body:
--1601273788.0645A30.11073
Date: Mon, 28 Sep 2020 06:16:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177022

            Bug ID: 1177022
           Summary: VUL-0: tensorflow: Release 2.3.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: cgoll-at-suse.com
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1

Release 2.3.1
Bug Fixes and Other Changes

> Fixes an undefined behavior causing a segfault in tf.raw_ops.Switch (CVE-2020-15190)
> Fixes three vulnerabilities in conversion to DLPack format (CVE-2020-15191, CVE-2020-15192, CVE-2020-15193)
> Fixes two vulnerabilities in SparseFillEmptyRowsGrad (CVE-2020-15194, CVE-2020-15195)
> Fixes several vulnerabilities in RaggedCountSparseOutput and SparseCountSparseOutput operations
>    (CVE-2020-15196, CVE-2020-15197, CVE-2020-15198, CVE-2020-15199, CVE-2020-15200, CVE-2020-15201)
> Fixes an integer truncation vulnerability in code using the work sharder API (CVE-2020-15202)
> Fixes a format string vulnerability in tf.strings.as_string (CVE-2020-15203)
> Fixes segfault raised by calling session-only ops in eager mode (CVE-2020-15204)
> Fixes data leak and potential ASLR violation from tf.raw_ops.StringNGrams (CVE-2020-15205)
> Fixes segfaults caused by incomplete SavedModel validation (CVE-2020-15206)
> Fixes a data corruption due to a bug in negative indexing support in TFLite (CVE-2020-15207)
> Fixes a data corruption due to dimension mismatch in TFLite (CVE-2020-15208)
> Fixes several vulnerabilities in TFLite saved model format (CVE-2020-15209, CVE-2020-15210, CVE-2020-15211)
> Fixes several vulnerabilities in TFLite implementation of segment sum
>    (CVE-2020-15212, CVE-2020-15213, CVE-2020-15214)
> Updates sqlite3 to 3.33.00 to handle CVE-2020-15358.
> Fixes deprecated usage of collections API
> Removes scipy dependency from setup.py since TensorFlow does not need it to install the pip package

summary: VUL-0: tensorflow: Release 2.3.1


body:
--1601293973.A4fE1aD0.5203
Date: Mon, 28 Sep 2020 11:52:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177039

            Bug ID: 1177039
           Summary: [Build 20200927] sshd: service being disabled on upgrade from openssh to openssh-server
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1411113/modules/zdup
                    /steps/16
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-zdup_twjeos2twnext@64bit_virtio
fails in
[zdup](https://openqa.opensuse.org/tests/1411113/modules/zdup/steps/16)

openQA identified a critical issue when upgrading from openssh (single-package)
to the split-package including openssh-server.

The systemd preset for sshd is 'not defined' (aka disabled); during
installation, YaST enables/disabled the service (based on installer preference)

During upgrade from openssh to openssh, this is no problem (the sshd service is
not new, so no preset handling is done)

Now, openssh-server is a new package being installed, which means this part of
the post scriptlet is becoming important: %service_add_post sshd

Expoanded to:

>if [ $1 -eq 1 ]; then
>	if [ -x /usr/bin/systemctl ]; then
>		/usr/bin/systemctl preset sshd || :
>	fi
>… (other part not relevant for this bug)

so, as openssh-server is new, the sshd service is being reset to the distro
preset (i.e. disabled) which is unacceptable on system upgrades

## Test suite description
Boot from the latest published JeOS image (override HDD_1_URL in the job group
for other arches) and zypper dup to snapshot under test. Make sure to use
%BUILD% in the URL and file name to force a redownload for new builds.

## Reproducible

Fails since (at least) Build
[20200925](https://openqa.opensuse.org/tests/1408165)

## Expected result

Last good: [20200924](https://openqa.opensuse.org/tests/1405891) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=JeOS-for-kvm-and-xen&machine=64bit_virtio&test=zdup_twjeos2twnext&version=Tumbleweed)

pkgs: openssh systemd-rpm-macros


--1601378364.c6E618015.3075
Date: Tue, 29 Sep 2020 11:19:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177087

            Bug ID: 1177087
           Summary: webkit2gtk3 fails to build on aarch64 since update to 2.30.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com, mgorse-at-suse.com
          Found By: ---
           Blocker: ---

webkit2gtk3 fails to build on aarch64 since the update to 2.30.0

Latest build log:
https://build.opensuse.org/package/live_build_log/GNOME:Factory/webkit2gtk3/openSUSE_ARM/aarch64

Also reported upstream:
https://bugs.webkit.org/show_bug.cgi?id=217079


body:
--1601462789.1e5aa23E0.5376
Date: Wed, 30 Sep 2020 10:46:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177127

            Bug ID: 1177127
           Summary: python3-protobuf missing dependency six
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rpm-at-fthiessen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

python3-protobuf is missing the python3-six package as dependency.
When using protobuf I get this error message:

    File "/usr/lib/python3.6/site-packages/google/protobuf/text_format.py",
line 48, in <module>
         import six
         ModuleNotFoundError: No module named 'six'

summary: python3-protobuf missing dependency six


--1601481321.abBbDD1.1275
Date: Wed, 30 Sep 2020 15:55:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177149

            Bug ID: 1177149
           Summary: transactional-update-etc-cleaner.service uses obsolete output
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Sep 30 15:48:40 localhost systemd[1]:
/usr/lib/systemd/system/transactional-update-etc-cleaner.service:14: Standard
output type syslog is obsolete, automatically updating to journal. Please
update your unit fil
e, and consider removing the setting altogether.
Sep 30 15:48:40 localhost systemd[1]:
/usr/lib/systemd/system/transactional-update-etc-cleaner.service:15: Standard
output type syslog+console is obsolete, automatically updating to
journal+console. Please upda
te your unit file, and consider removing the setting altogether.


body:
--1601483322.F2cFbA2.2118
Date: Wed, 30 Sep 2020 16:28:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177153

            Bug ID: 1177153
           Summary: Yast2 gpmc won't launch
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: jrivrain-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 842127
  --> https://bugzilla.suse.com/attachment.cgi?id=842127&action=edit
y2log

The module does not start:

# yast2 gpmc
Traceback (most recent call last):
  File "/usr/share/YaST2/clients/gpmc.py", line 13, in <module>
    from wizards import GPMCSequence
  File "/usr/share/YaST2/include/gpmc/wizards.py", line 2, in <module>
    from dialogs import GPMC, GPME
  File "/usr/share/YaST2/include/gpmc/dialogs.py", line 3, in <module>
    from complex import GPConnection, GPOConnection, dn_to_path, parse_gplink,
strcmp, strcasecmp
  File "/usr/share/YaST2/include/gpmc/complex.py", line 3, in <module>
    from samba import smb
ImportError: cannot import name 'smb'

summary: Yast2 gpmc won't launch


--1601535589.E14da815.14963
Date: Thu, 1 Oct 2020 06:59:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177168

