Activity log for bug #1805802

Date Who What changed Old value New value Message
2018-11-29 09:59:32 bugproxy bug added bug
2018-11-29 09:59:34 bugproxy tags architecture-s39064 bugnameltc-173661 severity-high targetmilestone-inin1810
2018-11-29 09:59:35 bugproxy ubuntu: assignee Skipper Bug Screeners (skipper-screen-team)
2018-11-29 09:59:39 bugproxy affects ubuntu linux (Ubuntu)
2018-11-29 10:55:50 Frank Heimes bug task added ubuntu-z-systems
2018-11-29 10:55:58 Frank Heimes ubuntu-z-systems: status New Triaged
2018-11-29 10:56:02 Frank Heimes ubuntu-z-systems: importance Undecided High
2018-11-29 10:56:15 Frank Heimes ubuntu-z-systems: assignee Canonical Kernel Team (canonical-kernel-team)
2018-12-03 13:53:34 Frank Heimes tags architecture-s39064 bugnameltc-173661 severity-high targetmilestone-inin1810 architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810
2018-12-03 15:13:33 Joseph Salisbury linux (Ubuntu): importance Undecided High
2018-12-03 15:13:37 Joseph Salisbury linux (Ubuntu): status New In Progress
2018-12-03 15:13:43 Joseph Salisbury linux (Ubuntu): assignee Skipper Bug Screeners (skipper-screen-team) Joseph Salisbury (jsalisbury)
2018-12-03 15:13:49 Joseph Salisbury nominated for series Ubuntu Cosmic
2018-12-03 15:13:49 Joseph Salisbury bug task added linux (Ubuntu Cosmic)
2018-12-03 15:13:49 Joseph Salisbury nominated for series Ubuntu Disco
2018-12-03 15:13:49 Joseph Salisbury bug task added linux (Ubuntu Disco)
2018-12-03 15:13:49 Joseph Salisbury nominated for series Ubuntu Bionic
2018-12-03 15:13:49 Joseph Salisbury bug task added linux (Ubuntu Bionic)
2018-12-03 15:13:56 Joseph Salisbury linux (Ubuntu Cosmic): status New In Progress
2018-12-03 15:14:00 Joseph Salisbury linux (Ubuntu Bionic): status New In Progress
2018-12-03 15:14:03 Joseph Salisbury linux (Ubuntu Cosmic): importance Undecided High
2018-12-03 15:14:05 Joseph Salisbury linux (Ubuntu Bionic): importance Undecided High
2018-12-03 15:14:08 Joseph Salisbury linux (Ubuntu Cosmic): assignee Joseph Salisbury (jsalisbury)
2018-12-03 15:14:10 Joseph Salisbury linux (Ubuntu Bionic): assignee Joseph Salisbury (jsalisbury)
2018-12-03 17:11:01 Frank Heimes ubuntu-z-systems: status Triaged In Progress
2018-12-14 16:47:45 Joseph Salisbury description Description: qeth: fix length check in SNMP processing Symptom: Undefined behaviour. Problem: The response for a SNMP request can consist of multiple parts, which the cmd callback stages into a kernel buffer until all parts have been received. If the callback detects that the staging buffer provides insufficient space, it bails out with error. This processing is buggy for the first part of the response - while it initially checks for a length of 'data_len', it later copies an additional amount of 'offsetof(struct qeth_snmp_cmd, data)' bytes. Solution: Fix the calculation of 'data_len' for the first part of the response. Upstream-ID: 9a764c1e59684c0358e16ccaafd870629f2cfe67 Should be applied to all Ubuntu Releases in Service == SRU Justification == The response for a SNMP request can consist of multiple parts, which the cmd callback stages into a kernel buffer until all parts have been received. If the callback detects that the staging buffer provides insufficient space, it bails out with error. This processing is buggy for the first part of the response - while it initially checks for a length of 'data_len', it later copies an additional amount of 'offsetof(struct qeth_snmp_cmd, data)' bytes. == Fix == 9a764c1e5968 ("s390/qeth: fix length check in SNMP processing") == Regression Potential == Low. Changes limited to s390. == Test Case == A test kernel was built with this patch and tested by the original bug reporter. The bug reporter states the test kernel resolved the bug. == Original bug description == Description: qeth: fix length check in SNMP processing Symptom: Undefined behaviour. Problem: The response for a SNMP request can consist of multiple parts,               which the cmd callback stages into a kernel buffer until all               parts have been received. If the callback detects that the               staging buffer provides insufficient space, it bails out with               error.               This processing is buggy for the first part of the response -               while it initially checks for a length of 'data_len', it later               copies an additional amount of               'offsetof(struct qeth_snmp_cmd, data)' bytes. Solution: Fix the calculation of 'data_len' for the first part of the               response. Upstream-ID: 9a764c1e59684c0358e16ccaafd870629f2cfe67 Should be applied to all Ubuntu Releases in Service
2019-01-09 10:51:30 Stefan Bader linux (Ubuntu Disco): status In Progress Fix Committed
2019-01-10 17:28:40 Khaled El Mously linux (Ubuntu Bionic): status In Progress Fix Committed
2019-01-10 17:28:42 Khaled El Mously linux (Ubuntu Cosmic): status In Progress Fix Committed
2019-01-14 08:28:07 Frank Heimes ubuntu-z-systems: status In Progress Fix Committed
2019-01-15 10:33:58 Brad Figg tags architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-cosmic
2019-01-15 10:37:50 Brad Figg tags architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-cosmic architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic
2019-01-15 16:21:43 Joseph Salisbury linux (Ubuntu Bionic): assignee Joseph Salisbury (jsalisbury)
2019-01-15 16:21:46 Joseph Salisbury linux (Ubuntu Cosmic): assignee Joseph Salisbury (jsalisbury)
2019-01-15 16:21:49 Joseph Salisbury linux (Ubuntu Disco): assignee Joseph Salisbury (jsalisbury)
2019-01-15 19:28:15 Joseph Salisbury bug added subscriber Joseph Salisbury
2019-01-15 19:28:18 Joseph Salisbury removed subscriber Joseph Salisbury
2019-01-28 17:12:01 Launchpad Janitor linux (Ubuntu Bionic): status Fix Committed Fix Released
2019-01-28 17:12:01 Launchpad Janitor cve linked 2018-14625
2019-01-28 17:12:01 Launchpad Janitor cve linked 2018-16882
2019-01-28 17:12:01 Launchpad Janitor cve linked 2018-17972
2019-01-28 17:12:01 Launchpad Janitor cve linked 2018-18281
2019-01-28 17:12:01 Launchpad Janitor cve linked 2018-19407
2019-02-04 08:48:45 Launchpad Janitor linux (Ubuntu Cosmic): status Fix Committed Fix Released
2019-02-04 18:51:29 Frank Heimes linux (Ubuntu Disco): status Fix Committed Fix Released
2019-02-04 18:51:33 Frank Heimes ubuntu-z-systems: status Fix Committed Fix Released
2019-02-14 15:51:35 Andy Whitcroft tags architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic
2019-02-14 16:09:09 Brad Figg tags architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic
2019-02-14 16:13:35 Andy Whitcroft tags architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic
2019-02-14 16:17:46 Andy Whitcroft tags architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic
2019-07-24 20:57:07 Brad Figg tags architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic architecture-s39064 bugnameltc-173661 cscc kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic