June 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1096174] New: Zip Slip vulnerability
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1096174 Bug ID: 1096174 Summary: Zip Slip vulnerability Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: studio(a)anchev.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I am not sure how this types of vulnerabilities should be reported but still I wanted to bring the attention to it as it affects various programs which unzip files: https://snyk.io/research/zip-slip-vulnerability https://snyk.io/blog/zip-slip-vulnerability/ https://github.com/snyk/zip-slip-vulnerability I hope someone can shape and direct this report properly. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1093378] conflicting udev rules completely break USB Serial bridges
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.suse.com/show_bug.cgi?id=1093378 http://bugzilla.suse.com/show_bug.cgi?id=1093378#c18 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fbui(a)suse.com --- Comment #18 from Franck Bui <fbui(a)suse.com> --- Is this really a udev/systemd issue ? This doesn't seem so and in this case can this bug be re-assigned accordingly ? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1090480] New: OpenSUSE Leap 15 redshift causes screen flicker on KDE
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1090480 Bug ID: 1090480 Summary: OpenSUSE Leap 15 redshift causes screen flicker on KDE Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: mobile.harvey(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Comparing two identical deployments of Tumbleweed and Leap 15 Beta with KDE desktop. On each I have installed Redshift and added the Redshift widget to my panel. On Tumbleweed I see the expected behaviour whereby enabling the redshift widget enables Redshift, and vice versa. On Leap 15 however Redshift seems to be already running on boot, and enabling the widget ends up with two instances seemingly running together. The result is the screen will switch between cold and warm white balances every 1-2 seconds. Disabling the widget stops the flickering but Redshift still seems to be running (i.e. my screen changes to warm white balance in the evening). Below are some observations which I believe sum-up the delta between Leap 15 and Tumbleweed. Can Leap 15 be made to work like Tumbleweed? LEAP 15: ========== With widget switched on: nharvey@opensuse-thinkpad:~/.config> ps -ef | grep redshift nharvey 14285 2345 0 12:12 ? 00:00:00 /usr/bin/redshift -t 6500 4000 -b 1 1 -g 1 1 1 nharvey 14371 2206 0 12:14 ? 00:00:00 /usr/bin/redshift nharvey 14381 11475 0 12:14 pts/2 00:00:00 grep --color=auto redshift With widget switched off: nharvey@opensuse-thinkpad:~/.config> ps -ef | grep redshift nharvey 14371 2206 0 12:14 ? 00:00:00 /usr/bin/redshift nharvey 14432 11475 0 12:15 pts/2 00:00:00 grep --color=auto redshift I then disable service: nharvey@opensuse-thinkpad:~/.config> systemctl --user status redshift ● redshift.service - Redshift display colour temperature adjustment Loaded: loaded (/usr/lib/systemd/user/redshift.service; disabled; vendor preset: enabled Active: active (running) since Sun 2018-04-22 11:59:05 BST; 12min ago Docs: http://jonls.dk/redshift/ Main PID: 12118 (redshift) CGroup: /user.slice/user-1000.slice/user(a)1000.service/redshift.service └─12118 /usr/bin/redshift nharvey@opensuse-thinkpad:~/.config> systemctl --user stop redshift nharvey@opensuse-thinkpad:~/.config> systemctl --user status redshift ● redshift.service - Redshift display colour temperature adjustment Loaded: loaded (/usr/lib/systemd/user/redshift.service; disabled; vendor preset: enabled Active: inactive (dead) since Sun 2018-04-22 12:12:35 BST; 6s ago Docs: http://jonls.dk/redshift/ Process: 12118 ExecStart=/usr/bin/redshift (code=exited, status=0/SUCCESS) Main PID: 12118 (code=exited, status=0/SUCCESS) nharvey@opensuse-thinkpad:~/.config> With widget switched on: nharvey@opensuse-thinkpad:~/.config> ps -ef | grep redshift nharvey 14443 2345 0 12:15 ? 00:00:00 /usr/bin/redshift -t 6500 4000 -b 1 1 -g 1 1 1 nharvey 14453 11475 0 12:15 pts/2 00:00:00 grep --color=auto redshift With widget switched off: nharvey@opensuse-thinkpad:~/.config> ps -ef | grep redshift nharvey 14468 11475 0 12:16 pts/2 00:00:00 grep --color=auto redshift Tumbleweed as at 22/04/2018: ============================= With widget switched on: nharvey@opensuse-acer-es1:~> ps -ef | grep redshift nharvey 5968 2148 0 12:11 ? 00:00:00 /usr/bin/redshift -t 6500 4000 -b 1 1 -g 1 1 1 nharvey 6529 6343 0 12:21 pts/0 00:00:00 grep --color=auto redshift With widget switched off: nharvey@opensuse-acer-es1:~> ps -ef | grep redshift nharvey 6541 6343 0 12:21 pts/0 00:00:00 grep --color=auto redshift -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1095041] python3-botocore: :'AWSHTTPSConnection' object has no attribute 'ssl_context'
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.novell.com/show_bug.cgi?id=1095041 http://bugzilla.novell.com/show_bug.cgi?id=1095041#c9 --- Comment #9 from Martin Wilck <martin.wilck(a)suse.com> --- Any progress? Has anyone gone for the backport of the un-vendoring patch set? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1094929] ARCHIVES.gz is missing
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.suse.com/show_bug.cgi?id=1094929 Oliver Kurz <okurz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugzilla.suse.com/sh | |ow_bug.cgi?id=1096154 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1093029] [Build 20180511] openQA test fails in yast2_dns_server - "named.service is not active, cannot reload."
