October 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1154971] New: VUL-1: CVE-2019-18359: mp3gain: A buffer over-read was discovered in ReadMP3APETag in apetag.c which might lead to remote denial of service
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1154971 Bug ID: 1154971 Summary: VUL-1: CVE-2019-18359: mp3gain: A buffer over-read was discovered in ReadMP3APETag in apetag.c which might lead to remote denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/245722/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: aloisio(a)gmx.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-18359 A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-18359 http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-18359.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18359 https://sourceforge.net/p/mp3gain/bugs/46/ -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1129362] New: openSUSE:Leap:15.1/erlang-rebar-testsuite failed
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1129362 Bug ID: 1129362 Summary: openSUSE:Leap:15.1/erlang-rebar-testsuite failed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://build.opensuse.org/package/live_build_log/open SUSE:Leap:15.1/erlang-rebar-testsuite/standard/x86_64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: nkrinner(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- openSUSE:Leap:15.1/erlang-rebar-testsuite failed to build. Please see build log: https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/erlang… -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1126496] New: [doc] Syntax about packages modifying /var or /srv
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1126496 Bug ID: 1126496 Summary: [doc] Syntax about packages modifying /var or /srv Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: santiago.zarate(a)suse.com QA Contact: lnussel(a)suse.com Found By: --- Blocker: --- 1.1 Using Atomic Updates With the System Role <span class="emphasis"><em>Transactional Server</em></span> https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.1/#sec.insta… Message reads: > Note: Incompatible Packages > >Some packages modify the contents of /var or /srv in their RPM %post scripts. > These packages are incompatible. If you happen upon such package, file a bug report. However "If you happen upon such package" seems a bit odd, I suggest that part being changed to: "If you happen to find packages doing this..." or something similar. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1125819] New: YaST2 fonts - Internal error
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1125819 Bug ID: 1125819 Summary: YaST2 fonts - Internal error Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: guillaume.gardet(a)arm.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 797090 --> http://bugzilla.opensuse.org/attachment.cgi?id=797090&action=edit y2log openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-yast2_gui@aarch64 fails in [yast2_control_center](https://openqa.opensuse.org/tests/857564/modules/yast… y2log attached. Relevant part is probably: YCP_UI.cc(SetApplicationTitle):1722 Setting application title to '"YaST2 - fonts @ susetest"' 2019-02-18 09:25:25 <1> susetest(16018) [Interpreter] bin/y2start:62 Calling YaST client fonts 2019-02-18 09:25:25 <1> susetest(16018) [Ruby] yast/wfm.rb:308 Call client /usr/share/YaST2/clients/fonts.rb 2019-02-18 09:25:25 <2> susetest(16018) [Ruby] yast/builtins.rb:586 tostring builtin called on wrong type Class 2019-02-18 09:25:25 <3> susetest(16018) [Ruby] yast/wfm.rb:253 Client /usr/share/YaST2/clients/fonts.rb failed with 'cannot load such file -- yast/fontconfig_setting' (LoadError). Backtrace: /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/share/YaST2/lib/fonts/fpl-add-dialog.rb:4:in `<top (required)>' /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/share/YaST2/lib/fonts/fonts-dialog.rb:10:in `<top (required)>' /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require' /usr/share/YaST2/clients/fonts.rb:4:in `<top (required)>' /usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:313:in `eval' /usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:313:in `run_client' /usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:206:in `call_builtin' /usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:206:in `call_builtin_wrapper' /usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:195:in `CallFunction' /usr/lib/YaST2/bin/y2start:62:in `<main>' 2019-02-18 09:25:25 <3> susetest(16018) [Ruby] yast/wfm.rb:276 Internal error. Please report a bug report with logs -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1116922] New: [rn] amanda - amanda user (and group) should be considered privileged user
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1116922 Bug ID: 1116922 Summary: [rn] amanda - amanda user (and group) should be considered privileged user Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: kstreitova(a)suse.com QA Contact: lnussel(a)suse.com Found By: --- Blocker: --- I would like to add a section to openSUSE:Leap:15.1 release notes about amanda. Draft ----- We currently limit the execution of the binaries in this package to the group amanda. Some of the binaries are setuid root. As the implementation of these binaries is partially problematic, the user amanda and members of the group amanda should be considered privileged users with equivalent permissions to the root user. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1100005] New: add note about dropped git-annex
