May 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1036283] EMU: samba: fix for CVE-2017-2619 causes regression with "follow symlinks = no"
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1036283 http://bugzilla.suse.com/show_bug.cgi?id=1036283#c10 --- Comment #10 from Panagiotis Georgiadis <pgeorgiadis(a)suse.com> --- Thanks. You did a typo in the configuration by typing 'now' instead of 'no', but I figured this out. Thanks again :) I've managed to reproduce it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1038015] mcpp bug of parsing files with C++ style trailing comments.
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

1 0

[Bug 1038024] New: [TRACKERBUG] Improve startup of VirtualBox through use of systemd service files
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1038024 Bug ID: 1038024 Summary: [TRACKERBUG] Improve startup of VirtualBox through use of systemd service files Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: jloehel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Trackerbug for Virtualbox maintenance update. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037891] Yast module windows in Plasma: generic x window icon and grouped as "ruby" in task manager
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037891 http://bugzilla.suse.com/show_bug.cgi?id=1037891#c1 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P4 - Low |P5 - None Status|NEW |CONFIRMED CC| |fvogt(a)suse.com Severity|Minor |Major --- Comment #1 from Fabian Vogt <fvogt(a)suse.com> --- Looks to me like it's a regression of the fix for bsc#1033993 (https://github.com/yast/yast-ruby-bindings/pull/198) It also breaks openQA, https://openqa.opensuse.org/tests/400540#step/welcome/9 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1014987] sporadic failure of SuSEfirewall2_init during boot
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1014987 http://bugzilla.suse.com/show_bug.cgi?id=1014987#c8 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #8 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- I've fixed this in openSUSE:Factory and SLE-12:Update. Instead of using /tmp, /dev/shm is now used and the systemd unit file declares this dependency. Closing as fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 961258] reference to non-existing unit in SuSE2firewall_init.service
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=961258 http://bugzilla.suse.com/show_bug.cgi?id=961258#c9 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #9 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- I've backported the fix to the remaining affected version SLE-12:Update. Closing as fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1038000] New: VUL-1: CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c:1379)
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1038000 Bug ID: 1038000 Summary: VUL-1: CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c:1379) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 724119 --> http://bugzilla.opensuse.org/attachment.cgi?id=724119&action=edit CVE-2017-8830_testcase Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8830 =================================================== Description In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file. =================================================== Hyperlink [1] https://github.com/ImageMagick/ImageMagick/issues/467 [2] Testcase: https://github.com/birdg0/poc/blob/master/ImageMagicK/leak-fcd4138d423f1e98… [3] https://github.com/ImageMagick/ImageMagick/commit/ff2431d8f17d4a7c906438042… (master) [4] https://github.com/ImageMagick/ImageMagick/commit/e3c6338e3a1fe003abf581b5f… (ImageMagick-6) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1037994] New: VUL-0: CVE-2017-8831: kernel-source: Double fetch problem in Linux-4.10.1 (saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c)
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037994 Bug ID: 1037994 Summary: VUL-0: CVE-2017-8831: kernel-source: Double fetch problem in Linux-4.10.1 (saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8831 =================================================== Description The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.10.14 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability. =================================================== Hyperlink [1] https://bugzilla.kernel.org/show_bug.cgi?id=195559 [2] https://bugzilla.kernel.org/show_bug.cgi?id=195559#c2 (preliminary patch) [3] https://security-tracker.debian.org/tracker/CVE-2017-8831 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 841046] SuSEfirewall2: support IPv6 in FW_TRUSTED_NETS
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=841046 http://bugzilla.suse.com/show_bug.cgi?id=841046#c8 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- This fix is now in Factory and has been backported SLE-12:Update. Closing as fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1017767] KIO slave: invalid address (URL)
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1017767 http://bugzilla.suse.com/show_bug.cgi?id=1017767#c1 Fabian Vogt <fabian(a)ritter-vogt.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fabian(a)ritter-vogt.de --- Comment #1 from Fabian Vogt <fabian(a)ritter-vogt.de> --- "Automatic mount of devices" behaves correctly here, as you need to click the option -> manual. Can you run "ps -ef | grep dolphin" in a terminal while the error message is shown and paste the output here? -- You are receiving this mail because: You are on the CC list for the bug.

1 0