January 2007 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 231082] New: VUL-0: cacti command insertion
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=231082 Summary: VUL-0: cacti command insertion Product: SUSE Linux 10.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: hmuelle(a)novell.com ReportedBy: meissner(a)novell.com QAContact: qa(a)suse.de CC: security-team(a)suse.de http://www.heise.de/newsticker/meldung/83037/from/rss09 http://secunia.com/advisories/23528 Description: rgod has discovered three vulnerabilities in Cacti, which can be exploited by malicious people to bypass certain security restrictions, manipulate data and compromise vulnerable systems. 1) The cmd.php script does not properly restrict access to command line usage and is installed in a web-accessible location. Successful exploitation requires that "register_argc_argv" is enabled. 2) Input passed in the URL to cmd.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation requires that "register_argc_argv" is enabled. 3) The results from the SQL queries in 2) in cmd.php are not properly sanitised before being used as shell commands. This can be exploited to inject arbitrary shell commands. The vulnerabilities are confirmed in version 0.8.6i. Other versions may also be affected. Solution: Move the "cmd.php" script to a not web-accessible path, and update other scripts accordingly. Edit the source code to ensure that input is properly sanitised. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 8

[Bug 224778] New: softirq.c#cpu_callback BUG_ON
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=224778 Summary: softirq.c#cpu_callback BUG_ON Product: openSUSE 10.2 Version: RC 4 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers(a)forge.provo.novell.com ReportedBy: dhecht(a)vmware.com QAContact: qa(a)suse.de While installing SuSE 10.2 alpha4 32-bit release on VMware, we hit the following kernel BUG_ON: <0>kernel BUG at kernel/softirq.c:577! We've confirmed the bug is still in RC1. Note that this was also reported in: https://bugzilla.novell.com/show_bug.cgi?id=210931. Also note that the kernel race leading to this BUG_ON is not specific to running in a VM (granted, it may be hard to reproduce on native hardware). The race is between the init path and the timer interrupt. Before init thread completes spawn_ksoftirqd(), the timer interrupt fires, calling update_process_times -> rcu_check_callbacks -> tasklet_schedule -> __tasklet_schedule, which does __get_cpu_var(tasklet_vec).list = t. This causes spawn_ksoftirqd -> cpu_callback to BUG_ON since the tasklet_vec list is no longer empty. I'm not sure who is using RCU so early to cause rcu_pending() to return true before ksoftirqd is spawned. Detailed description of the race: The BUG_ON encountered is: <4>CPU0: AMD Dual Core AMD Opteron(tm) Processor 275 stepping 02 <6>Total of 1 processors activated (4409.57 BogoMIPS). <4>ENABLING IO-APIC IRQs <6>..TIMER: vector=0x31 apic1=0 pin1=2 apic2=-1 pin2=-1 <0>------------[ cut here ]------------ <0>kernel BUG at kernel/softirq.c:577! <0>invalid opcode: 0000 [#1] <0>SMP <0>last sysfs file: <4>Modules linked in: <0>CPU: 0 <4>EIP: 0060:[<c0124a6d>] Not tainted VLI <4>EFLAGS: 00010286 (2.6.18-9-default #1) <0>EIP is at cpu_callback+0x45/0x238 <0>eax: c03e606c ebx: 00000000 ecx: 00000000 edx: 00e1f100 <0>esi: 00000000 edi: 00000000 ebp: 00000000 esp: c1263f84 <0>ds: 007b es: 007b ss: 0068 <0>Process swapper (pid: 1, ti=c1262000 task=c12615f0 task.ti=c1262000) <0>Stack: c01002fc 00000000 00000000 00000000 00000000 00000000 c03c5a71 c01002f c <0> c0100344 