August 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1040589] New: bash/gcc/gzip/python differ between builds because of profiling
by bugzilla_noreply＠novell.com 31 Mar '22

31 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1040589 Bug ID: 1040589 Summary: bash/gcc/gzip/python differ between builds because of profiling Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: rguenther(a)suse.com Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: matz(a)suse.com Found By: Development Blocker: --- In https://build.opensuse.org/project/prjconf/openSUSE:Factory we have %do_profiling 1 and because of that in our bash.spec we enable gcc's 'profile feedback directed optimizations' but that causes the jobs.o and resulting bash binary to differ between builds, even when running on the same build host. And because of that, build-compare always thinks there is a change and triggers a re-publish and rebuild of depending packages We also have such binary diffs in gcc6 and gcc6.spec calls a make profiledbootstrap The do_profiling macro is used in bash gzip hello python3-base python-base sed xz and in http://rb.zq1.de/compare.factory-20170523/bash-compare.out http://rb.zq1.de/compare.factory-20170523/gcc6-compare.out http://rb.zq1.de/compare.factory-20170523/gzip-compare.out http://rb.zq1.de/compare.factory-20170523/python-base-compare.out http://rb.zq1.de/compare.factory-20170523/python3-base-compare.out we have strange diffs in assembler that I could not trace down to other sources of non-determinism until today. Diffs did go away when building without profiling (it was harder to disable for gcc6 and bash though) Do the profiles just count invocations of functions or do they depend on the type and speed of the system? In the first case, it should be possible to fix the profiling runs to be deterministic, but for that it would be useful to be able to see the differences between runs. How could I diff gcc's .gcda files? -- You are receiving this mail because: You are on the CC list for the bug.

2 15

[Bug 924591] New: Apache2 doesn't start with faulty config, prob from yast
by bugzilla_noreply＠novell.com 14 Mar '22

14 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=924591 Bug ID: 924591 Summary: Apache2 doesn't start with faulty config, prob from yast Classification: openSUSE Product: openSUSE Factory Version: 201503* Hardware: armv7 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: volker3204(a)paradise.net.nz QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Running yast http-server module, making basically no changes to get basic config. No vhosts, ssl, etc. Btw a server name can't be entered, the value is going to /dev/null. Starting apache gives: Mar 27 14:37:35 cubie start_apache2[9361]: Module "authz_default" is not installed, ignoring. Mar 27 14:37:35 cubie start_apache2[9361]: Check the APACHE_MODULES setting in /etc/sysconfig/apache2. Mar 27 14:37:35 cubie start_apache2[9361]: AH00526: Syntax error on line 10 of /etc/apache2/mod_status.conf: Mar 27 14:37:35 cubie start_apache2[9361]: Invalid command 'Require', perhaps misspelled or defined by a module not included in the server configuration Mar 27 14:37:36 cubie start_apache2[9378]: Module "authz_default" is not installed, ignoring. Mar 27 14:37:36 cubie start_apache2[9378]: Check the APACHE_MODULES setting in /etc/sysconfig/apache2. Mar 27 14:37:36 cubie start_apache2[9378]: AH00526: Syntax error on line 10 of /etc/apache2/mod_status.conf: Mar 27 14:37:36 cubie start_apache2[9378]: Invalid command 'Require', perhaps misspelled or defined by a module not included in the server configuration Mar 27 14:37:36 cubie systemd[1]: Failed to start The Apache Webserver. In the yast http-server server-modules tab authz_default is listed with a description of "unknown", i.e. none. The module does not exist on disk! Editing /etc/sysconfig/apache2 adding authz_core to APACHE_MODULES makes authz_core also be shown with a description of "unknown". systemctl restart apache2 is now successful. This bnc:835484#6 basically says yast http-server module is foobared, so it's probably best to uninstall it. -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 918705] New: alpine locking failure (against procmail) leads to mail corruption
by bugzilla_noreply＠novell.com 11 Mar '22

