March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1080395] New: Leap 15.0 Installation does not boot
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1080395 Bug ID: 1080395 Summary: Leap 15.0 Installation does not boot Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: Larry.Finger(a)lwfinger.net QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- I installed Leap 15.0 from Build 124.1 into a new VirtualBox VM with a GPT partition table. I forced the installation to place the boot information in the root partition, not in the MBR. The option to write standard boot code into the MBR was selected. The resulting installation could not boot with the message that no OS was found. I booted the Rescue system from the CD and used parted to examine the partition table on /dev/sda. Everything was as expected except that the "legacy_boot" flag was not set on the root partition. As soon as I toggled that flag, then the installation booted as expected. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1001973] New: selinux-policy fails to build
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1001973 Bug ID: 1001973 Summary: selinux-policy fails to build Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: jsegitz(a)novell.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- selinux-policy fails to build in Leap, please submit a fix: https://build.opensuse.org/package/show/openSUSE:Leap:42.2/selinux-policy -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1083992] libmpg123 segfaults with crafted file
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083992 http://bugzilla.suse.com/show_bug.cgi?id=1083992#c5 --- Comment #5 from Luigi Baldoni <aloisio(a)gmx.com> --- (In reply to Marcus Meissner from comment #3) > do you have this file? See attachment. > seems securioty relevant? Not really qualified to tell, I wanted to err on the side of caution. Do you think it's overkill? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083992] libmpg123 segfaults with crafted file
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083992 http://bugzilla.suse.com/show_bug.cgi?id=1083992#c4 --- Comment #4 from Luigi Baldoni <aloisio(a)gmx.com> --- Created attachment 762748 --> http://bugzilla.suse.com/attachment.cgi?id=762748&action=edit fuzzed files that crash mpg123 via mp3gain -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084014] New: SMTPUTF8 mail rejects
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1084014 Bug ID: 1084014 Summary: SMTPUTF8 mail rejects Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: openSUSE 42.3 Status: NEW Severity: Major Priority: P5 - None Component: Network Assignee: varkoly(a)suse.com Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de CC: chris(a)computersalat.de Found By: Beta-Customer Blocker: --- With Leap 42.3, Postfix was upgraded from 2.11.8 to 3.2.0. Since this upgrade, I see mail rejects caused by SMTPUTF8, for example: - dovecot lmtp (mail address and hostnames anonymized) Mar 5 10:13:14 server postfix/lmtp[2703]: 3636F1D273DC: to=<user(a)example.com>, relay=mail.example.com[private/dovecot-lmtp], delay=0.03, delays=0.03/0/0/0, dsn=5.6.7, status=bounced (SMTPUTF8 is required, but was not offered by host mail.example.com[private/dovecot-lmtp]) - amavis (mail address anonymized starting at "user=", hostnames anonymized) Feb 15 12:38:28 server amavis[3273]: (03273-17) ESMTP: 501 5.5.4 Syntax error in MAIL FROM parameters; smtp_resp: MAIL FROM:<bounce+28f75a.232d6-user=example.com(a)mail.example2.com> BODY=8BITMIME SMTPUTF8\r\n So both amavis and dovecot lmtp do not understand SMTPUTF8 and reject the mails. "Luckily" this only affects a few mails per day, but that also means the problem will probably stay unnoticed in most cases. As a workaround, I set smtputf8_enable = no I don't have a 42.2 system anymore to check what the default was there, but my guess is that it was set to 'no' there. For 42.3, I'd recommend to release a postfix update that changes the default for smtputf8_enable to 'no'. For Tumbleweed and Leap 15, please make sure that both amavis and dovecot lmtp understand SMTPUTF8. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083992] libmpg123 segfaults with crafted file
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083992 http://bugzilla.suse.com/show_bug.cgi?id=1083992#c3 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com --- Comment #3 from Marcus Meissner <meissner(a)suse.com> --- do you have this file? seems securioty relevant? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083992] libmpg123 segfaults with crafted file
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083992 http://bugzilla.suse.com/show_bug.cgi?id=1083992#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1083992) was mentioned in https://build.opensuse.org/request/show/583088 42.3 / mpg123 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083993] New: The "libreoffice-gtk3" package should be installed with MATE by default
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1083993 Bug ID: 1083993 Summary: The "libreoffice-gtk3" package should be installed with MATE by default Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: LibreOffice Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: nsleasy(a)hotmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- LibreOffice (6.0) will not perform I/O over GVFS without "libreoffice-gtk3". This package can be installed by the user after a MATE install, but should probably be installed with the desktop environment by default. LibreOffice was installed with MATE, but lacked this component. In testing Leap 15.0 Beta, I was unable to open files over GVFS within MATE. It worked fine after installing libreoffice-gtk3. I was surprise to see such a bleeding edge release of LibreOffice in even a beta version of Leap. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083992] New: libmpg123 segfaults with crafted file
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1083992 Bug ID: 1083992 Summary: libmpg123 segfaults with crafted file Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: aloisio(a)gmx.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- libmpg123 segfaults on damaged (fuzzed) files with part2_3_length == 0 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1083948] VUL-1: CVE-2018-7667: adminer: SSRF via the server parameter
by bugzilla_noreply＠novell.com 05 Mar '18

05 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083948 http://bugzilla.suse.com/show_bug.cgi?id=1083948#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1083948) was mentioned in https://build.opensuse.org/request/show/583083 42.3 / adminer -- You are receiving this mail because: You are on the CC list for the bug.

1 0