July 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1054592] VUL-0: CVE-2017-12956: exiv2: There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() of exiv2
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1054592 http://bugzilla.suse.com/show_bug.cgi?id=1054592#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:1882-1: An update that fixes 15 vulnerabilities is now available. Category: security (moderate) Bug References: 1048883,1050257,1051188,1054590,1054592,1054593,1060995,1060996,1061000,1061023 CVE References: CVE-2017-11337,CVE-2017-11338,CVE-2017-11339,CVE-2017-11340,CVE-2017-11553,CVE-2017-11591,CVE-2017-11592,CVE-2017-11683,CVE-2017-12955,CVE-2017-12956,CVE-2017-12957,CVE-2017-14859,CVE-2017-14860,CVE-2017-14862,CVE-2017-14864 Sources used: SUSE Linux Enterprise Module for Desktop Applications 15 (src): exiv2-0.26-6.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1054590] VUL-0: CVE-2017-12957: exiv2: There is a heap-buffer-overflow in the software exiv2 which is triggered in Exiv2::Image::io function.
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1054590 http://bugzilla.suse.com/show_bug.cgi?id=1054590#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:1882-1: An update that fixes 15 vulnerabilities is now available. Category: security (moderate) Bug References: 1048883,1050257,1051188,1054590,1054592,1054593,1060995,1060996,1061000,1061023 CVE References: CVE-2017-11337,CVE-2017-11338,CVE-2017-11339,CVE-2017-11340,CVE-2017-11553,CVE-2017-11591,CVE-2017-11592,CVE-2017-11683,CVE-2017-12955,CVE-2017-12956,CVE-2017-12957,CVE-2017-14859,CVE-2017-14860,CVE-2017-14862,CVE-2017-14864 Sources used: SUSE Linux Enterprise Module for Desktop Applications 15 (src): exiv2-0.26-6.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1048883] VUL-1: CVE-2017-11336, CVE-2017-11337, CVE-2017-11338, CVE-2017-11339, CVE-2017-11340: exiv2: Multiple issues
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1048883 http://bugzilla.suse.com/show_bug.cgi?id=1048883#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2018:1882-1: An update that fixes 15 vulnerabilities is now available. Category: security (moderate) Bug References: 1048883,1050257,1051188,1054590,1054592,1054593,1060995,1060996,1061000,1061023 CVE References: CVE-2017-11337,CVE-2017-11338,CVE-2017-11339,CVE-2017-11340,CVE-2017-11553,CVE-2017-11591,CVE-2017-11592,CVE-2017-11683,CVE-2017-12955,CVE-2017-12956,CVE-2017-12957,CVE-2017-14859,CVE-2017-14860,CVE-2017-14862,CVE-2017-14864 Sources used: SUSE Linux Enterprise Module for Desktop Applications 15 (src): exiv2-0.26-6.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099697] gvncviewer segfaults if it cannot connect due to SUSE firewall
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1099697 http://bugzilla.suse.com/show_bug.cgi?id=1099697#c6 Sebastian Parschauer <sebastian.parschauer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #6 from Sebastian Parschauer <sebastian.parschauer(a)suse.com> --- Did it myself. Closing as FIXED - temporary fix package created. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099104] [Build 20180625] YaST fails to copy ssh keys to new system
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1099104 http://bugzilla.suse.com/show_bug.cgi?id=1099104#c8 Knut Alejandro Anderssen González <knut.anderssen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #8 from Knut Alejandro Anderssen González <knut.anderssen(a)suse.com> --- This bug will be fixed in yat2-4.1.5 The corresponding SR is https://build.opensuse.org/request/show/620640 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1100161] New: mount.cifs cant mount windows XP share
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1100161 Bug ID: 1100161 Summary: mount.cifs cant mount windows XP share Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: virex(a)mail.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- trying command mount //10.150.150.56/Arch /mnt -t cifs -o user=user,pass=password mount error(112): Host is down but through pcman smb://10.150.150.56/Arch with user=user and pass=password work perfectly Resul of gvfs virex@lnxvrx53:/run/user/1000/gvfs> ls -la итого 0 dr-x------ 4 virex users 0 июн 21 15:18 . drwx------ 11 virex users 340 июл 4 17:35 .. drwx------ 1 virex users 0 июл 2 07:54 smb-share:server=10.150.150.56,share=$$$$ drwx------ 1 virex users 0 июл 5 08:40 smb-share:server=10.150.150.56,share=arch -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1099697] gvncviewer segfaults if it cannot connect due to SUSE firewall
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1099697 http://bugzilla.suse.com/show_bug.cgi?id=1099697#c5 --- Comment #5 from Sebastian Parschauer <sebastian.parschauer(a)suse.com> --- Thanks, works for me this way besides that patch 1 and 2 had to be swapped in order. My temporary fix: > https://build.opensuse.org/package/show/home:sparschauer:branches:openSUSE:… Now I get: > Error: Unable to connect to mytestserver:5901: Unknown problem > Failed to connect to server This is fine for me as it can be easily assumed that there is a firewall issue as it takes quite some time until the error message comes back. @Felix: Please don't forget to let maint-coord tag the SLE bug for maintenance. Feel free to close this with WORKSFORME then. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099886] snapperd segfault in destructor
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1099886 http://bugzilla.suse.com/show_bug.cgi?id=1099886#c8 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(jnelson-suse@jamp | |oni.net) --- Comment #8 from Stefan Hundhammer <shundhammer(a)suse.com> --- As far as I can tell, this is the message that should have been logged: https://github.com/openSUSE/snapper/blob/master/snapper/Snapper.cc#L136 There is nothing fancy about it; there are no C++ objects involved anywhere in the logging logic of snapper that might be destroyed in an unfortunate order. AFAICS, it's all static functions that don't go away because an object is destroyed. Depending on command line parameters, snapperd either logs to stdout (if started with -s or --stdout), or it uses the default logger which should log to /var/log/snapper.log . https://github.com/openSUSE/snapper/blob/master/snapper/Logger.cc#L138 Can you check if you see messages in /var/log/snapper.log, and if yes, attach that file? Maybe this gives more insights. Also, please check what exact versions of snapper you have on your system: sudo rpm -qa | grep snapper -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1100153] yast2-dns-server does not recognize firewalld zones - uses public
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1100153 http://bugzilla.suse.com/show_bug.cgi?id=1100153#c1 Knut Alejandro Anderssen González <knut.anderssen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chevy.stroker(a)yahoo.com, | |knut.anderssen(a)suse.com Flags| |needinfo?(chevy.stroker@yah | |oo.com) --- Comment #1 from Knut Alejandro Anderssen González <knut.anderssen(a)suse.com> --- I will try to reproduce it, although it would be nice to have YaST logs as described here (https://en.opensuse.org/openSUSE:Report_a_YaST_bug) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099886] snapperd segfault in destructor
by bugzilla_noreply＠novell.com 05 Jul '18

05 Jul '18

http://bugzilla.suse.com/show_bug.cgi?id=1099886 http://bugzilla.suse.com/show_bug.cgi?id=1099886#c7 --- Comment #7 from Stefan Hundhammer <shundhammer(a)suse.com> --- It can't be one of those char const *; they are all constants generated by the compiler from __FILE__ and __FUNCTION__: https://github.com/openSUSE/snapper/blob/master/snapper/Log.h#L45 -- You are receiving this mail because: You are on the CC list for the bug.

1 0