March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1082230] New: mlmmj - subscribe causes a segfault
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1082230 Bug ID: 1082230 Summary: mlmmj - subscribe causes a segfault Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: per(a)computer.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- See https://progress.opensuse.org/issues/31990 When someone attempts to subscribe to list "election-officials", mlmmj-sub segfaults. 2018-02-20T13:24:01.491613+00:00 baloo kernel: [3535355.455657] traps: mlmmj-sub[13393] general protection ip:7fe293ae9829 sp:7ffc29e1ab10 error:0 in libc-2.22.so[7fe293aa0000+198000]traps: 2018-02-20T13:24:01.559929+00:00 baloo systemd-coredump[13394]: Process 13393 (mlmmj-sub) of user 65534 dumped core. 2018-02-20T14:24:03.071636+00:00 baloo kernel: [3538957.035230] traps: mlmmj-sub[2410] general protection ip:7fba7d0f9829 sp:7ffe5b0730d0 error:0 in libc-2.22.so[7fba7d0b0000+198000]traps: 2018-02-20T14:24:03.143163+00:00 baloo systemd-coredump[2411]: Process 2410 (mlmmj-sub) of user 65534 dumped core. AFAICT, it is reproducable. I'll check out the core dumps and see if there is anything obvious. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1073990] nscd, broken netgroup cache
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1073990 http://bugzilla.suse.com/show_bug.cgi?id=1073990#c12 Andreas Schwab <schwab(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #12 from Andreas Schwab <schwab(a)suse.com> --- Fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1074051] Deadlock in thunar 1.6.13-124.1
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1074051 http://bugzilla.opensuse.org/show_bug.cgi?id=1074051#c13 --- Comment #13 from Markus Elfring <Markus.Elfring(a)web.de> --- (In reply to Stefan Seyfried from comment #12) * Do you observe the message “Loading folder contents...” also in your test environment (as it happens for me again with the software “Thunar 1.6.14-128.3” for the directory “/home/elfring/” at the moment)? * Did this issue become reproducible more often? Other directories which are offered in the left places widget are immediately displayed here. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084290] [drupal7] Multiple Vulnerabilities - SA-CORE-2018-001
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084290 http://bugzilla.opensuse.org/show_bug.cgi?id=1084290#c1 Karol Babioch <kbabioch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Karol Babioch <kbabioch(a)suse.com> --- https://build.opensuse.org/request/show/584204 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084292] [drupal8] Multiple Vulnerabilities - SA-CORE-2018-001
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084292 http://bugzilla.opensuse.org/show_bug.cgi?id=1084292#c2 --- Comment #2 from Karol Babioch <kbabioch(a)suse.com> --- This is the bug for Drupal 8.x, use bug 1084290 for 7.x. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1065961] Project config sets build flag that no available compiler supports
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1065961 http://bugzilla.suse.com/show_bug.cgi?id=1065961#c6 Stephan Kulow <coolo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(coolo(a)suse.com) | --- Comment #6 from Stephan Kulow <coolo(a)suse.com> --- I did -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084388] Update ocaml to current upstream version (4.06.1)
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084388 http://bugzilla.suse.com/show_bug.cgi?id=1084388#c2 Olaf Hering <ohering(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |UPSTREAM --- Comment #2 from Olaf Hering <ohering(a)suse.com> --- And for Leap15 it will not happen anyway. So, will get to it once there is time. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084388] Update ocaml to current upstream version (4.06.1)
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084388 http://bugzilla.suse.com/show_bug.cgi?id=1084388#c1 --- Comment #1 from Olaf Hering <ohering(a)suse.com> --- It will take some manpower until devel:languages:ocaml is ready for 4.06. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084436] New: VUL-1: CVE-2018-1000119: rack-protection: Timing attack in authenticity_token.rb
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084436 Bug ID: 1084436 Summary: VUL-1: CVE-2018-1000119: rack-protection: Timing attack in authenticity_token.rb Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/201358/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ruby-devel(a)suse.de Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de CC: cmueller(a)suse.com Found By: Security Response Team Blocker: --- rh#1534027 Sinatra rack-protection version 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 2.0.0. Leap 42.3 and infrastructure References: https://bugzilla.redhat.com/show_bug.cgi?id=1534027 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000119 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1000119.html https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad… https://github.com/sinatra/rack-protection/pull/98 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084292] [drupal8] Multiple Vulnerabilities - SA-CORE-2018-001
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084292 http://bugzilla.opensuse.org/show_bug.cgi?id=1084292#c1 Eric Schirra <ecsos(a)schirra.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #1 from Eric Schirra <ecsos(a)schirra.net> --- Drupal 7 is now updated to 7.57. Multible security issues are fixed for Drupal 7. -- You are receiving this mail because: You are on the CC list for the bug.

1 0