October 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1002626] New: CVE-2016-1246: Buffer overflow in DBD-mysql error reporting (Perl DBI module)
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.opensuse.org/show_bug.cgi?id=1002626 Bug ID: 1002626 Summary: CVE-2016-1246: Buffer overflow in DBD-mysql error reporting (Perl DBI module) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Reference: http://seclists.org/oss-sec/2016/q4/13 ================================================= When a reporting a variable bind error, DBD-mysql would try to construct the error message in a fixed-size buffer on the stack, possibly leading to arbitrary code execution. It depends on the application whether untrusted data is included in the error message. -D_FORTIFY_SOURCE=2 would catch this and turn the issue into a mere crash. Upstream commit: <https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b…> Upstream credits Pali Rohár with reporting and fixing this issue. Here is what I used to validate the patch: use strict; use warnings; use DBI; my $dbh = DBI->connect("DBI:mysql:mysql:", "root", "", { PrintError => 0, RaiseError => 1}); $dbh->do('CREATE TEMPORARY TABLE t (i INTEGER NOT NULL)'); $dbh->begin_work; my $st = $dbh->prepare('INSERT INTO t VALUES (?)'); $st->bind_param(1, 'X' x 64, DBI::SQL_INTEGER); $dbh->commit; ================================================= -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1002351] CVE-2016-8339: Redis CONFIG SET client-output-buffer-limit Code Execution Vulnerability
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.novell.com/show_bug.cgi?id=1002351 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv2:RedHat:CVE-2016-8339 | |:4.6:(AV:N/AC:H/Au:S/C:P/I: | |P/A:P) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 947645] aarch64: Yast crashes immediately
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.suse.com/show_bug.cgi?id=947645 http://bugzilla.suse.com/show_bug.cgi?id=947645#c8 --- Comment #8 from Alan Ott <alan(a)softiron.co.uk> --- It's a year old bug. It doesn't do it with recent Tumbleweeds. It's OK to close. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 999123] kontact5 locks up on start
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.suse.com/show_bug.cgi?id=999123 http://bugzilla.suse.com/show_bug.cgi?id=999123#c6 Iakov Karpov <srid(a)rkmail.ru> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(srid(a)rkmail.ru) | --- Comment #6 from Iakov Karpov <srid(a)rkmail.ru> --- (In reply to Wolfgang Bauer from comment #5) # rpm -qa | grep -iE "akonadi|kdepim|baloo|kmail" akonadi-mime-16.08.0-1.1.x86_64 libKF5AkonadiWidgets5-16.08.0-1.1.x86_64 kdepim-addons-16.08.0-1.1.x86_64 baloo5-kioslaves-5.26.0-1.1.x86_64 libKF5Libkdepim5-16.08.0-1.1.x86_64 akonadi_resources-16.08.0-1.1.x86_64 libkdepim-16.08.0-1.1.x86_64 libKF5AkonadiMime5-16.08.0-1.1.x86_64 libkdepimlibs4-4.14.10-4.6.x86_64 kmail5-16.08.0-1.1.x86_64 libKF5AkonadiCalendar5-16.08.0-1.1.x86_64 libKF5AkonadiCore5-16.08.0-1.1.x86_64 libakonadi4-4.14.10-4.6.x86_64 baloo5-file-5.26.0-1.1.x86_64 kdepim-16.08.0-1.1.x86_64 kmailtransport-16.08.0-1.1.x86_64 akonadi-contact-16.08.0-1.1.x86_64 baloo5-5.26.0-1.1.x86_64 baloo5-lang-5.26.0-1.1.noarch akonadi-search-16.08.0-1.1.x86_64 baloo5-widgets-16.08.0-1.1.x86_64 kdepim-runtime-16.08.0-1.1.x86_64 libKF5AkonadiNotes5-16.08.0-1.1.x86_64 libKF5Baloo5-5.26.0-1.1.x86_64 akonadi-server-16.08.0-1.1.x86_64 baloo5-tools-5.26.0-1.1.x86_64 libakonadiprotocolinternals1-1.13.0-4.4.x86_64 kdepim-apps-libs-16.08.0-1.1.x86_64 libKF5AkonadiSearch-16.08.0-1.1.x86_64 baloo5-imports-5.26.0-1.1.x86_64 kdepimlibs4-4.14.10-4.6.x86_64 libKF5AkonadiContact5-16.08.0-1.1.x86_64 libKF5AkonadiAgentBase5-16.08.0-1.1.x86_64 libKF5BalooEngine5-5.26.0-1.1.x86_64 libkdepimlibs4 and kdepimlibs4 cannot be removed, too many KDE packages depend on it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1000988] YaST Software Management crashed on second start under KDE Session
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.suse.com/show_bug.cgi?id=1000988 http://bugzilla.suse.com/show_bug.cgi?id=1000988#c2 --- Comment #2 from Iakov Karpov <srid(a)rkmail.ru> --- (In reply to Imobach Gonzalez Sosa from comment #1) It's 26 megabytes, where should I upload it? Bugzilla won't allow to upload more than 10 megs. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 954813] Impossible to add ISO image as repository, if path contains space
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.suse.com/show_bug.cgi?id=954813 http://bugzilla.suse.com/show_bug.cgi?id=954813#c5 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS Assignee|yast-internal(a)suse.de |jreidinger(a)suse.com --- Comment #5 from Josef Reidinger <jreidinger(a)suse.com> --- fix is in review https://github.com/yast/yast-packager/pull/189 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 913421] logrotate not running after update from 13.1 to 13.2
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.novell.com/show_bug.cgi?id=913421 Jacob W <jacobwinski(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|jacobwinski(a)gmail.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 954813] Impossible to add ISO image as repository, if path contains space
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.suse.com/show_bug.cgi?id=954813 http://bugzilla.suse.com/show_bug.cgi?id=954813#c4 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jreidinger(a)suse.com --- Comment #4 from Josef Reidinger <jreidinger(a)suse.com> --- Problem is that URL.build escape it and also URI.encode escape it. So only once is needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1001790] kde "suspend when lid is closed" settings are ignored
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.opensuse.org/show_bug.cgi?id=1001790 http://bugzilla.opensuse.org/show_bug.cgi?id=1001790#c6 --- Comment #6 from Wolfgang Bauer <wbauer(a)tmo.at> --- (In reply to Wolfgang Bauer from comment #5) > OTOH, there may have been a bug in Plasma/powerdevil 5.8 beta (which we > currently have in 42.2), unfortunately I see no change in 5.8 final, but I > cannot find an open KDE bug report about that either. FYI, I just had a look in Plasma 5.8 beta on my 13.2 system, and powerdevil does seem to inhibit logind properly: test@amiga:~/Desktop> systemd-inhibit --list ... Who: PowerDevil (UID 1000/test, PID 7981/org_kde_powerde) What: handle-power-key:handle-suspend-key:handle-hibernate-key:handle-lid-switch Why: KDE handles power events Mode: block As this is a desktop system, I cannot test whether lid close actually does respect KDE's settings though (and 13.2 has a much older systemd version anyway). But I would suggest to look at the output of that command and see whether you have a similar entry. If not it's a problem with powerdevil I suppose. If yes, I would try to set "LidSwitchIgnoreInhibited=no" in /etc/systemd/logind.conf and see if it helps. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 846909] Broken symlink in /etc/localtime
by bugzilla_noreply＠novell.com 03 Oct '16

