May 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1091776] New: VUL-0: CVE-2016-10722: partclone: Heap-based bufferoverflow vulnerability due to insufficient validation of the FAT superblock,related to the mark_reserved_sectors function.
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091776 Bug ID: 1091776 Summary: VUL-0: CVE-2016-10722: partclone: Heap-based bufferoverflow vulnerability due to insufficient validation of the FAT superblock,related to the mark_reserved_sectors function. Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/205199/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2016-10722 partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10722 https://github.com/Thomas-Tsai/partclone/issues/71 https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-o… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1053231] Regression in Docker upstream blocks dhcpd IPv4 addresses for KVM
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1053231 http://bugzilla.suse.com/show_bug.cgi?id=1053231#c8 --- Comment #8 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Flavio Castelli from comment #4) > Setting to P4 as discussed with Valentin Please reconsider this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1053231] Regression in Docker upstream blocks dhcpd IPv4 addresses for KVM
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1053231 http://bugzilla.suse.com/show_bug.cgi?id=1053231#c7 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com, | |kukuk(a)suse.com --- Comment #7 from Fabian Vogt <fvogt(a)suse.com> --- I can confirm this issue, happens on every system (TW, Leap 42 and 15). The reason is that docker changes the policy of the FORWARD chain to DROP. "iptables -P FOWARD ACCEPT" makes it work again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082504] Patch file not found ar3k/AthrBT_0x00000200.dfu
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1082504 http://bugzilla.suse.com/show_bug.cgi?id=1082504#c49 --- Comment #49 from Takashi Iwai <tiwai(a)suse.com> --- Now I'm building a new test kernel in OBS home:tiwai:bnc1082504-dbg2 repo. This must show some kernel messages with "XXX" string. If not, either the btusb module is overridden by some other KMP or something (a module config or such) prevents loading it. Fingers crossed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082504] Patch file not found ar3k/AthrBT_0x00000200.dfu
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1082504 http://bugzilla.suse.com/show_bug.cgi?id=1082504#c48 --- Comment #48 from Takashi Iwai <tiwai(a)suse.com> --- Hmm, very weird. I'll respin the kernel with (more) debug prints to see what's going on. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091757] New: VUL-0: CVE-2018-10685: lrzip: There is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash)
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.opensuse.org/show_bug.cgi?id=1091757 Bug ID: 1091757 Summary: VUL-0: CVE-2018-10685: lrzip: There is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/205219/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mpluskal(a)suse.com Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-10685 In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10685 https://github.com/ckolivas/lrzip/issues/95 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091346] VUL-0: CVE-2018-10529: libraw: There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp.
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1091346 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:8044:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091345] VUL-0: CVE-2018-10528: libraw: There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1091345 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:8044:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1091669] Regression: AutoYAST not using product subvolume configuration
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1091669 Imobach Gonzalez Sosa <igonzalezsosa(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082504] Patch file not found ar3k/AthrBT_0x00000200.dfu
by bugzilla_noreply＠novell.com 03 May '18

03 May '18

http://bugzilla.suse.com/show_bug.cgi?id=1082504 http://bugzilla.suse.com/show_bug.cgi?id=1082504#c47 --- Comment #47 from Ivan Levshin <ivan.levshin(a)microfocus.com> --- Created attachment 768898 --> http://bugzilla.suse.com/attachment.cgi?id=768898&action=edit dmesg output (4.16.5-1.gdce9ae0-default) Hi Takash, Sorry for late reply, I was away from this laptop. Please check attached dmesg output with kernel 4.16.5-1.gdce9ae0-default installed. I see no difference actually. -- You are receiving this mail because: You are on the CC list for the bug.

1 0