Bug ID | 1209627 |
---|---|
Summary | jitterentropy: Stack corruption on s390x architecture |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | pmonrealgonzalez@suse.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
We have seen a couple of projects failing to build recently due to a stack corruption in the jitterentropy-base-user.h:jent_get_nstime() function. We have seen the *** stack smashing detected *** when calculating the fipshmac in openssl-1_1 or gnutls when including the jitterentropy 140-3 FIPS patches. There is a patch merged upstream that fixes the issue, see: * https://github.com/smuellerDD/jitterentropy-library/pull/95 * https://github.com/smuellerDD/jitterentropy-library/commit/7bf9f85