February 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1124064] Internal error while opening YaST2 Boot loader module
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1124064 http://bugzilla.suse.com/show_bug.cgi?id=1124064#c1 Steffen Winterfeldt <snwint(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High Status|NEW |CONFIRMED URL| |https://trello.com/c/ZkdxYm | |xN Assignee|yast2-maintainers(a)suse.de |yast-internal(a)suse.de Summary|Internal error while |Internal error while |opening YaST2 Boot loader |opening YaST2 Boot loader |module in LiveCD |module --- Comment #1 from Steffen Winterfeldt <snwint(a)suse.com> --- Not related to LiveCD at all. It crashes if /boot/grub2/grub.cfg does not exist (because, maybe grub2-mkconfig has never been run before). Tracking in YaST Scrum board. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124159] New: VUL-1: CVE-2019-7314: live555: A use-after-free error causes the RTSP server to crash
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124159 Bug ID: 1124159 Summary: VUL-1: CVE-2019-7314: live555: A use-after-free error causes the RTSP server to crash Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/224147/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-7314 liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7314 http://www.live555.com/liveMedia/public/changelog.txt http://lists.live555.com/pipermail/live-devel/2019-February/021143.html -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124152] /etc/resolv.conf no symlink to /run/netconfig/resolv.conf
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124152 http://bugzilla.opensuse.org/show_bug.cgi?id=1124152#c1 Stephan Kulow <coolo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |coolo(a)suse.com Assignee|bnc-team-screening(a)forge.pr |mt(a)suse.com |ovo.novell.com | --- Comment #1 from Stephan Kulow <coolo(a)suse.com> --- I suppose this is due to this change: Subpackages: sysconfig-netconfig - version 0.85.0 - netconfig: change to write resolv.conf,yp.conf,forwarders.conf to files in /[var/]run/netconfig/ and link in /etc (fate#325872) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124092] Installer crashes when trying to reuse existing disk layout
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1124092 http://bugzilla.suse.com/show_bug.cgi?id=1124092#c3 Steffen Winterfeldt <snwint(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Steffen Winterfeldt <snwint(a)suse.com> --- Thanks for confirming! Closing bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1121892] VUL-1: CVE-2019-6256: live555: A DOS issue was discovered in the LIVE555 Streaming Media libraries
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1121892 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|VUL-1: CVE-2019-6256: A DOS |VUL-1: CVE-2019-6256: | issue was discovered in |live555: A DOS issue was |the LIVE555 Streaming Media |discovered in the LIVE555 |libraries |Streaming Media libraries -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124150] New: VUL-1: CVE-2019-7310: poppler: A heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1124150 Bug ID: 1124150 Summary: VUL-1: CVE-2019-7310: poppler: A heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/224137/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: peter.simons(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-7310 In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7310 https://gitlab.freedesktop.org/poppler/poppler/issues/717 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1106673] LUKS keyboard layout falls back to US instead of DE since last dracut update
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1106673 http://bugzilla.suse.com/show_bug.cgi?id=1106673#c14 --- Comment #14 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Aender Boy from comment #12) > removing `none` from `FONT_MAP=` in /etc/vconsole.conf and messing around > with dracut and mkinitrd afterwards removed the error message, but either > the luks pw prompt was still using english keyboard layouts or brought me to > a rescue root shell after entering my luks pw, telling me about some issue > with my keyboard(-layout?). Please attach the content of: /etc/vconsole.conf > https://en.opensuse.org/SDB:Encrypted_filesystems lists this bug as a known > issue at the heading "international keyboard layouts" That information is outdated. The init script boot.crypto has been replaced by systemd-cryptsetup@.service in Leap. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124096] zypper option --repo is broken
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1124096 http://bugzilla.suse.com/show_bug.cgi?id=1124096#c3 Benjamin Zeller <bzeller(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Benjamin Zeller <bzeller(a)suse.com> --- This was fixed already in master. 1.14.19 was released in the middle of refactoring going on where some of the command line switches were broken. zypper >= 1.14.20 has the fix included -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106673] LUKS keyboard layout falls back to US instead of DE since last dracut update
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1106673 Thomas Blume <thomas.blume(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(tbro(a)suse.com) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123525] Errors during boot of updated system on Raspberry Pi 2
by bugzilla_noreply＠novell.com 04 Feb '19

04 Feb '19

http://bugzilla.suse.com/show_bug.cgi?id=1123525 http://bugzilla.suse.com/show_bug.cgi?id=1123525#c19 Thomas Blume <thomas.blume(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|DUPLICATE |--- Flags| |needinfo?(freek(a)opensuse.or | |g) --- Comment #19 from Thomas Blume <thomas.blume(a)suse.com> --- (In reply to Freek de Kruijf from comment #16) > I am sorry this was the wrong file, not from the Raspberry Pi 2. > The correct one is attached now. Ok, reopening. The information from comment#8 must also be from another machine: --> # rpm -qf /usr/share/kbd/keymaps/xkb/us.map.gz kbd-2.0.4-9.1.x86_64 ^^^^^^^ [...] # lsinitrd | grep '\.map' -rw-r--r-- 1 root root 11915 Aug 6 12:03 usr/share/kbd/keymaps/legacy/i386/qwerty/us-acentos.map ^^^^ --< Raspberry P2 has architecture arm instead of x86_64 or i386. Can you please double check and attach the output from your Raspberry. (In reply to Freek de Kruijf from comment #18) > > Can you please attach /etc/vconsole.conf? > > # more /etc/vconsole.conf > KEYMAP=us.map.gz Please remove the .gz suffix from the keymap name, otherwise systemd-vconsole-setup will fail: --> Feb 04 12:45:49 linux-s9lv systemd-vconsole-setup[127]: Executing "/usr/bin/loadkeys -q -C /dev/tty1 -u us.map.gz"... [...] Feb 04 12:45:49 linux-s9lv systemd-vconsole-setup[127]: /usr/bin/loadkeys failed with error code 1. --< -- You are receiving this mail because: You are on the CC list for the bug.

1 0