https://bugzilla.suse.com/show_bug.cgi?id=1185288 Michal Suchanek changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://build.opensuse.org/ | |request/show/888426 CC| |martin.liska@suse.com, | |rguenther@suse.com See Also| |https://jira.suse.com/brows | |e/PM-2386 -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c4 --- Comment #4 from Michal Suchanek --- (In reply to Michal Suchanek from comment #3)

aarch64 is fixed with dwarves 1.21 on master but broken on next

And requires a patch to dwarves that is yet to be merged upstream but should make it to Factory soon. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c7 --- Comment #7 from Michal Suchanek --- It needs some changelog merge and maybe some of the patches still apply: -Wed May 22 23:29:10 UTC 2019 - Joao Moreira -- CVE-2018-16402: libelf: denial of service/double free on an - attempt to decompress the same section twice (bnc#1107066) - Add patch: - libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch -- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the - function arlib_add_symbols() used by eu-ranlib (bnc#1112723) - Add patch: - arlib-check-that-sh_entsize-isnt-zero.patch -- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and - application crash) via a crafted ELF file (bnc#1033088) - Add patch: - elflint-check-symbol-table-data-is-big-enough-before-check.patch -- CVE-2017-7610: elflint: heap-based buffer overflow in check_group - (bnc#1033087) - Add patch: - elflint-dont-check-section-group-without-flags-word.patch -- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067) - Add patch: - libdw-check-end-of-attributes-list-consistently.patch -- CVE-2018-16062: heap-buffer-overflow in - /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390) - Add patch: - libdw-readelf-make-sure-there-is-enough-data-to-read.patch -- CVE-2018-18310: Invalid Address Read problem in - dwfl_segment_report_module.c (bnc#1111973) - Add patch: - libdwfl-sanity-check-partial-core-file-data-reads.patch -- CVE-2019-7150: dwfl_segment_report_module doesn't check whether - the dyn data read from core file is truncated (bnc#1123685) - Add patch: - libdwfl-sanity-check-partial-core-file-dyn-data-read.patch -- CVE-2019-7665: NT_PLATFORM core file note should be a zero - terminated string (CVE is a bit misleading, as this is not a bug - in libelf as described) (bnc#1125007) - Add patch: - libebl-check-NT_PLATFORM-core-notes.patch -- CVE-2017-7609: memory allocation failure in __libelf_decompress - (bnc#1033086) - Add patch: - libelf-check-compression-before-allocate-output-buffer.patch -- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066) - Add patch: - libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch -- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi - (readelf.c) (bnc#1033084) - Add patch: - readelf-fix-off-by-one-sanity-check.patch -- CVE-2018-18520: eu-size: Bad handling of ar files inside are - files (bnc#1112726) - Add patch: - size-handle-recursive-elf-ar-files.patch -- CVE-2017-7608: heap-based buffer overflow in - ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085) - Add patch: - use-the-empty-string-for-note-names-with-zero-size.patch - -------------------------------------------------------------------- -Tue Sep 25 15:32:11 UTC 2018 - jmoreira@suse.com - -- CVE-2017-7613: elfutils: denial of service (memory consumption) - via a crafted ELF file (bnc#1033090) - Add patch: - elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch -- CVE-2017-7612: elfutils: denial of service (heap-based buffer - over-read and application crash) via a crafted ELF file - (bnc#1033089) - Add patch: elfutils-dont-trust-sh_entsize.patch -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c9 --- Comment #9 from Michal Suchanek --- The broken part is that the BTF info from the kernel cannot be parsed by dwarves. This in turn is used in kernel 5.13+ which we have in Tumbleweed and will have in 15.4. Sure, the ppc64 platform is relevant only on Tumbleweed, x86 and arm64 everywhere. We need this sorted before we submit a kernel into 15.4 or stop building BTF in kernel. I am not sure about exact timeline but I expect it counts in weeks. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c11 --- Comment #11 from Michal Suchanek --- Upstream patches: de01cc6f9446187d69b9748bb3636361c79e77a4 elfutils-0.176 libebl-check-NT_PLATFORM-core-notes.patch da5c5336a1eaf519de246f7d9f0f5585e1d4ac59 elfutils-0.176 libdwfl-sanity-check-partial-core-file-dyn-data-read.patch 22d2d082d57a7470fadc0eae67179553f4919209 elfutils-0.175 size-handle-recursive-elf-ar-files.patch 20f9de9b5f704cec55df92406a50bcbcfca96acd elfutils-0.175 libdwfl-sanity-check-partial-core-file-data-reads.patch 2b16a9be69939822dcafe075413468daac98b327 elfutils-0.175 arlib-check-that-sh_entsize-isnt-zero.patch 56b18521fb8d46d40fc090c0de9d11a08bc982fa elfutils-0.174 libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch 29e31978ba51c1051743a503ee325b5ebc03d7e9 elfutils-0.174 libdw-readelf-make-sure-there-is-enough-data-to-read.patch 6983e59b727458a6c64d9659c85f08218bc4fcda elfutils-0.174 libdw-check-end-of-attributes-list-consistently.patch d65648473d1bfc779e16cd3cbf140a8ba0fed16c elfutils-0.170 ppc-machine-flags.patch b0b58c5e0b34e54194aa042f2310af58ee7de603 elfutils-0.169 use-the-empty-string-for-note-names-with-zero-size.patch 9d84fdd78705d7a1b9947a9f4ca77fbccdd76d4a elfutils-0.169 readelf-fix-off-by-one-sanity-check.patch 8dcc4bf791469a32c3a09ebcc23b309bf75c795f elfutils-0.169 libelf-check-compression-before-allocate-output-buffer.patch 61fe61898747f63eb35a81c2261f3590a3dab8fd elfutils-0.169 elfutils-dont-trust-sh_entsize.patch 4314716cd498bb51639db717bd7ce6182de33322 elfutils-0.169 elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch fb6709f1a41b58a9557ea45b7f53ae678c660b21 elfutils-0.169 elflint-dont-check-section-group-without-flags-word.patch 9a0d9d314a6342b56e3277bd7ad7ecb6e73a7d38 elfutils-0.169 elflint-check-symbol-table-data-is-big-enough-before-check.patch b1042ce216eaef96099f263fb81141dbdec004fd elfutils-0.169 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch probably ad-hoc patch disable-tests-with-ptrace.patch -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 Jeffrey Cheung changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c13 --- Comment #13 from Michael Matz --- (In reply to Michal Suchanek from comment #12)

So we are getting elfutils branched in 15.4 and this compatibility for 15.0 is not going to get submitted?

Where do you get this from? My proposal was to update the package in SLE-15:Update to r77 of factory (i.e. before debuginfod and such). There is _also_ an ECO running that asks for debuginfod on SLE15-SP4, and hence updating elfutils to a much newer version. That should be done only for the SP4 tree IMHO, but will also include all necessary changes. Or, are you saying that you would be fine with not updating the SLE-15 (before SP4) package? -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1185288 https://bugzilla.suse.com/show_bug.cgi?id=1185288#c16 Martin Li��ka changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |msuchanek@suse.com Flags| |needinfo?(msuchanek@suse.co | |m) --- Comment #16 from Martin Li��ka --- Can we please close this? -- You are receiving this mail because: You are on the CC list for the bug.