April 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 597673] New: fetchmail: DoS in -v -v mode in multibyte
by bugzilla_noreply＠novell.com 02 Apr '20

02 Apr '20

http://bugzilla.novell.com/show_bug.cgi?id=597673 http://bugzilla.novell.com/show_bug.cgi?id=597673#c0 Summary: fetchmail: DoS in -v -v mode in multibyte Classification: openSUSE Product: openSUSE 11.3 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: puzel(a)novell.com ReportedBy: lnussel(a)novell.com QAContact: qa(a)suse.de CC: security-team(a)suse.de Found By: Other Blocker: --- Your friendly security team received the following report via oss-security. Please respond ASAP. The issue is public. Factory only sufficient ------------------------------------------------------------------------------ Date: Sun, 18 Apr 2010 18:58:30 +0200 From: "Matthias Andree" <matthias.andree(a)gmx.de> Subject: [oss-security] CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input Please assign a CVE id for the issue described below. (Best viewed in non-proportional font with 8 space tabs): Draft announcement: - DRAFT - XXX - DRAFT - fetchmail-SA-2010-02: Denial of service in debug mode w/ multichar locales Topics: Denial of service in debug output. Author: Matthias Andree Version: 0.1 XXX Announced: XXX Type: malloc() Buffer overrun with printable characters Impact: Denial of service. Danger: low CVE Name: CVE-2010-XXXX CVSSv2: XXX URL: http://www.fetchmail.info/fetchmail-SA-2010-02.txt Project URL: http://www.fetchmail.info/ Affects: fetchmail releases 4.6.3 up to and including 6.3.16 Not affected: fetchmail release 6.3.17 and newer Corrected: 2010-04-18 Git (XXX) 0. Release history ================== 2010-04-18 0.1 first draft (visible in SVN and through oss-security) XXX 1. Background ============= fetchmail is a software package to retrieve mail from remote POP2, POP3, IMAP, ETRN or ODMR servers and forward it to local SMTP, LMTP servers or message delivery agents. It supports SSL and TLS security layers through the OpenSSL library, if enabled at compile time and if also enabled at run time. 2. Problem description and Impact ================================= In debug mode (-v -v), fetchmail prints information that was obtained from the upstream server (POP3 UIDL lists) or from message headers retrieved from it. If printing such information fails, for instance because there are invalid multibyte character sequences in this information (message headers), fetchmail will misinterpret this condition, and believe that the buffer was too small, and reallocate a bigger one (with linearly increasing buffer size), and repeat, until the allocation fails. At that point, fetchmail will abort. Note that the "Affects:" line above may be inaccurate, and it may be that versions before 5.6.6 are actually unaffected. The author was unable to compile such old fetchmail versions to verify the existence of the bug. Given that other security issues are present in such versions, those should not be used, and the wider version range was listed as vulnerable to err towards the safe. 3. Solution =========== There are two alternatives, either of them by itself is sufficient: a. Apply the patch found in section B of this announcement to fetchmail 6.3.14 or newer, recompile and reinstall it. b. Install fetchmail 6.3.17 or newer after it will have become available. The fetchmail source code is always available from <http://developer.berlios.de/project/showfiles.php?group_id=1824>. 4. Workaround ============= Run fetchmail with at most one -v (--verbose) option. A. Copyright, License and Warranty ================================== (C) Copyright 2010 by Matthias Andree, <matthias.andree(a)gmx.de>. Some rights reserved. This work is licensed under the Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 Germany License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-nd/3.0/de/ or send a letter to Creative Commons 171 Second Street Suite 300 SAN FRANCISCO, CALIFORNIA 94105 USA THIS WORK IS PROVIDED FREE OF CHARGE AND WITHOUT ANY WARRANTIES. Use the information herein at your own risk. B. Patch to remedy the problem ============================== Note that when taking this from a GnuPG clearsigned file, the lines starting with a "-" character are prefixed by another "- " (dash + blank) combination. Either feed this file through GnuPG to strip them, or strip them manually. You may want to use the "-p1" flag to patch. Whitespace differences can usually be ignored by invoking "patch -l", so try this if the patch does not apply. diff --git a/rfc822.c b/rfc822.c index 6f2dbf3..dbcda32 100644 --- a/rfc822.c +++ b/rfc822.c @@ -25,6 +25,7 @@ MIT license. Compile with -DMAIN to build the demonstrator. #include <stdlib.h> #include "fetchmail.h" +#include "sdump.h" #ifndef MAIN #include "i18n.h" @@ -74,9 +75,10 @@ char *reply_hack( } #ifndef MAIN - if (outlevel >= O_DEBUG) - report_build(stdout, GT_("About to rewrite %.*s...\n"), - (int)BEFORE_EOL(buf), buf); + if (outlevel >= O_DEBUG) { + report_build(stdout, GT_("About to rewrite %s...\n"), (cp = sdump(buf, BEFORE_EOL(buf)))); + xfree(cp); + } /* make room to hack the address; buf must be malloced */ for (cp = buf; *cp; cp++) @@ -211,9 +213,12 @@ char *reply_hack( } #ifndef MAIN - if (outlevel >= O_DEBUG) - report_complete(stdout, GT_("...rewritten version is %.