            Bug ID: 1177168
           Summary: gnome-sound-recorder startup fails with JS exception
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Oct 01 08:53:04 artemis.mittagstun.de systemd[2641]: Started Application
launched by gnome-shell.
Oct 01 08:53:04 artemis.mittagstun.de gnome-sound-rec[6929]: JS ERROR:
SyntaxError: missing ) after catch @
resource:///org/gnome/SoundRecorder/js/listview.js:120
Oct 01 08:53:04 artemis.mittagstun.de org.gnome.SoundRecorder.desktop[4563]:
Script /usr/bin/gnome-sound-recorder threw an exception


--1601554115.eEfCCD40.9623
Date: Thu, 1 Oct 2020 12:08:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177190

            Bug ID: 1177190
           Summary: hashcat: Error `/usr/share/hashcat/OpenCL/inc_rp_optimized.h: No such file or directory`
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

System Information

OS: openSUSE Tumbleweed - Snapshot: 20200928
Hashcat Version: v6.1.1
Hardware (as reported by lspci):

    Advanced Micro Devices, Inc. [AMD/ATI] Baffin [Radeon Pro WX 4130/4150]

    Intel Corporation UHD Graphics 630 (Mobile)

Linux Kernel Version: 5.8.10-1-default

I'm getting the aforementioned error when I'm trying to run hashcat -b. It may
be worth noting that the file inc_rp_optimized.cl exists in that directory,
just not inc_rp_optimized.h.

from:
https://github.com/hashcat/hashcat/issues/2562


--1601559843.AAfdDd10.26365
Date: Thu, 1 Oct 2020 13:44:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177197

            Bug ID: 1177197
           Summary: sddm: Move of /etc/X11/xdm/Xstartup and /etc/X11/xdm/Xreset
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: sndirsch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Xstartup and Xreset have moved from /etc/X11/xdm/ to /usr/etc/X11/xdm.
Currently display-manager script in xdm package creates
copies in /etc/X11/xdm so lightdm still can be started, but I would like to get
rid of this. Could you please adjust lightdm to the new location? Thanks.


--1601590438.bcf660.25307
Date: Thu, 1 Oct 2020 22:13:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177221

            Bug ID: 1177221
           Summary: krename does not terminate after renaming
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: ianmepham-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After renaming files and then closing the application, the krename process
remains running in the background and will be automatically reopened upon
reboot or logoff and logon.

If you open and close krename without renaming any files it closes properly.

Steps to reproduce:
1. Start krename, or in Dolphin right click on some files and choose rename
with krename.
2. Perform renaming operation.
3. Press the Close button to quit.
4. In a terminal, pgrep -a krename will show /usr/bin/krename and the list of
files you just renamed.

This has been reported upstream and fixed.
https://bugs.kde.org/show_bug.cgi?id=395084

Would it be possible to have this fixed in Tumbleweed please?
Thank you.


body:
--1601653960.73DEd1.20939
Date: Fri, 2 Oct 2020 15:52:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177239

            Bug ID: 1177239
           Summary: Disable remmina update reminder dialog
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: gber-at-opensuse.org
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
                CC: jweberhofer-at-weberhofer.at, lijewski.stefan-at-zabka.pl
          Found By: ---
           Blocker: ---

Created attachment 842213
  --> http://bugzilla.opensuse.org/attachment.cgi?id=842213&action=edit
Screenshot of the nag screen

Every now and then, remmina on Leap 15.2 randomly pops up a dialog telling me
there is an updated version on the Internet, and shows the current changelog.
In the remmina Preferences, I find no option to disable this behavior.

Please disable this nag screen in openSUSE. It is useless:

1. If there is any new version available and the openSUSE maintainers have
decided to distribute it, then I will get through the zypp stacks. As a user of
the openSUSE remmina.rpm package, I am not interested in any non-openSUSE
mechanisms.

2. remmina-1.4.2-lp152.1.2.x86_64 is already installed. There is no point in
showing the changelog for 1.4.2, it's not news.

summary: Disable remmina update reminder dialog


body:
--1601769990.2EA31.8890
Date: Sun, 4 Oct 2020 00:06:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177260

            Bug ID: 1177260
           Summary: Switching python-numpy to plain BLAS causes significant performance regression
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/request/show/835366 switched numpy to plain
BLAS/LAPACK, which causes a significant performance regression:

---
import numpy as np
import time

n = 4000

start_time = time.time()
A = np.random.randn(n,n).astype('float64')
B = np.random.randn(n,n).astype('float64')
print(" init took {} seconds ".format(time.time() - start_time))

start_time = time.time()
m = A@B
print(" mmult took {} seconds ".format(time.time() - start_time))

print(np.__config__.show())
---
python3-numpy-1.19.1 with openblas:    mmult took 2.4579274654388428 seconds
python3-numpy-1.19.2 with blas/lapack: mmult took 877.8246397972107 seconds
python3-numpy-1.19.2 with openblas:    mmult took 2.6917877197265625 seconds

MMult 4000x4000 is 64e9 multiplications and additions, thats ~150kOps/s for
BLAS/LAPACK.

pkgs: openblas python-numpy


--1601907238.f1e70.18693
Date: Mon, 5 Oct 2020 14:13:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177313

            Bug ID: 1177313
           Summary: TLP doesn't change AC/BAT because udev rules are installed at wrong place
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: christianatmobile-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello there,

i have filed a bug on github for TLP 1.3.1 because of not switching AC/BAT
Mode.

The Developer and i figured out, that the udev rules based arhitecture didn't
work because the udev rules are installed on wrong place.

Here the summary of the tlp dev.

"
The package installs the rules file at /usr/libexec/udev/rules.d/85-tlp.rules
udev expects rules in /usr/lib/udev/rules.d/ (see your last outputs)
This way the rule never fires
"

Bug Report on git project:

https://github.com/linrunner/TLP/issues/537


--1601995325.bAdFcf0.837
Date: Tue, 6 Oct 2020 14:42:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177384

            Bug ID: 1177384
           Summary: Black screen after updating to kernel 5.3.18-lp152.44-default
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: i686
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: grewin.mathias-at-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After updating to kernel 5.3.18-lp152.44-default (Security Update) and
rebooting, my monitor displays "Out of Range!" No login to text-console or
graphics is possible and I can't get into the system. My Card is a Radeon HD
7750 (AMD) and the Radeon open source driver is running. So I turned back to
the formerly kernel-version 5.3.18-lp152.41-default and all works fine. In the
OpenSuSE-Forum also this problem is reported with other AMD graphic cards.


--1602051993.eeF2Ed0.19316
Date: Wed, 7 Oct 2020 06:26:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177404

            Bug ID: 1177404
           Summary: fwupd doesn't schedule the update for real
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: glin-at-suse.com
          Reporter: msvec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After the last maintenance update fwupd doesn't schedule the fw update properly


body:
--1602057353.61AfFd330.26063
Date: Wed, 7 Oct 2020 07:55:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177408

            Bug ID: 1177408
           Summary: VUL-0:  chromium: Update to 86.0.4240.75
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2020-15967: Use after free in payments.
CVE-2020-15968: Use after free in Blink.
CVE-2020-15969: Use after free in WebRTC.
CVE-2020-15970: Use after free in NFC.
CVE-2020-15971: Use after free in printing.
CVE-2020-15972: Use after free in audio.
CVE-2020-15990: Use after free in autofill.
CVE-2020-15991: Use after free in password manager.
CVE-2020-15973: Insufficient policy enforcement in extensions.
CVE-2020-15974: Integer overflow in Blink.
CVE-2020-15975: Integer overflow in SwiftShader.
CVE-2020-15976: Use after free in WebXR.
CVE-2020-6557: Inappropriate implementation in networking.
CVE-2020-15977: Insufficient data validation in dialogs.
CVE-2020-15978: Insufficient data validation in navigation.
CVE-2020-15979: Inappropriate implementation in V8.
CVE-2020-15980: Insufficient policy enforcement in Intents.
CVE-2020-15981: Out of bounds read in audio.
CVE-2020-15982: Side-channel information leakage in cache.
CVE-2020-15983: Insufficient data validation in webUI.
CVE-2020-15984: Insufficient policy enforcement in Omnibox.
CVE-2020-15985: Inappropriate implementation in Blink.
CVE-2020-15986: Integer overflow in media.
CVE-2020-15987: Use after free in WebRTC.
CVE-2020-15992: Insufficient policy enforcement in networking.
CVE-2020-15988: Insufficient policy enforcement in downloads.
CVE-2020-15989: Uninitialized Use in PDFium.

Reference

https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html

summary: VUL-0:  chromium: Update to 86.0.4240.75


body:
--1602070303.EaCF1011.14397
Date: Wed, 7 Oct 2020 11:31:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177428

            Bug ID: 1177428
           Summary: AMDGPU resume fail
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: karl.mistelberger-at-nefkom.net
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Resume fails with a frozen desktop:

[   24.398940] kernel: [drm] PCIE GART of 1024M enabled (table at
0x000000F400900000).
[   24.398978] kernel: [drm] PSP is resuming...
[   24.418828] kernel: [drm] reserve 0x400000 from 0xf47f800000 for PSP TMR
[   24.427721] kernel: [drm] psp command (0x5) failed and response status is
(0xFFFF0007)
[   24.873381] kernel: ata2.00: supports DRM functions and may not be fully
accessible
[   24.873629] kernel: ata5.00: supports DRM functions and may not be fully
accessible
[   24.875318] kernel: ata5.00: supports DRM functions and may not be fully
accessible
[   24.875414] kernel: [drm] kiq ring mec 2 pipe 1 q 0
[   24.875815] kernel: ata2.00: supports DRM functions and may not be fully
accessible
[   24.921903] kernel: [drm] VCN decode and encode initialized
successfully(under DPG Mode).
[   25.403984] kernel: [drm] Fence fallback timer expired on ring sdma0
[   25.436018] kernel: [drm] Fence fallback timer expired on ring gfx
[   25.436197] kernel: amdgpu 0000:06:00.0: [drm:amdgpu_ib_ring_tests [amdgpu]]
*ERROR* IB test failed on gfx (-22).
[   25.436204] kernel: [drm:process_one_work] *ERROR* ib ring test failed
(-22).
[   34.512086] kernel: [drm] PCIE GART of 1024M enabled (table at
0x000000F400900000).
[   34.512139] kernel: [drm] PSP is resuming...
[   34.532000] kernel: [drm] reserve 0x400000 from 0xf47f800000 for PSP TMR
[   34.541638] kernel: [drm] psp command (0x5) failed and response status is
(0xFFFF0007)
[   34.986957] kernel: ata2.00: supports DRM functions and may not be fully
accessible
[   34.989592] kernel: ata2.00: supports DRM functions and may not be fully
accessible
[   34.990819] kernel: ata5.00: supports DRM functions and may not be fully
accessible
[   34.992628] kernel: ata5.00: supports DRM functions and may not be fully
accessible
[   35.013814] kernel: [drm] kiq ring mec 2 pipe 1 q 0
[   35.060526] kernel: [drm] VCN decode and encode initialized
successfully(under DPG Mode).
[   35.541618] kernel: [drm] Fence fallback timer expired on ring sdma0
[   36.085419] kernel: amdgpu 0000:06:00.0: [drm:amdgpu_ib_ring_tests [amdgpu]]
*ERROR* IB test failed on gfx (-110).
[   36.085428] kernel: [drm:process_one_work] *ERROR* ib ring test failed
(-110).

inxi -zaG:

Graphics:  Device-1: Advanced Micro Devices [AMD/ATI] Picasso driver: amdgpu v:
kernel bus ID: 06:00.0 chip ID: 1002:15d8
           Display: server: X.Org 1.20.9 compositor: kwin_x11 driver: amdgpu
display ID: :0 screens: 1
           Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm
(20.0x11.2") s-diag: 582mm (22.9")
           Monitor-1: DVI-D-0 res: 1920x1080 hz: 60 dpi: 79 size: 621x341mm
(24.4x13.4") diag: 708mm (27.9")
           OpenGL: renderer: AMD RAVEN (DRM 3.38.0 5.8.12-1-default LLVM
10.0.1) v: 4.6 Mesa 20.1.8 direct render: Yes

pkgs: kernel-firmware rpm

summary: AMDGPU resume fail


--1602142230.B58ba3d10.24071
Date: Thu, 8 Oct 2020 07:30:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177462

            Bug ID: 1177462
           Summary: [Build 20201007] openQA test fails in journal_check: Dracut is missing /var/lib/nfs/sm
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1423381/modules/jour
                    nal_check/steps/56
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: daniel.molkentin-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: ---

Dracut seems to create /var/lib/nfs/statd/sm instead of the correct path.

Oct 08 03:36:53.074275 localhost rpc.statd[327]: Failed to stat
/var/lib/nfs/sm: No such file or directory

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-Kubic-kubeadm-x86_64-kubeadm@64bit-2G fails in
[journal_check](https://openqa.opensuse.org/tests/1423381/modules/journal_check/steps/56)

## Test suite description

## Reproducible

Fails since (at least) Build
[20201006](https://openqa.opensuse.org/tests/1421922)

## Expected result

Last good: [20201005](https://openqa.opensuse.org/tests/1421204) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image-Kubic-kubeadm&machine=64bit-2G&test=kubeadm&version=Tumbleweed)


--1602240479.2F7BED0.11966
Date: Fri, 9 Oct 2020 10:47:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177517

            Bug ID: 1177517
           Summary: [Build 20201008] openQA test fails in rails could not find puma 4.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1424680/modules/rail
                    s/steps/6
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Ruby
          Assignee: ruby-devel-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-jeos-extra@64bit_virtio-2G
fails in
[rails](https://openqa.opensuse.org/tests/1424680/modules/rails/steps/6)

## Test suite description
Same as jeos, plus some more tests.

## Reproducible

Fails since (at least) Build
[20190311](https://openqa.opensuse.org/tests/877894)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=JeOS-for-kvm-and-xen&machine=64bit_virtio-2G&test=jeos-extra&version=Tumbleweed)


body:
--1602243609.c1a7f0.17788
Date: Fri, 9 Oct 2020 11:40:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177523