c12615f0 c12042e0 c03b1fcc c0103ca6 00000202 c01002fc 0000000 0 <0> 00000000 00000000 00000000 00000000 00000000 0000007b c01002fc 0000000 0 <0>Call Trace: <4> [<c03c5a71>] spawn_ksoftirqd+0x1c/0x3b <4> [<c0100344>] init+0x48/0x2bc <4> [<c0102005>] kernel_thread_helper+0x5/0xb <4>DWARF2 unwinder stuck at kernel_thread_helper+0x5/0xb <4>Leftover inexact backtrace: <0>Code: 00 00 83 fa 04 0f 84 ae 00 00 00 83 fa 07 0f 85 ff 01 00 00 e9 d3 00 00 00 8b 14 8d 80 cb 35 c0 b8 6c 60 3e c0 83 3c 10 00 74 08 <0f> 0b 41 02 66 cc 2c c0 b8 70 60 3e c0 83 3c 10 00 74 08 0f 0b <0>EIP: [<c0124a6d>] cpu_callback+0x45/0x238 SS:ESP 0068:c1263f84 <4> <0>Kernel panic - not syncing: Attempted to kill init! <4> The BUG_ON statement hit is in kernel/softirq.c#cpu_callback: BUG_ON(per_cpu(tasklet_vec, hotcpu).list); We debugged this further to confirm it is a kernel race. We instrumented all the places in that prepend to tasklet_vec[cpu].list with a BUG_ON checking that the cpu_callback(...CPU_UP_PREPARE) had a chance to execute, and found that the path that wins the race to updating tasklet_vec[cpu].list is: checking if image is initramfs... it is ------------[ cut here ]------------ kernel BUG at kernel/softirq.c:356! invalid opcode: 0000 [#1] SMP last sysfs file: Modules linked in: CPU: 0 EIP: 0060:[<c012539b>] Not tainted VLI EFLAGS: 00010046 (2.6.18-9-vanilla #1) EIP is at __tasklet_schedule+0x41/0x8c eax: c03de078 ebx: 00000000 ecx: c03de06c edx: 00e27100 esi: cfb82000 edi: 00000046 ebp: 00000000 esp: cfb83784 ds: 007b es: 007b ss: 0068 Process swapper (pid: 1, ti=cfb82000 task=cfb815f0 task.ti=cfb82000) Stack: cfb815f0 00000000 00000000 c0128f72 cfb837fc 00000000 00000000 c0107871 c02fca20 c0146fba cfb837fc c034ce28 c034ce00 00000000 cfb83868 c0147075 000000af cfb837fc c02fca20 00000000 cfb837fc 00000000 cfb83868 c0106966 Call Trace: [<c0128f72>] update_process_times+0x4d/0x5c [<c0107871>] timer_interrupt+0x4b/0x72 [<c0146fba>] handle_IRQ_event+0x23/0x49 [<c0147075>] __do_IRQ+0x95/0xee [<c0106966>] do_IRQ+0x71/0x83 [<c0104e1a>] common_interrupt+0x1a/0x20 DWARF2 unwinder stuck at common_interrupt+0x1a/0x20 Leftover inexact backtrace: [<c017332e>] do_path_lookup+0x106/0x25f [<c017214d>] getname+0x59/0xb0 [<c0173bfb>] __user_walk_fd+0x2f/0x40 [<c016d6eb>] vfs_lstat_fd+0x16/0x3d [<c016d726>] sys_newlstat+0x14/0x28 [<c03b1ef2>] clean_path+0x19/0x4e [<c03b2d8b>] do_header+0x1a9/0x1b3 [<c03b27bd>] do_name+0x7f/0x1c2 [<c03b1a1b>] write_buffer+0x1a/0x28 [<c03b1a8a>] flush_window+0x61/0xaf [<c03b1e6a>] inflate_codes+0x392/0x3f7 [<c03b327d>] inflate_dynamic+0x4e8/0x548 [<c03b37c0>] unpack_to_rootfs+0x4e3/0x8dc [<c01002fc>] init+0x0/0x2bc [<c01002fc>] init+0x0/0x2bc [<c03b3c34>] populate_rootfs+0x7b/0xe2 [<c01002fc>] init+0x0/0x2bc [<c01002fc>] init+0x0/0x2bc [<c010032b>] init+0x2f/0x2bc [<c0103ca6>] ret_from_fork+0x6/0x20 [<c01002fc>] init+0x0/0x2bc [<c01002fc>] init+0x0/0x2bc [<c0102005>] kernel_thread_helper+0x5/0xb Code: 8b 14 9d 80 4b 35 c0 8b 14 11 89 10 8b 14 9d 80 4b 35 c0 89 04 11 8b 56 10 b8 78 e0 3d c0 8b 14 95 80 4b 35 c0 83 3c 10 00 75 08 <0f> 0b 64 01 94 59 2c c0 b8 80 c3 3d c0 83 0c 10 20 89 e2 81 e2 EIP: [<c012539b>] __tasklet_schedule+0x41/0x8c SS:ESP 0068:cfb83784 <0>Kernel panic - not syncing: Fatal exception in interrupt Note that 0xc0128f72 is the instruction after the call to rcu_check_callbacks from update_process_times. So, it is rcu_check_callbacks that is calling: tasklet_schedule(&per_cpu(rcu_tasklet, cpu)); before spawn_ksoftirqd() had a chance to execute, leading to the original BUG_ON. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 12

