February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1019877] New: VUL-0: CVE-2016-10132,CVE-2016-10133,CVE-2016-10141: mupfg: mujs: Multiple security issues
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1019877 Bug ID: 1019877 Summary: VUL-0: CVE-2016-10132,CVE-2016-10133,CVE-2016-10141: mupfg: mujs: Multiple security issues Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: idonmez(a)suse.com Reporter: astieger(a)suse.com QA Contact: qa-bugs(a)suse.de CC: gber(a)opensuse.org, idonmez(a)suse.com, security-team(a)suse.de Found By: Security Response Team Blocker: --- http://seclists.org/oss-sec/2017/q1/76 1. Null pointer dereference in regexp.c The return value from malloc is not properly checked before dereferencing it which can result in a crash. https://bugs.ghostscript.com/show_bug.cgi?id=697381 http://git.ghostscript.com/?p=mujs.git;h=fd003eceda531e13fbdd1aeb6e9c731564… Use CVE-2016-10132 for all of fd003eceda531e13fbdd1aeb6e9c73156496e569. 2. Heap buffer overflow write in jsrun.c: js_stackoverflow() There was a logical error in the code which can be used to trigger a heap overflow write. https://bugs.ghostscript.com/show_bug.cgi?id=697401 http://git.ghostscript.com/?p=mujs.git;a=commit;h=77ab465f1c394bb77f00966cd… 3. Integer overflow in the regemit function - CVE-2016-10141 An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition. Upstream bug: https://bugs.ghostscript.com/show_bug.cgi?id=697448 Upstream patch: http://git.ghostscript.com/?p=mujs.git;h=fa3d30fd18c348bb4b1f3858fb860f4fcd… References: https://bugzilla.redhat.com/show_bug.cgi?id=1412967 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10141 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10132 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10133 http://seclists.org/oss-sec/2017/q1/76 https://bugs.ghostscript.com/show_bug.cgi?id=697448 http://git.ghostscript.com/?p=mujs.git;h=fa3d30fd18c348bb4b1f3858fb860f4fcd… -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1022028] amanda backup system built without ssh support
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022028 http://bugzilla.suse.com/show_bug.cgi?id=1022028#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-OU-2017:0371-1: An update that has one optional fix can now be installed. Category: optional (moderate) Bug References: 1022028 CVE References: Sources used: openSUSE Leap 42.2 (src): amanda-3.3.6-6.1 openSUSE Leap 42.1 (src): amanda-3.3.6-4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1005180] New: Bluetooth stops working after a few minutes (regression)
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1005180 Bug ID: 1005180 Summary: Bluetooth stops working after a few minutes (regression) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: ingham(a)i-pi.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- With one of the patches in the last week, a Bluetooth bug reappeared. The symptom is that after a few minutes (anywhere from about 2 to as much as 15 minutes) the Bluetooth mouse stops working. If I disable and re-enable Bluetooth through the system tray icon, it will start working again for some time. This problem existed earlier in the year, but it was resolved several months ago. This might be bug 970195 showing up again. The timing is about right. lsusb output: Bus 002 Device 004: ID 0a5c:5802 Broadcom Corp. BCM5880 Secure Applications Processor with fingerprint touch sensor Bus 002 Device 006: ID 8087:07dc Intel Corp. Bus 002 Device 002: ID 8087:8000 Intel Corp. Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 001 Device 004: ID 056a:4001 Wacom Co., Ltd Bus 001 Device 003: ID 0c45:649d Microdia Bus 001 Device 002: ID 8087:8008 Intel Corp. Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 003 Device 002: ID 0bc2:ab34 Seagate RSS LLC Bus 003 Device 004: ID 047f:0113 Plantronics, Inc. Bus 003 Device 005: ID 04e8:6860 Samsung Electronics Co., Ltd Galaxy (MTP) Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Output of bluetoothctl: [NEW] Controller 7C:5C:F8:33:1C:0A Socrates [default] [NEW] Device 00:1F:20:23:F3:E0 Logitech Bluetooth Mouse M555b Relevant packages: bluedevil5-5.8.0-1.1.x86_64 libQt5Bluetooth5-imports-5.7.0-1.1.x86_64 libQt5Bluetooth5-5.7.0-1.1.x86_64 libbluetooth3-5.42-1.1.x86_64 gnome-bluetooth-plugin-phone-manager-0.69-9.7.x86_64 gnome-bluetooth-3.20.0-1.2.x86_64 bluez-qt-udev-5.26.0-1.2.x86_64 bluez-5.42-1.1.x86_64 libgnome-bluetooth13-3.20.0-1.2.x86_64 libKF5BluezQt6-5.26.0-1.2.x86_64 typelib-1_0-GnomeBluetooth-1_0-3.20.0-1.2.x86_64 bluez-qt-imports-5.26.0-1.2.x86_64 pulseaudio-module-bluetooth-9.0-2.1.x86_64 Journalctl | grep blue recent info: Oct 17 13:36:50 Socrates.i-pi.com kernel: input: Logitech Bluetooth Mouse M555b as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.5/2-1.5:1.0/bluetooth/hci0/hci0 :256/0005:046D:B009.0005/input/input29 Oct 17 13:36:50 Socrates.i-pi.com kernel: hid-generic 0005:046D:B009.0005: input ,hidraw1: BLUETOOTH HID v4.19 Mouse [Logitech Bluetooth Mouse M555b] on 7c:5c:f8 :33:1c:0a Oct 17 13:44:37 Socrates.i-pi.com kernel: Bluetooth: hci0: turning off Intel dev ice LED failed (-19) Oct 17 13:44:37 Socrates.i-pi.com bluetoothd[1859]: Endpoint unregistered: sende r=:1.34 path=/MediaEndpoint/A2DPSource Oct 17 13:44:37 Socrates.i-pi.com bluetoothd[1859]: Endpoint unregistered: sende r=:1.34 path=/MediaEndpoint/A2DPSink Oct 17 13:44:37 Socrates.i-pi.com systemd[1]: bluetooth.target: Unit not needed anymore. Stopping. Oct 17 13:44:37 Socrates.i-pi.com systemd[1]: Stopped target Bluetooth. Oct 17 13:44:37 Socrates.i-pi.com dbus[1837]: [system] Rejected send message, 6 matched rules; type="error", sender=":1.34" (uid=1000 pid=2890 comm="/usr/bin/pu lseaudio --start --log-target=syslog ") interface="(unset)" member="(unset)" err or name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" dest ination=":1.4" (uid=0 pid=1859 comm="/usr/lib/bluetooth/bluetoothd ") Oct 17 13:44:37 Socrates.i-pi.com dbus[1837]: [system] Rejected send message, 6 matched rules; type="error", sender=":1.34" (uid=1000 pid=2890 comm="/usr/bin/pu lseaudio --start --log-target=syslog ") interface="(unset)" member="(unset)" err or name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" dest ination=":1.4" (uid=0 pid=1859 comm="/usr/lib/bluetooth/bluetoothd ") Oct 17 13:44:37 Socrates.i-pi.com dbus[1837]: [system] Rejected send message, 6 matched rules; type="error", sender=":1.34" (uid=1000 pid=2890 comm="/usr/bin/pulseaudio --start --log-target=syslog ") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.4" (uid=0 pid=1859 comm="/usr/lib/bluetooth/bluetoothd ") Oct 17 13:44:37 Socrates.i-pi.com dbus[1837]: [system] Rejected send message, 6 matched rules; type="error", sender=":1.34" (uid=1000 pid=2890 comm="/usr/bin/pulseaudio --start --log-target=syslog ") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.4" (uid=0 pid=1859 comm="/usr/lib/bluetooth/bluetoothd ") Oct 17 13:44:39 Socrates.i-pi.com kernel: Bluetooth: hci0: read Intel version: 3707100180012d0d00 Oct 17 13:44:39 Socrates.i-pi.com kernel: Bluetooth: hci0: Intel Bluetooth firmware file: intel/ibt-hw-37.7.10-fw-1.80.1.2d.d.bseq Oct 17 13:44:39 Socrates.i-pi.com kernel: Bluetooth: hci0: Intel Bluetooth firmware patch completed and activated Oct 17 13:44:39 Socrates.i-pi.com bluetoothd[1859]: Failed to obtain handles for "Service Changed" characteristic Oct 17 13:44:39 Socrates.i-pi.com bluetoothd[1859]: Sap driver initialization failed. Oct 17 13:44:39 Socrates.i-pi.com bluetoothd[1859]: sap-server: Operation not permitted (1) Oct 17 13:44:39 Socrates.i-pi.com bluetoothd[1859]: Endpoint registered: sender=:1.34 path=/MediaEndpoint/A2DPSource Oct 17 13:44:39 Socrates.i-pi.com bluetoothd[1859]: Endpoint registered: sender=:1.34 path=/MediaEndpoint/A2DPSink Oct 17 13:44:39 Socrates.i-pi.com systemd[1]: Reached target Bluetooth. Oct 17 13:44:47 Socrates.i-pi.com NetworkManager[1856]: <info> [1476733487.1153] bluez: BT device Kenneth's Galaxy S6 (78:40:E4:A5:08:56) added (NAP) Oct 17 13:44:47 Socrates.i-pi.com NetworkManager[1856]: <info> [1476733487.1160] manager: (78:40:E4:A5:08:56): new Bluetooth device (/org/freedesktop/NetworkManager/Devices/5) Oct 17 13:44:47 Socrates.i-pi.com kernel: input: Logitech Bluetooth Mouse M555b as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.5/2-1.5:1.0/bluetooth/hci0/hci0:256/0005:046D:B009.0006/input/input30 Oct 17 13:44:47 Socrates.i-pi.com kernel: hid-generic 0005:046D:B009.0006: input,hidraw1: BLUETOOTH HID v4.19 Mouse [Logitech Bluetooth Mouse M555b] on 7c:5c:f8:33:1c:0a -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1022028] amanda backup system built without ssh support
