February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1022758] kernel-source master does not boot with KASAN enabled
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022758 http://bugzilla.suse.com/show_bug.cgi?id=1022758#c4 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low --- Comment #4 from Jiri Slaby <jslaby(a)suse.com> --- OK :D When the unwinder is ready to go, I can deal with this... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1022973] New: tar_scm create timestamp in the future
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1022973 Bug ID: 1022973 Summary: tar_scm create timestamp in the future Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: BuildService Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: pbartfai(a)stardust.hu QA Contact: adrian(a)suse.com Found By: --- Blocker: --- tar_scm creates archive with file timestamp in the future. This is causing error in the build process. See https://build.opensuse.org/package/live_build_log/home:pbartfai/LDView/Arch… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1022758] kernel-source master does not boot with KASAN enabled
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022758 http://bugzilla.suse.com/show_bug.cgi?id=1022758#c3 Oliver Neukum <oneukum(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-maintainers(a)forge.pr |jslaby(a)suse.com |ovo.novell.com | --- Comment #3 from Oliver Neukum <oneukum(a)suse.com> --- (In reply to Jiri Slaby from comment #2) > See bug 1018348. The patch is in all branches. Good. Then I trust you to fix it breaking KASAN. Assigning this bug to you. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1018791] salt-minion does not reconnect after suspend to RAM
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1018791 http://bugzilla.suse.com/show_bug.cgi?id=1018791#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- proposing https://github.com/saltstack/salt/pull/39082 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023004] New: VUL-0: CVE-2017-2615: kvm: qemu: display: cirrus: oob access while doing bitblt copy backward mode
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023004 Bug ID: 1023004 Summary: VUL-0: CVE-2017-2615: kvm: qemu: display: cirrus: oob access while doing bitblt copy backward mode Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/257 ============================================= Hello, Quick emulator(Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS OR potentially execute arbitrary code on the host with privileges of Qemu process on the host. Upstream patch -------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html It fixes -> http://git.qemu.org/?p=qemu.git;a=commit;h=d3532a0db02296e687711b8cdc779192… Reference: ---------- -> https://bugzilla.redhat.com/show_bug.cgi?id=1418200 This issue was reported by Li Qiang of 360.cn Inc. CVE-2017-2615 was assigned to this issue by Red Hat Inc. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F ============================================= -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1023003] New: VUL-0: pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c)
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023003 Bug ID: 1023003 Summary: VUL-0: pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/256 ============================================= Description: pax-utils is a set of tools that check files for security relevant properties. A fuzz on scanelf exposed an out-of bound read. It was reported to vapier which fixed the issue immediately. Unfortunately I can’t get a symbolized ASan stacktrace, so I will show only the useful part of both asan and gdb. # scanelf -s '*' -axetrnibSDIYZB $FILE ==32758==ERROR: AddressSanitizer: unknown-crash on address 0x7f8f9fa252dc at pc 0x00000053c6a0 bp 0x7ffe93a19910 sp 0x7ffe93a19908 READ of size 4 at 0x7f8f9fa252dc thread T0 #0 0x53c69f (/usr/bin/scanelf+0x53c69f) #1 0x51d649 (/usr/bin/scanelf+0x51d649) #2 0x51b97e (/usr/bin/scanelf+0x51b97e) #3 0x51ad43 (/usr/bin/scanelf+0x51ad43) #4 0x51922e (/usr/bin/scanelf+0x51922e) #5 0x7f8f9e7fd61f (/lib64/libc.so.6+0x2061f) #6 0x41a008 (/usr/bin/scanelf+0x41a008) (gdb) bt #8 0x000000000053c6a0 in scanelf_file_get_symtabs (elf=, sym=0x7fffffffcc00, str=0x7fffffffcc20) at scanelf.c:357 #9 0x000000000051d64a in scanelf_file_sym (elf=0x60700000de60, found_sym=) at scanelf.c:1327 #10 scanelf_elfobj (elf=) at scanelf.c:1547 #11 0x000000000051b97f in scanelf_elf (filename=0x7fffffffe50e "1.crashes", fd=, len=) at scanelf.c:1612 #12 scanelf_fileat (dir_fd=, filename=, st_cache=) at scanelf.c:1679 #13 0x000000000051ad44 in scanelf_dirat (dir_fd=, path=) at scanelf.c:1713 #14 