[Bug 229365] New: Spurious Detection of "Intel 965G" During Start-up Leading to Complete Lock-up
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=229365 Summary: Spurious Detection of "Intel 965G" During Start-up Leading to Complete Lock-up Product: openSUSE 10.2 Version: Final Platform: i686 OS/Version: SuSE Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers(a)forge.provo.novell.com ReportedBy: rschulz(a)sonic.net QAContact: qa(a)suse.de CC: bwalle(a)novell.com During start-up processing the following lines are printed to the console: -==- Starting udevd Linux agpgart interface v0.101 (c) Dave Jones agpgart: Detected an Intel 965G Chipset. -==- Immediately following this, the system completely hung / locked up and the only way out is the reset button or power cycling. Hardware is ASUS P5B with Core 2 Duo chip, Intel P965 / ICH8R chipset with 4 GB of RAM, an nVidia GeForce 7300 videao and an LSI Logic SCSI interface installed. There is no Intel graphics. Mainboard's vendor information is at <http://www.asus.com/products.aspx?l1=3&l2=11&l3=307&model=1295&modelmenu=1>. Work-arounds include: 1) Disabling the BIOS setting that allows software to remap I/O addresses so the upper-most 1 GB of RAM may be addressed -or- 2) Adding "blacklist intel_agp" to "/etc/modprobe.conf.local" I ran all publicly announced releases from 10.2 alpha5 through RC1 without experiencing this symptom. It appeared only upon installing and booting the final release. The problem does not occur for the system / kernel used by the installer itself. Randall Schulz -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 5

