June 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1077154] New: VUL-0: CVE-2018-1000003: pdns-recursor: input validation bugs in DNSSEC validators components
by bugzilla_noreply＠novell.com 29 Mar '22

29 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1077154 Bug ID: 1077154 Summary: VUL-0: CVE-2018-1000003: pdns-recursor: input validation bugs in DNSSEC validators components Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/198758/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: amajer(a)suse.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-1000003 Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000003 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1000003.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-201… -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1099563] New: Texlive/XeTeX crashes when processing specific PNGs
by bugzilla_noreply＠novell.com 17 Mar '22

17 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1099563 Bug ID: 1099563 Summary: Texlive/XeTeX crashes when processing specific PNGs Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: stefan.bruens(a)rwth-aachen.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- XeTex crashes or embeds random data due to out-of-bounds accesses when processing PNG images with no more than 16 colors and transparency (1/2/4 bit palette). This has been reported as upstream issue #151, https://sourceforge.net/p/xetex/bugs/151/ The bug is fixed in TL 2018. This causes e.g. building of the latest KICAD documentation to fail. Fixed version is available here: https://build.opensuse.org/package/show/home:StefanBruens:branches:SUSE:SLE… -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 924591] New: Apache2 doesn't start with faulty config, prob from yast
by bugzilla_noreply＠novell.com 14 Mar '22

14 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=924591 Bug ID: 924591 Summary: Apache2 doesn't start with faulty config, prob from yast Classification: openSUSE Product: openSUSE Factory Version: 201503* Hardware: armv7 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: volker3204(a)paradise.net.nz QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Running yast http-server module, making basically no changes to get basic config. No vhosts, ssl, etc. Btw a server name can't be entered, the value is going to /dev/null. Starting apache gives: Mar 27 14:37:35 cubie start_apache2[9361]: Module "authz_default" is not installed, ignoring. Mar 27 14:37:35 cubie start_apache2[9361]: Check the APACHE_MODULES setting in /etc/sysconfig/apache2. Mar 27 14:37:35 cubie start_apache2[9361]: AH00526: Syntax error on line 10 of /etc/apache2/mod_status.conf: Mar 27 14:37:35 cubie start_apache2[9361]: Invalid command 'Require', perhaps misspelled or defined by a module not included in the server configuration Mar 27 14:37:36 cubie start_apache2[9378]: Module "authz_default" is not installed, ignoring. Mar 27 14:37:36 cubie start_apache2[9378]: Check the APACHE_MODULES setting in /etc/sysconfig/apache2. Mar 27 14:37:36 cubie start_apache2[9378]: AH00526: Syntax error on line 10 of /etc/apache2/mod_status.conf: Mar 27 14:37:36 cubie start_apache2[9378]: Invalid command 'Require', perhaps misspelled or defined by a module not included in the server configuration Mar 27 14:37:36 cubie systemd[1]: Failed to start The Apache Webserver. In the yast http-server server-modules tab authz_default is listed with a description of "unknown", i.e. none. The module does not exist on disk! Editing /etc/sysconfig/apache2 adding authz_core to APACHE_MODULES makes authz_core also be shown with a description of "unknown". systemctl restart apache2 is now successful. This bnc:835484#6 basically says yast http-server module is foobared, so it's probably best to uninstall it. -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 918705] New: alpine locking failure (against procmail) leads to mail corruption
by bugzilla_noreply＠novell.com 11 Mar '22

11 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=918705 Bug ID: 918705 Summary: alpine locking failure (against procmail) leads to mail corruption Classification: openSUSE Product: openSUSE Factory Version: 201502* Hardware: x86-64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: gp(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This is something I started to see a bit ago, and since it now happened twice today I figured I'd report it. When I obtain mail via fetchmail, using procmail as the delivery agent, occasionally I get corrupted mails like the following (in mbox format): ==== snip ==== >From gp Thu Feb 19 18:56:54 2015 Mime-Version: 1.0 Date: Thu, 19 Feb 2015 18:56:00 +0100 Subject: AW: Re: Your help needed: Fwd: Comment opportunity: Software Status: RO X-Status: X-Keywords: X-UID: 9310 definedstorage Subject: AW: Re: Your help needed: Fwd: Comment opportunity: Software definedstorage References: <54E302D90200006F00158C8B(a)suse.com> <54E2D72A0200002B000A1B55(a)suse.com> <54E339FA0200006F00158DBD(a)suse.com> <54E2D7DE0200002B000A1B68(a)suse.com> <alpine.LSU.2.11.1502191739290.2252(a)ghan.fvgr> In-Reply-To: <alpine.LSU.2.11.1502191739290.2252(a)ghan.fvgr> Message-ID: <54E623B70200006F001594A6(a)suse.com> From: ... To: "Gerald Pfeifer" <gp(a)suse.com> ==== snap ==== This does not happen daily, and I believe it happens especially when I have been offline for several hours and a few dozen e-mails are delivered at once (though this specific case was not that). The same configuration had been working for years without ever showing this problem, and it looks like looking on the Alpine side (or procmail, though less likely I guess, since it essentially only reads :0 INBOX ) -- You are receiving this mail because: You are on the CC list for the bug.

