April 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208937] New: mtr aborts when run in reporting mode
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1208937 Bug ID: 1208937 Summary: mtr aborts when run in reporting mode Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: srinidhi.bs(a)microfocus.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The "mtr -r" command aborts with a buffer overflow error on Tumbleweed. It has been happening for a few weeks now. I could get the stacktrace generated only today. # gdb --args mtr -4 -r 20 www.google.com GNU gdb (GDB; openSUSE Tumbleweed) 12.1 Copyright (C) 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-suse-linux". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://bugs.opensuse.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from mtr... This GDB supports auto-downloading debuginfo from the following URLs: https://debuginfod.opensuse.org/ Enable debuginfod for this session? (y or [n]) y Debuginfod has been enabled. To make this setting permanent, add 'set debuginfod enabled on' to .gdbinit. Downloading 0.16 MB separate debug info for /root/mtr Reading symbols from /root/.cache/debuginfod_client/bccc549d0f1bec15d00c166d1b1994fdf23574ee/debuginfo... Downloading 0.04 MB separate debug info for /root/.cache/debuginfod_client/bccc549d0f1bec15d00c166d1b1994fdf23574ee/debuginfo (gdb) r Starting program: /usr/sbin/mtr -4 -r 20 www.google.com [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". [Detaching after fork from child process 23026] [Detaching after fork from child process 23027] Start: 2023-03-04T10:35:20+0530 *** buffer overflow detected ***: terminated Program received signal SIGABRT, Aborted. __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44 44 return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0; Missing separate debuginfos, use: zypper install mtr-debuginfo-0.95-1.5.x86_64 (gdb) t a a bt Thread 1 (Thread 0x7ffff7c6d740 (LWP 23022) "mtr"): #0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44 #1 0x00007ffff7d00503 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78 #2 0x00007ffff7cade16 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26 #3 0x00007ffff7c9689c in __GI_abort () at abort.c:79 #4 0x00007ffff7c975d7 in __libc_message (fmt=fmt@entry=0x7ffff7e1b552 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150 #5 0x00007ffff7d95c4b in __GI___fortify_fail (msg=msg@entry=0x7ffff7e1b4f8 "buffer overflow detected") at fortify_fail.c:24 #6 0x00007ffff7d940c6 in __GI___chk_fail () at chk_fail.c:28 #7 0x00007ffff7d93c35 in ___snprintf_chk (s=s@entry=0x7fffffffc2a1 " ", maxlen=maxlen@entry=1024, flag=flag@entry=2, slen=slen@entry=991, format=format@entry=0x7fffffffc130 "%6s") at snprintf_chk.c:29 #8 0x000055555555f24e in snprintf (__fmt=0x7fffffffc130 "%6s", __n=1024, __s=0x7fffffffc2a1 " ") at /usr/include/bits/stdio2.h:54 #9 report_close (ctl=0x7fffffffd150) at ui/report.c:143 #10 0x000055555555a103 in main (argc=<optimized out>, argv=<optimized out>) at ui/mtr.c:828 (gdb) q A debugging session is active. Inferior 1 [process 23022] will be killed. Quit anyway? (y or n) y # tumbleweed status latest : 20230302 target : 20230221 installed: 20230221 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1206846] sysfs: cannot create duplicate filename '/bus/nvmem/devices/rmem0'
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1206846 https://bugzilla.suse.com/show_bug.cgi?id=1206846#c6 Ivan Ivanov <ivan.ivanov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS Assignee|kernel-bugs(a)opensuse.org |ivan.ivanov(a)suse.com --- Comment #6 from Ivan Ivanov <ivan.ivanov(a)suse.com> --- Hi, sorry for delayed answer. Regarding rmem0 issue hopefully this patch [1] will accepted soon. It will fix this bug. [1] https://lore.kernel.org/all/20230411135035.106725-1-iivanov@suse.de/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208937] mtr aborts when run in reporting mode
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208937 http://bugzilla.opensuse.org/show_bug.cgi?id=1208937#c5 --- Comment #5 from Eugene Popov <popov895(a)ukr.net> --- (In reply to Marcus Meissner from comment #2) > you built it without overflow checking ;) > > anyway, fixed like this in factory: > > +- snprintf(buf + len, sizeof(buf), fmt, data_fields[j].title); > ++ snprintf(buf + len, sizeof(buf) - len, fmt, data_fields[j].title); Thanks for fixing it. Can you send your patch to upstream? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210245] New: ghc stack broken on aarch64
