January 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1218231] Hw virtualization enabled in BIOS of Intel Skylake i5-6200U, but lscpu says "VMX" disabled
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218231 https://bugzilla.suse.com/show_bug.cgi?id=1218231#c7 --- Comment #7 from Dario Faggioli <dfaggioli(a)suse.com> --- FTR, my situation is as follows: - I have "nx_huge_pages=off" on the command line - Right after boot, I see: > cat /sys/devices/system/cpu/vulnerabilities/itlb_multihit > KVM: Mitigation: VMX disabled - Still, VMX is there (`lscpu|grep Flags|grep vmx`) and kvm_intel is loaded - As soon as I start a KVM VM, I see: > cat /sys/devices/system/cpu/vulnerabilities/itlb_multihit > KVM: Vulnerable So, the first "VMX disabled", AFAIUI, only really means that VMX is not in use at that time (e.g., there's no VM running!), not that it's really disabled. In fact, you can start using it and you should get "KVM: Split huge pages". I agree it's a bit confusing, but that's how it is right now. If we want it differently, this should be changed in the kernel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1218231] Hw virtualization enabled in BIOS of Intel Skylake i5-6200U, but lscpu says "VMX" disabled
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218231 https://bugzilla.suse.com/show_bug.cgi?id=1218231#c6 Dario Faggioli <dfaggioli(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(el(a)horse64.org) CC| |dfaggioli(a)suse.com, | |el(a)horse64.org --- Comment #6 from Dario Faggioli <dfaggioli(a)suse.com> --- (In reply to ell1e from comment #0) > Steps to reproduce: > > 1. Boot an Intel Skylake computer with Fedora installed. Ensure all > virtualization features are enabled in the UEFI/BIOS options. > > 2. Once Linux has booted, change /etc/default/grub to add in > "mitigations=auto,nosmt mds=full,nosmt" and update your generated grub2 > files, and reboot. > > 3. Once inside Linux again, check "lscpu" output and > /sys/devices/system/cpu/vulnerabilities/itlb_multihit output. Expected > output would be something else than "VMX disabled". > Err... So, can you: - check if the KVM module is loaded (`lsmod |grep kvm`) - start a VM (making sure that it uses KVM, so `--enable-kvm` from the QEMU command line, or whatever it's necessary --which should be the default anywa-- for that in VirtManager) - Check again with `lscpu |grep VMX` and/or `cat /sys/devices/system/cpu/vulnerabilities/itlb_multihit` ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1218381] New: VUL-0: CVE-2023-51448: cacti: blind SQL injection in SNMP notification receivers feature
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218381 Bug ID: 1218381 Summary: VUL-0: CVE-2023-51448: cacti: blind SQL injection in SNMP notification receivers feature Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/389228/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pstivanin(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: meissner(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-51448 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1218380] VUL-0: CVE-2023-50250: cacti: reflected XSS in templates_import.php via xml upload
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218380 https://bugzilla.suse.com/show_bug.cgi?id=1218380#c6 --- Comment #6 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-SU-2024:0031-1: An update that fixes 6 vulnerabilities is now available. Category: security (important) Bug References: 1218360,1218366,1218378,1218379,1218380,1218381 CVE References: CVE-2023-49084,CVE-2023-49085,CVE-2023-49086,CVE-2023-49088,CVE-2023-50250,CVE-2023-51448 JIRA References: Sources used: openSUSE Backports SLE-15-SP5 (src): cacti-1.2.26-bp155.2.6.1, cacti-spine-1.2.26-bp155.2.6.1 SUSE Package Hub for SUSE Linux Enterprise 12 (src): cacti-1.2.26-38.1, cacti-spine-1.2.26-32.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1218379] New: VUL-0: CVE-2023-49088: cacti: incomplete fix for CVE-2023-39515, XSS attack via data_debug.php
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218379 Bug ID: 1218379 Summary: VUL-0: CVE-2023-49088: cacti: incomplete fix for CVE-2023-39515, XSS attack via data_debug.php Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/389220/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pstivanin(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: meissner(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables an adversary to have a victim browser execute malicious code when a victim user hovers their mouse over the malicious data source path in `data_debug.php`. To perform the cross-site scripting attack, the adversary needs to be an authorized cacti user with the following permissions: `General Administration>Sites/Devices/Data`. The victim of this attack could be any account with permissions to view `http://<HOST>/cacti/data_debug.php`. As of time of publication, no complete fix has been included in Cacti. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-49088 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1218378] New: VUL-0: CVE-2023-49085: cacti: Multiple vulnerabilities