2 7

[Bug 1038403] New: NetworkManager: Usage of systemctrl enable should be changed to %sytemd_add_pre/post
by bugzilla_noreply＠novell.com 09 Mar '22

09 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1038403 Bug ID: 1038403 Summary: NetworkManager: Usage of systemctrl enable should be changed to %sytemd_add_pre/post Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: sckang(a)suse.com Reporter: behlert(a)suse.com QA Contact: qa-bugs(a)suse.de CC: fcrozat(a)suse.com Found By: --- Blocker: --- "systemctl preset-all" is intended to return service states to a factory state based on presets. But currently we can see breakages in some products due to services that are not following the guidelines as described in https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Enabling_syst… The package NetworkManager was identified to use "systemctl enable" in its spec-file, and it should get replaced by the proper use of %sytemd_add_pre/post and preset. Please check your package, thanks. -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1095747] New: python-wxPython missing libraries
by bugzilla_noreply＠novell.com 08 Mar '22

08 Mar '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1095747 Bug ID: 1095747 Summary: python-wxPython missing libraries Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: petr(a)cervinka.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Libraries are missing and wxPython doesn't work: $ python3 Python 3.6.5 (default, Mar 31 2018, 19:45:04) [GCC] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import wx Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib64/python3.6/site-packages/wx/__init__.py", line 17, in <module> from wx.core import * File "/usr/lib64/python3.6/site-packages/wx/core.py", line 12, in <module> from ._core import * ModuleNotFoundError: No module named 'wx._core' $wxdemo Traceback (most recent call last): File "/usr/bin/wxdemo", line 11, in <module> load_entry_point('wxPython==4.0.1', 'console_scripts', 'wxdemo')() File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 476, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2700, in load_entry_point return ep.load() File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2318, in load return self.resolve() File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2324, in resolve module = __import__(self.module_name, fromlist=['__name__'], level=0) File "/usr/lib64/python3.6/site-packages/wx/__init__.py", line 17, in <module> from wx.core import * File "/usr/lib64/python3.6/site-packages/wx/core.py", line 12, in <module> from ._core import * ModuleNotFoundError: No module named 'wx._core' Libraries are excluded from main package in files section in spec file: %exclude %{python_sitearch}/wx/*.so And put into devel package: %files %{python_files devel} %defattr(-,root,root) %{python_sitearch}/wx/*.so -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1096321] New: AutoYaST auth-client warning
by bugzilla_noreply＠novell.com 04 Mar '22

04 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1096321 Bug ID: 1096321 Summary: AutoYaST auth-client warning Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: jmader2(a)gmu.edu QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On screen during the autoinstallation, some text was blocked with startup messages, _key?' for "yes":String Caller: /usr/share/YaST2/lib/authui/autoclient.rb:46:in `import` Could be this, if sssd.has_key?('listentry') And in my autoinst.xml file I have, <auth-client> <sssd>yes</sssd> <sssd_conf> ... </sssd_conf> </auth-client> -- You are receiving this mail because: You are on the CC list for the bug.

2 8

[Bug 1042673] New: vsftpd fails to build with openssl-1.1
by bugzilla_noreply＠novell.com 02 Mar '22

02 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1042673 Bug ID: 1042673 Summary: vsftpd fails to build with openssl-1.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: peter.simons(a)suse.com Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1042629 Found By: --- Blocker: --- The package fails to build with openssl-1.1. For more information see the blocker bug. Currently tested in Staging:I https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 1042287] New: [Build 20170601] openQA test fails in enlightenment_first_start
by bugzilla_noreply＠novell.com 25 Feb '22

25 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1042287 Bug ID: 1042287 Summary: [Build 20170601] openQA test fails in enlightenment_first_start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: http://openqa.opensuse.org/tests/413072/modules/enligh tenment_first_start/steps/12 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The description text is missing. ## Observation openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_enlightenment@64bit fails in [enlightenment_first_start](http://openqa.opensuse.org/tests/413072/modules/… ## Reproducible Fails since (at least) Build [20170601](http://openqa.opensuse.org/tests/412884) ## Expected result Last good: [20170529](http://openqa.opensuse.org/tests/411282) (or more recent) ## Further details Always latest result in this scenario: [latest](http://openqa.opensuse.org/tests/latest?machine=64bit&flavor=NET&te… -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1087824] New: Installer picks obsolete mirror
by bugzilla_noreply＠novell.com 24 Feb '22

24 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1087824 Bug ID: 1087824 Summary: Installer picks obsolete mirror Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: jdelvare(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- I am trying to install Tumbleweed/i586 from France. download.opensuse.org redirects me to mirrors.standaloneinstaller.com which is out of date: Index of /opensuse-stable/tumbleweed/repo/oss/boot/i386 Name Last modified Size ---------------------------------------------------------------------- Parent Directory cracklib-dict-full.rpm 2017-05-27 18:14 3.1M yast2-trans-de.rpm 2017-10-12 01:59 643K yast2-trans-en_US.rpm 2017-10-12 01:59 95K This results in an error message: Digest verification failed. Checking for the list of openSUSE mirror sites (https://mirrors.opensuse.org/list/tumbleweed.html) this mirror is not listed as hosting any Tumbleweed contents. According to the list, the only mirror in France for Tumbleweed is fr2.rpmfind.net. If I manually select this mirror at the beginning of the installation, the error does not happen. download.opensuse.org should only redirect Tumbleweed users to mirrors with up-to-date Tumbleweed contents. -- You are receiving this mail because: You are on the CC list for the bug.

2 9