLUDE_DIRS order change wrt. loadmodules, from 13.1 to tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Apache Assignee: bnc-team-apache(a)forge.provo.novell.com Reporter: patrick.schaaf(a)yalwa.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Noticed an issue when upgrading from 13.1 to tumbleweed, wrt. apache configuration. I was using the sysconfig APACHE_CONF_INCLUDE_DIRS variable to draw in all my virtual host configuration. With 13.1 and older, the sysconfig.d/loadmodules.conf is included _before_ the config selected by APACHE_CONF_INCLUDE_DIRS (sysconfig.d/include.conf), by explicit ordering in the standard httpd.conf With tumbleweed, the whole sysconfig.d directory is no longer referenced in httpd.conf, but instead selected with an explicit "-C 'Include /etc/apache2.d/sysconfig.d/'" command line option. And .conf files from that directory, are then included in alphabetic order - which especially means include.conf comes _before_ loadmodules.conf That change became an issue to me, because the config I drew in via include.conf, was using <IfModule> stanzas - but these are apparently order dependant, and the module I tested for, was not yet loaded -> operation fail. I worked around the issue by simply stopping use of APACHE_CONF_INCLUDE_DIRS, and instead putting my stuff in the usual vhosts.d/ directory. In that case the order works out right - and as vhosts.d is included by httpd.conf, that shows that the '-C Include sysconfig.d' runs even fully before httpd.conf. While the issue is solved for me with that workaround, I thought it might be useful to make this bug report, in case somebody else runs into the same issues, or a maintainer might want to do something about it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023615] New: network:chromium/chromium: Security - No recent libavformat available on openSUSE 42.1 or SLE12SP1/2
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023615 Bug ID: 1023615 Summary: network:chromium/chromium: Security - No recent libavformat available on openSUSE 42.1 or SLE12SP1/2 Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: openSUSE 42.1 Status: NEW Severity: Critical Priority: P5 - None Component: 3rd party software Assignee: tchvatal(a)suse.com Reporter: qvoheagbfovvhubzdxfx(a)posteo.net QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- As of Chromium 56, a recent libavformat (>= 57.41.100) is required to provide the public AVStream API 'codecpar', which is in turn included in ffmpeg >= 3.1.1. Maybe the old approach of packaging a "chromium-ffmpegsumo" should be resumed to allow SLE12SP1/2 and openSUSE 42.2 to have a recent Chromium build available. This is even more urgent, as security vulnerabilities are only fixed in current Chromium versions. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1007696] New: science/qcustomplot: Bug
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1007696 Bug ID: 1007696 Summary: science/qcustomplot: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: All OS: All Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: dmitry(a)roshchin.org Reporter: pascom(a)orange.fr QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- I think that the Qt5 libraries (qcustomplot-qt5) are build against Qt4, which makes them unusable. This can easily be seen with > ldd /usr/lib64/libqcustomplot-qt5.so libQtGui.so.4 => /usr/lib64/libQtGui.so.4 (0x00007f06b49e4000) libQtCore.so.4 => /usr/lib64/libQtCore.so.4 (0x00007f06b44f9000) -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1007696] science/qcustomplot: Bug
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.novell.com/show_bug.cgi?id=1007696 http://bugzilla.novell.com/show_bug.cgi?id=1007696#c2 Matthias Mailänder <matthias(a)mailaender.name> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #2 from Matthias Mailänder <matthias(a)mailaender.name> --- Removed them https://build.opensuse.org/request/show/454656 as I don't see me fixing them anytime soon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1021095] Steam: steamruntime-fix conflicts with latest steam update which uses the host libraries
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1021095 http://bugzilla.suse.com/show_bug.cgi?id=1021095#c5 Robert Munteanu <robert.munteanu(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(robert.munteanu@g | |mail.com) | --- Comment #5 from Robert Munteanu <robert.munteanu(a)gmail.com> --- After the upgrade my NVidia machine still exhibits the same issues. But this time the desktop notification reminded me why it probably failed. However, I was able to work around it (again) by using NO_STEAMTRICKS=1 . I think that at this point there is no clear solution, especially for TW, so this bug should be closed as UPSTREAM and some documentation added to https://en.opensuse.org/Steam . I can add the docs if no one is opposed to the closing the bug and updating the documentation. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023611] New: VUL-0: pax-utils: dumpelf: two invalid memory read in dumpelf.c
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023611 Bug ID: 1023611 Summary: VUL-0: pax-utils: dumpelf: two invalid memory read in dumpelf.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/310 ============================================= Description: pax-utils is a set of tools that check files for security relevant properties. A fuzz on scanelf exposed two invalid memory read. They was reported to vapier which fixed the issue immediately. Unfortunately I can’t get a symbolized ASan stacktrace, so I will show only the useful part of both asan and gdb. # dumpelf $FILE SEGV on unknown address 0x7f8d94dc9e28 (pc 0x00000051efc6 bp 0x7ffe15ddbfa0 sp 0x7ffe15ddbf60 T0) ==31647==The signal is caused by a READ memory access. (gdb) #0 0x00000000004067f7 in dump_dyn (dyn_void=dyn_void@entry=0x7ff5f7ff6e28, dyn_cnt=dyn_cnt@entry=0, elf=0x60d8e0, elf=0x60d8e0) at dumpelf.c:486 #1 0x0000000000401e24 in dumpelf (file_cnt=0, filename=) at dumpelf.c:146 #2 parseargs (argv=0x7fffffffe1a8, argc=2) at dumpelf.c:557 #3 main (argc=2, argv=0x7fffffffe1a8) at dumpelf.c:566 Reproducer: https://github.com/asarubbo/poc/blob/master/00140-pax-utils-dumpelf-invalid… # dumpelf $FILE SEGV on unknown address 0x6360e1292000 (pc 0x00000051fba9 bp 0x7ffeef817f20 sp 0x7ffeef817ec0 T0) ==8213==The signal is caused by a READ memory access. (gdb) #0 dump_notes (B=B@entry=64, memory=memory@entry=0x63fff7ff5000, memory_end=0x6414f7ff5000, elf=0x60d8e0, elf=0x60d8e0) at dumpelf.c:228 #1 0x0000000000405636 in dump_phdr (elf=elf@entry=0x60d8e0, phdr_void=phdr_void@entry=0x7ffff7ff50f0, phdr_cnt=phdr_cnt@entry=1) at dumpelf.c:324 #2 0x0000000000401dd9 in dumpelf (file_cnt=0, filename=) at dumpelf.c:91 #3 parseargs (argv=0x7fffffffe1a8, argc=2) at dumpelf.c:557 #4 main (argc=2, argv=0x7fffffffe1a8) at dumpelf.c:566 Reproducer: https://github.com/asarubbo/poc/blob/master/00141-pax-utils-dumpelf-invalid… Affected version: 1.2.2 Fixed version: N/A Commit fix: https://github.com/gentoo/pax-utils/commit/18ded0e30ee5a84260cceb80d818b9c2… Credit: This bug was discovered by Agostino Sarubbo of Gentoo. CVE: N/A Timeline: 2017-01-30: bug discovered and reported to upstream 2017-02-01: upstream released a patch 2017-02-04: blog post about the issue Note: This bug was found with American Fuzzy Lop. Permalink: https://blogs.gentoo.org/ago/2017/02/04/pax-utils-dumpelf-two-invalid-memor… -- Agostino Sarubbo Gentoo Linux Developer ============================================= -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023610] New: VUL-0: pax-utils: dumpelf: multiple divide-by-zero in dumpelf.c
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023610 Bug ID: 1023610 Summary: VUL-0: pax-utils: dumpelf: multiple divide-by-zero in dumpelf.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/309 ============================================== Description: pax-utils is a set of tools that check files for security relevant properties. A fuzz on dumpelf shows multiple divide-by-zero . They was reported to vapier which fixed the issues immediately. Unfortunately I can’t get the ASan stacktrace, so I will show only the useful(not at all) part of the crash. # dumpelf $FILE FPE on unknown address 0x00000051ca65 (pc 0x00000051ca65 bp 0x7ffc31bb6f80 sp 0x7ffc31bb6e40 T0) Reproducer: https://github.com/asarubbo/poc/blob/master/00137-pax-utils-dumpelf-fpe1 # dumpelf $FILE FPE on unknown address 0x00000051d335 (pc 0x00000051d335 bp 0x7ffc17babf80 sp 0x7ffc17babe40 T0) Reproducer: https://github.com/asarubbo/poc/blob/master/00138-pax-utils-dumpelf-fpe2 # dumpelf $FILE FPE on unknown address 0x00000051db76 (pc 0x00000051db76 bp 0x7ffdf90fff80 sp 0x7ffdf90ffe40 T0) Reproducer: https://github.com/asarubbo/poc/blob/master/00139-pax-utils-dumpelf-fpe3 Affected version: 1.2.2 Fixed version: N/A Commit fix: https://github.com/gentoo/pax-utils/commit/4609f57a690b4a5670baeb93167dab53… Credit: These bugs were discovered by Agostino Sarubbo of Gentoo. CVE: N/A Timeline: 2017-01-30: bug discovered and reported to upstream 2017-02-01: upstream released a patch 2017-02-04: blog post about the issue Note: These bugs were found with American Fuzzy Lop. Permalink: https://blogs.gentoo.org/ago/2017/02/04/pax-utils-dumpelf-multiple-divide-b… -- Agostino Sarubbo Gentoo Linux Developer ============================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023609] New: VUL-0: pax-utils: dumpelf: out of bounds read in dump_notes (dumpelf.c)
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023609 Bug ID: 1023609 Summary: VUL-0: pax-utils: dumpelf: out of bounds read in dump_notes (dumpelf.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/308 ============================================== Description: pax-utils is a set of tools that check files for security relevant properties. A fuzz on dumpelf an out of bounds read. It was reported to vapier which fixed the issue immediately. Unfortunately I can’t get a symbolized ASan stacktrace, so I will show only the useful part of both asan and gdb. This is not CVE-worthy because of the “READ of size 1” in a command-line tool. I’m sharing it because some distro/packagers may want to have the patch aboard. # dumpelf $FILE unknown-crash on address 0x7fc30f701000 at pc 0x000000520111 bp 0x7ffdc3db8eb0 sp 0x7ffdc3db8ea8 READ of size 1 at 0x7fc30f701000 thread T0 (gdb) #0 dump_notes (B=B@entry=64, memory=memory@entry=0x7ffff7ff428c, memory_end=0x7ffff7ff42ac, elf=0x60d8e0, elf=0x60d8e0) at dumpelf.c:245 #1 0x0000000000405636 in dump_phdr (elf=elf@entry=0x60d8e0, phdr_void=phdr_void@entry=0x7ffff7ff4158, phdr_cnt=phdr_cnt@entry=5) at dumpelf.c:324 #2 0x0000000000401dd9 in dumpelf (file_cnt=0, filename=) at dumpelf.c:91 #3 parseargs (argv=0x7fffffffe1a8, argc=2) at dumpelf.c:557 #4 main (argc=2, argv=0x7fffffffe1a8) at dumpelf.c:566 Affected version: 1.2.2 Fixed version: N/A Commit fix: https://github.com/gentoo/pax-utils/commit/10a9643d90a1ba6058a66066803fac6c… Credit: This bug was discovered by Agostino Sarubbo of Gentoo. Reproducer: https://github.com/asarubbo/poc/blob/master/00142-pax-utils-dumpelf-oob1 Timeline: 2017-01-30: bug discovered and reported to upstream 2017-02-01: upstream released a patch 2017-02-04: blog post about the issue Note: This bug was found with American Fuzzy Lop. Permalink: https://blogs.gentoo.org/ago/2017/02/04/pax-utils-dumpelf-out-of-bounds-rea… -- Agostino Sarubbo Gentoo Linux Developer ============================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023608] New: autoinstallation cloning system produces error
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023608 Bug ID: 1023608 Summary: autoinstallation cloning system produces error Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST Assignee: autoyast-maintainers(a)suse.de Reporter: h.baar(a)tsn.at QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 712911 --> http://bugzilla.opensuse.org/attachment.cgi?id=712911&action=edit error message of autoinstallation cloning system When I click in yast Autoinstallation cloning system I get the following error: Internal error. Please report a bug report with logs. Details: flag after width Caller: /usr/lib64/ruby/gems/2.1.0/gems/fast_gettext-1.2.0/lib/fast_gettext/vendor/string.rb:70:in `%' Autoinstallation configuration seems to work. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1018087] KDE konsole interprets options after -e cmd
by bugzilla_noreply＠novell.com 04 Feb '17

04 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1018087 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:6356:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0