January 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1160062] New: Update cracklib-dict-full package
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1160062 Bug ID: 1160062 Summary: Update cracklib-dict-full package Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: kstreitova(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The current version of cracklib-dict-full package is 2.8.12 (13 years old) but the latest version of cracklib is 2.9.7 [1]. Do you plan to update this package? It would be very useful for the new MariaDB 10.4 that is on its way to openSUSE:Factory and that newly provides mariadb-cracklib-password-check plugin that needs cracklib version >= 2.9.0 [2]. Thank you! [1] https://github.com/cracklib/cracklib/releases [2] https://mariadb.com/kb/en/cracklib-password-check-plugin/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1159970] New: YAST2 lan doesn't set MTU
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1159970 Bug ID: 1159970 Summary: YAST2 lan doesn't set MTU Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: pfurgala(a)gmx.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- MTU entered in field isn't written to (if)config-file, file must be edited by hand, MTU inserted, then OK -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1159852] VUL-1: CVE-2019-19950: use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1159852 http://bugzilla.suse.com/show_bug.cgi?id=1159852#c4 --- Comment #4 from Petr Gajdos <pgajdos(a)suse.com> --- BEFORE With ASAN: 15,12/ImageMagick $ convert heap-use-after-free_ThrowLoggedException out.ps2 convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xc9 `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xdb `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xda `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Invalid SOS parameters for sequential JPEG `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Sampling factors too large for interleaved scan `/tmp/magick-11029VnIxnapIXYi8' @ error/jpeg.c/JPEGErrorHandler/332. $ $ convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct $ 15.1,15.0/GraphicsMagick $ gm convert heap-use-after-free_ThrowLoggedException out.ps2 gm convert: Invalid SOS parameters for sequential JPEG (heap-use-after-free_ThrowLoggedException). $ $ gm convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct ================================================================= ==11256==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6310000287ff at pc 0x7f7e515eefe5 bp 0x7ffd2d070660 sp 0x7ffd2d070658 READ of size 1 at 0x6310000287ff thread T0 #0 0x7f7e515eefe4 (/usr/lib64/GraphicsMagick-1.3.29/modules-Q16/coders/pict.so+0x8fe4) #1 0x7f7e515effff (/usr/lib64/GraphicsMagick-1.3.29/modules-Q16/coders/pict.so+0x9fff) #2 0x7f7e56ed5f21 in WriteImage (/usr/lib64/libGraphicsMagick-Q16.so.3+0x197f21) #3 0x7f7e56ed6a49 in WriteImages (/usr/lib64/libGraphicsMagick-Q16.so.3+0x198a49) #4 0x7f7e56e92e12 in ConvertImageCommand (/usr/lib64/libGraphicsMagick-Q16.so.3+0x154e12) #5 0x7f7e56e6e8e7 in MagickCommand (/usr/lib64/libGraphicsMagick-Q16.so.3+0x1308e7) #6 0x7f7e56e709e4 (/usr/lib64/libGraphicsMagick-Q16.so.3+0x1329e4) #7 0x7f7e56eaf421 in GMCommand (/usr/lib64/libGraphicsMagick-Q16.so.3+0x171421) #8 0x7f7e56786f89 in __libc_start_main (/lib64/libc.so.6+0x20f89) #9 0x55a8445f5739 (/usr/bin/gm+0x739) 0x6310000287ff is located 1 bytes to the left of 65536-byte region [0x631000028800,0x631000038800) allocated by thread T0 here: #0 0x7f7e57543500 in malloc (/usr/lib64/libasan.so.4+0xdc500) #1 0x7f7e515ef83f (/usr/lib64/GraphicsMagick-1.3.29/modules-Q16/coders/pict.so+0x983f) #2 0x7f7e515f989f (/usr/lib64/GraphicsMagick-1.3.29/modules-Q16/coders/pict.so+0x1389f) SUMMARY: AddressSanitizer: heap-buffer-overflow (/usr/lib64/GraphicsMagick-1.3.29/modules-Q16/coders/pict.so+0x8fe4) Shadow bytes around the buggy address: 0x0c627fffd0a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c627fffd0b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c627fffd0c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c627fffd0d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c627fffd0e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c627fffd0f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa[fa] 