September 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1056669] New: Undefined behavior in libebml (Leap 42.2 and 42.3)
by bugzilla_noreply＠novell.com 01 Sep '17

01 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1056669 Bug ID: 1056669 Summary: Undefined behavior in libebml (Leap 42.2 and 42.3) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: f.thiessen(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Current version 1.3.4 suffers from an "undefined behavior"-bug, which is fixed in the current release (1.3.5). Changlog entry: Fixed an instance of undefined behavior in EbmlElement::GetSemantic() due to binding a dereferenced null pointer to a reference. Binary compatibility: https://abi-laboratory.pro/tracker/timeline/libebml/ libebml was fixed for Factory with this SR: https://build.opensuse.org/request/show/518708 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1056450] New: VUL-0: libidn2: integer overflow in puny_decode.c/decode_digit()
by bugzilla_noreply＠novell.com 01 Sep '17

01 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1056450 Bug ID: 1056450 Summary: VUL-0: libidn2: integer overflow in puny_decode.c/decode_digit() Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: tchvatal(a)suse.com Reporter: astieger(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- https://lists.gnu.org/archive/html/info-gnu/2017-08/msg00013.html Integer overflow fixed in libidn2 2.0.4: ** Fix integer overflow in puny_decode.c/decode_digit() http://git.savannah.gnu.org/cgit/libidn/libidn2.git/commit/?h=libidn2-2.0.4… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1056699] SeaMonkey GUI/web page rendering completely broken
by bugzilla_noreply＠novell.com 01 Sep '17

01 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1056699 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |wolfgang(a)rosenauer.org |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1043115] New: "net usershare list" only usable by root
by bugzilla_noreply＠novell.com 01 Sep '17

01 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1043115 Bug ID: 1043115 Summary: "net usershare list" only usable by root Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Samba Assignee: samba-maintainers(a)SuSE.de Reporter: stefan.bruens(a)rwth-aachen.de QA Contact: samba-maintainers(a)SuSE.de Found By: --- Blocker: --- Currently, it is not possible to run net usershare list or any other net command as nonpriviledged user. $> net usershare info Failed to init messaging context According to strace, it fails when trying to create a lock: open("/var/lib/samba/lock/msg.lock/18128", O_RDWR|O_CREAT|O_NONBLOCK, 0644) = -1 EACCES (Permission denied) $> ls -ld /var/lib/samba/lock/msg.lock drwxr-xr-x 1 root root 40 Jun 7 12:26 /var/lib/samba/lock/msg.lock $> rpm -q samba samba-client samba-client-4.6.3+git.25.0c154becb13-1.2.x86_64 samba-4.6.3+git.25.0c154becb13-1.2.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 10