body:
--1634634280.aD3CA6EA0.30308
Date: Tue, 19 Oct 2021 09:04:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191815

            Bug ID: 1191815
           Summary: WebRTC stopped working in Firefox 93
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: oliver-at-schwabedissen.name
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I noticed that WebRTC stopped working for me with Firefox 93 on SuSE
Tumbleweed.

I tried to start a new session on web.threema.ch and connection to my phone
stopped at 60% which means a problem with WebRTC. Also
https://web.threema.ch/troubleshoot/ doesn't work: WebRTC DataChannel
connection tries forever, TURN does not work. Also https://test.webrtc.org/
hangs when testing network.

What I tested:
FF93 in Private Mode: no change
FF93 with new profile: no change
Chromium on same machine: all tests successful
FF93 Windows 10 (KVM guest): all tests successful
FF93 Ubuntu 18.04 (KVM guest) all tests successful

So the problem seems to be Tumbleweed related (don't have Leap for test).

I also tried MozillaFirefox-93.0-4.1.x86_64.rpm (see bug
https://bugzilla.opensuse.org/show_bug.cgi?id=1191659), but problem still
exists.

summary: WebRTC stopped working in Firefox 93


body:
--1634642994.6F670.28295
Date: Tue, 19 Oct 2021 11:29:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191825

            Bug ID: 1191825
           Summary: Firefox does not detect Plasma anymore
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: fabian@ritter-vogt.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently, Firefox checks whether it's running in a KDE Plasma session by
connecting to the X11 display and checking for the KDE_FULL_SESSION atom on the
root window.

Starting with 5.23, this property is no longer set, also because an X11
connection might not always be available. This means that Firefox does not
apply Plasma specific behaviour like using kmozillahelper for file dialogs.

Instead, Firefox should look at the environment variables and check for
XDG_CURRENT_DESKTOP=KDE or KDE_FULL_SESSION (preferably the former).

summary: Firefox does not detect Plasma anymore


--1634679011.d1D2c3C0.747
Date: Tue, 19 Oct 2021 21:30:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191844

            Bug ID: 1191844
           Summary: VUL-0: chromium: multiple security issues fixed in 95.0.4638.54
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html

CVE-2021-37981: Heap buffer overflow in Skia
CVE-2021-37982: Use after free in Incognito
CVE-2021-37983: Use after free in Dev Tools
CVE-2021-37984: Heap buffer overflow in PDFium
CVE-2021-37985: Use after free in V8
CVE-2021-37986: Heap buffer overflow in Settings
CVE-2021-37987: Use after free in Network APIs
CVE-2021-37988: Use after free in Profiles
CVE-2021-37989: Inappropriate implementation in Blink
CVE-2021-37990: Inappropriate implementation in WebView
CVE-2021-37991: Race in V8
CVE-2021-37992: Out of bounds read in WebAudio
CVE-2021-37993: Use after free in PDF Accessibility
CVE-2021-37996: Insufficient validation of untrusted input in Downloads
CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
CVE-2021-37995: Inappropriate implementation in WebApp Installer


--1634734665.8a1fd00.31777
Date: Wed, 20 Oct 2021 12:57:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191869

            Bug ID: 1191869
           Summary: VUL-0: CVE-2021-35538: virtualbox: Oracle Critical Patch Update Advisory - October 2021
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://www.oracle.com/security-alerts/cpuoct2021.html#AppendixOVIR

VirtualBox prior to 6.1.28

* CVE-2021-35538
* CVE-2021-35545
* CVE-2021-35540
* CVE-2021-35542
* CVE-2021-2475


--1634785762.25e1200.13268
Date: Thu, 21 Oct 2021 03:09:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191885

            Bug ID: 1191885
           Summary: network/ddclient: Bug ddclient no longer sends info mails
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: chris-at-computersalat.de
          Reporter: munix9-at-googlemail.com
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I suspect that the problem originated with
https://build.opensuse.org/request/show/925663.

Output from systemctl status ddclient.service

postfix/postdrop[3104]: fatal: mail_queue_enter: create file
maildrop/592811.3104: no permission
postfix/sendmail[3103]: warning: command "/usr/sbin/postdrop -r" exited with
status 1
postfix/sendmail[3103]: fatal: ddclient(457): unable to execute
/usr/sbin/postdrop -r: Application error

ddclient-3.9.1-4.1.noarch
Tumbleweed 20211016


body:
--1634790811.85630.10720
Date: Thu, 21 Oct 2021 04:33:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191886

            Bug ID: 1191886
           Summary: KDE:Applications/kdeconnect-kde: Bug Browse device no longer works
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: lbeltrame-at-kde.org
          Reporter: munix9-at-googlemail.com
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the last update, I can no longer browse my tablet with Dolphin.

journalctl -b shows

kdeconnectd[3371]: QDBusAbstractAdaptor: Cannot relay signal
SftpPlugin::packetReceived(NetworkPacket): Unregistered input type in parameter
list: NetworkPacket

kdeconnect-kde 21.08.2-1.1
Tumbleweed 20211016

pkgs: kdeconnect-kde sshfs


--1634797213.F2672586.16221
Date: Thu, 21 Oct 2021 06:20:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191887

            Bug ID: 1191887
           Summary: [openQA] keyboard shortcut doesn't work in gnome-control-center users panel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1980700/modules/logi
                    n_test/steps/6
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: zcjia-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: fcrozat-at-suse.com, grace.wang-at-suse.com,
                    yfjiang-at-suse.com
          Found By: openQA
           Blocker: Yes

## Observation

In this screen https://openqa.opensuse.org/tests/1980700#step/login_test/6 :

After clicking "Unlock..." (to gain privilege), it should be possible to use
keyboard shortcut "alt-u" to toggle "Automatic Login" option, this shortcut
fails after gnome-control-center upgrades to version 41.0.

This bug also happens for SLE15SP4 with gnome-control-center-40.

I will adjust the test to use mouse if keyboard shortcuts fails.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-desktopapps-gnome@64bit
fails in
[login_test](https://openqa.opensuse.org/tests/1980700/modules/login_test/steps/6)

## Test suite description
Maintainer: qkzhu-at-suse.com
See https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/3558
and
poo#23884

## Reproducible

Fails since (at least) Build
[20210929](https://openqa.opensuse.org/tests/1947630)

## Expected result

Last good: [20210928](https://openqa.opensuse.org/tests/1946399) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=desktopapps-gnome&version=Tumbleweed)


body:
--1634822758.736c0.26805
Date: Thu, 21 Oct 2021 13:25:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1191915

            Bug ID: 1191915
           Summary: fxload does not support USB3 devices
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: pstivanin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Current version of fxload on Leap does not support USB 3.0 devices (e.g. QHY,
ZWO, etc, cameras).
I've tested the updated package on both Tumbleweed and Leap 15.3, and now the
camera is correctly recognized.

summary: fxload does not support USB3 devices


body:
--1634828689.5036f60.28879
Date: Thu, 21 Oct 2021 15:04:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191923

            Bug ID: 1191923
           Summary: get rid of /etc/ttytype
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: lnussel-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: werner-at-suse.com
          Found By: ---
           Blocker: ---

aaa_base ships with /etc/ttytype. The only user seems to be tset from ncurses.
There's no API to access this file actually. Other places in aaa_base just code
some logic and doesn't use that file:
https://github.com/openSUSE/aaa_base/blob/48897c357de1b74711d81a32459fa1f08b01c950/files/etc/profile#L77

Also, systemd hardcodes the tty:
https://github.com/openSUSE/systemd/blob/0a51337df1b40a0799bb17fb4bf95332e0652f28/src/basic/terminal-util.c#L783

Just like agetty, which in addition has more logic:
https://github.com/karelzak/util-linux/blob/b0a8b8cd9c34600dda7d0503aac2dc0af3012fdc/term-utils/agetty.c#L1163

We should stop shipping and using /etc/ttytype

summary: get rid of /etc/ttytype


--1634886474.65Fbf3060.30596
Date: Fri, 22 Oct 2021 07:07:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1191938

            Bug ID: 1191938
           Summary: VUL-1: CVE-2020-27304: civetweb: missing uploaded filepath validation in the default form-based file upload mechanism
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/313299/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: axel.braun-at-gmx.de
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