            Bug ID: 1177523
           Summary: aspell does not provide dictionaries when other applications require aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ilya-at-ilya.pp.ua
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If you manually install aspell (sudo zypper in aspell) then everything is fine,
aspell aspell-en aspell-ru will be installed.
But if you specify Requires: aspell/aspell-en/locale(aspell:en) in the
spec-file of an application that uses aspell (eiskaltdcpp), then only
libaspell.so.15 will be installed without dictionaries and the spell checker
will not work in the application if manually they cannot be installed.
For me it is not at all clear why when specifying Requires: aspell or Requires:
aspell-en, only libaspell.so.15 is installed, and perhaps this does not affect
anything at all, since this dependency is automatic.
There is clearly something wrong.

pkgs: aspell-dictionaries aspell-en


--1602275809.0AaF0d1.30288
Date: Fri, 9 Oct 2020 20:36:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177540

            Bug ID: 1177540
           Summary: packaging issue related lsb-4.0.fake-1.5
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: andrasszerencses1-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

It's not possible to keep Linux Standard Base in a reasonable way with current
update on openSUSE Tumbleweed. Obviously let me know if this kind of packaging
issue is not a matter of bug although it seems to me since it's important for
several third party software and driver.
Current result with distribution upgrade:

Problem: lsb-4.0.fake-1.5.x86_64 requires /sbin/pidof, but this requirement
cannot be provided
  deleted providers: sysvinit-tools-2.96-1.3.x86_64
not installable providers:
busybox-sysvinit-tools-1.32.0-11.1.noarch[download.opensuse.org-oss]
 Solution 1: Following actions will be done:
  deinstallation of sysvinit-tools-2.96-1.3.x86_64
  deinstallation of xorg-x11-essentials-7.6_1-16.10.noarch
  deinstallation of lightdm-gtk-greeter-branding-openSUSE-2.0-3.2.noarch
 Solution 2: Following actions will be done:
  deinstallation of lsb-4.0.fake-1.5.x86_64
  deinstallation of atom-beta-1.52.0.beta0-0.1.x86_64
 Solution 3: keep obsolete sysvinit-tools-2.96-1.3.x86_64
 Solution 4: break lsb-4.0.fake-1.5.x86_64 by ignoring some of its dependencies


--1602288830.7b02e0.30973
Date: Sat, 10 Oct 2020 00:13:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177542

            Bug ID: 1177542
           Summary: Thunderbird Print Preview window created under main window under Wayland
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: David@WalkerStreet.info
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Under Gnome/Wayland, Thunderbird creates Print Preview windows underneath its
main window, so the windows must be rearranged to see the preview. This doesn't
happen under X11. As a workaround, setting MOZ_ENABLE_WAYLAND=0 prior to
invoking Thunderbird makes the Print Preview windows appear in the foreground.

(Let me know if this should be reported upstream.)


--1602424464.cB8c0.17196
Date: Sun, 11 Oct 2020 13:54:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177554

            Bug ID: 1177554
           Summary: Missing symlinks to firmware files in kernel-firmware-*
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: tobias.klausmann-at-freenet.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Starting with SR 839175 (https://build.opensuse.org/request/show/839175)
several firmware files were removed and added to WHENCE, e.g. "linux-firmware:
nvidia: move firmware symlinks to WHENCE" - when using the kernel-firmware-*
(kernel-firmware-nvidia) packages, the symlinks mentioned in WHENCE are not
created at package install time, thus the fw is not found at a later time when
it is needed.

When using the legacy kernel-firmware package, the symlinks are created just
fine, so it seems the WHENCE file is not used with the split firmware files.


--1602445131.FD6AA0.900
Date: Sun, 11 Oct 2020 19:38:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177559

            Bug ID: 1177559
           Summary: virt-manager: error creating snapshot: name 'dom' is not defined
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm using latest Tumbleweed (20201009).

I tried to create a new snapshot for a VM with a qcow2 image, but after
entering the snapshot name I want, I got the error quoted below.
(the first line translates to "error while creating the snapshot: name 'dom' is
not defined")

------------------------------------------------------------------------

Fehler beim Erzeugen des Schnappschusses: name 'dom' is not defined

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 65, in
cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/details/snapshots.py", line 237, in
_do_create_snapshot
    self.vm.create_snapshot(xml)
  File "/usr/share/virt-manager/virtManager/object/domain.py", line 1125, in
create_snapshot
    self._backend.snapshotCreateXML(xml, flags)
  File "/usr/lib64/python3.8/site-packages/libvirt.py", line 3031, in
snapshotCreateXML
    __tmp = virDomainSnapshot(self, _obj=ret)
  File "/usr/lib64/python3.8/site-packages/libvirt.py", line 7023, in __init__
    self._dom = dom
NameError: name 'dom' is not defined


--1602488409.1E68Bd0.29272
Date: Mon, 12 Oct 2020 07:40:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177572

            Bug ID: 1177572
           Summary: Akregator icon not hidden with zero unread articles
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: aloisio-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

As per subject, I believe it's related to this
https://bugs.kde.org/show_bug.cgi?id=420520 .
Can anything be done on this end?


--1602494103.53fBE5F0.4771
Date: Mon, 12 Oct 2020 09:15:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177579

            Bug ID: 1177579
           Summary: wrong clamping of hexadezimal digits in dc (desk calculator)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: a.yousar-at-informatik.hu-berlin.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The output (1.5) of the command
 echo "2i B.Cpq" | dc
shows, that the dc of OpenSuse Leap 15.2 clamps hexadecimal digits, which means
that any "digit" (0-9, A-F) that is greater or equal to the inbut base ibase is
replaced by ibase-1.
Whilst the clamping is implemented in GNU bc
"For multi-digit numbers, bc changes all input digits greater or equal to ibase
to the value of ibase-1." (https://www.gnu.org/software/bc/manual/text/bc.txt)
it is wrong for dc. Even in POSIX bc the output is undefined
"...the behavior is undefined when digits greater than or equal to the value of
ibase appear in the input"
(https://pubs.opengroup.org/onlinepubs/9699919799/utilities/bc.html#tag_20_09_13_02)

Despite that the man page is a bit fuzzy on this
"To enter a number in dc, type the digits (using upper case letters A through F
as 'digits' when working with input bases greater than ten), with an optional
decimal point."
a clamping was never foreseen for dc
"The hexadecimal digits A-F correspond to the numbers 10-15 regardless of input
base." (http://maibriz.de/unix/ultrix/etc/dc.pdf)
and is not implemented in many distributions.

dc claims to be bversion 1.4.1 (GNU bc 1.07.1)
$ cat /etc/os-release | sed 2q; dc --version | sed 1q; echo "2i B.Cpq" | dc
NAME="openSUSE Leap"
VERSION="15.2"
dc (GNU bc 1.07.1) 1.4.1
1.5

But the correct output of
  echo "2i B.Cpq" | dc
is 17.0 (decimal) as B is 11 and 0.C is 12/2=6 with input radix two, as another
implementation of the same sources shows.

