September 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1104415] New: zypper does not consider packages that are also applications as unneeded if they are automatically installed
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1104415 Bug ID: 1104415 Summary: zypper does not consider packages that are also applications as unneeded if they are automatically installed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)forge.provo.novell.com Reporter: equeim(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:61.0) Gecko/20100101 Firefox/61.0 Build Identifier: If package is also an application (as if in "zypper if -t application"), zypper does not consider it as unneeded if it is installed automatically (as dependency) and present in /var/lib/zypp/AutoInstalled. "zypper pa --unneeded" doesn't show these packages, and "zypper rm --clean-deps" on packages that depend on such packages doesn't remove them. Reproducible: Always Steps to Reproduce: 1. "zypper in xfce4-screenshooter" 2. "echo xfce4-screenshooter >> /var/lib/zypp/AutoInstalled" 3. "zypper pa --unneeded" Actual Results: "zypper pa --unneded" doesn't find any unneeded packages. Expected Results: "zypper pa --unneded" should show xfce4-screenshooter. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1107593] New: VUL-1: CVE-2018-16648: In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allowsremote attackers to cause a denial of service (segmentation fault) via a craftedpdf file. This is caused by a pdf/pdf-device.c pdf_dev_alph
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1107593 Bug ID: 1107593 Summary: VUL-1: CVE-2018-16648: In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allowsremote attackers to cause a denial of service (segmentation fault) via a craftedpdf file. This is caused by a pdf/pdf-device.c pdf_dev_alph Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/213904/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: idonmez(a)suse.com Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de CC: gber(a)opensuse.org, idonmez(a)suse.com Found By: Security Response Team Blocker: --- CVE-2018-16648 In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-device.c pdf_dev_alpha array-index underflow. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16648 http://www.cvedetails.com/cve/CVE-2018-16648/ https://bugs.ghostscript.com/show_bug.cgi?id=699685 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1107623] New: os-prober: calls Leap just "openSUSE"
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1107623 Bug ID: 1107623 Summary: os-prober: calls Leap just "openSUSE" Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: mchang(a)suse.com Reporter: lnussel(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- # os-prober /run/lvm/lvmetad.socket: connect failed: Datei oder Verzeichnis nicht gefunden WARNING: Failed to connect to lvmetad. Falling back to internal scanning. /dev/sda6:openSUSE 42.3 (x86_64):SUSE:linux:btrfs:UUID=96e26688-d4b6-474b-966a-73e38cd8912d:subvol=@/.snapshots/1/snapshot => should be "openSUSE Leap 42.2" rather than "openSUSE 42.3". -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1042218] VUL-0: CVE-2017-6512: perl-File-Path: rmtree/remove_tree race condition
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

1 0

[Bug 1106774] yast2-storage-ng: autoinst_partition_planner reuses partitions by partition_nr no matter what disk they are on
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1106774 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | maint:planned:update -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107403] New: libstorage-ng uses setenv between fork and exec
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1107403 Bug ID: 1107403 Summary: libstorage-ng uses setenv between fork and exec Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: aschnell(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- libstorage-ng uses setenv between fork and exec. This is not correct, see man-pages fork(2) and signal-safety(7). The code has been that way already in libstorage for many years. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1107442] build dependency gn required for Chromium update
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1107442 http://bugzilla.suse.com/show_bug.cgi?id=1107442#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-OU-2018:2644-1: An update that has one optional fix can now be installed. Category: optional (moderate) Bug References: 1107442 CVE References: Sources used: openSUSE Leap 42.3 (src): gn-0.1463-2.1 openSUSE Leap 15.0 (src): gn-0.1463-lp150.2.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107442] build dependency gn required for Chromium update
by bugzilla_noreply＠novell.com 07 Sep '18

07 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1107442 http://bugzilla.suse.com/show_bug.cgi?id=1107442#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-OU-2018:2643-1: An update that has one optional fix can now be installed. Category: optional (moderate) Bug References: 1107442 CVE References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): gn-0.1463-2.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106577] amdgpu/Carrizo: With kernel greater than 4.18.0, it causes X to consume 100% of CPU and crashes system hard
by bugzilla_noreply＠novell.com 06 Sep '18

06 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1106577 http://bugzilla.suse.com/show_bug.cgi?id=1106577#c11 --- Comment #11 from Joe Morris <joe_morris(a)ntm.org> --- Created attachment 782269 --> http://bugzilla.suse.com/attachment.cgi?id=782269&action=edit Requested Xorg.0.log (plain X from runlevel 3) Here is the Xorg log from starting it with the supplied command. It did work, whereas startx failed. Perhaps that suggests the problem I am having is with a KDE based package, since startx does a startkde. Also, comparing the newly installed system to test versus my main system on the same hardware, I noticed the new system used xdm instead of sddm. So I switched to xdm, and could boot normally once, then the same problem. I will keep tracking this down for a while, but at least know I could reinstall and reformat my root partition and that should result in a working system. Thanks for all your help in suggestions. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107534] New: libvirt seems to need mount namespaces for adding/removing disk images
by bugzilla_noreply＠novell.com 06 Sep '18

06 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1107534 Bug ID: 1107534 Summary: libvirt seems to need mount namespaces for adding/removing disk images Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: stefan.bruens(a)rwth-aachen.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When I try to disconnect a CDROM iso image in virt-manager from a running VM, this no longer works. internal error: child reported: Kernel does not provide mount namespace: Permission denied Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/addhardware.py", line 795, in change_config_helper define_func(devobj=devobj, do_hotplug=True, **define_args) File "/usr/share/virt-manager/virtManager/domain.py", line 845, in define_disk self.hotplug(device=editdev) File "/usr/share/virt-manager/virtManager/domain.py", line 1159, in hotplug self._update_device(device) File "/usr/share/virt-manager/virtManager/domain.py", line 1112, in _update_device self._backend.updateDeviceFlags(xml, flags) File "/usr/lib64/python3.6/site-packages/libvirt.py", line 2774, in updateDeviceFlags if ret == -1: raise libvirtError ('virDomainUpdateDeviceFlags() failed', dom=self) libvirt.libvirtError: internal error: child reported: Kernel does not provide mount namespace: Permission denied -- You are receiving this mail because: You are on the CC list for the bug.

1 2