*s.\n"), - (int)BEFORE_EOL(buf), buf); + if (outlevel >= O_DEBUG) { + report_complete(stdout, GT_("...rewritten version is %s.\n"), + (cp = sdump(buf, BEFORE_EOL(buf)))); + xfree(cp) + } + #endif /* MAIN */ *length = strlen(buf); return(buf); diff --git a/uid.c b/uid.c index fdc6f5d..d813bee 100644 --- a/uid.c +++ b/uid.c @@ -20,6 +20,7 @@ #include "fetchmail.h" #include "i18n.h" +#include "sdump.h" /* * Machinery for handling UID lists live here. This is mainly to support @@ -260,8 +261,11 @@ void initialize_saved_lists(struct query *hostlist, const char *idfile) if (uidlcount) { report_build(stdout, GT_("Scratch list of UIDs:")); - for (idp = scratchlist; idp; idp = idp->next) - report_build(stdout, " %s", idp->id); + for (idp = scratchlist; idp; idp = idp->next) { + char *t = sdump(idp->id, strlen(idp->id)); + report_build(stdout, " %s", t); + free(t); + } if (!idp) report_build(stdout, GT_(" <empty>")); report_complete(stdout, "\n"); @@ -517,8 +521,11 @@ void uid_swap_lists(struct query *ctl) report_build(stdout, GT_("Merged UID list from %s:"), ctl->server.pollname); else report_build(stdout, GT_("New UID list from %s:"), ctl->server.pollname); - for (idp = dofastuidl ? ctl->oldsaved : ctl->newsaved; idp; idp = idp->next) - report_build(stdout, " %s = %d", idp->id, idp->val.status.mark); + for (idp = dofastuidl ? ctl->oldsaved : ctl->newsaved; idp; idp = idp->next) { + char *t = sdump(idp->id, strlen(idp->id)); + report_build(stdout, " %s = %d", t, idp->val.status.mark); + free(t); + } if (!idp) report_build(stdout, GT_(" <empty>")); report_complete(stdout, "\n"); @@ -567,8 +574,11 @@ void uid_discard_new_list(struct query *ctl) /* this is now a merged list! the mails which were seen in this * poll are marked here. */ report_build(stdout, GT_("Merged UID list from %s:"), ctl->server.pollname); - for (idp = ctl->oldsaved; idp; idp = idp->next) - report_build(stdout, " %s = %d", idp->id, idp->val.status.mark); + for (idp = ctl->oldsaved; idp; idp = idp->next) { + char *t = sdump(idp->id, strlen(idp->id)); + report_build(stdout, " %s = %d", t, idp->val.status.mark); + free(t); + } if (!idp) report_build(stdout, GT_(" <empty>")); report_complete(stdout, "\n"); -- Matthias Andree -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 1165206] Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1165206 http://bugzilla.suse.com/show_bug.cgi?id=1165206#c19 --- Comment #19 from Glen Barney <glenbarney(a)gmail.com> --- Dario - I've been running this for a week now, and have not had any issues or problems! Everything seems to be working just fine on my side, and I'll continue running in this mode going forward! Thank you THANK YOU for all of your work on this! I'm so glad you were able to find the problem, and I'm grateful for your work on making it right! Let me know if I can do anything else here! Glen -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1166781] mysql / mariadb database broken after update from 15.1 to 15.2 beta
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1166781 http://bugzilla.suse.com/show_bug.cgi?id=1166781#c8 Kristyna Streitova <kstreitova(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FEATURE |--- --- Comment #8 from Kristyna Streitova <kstreitova(a)suse.com> --- It really looks like you hit an upstream bug (MDEV-21244). Let's wait if upstream fix it in the next release. --- Btw. This bug initially looked like it was caused by the authentication changes in MariaDB 10.4 that cause that (simplified) one has to run "mysql" command as a root or sudo from now on. I'm just adding a note about it here because it can be a solution for some users. "Two all-privilege accounts were created. One is root@localhost, it has no password, but you need to be system 'root' user to connect. Use, for example, sudo mysql. The second is mysql@localhost, it has no password either, but you need to be the system 'mysql' user to connect. After connecting you can set the password, if you would need to be able to connect as any of these users with a password and without sudo." Please see https://mariadb.com/kb/en/authentication-from-mariadb-104 for more details about authentication changes. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1167985] New: konqueror/kcookiejar cookie settings not handled correctly
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1167985 Bug ID: 1167985 Summary: konqueror/kcookiejar cookie settings not handled correctly Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: d_werner(a)gmx.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- With Leap 15.2 Beta a bug similar to bug 1049975 is back. Setting the cookie settings to "accept for session" in the settings menu of konqueror results in the setting CookieGlobalAdvice=Accept For Session in ~/.config/kcookiejarrc. Restarting konqueror and checking the settings menu the configuration looks correct, it still shows "accept for session". But as soon as a webpage is opened, e.g. https://panopticlick.eff.org/, a dialog pops up and asks how to handle cookies of the domain. After accepting cookies of this domain for the session the Cookie Policy in the ~/.config/kcookiejarrc looks like this: [Cookie Policy] AcceptSessionCookies=true CookieDomainAdvice=.eff.org:AcceptForSession CookieGlobalAdvice=Dunno Cookies=true RejectCrossDomainCookies=true The global setting is destroyed. The dialog pops up for each domain asking how to handle the cookies. rpm -q kio kio-5.68.0-lp152.1.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1168371] New: [Build 20200331] openQA test fails in vagrant/sshfs