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218378 Bug ID: 1218378 Summary: VUL-0: CVE-2023-49085: cacti: Multiple vulnerabilities Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/389219/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pstivanin(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: meissner(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the `pollers.php` script. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is the `pollers.php`. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-49085 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1218366] New: VUL-0: CVE-2023-49086: cacti: XSS when adding new devices
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218366 Bug ID: 1218366 Summary: VUL-0: CVE-2023-49086: cacti: XSS when adding new devices Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/389161/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pstivanin(a)suse.com Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). Bypassing an earlier fix (CVE-2023-39360) that leads to a DOM XSS attack. Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is the `graphs_new.php`. Impact of the vulnerability - execution of arbitrary javascript code in the attacked user's browser. This issue has been patched in version 1.2.26. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-49086 https://github.com/Cacti/cacti/security/advisories/GHSA-wc73-r2vw-59pr -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1218360] New: VUL-0: CVE-2023-49084: cacti: multiple vulnerabilities in link.php file
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218360 Bug ID: 1218360 Summary: VUL-0: CVE-2023-49084: cacti: multiple vulnerabilities in link.php file Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/389152/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: nix(a)opensuse.org Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: andrea.mattiazzo(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injection and insufficient processing of the include file path, it is possible to execute arbitrary code on the server. Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is the `link.php`. Impact of the vulnerability execution of arbitrary code on the server. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-49084 https://github.com/Cacti/cacti/security/advisories/GHSA-pfh9-gwm6-86vp Patch: https://github.com/Cacti/cacti/commit/c7c91bf4bdb87769351782b61cda6d89e8e82… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1218380] VUL-0: CVE-2023-50250: cacti: reflected XSS in templates_import.php via xml upload
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1218380 https://bugzilla.suse.com/show_bug.cgi?id=1218380#c5 --- Comment #5 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-SU-2024:0031-1: An update that fixes 6 vulnerabilities is now available. Category: security (important) Bug References: 1218360,1218366,1218378,1218379,1218380,1218381 CVE References: CVE-2023-49084,CVE-2023-49085,CVE-2023-49086,CVE-2023-49088,CVE-2023-50250,CVE-2023-51448 JIRA References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): cacti-1.2.26-38.1, cacti-spine-1.2.26-32.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219135] New: [Build 20240123] kernel 6.7.1 vs ltp: fanotify{14,15,16} and splice07 fail
by bugzilla_noreply＠suse.com 24 Jan '24

24 Jan '24

https://bugzilla.suse.com/show_bug.cgi?id=1219135 Bug ID: 1219135 Summary: [Build 20240123] kernel 6.7.1 vs ltp: fanotify{14,15,16} and splice07 fail Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3889407/modules/fano tify14/steps/7 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation LTP Seems not yet fully ready for Kernel 6.7 (or kernel 6.7 really has bugs identified by LTP) openQA reporters these 4 errors: * fanotify14: fanotify14.c:303: TBROK: fanotify_mark(5, 0x101, 0x200, ..., mntpoint/file1) failed: EOPNOTSUPP (95) * fanotify15: fanotify15.c:88: TBROK: fanotify_mark(3, 0x101, 0x400007c2, ..., mntpoint/test_dir) failed: EOPNOTSUPP (95) Test process returned unkown none zero value (2). * fanotify16: fanotify16.c:289: TBROK: fanotify_mark(3, 0x101, 0x40000fc0, ..., fs_mnt) failed: EOPNOTSUPP (95) Test process returned unkown none zero value (2). * splice07: splice07.c:54: TFAIL: splice() on /dev/zero -> pipe write end succeeded openQA test in scenario opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-jeos-ltp-syscalls@uefi_virtio-2G fails in [fanotify14](https://openqa.opensuse.org/tests/3889407/modules/fanotify14/st… ## Test suite description ## Reproducible Fails since (at least) Build [20240123](https://openqa.opensuse.org/tests/3888826) ## Expected result Last good: [20240122](https://openqa.opensuse.org/tests/3886452) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 5