February 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1067838] X server slows down
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1067838 http://bugzilla.opensuse.org/show_bug.cgi?id=1067838#c6 Max Staudt <mstaudt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #6 from Max Staudt <mstaudt(a)suse.com> --- Actually closing... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1067838] X server slows down
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1067838 http://bugzilla.opensuse.org/show_bug.cgi?id=1067838#c5 Max Staudt <mstaudt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mstaudt(a)suse.com Flags|needinfo?(nine(a)detonation.o | |rg) | --- Comment #5 from Max Staudt <mstaudt(a)suse.com> --- No response in more than 2 months, so let's assume this has turned into an irreproducible heisenbug and call it RESOLVED INVALID. Stefan, if you find new hints for us to look at, please simply re-open the bug. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078975] a partition created for "operating system" is not automatically mounted on /
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1078975 http://bugzilla.suse.com/show_bug.cgi?id=1078975#c1 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ancor(a)suse.com --- Comment #1 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- It used to work that way. It got probably broken by some recent change. Let me check. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078961] Internal error: SetOverlay called when old overlay was not cleared
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1078961 http://bugzilla.suse.com/show_bug.cgi?id=1078961#c1 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED URL| |https://trello.com/c/Aqy3gl | |46 CC| |ancor(a)suse.com Assignee|yast2-maintainers(a)suse.de |yast-internal(a)suse.de --- Comment #1 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- The bug was introduced by this recent change https://github.com/yast/yast-yast2/pull/671 So adding this bug report to the YaST Team Scrum backlog for it to be prioritized in relation to other tasks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078548] Upgrade to Leap 15.0 - screen display freezes part way through
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1078548 http://bugzilla.suse.com/show_bug.cgi?id=1078548#c7 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carnold(a)suse.com Flags| |needinfo?(carnold(a)suse.com) --- Comment #7 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- (In reply to Neil Rickert from comment #6) > I am using virt-manager. As I suspected. As said, this has being a constant for me when trying SLE15 (and now Leap15) in graphical installation with virt-manager. It does not happen, for example in openQA. So question goes to the virt-manager maintainer. Arnold, any clue why this is happening? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078111] Tryton Server: Impact mitigation for DDoS attack
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1078111 http://bugzilla.suse.com/show_bug.cgi?id=1078111#c7 --- Comment #7 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Hello Nicolas, (In reply to nicolas.evrard(a)b2ck.com from comment #6) > We also have to keep in mind that trytond can run in multiple environment: > Linux, BSD and there might be even few people using Windows ; of course this > doesn't concern openSUSE but it concerns us. I understand. This is easily forgotten but I know myself how difficult cross platform development can be. Would you accept a configurable approach? Keep the default as it is but allow users or integrators that run Linux to select a different behaviour that avoids the discussed effect on the databse? > A solution to mitigate the growth of the LoginAttempt table might be to keep > track of the IP making the attempt and keeping at most X attempts from the > same IP. In fact after some research it seems that it is the solution that > drupal chose: If it works for Drupal then it may be the right thing to do. A quick research suggests there are also some pitfalls here like multiple users sharing the same IP or using proxies to circumvent the protection. Web application design is not exactly my area of expertise, however. I'm sure all of you can work out a solution that addresses both concerns. I think both parties can agree upon that there is an attack surface here but also that it can't be fixed so simply (with regard to the proposed patch). While OS level DoS protection is certainly best practice, an improved implementation would benefit tryton and serve as a defense in depth measure. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1076182] VUL-1: CVE-2017-18028: GraphicsMagick,ImageMagick: memory exhaustion in the function ReadTIFFImage in coders/tiff.c
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1076182 http://bugzilla.suse.com/show_bug.cgi?id=1076182#c5 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|pgajdos(a)suse.com |security-team(a)suse.de --- Comment #5 from Petr Gajdos <pgajdos(a)suse.com> --- I believe all fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1073687] VUL-0: CVE-2017-17783: GraphicsMagick: Buffer over-read in ReadPALMImage incoders/palm.c when QuantumDepth is 8
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1073687 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|pgajdos(a)suse.com |security-team(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078997] libstorage-ng fails to build on armv6 and armv7
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1078997 http://bugzilla.suse.com/show_bug.cgi?id=1078997#c1 Ancor Gonzalez Sosa <ancor(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ancor(a)suse.com Flags| |needinfo?(aschnell(a)suse.com | |) --- Comment #1 from Ancor Gonzalez Sosa <ancor(a)suse.com> --- Arvin, can you take a look? I assume it would be relatively easy to fix. If not, I will create a Trello card for it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037806] kmozillahelper consumes 100% of CPU
by bugzilla_noreply＠novell.com 02 Feb '18

02 Feb '18

http://bugzilla.suse.com/show_bug.cgi?id=1037806 http://bugzilla.suse.com/show_bug.cgi?id=1037806#c12 --- Comment #12 from Moritz Duge <duge(a)pre-sense.de> --- Issue still exists on openSUSE-LEAP-42.3, using MozillaThunderbird-52.6-56.2 and kmozillahelper-5.0.2-3.1. -- You are receiving this mail because: You are on the CC list for the bug.

1 0