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1168371 Bug ID: 1168371 Summary: [Build 20200331] openQA test fails in vagrant/sshfs Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1221271/modules/sshf s/steps/39 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_vagrant@64bit fails in [sshfs](https://openqa.opensuse.org/tests/1221271/modules/sshfs/steps/39) ## Test suite description Maintainer: dancermak. Test vagrant, vagrant plugins and the vagrant boxes ## Reproducible Fails since (at least) Build [20200110](https://openqa.opensuse.org/tests/1141522) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1166689] mariadb.service failure --> mysql-systemd-helper[5752]: 2020-03-15 8:52:14 140350590169664 [Warning] Failed to normalize the argument for --secure-file-priv.
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1166689 http://bugzilla.suse.com/show_bug.cgi?id=1166689#c1 --- Comment #1 from Kristyna Streitova <kstreitova(a)suse.com> --- Hello Nick, thanks for your bug report. The problem is probably that you have a non-existing path defined in your "--secure-file-priv" option (in my.cnf). Please check the value and make sure that the path really exists. Let me know if that helped. If not, please attach your configuration files and error log. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1168150] New: KDE:Extra/lensfun: Bug new version introduce failure in lot of software - code not ready
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1168150 Bug ID: 1168150 Summary: KDE:Extra/lensfun: Bug new version introduce failure in lot of software - code not ready Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: kde-maintainers(a)suse.de Reporter: bruno(a)ioda-net.ch QA Contact: bnc-team-screening(a)forge.provo.novell.com Found By: --- Blocker: --- Since the introduction of the new package v0.3.95 git version There's some software that doesn't build (darktable in Factory) And other that simply kaboom (ufraw for example) Having released a new tarbal is certainly a good idea (for the updated database) but upstream claim that they can't release a new version until https://github.com/lensfun/lensfun/issues/945 is fixed. reference https://github.com/lensfun/lensfun/issues/1033 Also upstream project page state clearly that they need a new leader to drive the project. https://lensfun.github.io/news/ I'm not sure we fix whatever things with this new code. A lot of tools now are just failing behind the scene (hugin can't do pano) etc. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1167315] YaST sw_single crashes with nil:NilClass in PackageCallbacks
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1167315 http://bugzilla.suse.com/show_bug.cgi?id=1167315#c6 --- Comment #6 from Stefan Hundhammer <shundhammer(a)suse.com> --- Please run those commands as root in a shell window and post the output here: zypper verify rpm -Va --nomode --nouser --nogroup --nomtime --nolinkto rpm -Va might take a while. This verifies all files of all installed packages with the MD5 sum that is stored in the RPM database. It is normal that a small number of files are listed as modified, in particular in /etc, /var or /run. For files that are listed, you can check what package they belong to with rpm -qf /full/path Any file below /usr that shows a verify error might be a problem. You can force reinstallation of a package with zypper in -f pkgname Even if you manage to fix your problem with that, please let us know what became of this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1168150] lensfun 3.95 cause build and runtime issues in other packages
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1168150 http://bugzilla.suse.com/show_bug.cgi?id=1168150#c9 Christophe Giboudeaux <christophe(a)krop.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #9 from Christophe Giboudeaux <christophe(a)krop.fr> --- lensfun also has updated camera data now. https://build.opensuse.org/request/show/790678 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165943] snapper (and snapper-zypp-plugin) will not make snapshots: ".snapshots is not a btrfs subvolume"
by bugzilla_noreply＠novell.com 01 Apr '20

01 Apr '20

http://bugzilla.suse.com/show_bug.cgi?id=1165943 http://bugzilla.suse.com/show_bug.cgi?id=1165943#c11 Arvin Schnell <aschnell(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Installation |Basesystem Assignee|yast-internal(a)suse.de |systemd-maintainers(a)suse.de QA Contact|jsrain(a)suse.com |qa-bugs(a)suse.de Flags|needinfo?(axel.braun(a)gmx.de | |), | |needinfo?(beppe85(a)gmail.com | |) | --- Comment #11 from Arvin Schnell <aschnell(a)suse.com> --- Thanks for the information. This is a systemd bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0