April 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1087877] New: VUL-1: CVE-2018-9144: exiv2: Out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp leading to DoS or information disclosure
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1087877 Bug ID: 1087877 Summary: VUL-1: CVE-2018-9144: exiv2: Out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp leading to DoS or information disclosure Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/202983/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: dmueller(a)suse.com Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- Created attachment 765757 --> http://bugzilla.opensuse.org/attachment.cgi?id=765757&action=edit Reproducer CVE-2018-9144 In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure. Reproducer: valgrind exiv2 6-binaryToString-outbound-read-1 Factory only. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-9144 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-9144.html http://www.cvedetails.com/cve/CVE-2018-9144/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1017461] btrfs balance renders system unresponsive and eventually even kills WiFi when quota is enabled
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1017461 Oliver Kurz <okurz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1087873 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1041428] [TRACKERBUG] Initial update for os-autoinst
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1041428 http://bugzilla.suse.com/show_bug.cgi?id=1041428#c2 Jürgen Löhel <jloehel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #2 from Jürgen Löhel <jloehel(a)suse.com> --- I will close this bug. The update has been already shipped. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1085832] Installation: Setting locale fails
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1085832 http://bugzilla.suse.com/show_bug.cgi?id=1085832#c17 --- Comment #17 from Arvin Schnell <aschnell(a)suse.com> --- So the system is fine if the user gets such a bunch of messages during login. That is indeed remarkable. And I never had question concerning what is broken. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1087826] New: Wrong output in the CLI of yast2-nfs-client
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1087826 Bug ID: 1087826 Summary: Wrong output in the CLI of yast2-nfs-client Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: ancor(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- When using the command line interface of yast2-nfs-client to list the configured NFS mounts, the column "options" does not display the mount options. Instead, it displays the content of the vfstype field. By the way, vfstype should not longer contain any value different to "nfs", so it makes no sense to display it and the usage of any other value should be discouraged. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 793368] The autofs service requires LDAP even if no LDAP is wanted
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=793368 http://bugzilla.suse.com/show_bug.cgi?id=793368#c9 Bugzilla Account Maintenance <autobugz> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|ckornacker(a)suse.com |yast2-maintainers(a)suse.de Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WONTFIX --- Comment #9 from Stefan Hundhammer <shundhammer(a)suse.com> --- Since this has been idle for 6 years (!!) and the maintainer of that package obviously left the company, this is finally becoming WONTFIX as already suggested long ago. See also comment #5 and comment #6. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1085005] geturls can't deal with $releasever
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1085005 http://bugzilla.suse.com/show_bug.cgi?id=1085005#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1085005) was mentioned in https://build.opensuse.org/request/show/593116 Factory:Live / livecd-openSUSE -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1087863] New: 7z fails to extract .rar archives
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1087863 Bug ID: 1087863 Summary: 7z fails to extract .rar archives Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: cfeck(a)kde.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Steps to reproduce: - 7z x test.rar Expected result: - test.blend extracted Actual result: - ERROR: Unsupported Method Workaround: - unrar x test.rar (from non-oss repo) test.rar downloadable here: https://developer.blender.org/F128628 but also fails with any other .rar I tried. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1085832] Installation: Setting locale fails
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1085832 http://bugzilla.suse.com/show_bug.cgi?id=1085832#c16 --- Comment #16 from Thorsten Kukuk <kukuk(a)suse.com> --- (In reply to Arvin Schnell from comment #14) > Created attachment 765747 [details] > login on SLE15 with borken locale settings Lot of warnings, no error. Can you login? YES! Can you call snapper: NO! Any more questions which behavior is broken? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1085832] Installation: Setting locale fails
by bugzilla_noreply＠novell.com 03 Apr '18

03 Apr '18

http://bugzilla.suse.com/show_bug.cgi?id=1085832 http://bugzilla.suse.com/show_bug.cgi?id=1085832#c15 --- Comment #15 from Arvin Schnell <aschnell(a)suse.com> --- (In reply to Thorsten Kukuk from comment #12) > As already written, use the following example to show that the current > snapper behavior is wrong: > > Use a system with german locale. > ssh to a system without german locale. > locale will show you de_DE.UTF-8 as language, but that is not installed. > zypper continues to work fine. > All other tools I tried continues to work fine. > Of course all above tools will use english as locale, but they still work > without error message. > But snapper tells me that the system is broken and refuses to work. The login scripts should check the locale. -- You are receiving this mail because: You are on the CC list for the bug.

1 0