February 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1120793] aarch64 bootloader YaST has wrong UI layout on start-up
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1120793 http://bugzilla.suse.com/show_bug.cgi?id=1120793#c11 --- Comment #11 from David Diaz <dgonzalez(a)suse.com> --- (In reply to Rodion Iafarov from comment #10) > Seems it has made ncurses UI worse in comparison how it was: > https://openqa.suse.de/tests/2419540#step/yast2_bootloader/6 As we agreed on IRC, I fixed a bit the layout for both, ncurses and Qt. You can see changes in PR: https://github.com/yast/yast-bootloader/pull/551 SR: https://build.opensuse.org/request/show/672737 - https://build.suse.de/request/show/183944 Thanks a lot, Rodion. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1120759] perl SIGSEGV with Term::ReadLine call readline()
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1120759 http://bugzilla.suse.com/show_bug.cgi?id=1120759#c14 --- Comment #14 from Rafał Miłecki <zajec5(a)gmail.com> --- I can confirm it's fixed with the updated package, thanks Marcus! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124043] New: abort (core dumped) perl -MTerm::ReadLine -E 'Term::ReadLine->new("test")->readline("test: ")'
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1124043 Bug ID: 1124043 Summary: abort (core dumped) perl -MTerm::ReadLine -E 'Term::ReadLine->new("test")->readline("test: ")' Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: yellowhat46(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi, if I try to run: perl -MTerm::ReadLine -E 'Term::ReadLine->new("test")->readline("test: ")' I get: *** buffer overflow detected ***: perl terminated [1] 9087 abort (core dumped) perl -MTerm::ReadLine -E 'Term::ReadLine->new("test")->readline("test: ")' Maybe the package perl-TermReadLine-Gnu needs to be rebuild. I am using OpenSuse Tumbeweed: perl-TermReadLine-Gnu-1.20-8.19.x86_64. Thanks -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1120759] perl SIGSEGV with Term::ReadLine call readline()
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1120759 http://bugzilla.suse.com/show_bug.cgi?id=1120759#c13 Marcus Schaefer <ms(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |yellowhat46(a)gmail.com --- Comment #13 from Marcus Schaefer <ms(a)suse.com> --- *** Bug 1124043 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1113259] cargo unable to build with libssh update
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1113259 http://bugzilla.opensuse.org/show_bug.cgi?id=1113259#c4 --- Comment #4 from Ludwig Nussel <lnussel(a)suse.com> --- what is the status here? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123680] New: salt file.managed broken
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1123680 Bug ID: 1123680 Summary: salt file.managed broken Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: SLES 12 Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ds-tg(a)surfsara.nl QA Contact: bnc-team-screening(a)forge.provo.novell.com Found By: --- Blocker: --- >From "https://build.opensuse.org/package/show/systemsmanagement:saltstack/salt" The salt-2016.11.4-25.1 package breaks file.managed entirely. A sample output of a single state applying file.managed to copy a file to a minion. ``` ---------- ID: Copying baseline file Function: file.managed Name: /tmp/testModule Result: False Comment: Unable to manage file: 'module' object has no attribute 'path' Started: 16:20:35.437762 Duration: 19.129 ms Changes: ``` The problem is: despite failing, the file is actually copied. The state continues on, though any "watch" flags on this state specifically never trigger as a file modified. So if you use file.managed to maintain a service configuration file, a "watch" state to restart the service on change would never trigger, even though the file actually is changed. This here is a very simple init.sls that can use file.managed to copy a file, append a date, and if file is modified, append a "WATCHED" flag to the file. ``` #Created for testing file.managed Copying baseline file: file.managed: - name: /tmp/testModule - source: salt://testModule/testFile - backup: False - show_changes: True "date >> /tmp/fileModule": cmd.run "echo 'Watch Triggered' >> /tmp/fileModule": cmd.run: - onchanges: - file: /tmp/fileModule ``` You just need a simple 1 test file to act as the source of the file.managed. ---- This was resolved by downgrading to salt-2016.11.4-23.1 on all systems. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1124762] New: VUL-0: CVE-2019-7628: pagure: leaks API keys by e-mailing them to users
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124762 Bug ID: 1124762 Summary: VUL-0: CVE-2019-7628: pagure: leaks API keys by e-mailing them to users Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/224413/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ngompa13(a)gmail.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-7628 Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on behalf of other users. This issue is found in the API token expiration reminder cron job in files/api_key_expire_mail.py; disabling that job is also a viable solution. (E-mailing a substring of the API key was an attempted, but rejected, solution.) References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7628 https://pagure.io/pagure/pull-request/4254 https://pagure.io/pagure/issue/4253 https://pagure.io/pagure/issue/4252 https://pagure.io/pagure/issue/4230 https://pagure.io/pagure/c/9905fb1e64341822366b6ab1d414d2baa230af0a -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124671] New: Realtek Semiconductor SD card reader not recognized by kernel.
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124671 Bug ID: 1124671 Summary: Realtek Semiconductor SD card reader not recognized by kernel. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: zhonb(a)yahoo.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 Build Identifier: My card reader is not recognized by the kernel. lspci output: 6c:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. Device [10ec:5260] (rev 01) Subsystem: Dell Device [1028:0831] Reproducible: Always Steps to Reproduce: 1. Boot system Actual Results: N/A My apologies if this is a duplicate, the search box does not appear to be working. This is on a Dell precision 7530 mobile workstation. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1124759] New: VUL-1: CVE-2019-7401: nginx-unit: heap-based buffer overflow in the router process with a specially crafted request
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124759 Bug ID: 1124759 Summary: VUL-1: CVE-2019-7401: nginx-unit: heap-based buffer overflow in the router process with a specially crafted request Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/224406/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: mrueckert(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-7401 NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process crash) or possibly have unspecified other impact. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7401 http://hg.nginx.org/unit/file/tip/CHANGES http://unit.nginx.org/CHANGES.txt http://mailman.nginx.org/pipermail/unit/2019-February/000113.html -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106673] LUKS keyboard layout falls back to US instead of DE since last dracut update
by bugzilla_noreply＠novell.com 08 Feb '19

08 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1106673 http://bugzilla.suse.com/show_bug.cgi?id=1106673#c25 --- Comment #25 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Aender Boy from comment #20) > Created attachment 796325 [details] > sudo journalctl -axb > journalctl.out The log shows: --> Feb 07 20:23:23 aendersu systemd[149]: systemd-vconsole-setup.service: Executing: /usr/lib/systemd/systemd-vconsole-setup Feb 07 20:23:23 aendersu systemd-vconsole-setup[149]: cannot open include file compose.latin1 Feb 07 20:23:23 aendersu systemd-vconsole-setup[149]: syntax error, unexpected ERROR Feb 07 20:23:23 aendersu systemd[151]: systemd-modules-load.service: Executing: /usr/lib/systemd/systemd-modules-load Feb 07 20:23:23 aendersu systemd-vconsole-setup[149]: Sysfs UTF-8 flag enabled --< That looks like the bug addressed in upstream commit: https://github.com/dracutdevs/dracut/commit/44f2fe5170b3f5f161cfee04e62b713… Are the other reporters seeing the same error? -- You are receiving this mail because: You are on the CC list for the bug.

1 0