0x0c627fffd100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c627fffd110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c627fffd120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c627fffd130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c627fffd140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==11256==ABORTING $ Without ASAN: 15,12/ImageMagick $ valgrind -q convert heap-use-after-free_ThrowLoggedException out.ps2 convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xc9 `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xdb `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Corrupt JPEG data: 2 extraneous bytes before marker 0xda `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Invalid SOS parameters for sequential JPEG `heap-use-after-free_ThrowLoggedException' @ warning/jpeg.c/JPEGWarningHandler/365. convert: Sampling factors too large for interleaved scan `/tmp/magick-27264sXTGTwMfFbQg' @ error/jpeg.c/JPEGErrorHandler/332. $ $ valgrind -q convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct $ 11/ImageMagick $ valgrind -q convert heap-use-after-free_ThrowLoggedException out.ps2 convert: Sorry, there are legal restrictions on arithmetic coding `heap-use-after-free_ThrowLoggedException'. convert: missing an image filename `out.ps2'. $ $ valgrind -q convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct sh: mplayer: command not found convert: Delegate failed `"mplayer" "%i" -really-quiet -ao null -vo png:z=3'. convert: missing an image filename `out.pct'. $ 15.1,15.0/GraphicsMagick $ valgrind -q gm convert heap-use-after-free_ThrowLoggedException out.ps2 gm convert: Invalid SOS parameters for sequential JPEG (heap-use-after-free_ThrowLoggedException). $ $ valgrind -q gm convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct ==27639== Invalid read of size 1 ==27639== at 0x7A5E285: EncodeImage (pict.c:731) ==27639== by 0x7A5EEA1: WritePICTImage (pict.c:2071) ==27639== by 0x4EC7B5A: WriteImage (constitute.c:2230) ==27639== by 0x4EC8208: WriteImages (constitute.c:2388) ==27639== by 0x4EA74FB: ConvertImageCommand (command.c:6087) ==27639== by 0x4E976BB: MagickCommand (command.c:8872) ==27639== by 0x4E987C5: GMCommandSingle (command.c:17393) ==27639== by 0x4EB93CD: GMCommand (command.c:17446) ==27639== by 0x5451F89: (below main) (in /lib64/libc-2.26.so) ==27639== Address 0x76a4b6f is 1 bytes before a block of size 65,536 alloc'd ==27639== at 0x4C2E2DF: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==27639== by 0x7A5E970: WritePICTImage (pict.c:1790) ==27639== by 0x4EC7B5A: WriteImage (constitute.c:2230) ==27639== by 0x4EC8208: WriteImages (constitute.c:2388) ==27639== by 0x4EA74FB: ConvertImageCommand (command.c:6087) ==27639== by 0x4E976BB: MagickCommand (command.c:8872) ==27639== by 0x4E987C5: GMCommandSingle (command.c:17393) ==27639== by 0x4EB93CD: GMCommand (command.c:17446) ==27639== by 0x5451F89: (below main) (in /lib64/libc-2.26.so) ==27639== $ [see comment 1, corresponds to ASAN report] PATCH comment 0; do not consider ImageMagick affected AFTER 15.1,15.2/GraphicsMagick $ valgrind -q gm convert heap-use-after-free_ThrowLoggedException out.ps2 gm convert: Invalid SOS parameters for sequential JPEG (heap-use-after-free_ThrowLoggedException). $ $ valgrind -q gm convert heap-buffer-overflow-READ-0x08417e7a.webp out.pct ==21658== Invalid read of size 1 ==21658== at 0x7A5E285: EncodeImage (pict.c:731) ==21658== by 0x7A5EEA1: WritePICTImage (pict.c:2071) ==21658== by 0x4EC7B5A: WriteImage (constitute.c:2230) ==21658== by 0x4EC8208: WriteImages (constitute.c:2388) ==21658== by 0x4EA74FB: ConvertImageCommand (command.c:6087) ==21658== by 0x4E976BB: MagickCommand (command.c:8872) ==21658== by 0x4E987C5: GMCommandSingle (command.c:17393) ==21658== by 0x4EB93CD: GMCommand (command.c:17446) ==21658== by 0x5451F89: (below main) (in /lib64/libc-2.26.so) ==21658== Address 0x76a4b6f is 1 bytes before a block of size 65,536 alloc'd ==21658== at 0x4C2E2DF: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==21658== by 0x7A5E970: WritePICTImage (pict.c:1790) ==21658== by 0x4EC7B5A: WriteImage (constitute.c:2230) ==21658== by 0x4EC8208: WriteImages (constitute.c:2388) ==21658== by 0x4EA74FB: ConvertImageCommand (command.c:6087) ==21658== by 0x4E976BB: MagickCommand (command.c:8872) ==21658== by 0x4E987C5: GMCommandSingle (command.c:17393) ==21658== by 0x4EB93CD: GMCommand (command.c:17446) ==21658== by 0x5451F89: (below main) (in /lib64/libc-2.26.so) ==21658== $ [no changes] It is likely that the testcase from comment 1 is exhibiting another bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1113135] Out of date package: openSUSE:Factory/junit is out of date