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1210245 Bug ID: 1210245 Summary: ghc stack broken on aarch64 Classification: openSUSE Product: openSUSE Backports Version: SLE-15-SP5 Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Packages Assignee: packagehub-bugs(a)suse.com Reporter: guillaume.gardet(a)arm.com QA Contact: packagehub-bugs(a)suse.com CC: afaerber(a)suse.com, dmueller(a)suse.com, lubos.kocman(a)suse.com Found By: --- Blocker: --- ghc stack is broken on Backports SLE-15-SP5 for aarch64 since ghc-bootstrap uses default llvm which is currently at version 15, but this version is not supported by ghc 8.10.x You can see a failure in openSUSE:Backports:SLE-15-SP5/ghc-bootstrap-helpers and also in ghc package: [ 470s] configure: We only support llvm 9 to 13 (found 15.0.7). and it fails later. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1207122] VUL-0: CVE-2023-23457: upx: SEGV on PackLinuxElf64:invert_pt_dynamic() in p_lx_elf.cpp
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1207122 https://bugzilla.suse.com/show_bug.cgi?id=1207122#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0088-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1183510,1184701,1184702,1207121,1207122,1209765,1209766,1209767,1209768,1209769,1209770,1209771 CVE References: CVE-2021-20285,CVE-2021-30500,CVE-2021-30501,CVE-2021-43311,CVE-2021-43312,CVE-2021-43313,CVE-2021-43314,CVE-2021-43315,CVE-2021-43316,CVE-2021-43317,CVE-2023-23456,CVE-2023-23457 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): upx-4.0.2-bp154.4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207121] VUL-0: CVE-2023-23456: upx: heap-buffer-overflow in PackTmt:pack()
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1207121 https://bugzilla.suse.com/show_bug.cgi?id=1207121#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0088-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1183510,1184701,1184702,1207121,1207122,1209765,1209766,1209767,1209768,1209769,1209770,1209771 CVE References: CVE-2021-20285,CVE-2021-30500,CVE-2021-30501,CVE-2021-43311,CVE-2021-43312,CVE-2021-43313,CVE-2021-43314,CVE-2021-43315,CVE-2021-43316,CVE-2021-43317,CVE-2023-23456,CVE-2023-23457 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): upx-4.0.2-bp154.4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184702] VUL-1: CVE-2021-30500: upx: Null pointer dereference in PackLinuxElf:canUnpack() in p_lx_elf.cpp
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1184702 https://bugzilla.suse.com/show_bug.cgi?id=1184702#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0088-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1183510,1184701,1184702,1207121,1207122,1209765,1209766,1209767,1209768,1209769,1209770,1209771 CVE References: CVE-2021-20285,CVE-2021-30500,CVE-2021-30501,CVE-2021-43311,CVE-2021-43312,CVE-2021-43313,CVE-2021-43314,CVE-2021-43315,CVE-2021-43316,CVE-2021-43317,CVE-2023-23456,CVE-2023-23457 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): upx-4.0.2-bp154.4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184701] VUL-1: CVE-2021-30501: upx: Assertion abort in function MemBuffer:alloc()
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1184701 https://bugzilla.suse.com/show_bug.cgi?id=1184701#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0088-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1183510,1184701,1184702,1207121,1207122,1209765,1209766,1209767,1209768,1209769,1209770,1209771 CVE References: CVE-2021-20285,CVE-2021-30500,CVE-2021-30501,CVE-2021-43311,CVE-2021-43312,CVE-2021-43313,CVE-2021-43314,CVE-2021-43315,CVE-2021-43316,CVE-2021-43317,CVE-2023-23456,CVE-2023-23457 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): upx-4.0.2-bp154.4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1183510] VUL-1: CVE-2021-20285: upx: Illegal memory access in canPack function in p_lx_elf.cpp
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1183510 https://bugzilla.suse.com/show_bug.cgi?id=1183510#c2 --- Comment #2 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2023:0088-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1183510,1184701,1184702,1207121,1207122,1209765,1209766,1209767,1209768,1209769,1209770,1209771 CVE References: CVE-2021-20285,CVE-2021-30500,CVE-2021-30501,CVE-2021-43311,CVE-2021-43312,CVE-2021-43313,CVE-2021-43314,CVE-2021-43315,CVE-2021-43316,CVE-2021-43317,CVE-2023-23456,CVE-2023-23457 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): upx-4.0.2-bp154.4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1206349] guake no longer works in 15.4
by bugzilla_noreply＠suse.com 11 Apr '23

11 Apr '23

https://bugzilla.suse.com/show_bug.cgi?id=1206349 https://bugzilla.suse.com/show_bug.cgi?id=1206349#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2023:0089-1: An update that solves one vulnerability and has one errata is now available. Category: recommended (important) Bug References: 1197256,1206349 CVE References: CVE-2021-23556 JIRA References: Sources used: openSUSE Backports SLE-15-SP4 (src): guake-3.8.1-bp154.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0