11 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=918705 Bug ID: 918705 Summary: alpine locking failure (against procmail) leads to mail corruption Classification: openSUSE Product: openSUSE Factory Version: 201502* Hardware: x86-64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: gp(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This is something I started to see a bit ago, and since it now happened twice today I figured I'd report it. When I obtain mail via fetchmail, using procmail as the delivery agent, occasionally I get corrupted mails like the following (in mbox format): ==== snip ==== >From gp Thu Feb 19 18:56:54 2015 Mime-Version: 1.0 Date: Thu, 19 Feb 2015 18:56:00 +0100 Subject: AW: Re: Your help needed: Fwd: Comment opportunity: Software Status: RO X-Status: X-Keywords: X-UID: 9310 definedstorage Subject: AW: Re: Your help needed: Fwd: Comment opportunity: Software definedstorage References: <54E302D90200006F00158C8B(a)suse.com> <54E2D72A0200002B000A1B55(a)suse.com> <54E339FA0200006F00158DBD(a)suse.com> <54E2D7DE0200002B000A1B68(a)suse.com> <alpine.LSU.2.11.1502191739290.2252(a)ghan.fvgr> In-Reply-To: <alpine.LSU.2.11.1502191739290.2252(a)ghan.fvgr> Message-ID: <54E623B70200006F001594A6(a)suse.com> From: ... To: "Gerald Pfeifer" <gp(a)suse.com> ==== snap ==== This does not happen daily, and I believe it happens especially when I have been offline for several hours and a few dozen e-mails are delivered at once (though this specific case was not that). The same configuration had been working for years without ever showing this problem, and it looks like looking on the Alpine side (or procmail, though less likely I guess, since it essentially only reads :0 INBOX ) -- You are receiving this mail because: You are on the CC list for the bug.

2 7

[Bug 1038403] New: NetworkManager: Usage of systemctrl enable should be changed to %sytemd_add_pre/post
by bugzilla_noreply＠novell.com 09 Mar '22

09 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1038403 Bug ID: 1038403 Summary: NetworkManager: Usage of systemctrl enable should be changed to %sytemd_add_pre/post Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: sckang(a)suse.com Reporter: behlert(a)suse.com QA Contact: qa-bugs(a)suse.de CC: fcrozat(a)suse.com Found By: --- Blocker: --- "systemctl preset-all" is intended to return service states to a factory state based on presets. But currently we can see breakages in some products due to services that are not following the guidelines as described in https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Enabling_syst… The package NetworkManager was identified to use "systemctl enable" in its spec-file, and it should get replaced by the proper use of %sytemd_add_pre/post and preset. Please check your package, thanks. -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1042673] New: vsftpd fails to build with openssl-1.1
by bugzilla_noreply＠novell.com 02 Mar '22

02 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1042673 Bug ID: 1042673 Summary: vsftpd fails to build with openssl-1.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: peter.simons(a)suse.com Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1042629 Found By: --- Blocker: --- The package fails to build with openssl-1.1. For more information see the blocker bug. Currently tested in Staging:I https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 1042287] New: [Build 20170601] openQA test fails in enlightenment_first_start
by bugzilla_noreply＠novell.com 25 Feb '22

