May 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1031021] New: glibc-2.25-1.1.i686 core dumping on at least Atom N270 and Atom 330
by bugzilla_noreply＠novell.com 02 May '17

02 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1031021 Bug ID: 1031021 Summary: glibc-2.25-1.1.i686 core dumping on at least Atom N270 and Atom 330 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 32bit OS: SUSE Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: connormcl(a)hotmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Recently there was an update rolled out to glibc-2.25. This update will reproducible destroy my machine when installed. It causes all kinds of programs including systemd to dump core and then will prevent booting because a lot of service won't come up, including login service. I tracked the problem down to glibc-2.25.i686 which when installed also causes zypper to not work anymore...only chance to recover was an earlier image of system partition. Then i found out, that there are two glibc-2.25 versions available on the tumbleweed repository: glibc-2.25-1.1.i586 and glibc-2.25-1.1.i686 The i686 version crashes my machine, but the i586 version is working. Because the earlier installed glibc was glibc-2.24-1.1.i686, it defaulted to use the i686 type of the new version. My processor is an Atom N270. To my knowledge this should be i686 compatible. Because of the immediate crashes and unbootable system afterwards, i could not get any logs. A fellow user from the tumbleweed forums analyzed a core dump: It took some trickery, but I managed to run GDB on a core dump: Program terminated with signal SIGSEGV, Segmentation fault. #0 __memchr_sse2 () at ../sysdeps/i386/i686/multiarch/memchr-sse2.S:249 249 ../sysdeps/i386/i686/multiarch/memchr-sse2.S: No such file or directory. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1037093] New: Error checking for updates via update applet in system tray notfication
by bugzilla_noreply＠novell.com 02 May '17

02 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037093 Bug ID: 1037093 Summary: Error checking for updates via update applet in system tray notfication Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i586 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST Assignee: autoyast-maintainers(a)suse.de Reporter: jzimm0007(a)aol.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 723370 --> http://bugzilla.opensuse.org/attachment.cgi?id=723370&action=edit Error trying to update. There appears to be an error preventing me from checking for updates. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 983221] system fails to load dm-* modules after kernel/lvm2 updates
by bugzilla_noreply＠novell.com 02 May '17

02 May '17

http://bugzilla.suse.com/show_bug.cgi?id=983221 zhen ren <zren(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugzilla.suse.com/sh | |ow_bug.cgi?id=1033691 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037032] python-wheel misses requires to python-setuptools
by bugzilla_noreply＠novell.com 02 May '17

02 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1037032 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |jmatejek(a)suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1006952] LVM : LV displayed multiple times if cache_mode option is used for lvs
by bugzilla_noreply＠novell.com 02 May '17

02 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1006952 http://bugzilla.suse.com/show_bug.cgi?id=1006952#c16 zhilong liu <zlliu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|zlliu(a)suse.com |zren(a)suse.com --- Comment #16 from zhilong liu <zlliu(a)suse.com> --- reassign this bug to Eric. Hi, Eric; please refer to the last comment. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037072] New: VUL-0: CVE-2017-8398: binutils: heap buffer overflow in printf_common (dwarf.c)
by bugzilla_noreply＠novell.com 01 May '17

01 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037072 Bug ID: 1037072 Summary: VUL-0: CVE-2017-8398: binutils: heap buffer overflow in printf_common (dwarf.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 723334 --> http://bugzilla.opensuse.org/attachment.cgi?id=723334&action=edit 21438_upstream_crash_info Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8398 =================================================== Description dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash. =================================================== Hyperlink [1] https://sourceware.org/bugzilla/show_bug.cgi?id=21438 [2] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d949ff5607b9f595… (see https://sourceware.org/bugzilla/show_bug.cgi?id=21438#c4) (open-)SUSE: https://software.opensuse.org/package/binutils 2.28 (TW, official repo) 2.26.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1037070] New: VUL-0: CVE-2017-8397: binutils: libbfd: heap buffer overflow in objdump
by bugzilla_noreply＠novell.com 01 May '17