$ cat /etc/os-release | sed 2q; dc --version | sed 1q; echo "2i B.Cpq" | dc
NAME="Ubuntu"
VERSION="18.04.5 LTS (Bionic Beaver)"
dc (GNU bc 1.07.1) 1.4.1
17.0


--1602645476.E3B10.6173
Date: Wed, 14 Oct 2020 03:17:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177656

            Bug ID: 1177656
           Summary: brltty: missing post requirement on mcookie
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

While I perform a standard installation that includes also the pattern:
  KVM Virtualization Host and tools
I found this error in /var/log/zypp/history:

# 2020-10-13 18:25:11 libbrlapi0_7-6.0-lp152.1.9.x86_64.rpm installed ok
# Additional rpm output:
# /var/tmp/rpm-tmp.3XuonL: line 2: mcookie: command not found
#
2020-10-13
18:25:11|install|libbrlapi0_7|6.0-lp152.1.9|x86_64||openSUSE-Leap-15.2-1|2e0a973c3f59275b650864fec0c081dbc779da53396f7f92f1c7d0d5bcf53bee|

The problem is that libbrlapi0_7 is installed before util-linux and at that
time the binary mcookie used in the postinstall scriptlet, is not available
yet.

A possible fix is to add this line in brltty.spec:

 Group:          System/Daemons
 Requires(post): shadow
+Requires(post): util-linux
+Requires(post): coreutils
 Recommends:     %{name}

Adding the requirement for coreutils too because chgrp and chmod are also used
in the postinstall scriptlet.


--1602661136.8fDF0.22211
Date: Wed, 14 Oct 2020 07:38:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177667

            Bug ID: 1177667
           Summary: ffmpeg-4.3 causes firefox from mozilla, vlc own-build, mpv not to be able to play videos
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: w.pelser-at-web.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After new installation of TW firefox (downloaded from mozilla), own-build vlc
and mpv can't play videos. (I used ffmpeg-4 from packman, in order to get
unrestricted packages.)
The reason is that they are searching for a symlink of the ffmpeg libraries,
which contains only two numbers at the end of the *.so. files.
Since ffmpeg-4.3 the *.so. files have four numbers with a dot in-between.
Possible Solution:
The soversion.patch become changed in a way like this:

-


--1602684284.a48a51.22739
Date: Wed, 14 Oct 2020 14:04:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177695

            Bug ID: 1177695
           Summary: kernel: parport_pc: `none' invalid for parameter `dma' on openSUSE MicroOS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: jalausuch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 842620
  --> https://bugzilla.suse.com/attachment.cgi?id=842620&action=edit
full journal

openSUSE MicroOS DVD image for Leap 15.2 in UEFI boot fails with message

    > kernel: parport_pc: `none' invalid for parameter `dma'

https://openqa.opensuse.org/tests/1432542#step/journal_check/11


body:
Build Identifier:

It can be that the name of the package qemu-s390 comes from a really old time
with 32bit systems....

Latest Z systems are using the architecture s390x. The name s390 is used for
32bit systems at IBM. The package qemu-s390 should be usable for s390x. It
seems the configuration is correctly. But the name should be changed. ;)

Reproducible: Always

summary: Rename the package qemu-s390 to qemu-s390x


body:
--1602925609.4CcF2b0.13231
Date: Sat, 17 Oct 2020 09:06:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177825

            Bug ID: 1177825
           Summary: [trackerbug] lxd 4.7 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-7-has-been-released/9213

  + Backup (export/import) of custom storage volumes
  + Import of instances with alternative name
  + Virtual machine memory shrinking (and re-grow)
  + USB device passthrough for virtual machines
  + Configurable rsync compression in migration
  + Restrict available uplinks for project networks
  + Add new physical managed network type
  + Support for external routed addresses/subnets on OVN

summary: [trackerbug] lxd 4.7 update


body:
--1602937201.dB1752D0.21166
Date: Sat, 17 Oct 2020 12:20:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177828

            Bug ID: 1177828
           Summary: Basic manual entries missing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: teo8976-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

man-pages not installed by default

I installed tumbleweed a few days ago. Since then I've been using it, and I've
often used man and never hit a missing man page until now. I mean man pages for
stuff like rsync and ssh were present.

Then I wanted to looked up cp because I always forget for each command whether
the recursive option is -r or -R and to my surprise I got:

   $ man cp
   No manual entry for cp

Then I found out I just had to install the package man-pages. But it seems a
little ridiculous that it wasn't installed as part of the core system.

If that is a deliberate decision to save space... wait a moment, 6MB, no,
that's not a hypothesis worth considering. It must be an error in the packaging
of Tumbleweed.

summary: Basic manual entries missing


body:
--1603018920.DF6e0.8334
Date: Sun, 18 Oct 2020 11:02:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177845

            Bug ID: 1177845
           Summary: bluetooth on boot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jeroenjeurissen-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I think it would add to the user experience if bluetooth devices would be
enabled on boot. To be able to login using your bluetooth keyboard/mouse.

This can easily be done with:
zypper in -y bluez-auto-enable-devices

and
adding "default.target" to WantedBy
in /etc/systemd/system/bluetooth.target.wants/bluetooth.service

source:
https://www.reddit.com/r/openSUSE/comments/eoozm2/bluetooth_on_boot/

summary: bluetooth on boot


--1603093639.1386530.5950
Date: Mon, 19 Oct 2020 07:47:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177858

            Bug ID: 1177858
           Summary: [Build 20201017] xdg-su / gnomesu no longer working
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1439930/modules/yast
                    2_control_center/steps/6
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: ---

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_gui@64bit fails in
[yast2_control_center](https://openqa.opensuse.org/tests/1439930/modules/yast2_control_center/steps/6)

When running xdg-su -c yast2, yast no longer starts up

the pam stack seems to 'work', according the log file:
> Oct 19 03:38:15 susetest gnmesu-pam-backend[1855]: pam_unix(gnomesu-pam:session): session opened for user root(uid=0) by (uid=1000)
> Oct 19 03:38:16 susetest gnmesu-pam-backend[1855]: pam_unix(gnomesu-pam:session): session closed for user root

Depending on the app started (e.g. gnome-terminal) you might also get a
No protocol specified
Unable to init server:could not connect: Connection refused
# Failed to parse arguments: Cannot open display:

While using "xdg-su -c env" one can see that there is no XAUTHORITY variable in
the environment for root.

A possible root for the new problem lies in pam-xauth_ownership.patch

## Test suite description
Maintainer: qsf-y

Test for yast2 UI, GUI only. Running on created gnome images which provides
both text console for ncurses UI tests as well as the gnome environment for the
GUI tests.

Temporarily added YAST2_GUI_TERMINATE_PREVIOUS_INSTANCES to see if helps. This
variable triggers code which terminates all yast2 processes before starting new
one. (see poo#26104).