25 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1042287 Bug ID: 1042287 Summary: [Build 20170601] openQA test fails in enlightenment_first_start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: http://openqa.opensuse.org/tests/413072/modules/enligh tenment_first_start/steps/12 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The description text is missing. ## Observation openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_enlightenment@64bit fails in [enlightenment_first_start](http://openqa.opensuse.org/tests/413072/modules/… ## Reproducible Fails since (at least) Build [20170601](http://openqa.opensuse.org/tests/412884) ## Expected result Last good: [20170529](http://openqa.opensuse.org/tests/411282) (or more recent) ## Further details Always latest result in this scenario: [latest](http://openqa.opensuse.org/tests/latest?machine=64bit&flavor=NET&te… -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1036979] New: python2-qt4 posttrans fails
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1036979 Bug ID: 1036979 Summary: python2-qt4 posttrans fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: mrueckert(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Output of python2-qt4-4.12-3.1.x86_64.rpm %posttrans script: /var/adm/update-scripts/posttransLsYXyp/python2-qt4-4.12-3.1.x86_64.rpmpbKPGQ: line 6: syntax error: unexpected end of file Warning: python2-qt4-4.12-3.1.x86_64.rpm %posttrans script failed (returned 2) -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1017682] New: VUL-0: CVE-2016-10091: UnRTF: stack-based buffer overflows in cmd_* functions
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1017682 Bug ID: 1017682 Summary: VUL-0: CVE-2016-10091: UnRTF: stack-based buffer overflows in cmd_* functions Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE3 Assignee: anixx(a)opensuse.org Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2016/q4/786 =============================================== Hi As reported by "Skylake" in the Debian bugtracker[1], UnRTF is prone to stack-based buffer overflows in various cmd_* functions. I've found a Stack-based buffer overflow in unrtf 0.21.9, which affects three functions including: cmd_expand, cmd_emboss and cmd_engrave. # convert.c static int cmd_expand (Word *w, int align, char has_param, int param) { char str[10]; if (has_param) { sprintf(str, "%d", param/4); // Overflow, 9-digit negative value triggers the bug if (!param) attr_pop(ATTR_EXPAND); else attr_push(ATTR_EXPAND, str); } return FALSE; } Apparently writing a negative integer to the buffer can trigger the overflow (Minus sign needs an extra byte). * How to trigger the bug * $ echo "\expnd-400000000" > poc $ unrtf poc A preliminary patch can be found in the Debian bugtracker, but it is not yet finalized. Could you assign (a?) CVE as needed? Does one CVE suffice here, since same class of issue in various cmd_* functions from one reporter? Whilest, at least in Debian, unrtf is compiled with FORTIFY_SOURCE=2 and the buffer overflows are detected, at least if any exposed application uses unrtf to process untrusted input, this might lead to a denial-of-service. [1] https://bugs.debian.org/849705 Regards, Salvatore =============================================== https://software.opensuse.org/package/unrtf TW: KDE:KDE3: 0.21.5 42.2: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 42.1: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 13.2: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 906594] New: Apper showing wrong package description
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=906594 Bug ID: 906594 Summary: Apper showing wrong package description Classification: openSUSE Product: openSUSE Factory Version: NO 13.2 BUGS!! Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE4 Applications Assignee: kde-maintainers(a)suse.de Reporter: erwin.vandevelde(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Apper shows the package's description when clicking on it, but only for the first package you click on this is done correctly. Apper shows the same description again and again for each other package you click on. Versions: apper 0.9.1-2.1 -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1040164] New: Missing link to libpython3.6.so
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.suse.com/show_bug.cgi?id=1040164 Bug ID: 1040164 Summary: Missing link to libpython3.6.so Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: asn(a)cryptomilk.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When python applications look for the python library I often do it using: python3 Python 3.6.1 (default, Mar 23 2017, 13:04:44) [GCC] on linux Type "help", "copyright", "credits" or "license" for more information. >>> from distutils import sysconfig >>> sysconfig.get_python_lib(standard_lib=True) '/usr/lib/python3.6' >>> sysconfig.get_config_var('LIBPL') '/usr/lib64/python3.6/config-3.6m-x86_64-linux-gnu' >>> For this case there is a symlink in python2: /usr/lib64/python2.7/config/libpython2.7.so -> ../../libpython2.7.so This symlink doesn't exist for python3. ll /usr/lib64/python3.6/config-3.6m-x86_64-linux-gnu total 156 -rw-r--r-- 1 root root 68870 Mar 31 16:02 Makefile -rw-r--r-- 1 root root 15296 Mar 31 16:02 Setup -rw-r--r-- 1 root root 327 Mar 31 16:02 Setup.config -rw-r--r-- 1 root root 41 Mar 31 16:02 Setup.local -rw-r--r-- 1 root root 3302 Mar 31 16:02 config.c -rw-r--r-- 1 root root 1621 Mar 31 16:02 config.c.in -rw-r--r-- 1 root root 7122 Mar 31 16:02 install-sh -rw-r--r-- 1 root root 7521 Mar 31 16:02 makesetup -rw-r--r-- 1 root root 2036 Mar 31 16:02 python-config.py -rw-r--r-- 1 root root 32928 Mar 31 16:02 python.o Please add the symlink to libpypthon3.6.so. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

2 32