May 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1037923] VUL-1: lrzip: NULL pointer dereference in bufRead::get (libzpaq.h)
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037923 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz(a)suse.com Assignee|security-team(a)suse.de |mpluskal(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037922] VUL-1: lrzip: divide-by-zero in bufRead::get (libzpaq.h)
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037922 http://bugzilla.suse.com/show_bug.cgi?id=1037922#c1 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz(a)suse.com Assignee|security-team(a)suse.de |mpluskal(a)suse.com --- Comment #1 from Johannes Segitz <jsegitz(a)suse.com> --- Martin, you won the "who changed it last" lottery ;) If you can't/don't want to do it please assign it back to security-team. I'll do the same for the other five bugs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1020363] [Build 20170116] Restarting graphical target via systemd isolate stops session D-Bus
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1020363 http://bugzilla.suse.com/show_bug.cgi?id=1020363#c9 --- Comment #9 from Simon Lees <simonf.lees(a)suse.com> --- (In reply to Marius Kittler from comment #0) > ## Observation > > > It seems that pulseaudio and `spice-vdagent` are preventing the old session > to close. When starting also pulseaudio via systemd and killing > `spice-vdagent` before isolating the graphical target the issue doesn't > occur. > > I think starting D-Bus via systemd is the right thing to as it allows usage > of `busctl` for instance. It should be possible to reduce the problem by > also starting pulseaudio via systemd. Not sure about `spice-vdagent`, though. > Another controversial fix could be to build systemd without the "--without-kill-user-processes" flag which seemed to be the systemd upstream way of dealing with this issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1020363] [Build 20170116] Restarting graphical target via systemd isolate stops session D-Bus
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1020363 Simon Lees <simonf.lees(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |systemd-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1020363] [Build 20170116] Restarting graphical target via systemd isolate stops session D-Bus
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1020363 http://bugzilla.suse.com/show_bug.cgi?id=1020363#c8 Simon Lees <simonf.lees(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |simonf.lees(a)suse.com Flags| |needinfo?(paka(a)wahoo.no-ip. | |org) --- Comment #8 from Simon Lees <simonf.lees(a)suse.com> --- Patrick I guess we need to debug your issue further to work out whats preventing dbus from closing in this case could you provide the output of "systemctl status user-XXX.slice" where XXX is your uid? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1026070] New: KDE:Extra/convertall: Bug
by bugzilla_noreply＠novell.com 08 May '17

08 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1026070 Bug ID: 1026070 Summary: KDE:Extra/convertall: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: kde-maintainers(a)suse.de Reporter: overhaulin23(a)gmail.com QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- Convertall: 0.7.1-1.1 openSUSE Leap 42.2. Kernel: x86_64 Linux 4.4.46-11-default. DE: KDE 5.26.0 / Plasma 5.8.3 Convertall "Software Crash" The application crashed. Traceback (most recent call last): File "/usr/share/convertall/convertall.py", line 144, in <module> main() File "/usr/share/convertall/convertall.py", line 137, in main win = convertdlg.ConvertDlg() File "/usr/share/convertall/convertdlg.py", line 67, in __init__ num = ConvertDlg.unitData.readData() File "/usr/share/convertall/unitdata.py", line 81, in readData self[unit.name.lower().replace(' ', '')] = unit File "/usr/lib64/python3.4/collections/__init__.py", line 68, in __setitem__ self.__map[key] = link = Link() AttributeError: 'UnitData' object has no attribute '_OrderedDict__map' -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1037930] VUL-0: CVE-2017-8804: glibc, sunrpc: Memory leak after deserialization failure in xdr_bytes, xdr_string
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037930 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037928] VUL-1: lrzip: use-after-free in read_stream (stream.c)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037928 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037926] VUL-1: lrzip: heap-based buffer overflow write in read_1g (stream.c)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037926 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037925] VUL-1: lrzip: invalid memory read in lzo_decompress_buf (stream.c)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037925 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0