March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1072366] VUL-1: CVE-2017-17555: ffmpeg: The swri_audio_convert function allows remote attackers to cause a DoS
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1072366 http://bugzilla.suse.com/show_bug.cgi?id=1072366#c8 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Jan Engelhardt <jengelh(a)inai.de> --- . -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078488] VUL-0: CVE-2018-6392: ffmpeg: The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1allows remote attackers to cause a denial of service (out-of-array access) via acrafted MP4 file.
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1078488 http://bugzilla.suse.com/show_bug.cgi?id=1078488#c6 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #6 from Jan Engelhardt <jengelh(a)inai.de> --- . -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084297] VUL-1: CVE-2017-14449: SDL2_image: double-Free in the XCF image rendering
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084297 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1073084] Doomsday desktop file calls non-existing binary
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1073084 http://bugzilla.suse.com/show_bug.cgi?id=1073084#c3 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #3 from Jan Engelhardt <jengelh(a)inai.de> --- done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1081686] rename liburiparser1 to uriparser to align with packaging policy
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1081686 http://bugzilla.suse.com/show_bug.cgi?id=1081686#c5 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Jan Engelhardt <jengelh(a)inai.de> --- done -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 819514] network unavailable after resuming from sleep
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=819514 http://bugzilla.opensuse.org/show_bug.cgi?id=819514#c14 --- Comment #14 from Erik Martre <erik.martre(a)gmail.com> --- Unfortunately the problem occurs again randomly, but rather after many hours of sleeping time. Not so annyoing, as 'sudo modprobe -r r8169' followed by 'sudo modprobe r8169' causes ethernet to return to active state. According to the amount of posts regarding this concern, I'm afraid I'm the only one affected ! And I have to point out that on my W10 installation on the same machine, the ethernet controller behaves about the same way, but only after re-booting from OpenSuse ; in this case, a simple reboot solves the issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083212] Please drop mkfontscale/mkfontdir usage from texlive font packages
by bugzilla_noreply＠novell.com 08 Mar '18

08 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083212 http://bugzilla.suse.com/show_bug.cgi?id=1083212#c3 Stefan Brüns <stefan.bruens(a)rwth-aachen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(stefan.bruens@rwt | |h-aachen.de) | --- Comment #3 from Stefan Brüns <stefan.bruens(a)rwth-aachen.de> --- (In reply to Dr. Werner Fink from comment #2) > (In reply to Stefan Brüns from comment #0) > > Currently, the various texlive font packages create fonts.dir/fonts.scale > > using mkfontdir/mkfontscale. > > > > This is quite pointless: > > > > - the font packages go into /usr/share/fonts/texlive-<package>/, but this is > > outside the X server font path, which is (see /var/log/Xorg.0.log) > > [191632.294] (==) FontPath set to: > > /usr/share/fonts/misc:unscaled, > > /usr/share/fonts/Type1/, > > /usr/share/fonts/100dpi:unscaled, > > /usr/share/fonts/75dpi:unscaled, > > /usr/share/fonts/ghostscript/, > > /usr/share/fonts/cyrillic:unscaled, > > /usr/share/fonts/truetype/, > > i.e. to use any of this fonts, the user had to additionally use xset +fp ... > > for each package > > > > - this is for the vast majority of programs unnecessary, as it is only > > needed for server side font rendering, current programs use client side > > rendering. > > I'll not drop this, see /etc/fonts/conf.avail/ and the texlive enable and > disable files below ... but this is an addon for the user him/her self as by > default this might cause trouble mkfontscale is completely unrelated to fontconfig. fonts.{scale,dir} is a thing of the past, it is only needed by the obsolete X Core font mechanism. For more information, see https://www.x.org/archive/X11R7.5/doc/fonts/fonts.html > (In reply to Stefan Brüns from comment #1) > > Probably best achieved by: > > > > - using %reconfigure_fonts_prereq as BuildRequires > > > > - adding %link_avail_to_system_fontsconf <number>-<name).conf to the > > %install section > > > > - using the following macro to create the %post... stanzas > > %reconfigure_fonts_scriptlets > > > > see e.g. > > https://rudin.suse.de:8894/package/view_file/openSUSE:Factory/cantarell- > > fonts/cantarell-fonts.spec?expand=1 > > I'm aware but who decides which font should go into and which should not? I never said these fonts should be removed in any way. This does not affect current functionality. When the mkfontscale call is removed: - the same set of fonts is available for programs using Xft/fontconfig - the same set of fonts is available for programs using X core fonts -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1021095] Steam: steamruntime-fix conflicts with latest steam update which uses the host libraries
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1021095 http://bugzilla.suse.com/show_bug.cgi?id=1021095#c9 Jimmy Berry <jimmy(a)boombatower.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |UPSTREAM --- Comment #9 from Jimmy Berry <jimmy(a)boombatower.com> --- Per comment#5. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083948] VUL-1: CVE-2018-7667: adminer: SSRF via the server parameter
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083948 Jimmy Berry <jimmy(a)boombatower.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1045658] yast2 services-manager is very slow after 3.1.44 update
by bugzilla_noreply＠novell.com 07 Mar '18

07 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1045658 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:7867:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0