[Bug 190481] save_video_pci_state support for s2ram
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=190481 ------- Comment #33 from seife(a)novell.com 2007-01-10 05:18 MST ------- "-p -m" might be a good candidate. Strange, this is one of the few Thinkpads that does not work with "-a3", but well, shit happens :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 179702] Latest HP laptops do not reach max cpufreq, might not update thermal,battery info or could get "bad firmware state" that even survives shutdown. Caused by probably wrong/unfinished ACPI BIOS/EC read/writes
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=179702 trenn(a)novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|vojtech(a)novell.com |trenn(a)novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 179702] Latest HP laptops do not reach max cpufreq, might not update thermal,battery info or could get "bad firmware state" that even survives shutdown. Caused by probably wrong/unfinished ACPI BIOS/EC read/writes
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=179702 trenn(a)novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|HP nx9420 ACPI BIOS Bug, |Latest HP laptops do not reach max cpufreq, |_PPC always returns 1 |might not update thermal,battery info or could |instead of 0 |get "bad firmware state" that even survives | |shutdown. Caused by probably wrong/unfinished | |ACPI BIOS/EC read/writes ------- Comment #103 from trenn(a)novell.com 2007-01-10 05:17 MST ------- I collected all related HP problems in this bug for now, 10.1 and 10.2. If you describe problems pls drop a short note whether it's 10.1 or 10.2, even the problem exists on both Things should go better for 10.2 with this kernel: ftp.suse.com/pub/projects/kernel/kotd/i386/HEAD/kernel-default.i586.rpm and for 10.1/SLED10 people with this kernel: ftp.suse.com/pub/projects/kernel/kotd/sle10-sp-i386/SLES10_SP1_BRANCH/kerne… Would be great if people could try those out. Be aware that there are several problems: a) There still might be issues with ACPI after suspend to disk (concerning fans) There have been several patches suggested, I still want to wait for the final one. In the 10.1/SLED10-SP1 kernel some infrastructure already has been added to be able to apply specific ACPI suspend patches then. b) There is also the phenomenon that some HPs (mostly Pentium Dual Cores?) that when firmware comes into some kind of bad state (you should see this if: cat /sys/devices/system/cpu/cpu*/cpufreq/scaling_max_freq does not show the highest supported frequency). If this is the case, booting windows or removing battery and AC (all power) for some minutes should help. Also compiling psmouse as a moudule and rmmodding it before shutddown helps (not sure whether this is enough to bring it back to the "good state". I wonder whether those kernels work fine as soon as the machine is in "good state". I don't/can't go for the psmouse compiled as module workaround which only hides a bug anyway. Thanks to Alessandro, there is another bug opened here: http://bugzilla.kernel.org/show_bug.cgi?id=7689 and Intel people who have much more man power are working on it. It would be great if these kernels could be tested and reported back what works (updating AC/battery state should work now) and what still does not work (still switching into "bad state"?, still AC/battery problems?). Play a bit with the ACPI things, unplugging AC, closing lid, reading out hardware info through /proc/acpi/thermal_zone/*/* and /proc/acpi/battery/*/* and watch a bit the system whether everything works stable for longer time. If you experience much better behaviour, this patch will go in. I am still very busy, came back from vacation some days ago and got 4 new bugs only yesterday. Still I consider this one the most important and will go on with "time intensive" debugging after I at least answered on bugs and emails... Related bugzilla.kernel.org bugs: Thanks to Alessandro (he fall out of CCs?): http://bugzilla.kernel.org/show_bug.cgi?id=7689 Describes the "firmware falls into bad state" problem http://bugzilla.kernel.org/show_bug.cgi?id=5534 Describes the problem of too many notify/gpes/.. happening and processing of ACPI methods get stuck/cancled because all are running in one kernel thread. The latest patch from comment #180 is in above kernels and should make things better (could be that this also cause the "bad state", try to evaluate this...). http://bugzilla.kernel.org/show_bug.cgi?id=7122 Possible broken fans after suspend to disk. This should not be that hard to resolve, but I like above problems should be clarified first. Maybe it's related and those "workaround" patches not needed or can be written nicer. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 177050] Installation fails when reading from CD times out, possibly due to missing Floppy drive
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=177050 VladCodrea(a)mail.utexas.edu changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|VladCodrea(a)mail.utexas.edu | ------- Comment #19 from VladCodrea(a)mail.utexas.edu 2007-01-10 05:16 MST ------- Created an attachment (id=112192) --> (https://bugzilla.novell.com/attachment.cgi?id=112192&action=view) Output of 'hdparm -i /dev/hdc' and 'hdparm -I /dev/hdc' Attached is the output of 'hdparm -i /dev/hdc' and 'hdparm -I /dev/hdc' when no CD is inserted. If I try to run these commands after inserting a CD, they freeze without outputting anything. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 173291] Adding corrupted/broken rpm-md/yum repos via the addon product dialogs makes YaST segfault later
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=173291 ------- Comment #39 from ast(a)novell.com 2007-01-10 04:57 MST ------- Duncan? Any news? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 204147] installation system freezes on compaq proliant 6400r
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=204147 trenn(a)novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |per.jessen(a)enidan.com ------- Comment #13 from trenn(a)novell.com 2007-01-10 04:50 MST ------- Can you try apic boot param pls. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 0

[Bug 232361] New: Ragistration code register incorrect language for product
by bugzilla_noreply＠novell.com 10 Jan '07

10 Jan '07

https://bugzilla.novell.com/show_bug.cgi?id=232361 Summary: Ragistration code register incorrect language for product Product: openSUSE 10.2 Version: Final Platform: i386 OS/Version: SuSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: alpha096(a)tpg.com.au QAContact: qa(a)suse.de My registration code 627EE5A8B283EO register the product as German Language This can be viewed in my Novell Profile of user zczc2311 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

1 1