January 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1120646] New: VUL-1: CVE-2018-20330: libjpeg-turbo: tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1120646 Bug ID: 1120646 Summary: VUL-1: CVE-2018-20330: libjpeg-turbo: tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/221727/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: pgajdos(a)suse.com Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20330 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20330.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20330 https://github.com/libjpeg-turbo/libjpeg-turbo/issues/304 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1096292] Please update libwacom2 from 0.23 to current 0.30
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1096292 http://bugzilla.opensuse.org/show_bug.cgi?id=1096292#c2 Cor Blom <cornelis(a)solcon.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cornelis(a)solcon.nl --- Comment #2 from Cor Blom <cornelis(a)solcon.nl> --- Can this update also be done in Leap 15? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1112630] Out of date package: openSUSE:Factory/joe
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=1112630 http://bugzilla.suse.com/show_bug.cgi?id=1112630#c4 Enno Gotthold <egotthold(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Enno Gotthold <egotthold(a)suse.com> --- Got accepted in for Factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1112630] Out of date package: openSUSE:Factory/joe
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=1112630 http://bugzilla.suse.com/show_bug.cgi?id=1112630#c3 --- Comment #3 from Enno Gotthold <egotthold(a)suse.com> --- Okay build fixed. On the way to factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1120311] New: cloud-init fails with: "IsADirectoryError: [Errno 21] Is a directory: '/etc/sysconfig/network'"
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1120311 Bug ID: 1120311 Summary: cloud-init fails with: "IsADirectoryError: [Errno 21] Is a directory: '/etc/sysconfig/network'" Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Cloud:Images Assignee: public-cloud-maintainers(a)suse.de Reporter: tbechtold(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 793361 --> http://bugzilla.opensuse.org/attachment.cgi?id=793361&action=edit cloud-init.log I try to use a cdrom attached seed image together with the openSUSE Leap 15.0 image (from https://download.opensuse.org/distribution/leap/15.0/jeos/openSUSE-Leap-15.… ). When starting the VM in libvirt (seed image atached as CDROM, I get: 2018-12-26 16:37:08,052 - __init__.py[DEBUG]: Selected renderer 'sysconfig' from priority list: None 2018-12-26 16:37:08,056 - util.py[DEBUG]: Writing to /etc/sysconfig/network/ifcfg-eth0 - wb: [644] 176 bytes 2018-12-26 16:37:08,057 - util.py[DEBUG]: Writing to /etc/resolv.conf - wb: [644] 71 bytes 2018-12-26 16:37:08,058 - util.py[DEBUG]: Writing to /etc/udev/rules.d/70-persistent-net.rules - wb: [644] 96 bytes 2018-12-26 16:37:08,059 - util.py[DEBUG]: Writing to /etc/sysconfig/network - wb: [644] 86 bytes 2018-12-26 16:37:08,061 - util.py[WARNING]: failed stage init-local 2018-12-26 16:37:08,061 - util.py[DEBUG]: failed stage init-local Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/cloudinit/cmd/main.py", line 655, in status_wrapper ret = functor(name, args) File "/usr/lib/python3.6/site-packages/cloudinit/cmd/main.py", line 361, in main_init init.apply_network_config(bring_up=bool(mode != sources.DSMODE_LOCAL)) File "/usr/lib/python3.6/site-packages/cloudinit/stages.py", line 653, in apply_network_config return self.distro.apply_network_config(netcfg, bring_up=bring_up) File "/usr/lib/python3.6/site-packages/cloudinit/distros/__init__.py", line 211, in apply_network_config dev_names = self._write_network_config(netconfig) File "/usr/lib/python3.6/site-packages/cloudinit/distros/debian.py", line 119, in _write_network_config return self._supported_write_network_config(netconfig) File "/usr/lib/python3.6/site-packages/cloudinit/distros/__init__.py", line 93, in _supported_write_network_config renderer.render_network_config(network_config=network_config) File "/usr/lib/python3.6/site-packages/cloudinit/net/renderer.py", line 53, in render_network_config network_state=parse_net_config_data(network_config), target=target) File "/usr/lib/python3.6/site-packages/cloudinit/net/sysconfig.py", line 609, in render_network_state util.write_file(sysconfig_path, "\n".join(netcfg) + "\n", file_mode) File "/usr/lib/python3.6/site-packages/cloudinit/util.py", line 1852, in write_file with open(filename, omode) as fh: IsADirectoryError: [Errno 21] Is a directory: '/etc/sysconfig/network' The full cloud-init.log is attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1120395] Bootproblems with btrfs!
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=1120395 http://bugzilla.suse.com/show_bug.cgi?id=1120395#c3 Jiri Srain <jsrain(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jsrain(a)suse.com |mchang(a)suse.com --- Comment #3 from Jiri Srain <jsrain(a)suse.com> --- OK. I don't think that I can any help find out how you got to this state. Anyway, Michael, is the behavior of GRUB itself correct? I mean that users can set up a btrfs filesystem spread over multiple devices manually... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1104850] Wrong prefix in GRUB at aarch64
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=1104850 Jiri Srain <jsrain(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jsrain(a)suse.com |agraf(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1092822] zypper se suggests the use of zypper search-packages on Tumbleweed
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=1092822 Jiri Srain <jsrain(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 953130] [libsolv] zypper up "checking for file conflicts" takes 3.5 cpu-minutes for 32 packages
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.suse.com/show_bug.cgi?id=953130 http://bugzilla.suse.com/show_bug.cgi?id=953130#c55 --- Comment #55 from Adam Spiers <aspiers(a)suse.com> --- Yes, I guess I'm one of the few people still with one of their root disks on spinning platters... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1105283] dwz fails to compress debug info for various packages
by bugzilla_noreply＠novell.com 03 Jan '19

03 Jan '19

http://bugzilla.novell.com/show_bug.cgi?id=1105283 Martin Liška <martin.liska(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tdevries(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0