September 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1042673] New: vsftpd fails to build with openssl-1.1
by bugzilla_noreply＠novell.com 02 Mar '22

02 Mar '22

http://bugzilla.suse.com/show_bug.cgi?id=1042673 Bug ID: 1042673 Summary: vsftpd fails to build with openssl-1.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: peter.simons(a)suse.com Reporter: tchvatal(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1042629 Found By: --- Blocker: --- The package fails to build with openssl-1.1. For more information see the blocker bug. Currently tested in Staging:I https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 1105654] New: mesa-dri-nouveau: Incorrect description when confirming the package license
by bugzilla_noreply＠novell.com 25 Feb '22

25 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1105654 Bug ID: 1105654 Summary: mesa-dri-nouveau: Incorrect description when confirming the package license Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: lgrimmer(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- During the initial installation on my physical system using the openSUSE-Tumbleweed-NET-x86_64-Snapshot20180818-Media.iso image, I receive a popup window with the following title: "Confirm Package License: Mesa-dri-nouveau" The last paragraph of the message that is displayed here (which isn't actually a "license", but rather a warning/disclaimer) reads: 'Please click "Accept" if you accept the risks that may come with the installation of this driver. Choose "Cancel" to prevent installation of the driver and use software emulation instead.' However, the popup window does not provide any buttons with these labels - they are labeled "I Agree" and "I Disagree". I guess the text of that message should probably be updated to reflect this change (and eventually any other package that contains a similar message?). -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1042287] New: [Build 20170601] openQA test fails in enlightenment_first_start
by bugzilla_noreply＠novell.com 25 Feb '22

25 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1042287 Bug ID: 1042287 Summary: [Build 20170601] openQA test fails in enlightenment_first_start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: http://openqa.opensuse.org/tests/413072/modules/enligh tenment_first_start/steps/12 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The description text is missing. ## Observation openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_enlightenment@64bit fails in [enlightenment_first_start](http://openqa.opensuse.org/tests/413072/modules/… ## Reproducible Fails since (at least) Build [20170601](http://openqa.opensuse.org/tests/412884) ## Expected result Last good: [20170529](http://openqa.opensuse.org/tests/411282) (or more recent) ## Further details Always latest result in this scenario: [latest](http://openqa.opensuse.org/tests/latest?machine=64bit&flavor=NET&te… -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1087824] New: Installer picks obsolete mirror
by bugzilla_noreply＠novell.com 24 Feb '22

24 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1087824 Bug ID: 1087824 Summary: Installer picks obsolete mirror Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: jdelvare(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- I am trying to install Tumbleweed/i586 from France. download.opensuse.org redirects me to mirrors.standaloneinstaller.com which is out of date: Index of /opensuse-stable/tumbleweed/repo/oss/boot/i386 Name Last modified Size ---------------------------------------------------------------------- Parent Directory cracklib-dict-full.rpm 2017-05-27 18:14 3.1M yast2-trans-de.rpm 2017-10-12 01:59 643K yast2-trans-en_US.rpm 2017-10-12 01:59 95K This results in an error message: Digest verification failed. Checking for the list of openSUSE mirror sites (https://mirrors.opensuse.org/list/tumbleweed.html) this mirror is not listed as hosting any Tumbleweed contents. According to the list, the only mirror in France for Tumbleweed is fr2.rpmfind.net. If I manually select this mirror at the beginning of the installation, the error does not happen. download.opensuse.org should only redirect Tumbleweed users to mirrors with up-to-date Tumbleweed contents. -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1073845] New: python-attrs andpython-pluggy form a build cycle together
by bugzilla_noreply＠novell.com 18 Feb '22

18 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1073845 Bug ID: 1073845 Summary: python-attrs andpython-pluggy form a build cycle together Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The two packages python-attrs and python-pluggy cause trouble for bootstrapping a distro, since they depend on each other to build -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1036979] New: python2-qt4 posttrans fails
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1036979 Bug ID: 1036979 Summary: python2-qt4 posttrans fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: mrueckert(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Output of python2-qt4-4.12-3.1.x86_64.rpm %posttrans script: /var/adm/update-scripts/posttransLsYXyp/python2-qt4-4.12-3.1.x86_64.rpmpbKPGQ: line 6: syntax error: unexpected end of file Warning: python2-qt4-4.12-3.1.x86_64.rpm %posttrans script failed (returned 2) -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1017682] New: VUL-0: CVE-2016-10091: UnRTF: stack-based buffer overflows in cmd_* functions
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1017682 Bug ID: 1017682 Summary: VUL-0: CVE-2016-10091: UnRTF: stack-based buffer overflows in cmd_* functions Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE3 Assignee: anixx(a)opensuse.org Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2016/q4/786 =============================================== Hi As reported by "Skylake" in the Debian bugtracker[1], UnRTF is prone to stack-based buffer overflows in various cmd_* functions. I've found a Stack-based buffer overflow in unrtf 0.21.9, which affects three functions including: cmd_expand, cmd_emboss and cmd_engrave. # convert.c static int cmd_expand (Word *w, int align, char has_param, int param) { char str[10]; if (has_param) { sprintf(str, "%d", param/4); // Overflow, 9-digit negative value triggers the bug if (!param) attr_pop(ATTR_EXPAND); else attr_push(ATTR_EXPAND, str); } return FALSE; } Apparently writing a negative integer to the buffer can trigger the overflow (Minus sign needs an extra byte). * How to trigger the bug * $ echo "\expnd-400000000" > poc $ unrtf poc A preliminary patch can be found in the Debian bugtracker, but it is not yet finalized. Could you assign (a?) CVE as needed? Does one CVE suffice here, since same class of issue in various cmd_* functions from one reporter? Whilest, at least in Debian, unrtf is compiled with FORTIFY_SOURCE=2 and the buffer overflows are detected, at least if any exposed application uses unrtf to process untrusted input, this might lead to a denial-of-service. [1] https://bugs.debian.org/849705 Regards, Salvatore =============================================== https://software.opensuse.org/package/unrtf TW: KDE:KDE3: 0.21.5 42.2: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 42.1: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 13.2: KDE:Extra: 0.21.5 and KDE:KDE3: 0.21.8 -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 906594] New: Apper showing wrong package description
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.opensuse.org/show_bug.cgi?id=906594 Bug ID: 906594 Summary: Apper showing wrong package description Classification: openSUSE Product: openSUSE Factory Version: NO 13.2 BUGS!! Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE4 Applications Assignee: kde-maintainers(a)suse.de Reporter: erwin.vandevelde(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Apper shows the package's description when clicking on it, but only for the first package you click on this is done correctly. Apper shows the same description again and again for each other package you click on. Versions: apper 0.9.1-2.1 -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1071941] New: pip installs packages in /usr/lib instead of /usr/local/lib
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.suse.com/show_bug.cgi?id=1071941 Bug ID: 1071941 Summary: pip installs packages in /usr/lib instead of /usr/local/lib Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: markos.chandras(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello, /usr/local is meant to be used for packages installed outside of package manager. Such case is 'pip' in which you can install additional python packages. The problem is that openSUSE pip is installing packages in /usr/lib which overrides python packages installed by zypper For example consider the python2-hpack installed using zypper python2-hpack-3.0.0-1.1.noarch it is installed in /usr/lib/python2.7/site-packages/hpack /usr/lib/python2.7/site-packages/hpack-3.0.0-py2.7.egg-info /usr/lib/python2.7/site-packages/hpack-3.0.0-py2.7.egg-info/PKG-INFO ... etc now installing hpack from pip results to > pip2.7 install -I hpack > pip2.7 show hpack|grep Location Location: /usr/lib/python2.7/site-packages As you can see, pip puts the wheel package into the same location that zypper installed it which effectively overwrites it. Consider also the opposite situation where you first install from pip and then from zypper. zypper will overwrite what you had installed from pip. This is quite problematic when you want zypper and pip packages to happily co-exist for development and testing purposes. This behavior is different compared to other distros where they put pip packages in /usr/local in order to keep them separate from the python packages installed by the package manager. For example, here is the same package on Ubuntu Xenial installed with apt-get $ dpkg -L python-hpack /. /usr /usr/lib /usr/lib/python2.7 /usr/lib/python2.7/dist-packages /usr/lib/python2.7/dist-packages/hpack-2.1.0.egg-info ... etc and the one installed by pip > sudo pip2.7 install -I hpack > sudo pip2.7 show hpack|grep Location Location: /usr/local/lib/python2.7/dist-packages As you see both packages can exist on the same system. CentOS also puts pip packages in /usr/local. -- You are receiving this mail because: You are on the CC list for the bug.

2 16

[Bug 1040164] New: Missing link to libpython3.6.so
by bugzilla_noreply＠novell.com 17 Feb '22

17 Feb '22

http://bugzilla.suse.com/show_bug.cgi?id=1040164 Bug ID: 1040164 Summary: Missing link to libpython3.6.so Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: asn(a)cryptomilk.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When python applications look for the python library I often do it using: python3 Python 3.6.1 (default, Mar 23 2017, 13:04:44) [GCC] on linux Type "help", "copyright", "credits" or "license" for more information. >>> from distutils import sysconfig >>> sysconfig.get_python_lib(standard_lib=True) '/usr/lib/python3.6' >>> sysconfig.get_config_var('LIBPL') '/usr/lib64/python3.6/config-3.6m-x86_64-linux-gnu' >>> For this case there is a symlink in python2: /usr/lib64/python2.7/config/libpython2.7.so -> ../../libpython2.7.so This symlink doesn't exist for python3. ll /usr/lib64/python3.6/config-3.6m-x86_64-linux-gnu total 156 -rw-r--r-- 1 root root 68870 Mar 31 16:02 Makefile -rw-r--r-- 1 root root 15296 Mar 31 16:02 Setup -rw-r--r-- 1 root root 327 Mar 31 16:02 Setup.config -rw-r--r-- 1 root root 41 Mar 31 16:02 Setup.local -rw-r--r-- 1 root root 3302 Mar 31 16:02 config.c -rw-r--r-- 1 root root 1621 Mar 31 16:02 config.c.in -rw-r--r-- 1 root root 7122 Mar 31 16:02 install-sh -rw-r--r-- 1 root root 7521 Mar 31 16:02 makesetup -rw-r--r-- 1 root root 2036 Mar 31 16:02 python-config.py -rw-r--r-- 1 root root 32928 Mar 31 16:02 python.o Please add the symlink to libpypthon3.6.so. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

2 32