December 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1115724] VUL-1: CVE-2018-19200: uriparser: UriCommon.c allows attempted operations on NULL input via a uriResetUri* function
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1115724 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:9488:low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1114160] static network configuration using BOOTPROTO=none
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1114160 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| maint:planned:update |ibs:running:9614:moderate | |ibs:running:9615:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118410] New: hicolor-icon-theme doesn't get installed in installation images
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1118410 Bug ID: 1118410 Summary: hicolor-icon-theme doesn't get installed in installation images Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: hellcp(a)mailbox.org QA Contact: jsrain(a)suse.com CC: lslezak(a)suse.com Found By: --- Blocker: --- Qt's implementation of QIcon::fromTheme depends on hicolor-icon-theme to be installed, most importantly, it requires theme file to check which directories contain images. That file is not present on installation media, therefore Qt can't load icons. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118351] VUL-1: CVE-2018-19839: libsass: the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1118351 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118349] VUL-1: CVE-2018-19838: libsass: functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1118349 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118348] VUL-1: CVE-2018-19837: libsass: Sass:Eval:operator()(Sass:Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1118348 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118346] VUL-1: CVE-2018-19827: libsass: a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service or possibly have unspecified other impact
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1118346 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118345] VUL-1: CVE-2018-19826: libsass: In inspect.cpp a high memory footprint caused by an endless loop may cause a Denial of Service via crafted sass input files
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.suse.com/show_bug.cgi?id=1118345 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1118404] New: [doc] creating system connections is mentioned but not addressed
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1118404 Bug ID: 1118404 Summary: [doc] creating system connections is mentioned but not addressed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: chrisbcoutinho(a)gmail.com QA Contact: fs(a)suse.com Found By: --- Blocker: --- 28.4.1 User and System Connections https://doc.opensuse.org/documentation/leap/reference/html/book.opensuse.re… The documentation mentions that there is a difference between user and system network connections (most likely regarding trusted wifi connections), but the linked section doesn't address it. I found in the nmcli help menu that removing the value in the setting connection.permissions turns a connection into a system connection. It would have been very helpful if this fact was included in the documentation from the beginning. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1055834] New: [FAILED] Failed to start Setup Virtual Console.
by bugzilla_noreply＠novell.com 04 Dec '18

04 Dec '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1055834 Bug ID: 1055834 Summary: [FAILED] Failed to start Setup Virtual Console. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: jsrain(a)suse.com Reporter: eatobin(a)gmail.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- My first bug report. Please excuse irregularities. After a recent Tumbleweed update (20170822?) I began to receive this error on boot: [FAILED] Failed to start Setup Virtual Console. The details as reported: eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service ● systemd-vconsole-setup.service - Setup Virtual Console Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service; static; vendor preset: disabled) Active: inactive (dead) since Thu 2017-08-24 20:04:51 CDT; 26min ago Docs: man:systemd-vconsole-setup.service(8) man:vconsole.conf(5) Process: 467 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited, status=0/SUCCESS) Main PID: 467 (code=exited, status=0/SUCCESS) Aug 24 20:04:51 linux-epth systemd-vconsole-setup[467]: KD_FONT_OP_SET failed, fonts will not be copied to tty7: Invalid argument Aug 24 20:04:51 linux-epth systemd[1]: Started Setup Virtual Console. eric@linux-epth:~$ More research and think this is tied to a boot problem as systemctl work manually: eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service [sudo] password for root: ● systemd-vconsole-setup.service - Setup Virtual Console Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service; static; vendor preset: disabled) Active: inactive (dead) since Sat 2017-08-26 08:54:42 CDT; 1min 51s ago Docs: man:systemd-vconsole-setup.service(8) man:vconsole.conf(5) Process: 441 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited, status=0/SUCCESS) Main PID: 441 (code=exited, status=0/SUCCESS) Aug 26 08:54:42 linux-epth systemd-vconsole-setup[441]: KD_FONT_OP_SET failed, fonts will not be copied to tty7: Invalid argument Aug 26 08:54:42 linux-epth systemd[1]: Started Setup Virtual Console. eric@linux-epth:~$ sudo systemctl start systemd-vconsole-setup.service eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service ● systemd-vconsole-setup.service - Setup Virtual Console Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service; static; vendor preset: disabled) Active: inactive (dead) since Sat 2017-08-26 08:57:03 CDT; 4s ago Docs: man:systemd-vconsole-setup.service(8) man:vconsole.conf(5) Process: 2637 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited, status=0/SUCCESS) Main PID: 2637 (code=exited, status=0/SUCCESS) Aug 26 08:57:02 linux-epth systemd[1]: Starting Setup Virtual Console... Aug 26 08:57:03 linux-epth systemd[1]: Started Setup Virtual Console. eric@linux-epth:~$ My thanks to tsu2 on the user forum (Re: New Boot Error -"[FAILED] Failed to start Setup Virtual Console."): "Looks like this is likely a systemd upstream error. I found where your error is generated, and I doubt anyone but upstream can do anything about it https://github.com/systemd/systemd/blob/master/src/vconsole/vconsole-setup.c Best to just submit a bug to https://bugzilla.opensuse.org TSU" Please note line 306 of referenced code as it pertains to warning I received: log_warning_errno(errno, "KD_FONT_OP_SET failed, fonts will not be copied to tty%u: %m", i); KD_FONT_OP_SET failed, fonts will not be copied to tty7: Invalid argument Thank you for your help with this. -- You are receiving this mail because: You are on the CC list for the bug.

1 133