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1113135 http://bugzilla.suse.com/show_bug.cgi?id=1113135#c2 --- Comment #2 from Pedro Monreal Gonzalez <pmonrealgonzalez(a)suse.com> --- The package was updated in Dec 2018 to version 4.12 and 4.13 just got released. I'll start with the update to 4.13. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1159704] ACPI errors on the OpenSUSE Tumbleweed Live CD
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1159704 http://bugzilla.suse.com/show_bug.cgi?id=1159704#c8 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jslaby(a)suse.com --- Comment #8 from Jiri Slaby <jslaby(a)suse.com> --- (In reply to Petar Nedyalkov from comment #7) > - with "nouveau.modeset=0" What happens if you add i915.modeset=0 too? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1060159] yast2-nfs-server and yast2-nfs-client should use the same service names as upstream nfs-utils
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1060159 Sebastian Kuhne <sebastiankuhne1(a)googlemail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugzilla.opensuse.or | |g/show_bug.cgi?id=1160035 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1156053] [20191018] Kernel memory overwrite attempt detected to SLUB object - illegal operation
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1156053 http://bugzilla.suse.com/show_bug.cgi?id=1156053#c26 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #26 from Jiri Slaby <jslaby(a)suse.com> --- So I disabled the config in master and stable until this gets resolved. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1159887] Remember last choice in grub
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.suse.com/show_bug.cgi?id=1159887 http://bugzilla.suse.com/show_bug.cgi?id=1159887#c4 --- Comment #4 from Michael Chang <mchang(a)suse.com> --- (In reply to Josef Reidinger from comment #3) > (In reply to Michael Chang from comment #2) > > (In reply to Josef Reidinger from comment #1) > > ah, fine so if we use GRUB_DEFAULT=saved and GRUB_SAVEDEFAULT='true' > then "grub-set-default" value is ignored, right? Strictly speaking grub-set-default is not ignored, it could still be used to set "last default" from linux, besides from grub. :) > And if that environment > block is not available it will use that default instead? Yes I think so. But grub will also spew ugly warnings (rather clueless like "sparse file not allowed") in this case. :( -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1156441] grub2-install does not setup env_block for btrfs
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1156441 http://bugzilla.opensuse.org/show_bug.cgi?id=1156441#c23 --- Comment #23 from Ignaz Forster <iforster(a)suse.com> --- Also added the comment to bug 1126900, as it actually belongs there. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1126900] health-checker: grub2-editenv: error: cannot open `/boot/grub2/grubenv': Read-only file system.
by bugzilla_noreply＠novell.com 03 Jan '20

03 Jan '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1126900 http://bugzilla.opensuse.org/show_bug.cgi?id=1126900#c16 --- Comment #16 from Ignaz Forster <iforster(a)suse.com> --- I'm thinking of something like the following patch: https://build.opensuse.org/package/rdiff/home:fos:branches:Base:System/grub… This adds a new configure option `--with-statedir`, which will be the name of the directory containing the grubenv file below /boot. This is a prototype, for a final version open_envblk_file in grub-core/commands/loadenv.c may also need adjustments to load the new default file, and the TODOs should be removed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0