03 Oct '16

http://bugzilla.opensuse.org/show_bug.cgi?id=846909 http://bugzilla.opensuse.org/show_bug.cgi?id=846909#c7 --- Comment #7 from Mark Goldstein <goldstein.mark(a)gmail.com> --- (In reply to Mark Goldstein from comment #6) > I bumped into the same issue with current TW release: > NAME="openSUSE Tumbleweed" > # VERSION="20160928" > ID=opensuse > ID_LIKE="suse" > VERSION_ID="20160928" > > /etc/localtime is ../../<timezone_file> instead of > ../usr/share/zoneinfo/<timezone_file> > > rpm -q --qf "%{DISTURL}" timezone > returns > obs://build.opensuse.org/openSUSE:Factory/standard/ > 29e4864f5e89ba25e9bd87c9cf9bb637-timezone > > ... and zic -l <timezone> in my case did not restore the correct link. > After I removed the link and manually set the correct one, I tried zic -l > again and got a wrong value again. > > (Tried different timezones with zic -l and got the same broken link > ../../<timezone>) > > With broken link the system uses UTC as local zone. If I use full path in zic command, the link is set correctly: zic -l /usr/share/zoneinfo/XXX/YYY links /etc/localtime to ../usr/share/zoneinfo/XXX/YYY -- You are receiving this mail because: You are on the CC list for the bug.

1 0