September 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1056389] New: Openconnect 7.06 fails on connect to Junos Pulse
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1056389 Bug ID: 1056389 Summary: Openconnect 7.06 fails on connect to Junos Pulse Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: tcj(a)tomas.dk QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When connecting to a Junos Pulse gateway, connection fails. openconnect --juniper https://****** WARNING: Juniper Network Connect support is experimental. It will probably be superseded by Junos Pulse support. GET https://****** Attempting to connect to server 193.162.145.68:443 SSL negotiation with ***** Connected to HTTPS on ***** frmLogin realm [USER-REALM-NORDIC-NMSLAN-RADIUS+RSA|USER-REALM-NORDIC-NMSLAN-RADIUS+TOTP]:USER-REALM-NORDIC-NMSLAN-RADIUS+RSA frmLogin username:_my_user_id_ password: POST https://******* SSL negotiation with ******* Connected to HTTPS on ******** Got HTTP response: HTTP/1.1 302 Moved GET https://******* SSL negotiation with ******* Connected to HTTPS on ******** frmLogin password#2: POST https://******** SSL negotiation with ******* Connected to HTTPS on sltvpn1.eng.tdc.net Got HTTP response: HTTP/1.1 302 Moved GET https://****** SSL negotiation with ******* Connected to HTTPS on ******* SSL negotiation with ******* Connected to HTTPS on ******** Got HTTP response: HTTP/1.1 400 Bad Request <<<<< FAILS Unexpected 400 result from server <<<<< FAILS Creating SSL connection failed <<<<< FAILS This bug ought to have been fixed in openconnect v. 7.08 Please replace the current 7.06 with the latest and greatest 7.08. BR Tomas Jensen -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1028372] New: VUL-0: CVE-2017-2636: kernel-source: local privilege escalation flaw in n_hdlc
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1028372 Bug ID: 1028372 Summary: VUL-0: CVE-2017-2636: kernel-source: local privilege escalation flaw in n_hdlc Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 716639 --> http://bugzilla.suse.com/attachment.cgi?id=716639&action=edit 0001-tty-n_hdlc-get-rid-of-racy-n_hdlc_tbuf.patch Ref: http://seclists.org/oss-sec/2017/q1/569 ============================================= Hello! This is an announcement of CVE-2017-2636, which is a race condition in the n_hdlc Linux kernel driver (drivers/tty/n_hdlc.c). It can be exploited to gain a local privilege escalation. This driver provides HDLC serial line discipline and comes as a kernel module in many Linux distributions, which have CONFIG_N_HDLC=m in the kernel config. The bug was introduced on 22 June 2009: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=… My fix to the Linux kernel mainline was proposed on 28 February 2017 and should be available soon. Please see the attachment. I will publish my PoC exploit later, giving people some time to update their systems. I've found this bug investigating a suspicious kernel crash made by syzkaller (https://github.com/google/syzkaller) -- Bug details -- N_HDLC line discipline uses a self-made singly linked lists for data buffers and has n_hdlc.tbuf pointer for buffer retransmitting after an error. If sending of a data buffer is not successful, then its address is saved in n_hdlc.tbuf and the next time n_hdlc_send_frames() will try to resend it first of all. But the commit be10eb7589337e5defbe214dae038a53dd21add8 ("tty: n_hdlc add buffer flushing") introduced racy access to n_hdlc.tbuf. After transmission error concurrent flush_tx_queue() and n_hdlc_send_frames() can put a buffer pointed by n_hdlc.tbuf to tx_free_buf_list twice. That causes an exploitable double free error in n_hdlc_release(). To fix the issue I used a standard kernel linked list protected by a spinlock and got rid of n_hdlc.tbuf. In case of transmission error the current data buffer is put after the head of tx_buf_list. -- Kernel updates are ready, please update your systems. Best regards, Alexander Popov Positive Technologies https://www.ptsecurity.com Attachment: 0001-tty-n_hdlc-get-rid-of-racy-n_hdlc.tbuf.patch ============================================= -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1057113] New: mkvtoolnix maintenance update to 14.0.0
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1057113 Bug ID: 1057113 Summary: mkvtoolnix maintenance update to 14.0.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: f.thiessen(a)gmx.de Reporter: astieger(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- tracking maintenance update of mkvtoolnix https://build.opensuse.org/request/show/520827 I am adding the following patchinfo: - support chapters in WebM - UI updates and translations updates - improved and extended format and container support - many bug fixes, included fixes for crashes -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1056896] NVIDIA Permission problems
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1056896 http://bugzilla.opensuse.org/show_bug.cgi?id=1056896#c4 --- Comment #4 from Azur Lighting <bluesmpt(a)hotmail.com> --- (In reply to Stefan Dirsch from comment #3) > zypper log looks fine. There is a libelf-devel package available, but it > isn't needed to build the kernel module. > > About the systemd-tmp files message error. I cannot find anything obviously > wrong in the nvidia logfile. The systemd-tmpfiles-setup problem is still happening -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1055398] 404 error when installing steam from software.opensuse.org
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.novell.com/show_bug.cgi?id=1055398 http://bugzilla.novell.com/show_bug.cgi?id=1055398#c2 Matthias Mailänder <matthias(a)mailaender.name> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #2 from Matthias Mailänder <matthias(a)mailaender.name> --- Also try zypper ref before the update. Maybe the repository is set to not auto-refresh. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 734176] php5 doesn't provide /usr/bin/php5
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=734176 http://bugzilla.suse.com/show_bug.cgi?id=734176#c9 --- Comment #9 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (734176) was mentioned in https://build.opensuse.org/request/show/520867 Factory / php7 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1057104] php7-devel package should require php7-pear
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1057104 http://bugzilla.suse.com/show_bug.cgi?id=1057104#c3 --- Comment #3 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1057104) was mentioned in https://build.opensuse.org/request/show/520867 Factory / php7 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1056822] Support PHP7 packagers with new packaging macros
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1056822 http://bugzilla.suse.com/show_bug.cgi?id=1056822#c12 --- Comment #12 from Bernhard Wiedemann <bwiedemann(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1056822) was mentioned in https://build.opensuse.org/request/show/520867 Factory / php7 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1057104] php7-devel package should require php7-pear
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1057104 http://bugzilla.suse.com/show_bug.cgi?id=1057104#c2 Petr Gajdos <pgajdos(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #2 from Petr Gajdos <pgajdos(a)suse.com> --- Submitted to 12/php7 and Tumbleweed/php7. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1053564] User and Group Management locks up
by bugzilla_noreply＠novell.com 04 Sep '17

04 Sep '17

http://bugzilla.suse.com/show_bug.cgi?id=1053564 http://bugzilla.suse.com/show_bug.cgi?id=1053564#c13 --- Comment #13 from James Knott <james.knott(a)rogers.com> --- Found it. It was a key from a Windows system (figures <g>) -- You are receiving this mail because: You are on the CC list for the bug.

1 0