May 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1091345] VUL-0: CVE-2018-10528: libraw: There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1091345 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:8044:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1017558] Cannot view timestamp of read-only snapshots in GRUB as names truncated
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1017558 http://bugzilla.suse.com/show_bug.cgi?id=1017558#c5 --- Comment #5 from Oliver Kurz <okurz(a)suse.com> --- See http://build.opensuse.org/request/show/602949 for a proposed workaround by reducing the length of snapper bootmenu entries although I do not consider this a fix but a workaround. For a real fix I guess the grub theme should be adjusted to use the available screen space to show all text -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091322] have choice for pkgconfig(enchant): enchant-1-devel enchant-devel
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091322 http://bugzilla.opensuse.org/show_bug.cgi?id=1091322#c2 --- Comment #2 from Max Lin <mlin(a)suse.com> --- Leap 15.0 only have one enchant package, and the error looks weird to me as the two candidates are enchant-devel@SUSE:SLE-15:GA/SLE-Module-Desktop-Applications and enchant-1-devel@openSUSE:Factory/standard, what is your OBS project url can seen this issue? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091601] New: VUL-0: CVE-2018-9060: R-base: local buffer overflow in GUI preferences
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091601 Bug ID: 1091601 Summary: VUL-0: CVE-2018-9060: R-base: local buffer overflow in GUI preferences Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/204810/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1573312 R 3.4.4 suffers from a local buffer overflow that allows code execution. References: https://bugzilla.redhat.com/show_bug.cgi?id=1573312 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-9060 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-9060.html http://www.cvedetails.com/cve/CVE-2018-9060/ https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-9060 https://www.exploit-db.com/exploits/44516/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 927677] some usb sticks require root password to mount
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.suse.com/show_bug.cgi?id=927677 http://bugzilla.suse.com/show_bug.cgi?id=927677#c46 Thomas Blume <thomas.blume(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(p1037905(a)gmail.co | |m) --- Comment #46 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Pal Korossy from comment #45) > I still have this issue on OpenSUSE Leap 42.3 Please provide the information requested in comment#38 and comment#41 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091292] New: [Factory] Steam| .local/share/Steam/ubuntu12_32/steam: symbol lookup error: /usr/lib/libxcb-dri3.so.0: undefined symbol: xcb_send_request_with_fds
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091292 Bug ID: 1091292 Summary: [Factory] Steam| .local/share/Steam/ubuntu12_32/steam: symbol lookup error: /usr/lib/libxcb-dri3.so.0: undefined symbol: xcb_send_request_with_fds Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Factory Status: NEW Severity: Critical Priority: P5 - None Component: X.Org Assignee: xorg-maintainer-bugs(a)forge.provo.novell.com Reporter: jason.mours(a)verizon.net QA Contact: xorg-maintainer-bugs(a)forge.provo.novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:59.0) Gecko/20100101 Firefox/59.0 Build Identifier: Had problems with Steam in tumbleweed. Went to http://download.opensuse.org/repositories/openSUSE:/Factory:/NonFree/standa… to try something else. It looks the same. I'm getting the following output crying undefined symbol. Repairing installation, linking /home/juxtatux/.steam/steam to /home/juxtatux/.local/share/Steam Running Steam on opensuse-tumbleweed 20180425 64-bit STEAM_RUNTIME is enabled automatically Installing breakpad exception handler for appid(steam)/version(0) /home/juxtatux/.local/share/Steam/ubuntu12_32/steam: symbol lookup error: /usr/lib/libxcb-dri3.so.0: undefined symbol: xcb_send_request_with_fds /home/juxtatux/.local/share/Steam/steam.sh: line 444: no match: ssfn* Thanks Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1051353] Chromium cannot be set as default browser in Plasma
by bugzilla_noreply＠novell.com 02 May '18

02 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1051353 http://bugzilla.suse.com/show_bug.cgi?id=1051353#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1051353) was mentioned in https://build.opensuse.org/request/show/602896 42.3 / xdg-utils -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1059075] New: -fstack-clash-protection writes beyond array bounds
by bugzilla_noreply＠novell.com 01 May '18

01 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1059075 Bug ID: 1059075 Summary: -fstack-clash-protection writes beyond array bounds Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: rguenther(a)suse.com Reporter: schwab(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When allocating a zero-length array with alloca or as a VLA the code produced by -fstack-clash-protection accesses the array beyond bounds. The failure can best be seen on armv7 (or targets without their own probe_stack insn) where a stack probe is destructive, and where it breaks glibc. https://build.opensuse.org/package/live_build_log/Base:System/glibc/openSUS… -- You are receiving this mail because: You are on the CC list for the bug.

1 39

[Bug 1091585] New: Error running GRUB setup in YAST
by bugzilla_noreply＠novell.com 01 May '18

01 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091585 Bug ID: 1091585 Summary: Error running GRUB setup in YAST Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: akontsevich(a)gmail.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 768758 --> http://bugzilla.opensuse.org/attachment.cgi?id=768758&action=edit y2log Failed with 'incompatible character encodings: ASCII-8BIT and UTF-8' (Encoding::CompatibilityError). Details: incompatible character encodings: ASCII-8BIT and UTF-8. Log attached. Urgent cause it related to other bug: USB does not work on VIA VL805 chipset. Need to try some kernel parameters to fix. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091322] have choice for pkgconfig(enchant): enchant-1-devel enchant-devel
by bugzilla_noreply＠novell.com 01 May '18

01 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091322 Ludwig Nussel <lnussel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium CC| |lnussel(a)suse.com Assignee|lnussel(a)suse.com |mlin(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0