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1100005 Bug ID: 1100005 Summary: add note about dropped git-annex Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: lnussel(a)suse.com QA Contact: lnussel(a)suse.com CC: peter.simons(a)suse.com Found By: --- Blocker: --- git-annex is no longer maintained and was requested to be dropped: https://build.opensuse.org/request/show/619548 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1100003] New: use %_with_betatest
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1100003 Bug ID: 1100003 Summary: use %_with_betatest Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: lnussel(a)suse.com QA Contact: lnussel(a)suse.com Found By: --- Blocker: --- LIFECYCLE=beta in the spec file needs to be changed to use %_with_betatest otherwise we will forget about this -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1092056] New: [doc] SuSEfirewall2 is mentioned where only firewalld should be the supported version
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1092056 Bug ID: 1092056 Summary: [doc] SuSEfirewall2 is mentioned where only firewalld should be the supported version Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: okurz(a)suse.com QA Contact: lnussel(a)suse.com Found By: --- Blocker: --- 1.1 Minimal System Installation https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.0/#sec.insta… -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1091866] New: RN: PostfixAdmin - changed directory layout
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1091866 Bug ID: 1091866 Summary: RN: PostfixAdmin - changed directory layout Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: openSUSE 42.3 Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: sknorr(a)suse.com Reporter: suse-beta(a)cboltz.de QA Contact: lnussel(a)suse.com Found By: Beta-Customer Blocker: --- The PostfixAdmin package in Leap 15.0 (and also Tumbleweed) comes with a changed directory layout, which also brings a backwards-incompatible change (PostfixAdmin will no longer read the config files at the old location). This especially means users will have to move their config.local.php to /etc/postfixadmin and (if they did changes to config.inc.php) migrate these changes, ideally to /etc/postfixadmin/config.local.php. Users will also need to enable or add the /postfixadmin alias in the apache config. Can you please add [something like] the following text to the "Upgrade" section of the release notes? ------------------------------------------------------------------------- PostfixAdmin: Changed directory layout PostfixAdmin 3.2 comes with a changed directory layout. Instead of having everything in /srv/www/htdocs/postfixadmin/, - the config files (config.inc.php and config.local.php) are now in /etc/postfixadmin/. (It's recommended to keep config.inc.php unmodified, and to add config changes to config.local.php.) - the PHP code moved to /usr/share/postfixadmin/ - the smarty cache moved to /var/cache/postfixadmin/ Note that /srv/www/htdocs/postfixadmin/config.*.php will _not_ be moved to /etc/postfixadmin/ automatically on upgrades, so you'll have to migrate your config changes manually. Also note that the /postfixadmin alias is _not_ enabled in Apache by default. To enable the /postfixadmin alias, run a2enflag POSTFIXADMIN && rcapache2 restart This will make /postfixadmin available on all virtual hosts. If you want to have the /postfixadmin alias only on a specific virtual host, add the alias to the config of that vhost. ------------------------------------------------------------------------- For the Apache config, you can replace the text starting at "To enable..." with a reference to the comments in /etc/apache2/conf.d/postfixadmin if you think the text is too long. Also, feel free to drop the "(It's recommended ...)" sentence if you think it makes the text too long. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1091021] New: Yast /etc/sysconfig removal of default DM option
by bugzilla_noreply＠novell.com 11 May '22

11 May '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1091021 Bug ID: 1091021 Summary: Yast /etc/sysconfig removal of default DM option Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: SUSE Other Status: NEW Severity: Enhancement Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: maninredd(a)yahoo.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 768371 --> http://bugzilla.opensuse.org/attachment.cgi?id=768371&action=edit screenshot of yast In pretty much every Opensuse and SLE that i have used there was the ability to in yast under the /etc/sysconfig module in SYSTEM to change the default Windows Manager and Desktop Environment. Somehow this has disappeared between Leap 42.3 and Leap 15. Attached is a comparison of Leap 42.3 and Leap 15 (as of late April 2018) You can see in the 42.3 on the right there is the option to change the Display Manager and that is omitted in the Leap 15 screen on the left. -- You are receiving this mail because: You are on the CC list for the bug.

2 3