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.suse.com/show_bug.cgi?id=1093029 http://bugzilla.suse.com/show_bug.cgi?id=1093029#c8 Oliver Kurz <okurz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #8 from Oliver Kurz <okurz(a)suse.com> --- Sorry, that does not seem to help: https://openqa.suse.de/tests/1746930#step/yast2_dns_server/37 is the latest SLE15 GMC_C5 build 665.1 failure. Could you please take a look again? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1096145] New: Installation programme cannot mount root partition - no install/upgrade possible
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1096145 Bug ID: 1096145 Summary: Installation programme cannot mount root partition - no install/upgrade possible Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Major Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: uli(a)woodwax.co.nz QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 Build Identifier: Right at the beginning of the upgrade, after inspecting the disk I get the window titled "Partition or System to upgrade" and it shows the root partition. After clicking the "Next" button I get the message "mounting partition". After a while I get the following error message: Error Internal Error. Please report a bug report with logs. Run save-y2logs to get complete logs. Details: Operation not permittet @ rb_sysopen - /mount/etc/resolv.conf Caller: /mounts/mp_0001/user/lib64/ruby/2.5.0/fileutils.rb: 1292: in `initialize' Start the Ruby debugger now to debug the issue? (Experts only) Reproducible: Always Steps to Reproduce: 1. Insert the install DVD 2. Reboot 3. Follow instructions on screen for upgrade Actual Results: I get the error message as described above Expected Results: Root partition is mounted and install/upgrade proceeds -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1096143] New: Cannot mount root partition - install/upgrade fails
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1096143 Bug ID: 1096143 Summary: Cannot mount root partition - install/upgrade fails Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Major Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: uli(a)woodwax.co.nz QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 Build Identifier: Right at the beginning of the install/upgrade, after inspecting the disk I get the window titled "Partition or System to upgrade" and it shows the root partition. After clicking the "Next" button I get the message "mounting partition". After a while I get the following error message: Error Internal Error. Please report a bug report with logs. Run save-y2logs to get complete logs. Details: Operation not permittet @ rb_sysopen - /mount/etc/resolv.conf Caller: /mounts/mp_0001/user/lib64/ruby/2.5.0/fileutils.rb: 1292: in `initialize' Start the Ruby debugger now to debug the issue? (Experts only) Reproducible: Always Steps to Reproduce: 1.insert DVD 2.Reboot 3.Follow on screen instructions Actual Results: Install/upgrade fails Expected Results: Install/upgrade proceeds -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1095169] Packaged Syncthing binary attempts to update itself
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.suse.com/show_bug.cgi?id=1095169 http://bugzilla.suse.com/show_bug.cgi?id=1095169#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2018:1557-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1095169 CVE References: Sources used: openSUSE Leap 15.0 (src): syncthing-0.14.46-lp150.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1095192] OMG! XFCE SPLASH SCREEN BRANDIJNG IS WRONG!
by bugzilla_noreply＠novell.com 06 Jun '18

06 Jun '18

http://bugzilla.suse.com/show_bug.cgi?id=1095192 http://bugzilla.suse.com/show_bug.cgi?id=1095192#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2018:1555-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 1095192 CVE References: Sources used: openSUSE Leap 15.0 (src): xfce4-branding-openSUSE-4.12.0-lp150.5.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0