01 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037070 Bug ID: 1037070 Summary: VUL-0: CVE-2017-8397: binutils: libbfd: heap buffer overflow in objdump Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 723333 --> http://bugzilla.opensuse.org/attachment.cgi?id=723333&action=edit 21434_upstream_crash_info Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8397 =================================================== Description The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash. =================================================== Hyperlink [1] https://sourceware.org/bugzilla/show_bug.cgi?id=21434 [2] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=04b31182bf3f8a1a… (see https://sourceware.org/bugzilla/show_bug.cgi?id=21434#c1) (open-)SUSE: https://software.opensuse.org/package/binutils 2.28 (TW, official repo) 2.26.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1037066] New: VUL-0: CVE-2017-8396: binutils: libbfd: heap buffer overflow in objdump
by bugzilla_noreply＠novell.com 01 May '17

01 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037066 Bug ID: 1037066 Summary: VUL-0: CVE-2017-8396: binutils: libbfd: heap buffer overflow in objdump Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 723331 --> http://bugzilla.opensuse.org/attachment.cgi?id=723331&action=edit 21432_upstream_crash_info Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8396 ==================================================== Description The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash. ==================================================== Hyperlink [1] https://sourceware.org/bugzilla/show_bug.cgi?id=21432 [2] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=a941291cab71b9ac… (see https://sourceware.org/bugzilla/show_bug.cgi?id=21432#c2) (open-)SUSE: https://software.opensuse.org/package/binutils 2.28 (TW, official repo) 2.26.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1033885] btrfs: revert qgroup accounting fix, exposes deadlock
by bugzilla_noreply＠novell.com 01 May '17

01 May '17

http://bugzilla.suse.com/show_bug.cgi?id=1033885 http://bugzilla.suse.com/show_bug.cgi?id=1033885#c1 --- Comment #1 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2017:1140-1: An update that solves 10 vulnerabilities and has 49 fixes is now available. Category: security (important) Bug References: 1010032,1012452,1012829,1013887,1014136,1017461,1019614,1021424,1021762,1022340,1023287,1027153,1027512,1027616,1027974,1028027,1028217,1028415,1028883,1029514,1029634,1030070,1030118,1030213,1031003,1031052,1031147,1031200,1031206,1031208,1031440,1031512,1031555,1031579,1031662,1031717,1031831,1032006,1032141,1032345,1032400,1032581,1032673,1032681,1032803,1033117,1033281,1033336,1033340,1033885,1034048,1034419,1034671,1034902,970083,986362,986365,988065,993832 CVE References: CVE-2016-4997,CVE-2016-4998,CVE-2017-2671,CVE-2017-7187,CVE-2017-7261,CVE-2017-7294,CVE-2017-7308,CVE-2017-7374,CVE-2017-7616,CVE-2017-7618 Sources used: openSUSE Leap 42.2 (src): kernel-debug-4.4.62-18.6.1, kernel-default-4.4.62-18.6.1, kernel-docs-4.4.62-18.6.2, kernel-obs-build-4.4.62-18.6.1, kernel-obs-qa-4.4.62-18.6.1, kernel-source-4.4.62-18.6.1, kernel-syms-4.4.62-18.6.1, kernel-vanilla-4.4.62-18.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1037062] New: VUL-0: CVE-2017-8395: binutils: libbfd: objcopy segfault - null pointer dereferencing (_bfd_generic_get_section_contents function)
by bugzilla_noreply＠novell.com 01 May '17

01 May '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1037062 Bug ID: 1037062 Summary: VUL-0: CVE-2017-8395: binutils: libbfd: objcopy segfault - null pointer dereferencing (_bfd_generic_get_section_contents function) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 723327 --> http://bugzilla.opensuse.org/attachment.cgi?id=723327&action=edit 21431_upstream_crash_info Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8395 ==================================================== Description The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash. ==================================================== Hyperlink [1] https://sourceware.org/bugzilla/show_bug.cgi?id=21431 [2] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e63d123268f23a4c… (see https://sourceware.org/bugzilla/show_bug.cgi?id=21431#c2) (open-)SUSE: https://software.opensuse.org/package/binutils 2.28 (TW, official repo) 2.26.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.

1 2