May 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1037924] VUL-1: lrzip: NULL pointer dereference in join_pthread (stream.c)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037924 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037923] VUL-1: lrzip: NULL pointer dereference in bufRead::get (libzpaq.h)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037923 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037922] VUL-1: lrzip: divide-by-zero in bufRead::get (libzpaq.h)
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037922 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037930] New: VUL-0: CVE-2017-8804: glibc, sunrpc: Memory leak after deserialization failure in xdr_bytes, xdr_string
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037930 Bug ID: 1037930 Summary: VUL-0: CVE-2017-8804: glibc, sunrpc: Memory leak after deserialization failure in xdr_bytes, xdr_string Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8804 ==================================================== Description The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. ==================================================== Hyperlink [1] http://www.openwall.com/lists/oss-security/2017/05/05/2 [2] https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7 (CVE-2017-8779) [3] https://sourceware.org/bugzilla/show_bug.cgi?id=21461 (upstream report) [4] https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html (patch) [5] https://security-tracker.debian.org/tracker/CVE-2017-8804 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 978973] Removing vga option from Yast Bootloader breaks plymouth after installing Nvidia blob and now shows three questions
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.suse.com/show_bug.cgi?id=978973 http://bugzilla.suse.com/show_bug.cgi?id=978973#c61 --- Comment #61 from Roman Bysh <rb03884(a)gmail.com> --- Michael I wonder if Fedora is experiencing the same problem? Can you contact them? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1035604] Installation of python3-tornado-4.4.2-1.3.x86_64 failed:
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.novell.com/show_bug.cgi?id=1035604 http://bugzilla.novell.com/show_bug.cgi?id=1035604#c2 Arun Persaud <arun(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|arun(a)gmx.de |bnc-team-screening(a)forge.pr | |ovo.novell.com --- Comment #2 from Arun Persaud <arun(a)gmx.de> --- I'm the wrong person for this bug... Not sure how to fix this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037920] New: games/s25rttr: Bug
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037920 Bug ID: 1037920 Summary: games/s25rttr: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: matthias(a)mailaender.name Reporter: bugs(a)vdm-design.de QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- s25rttr depends on libmygettext.so which is not provided by any package for Leap 42.2 Problem: nothing provides libmygettext.so()(64bit) needed by s25rttr-0.8.1+20160118-3.18.x86_64 Solution 1: do not install s25rttr-0.8.1+20160118-3.18.x86_64 Solution 2: break s25rttr-0.8.1+20160118-3.18.x86_64 by ignoring some of its dependencies -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023774] Please no longer write KEYMAP in /etc/vconsole.conf directly
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023774 http://bugzilla.opensuse.org/show_bug.cgi?id=1023774#c10 --- Comment #10 from Dr. Werner Fink <werner(a)suse.com> --- This locks fate#318426 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023774] Please no longer write KEYMAP in /etc/vconsole.conf directly
by bugzilla_noreply＠novell.com 07 May '17

07 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023774 Dr. Werner Fink <werner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |systemd-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1026780] wicked should support vxlan
by bugzilla_noreply＠novell.com 06 May '17

06 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1026780 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| maint:planned:update |ibs:running:4727:moderate | |ibs:running:4728:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0