September 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1030232] Leap 42.1/2 require current Rust for Firefox 53 compilation
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.novell.com/show_bug.cgi?id=1030232 http://bugzilla.novell.com/show_bug.cgi?id=1030232#c9 Luke Jones <luke.nukem.jones(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |INVALID --- Comment #9 from Luke Jones <luke.nukem.jones(a)gmail.com> --- Leap 42.2 and previous have reached end-of-life. This issue is now a non-issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1053563] devel:languages:rust/cargo: cargo doesn't include zsh completion
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.novell.com/show_bug.cgi?id=1053563 http://bugzilla.novell.com/show_bug.cgi?id=1053563#c1 Luke Jones <luke.nukem.jones(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED Severity|Normal |Enhancement --- Comment #1 from Luke Jones <luke.nukem.jones(a)gmail.com> --- New cargo build will appear in factory with this soon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1056535] New: DATA CORRUPTION on Lenovo ThinkPad P70 with socket use
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1056535 Bug ID: 1056535 Summary: DATA CORRUPTION on Lenovo ThinkPad P70 with socket use Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Critical Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: rlk(a)alum.mit.edu QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 738932 --> http://bugzilla.opensuse.org/attachment.cgi?id=738932&action=edit List of miscompared bytes in comparison of 9 files, each 1-2 GB in size On a Lenovo ThinkPad P70, Xeon E3-1505Mv5, nVidia Quadro M4000M, 32 GB, I get sporadic data corruption with any form of file transfer involving use of sockets (IP or UNIX domain). This includes rsync (local, local->remote, or remote->local), scp, ftp, or tar over ssh. It does not include file transfers not using sockets (specifically including cp -r or tar cf - | tar xf - (those complete with no errors). Rsync detects errors in the data stream; in some cases it retries the transfer; in other cases it results in a protocol error that aborts the transfer. The local->remote rsync also gets the same types of error (the remote machine has otherwise been reliable). I note that ssh itself does not report any failures, as might be expected if an encrypted data stream suffered corruption. There are no messages in the log files indicating errors of any kind. One pattern I've observed in the miscompares is that the address with the erroneous data always ends in the six bits 011111 (byte 31 of 64 byte chunk). There appears to be some loose clustering (see attached). I have run a full pass of memtest86, full Lenovo diagnostics, and 7 hours (to date) of prime95 with no errors. I have removed each of the two DIMMs, using only 16 GB, using different slots, with no change in behavior. I put the two DIMMs in the other pair of slots, also with no change in behavior. I have used two different SSDs (SanDisk X400 512GB and Crucial MX300 1TB) in separate M.2 slots with no change in behavior. I have not seen any evidence of any such issues under Windows 10. I also do not observe any such issues with Knoppix 7.7.1 (kernel 4.7.9). This occurs with both the stock 4.4.79-default kernel (I first noticed it when the download of the update RPMs had errors) and the 4.12.9-1.gf2ab6ba-default kernel. It also occurs with the 4.12.9-1.gf2ab6ba-vanilla kernel. I haven't tried a vanilla 4.4 kernel, but my understanding is that that does not properly support Skylake processors. The one combination I have found that does not get these errors is using the vanilla kernel with the xf86-video-nouveau package removed (the presence/absence of the nv and proprietary nVidia packages does not appear to have any effect). This isn't a viable combination for me, since I still don't have the proprietary nVidia package working for reasons TBD (have not determined whether this is a bug or user error). However, it happens even at runlevel 3 with the X server never started. It also doesn't matter whether I set the BIOS to use only the nVidia graphics driver or the hybrid (Optimus) setup. I have a few more weeks before I have to decide whether to return the laptop (and eat the 15% restocking fee), so I'm under some time pressure to find a resolution. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1054585] New: VUL-0: CVE-2017-12958: pspp: There is an illegal address access in function output_hex() of libpspp.
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1054585 Bug ID: 1054585 Summary: VUL-0: CVE-2017-12958: pspp: There is an illegal address access in function output_hex() of libpspp. Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other URL: https://smash.suse.de/issue/190825/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: opensuse.lietuviu.kalba(a)gmail.com Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- rh#1482429 There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP 0.11.0 that will lead to remote denial of service. References: https://bugzilla.redhat.com/show_bug.cgi?id=1482429 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12958 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12958 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1054587] New: VUL-0: CVE-2017-12960: pspp: There is an assertion abort in function dict_rename_var() of libpspp.
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1054587 Bug ID: 1054587 Summary: VUL-0: CVE-2017-12960: pspp: There is an assertion abort in function dict_rename_var() of libpspp. Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other URL: https://smash.suse.de/issue/190827/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: opensuse.lietuviu.kalba(a)gmail.com Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- rh#1482433 There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP 0.11.0 that will lead to remote denial of service. References: https://bugzilla.redhat.com/show_bug.cgi?id=1482433 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12960 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12960 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1054586] New: VUL-0: CVE-2017-12961: pspp: There is an assertion abort in function parse_attributes() of libpspp
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1054586 Bug ID: 1054586 Summary: VUL-0: CVE-2017-12961: pspp: There is an assertion abort in function parse_attributes() of libpspp Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other URL: https://smash.suse.de/issue/190828/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: opensuse.lietuviu.kalba(a)gmail.com Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- rh#1482436 There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP 0.11.0 that will lead to remote denial of service. References: https://bugzilla.redhat.com/show_bug.cgi?id=1482436 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12961 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12961 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1054588] New: VUL-0: CVE-2017-12959: pspp: There is a reachable assertion abort in function dict_add_mrset() of libpspp.
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1054588 Bug ID: 1054588 Summary: VUL-0: CVE-2017-12959: pspp: There is a reachable assertion abort in function dict_add_mrset() of libpspp. Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: opensuse.lietuviu.kalba(a)gmail.com Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- rh#1482432 There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP 0.11.0 that will lead to a remote denial of service attack. References: https://bugzilla.redhat.com/show_bug.cgi?id=1482432 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12959 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12959 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 944903] insserv fails if argument is a directory in cwd
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=944903 http://bugzilla.suse.com/show_bug.cgi?id=944903#c9 --- Comment #9 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2017:2345-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 1035062,944903 CVE References: Sources used: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Server 12-SP3 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Server 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Desktop 12-SP3 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Desktop 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Container as a Service Platform ALL (src): insserv-compat-0.1-14.3.1 OpenStack Cloud Magnum Orchestration 7 (src): insserv-compat-0.1-14.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1035062] Tumbleweed no longer executes scripts in /etc/init.d
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1035062 http://bugzilla.suse.com/show_bug.cgi?id=1035062#c21 --- Comment #21 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2017:2345-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 1035062,944903 CVE References: Sources used: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Server 12-SP3 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Server 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Desktop 12-SP3 (src): insserv-compat-0.1-14.3.1 SUSE Linux Enterprise Desktop 12-SP2 (src): insserv-compat-0.1-14.3.1 SUSE Container as a Service Platform ALL (src): insserv-compat-0.1-14.3.1 OpenStack Cloud Magnum Orchestration 7 (src): insserv-compat-0.1-14.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1051899] NTP Client: Internal Error while Starting
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1051899 http://bugzilla.suse.com/show_bug.cgi?id=1051899#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2017:2343-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 1043370,1051899 CVE References: Sources used: SUSE Linux Enterprise Server 12-SP3 (src): yast2-ntp-client-3.2.14-2.5.11 SUSE Linux Enterprise Desktop 12-SP3 (src): yast2-ntp-client-3.2.14-2.5.11 -- You are receiving this mail because: You are on the CC list for the bug.

1 0