June 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1032076] VUL-0: CVE-2016-10210: yara: libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denialof service (NULL pointer der...
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.novell.com/show_bug.cgi?id=1032076 http://bugzilla.novell.com/show_bug.cgi?id=1032076#c1 Greg Freemyer <Greg.Freemyer(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #1 from Greg Freemyer <Greg.Freemyer(a)gmail.com> --- This CVE was addressed in Yara v3.6.0. v3.6.1 is available in security:forensics and has been submitted to factory and should be in Leap 42.3. It is recommended users of Yara use the security:forensics package. It is unlikely this CVE will be addressed in Leap 42.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1032078] VUL-0: CVE-2017-5923: yara: libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial ofservice (heap-based out...
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.novell.com/show_bug.cgi?id=1032078 http://bugzilla.novell.com/show_bug.cgi?id=1032078#c1 --- Comment #1 from Greg Freemyer <Greg.Freemyer(a)gmail.com> --- This CVE was addressed in Yara v3.6.0. v3.6.1 is available in security:forensics and has been submitted to factory and should be in Leap 42.3. It is recommended users of Yara use the security:forensics package. It is unlikely this CVE will be addressed in Leap 42.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1039012] VUL-0: CVE-2017-8929: yara: denial of service (use-after-free and application crash) via a crafted rule (sized_string_cmp func in libyara/sizedstr.c)
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.novell.com/show_bug.cgi?id=1039012 http://bugzilla.novell.com/show_bug.cgi?id=1039012#c2 Greg Freemyer <Greg.Freemyer(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #2 from Greg Freemyer <Greg.Freemyer(a)gmail.com> --- This CVE was addressed in Yara v3.6.0. v3.6.1 is available in security:forensics and has been submitted to factory and should be in Leap 42.3. It is recommended users of Yara use the security:forensics package. It is unlikely this CVE will be addressed in Leap 42.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1041901] VUL-0: CVE-2017-9304: yara: possible DoS via a crafted rule that is mishandled in the _yr_re_emit function
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.novell.com/show_bug.cgi?id=1041901 http://bugzilla.novell.com/show_bug.cgi?id=1041901#c1 --- Comment #1 from Greg Freemyer <Greg.Freemyer(a)gmail.com> --- This CVE was addressed in Yara v3.6.1 which is available in security:forensics and has been submitted to factory and should be in Leap 42.3. It is recommended users of Yara use the security:forensics package. It is unlikely this CVE will be addressed in Leap 42.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1042661] New: Lynx fails to build with openssl-1.1
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.suse.com/show_bug.cgi?id=1042661 Bug ID: 1042661 Summary: Lynx fails to build with openssl-1.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pgajdos(a)suse.com Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1042629 Found By: --- Blocker: --- The package fails to build with openssl-1.1. For more information see the blocker bug. Currently tested in Staging:I https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 989271] New: nm-openvpn: connection failed
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.opensuse.org/show_bug.cgi?id=989271 Bug ID: 989271 Summary: nm-openvpn: connection failed Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: x86-64 OS: openSUSE 42.1 Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: caputo.emanuele.francesco(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 Build Identifier: I'm actually using a VPN service (ibVPN), experiencing issues every time I try to establish a connection using NetworkManager. Connection was created by importing a configuration file I downloaded from customer area of ibVPN's site. No matter whether I use Gnome or KDE, no internet resource is available after establishing VPN connection. When I try to load, for example, any website, I spontaneously get disconnected. I did the same thing under Fedora, it worked all flawlessly. Therefore I suspect a bug in the version for openSUSE. I'm willing to "lend" my login to VPN for testing purposes and provide any necessary file (such as config files), in order to get the bug fixed. Reproducible: Always Steps to Reproduce: 1. Import VPN from config file in Connection Editor 2. Edit connection, enter username and password 3. Connect to VPN service 4. Open terminal window (super-user mode) and run ping 8.8.8.8 Actual Results: No internet resource available, ping fails. Spontaneous disconnection while trying to reach any website. Please refer to this thread: https://forums.opensuse.org/showthread.php/518756-OpenVPN-unable-to-connect… Above all posts #1, #7, #8 and #12. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1040102] New: Update jython to newer version
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.suse.com/show_bug.cgi?id=1040102 Bug ID: 1040102 Summary: Update jython to newer version Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Java Assignee: pmonrealgonzalez(a)suse.com Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jmatejek(a)suse.com Found By: --- Blocker: --- We are packaging really ancient version of jython. For sle15 we should update the latest and mimic what Fedora has. The only thing is we don't support maven and we will have to do some tweaking. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1043266] Port KDE Plasma 5.8.7 LTS release to Leap 42.2
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.suse.com/show_bug.cgi?id=1043266 http://bugzilla.suse.com/show_bug.cgi?id=1043266#c11 Wolfgang Bauer <wbauer(a)tmo.at> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wbauer(a)tmo.at --- Comment #11 from Wolfgang Bauer <wbauer(a)tmo.at> --- See also: https://en.opensuse.org/SDB:Vendor_change_update#Full_repository_Vendor_cha… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1042379] Impossible to install salt on Leap 42.3 (nothing provides libsodium.so.13()(64bit) needed by libzmq5-4.1.2-6.1.x86_64)
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.novell.com/show_bug.cgi?id=1042379 http://bugzilla.novell.com/show_bug.cgi?id=1042379#c6 Adam Majer <amajer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED CC| |amajer(a)suse.com Resolution|--- |FIXED --- Comment #6 from Adam Majer <amajer(a)suse.com> --- resolved. libzmq5 rebuilt to use libsodium.so.18 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1043706] slideshow.pot for Leap 42.3
by bugzilla_noreply＠novell.com 12 Jun '17

12 Jun '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1043706 http://bugzilla.opensuse.org/show_bug.cgi?id=1043706#c1 Ludwig Nussel <lnussel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Ludwig Nussel <lnussel(a)suse.com> --- fixed and added to plan, thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 0