February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1020848] java-1_9_0-openjdk produces version 9-internal
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1020848 Tomáš Chvátal <tchvatal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-java(a)forge.provo.n |fstrba(a)suse.com |ovell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1020853] java-1_9_0-openjdk-devel skips creation of /usr/bin/jsadebugd
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1020853 Tomáš Chvátal <tchvatal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-java(a)forge.provo.n |fstrba(a)suse.com |ovell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1012141] New: SEGV (11) on tracker-extract
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1012141 Bug ID: 1012141 Summary: SEGV (11) on tracker-extract Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 703693 --> http://bugzilla.opensuse.org/attachment.cgi?id=703693&action=edit tracker-extract coredump Hello! [1] k_mikhail@linux-mk500:~> coredumpctl list | grep tracker-extract ============================================================================== Срд 2016-11-23 14:19:08 EET 1708 1000 100 11 * /usr/lib/tracker-extract Срд 2016-11-23 15:40:17 EET 5855 1000 100 11 * /usr/lib/tracker-extract Чтв 2016-11-24 01:37:54 EET 1854 1000 100 11 * /usr/lib/tracker-extract Птн 2016-11-25 00:00:47 EET 1944 1000 100 11 * /usr/lib/tracker-extract ============================================================================== [2] k_mikhail@linux-mk500:~> coredumpctl dump tracker-extract ============================================================================== PID: 1944 (tracker-extract) UID: 1000 (k_mikhail) GID: 100 (users) Signal: 11 (SEGV) Timestamp: Птн 2016-11-25 00:00:37 EET (9min ago) Command Line: /usr/lib/tracker-extract Executable: /usr/lib/tracker-extract Control Group: / Slice: -.slice Boot ID: 3298e61885dc48229ffef7bde5d0b220 Machine ID: 4664bc7cba6aee90fe1efc7f571cbf28 Hostname: linux-mk500 Coredump: /var/lib/systemd/coredump/core.tracker-extract.1000.3298e61885dc48229ffef7bde5d0b220.1944.1480024837000000.xz Message: Process 1944 (tracker-extract) of user 1000 dumped core. ============================================================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1022683] Weblate search fails every time
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022683 Karl Eichwalder <ke(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ke(a)suse.com Assignee|ke(a)suse.com |sbrabec(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 997294] Plasma doesn't start on first boot if user has password(no autologin)
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=997294 http://bugzilla.suse.com/show_bug.cgi?id=997294#c18 Max Staudt <mstaudt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mstaudt(a)suse.com --- Comment #18 from Max Staudt <mstaudt(a)suse.com> --- Any update? Has this been resolved in a newer Tumbleweed update? Any X logs for Comment 15? Please attach logs directly to the ticket. The paste.opensuse.org have become invalid. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023190] New: VUL-1: CVE-2015-8981: podofo: heap overflow in the function ReadXRefSubsection
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023190 Bug ID: 1023190 Summary: VUL-1: CVE-2015-8981: podofo: heap overflow in the function ReadXRefSubsection Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/290 ============================================= https://sourceforge.net/p/podofo/mailman/message/34205419/ http://sourceforge.net/p/podofo/code/1672 heap overflow in the function ReadXRefSubsection Use CVE-2015-8981. - -- CVE Assignment Team M/S M300, 202 Burlington Road, Bedford, MA 01730 USA [ A PGP key is available for encrypted communications at http://cve.mitre.org/cve/request_id.html ] ============================================= Not sure, if this bug is actual for current podofo version in https://software.opensuse.org/package/podofo TW: 0.9.4 42.(1|2): 0.9.3 Please, check this out. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1023053] New: VUL-0: kvm: qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023053 Bug ID: 1023053 Summary: VUL-0: kvm: qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/270 ================================================ Hello, Quick Emulator(Qemu) built with the MegaRAID SAS 8708EM2 Host Bus Adapter emulation support is vulnerable to a memory leakage issue. It could occur while processing MegaRAID Firmware Interface(MFI) command in 'megasas_handle_dcmd' routine. A privileged user inside guest could use this flaw to leak host memory resulting DoS issue. Upstream patch: --------------- -> http://git.qemu.org/?p=qemu.git;a=commit;h=765a707000e838c30b18d712fe6cb3dd… Reference: ---------- -> https://bugzilla.redhat.com/show_bug.cgi?id=1418342 This issue was reported by Mr Li Qiang of 360.cn Inc. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F ================================================ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1023115] org.gnome.Shell.PortalHelper queries an HTTPS url and returns failed TLS handshake
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023115 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023073] New: VUL-0: kvm: qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023073 Bug ID: 1023073 Summary: VUL-0: kvm: qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/272 =============================================== Hello, Quick Emulator(Qemu) built with the Virtio GPU Device emulator support is vulnerable to a host memory leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_RESOURCE_UNREF' command. A guest user/process could use this flaw to leak host memory resulting in DoS. Upstream patch: --------------- -> https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg04615.html Reference: ---------- -> https://bugzilla.redhat.com/show_bug.cgi?id=1418382 This issue was reported by Mr Li Qiang of 360.cn Inc. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F =============================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1023187] New: science: singular has a broken path configuration
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023187 Bug ID: 1023187 Summary: science: singular has a broken path configuration Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: dmitry(a)roshchin.org Reporter: pintsize(a)physik.uni-konstanz.de QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- The singular package is broken; it looks for shared libraries and singular "libs" in the wrong place: Information for package singular: --------------------------------- Repository: Science-42.1 Name: singular Version: 3.1.91-9.5 Arch: x86_64 Vendor: obs://build.opensuse.org/science Installed: Yes Status: up-to-date Installed Size: 7.8 MiB Summary: Singular CAS user@host $ Singular ? cannot open `standard.lib` SINGULAR / Development A Computer Algebra System for Polynomial Computations / version spielwiese 0< by: W. Decker, G.-M. Greuel, G. Pfister, H. Schoenemann \ FB Mathematik der Universitaet, D-67653 Kaiserslautern \ > ring r = 0,x,dp; // ** Could not find dynamic library: p_Procs_FieldIndep.so // ** Error message from system: /usr/bin/../lib/singular/p_Procs_FieldIndep.so: cannot open shared object file: No such file or directory // ** Singular will work properly, but much slower. // ** See the INSTALL section in the Singular manual for details. > LIB "primdec.lib"; ? cannot open `primdec.lib` ? error occurred in or before STDIN line 1: `LIB "primdec.lib";` The shared library it's looking for actually exists, but it's in the /usr/lib64/singular/MOD/ directory. The singular "libs" are also installed (in /usr/share/singular/LIB/), but as can be seen above, singular doesn't seem to find them there. (By the way, the hoops one has to go through to report bugs here are really over the top; why on earth aren't bugs readable without being logged in and why does account creation for a friggin' bug tracker ask for things like one's job title and postal address? Thanks goodness that the provided data isn't actually verified...) -- You are receiving this mail because: You are on the CC list for the bug.

1 0