## Reproducible

Fails since (at least) Build
[20200728](https://openqa.opensuse.org/tests/1346327)

## Expected result

Last good: [20200727](https://openqa.opensuse.org/tests/1345093) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=yast2_gui&version=Tumbleweed)


--1603095727.E2BB1cb0.21844
Date: Mon, 19 Oct 2020 08:22:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177865

            Bug ID: 1177865
           Summary: issue-generator.service Failed with result 'start-limit-hit'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: sogal-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 842778
  --> http://bugzilla.opensuse.org/attachment.cgi?id=842778&action=edit
issue-generator.service logs

Hi all,

I have encountered the following behavior on 4 MicroOS nodes:

- issue-generator.path triggers issue-generator.service
- issue-generator.service starts and seems to succeeded but fails in the end
because it hits the start rate limit:

oct. 17 03:30:38 p6-cont1 systemd[1]: issue-generator.service: Succeeded.
oct. 17 03:30:38 p6-cont1 systemd[1]: Finished Generate issue file for login
session.
oct. 17 03:30:38 p6-cont1 systemd[1]: issue-generator.service: Start request
repeated too quickly.
oct. 17 03:30:38 p6-cont1 systemd[1]: issue-generator.service: Failed with
result 'start-limit-hit'.
oct. 17 03:30:38 p6-cont1 systemd[1]: Failed to start Generate issue file for
login session.

and indeed, in the full journal excerpt attached, I can see that this service
starts repeatedly and reads more and more source files each time.

Is it looking in the right paths ? Is there any override that can be applied to
this service in order to increase its start rate limit ?

Regards,


--1603108886.632d01C0.30205
Date: Mon, 19 Oct 2020 12:01:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177881

            Bug ID: 1177881
           Summary: VUL-0: CVE-2020-6104,CVE-2020-6105,CVE-2020-6106,CVE-2020-610 7,CVE-2020-6108: f2fs-tools: specially crafted f2fs filesystems can cause code execution
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/269189/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-6104

An exploitable information disclosure vulnerability exists in the
get_dnode_of_data functionality of F2fs-Tools f2fs.fsck 1.13. A specially
crafted f2fs filesystem can cause information disclosure resulting in a
information disclosure. An attacker can provide a malicious file to trigger
this vulnerability.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888770
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6104
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-6104.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6104
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1046

CVE-2020-6105

An exploitable code execution vulnerability exists in the multiple devices
functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem
can cause Information overwrite resulting in a code execution. An attacker can
provide a malicious file to trigger this vulnerability.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888773
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6105
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-6105.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6105
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1047

CVE-2020-6106

An exploitable information disclosure vulnerability exists in the
init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A
specially crafted filesystem can be used to disclose information. An attacker
can provide a malicious file to trigger this vulnerability.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888776
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6106
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-6106.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6106
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1048

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the dev_read
functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem
can cause an uninitialized read resulting in an information disclosure. An
attacker can provide a malicious file to trigger this vulnerability.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888780
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6107
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-6107.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6107
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1049

CVE-2020-6108

An exploitable code execution vulnerability exists in the fsck_chk_orphan_node
functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem
can cause a heap buffer overflow resulting in a code execution. An attacker can
provide a malicious file to trigger this vulnerability.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888783
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6108
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-6108.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6108
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1050


--1603123133.5bA335DC0.23297
Date: Mon, 19 Oct 2020 15:58:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177901

            Bug ID: 1177901
           Summary: VUL-0: CVE-2020-15229: singularity: path traversal and files overwrite with unsquashfs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/269188/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: eich-at-suse.com
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: burnus-at-gmx.de, scorot-at-free.fr
          Found By: Security Response Team
           Blocker: ---

CVE-2020-15229

Singularity (an open source container platform) from version 3.1.1 through
3.6.3 has a vulnerability. Due to insecure handling of path traversal and the
lack of path sanitization within `unsquashfs`, it is possible to
overwrite/create any files on the host filesystem during the extraction with a
crafted squashfs filesystem. The extraction occurs automatically for
unprivileged (either installation or with `allow setuid = no`) run of
Singularity when a user attempt to run an image which is a local SIF image or a
single file containing a squashfs filesystem and is coming from remote sources
`library://` or `shub://`. Image build is also impacted in a more serious way
as it can be used by a root user, allowing an attacker to overwrite/create
files leading to a system compromise, so far bootstrap methods `library`,
`shub` and `localimage` are triggering the squashfs extraction. This issue is
addressed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4
especially if they use Singularity mainly for building image as root user.
There is no solid workaround except to temporary avoid to use unprivileged mode
with single file images in favor of sandbox images instead. Regarding image
build, temporary avoid to build from `library` and `shub` sources and as much
as possible use `--fakeroot` or a VM for that.

Upstream references:
https://github.com/hpcng/singularity/security/advisories/GHSA-7gcp-w6ww-2xv9
https://github.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes

Upstream patches:
https://github.com/hpcng/singularity/pull/5611
https://github.com/hpcng/singularity/commit/eba3dea260b117198fdb6faf41f2482ab2f8d53e

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1888811
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-15229
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-15229.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15229


--1603132615.8f8B2.6563
Date: Mon, 19 Oct 2020 18:36:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177904

            Bug ID: 1177904
           Summary: [Build 20201018] openQA test fails in yast2_lan_device_settings: Internal error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1441057/modules/yast
                    2_lan_device_settings/steps/56
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: fvogt-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: openQA
           Blocker: ---

Created attachment 842801
  --> http://bugzilla.opensuse.org/attachment.cgi?id=842801&action=edit
YaST logs from openQA

2020-10-19 14:33:36 <1> localhost(16672) [Ruby] modules/Lan.rb(Read):199 Using
cached data
2020-10-19 14:33:36 <2> localhost(16672) [Ruby] yast/builtins.rb(block in
sformat):586 tostring builtin called on wrong type Class
2020-10-19 14:33:36 <3> localhost(16672) [Ruby]
yast/wfm.rb(handle_exception):253 Client /usr/share/YaST2/clients/lan.rb failed
with 'undefined method `empty?' for nil:NilClass' (NoMethodError).
Backtrace:
/usr/share/YaST2/lib/y2network/widgets/boot_protocol.rb:177:in `handle'
/usr/share/YaST2/lib/cwm/abstract_widget.rb:239:in `call'
/usr/share/YaST2/lib/cwm/abstract_widget.rb:239:in `handle_wrapper'
/usr/lib64/ruby/vendor_ruby/2.7.0/yast/fun_ref.rb:33:in `call'
/usr/lib64/ruby/vendor_ruby/2.7.0/yast/fun_ref.rb:33:in `call'
/usr/share/YaST2/modules/CWM.rb:353:in `block in handleWidgets'
...
/usr/lib/YaST2/bin/y2start:60:in `'
2020-10-19 14:33:36 <3> localhost(16672) [Ruby]
yast/wfm.rb(handle_exception):281 Internal error. Please report a bug report
with logs.
Run save_y2logs to get complete logs.