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022028 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:6319:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 982141] ceph is in unresolvable state for ppc64le
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=982141 http://bugzilla.suse.com/show_bug.cgi?id=982141#c43 --- Comment #43 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2017:0367-1: An update that solves one vulnerability and has 10 fixes is now available. Category: security (moderate) Bug References: 1005179,1007216,1008501,1008894,1014338,977940,982141,985232,987144,990438,999688 CVE References: CVE-2016-5009 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP2 (src): ceph-10.2.4+git.1481215985.12b091b-15.2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): ceph-10.2.4+git.1481215985.12b091b-15.2 SUSE Linux Enterprise Server 12-SP2 (src): ceph-10.2.4+git.1481215985.12b091b-15.2 SUSE Linux Enterprise Desktop 12-SP2 (src): ceph-10.2.4+git.1481215985.12b091b-15.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023259] VUL-1: CVE-2017-5838: gstreamer: Multiple memory access issues in gstreamer
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023259 http://bugzilla.suse.com/show_bug.cgi?id=1023259#c1 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low --- Comment #1 from Swamp Workflow Management <swamp(a)suse.de> --- bugbot adjusting priority -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1019877] VUL-0: CVE-2016-10132,CVE-2016-10133,CVE-2016-10141: mupdf: mujs: Multiple security issues
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1019877 http://bugzilla.opensuse.org/show_bug.cgi?id=1019877#c5 Andreas Stieger <astieger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Andreas Stieger <astieger(a)suse.com> --- release -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1012822] New: VUL-0: CVE-2016-9675: openjpeg: incorrect fix for CVE-2013-6045
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1012822 Bug ID: 1012822 Summary: VUL-0: CVE-2016-9675: openjpeg: incorrect fix for CVE-2013-6045 Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: asterios.dramis(a)gmail.com Reporter: abergmann(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- rh#1382202 A flaw was found in the patch for CVE-2013-6045 for openjpeg-1. A crafted jpeg2000 image could cause heap-based buffer overflows, leading to a crash or possible code execution when reading or converting the crafted file. External reference: http://seclists.org/oss-sec/2016/q3/624 See also: https://bugzilla.redhat.com/show_bug.cgi?id=1036495#c20 https://bugs.debian.org/734238 Correct patch: http://pkgs.fedoraproject.org/cgit/rpms/openjpeg.git/tree/openjpeg-1.5.1-CV… References: https://bugzilla.redhat.com/show_bug.cgi?id=1382202 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9675 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1020077] fstrim.service should not run fstrim -a
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.novell.com/show_bug.cgi?id=1020077 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | maint:planned:update -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1012504] Under "Repository Management", when adding a local ISO image, making any change prior to exiting YaST produces an error
by bugzilla_noreply＠novell.com 02 Feb '17

02 Feb '17

http://bugzilla.novell.com/show_bug.cgi?id=1012504 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | maint:planned:update -- You are receiving this mail because: You are on the CC list for the bug.

1 0