0x000000000051922f in scanelf_dir (path=) at scanelf.c:1763 #15 parseargs (argc=5, argv=0x7fffffffe258) at scanelf.c:2273 #16 main (argc=5, argv=) at scanelf.c:2361 Affected version: 1.2 Fixed version: 1.2.1 Commit fix: https://github.com/gentoo/pax-utils/commit/95e5489534ac9e9324c5096286899b68… Credit: This bug was discovered by Agostino Sarubbo of Gentoo. CVE: N/A Reproducer: https://github.com/asarubbo/poc/blob/master/00131-pax-utils-scanelf-oobread… Timeline: 2017-01-23: bug discovered and reported to upstream 2017-01-24: upstream realeased a patch and 1.2.1 2017-02-01: blog post about the issue Note: This bug was found with American Fuzzy Lop. I’d suggest to go to 1.2.2 because of a functionality bug(s) in 1.2.1 Permalink: https://blogs.gentoo.org/ago/2017/02/01/pax-utils-scanelf-out-of-bounds-rea… -- Agostino Sarubbo Gentoo Linux Developer ============================================= https://software.opensuse.org/package/pax-utils TW: 1.1.6 42.(1|2): 0.9.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023002] New: VUL-0: pax-utils: scanelf: out of bounds read in scanelf_file_textrel (scanelf.c)
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023002 Bug ID: 1023002 Summary: VUL-0: pax-utils: scanelf: out of bounds read in scanelf_file_textrel (scanelf.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/255 ============================================== Description: pax-utils is a set of tools that check files for security relevant properties. A fuzz on scanelf exposed an out-of bound read. It was reported to vapier which fixed the issue immediately. Unfortunately I can’t get a symbolized ASan stacktrace, so I will show only the useful part of both asan and gdb. # scanelf -s '*' -axetrnibSDIYZB $FILE ==1853==ERROR: AddressSanitizer: unknown-crash on address 0x7f4099d25008 at pc 0x00000053586e bp 0x7fff335cb8b0 sp 0x7fff335cb8a8 READ of size 8 at 0x7f4099d25008 thread T0 #0 0x53586d (/usr/bin/scanelf+0x53586d) #1 0x51f526 (/usr/bin/scanelf+0x51f526) #2 0x51b97e (/usr/bin/scanelf+0x51b97e) #3 0x51ad43 (/usr/bin/scanelf+0x51ad43) #4 0x51922e (/usr/bin/scanelf+0x51922e) #5 0x7f4098afd61f (/lib64/libc.so.6+0x2061f) #6 0x41a008 (/usr/bin/scanelf+0x41a008) (gdb) bt #8 0x000000000053586e in scanelf_file_textrel (elf=, found_textrel=) at scanelf.c:560 #9 0x000000000051f527 in scanelf_elfobj (elf=) at scanelf.c:1536 #10 0x000000000051b97f in scanelf_elf (filename=0x7fffffffe50e "/tmp/afl/scanelf/report/crashes/2.crashes", fd=, len=) at scanelf.c:1612 #11 scanelf_fileat (dir_fd=, filename=, st_cache=) at scanelf.c:1679 #12 0x000000000051ad44 in scanelf_dirat (dir_fd=, path=) at scanelf.c:1713 #13 0x000000000051922f in scanelf_dir (path=) at scanelf.c:1763 #14 parseargs (argc=5, argv=0x7fffffffe258) at scanelf.c:2273 #15 main (argc=5, argv=) at scanelf.c:2361 Affected version: 1.2 Fixed version: 1.2.1 Commit fix: https://github.com/gentoo/pax-utils/commit/95e5489534ac9e9324c5096286899b68… Credit: This bug was discovered by Agostino Sarubbo of Gentoo. CVE: N/A Reproducer: https://github.com/asarubbo/poc/blob/master/00132-pax-utils-scanelf-oobread… Timeline: 2017-01-23: bug discovered and reported to upstream 2017-01-24: upstream realeased a patch and 1.2.1 2017-02-01: blog post about the issue Note: This bug was found with American Fuzzy Lop. I’d suggest to go to 1.2.2 because of a functionality bug(s) in 1.2.1 Permalink: https://blogs.gentoo.org/ago/2017/02/01/pax-utils-scanelf-out-of-bounds-rea… -- Agostino Sarubbo Gentoo Linux Developer ============================================== https://software.opensuse.org/package/pax-utils TW: 1.1.6 42.(1|2): 0.9.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1005386] fdupes does not deterministically switch between files and links
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1005386 http://bugzilla.suse.com/show_bug.cgi?id=1005386#c17 --- Comment #17 from Leonardo Chiquitto <lchiquitto(a)suse.com> --- Did you submit "1.61" to Factory in the end? I couldn't find the package anywhere. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1017695] openSuse 42.2: Boot on broken RAID 1 with missing disk fails. Looks linked to dracut premount hook script (start job running with nolimit timeout)
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1017695 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:1835:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 959803] wicked - unable to set MTU on root device
by bugzilla_noreply＠novell.com 01 Feb '17

01 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=959803 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:1835:low |ibs:running:1835:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0