Caller:
/usr/share/YaST2/lib/y2network/widgets/boot_protocol.rb:177:in `handle'

Details: undefined method `empty?' for nil:NilClass

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-jeos-extra@64bit_virtio-2G
fails in
[yast2_lan_device_settings](https://openqa.opensuse.org/tests/1441057/modules/yast2_lan_device_settings/steps/56)

## Test suite description
Same as jeos, plus some more tests.

## Reproducible

Fails since (at least) Build
[20190311](https://openqa.opensuse.org/tests/877894)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=JeOS-for-kvm-and-xen&machine=64bit_virtio-2G&test=jeos-extra&version=Tumbleweed)


body:
--1603183189.a3B6DDdb0.8972
Date: Tue, 20 Oct 2020 08:39:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1177921

            Bug ID: 1177921
           Summary: dwarves 1.18 crashes on arm64's kernel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: jengelh-at-inai.de
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mkubecek-at-suse.com
          Found By: ---
           Blocker: ---

The builds of arm64 kernel are currently failing:
https://build.opensuse.org/package/live_build_log/Kernel:stable/kernel-default/ARM/aarch64

[ 3611s] PAHOLE: Error: Found symbol of zero size when encoding btf (sym:
'__kvm_nvhe_arm64_ssbd_callback_required', cu:
'../arch/arm64/kernel/cpu_errata.c').
[ 3611s] PAHOLE: Error: Use '-j' or '--force' to ignore such symbols and force
emit the btf.
[ 3612s] ../scripts/link-vmlinux.sh: line 141:  5125 Segmentation fault
LLVM_OBJCOPY=${OBJCOPY} ${PAHOLE} -J ${1}

It is due to pahole 1.18 crashes during the build:
> (gdb) where
> #0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:300
> #1  0x00007ffff7f78346 in memcpy (__len=<optimized out>, __src=<optimized out>, __dest=<optimized out>, __dest=<optimized out>, __src=<optimized out>, __len=<optimized out>) at /usr/include/bits/string_fortified.h:34
> #2  gobuffer__add (gb=0x555555569aa0, s=0x7fffffffb50c, len=12) at /usr/src/debug/dwarves-1.18-1.1.x86_64/gobuffer.c:87
> #3  0x00007ffff7f8671f in btf_elf__add_datasec_type (btfe=btfe@entry=0x555555569a40, section_name=section_name@entry=0x7ffff7fa43ad ".data..percpu", var_secinfo_buf=var_secinfo_buf@entry=0x555555569ac0) at /usr/src/debug/dwarves-1.18-1.1.x86_64/libbtf.c:721
> #4  0x00007ffff7f8d766 in btf_elf__encode (flags=0 '\000', btfe=0x555555569a40) at /usr/src/debug/dwarves-1.18-1.1.x86_64/libbtf.c:857
> #5  btf_elf__encode (btfe=0x555555569a40, flags=<optimized out>) at /usr/src/debug/dwarves-1.18-1.1.x86_64/libbtf.h:71
> #6  0x00007ffff7f7fc70 in btf_encoder__encode () at /usr/src/debug/dwarves-1.18-1.1.x86_64/btf_encoder.c:213
> #7  0x00007ffff7f80d17 in cu__encode_btf (cu=0x55555638d9b0, verbose=0, force=false, skip_encoding_vars=false) at /usr/src/debug/dwarves-1.18-1.1.x86_64/btf_encoder.c:255
> #8  0x000055555555ac4d in pahole_stealer (cu=0x55555638d9b0, conf_load=<optimized out>) at /usr/src/debug/dwarves-1.18-1.1.x86_64/pahole.c:2366
> #9  0x00007ffff7f89dab in finalize_cu (cus=0x5555555622d0, dcu=0x7fffffffd080, conf=0x5555555610e0 <conf_load>, cu=0x55555638d9b0) at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2473
> #10 finalize_cu_immediately (conf=0x5555555610e0 <conf_load>, dcu=0x7fffffffd080, cu=0x55555638d9b0, cus=0x5555555622d0) at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2317
> #11 cus__load_module (cus=cus@entry=0x5555555622d0, conf=0x5555555610e0 <conf_load>, mod=mod@entry=0x555555564760, dw=0x555555565960, elf=elf@entry=0x555555562360, filename=0x7fffffffe846 "ss") at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2473
> #12 0x00007ffff7f8a0f1 in cus__process_dwflmod (dwflmod=0x555555564760, userdata=<optimized out>, name=<optimized out>, base=<optimized out>, arg=0x7fffffffe1b0) at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2518
> #13 0x00007ffff7d4f571 in dwfl_getmodules () from /usr/lib64/libdw.so.1
> #14 0x00007ffff7f823ed in cus__process_file (filename=0x7fffffffe846 "ss", fd=3, conf=<optimized out>, cus=0x5555555622d0) at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2571
> #15 dwarf__load_file (cus=0x5555555622d0, conf=<optimized out>, filename=0x7fffffffe846 "ss") at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarf_loader.c:2588
> #16 0x00007ffff7f76771 in cus__load_file (cus=cus@entry=0x5555555622d0, conf=conf@entry=0x5555555610e0 <conf_load>, filename=0x7fffffffe846 "ss") at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarves.c:1958
> #17 0x00007ffff7f798a8 in cus__load_files (cus=0x5555555622d0, conf=0x5555555610e0 <conf_load>, filenames=0x7fffffffe518) at /usr/src/debug/dwarves-1.18-1.1.x86_64/dwarves.c:2316
> #18 0x00005555555576fc in main (argc=3, argv=0x7fffffffe508) at /usr/src/debug/dwarves-1.18-1.1.x86_64/pahole.c:2687

I suspect:
commit f3d9054ba8ff1df0fc44e507e3a01c0964cabd42
Author:     Hao Luo <haoluo-at-google.com>
AuthorDate: Wed Jul 8 13:44:10 2020 -0700

    btf_encoder: Teach pahole to store percpu variables in vmlinux BTF.

Which added this machinery (btf_elf__add_datasec_type in particular).

summary: dwarves 1.18 crashes on arm64's kernel


body:
--1603183976.b1471e0.10176
Date: Tue, 20 Oct 2020 08:52:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177922

            Bug ID: 1177922
           Summary: ghostscript: ps2ascii crash on pdf
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: jsmeix-at-suse.de
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Tumbleweed: [ghostscript-9.52-2.2.x86_64]

� wget
https://interoperability.blob.core.windows.net/files/MS-OXCMSG/%5bMS-OXCMSG%5d-181001.pdf
� md5sum *pdf
434487f9faea2e8fe9f451b031a474a3  [MS-OXCMSG]-181001.pdf
� ps2ascii \[MS-OXCMSG\]-181001.pdf
malloc(): corrupted top size
/usr/bin/ps2ascii: line 21: 11109 Aborted                 (core dumped)
$GS_EXECUTABLE $OPTIONS -o - "$1"

15.2: [ghostscript-9.52-lp152.2.4.1.x86_64]

gs: malloc.c:2422: sysmalloc: Assertion `(old_top == initial_top (av) &&
old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse
(old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)' failed.

summary: ghostscript: ps2ascii crash on pdf


--1603207975.4e7bff860.8613
Date: Tue, 20 Oct 2020 15:32:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177932

            Bug ID: 1177932
           Summary: VUL-0: CVE-2020-24972: Kleopatra: allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/266296/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: lbeltrame-at-kde.org
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-24972

The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows
remote attackers to execute arbitrary code because openpgp4fpr: URLs are
supported without safe handling of command-line options. The Qt
platformpluginpath command-line option can be used to load an arbitrary DLL.

