March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1084016] New: plasma 5.12.2 - settings from qtlogging.ini not taken into account
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084016 Bug ID: 1084016 Summary: plasma 5.12.2 - settings from qtlogging.ini not taken into account Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: opensuse(a)mike.franken.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After installing Tumbleweed snapshot 20180301 with plasma 5.12.2 I got lots of new warning messages in my journal logs. I learnt that logging for these messages switched from a file to the journal log. According to https://doc.qt.io/qt-5/qloggingcategory.html#configuring-categories one can stop these messages by setting [Rules] *.debug=false in /usr/share/qt5/qtlogging.ini or in ~/.config/QtProject/qtlogging.ini But adding these settings to one or both of these files didn't reduce the huge amount of messages. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1084213] [storage-ng][Leap 15 + SLE 15 suspected] /home subvolume not created if user opts to not have a /home partition
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

1 0

[Bug 1084213] New: [libstorage-ng][Leap 15 + SLE 15 suspected] /home subvolume not created if user opts to not have a /home partition
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084213 Bug ID: 1084213 Summary: [libstorage-ng][Leap 15 + SLE 15 suspected] /home subvolume not created if user opts to not have a /home partition Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: rbrown(a)suse.com QA Contact: jsrain(a)suse.com CC: dimstar(a)opensuse.org, kukuk(a)suse.com, okurz(a)suse.com Found By: --- Blocker: --- Created attachment 762888 --> http://bugzilla.opensuse.org/attachment.cgi?id=762888&action=edit y2logs Steps to reproduce: - Install any libstorage-ng OS on a blank disk - Choose guided setup during partitioning - Select Disk - Leave LVM and Disk Encryption unticked (as default) - On the settings for the Root Partition Screen - configure the following: - UNTICK Propose Separate Home Partition - Leave all the other boxes as default (File System type BTRFS, Snapshots enabled, Separate Swap enabled, Enlarge RAM for Suspend) The resulting proposal has only 8 subvolume actions creating the following subvolumes @ @/var @/usr/local @/tmp @/srv @/opt @/boot/grub2/x86_64 @/boot/grub2/i386-pc @/home is missing, this is unexpected and crates a system with a critical flaw. There is the potential for serious data loss for any user who installs their system showing this behaviour. That includes any fresh Tumbleweed installation from current snapshots, and potentially SLE-15 and Leap-15 assuming they are showing the same behaviour. Any user using rollbacks on these systems will loose all data in /home written since their last snapshot As we have no way of repairing subvolumes retroactively, any user who has installed any *SUSE OS that exhibits this behaviour will need to *RE-INSTALL* to recover from this bug. It's essential that when using btrfs as the rootfs without /home as a separate partition, the @/home subvolume is created. This is the purpose of the associated lines in the control.xml, which seem to be ignored at the moment: https://github.com/yast/skelcd-control-openSUSE/blob/master/control/control… y2logs attached These logs are from an installation in topped immediately after proposal is presented; my other system struck by this bug is currently inaccessible, on account of it bring remote, only allowing ssh key authentication, and as it's ssh keys were held in /home, they were lost during a rollback. (okurz, ccing you to this bug because I am concerned about the SLE-15 impact, can you or someone from QA take a look?) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1070872] Raspberry Pi 3 SD Card errors
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1070872 Cor Slot <cor.slot(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cor.slot(a)gmail.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1069997] New: RPi 3 WiFi brcmfmac_sdio: probe of mmc1:0001:1 failed with error -110 (timeout)
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1069997 Bug ID: 1069997 Summary: RPi 3 WiFi brcmfmac_sdio: probe of mmc1:0001:1 failed with error -110 (timeout) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- [ 11.729394] brcmfmac_sdio: probe of mmc1:0001:1 failed with error -110 [ 11.731566] brcmfmac_sdio: probe of mmc1:0001:2 failed with error -110 That's it. No WiFi. 4.4.90-28-default 4.4.92-31-default Any ideas? -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1083413] New: VUL-0: CVE-2017-18197: jgraphx: XML External Entity (XXE) not prevented
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1083413 Bug ID: 1083413 Summary: VUL-0: CVE-2017-18197: jgraphx: XML External Entity (XXE) not prevented Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/200806/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: pmonrealgonzalez(a)suse.com Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1550353 In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView. References: https://bugzilla.redhat.com/show_bug.cgi?id=1550353 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-18197 http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-18197.html https://github.com/jgraph/mxgraph/issues/124 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1081576] New: VUL-1: CVE-2018-7186 leptonica: Stack-based buffer overflows in gplotRead() and ptaReadStream() when parsing crafted files can lead to denial of service
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1081576 Bug ID: 1081576 Summary: VUL-1: CVE-2018-7186 leptonica: Stack-based buffer overflows in gplotRead() and ptaReadStream() when parsing crafted files can lead to denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/200341/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1546029 Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a long string, as demonstrated by the gplotRead and ptaReadStream functions. References: https://bugzilla.redhat.com/show_bug.cgi?id=1546029 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7186 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-7186.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890548 http://www.cvedetails.com/cve/CVE-2018-7186/ https://lists.debian.org/debian-lts/2018/02/msg00054.html https://github.com/DanBloomberg/leptonica/commit/ee301cb2029db8a6289c5295da… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1081631] New: VUL-0: leptonica: Unbound memory access
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1081631 Bug ID: 1081631 Summary: VUL-0: leptonica: Unbound memory access Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/200341/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: lazy.kent(a)opensuse.org Reporter: kbabioch(a)suse.com QA Contact: qa-bugs(a)suse.de Depends on: 1081576 Found By: Security Response Team Blocker: --- prog/htmlviewer: Catch unbound memory access (CID 1386222) rootname can have any size, so limit the amount of copied bytes. References: https://github.com/DanBloomberg/leptonica/commit/c1079bb8e77cdd426759e46672… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1079358] New: VUL-1: CVE-2018-3836 leptonica: gplotMakeOutput command injection
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1079358 Bug ID: 1079358 Summary: VUL-1: CVE-2018-3836 leptonica: gplotMakeOutput command injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/199482/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: lazy.kent(a)opensuse.org Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1542005 An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability. External References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0516 References: https://bugzilla.redhat.com/show_bug.cgi?id=1542005 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3836 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1083845] New: VUL-0: CVE-2018-0490: tor: null-pointer crash in directory authority protocol list code (TROVE-2018-001)
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1083845 Bug ID: 1083845 Summary: VUL-0: CVE-2018-0490: tor: null-pointer crash in directory authority protocol list code (TROVE-2018-001) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/201158/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: astieger(a)suse.com Reporter: astieger(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- The subprotocol implementation in 0.2.9.4-alpha had a bug where an incorrectly formatted relay descriptor could cause directory servers to crash when they tried to vote about it. This does not affect relays or clients, since they do not try to vote. >From https://lists.torproject.org/pipermail/tor-announce/2018-March/000152.html TROVE-2018-001 only affects directory authorities. It is a bug that an attacker can use to cause a remote directory authority to crash. All directory authorities should upgrade to one of the versions released today. It does not affect relays or clients. - Fix a protocol-list handling bug that could be used to remotely crash directory authorities with a null-pointer exception. Fixes bug 25074; bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001 and CVE-2018-0490. Fixed in 0.2.9.15, 0.3.1.10, 0.3.2.10, 0.3.3.3-alpha References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0490 https://trac.torproject.org/projects/tor/ticket/25074 -- You are receiving this mail because: You are on the CC list for the bug.

1 2