The CivetWeb web library does not validate uploaded filepaths when running on
an
OS other than Windows, when using the built-in HTTP form-based file upload
mechanism, via the mg_handle_form_request API. Web applications that use the
file upload form handler, and use parts of the user-controlled filename in the
output path, are susceptible to directory traversal

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27304
https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/
https://groups.google.com/g/civetweb/c/yPBxNXdGgJQ


--1634888693.85acCe1.27507
Date: Fri, 22 Oct 2021 07:44:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191945

            Bug ID: 1191945
           Summary: [Build 20211020] t-u 3.5.7 - results in emergency console
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1983403/modules/disk
                    _boot/steps/5
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-ContainerHost-x86_64-container-host@64bit
fails in
[disk_boot](https://openqa.opensuse.org/tests/1983403/modules/disk_boot/steps/5)

From the journal:

Oct 22 07:26:34.116234 localhost combustion[634]: transactional-update 3.5.7
started
Oct 22 07:26:34.118437 localhost combustion[634]: Options: shell
Oct 22 07:26:34.183109 localhost combustion[634]: Separate /var detected.
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 tukit
3.5.7 started
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 Options:
-c1 open
Oct 22 07:26:34.682648 localhost combustion[634]: Failure (dbus fatal
exception).
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 Using
snapshot 1 as base for new snapshot 2.
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 No
previous snapshot to sync with - skipping
Oct 22 07:26:34.682648 localhost combustion[634]: ID: 2
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/log]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/lib/zypp]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/lib/ca-certificates]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/lib/alternatives]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/lib/selinux]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/cache]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34 ERROR:
filesystem error: cannot remove all: Device or resource busy
[/.snapshots/2/snapshot/var/tmp]
Oct 22 07:26:34.682648 localhost combustion[634]: 2021-10-22 07:26:34
Transaction completed.
???
Oct 22 07:26:35.114100 localhost combustion[634]: transactional-update finished
Oct 22 07:26:35.134257 localhost combustion[931]: umount: /sysroot/var: target
is busy.
Oct 22 07:26:35.135028 localhost systemd[1]: combustion.service: Main process
exited, code=exited, status=32/n/a
Oct 22 07:26:35.142244 localhost systemd[1]: combustion.service: Failed with
result 'exit-code'.
Oct 22 07:26:35.142512 localhost systemd[1]: Failed to start Combustion.
## Test suite description

## Reproducible

Fails since (at least) Build
[20211020](https://openqa.opensuse.org/tests/1982883)

## Expected result

Last good: [20211019](https://openqa.opensuse.org/tests/1980808) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image-ContainerHost&machine=64bit&test=container-host&version=Tumbleweed)


--1635025713.D2Ca5A0.32615
Date: Sat, 23 Oct 2021 21:48:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1191980

            Bug ID: 1191980
           Summary: Touchpad not working during and after install
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: bschouten-at-protonmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I have a Fujitsu Lifebook T725 where the touchpad device does not work during
the 15.3 Leap installation or after the installation.  I have been able to
duplicate this issue across multiple installation medias, and multiple machines
with the same hardware spec.  The solution thus far has been to add the
following line to /etc/grub/defaults:

GRUB_CMDLINE_LINUX="i8042.notimeout i8042.nomux"

I'm not sure if something like this should be included in the kernel for the
distribution, but I have had to do the same for Tumbleweed.  Thank you for your
time and trouble!

- Bill


--1635201555.ec28a60.13399
Date: Mon, 25 Oct 2021 22:39:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192014

            Bug ID: 1192014
           Summary: provide admin option to NOT automatically REbuild initrds for previously installed kernels
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Basesystem
          Assignee: dracut-maintainers-at-suse.de
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
                CC: martin.wilck-at-suse.com
          Found By: ---
           Blocker: ---

Initial Summary:
provide admin option to NOT automatically REbuild initrds for previously
installed kernels

From bug 1189772, where this request has already had some discussion about how
it might be implemented:
[quote]
> (In reply to Martin Wilck from comment #7)
>> (In reply to Felix Miata from comment #6)
>> IMO, openSUSE should also have an admin option not to rebuild, regardless of
>> use case. What I do on openSUSE is set immutable flag on initrds. It doesn't
>> stop the rebuild waste of CPU cycles and SSD writes, but I get the result I
>> want.

> Fair enough. Please open a feature request.
[/quote]:

On Debians there's been this to implement admin preference since forever:
# cat /etc/initramfs-tools/update-initramfs.conf
#
# Configuration file for update-initramfs(8)
#

#
# update_initramfs [ yes | all | no ]
#
# Default is yes
# If set to all update-initramfs will update all initramfs
# If set to no disables any update to initramfs beside kernel upgrade

update_initramfs=no

#
# backup_initramfs [ yes | no ]
#
# Default is no
# If set to no leaves no .bak backup files.

backup_initramfs=no


--1635243727.1A3Ee0.29153
Date: Tue, 26 Oct 2021 10:22:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192023

            Bug ID: 1192023
           Summary: Package git-daemon fails to install because of reference to non-existing group "nogroup"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: pfhllnts-at-hollants.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 853357
  --> http://bugzilla.opensuse.org/attachment.cgi?id=853357&action=edit
Screenshot of error

Installation of the "git-daemon" package fails, because
1. in %post the package tries to add the "git-daemon" user to "nogroup" but
2. "nogroup" is not part of a stock (minimal) 15.3 install anymore.
(see also Screenshot)


--1635341691.e7f3e0.5559
Date: Wed, 27 Oct 2021 13:34:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192078

            Bug ID: 1192078
           Summary: Transactional shell misses root certificates
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: marius.kittler-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The directory containing all root certificates is empty in the environment of
`transactional-update shell`. Just enter the shell and find `/etc/ssl/certs`
(and `/var/lib/ca-certificates/pem` empty or try `curl https://www.google.de`
which will fail due to missing root certificates.

Note that the issue appears to be fixed in Leap 15.3 but it can go in one's way
when trying to upgrade Leap 15.2 to Leap 15.3.

As a workaround one could only use http repository URLs when upgrading to Leap
15.3. Note that redirections to https URLs might still be possible. This can be
avoided by using `mirrorcache.opensuse.org`, e.g.:
```
sed -i 's,download.opensuse.org,mirrorcache.opensuse.org,g' \
  /etc/zypp/repos.d/*.repo
```


--1635475439.dC4A5c81.4689
Date: Fri, 29 Oct 2021 02:43:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192133

            Bug ID: 1192133
           Summary: libQt5QuickControls2-devel is not installed with the KDE pattern
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: trmdi-at-yandex.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This should be included in the KDE pattern (or Qt pattern, not sure)
Currently, when I've installed the KDE and Qt pattern, it is still not
installed.


--1635491543.abf1DE0.12602
Date: Fri, 29 Oct 2021 07:12:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192144

            Bug ID: 1192144
           Summary: Base:System/htop: Request update package to fix scrolling bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: 3rd party software
          Assignee: mpluskal-at-suse.com
          Reporter: gagahpangeran29-at-gmail.com
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently there's bug on latest htop version (3.1.0) in tumbleweed repo that
prevent scrolling up. Upstream report at
https://github.com/htop-dev/htop/issues/825

This bug is already fixed by upstream
(https://github.com/htop-dev/htop/pull/807) in version 3.1.1 and already
release 12 days ago on upstream but it still not updated in tumbleweed repo.

I don't see any request to update this package yet, so I open this bug to
request for package update.

Thank you!


--1635621855.b5CD0.13276
Date: Sat, 30 Oct 2021 19:24:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192184

            Bug ID: 1192184
           Summary: VUL-0: chromium: multiple security issues fixed in 95.0.4638.69
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: Andreas.Stieger-at-gmx.de
          Found By: ---
           Blocker: ---

[$10000][1259864] High CVE-2021-37997 : Use after free in Sign-In. Reported by
Wei Yuan of MoyunSec VLab on 2021-10-14

[$7500][1259587] High CVE-2021-37998 : Use after free in Garbage Collection.
Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications
Corp. Ltd. on 2021-10-13

[$1000][1251541] High CVE-2021-37999 : Insufficient data validation in New Tab
Page. Reported by Ashish Arun Dhone on 2021-09-21

[$N/A][1249962] High CVE-2021-38000 : Insufficient validation of untrusted
input in Intents. Reported by Clement Lecigne, Neel Mehta, and Maddie Stone of
Google Threat Analysis Group on 2021-09-15

[$N/A][1260577] High CVE-2021-38001 : Type Confusion in V8. Reported by
@s0rrymybad of Kunlun Lab via Tianfu Cup on 2021-10-16

[$N/A][1260940] High CVE-2021-38002 : Use after free in Web Transport. Reported
by @__R0ng of 360 Alpha Lab, ???????????????????????? via Tianfu Cup on 2021-10-16

[$TBD][1263462] High CVE-2021-38003 : Inappropriate implementation in V8.
Reported by Cl??ment Lecigne from Google TAG and Samuel Gro?? from Google Project
Zero on 2021-10-26

Google is aware that exploits for CVE-2021-38000 and CVE-2021-38003 exist in
the wild.


--1635805279.7e7E520.15684
Date: Mon, 1 Nov 2021 22:21:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192225

            Bug ID: 1192225
           Summary: With the latest vim from the editors repository, calling vim starts gvim
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aynorando-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Customer
           Blocker: No

With the latest version of the vim packages 8.2.3567-699.1 from the editors
repository
(https://download.opensuse.org/repositories/editors/openSUSE_Tumbleweed/), when
you type vim on a terminal you get gvim.

Although there is the workaround of calling "vim -v" this is annoying and
breaks some things like committing in git if vim is your default editor.


body:
--1635841392.FB1DE000.10672
Date: Tue, 2 Nov 2021 08:23:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192237

            Bug ID: 1192237
           Summary: lmms - missing runtime dependencies
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Recording this here for now. lmms currently fails to build for TW.

lmms needs explicit runtime dependencies on libgig and libstk. On startup it
prints:

# lmms
Notice: could not set realtime priority.
9:10:22 - lmms(14055) -  : Cannot load library /usr/lib64/lmms/libgigplayer.so:
(libgig.so.10: cannot open shared object file: No such file or directory)
9:10:22 - lmms(14055) -  : Cannot load library
/usr/lib64/lmms/libmalletsstk.so: (libstk.so.4: cannot open shared object file:
No such file or directory)

These runtime dependencies are missing in the `rpm -q --requires lmms`

summary: lmms - missing runtime dependencies


--1635847867.Dff021.739
Date: Tue, 2 Nov 2021 10:11:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192242

            Bug ID: 1192242
           Summary: transactional-update 3.6.0 do not correctly mount /etc inside the snapshot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: aplanas-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Using a fresh microos installation (or an updated one) with t-u 3.6.0, when a
package try to install configuration files in /etc, the files are not sync back
into the current /etc and the overlay get lost:

# transactional-update pkg in salt-minion
(This will create some config files in /etc/salt)

# ls -la /etc/salt
ls: cannot access '/etc/salt': No such file or directory

# mount
...
overlay on /etc type overlay
(rw,relatime,seclabel,lowerdir=/sysroot/etc,upperdir=/sysroot/var/lib/overlay/1/etc,workdir=/sysroot/var/lib/overlay/work-etc)
...

But the overlay is there:

# ls /var/lib/overlay/
1  3  transactional-update.newsnapshot  work-etc

# ls /var/lib/overlay/3/salt
...

# cat /etc/fstab
...
UUID=3de12086-e4a4-4770-b4d5-c19a22ccdab4 /var btrfs defaults,x-initrd.mount 0
0
overlay /etc overlay
defaults,lowerdir=/sysroot/etc,upperdir=/sysroot/var/lib/overlay/1/etc,workdir=/sysroot/var/lib/overlay/work-etc,x-systemd.requires-mounts-for=/var,x-systemd.requires-mounts-for=/sysroot/var,x-initrd.mount
0 0

A shell shows the pending changes in etc, mounting the overlay:

# transactional-update -c -d shell
# ls /etc/salt
...

And a touch in /etc seems to trigger the rsync:

# touch /etc/changed
# exit
...
rsync: [receiver] rsync_xal_set: lremovexattr("/etc/.","security.selinux")
failed: Permission denied (13)
...
rsync error: some files/attrs were not transferred (see previous errors) (code
23) at main.c(1330) [sender=3.2.3]
2021-11-02 10:09:00 Discarding snapshot 4.
ERROR: `rsync --archive --inplace --xattrs --acls --exclude 'fstab' --delete
--quiet '/.snapshots/4/snapshot/etc/' /etc` returned with error code 23.
transactional-update finished


body:
--1635856477.33fd5A220.16831
Date: Tue, 2 Nov 2021 12:34:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192248

            Bug ID: 1192248
           Summary: $HOME/.local/bin not part of PATH
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jgonzalez-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to
https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html

> User-specific executable files may be stored in $HOME/.local/bin. Distributions should ensure this directory shows up in the UNIX $PATH environment variable, at an appropriate place.
> Since $HOME might be shared between systems of different achitectures, installing compiled binaries to $HOME/.local/bin could cause problems when used on systems of differing architectures. This is often not a problem, but the fact that $HOME becomes partially achitecture-specific if compiled binaries are placed in it should be kept in mind.

openSUSE does not consider this directory now, as discovered at
https://github.com/rancher-sandbox/rancher-desktop/issues/881

While I am not sure if Rancher Desktop should create the symlinks at
$HOME/.local/bin as they are doing, it's also true that openSUSE does not
consider the directory.

summary: $HOME/.local/bin not part of PATH


--1635891525.aCf6ac0.9729
Date: Tue, 2 Nov 2021 22:18:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192277

            Bug ID: 1192277
           Summary: steam added support for dmabuf capturing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

```
Added support for DMABUF PipeWire capture on Linux (requires 32-bit libgbm.so.1
and can be enabled by launching Steam with -pipewire-dmabuf)```

from the steam beta changes.


body:
--1635937857.F4ceE00.21612
Date: Wed, 3 Nov 2021 11:10:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192292

            Bug ID: 1192292
           Summary: wine dlls contain mostly debug info
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: meissner-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I noticed that wine and wine-32bit were the biggest packages on my system, by
far (500.1 MiB and 473.8 MiB).

This appears to be because all of the .dlls contain full debug info still,
which is most of the total size.

~> rsync -aP --quiet /usr/lib64/wine/x86_64-windows/ /tmp/dlls-debug/
~> rsync -aP --quiet /usr/lib64/wine/x86_64-windows/ /tmp/dlls-stripped/
~> strip --strip-debug /tmp/dlls-stripped/*
~> strip --only-keep-debug /tmp/dlls-debug/*
~> du -sh /usr/lib64/wine/x86_64-windows/ /tmp/dlls-debug/ /tmp/dlls-stripped/
472M    /usr/lib64/wine/x86_64-windows/
327M    /tmp/dlls-debug/
145M    /tmp/dlls-stripped/

After stripping, the directory is only 31% as big.

FWICT, it still works fine after stripping debug info.

summary: wine dlls contain mostly debug info


--1635948282.1Da8c5E0.14075
Date: Wed, 3 Nov 2021 14:04:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192300

            Bug ID: 1192300
           Summary: qgis currently unbuildable (existing binaries still installable)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Factory/qgis is currently unresolvable:

conflict for providers of python38-sip6-devel = 6.4.0 needed by
python38-sip-devel, (provider python38-sip6-devel is in conflict with
python38-sip5-devel), (provider python38-sip6-devel is in conflict with
python38-sip5-devel)

added python38-sip5-devel@openSUSE:Factory/standard because of
(direct):python3-sip5-devel
added python38-sip-devel@openSUSE:Factory/standard because of
python38-qt5-devel:python38-sip-devel >= 6.4

python-qt5 moved to SIP6 with sr#928223


body:
--1635955716.3ACa60.17188
Date: Wed, 3 Nov 2021 16:08:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192310

            Bug ID: 1192310
           Summary: chrome general protection fault in libc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kl-at-httgmbh.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since some time (weeks/months?) when closing chromium browser I see general
protection faults in libc.

On openSUSE Leap 15.3 dmesg shows:

[ 3095.177712] show_signal: 55 callbacks suppressed
[ 3095.177717] traps: chrome[6342] general protection fault ip:7f6da946b517
sp:7fff85c3af20 error:0 in libc-2.31.so[7f6da9430000+1cb000]
[ 3097.129713] traps: chrome[6380] general protection fault ip:7f6da946b517
sp:7fff85c3af20 error:0 in libc-2.31.so[7f6da9430000+1cb000]

CPU (lscpu):
Architecture:                    x86_64
CPU op-mode(s):                  32-bit, 64-bit
Byte Order:                      Little Endian
Address sizes:                   48 bits physical, 48 bits virtual
CPU(s):                          8
On-line CPU(s) list:             0-7
Thread(s) per core:              2
Core(s) per socket:              4
Socket(s):                       1
NUMA node(s):                    1
Vendor ID:                       AuthenticAMD
CPU family:                      21
Model:                           2
Model name:                      AMD FX(tm)-8350 Eight-Core Processor
Stepping:                        0
Frequency boost:                 enabled
CPU MHz:                         1400.000
CPU max MHz:                     4000.0000
CPU min MHz:                     1400.0000
BogoMIPS:                        8037.84
Virtualization:                  AMD-V
L1d cache:                       64 KiB
L1i cache:                       256 KiB
L2 cache:                        8 MiB
L3 cache:                        8 MiB
NUMA node0 CPU(s):               0-7
Vulnerability Itlb multihit:     Not affected
Vulnerability L1tf:              Not affected
Vulnerability Mds:               Not affected
Vulnerability Meltdown:          Not affected
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled
via prctl and seccomp
Vulnerability Spectre v1:        Mitigation; usercopy/swapgs barriers and
__user pointer sanitization
Vulnerability Spectre v2:        Mitigation; Full AMD retpoline, IBPB
conditional, STIBP disabled, RSB filling
Vulnerability Srbds:             Not affected
Vulnerability Tsx async abort:   Not affected
Flags:                           fpu vme de pse tsc msr pae mce cx8 apic sep
mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext
fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nons
                                 top_tsc cpuid extd_apicid aperfmperf pni
pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c
lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse
                                  3dnowprefetch osvw ibs xop skinit wdt fma4
tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate ssbd ibpb
vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vm
                                 cb_clean flushbyasid decodeassists pausefilter
pfthreshold

The same happens on other machines as well and in openSUSE Leap 15.2:

dmesg:
[Nov 3 09:51] traps: chrome[10538] general protection fault ip:7fb143397af4
sp:7fffa6936bd0 error:0 in libc-2.26.so[7fb14335d000+1b1000]
[Nov 3 10:25] traps: chrome[115913] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[ +32,092832] traps: chrome[117578] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[  +2,958182] traps: chrome[117663] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[Nov 3 10:26] traps: chrome[115903] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[Nov 3 10:27] traps: chrome[121555] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[  +8,946133] traps: chrome[122014] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[  +2,563519] traps: chrome[122179] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[Nov 3 10:28] traps: chrome[121543] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[ +31,635640] traps: chrome[126916] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[ +22,005454] traps: chrome[128192] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[Nov 3 10:29] traps: chrome[128286] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]
[ +31,039070] traps: chrome[126900] general protection fault ip:7f94ee4d9af4
sp:7fff13858c00 error:0 in libc-2.26.so[7f94ee49f000+1b1000]

CPU:
Architecture:        x86_64
CPU op-mode(s):      32-bit, 64-bit
Byte Order:          Little Endian
Address sizes:       43 bits physical, 48 bits virtual
CPU(s):              128
On-line CPU(s) list: 0-127
Thread(s) per core:  2
Core(s) per socket:  32
Socket(s):           2
NUMA node(s):        8
Vendor ID:           AuthenticAMD
CPU family:          23
Model:               1
Model name:          AMD EPYC 7601 32-Core Processor
Stepping:            2
CPU MHz:             2656.409
BogoMIPS:            4391.45
Virtualization:      AMD-V
L1d cache:           32K
L1i cache:           64K
L2 cache:            512K
L3 cache:            8192K
NUMA node0 CPU(s):   0,8,16,24,32,40,48,56,64,72,80,88,96,104,112,120
NUMA node1 CPU(s):   2,10,18,26,34,42,50,58,66,74,82,90,98,106,114,122
NUMA node2 CPU(s):   4,12,20,28,36,44,52,60,68,76,84,92,100,108,116,124
NUMA node3 CPU(s):   6,14,22,30,38,46,54,62,70,78,86,94,102,110,118,126
NUMA node4 CPU(s):   1,9,17,25,33,41,49,57,65,73,81,89,97,105,113,121
NUMA node5 CPU(s):   3,11,19,27,35,43,51,59,67,75,83,91,99,107,115,123
NUMA node6 CPU(s):   5,13,21,29,37,45,53,61,69,77,85,93,101,109,117,125
NUMA node7 CPU(s):   7,15,23,31,39,47,55,63,71,79,87,95,103,111,119,127
Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb
rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid amd_dcm
aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes
xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a
misalignsse 3dnowprefetch osvw skinit wdt tce topoext perfctr_core perfctr_nb
bpext perfctr_llc mwaitx cpb hw_pstate sme ssbd sev ibpb vmmcall fsgsbase bmi1
avx2 smep bmi2 rdseed adx smap clflushopt sha_ni xsaveopt xsavec xgetbv1 xsaves
clzero irperf xsaveerptr arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean
flushbyasid decodeassists pausefilter pfthreshold avic v_vmsave_vmload vgif
overflow_recov succor smca

summary: chrome general protection fault in libc


--1635965233.2Bcea0.2940
Date: Wed, 3 Nov 2021 18:47:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192314

            Bug ID: 1192314
           Summary: config.postfix fails to set smtp_tls_security_level
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: varkoly-at-suse.com
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When the postfix SMTP client is to be configured for SASL authentication it
should have "smtp_tls_security_level = encrypt" in main.cf, but config.postfix
doesn't set that if /etc/sysconfig/postfix has POSTFIX_SMTP_TLS_CLIENT="yes".


--1636012195.bE8B370.29712
Date: Thu, 4 Nov 2021 07:49:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192323

            Bug ID: 1192323
           Summary: VUL-1: CVE-2021-27836: libxls: possible NULL pointer dereference via crafted XLS file in version 1.6.2 and prior
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/314151/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-27836

An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls
1.6.2, allows attackers to cause a denial of service, via a crafted XLS file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-27836
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27836
https://github.com/libxls/libxls/issues/94


--1636015846.DFdf0d180.7513
Date: Thu, 4 Nov 2021 08:50:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192328

            Bug ID: 1192328
           Summary: copy files form exFAT with --preserve=timestamps
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: wilms@pre-sense.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 853522
  --> http://bugzilla.opensuse.org/attachment.cgi?id=853522&action=edit
5M exFAT partition for reproducing the error

When mounting an exFAT partition in read-only mode:
mount -o ro /path/to/partition /mountpoint

and then trying to copy a file with:
cp --preserve=timestamps /path/to/file/on/exfat /path/to/target/file

then cp shows the following error:
cp: preserving times for '/path/to/target/file': Invalid argument

The file is copied but the timestamp is set to the current system time instead
of the correct timestamp.

This error occurs in a openSUSE Leap 15.3 Installation and also in the openSUSE
Leap 15.3 LiveCD version.

This error _does not_ occur when using Tumbleweed, which uses the native kernel
implementation of exFAT due to having a more recent kernel afaik.

Attached a qemu img with a 5M exFAT partition and a testfile easily reproduce
the error.


--1636215375.d6ac7CfE0.3344
Date: Sat, 6 Nov 2021 16:16:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192408

            Bug ID: 1192408
           Summary: VUL-0: cacti: multiple XSS fixes related to grave character "`"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

It was discovered that cacti before 1.2.19 was subject to XSS through
grave/backtick characters.

References:
https://www.cacti.net/info/changelog/1.2.19
https://github.com/cacti/cacti/issues/4356
https://github.com/Cacti/cacti/commit/9a45ef5b0d1b195db9d7cfd5ae60f0426460aa9a
bug 1188188


--1636263679.FCfAdcb0.9042
Date: Sun, 7 Nov 2021 05:41:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192413

            Bug ID: 1192413
           Summary: New sal.h macros break libstdc++ includes in wineg++
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: davejplater-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Lmms fails to build vst plugins against wine-6.20 due to:
https://bugs.winehq.org/show_bug.cgi?id=51919

The solution is to update to 6.21.
I've disabled lmms's vst build for now.


--1636266042.fe6c52DC0.11128
Date: Sun, 7 Nov 2021 06:20:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192414

            Bug ID: 1192414
           Summary: devel:languages:php/php7: php7-fpm doesn't come with initial config
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: pgajdos-at-suse.com
          Reporter: i-at-guoyunhe.me
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Most openSUSE's web server packages work out-of-box. For example, you can do

sudo zypper in apache2
sudo systemctl start apache2

But when it comes with php7-fpm, it will fail:

sudo zypper in php7-fpm
sudo systemctl start php7-fpm

This is because here is no /etc/php7/fpm/php-fpm.conf

I have to manually create it from the default config file:

cp php-fpm.conf.default php-fpm.conf

Hope that the initial config can be created when installing the package. So
users can save some time.


body:
--1636342042.076d0.4210
Date: Mon, 8 Nov 2021 03:27:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192432

            Bug ID: 1192432
           Summary: [trackerbug] lxd 4.20 update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540

  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases

summary: [trackerbug] lxd 4.20 update


--1636366616.b11A0.9188
Date: Mon, 8 Nov 2021 10:16:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192447

            Bug ID: 1192447
           Summary: VUL-0: TensorFlow: update to version 2.7.0, multiple CVEs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/314364/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Samba
          Assignee: wolfgang.engel-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: sbahling-at-suse.com
          Found By: Security Response Team
           Blocker: ---

extract from the 2.7.0 changelog [0]:

Fixes a code injection issue in saved_model_cli (CVE-2021-41228)
Fixes a vulnerability due to use of uninitialized value in Tensorflow
(CVE-2021-41225)
Fixes a heap OOB in FusedBatchNorm kernels (CVE-2021-41223)
Fixes an arbitrary memory read in ImmutableConst (CVE-2021-41227)
Fixes a heap OOB in SparseBinCount (CVE-2021-41226)
Fixes a heap OOB in SparseFillEmptyRows (CVE-2021-41224)
Fixes a segfault due to negative splits in SplitV (CVE-2021-41222)
Fixes segfaults and vulnerabilities caused by accesses to invalid memory during
shape inference in Cudnn* ops (CVE-2021-41221)
Fixes a null pointer exception when Exit node is not preceded by Enter op
(CVE-2021-41217)
Fixes an integer division by 0 in tf.raw_ops.AllToAll (CVE-2021-41218)
Fixes a use after free and a memory leak in CollectiveReduceV2 (CVE-2021-41220)
Fixes an undefined behavior via nullptr reference binding in sparse matrix
multiplication (CVE-2021-41219)
Fixes a heap buffer overflow in Transpose (CVE-2021-41216)
Prevents deadlocks arising from mutually recursive tf.function objects
(CVE-2021-41213)
Fixes a null pointer exception in DeserializeSparse (CVE-2021-41215)
Fixes an undefined behavior arising from reference binding to nullptr in
tf.ragged.cross (CVE-2021-41214)
Fixes a heap OOB read in tf.ragged.cross (CVE-2021-41212)
Fixes a heap OOB in shape inference for QuantizeV2 (CVE-2021-41211)
Fixes a heap OOB read in all tf.raw_ops.QuantizeAndDequantizeV* ops
(CVE-2021-41205)
Fixes an FPE in ParallelConcat (CVE-2021-41207)
Fixes FPE issues in convolutions with zero size filters (CVE-2021-41209)
Fixes a heap OOB read in tf.raw_ops.SparseCountSparseOutput (CVE-2021-41210)
Fixes vulnerabilities caused by incomplete validation in boosted trees code
(CVE-2021-41208)
Fixes vulnerabilities caused by incomplete validation of shapes in multiple TF
ops (CVE-2021-41206)
Fixes a segfault produced while copying constant resource tensor
(CVE-2021-41204)
Fixes a vulnerability caused by unitialized access in
EinsumHelper::ParseEquation (CVE-2021-41201)
Fixes several vulnerabilities and segfaults caused by missing validation during
checkpoint loading (CVE-2021-41203)
Fixes an overflow producing a crash in tf.range (CVE-2021-41202)
Fixes an overflow producing a crash in tf.image.resize when size is large
(CVE-2021-41199)
Fixes an overflow producing a crash in tf.tile when tiling tensor is large
(CVE-2021-41198)
Fixes a vulnerability produced due to incomplete validation in
tf.summary.create_file_writer (CVE-2021-41200)
Fixes multiple crashes due to overflow and CHECK-fail in ops with large tensor
shapes (CVE-2021-41197)
Fixes a crash in max_pool3d when size argument is 0 or negative
(CVE-2021-41196)
Fixes a crash in tf.math.segment_* operations (CVE-2021-41195)
Updates curl to 7.78.0 to handle CVE-2021-22922, CVE-2021-22923,
CVE-2021-22924, CVE-2021-22925, and CVE-2021-22926.

https://github.com/tensorflow/tensorflow/releases/tag/v2.7.0


--1636376744.aDDd0dA0.6320
Date: Mon, 8 Nov 2021 13:05:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192457

            Bug ID: 1192457
           Summary: ZSTD compressed kernel module files are 35% bigger
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# du -sh /lib/modules/*/kernel/
91M     /lib/modules/5.13.13-1-default/kernel/
92M     /lib/modules/5.14.14-1-default/kernel/
125M    /lib/modules/5.15.1-1.g0a42f4c-default/kernel/
# rpm -q --qf="%{NAME}-%{VERSION}: %{SIZE}\n" kernel-default
kernel-default-5.13.13: 170499562
kernel-default-5.14.14: 171909997
kernel-default-5.15.1: 207900779


--1636539971.a47FcA1.8043
Date: Wed, 10 Nov 2021 10:26:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192542

            Bug ID: 1192542
           Summary: AUDIT-0: gnome-initial-setup: changes in 20-gnome-initial-setup.rules
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dimstar-at-opensuse.org, qzhao-at-suse.com,
                    security-team-at-suse.de
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1125432

gnome-initial-setup in Factory "slipped in" a changed polkit rule file during
the migration from rpmlint1 to rpmlint2. The upstream changes are as follows:

```
@@ -15,7 +15,8 @@
                          action.id.indexOf('org.freedesktop.accounts.') === 0
||
                          action.id.indexOf('org.freedesktop.timedate1.') === 0
||
                          action.id.indexOf('org.freedesktop.realmd.') === 0 ||
-                         action.id.indexOf('com.endlessm.ParentalControls.')
=== 0);
+                         action.id.indexOf('com.endlessm.ParentalControls.')
=== 0 ||
+                         action.id.indexOf('org.fedoraproject.thirdparty.')
=== 0);

     if (actionMatches) {
         if (subject.local)
```

This gnome-initial-setup mode is a pretty shaky security concept anyway and
once anybody manages to trigger this mode there is little preventing them from
gainin local root.

Therefore I will simply whitelist this change without much further
investigation. This bug here serves mostly as documentation of the proces.


--1636551483.5bf42c10.4054
Date: Wed, 10 Nov 2021 13:38:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192549

            Bug ID: 1192549
           Summary: Kernel 5.3.18-lp152.98-default breaks getdents(2) system call on NFS shares
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

that is in the home directory of my own as well as of other users (beside
/suse/present and /suse/bin) the simply command

  ls

returns exactly nothing ... and strace show that the system call getdents(2)
returns zero entries.

Interesting I can e.g. change into ~/.fvwm/ or ~/.config/ or ~/.mozilla/ and
list all therein ... only the topper up directory node remains empty


--1636713154.0BD51.23456
Date: Fri, 12 Nov 2021 10:32:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192619

            Bug ID: 1192619
           Summary: Kubicctl doesn't work work transactional_update executor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: adathor-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 853710
  --> http://bugzilla.opensuse.org/attachment.cgi?id=853710&action=edit
kubicctl_error

Hi,

I've installed a small Kubic cluster with 1 control-plane and 2 worker nodes
(4vCPU, 4GB ram in libvirt) and when I try to add the nodes with `kubicctl` it
simply fails to do so with the attached kubicctl_error.log message.
I took the kubeadm that salt cmd from the master tries to execute on the
worker, ran it on the minion manually and immediately was added:

```
kubeadm join 172.168.150.25:6443 --token deu47v.pad0gfatrn2g6sfh
--discovery-token-ca-cert-hash
sha256:1715bf3bb55d24abbba682b4cdc0482c9c77bf1003c8fa2a305fcc48c0fbd4ca
```

Some further investigation revealed that if the `transactional_update` executor
module is disabled in salt-minion on the worker, kubicctl is able to add the
nodes. I also tried to run the `kubeadm join cmd` on the worker in `t-u shell`
I get the same error what `kubicctl` was throwing at first
(kubicctl_error.log).

(Tested on 2 separate system libvirt and ESXI. Also had this issue running on
the Kubic mailing list:
https://lists.opensuse.org/archives/list/kubic-at-lists.opensuse.org/thread/GU64VCMVXTXRXHPNEHVTKSC6RAH2URCV/)

Let me know if you need additional information/testing from my side!

Br,
A.


--1636723347.48Fe0.7481
Date: Fri, 12 Nov 2021 13:22:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192629

            Bug ID: 1192629
           Summary: LLVM FileCheck is not packaged, needed to test Rust (regression)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aplanas-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Seems that we drop again /usr/bin/FileCheck from LLVM package, needed during
the test of Rust.

This was fixed in boo#1006199, but seems that is missing again.


body:
--1636727348.7ee1dD0.15795
Date: Fri, 12 Nov 2021 14:29:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192631

            Bug ID: 1192631
           Summary: command 'view' return nothing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ydfan-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Command 'view' just returned nothing when I tried to view a file, the strace of
'view' alone shows below:

strace view

execve("/usr/bin/view", ["view"], 0x7fffc7ef7c80 /* 35 vars */) = 0
brk(NULL)                               = 0x565073c3b000
arch_prctl(0x3001 /* ARCH_??? */, 0x7ffdd8efa8c0) = -1 EINVAL (Invalid
argument)
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=76783, ...}, AT_EMPTY_PATH) =
0
mmap(NULL, 76783, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f329ad22000
close(3)                                = 0
openat(AT_FDCWD, "/lib64/libalternatives.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\"\0\0\0\0\0\0"...,
832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=27104, ...}, AT_EMPTY_PATH) =
0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f329ad20000
mmap(NULL, 29040, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f329ad18000
mmap(0x7f329ad1a000, 12288, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f329ad1a000
mmap(0x7f329ad1d000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3,
0x5000) = 0x7f329ad1d000
mmap(0x7f329ad1e000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f329ad1e000
close(3)                                = 0
openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3,
"\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\327\2\0\0\0\0\0"..., 832) =
832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"...,
784, 64) = 784
pread64(3, "\4\0\0\0@\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0"...,
80, 848) = 80
pread64(3,
"\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\313\32:\261.\307\233\220\242#\3705\243\24NL"...,
68, 928) = 68
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=2398048, ...}, AT_EMPTY_PATH)
= 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"...,
784, 64) = 784
mmap(NULL, 2136816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f329ab0e000
mprotect(0x7f329ab3a000, 1880064, PROT_NONE) = 0
mmap(0x7f329ab3a000, 1531904, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f329ab3a000
mmap(0x7f329acb0000, 344064, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3,
0x1a2000) = 0x7f329acb0000
mmap(0x7f329ad05000, 24576, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1f6000) = 0x7f329ad05000
mmap(0x7f329ad0b000, 51952, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f329ad0b000
close(3)                                = 0
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f329ab0b000
arch_prctl(ARCH_SET_FS, 0x7f329ab0b740) = 0
set_tid_address(0x7f329ab0ba10)         = 5752
set_robust_list(0x7f329ab0ba20, 24)     = 0
mprotect(0x7f329ad05000, 12288, PROT_READ) = 0
mprotect(0x7f329ad1e000, 4096, PROT_READ) = 0
mprotect(0x565073133000, 4096, PROT_READ) = 0
mprotect(0x7f329ad65000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024,
rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7f329ad22000, 76783)           = 0
getrandom("\x96\xd7\xa8\x13\x0a\x14\xfd\xdd", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x565073c3b000
brk(0x565073c5c000)                     = 0x565073c5c000
openat(AT_FDCWD, "/home/ydfan/.config/libalternatives.conf",
O_RDONLY|O_NOFOLLOW) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/libalternatives.conf", O_RDONLY|O_NOFOLLOW) = -1 ENOENT
(No such file or directory)
openat(AT_FDCWD, "/usr/share/libalternatives", O_RDONLY|O_DIRECTORY) = 3
openat(3, "view", O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory)
close(3)                                = 0
exit_group(-1)                          = ?
+++ exited with 255 +++

summary: command 'view' return nothing


--1636802226.175AE1D0.5609
Date: Sat, 13 Nov 2021 11:17:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192658

            Bug ID: 1192658
           Summary: VUL-1: CVE-2021-22929: tor: v2 onion service metadata leak on disk (TROVE-2021-008)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: bwiedemann-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: Product Management
           Blocker: ---

tor from 0.4.5.8 before 0.4.6.8 would log v2 onion services access attempt
warnings on disk excessively, allowing time-correlation.

  o Minor bugfixes (onion service, TROVE-2021-008):
    - Only log v2 access attempts once total, in order to not pollute
      the logs with warnings and to avoid recording the times on disk
      when v2 access was attempted. Note that the onion address was
      _never_ logged. This counts as a Low-severity security issue.
      Fixes bug 40474; bugfix on 0.4.5.8.

References:
https://gitlab.torproject.org/tpo/core/tor/-/issues/40474
https://gitlab.torproject.org/tpo/core/tor/-/commit/602dcd8e3774b09242787ba3b0f0e0599530638a


--1636825400.567A0.30510
Date: Sat, 13 Nov 2021 17:43:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192662

            Bug ID: 1192662
           Summary: Wrong path in texlive-synctex pkgconfig file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aloisio-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Install texlive-synctex-devel on a x86_64 system.
  > pkg-config --libs synctex
  -L/usr/lib -lsynctex

instead of /usr/lib64.


--1636895314.0a7Ae0.1115
Date: Sun, 14 Nov 2021 13:08:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192672

            Bug ID: 1192672
           Summary: devel:languages:php/php8: Bug /etc/php8/fpm/php.ini is not created
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: pgajdos-at-suse.com
          Reporter: i-at-guoyunhe.me
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After installing php8-fpm, I have to manually create /etc/php8/fpm/php.ini. But
it should have been created by php8-fpm package itself.


--1636987182.5A320840.15450
Date: Mon, 15 Nov 2021 14:39:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192709

            Bug ID: 1192709
           Summary: VUL-0: pgaudit: security hardening in latest releases
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Most active versions (1.0.x .. 1.6.x) saw security fixes [0], including:

> Bug Fixes:
>   Guard against search-path based attacks.
>   Add security definer and search_path to event trigger functions.

[0] https://github.com/pgaudit/pgaudit/releases


--1636988763.3a4aaCE0.22239
Date: Mon, 15 Nov 2021 15:06:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192712

            Bug ID: 1192712
           Summary: VUL-1: CVE-2021-41259: nim: null byte accpected in getContent function, leading to URI validation bypass
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/314897/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: adrian.glaubitz-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-41259

Nim is a systems programming language with a focus on efficiency,
expressiveness, and elegance. In affected versions the uri.parseUri function
which may be used to validate URIs accepts null bytes in the input URI. This
behavior could be used to bypass URI validation. For example:
parseUri("http://localhost\0hello").hostname is set to "localhost\0hello".
Additionally, httpclient.getContent accepts null bytes in the input URL and
ignores any data after the first null byte. Example:
getContent("http://localhost\0hello") makes a request to localhost:80. An
attacker can use a null bytes to bypass the check and mount a SSRF attack.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-41259
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41259
https://github.com/nim-lang/security/security/advisories/GHSA-3gg2-rw3q-qwgc


--1637046400.c2500.26537
Date: Tue, 16 Nov 2021 07:06:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192734

            Bug ID: 1192734
           Summary: VUL-0: chromium: multiple security issues fixed in 96.0.4664.45
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: Corporate Interoperability Test
           Blocker: ---

From
https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html

CVE-2021-38007: Type Confusion in V8
CVE-2021-38008: Use after free in media
CVE-2021-38009: Inappropriate implementation in cache
CVE-2021-38006: Use after free in storage foundation
CVE-2021-38005: Use after free in loader
CVE-2021-38010: Inappropriate implementation in service workers
CVE-2021-38011: Use after free in storage foundation
CVE-2021-38012: Type Confusion in V8
CVE-2021-38013: Heap buffer overflow in fingerprint recognition
CVE-2021-38014: Out of bounds write in Swiftshader
CVE-2021-38015: Inappropriate implementation in input
CVE-2021-38016: Insufficient policy enforcement in background fetch
CVE-2021-38017: Insufficient policy enforcement in iframe sandbox
CVE-2021-38018: Inappropriate implementation in navigation
CVE-2021-38019: Insufficient policy enforcement in CORS
CVE-2021-38020: Insufficient policy enforcement in contacts picker
CVE-2021-38021: Inappropriate implementation in referrer
CVE-2021-38022: Inappropriate implementation in WebAuthentication


--1637057246.F4A3fFc70.16961
Date: Tue, 16 Nov 2021 10:07:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192740

            Bug ID: 1192740
           Summary: Upgrade of broadcom-wl fails with "line 1: /usr/lib/module-init-tools/kernel-scriptlets/kmp-pre: No such file or directory"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: okurz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation
A `zypper dup` fails on openSUSE Leap 15.3 upgraded from openSUSE Leap 15.2
with

```
"line 1: /usr/lib/module-init-tools/kernel-scriptlets/kmp-pre: No such file or
directory"
```


--1637070428.e7B2aD7b0.21587
Date: Tue, 16 Nov 2021 13:47:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192751

            Bug ID: 1192751
           Summary: Regression: suse-prime's nvidia mode broken since xorg-server 21.1.x
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: sndirsch-at-suse.com
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Apparently suse-prime's "nvidia" mode broke with the update to xorg-server
21.1.x. The screen remains black. Even when just running

  X -retro

My current guess is, that it's related to this change:

- disabled n_xserver-optimus-autoconfig-hack.patch, which I believe is
  superseded by:
  commit 078277e4d92f05a90c4715d61b89b9d9d38d68ea
  Author: Dave Airlie <airlied-at-redhat.com>
  Date:   Fri Aug 17 09:49:24 2012 +1000

    xf86: autobind GPUs to the screen

Mabye I can revert the upstream change and use again our version/patch.

At least the "offload" mode still works.


body:
--1637224643.aD880.10253
Date: Thu, 18 Nov 2021 08:37:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1192814

            Bug ID: 1192814
           Summary: [trackerbug] docker 20.10.11-ce update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to Docker 20.10.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch

pkgs: containerd docker

summary: [trackerbug] docker 20.10.11-ce update


body:
--1637231797.FF8a6.28421
Date: Thu, 18 Nov 2021 10:36:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192824

            Bug ID: 1192824
           Summary: nodejs14 fails in test on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, amajer-at-suse.com, dmueller-at-suse.com
          Found By: ---
           Blocker: ---

nodejs14 fails in test on aarch64 since update from 14.17.5 to 14.18.1 [0]

Log:
[12696s] [ RUN      ] DebugSymbolsTest.ReqWrapList
[12696s] ../test/cctest/test_node_postmortem_metadata.cc:203: Failure
[12696s] Expected equality of these values:
[12696s]   expected
[12696s]     Which is: 281474207377512
[12696s]   calculated
[12696s]     Which is: 187651208014912
[12696s] [  FAILED  ] DebugSymbolsTest.ReqWrapList (193 ms)

It is similar to nodejs12 issue reported upstream in the past:
https://github.com/nodejs/node/issues/33899

[0]:
https://build.opensuse.org/package/rdiff/devel:languages:nodejs/nodejs14?orev=2d418f7c79e4c11bdb98b03af201b142&rev=d8d77f9a3335708cf62b917bbd079424

summary: nodejs14 fails in test on aarch64


--1637270228.f1a6A20.22122
Date: Thu, 18 Nov 2021 21:17:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192852

            Bug ID: 1192852
           Summary: Missing dependencies for /usr/bin/libwacom-show-stylus
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: dmueller-at-suse.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: gmbr3-at-opensuse.org
          Found By: ---
           Blocker: ---

Error: No module named 'libevdev'
One or more python modules are missing. Please install those modules and re-run
this tool.

Either we should drop the script or see if we want to provide the missing
python modules.


--1637315915.E62eA0.22337
Date: Fri, 19 Nov 2021 09:58:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192871

            Bug ID: 1192871
           Summary: vim does not work with only vim-data-common: "Cannot allocate color..." errors
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mimi.vx-at-gmail.com
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

vim is meant to work without noticable errors with only vim and vim-data-common
installed

However this currently fails, as certain default colours are
missing/misconfigured

Anyone with only vim and vim-data-common installed gets the following errors
when loading vim

Error detected while processing
/usr/share/vim/vim82/suse.vimrc[10]../usr/share/vim/vim82/syntax/syntax.vim[19]../usr/share/vim/vim82/syntax/synload.vim[21]../usr/share/vim/vim82/syntax/syncolor.vim:
line   53:
E254: Cannot allocate color SlateBlue
failed to load colors/lists/default.vim
E254: Cannot allocate color SlateBlue
Press ENTER or type command to continue

Error does not exist when vim-data is installed

So looks like vim-data-common needs to be corrected to include what it expects
from vim-data


--1637427112.Afdaa0.2651
Date: Sat, 20 Nov 2021 16:51:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192918

            Bug ID: 1192918
           Summary: Faulty Elantech Trackpoint firmware unusable as it causes sudden cursor jump to an edge/corner on Lenovo Thinkpad X13, T14s, A475
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: felix-at-giessmann.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hey there. Due to this being my first bug report, I am just copying the already
well-written summary from Ubuntu Launchpad and explain why I would request this
patch to be backported to the current Kernel of TW.

On Lenovo Thinkpad T14s, X13, A475 (and probably more models) the Elantech
Trackpoint firmware is defective. The trackpoint cursor often suddenly jumps to
an edge/corner, because the hardware/firmware sometimes reports wrong
coordinates / loses sync. Currently, the Trackpoint is barely usable and it's
impossible to productively work using it.

For a long while, Elantech has not yet put forward (nor confirmed) a firmware
update. However, there is a Linux kernel patch mitigating the firmware bug. The
kernel bugfix discards the wrongly reported packages by the Elantech hardware.
This solves the problem for the user.

The issue has been reported here at Kernel.org [1] and at Ubuntu Launchpad [2]
and a patch has been proposed; however, it will take many months until it ends
up in Tumbleweed with 5.16 or 5.17.

Would it be possible to attach the bugfix mentioned here [3]?

[1] https://bugzilla.kernel.org/show_bug.cgi?id=209167
[2] https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1936295
[3]
https://git.kernel.org/pub/scm/linux/kernel/git/dtor/input.git/commit/?id=be896bd3b72b44126c55768f14c22a8729b0992e


--1637573626.1dac624.31501
Date: Mon, 22 Nov 2021 09:33:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192935

            Bug ID: 1192935
           Summary: ICU package fails in /tsutil/ucptrietest/TrieTestSet1 test for aarch64, armv6/7, ppc64le, riscv64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    gmbr3-at-opensuse.org, jengelh-at-inai.de
          Found By: ---
           Blocker: ---

ICU package fails in /tsutil/ucptrietest/TrieTestSet1 test for non-x86
architectures: aarch64, armv6/7, ppc64le, riscv64, since the update from 69.1
to 70.1:
https://build.opensuse.org/request/show/930522

Error log:
[  336s]    ucptrietest  {
[  336s]     TrieTestSet1   {
[  336s] !!    Golden files for 'set1.16' differ at index 8461; run cintltst
with -G to write new goldens!    Golden files for 'set1.32' differ at index
8461; run cintltst with -G to write new goldens!    Golden files for 'set1.8'
differ at index 8458; run cintltst with -G to write new goldens!    Golden
files for 'set1.small16' differ at index 4053; run cintltst with -G to write
new goldens
[  336s]     } ---[1 ERRORS in /tsutil/ucptrietest/TrieTestSet1]  (198ms)

<snip>

[  349s] SUMMARY:
[  349s] ******* [Total error count:    1]
[  349s]  Errors in
[  349s] [/tsutil/ucptrietest/TrieTestSet1]
[  349s] Elapsed Time: 00:00:14.186
[  349s] make[2]: *** [Makefile:98: check-local] Error 1
[  349s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/icu/source/test/cintltst'
[  349s] -------------
[  349s] | ***     FAILING TEST SUMMARY FOR:              cintltst
[  349s] /tsutil/ucptrietest/TrieTestSet1
[  349s] | *** END FAILING TEST SUMMARY FOR:              cintltst
[  349s] ---------------
[  349s] ALL TESTS SUMMARY:
[  349s] ok:  testdata intltest iotest
[  349s] ===== ERRS:  cintltst


body:
--1637591351.BDe3adD0.17121
Date: Mon, 22 Nov 2021 14:29:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192951

            Bug ID: 1192951
           Summary: Crash in libgccjit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: rguenther-at-suse.com
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
                CC: martin.liska-at-suse.com
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/home:AndreasSchwab:emacs:master/emacs/f/x86_64

[ 1556s] Backtrace:
[ 1556s] ../src/emacs(+0x16114d)[0x5605e48d514d]
[ 1556s] ../src/emacs(+0x4f029)[0x5605e47c3029]
[ 1556s] ../src/emacs(+0x4f5d1)[0x5605e47c35d1]
[ 1556s] ../src/emacs(+0x273b2d)[0x5605e49e7b2d]
[ 1556s] /lib64/libc.so.6(+0x427a0)[0x7fe3297447a0]
[ 1556s] /lib64/libgccjit.so.0(+0x1025231)[0x7fe32a931231]
[ 1556s] /lib64/libgccjit.so.0(+0x102a809)[0x7fe32a936809]
[ 1556s] /lib64/libgccjit.so.0(+0x104b69f)[0x7fe32a95769f]
[ 1556s] /lib64/libgccjit.so.0(+0xedca92)[0x7fe32a7e8a92]
[ 1556s] /lib64/libgccjit.so.0(+0x106d1f2)[0x7fe32a9791f2]
[ 1556s]
/lib64/libgccjit.so.0(gcc_jit_context_compile_to_file+0x355)[0x7fe32a954cd5]
[ 1556s] ../src/emacs(+0x21947e)[0x5605e498d47e]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d636f6d70696c652d637478742d746f2d66696c65_comp_compile_ctxt_to_file_0+0x1aa)[0x7fe3246fccda]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d66696e616c31_comp_final1_0+0xc5)[0x7fe3246fcec5]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d66696e616c_comp_final_0+0xdc)[0x7fe3246fd11c]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d2d6e61746976652d636f6d70696c65_comp__native_compile_0+0x72a)[0x7fe324700e1a]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d7472616d706f6c696e652d636f6d70696c65_comp_trampoline_compile_0+0x5cd)[0x7fe3246fe55d]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/comp-7672a6ed-a040a5e7.eln(F636f6d702d737562722d7472616d706f6c696e652d696e7374616c6c_comp_subr_trampoline_install_0+0x16a)[0x7fe3246aaa0a]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/src/../native-lisp/29.0.50-b6cc1f2a/preloaded/nadvice-64630aaa-4c5c4a90.eln(F6164766963652d2d6164642d66756e6374696f6e_advice__add_function_0+0x14f)[0x7fe32518d55f]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/src/../native-lisp/29.0.50-b6cc1f2a/preloaded/nadvice-64630aaa-4c5c4a90.eln(F6164766963652d616464_advice_add_0+0x1b0)[0x7fe32518eba0]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s] ../src/emacs(+0x211376)[0x5605e4985376]
[ 1556s] ../src/emacs(+0x1ccf48)[0x5605e4940f48]
[ 1556s] ../src/emacs(+0x1ce2bb)[0x5605e49422bb]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/transient-376febf1-23039d56.eln(top_level_run+0x3dea)[0x7fe32448945a]
[ 1556s] ../src/emacs(+0x219d11)[0x5605e498dd11]
[ 1556s] ../src/emacs(+0x21a1f0)[0x5605e498e1f0]
[ 1556s] ../src/emacs(+0x1f7e30)[0x5605e496be30]
[ 1556s] ../src/emacs(+0x27615a)[0x5605e49ea15a]
[ 1556s] ../src/emacs(+0x1e3f7b)[0x5605e4957f7b]
[ 1556s] ../src/emacs(+0x1cbb88)[0x5605e493fb88]
[ 1556s] ../src/emacs(+0x1cc393)[0x5605e4940393]
[ 1556s]
/home/abuild/rpmbuild/BUILD/emacs-29.0.50/native-lisp/29.0.50-b6cc1f2a/bytecomp-12882072-abb2ff90.eln(F627974652d636f6d70696c652d66696c652d666f726d2d72657175697265_byte_compile_file_form_require_0+0x6e)[0x7fe32464991e]

summary: Crash in libgccjit


--1637602325.18DF0.16378
Date: Mon, 22 Nov 2021 17:32:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1192959

            Bug ID: 1192959
           Summary: [Build 20211121] hostapd.service fails to start
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2051147/modules/hwsi
                    m_wpa2_enterprise_setup/steps/42
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_gnome@64bit
fails in
[hwsim_wpa2_enterprise_setup](https://openqa.opensuse.org/tests/2051147/modules/hwsim_wpa2_enterprise_setup/steps/42)

Another 'service too much hardened': hostapd.service no longer starts after
https://build.opensuse.org/request/show/932776

## Test suite description
Maintainer: QE Core, asmorodskyi. Extra tests which were designed to run on
gnome

## Reproducible

Fails since (at least) Build
[20210727](https://openqa.opensuse.org/tests/1860309)

## Expected result

Last good: [20210727](https://openqa.opensuse.org/tests/1860308) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=extra_tests_gnome&version=Tumbleweed)


--1637683135.dbD60.15380
Date: Tue, 23 Nov 2021 15:58:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193005

            Bug ID: 1193005
           Summary: VUL-1: CVE-2021-41281: synapse: Path traversal when downloading remote media
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/315558/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-41281

https://github.com/matrix-org/synapse/releases/tag/v1.47.1

https://github.com/matrix-org/synapse/security/advisories/GHSA-3hfw-x7gx-437c

Impact

Synapse instances with the media repository enabled can be tricked into
downloading a file from a remote server into an arbitrary directory,
potentially outside the media store directory.

The last two directories and file name of the path are chosen randomly by
Synapse and cannot be controlled by an attacker, which limits the impact.

Homeservers with the media repository disabled are unaffected. Homeservers
configured with a federation whitelist are also unaffected.
Patches

Server administrators should upgrade to 1.47.1 or later.
Workarounds

Server administrators using a reverse proxy could, at the expense of losing
media functionality, block the following endpoints:

    /_matrix/media/r0/download/{serverName}/{mediaId}
    /_matrix/media/r0/download/{serverName}/{mediaId}/{fileName}
    /_matrix/media/r0/thumbnail/{serverName}/{mediaId}

Alternatively, non-containerized deployments can be adapted to use the hardened
systemd config, located at contrib/systemd/override-hardened.conf.
References

n/a
For more information

If you have any questions or comments about this advisory, e-mail us at
security-at-matrix.org.


--1637773932.76ad0.31794
Date: Wed, 24 Nov 2021 17:12:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193059

            Bug ID: 1193059
           Summary: suse-module-tools: split modprobe.conf defaults into multiple files
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We have moved all default modprobe.conf settings to /usr/lib/modprobe.d now.
This makes it easier for users to override distro defaults by copying .conf
files to /etc/modprobe.d and editing them.

This is still suboptimal though, because we collect all settings in two big
files, 00-system.conf and 50-blacklist.conf. A user who wants to override a
single setting has to override the entire file, meaning that she won't see
future updates.

It would be much better and much more to the modprobe.d spirit to split the
modprobe.conf files into multiple small files, each for just one module or for
a small collection of closely related modules. This way, users could easily
override the settings for just one module. It's intended that users should be
able to to this, as we are shipping quite a few modules that are blacklisted by
default and would be utterly useless if un-blacklisting them wouldn't be
accepted practice.

With this change, a default modprobe.d directory would look like this:

# ls -l /usr/lib/modprobe.d/
total 204
-rw-r--r


--1637834798.DDae0.16281
Date: Thu, 25 Nov 2021 10:06:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193076

            Bug ID: 1193076
           Summary: virtme: running on aarch64 native does not work
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: mbrugger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running natively we should use the hosts GIC and cpu, for now we run with
a cortex-a57 emulation.