September 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1097779] VUL-0: CVE-2018-12434: LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channelattack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problemor ROHNP. To discover a key, the attacker needs access to
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1097779 http://bugzilla.suse.com/show_bug.cgi?id=1097779#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:2597-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1065363,1086778,1097779 CVE References: CVE-2018-12434,CVE-2018-8970 Sources used: openSUSE Leap 42.3 (src): libressl-2.8.0-11.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1086778] VUL-0: CVE-2018-8970: libressl: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c inLibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zeroname length, which causes silent omission of hostname verification
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1086778 http://bugzilla.suse.com/show_bug.cgi?id=1086778#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:2597-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1065363,1086778,1097779 CVE References: CVE-2018-12434,CVE-2018-8970 Sources used: openSUSE Leap 42.3 (src): libressl-2.8.0-11.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084603] Thunderbird doesn't save settings about remote content in mails
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1084603 http://bugzilla.suse.com/show_bug.cgi?id=1084603#c56 --- Comment #56 from Swamp Workflow Management <swamp(a)suse.de> --- This is an autogenerated message for OBS integration: This bug (1084603) was mentioned in https://build.opensuse.org/request/show/632920 15.0+42.3+Backports:SLE-12 / MozillaThunderbird -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099769] btrfs balance generates 100% CPU usage for long periods (15min's +)
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1099769 Jan Zerebecki <jzerebecki(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jzerebecki(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1100640] Installation loader fails on my hardware
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.suse.com/show_bug.cgi?id=1100640 http://bugzilla.suse.com/show_bug.cgi?id=1100640#c6 --- Comment #6 from James Moe <jimoe(a)sohnen-moe.com> --- I "resolved" this by changing the hardware: I moved the disk drives to a system that had a newer MB. Apparently the old motherboard was slightly defective, enough to prevent the installer from functioning correctly. I now recall in the past there was a period where the OS would not boot due to some issue with the embedded USB ports. It would boot without anything connected to the ports (no keyboard, no mouse, etc.) until it was finished, then added the ports. After a few updates that issue disappeared. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106848] New: error
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1106848 Bug ID: 1106848 Summary: error Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: harald.achitz(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- this is what I have in the logs: ===== # journalctl -b | grep console Sep 02 20:24:06 t430p kernel: console [tty0] enabled Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p kernel: [drm] Replacing VGA console driver Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:06 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: /usr/bin/loadkeys failed with error code 1. Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: KD_FONT_OP_GET failed while trying to get the font metadata: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Fonts will not be copied to remaining consoles Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd[1]: systemd-vconsole-setup.service: Main process exited, code=exited, status=1/FAILURE Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:07 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: Input/output error Sep 02 20:24:08 t430p systemd-vconsole-setup[181]: KDSKBENT: Input/output error: could not deallocate keymap 128 Sep 02 20:24:08 t430p systemd[1]: systemd-vconsole-setup.service: Unit entered failed state. Sep 02 20:24:08 t430p systemd[1]: systemd-vconsole-setup.service: Failed with result 'exit-code'. Sep 02 20:24:10 t430p display-manager[1407]: /etc/vconsole.conf available ===== suse12x22.psfu.gz than I have an error message over the login promt on my terminal telling me to run systemctl status systemd-vconsole-setup.service for more information === systemctl status systemd-vconsole-setup.service ● systemd-vconsole-setup.service - Setup Virtual Console Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service; static; vendor preset: disabled) Active: inactive (dead) since Sun 2018-09-02 20:48:28 CEST; 2h 11min ago Docs: man:systemd-vconsole-setup.service(8) man:vconsole.conf(5) Process: 4444 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited, status=0/SUCCESS) Main PID: 4444 (code=exited, status=0/SUCCESS) Sep 02 20:48:28 t430p.askha.home systemd[1]: Starting Setup Virtual Console... Sep 02 20:48:28 t430p.askha.home systemd[1]: Started Setup Virtual Console. ==== don't know what this shall be, have this problem no matter if I have the default file, or change the font value to suse12x22.psfu.gz however, if I set the font to suse12x22.psfu.gz, this is applied -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1106366] collectl daemon failed to start
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1106366 http://bugzilla.opensuse.org/show_bug.cgi?id=1106366#c2 Andreas Stieger <astieger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |astieger(a)suse.com Assignee|glin(a)suse.com |tabraham(a)suse.com --- Comment #2 from Andreas Stieger <astieger(a)suse.com> --- Devel package submission: https://build.opensuse.org/request/show/632210 Thomas you are the Factory maintainer, please process. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106279] New: VUL-1: CVE-2018-1000656 python-flask: Improper Input Validation via crafted JSON file
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1106279 Bug ID: 1106279 Summary: VUL-1: CVE-2018-1000656 python-flask: Improper Input Validation via crafted JSON file Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/213087/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: mimi.vx(a)gmail.com Reporter: meissner(a)suse.com QA Contact: security-team(a)suse.de CC: petr(a)cervinka.net Found By: Security Response Team Blocker: --- rh#1623131 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. References: https://bugzilla.redhat.com/show_bug.cgi?id=1623131 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000656 https://github.com/pallets/flask/pull/2691 https://github.com/pallets/flask/releases/tag/0.12.3 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1106954] New: libqalculate has a weak dependency on its datafiles
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1106954 Bug ID: 1106954 Summary: libqalculate has a weak dependency on its datafiles Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: stefan.bruens(a)rwth-aachen.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The qualculate sources include definitions of additional units, functions, etc. which libqalculate tries to load on startup. These are not hard requirements. libqalculate is e.g. used but the Plasma calculator krunner. If the qualculate package is installed (which provides a command line calculator, and *also* the xml data files), the following expression in KRunner works: = 3 * 10^8 m/s * 24 * 60 * 60 * 365 s / lightyears -> 1,000007349054008 Without qalculate installed, krunner issues some warnings: --- I/O warning : failed to load external entity "/usr/share/qalculate/prefixes.xml" I/O warning : failed to load external entity "/usr/share/qalculate/currencies.xml" I/O warning : failed to load external entity "/usr/share/qalculate/units.xml" I/O warning : failed to load external entity "/usr/share/qalculate/functions.xml" I/O warning : failed to load external entity "/usr/share/qalculate/datasets.xml" I/O warning : failed to load external entity "/usr/share/qalculate/variables.xml" I/O warning : failed to load external entity "/usr/share/qalculate/currencies.xml" I/O warning : failed to load external entity "/usr/share/qalculate/eurofxref-daily.xml" --- -> (9460800000000000 "m" "s") / ("s" * li("g" "h" "t" * year("s"))) i.e. it fails to parse the expression completely simple expressions (i.e without e.g. units) work with or without the data sets: = 100 * 20 + 1 -> 2001 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106839] New: Bogus file conflict when doing "zypper dup" on Tumbleweed
by bugzilla_noreply＠novell.com 03 Sep '18

03 Sep '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1106839 Bug ID: 1106839 Summary: Bogus file conflict when doing "zypper dup" on Tumbleweed Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)forge.provo.novell.com Reporter: nwr10cst-oslnx(a)yahoo.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 Build Identifier: This was reported by a forum user at: https://forums.opensuse.org/showthread.php/532899- I ran into the same conflict this evening, updating two Tumbleweed systems (also reported in forum post). The file conflict was for liberation font definition files, with a conflict between "calibre" and "liberation-fonts". In my case, I told zypper to continue anyway. After the update finished, I checked. And the liberation font definition files do not seem to be part of the calibre package. And the file date suggests that those files were never updated. So it looks as if the conflict message was bogus. Other users reported no conflict for their updates. What I did differently, is I updated "zypper" separately before updating everything else. So I might have been using a newer "zypper" than the people who did not see conflict messages. This looks like a "zypper" bug. Reproducible: Didn't try -- You are receiving this mail because: You are on the CC list for the bug.

1 4