References:
https://dev.gnupg.org/rKLEOPATRAb4bd63c1739900d94c04da03045e9445a5a5f54b
https://dev.gnupg.org/source/kleo/browse/master/CMakeLists.txt

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1887363
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-24972
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-24972.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24972
https://security.gentoo.org/glsa/202008-21
https://dev.gnupg.org/source/kleo/browse/master/CMakeLists.txt
https://dev.gnupg.org/rKLEOPATRAb4bd63c1739900d94c04da03045e9445a5a5f54b


--1603226853.fcD80.11035
Date: Tue, 20 Oct 2020 20:47:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177936

            Bug ID: 1177936
           Summary: VUL-0: chromium: update to 86.0.4240.111
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2020-15999: Heap buffer overflow in Freetype
CVE-2020-16000: Inappropriate implementation in Blink
CVE-2020-16001: Use after free in media
CVE-2020-16002: Use after free in PDFium
CVE-2020-16003: Use after free in printing

https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html


--1603271340.eAD0EF2a0.1472
Date: Wed, 21 Oct 2020 09:09:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1177951

            Bug ID: 1177951
           Summary: DHCP server : bad symbolic link for dhcpd.pid in /run and var/lib
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: conde.philippe-at-skynet.be
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I use dhcp and named server on my system.
I see two errors in journalctl during boot related to dhcpd.pid:
Oct 20 16:25:44 hpprol2 dhcpd[2542]: chown: cannot access '/var/lib/dhcp//run':
No such file or directory
Oct 20 16:25:44 hpprol2 dhcpd[2549]: Can't create PID file /run/dhcpd.pid: No
such file or directory.

If I look to /run/dhpcpd.pid
# ls -l dhcpd.pid
lrwxrwxrwx  1 root   root       27 Oct 20 16:25 dhcpd.pid ->
/var/lib/dhcp/run/dhcpd.pid
which is is invalid.
What exists is
# ls -al /var/lib/dhcp/var/run/dhcpd.pid
-rw-r--r


body:
--1603459055.eb54dD13.12435
Date: Fri, 23 Oct 2020 13:17:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178070

            Bug ID: 1178070
           Summary: llvm11 build hangs on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: aaronpuchert@alice-dsl.net, afaerber-at-suse.com,
                    dmueller-at-suse.com
          Found By: ---
           Blocker: ---

llvm11 build hangs on Factory aarch64, see:
https://build.opensuse.org/package/show/devel:tools:compiler/llvm11

I also tried to build it on a ThunderX2 in a chroot with 'osc build', but it
also hangs.

Last lines of the build are:

[ 3505s] [5455/5812]
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -D_GNU_SOURCE
-D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS
-Itools/clang/tools/extra/clangd -I../tools/clang/tools/extra/clangd
-I../tools/clang/include -Itools/clang/include -Iinclude -I../include -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -fno-common -Woverloaded-virtual
-Wno-nested-anon-types -O2 -g -DNDEBUG  -fno-exceptions -std=c++14 -MD -MT
tools/clang/tools/extra/clangd/CMakeFiles/obj.clangDaemon.dir/XRefs.cpp.o -MF
tools/clang/tools/extra/clangd/CMakeFiles/obj.clangDaemon.dir/XRefs.cpp.o.d -o
tools/clang/tools/extra/clangd/CMakeFiles/obj.clangDaemon.dir/XRefs.cpp.o -c
../tools/clang/tools/extra/clangd/XRefs.cpp
[ 3524s] [5456/5812]
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -D_GNU_SOURCE
-D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS
-Itools/clang/tools/extra/clang-tidy/modernize
-I../tools/clang/tools/extra/clang-tidy/modernize -I../tools/clang/include
-Itools/clang/include -Iinclude -I../include -O2 -Wall -D_FORTIFY_SOURCE=0
-fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables
-Werror=return-type -DNDEBUG -fPIC -fvisibility-inlines-hidden -Wall -Wextra
-Wno-unused-parameter -Wwrite-strings -Wcast-qual -Wmissing-field-initializers
-pedantic -Wno-long-long -Wimplicit-fallthrough -Wno-noexcept-type
-Wnon-virtual-dtor -Wdelete-non-virtual-dtor -Wstring-conversion
-fdiagnostics-color -ffunction-sections -fdata-sections -flto=thin -fno-common
-Woverloaded-virtual -Wno-nested-anon-types -O2 -g -DNDEBUG  -fno-exceptions
-std=c++14 -MD -MT
tools/clang/tools/extra/clang-tidy/modernize/CMakeFiles/obj.clangTidyModernizeModule.dir/LoopConvertCheck.cpp.o
-MF
tools/clang/tools/extra/clang-tidy/modernize/CMakeFiles/obj.clangTidyModernizeModule.dir/LoopConvertCheck.cpp.o.d
-o
tools/clang/tools/extra/clang-tidy/modernize/CMakeFiles/obj.clangTidyModernizeModule.dir/LoopConvertCheck.cpp.o
-c ../tools/clang/tools/extra/clang-tidy/modernize/LoopConvertCheck.cpp
[ 3524s] [5457/5812]
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -D_GNU_SOURCE
-D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS
-Itools/obj2yaml -I../tools/obj2yaml -Iinclude -I../include -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -O2 -g -DNDEBUG  -fno-exceptions
-std=c++14 -MD -MT tools/obj2yaml/CMakeFiles/obj2yaml.dir/elf2yaml.cpp.o -MF
tools/obj2yaml/CMakeFiles/obj2yaml.dir/elf2yaml.cpp.o.d -o
tools/obj2yaml/CMakeFiles/obj2yaml.dir/elf2yaml.cpp.o -c
../tools/obj2yaml/elf2yaml.cpp
[ 3573s] [5458/5812] : &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang -fPIC -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC -Wall -Wextra
-Wno-unused-parameter -Wwrite-strings -Wmissing-field-initializers -pedantic
-Wno-long-long -Wimplicit-fallthrough -Wdelete-non-virtual-dtor
-Wstring-conversion -fdiagnostics-color -ffunction-sections -fdata-sections
-flto=thin -Wall -Wcast-qual -Wformat-pedantic -Wimplicit-fallthrough
-Wsign-compare -Wno-extra -Wno-pedantic -O2 -g -DNDEBUG  -Wl,--as-needed
-Wl,--build-id=sha1 -Wl,-z,defs -Wl,-z,nodelete -fuse-ld=gold -flto=thin
-Wl,--warn-shared-textrel -Wl,--as-needed
-Wl,--version-script=/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/src/exports_so.txt
-static-libgcc -Wl,-z,noexecstack -shared -Wl,-soname,libomp.so -o
lib64/libomp.so projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_alloc.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_atomic.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_csupport.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_debug.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_itt.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_environment.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_error.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_global.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_i18n.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_io.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_runtime.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_settings.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_str.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_tasking.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_threadprivate.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_utility.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_barrier.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_wait_release.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_affinity.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_dispatch.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_lock.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_sched.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/z_Linux_util.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_gsupport.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/thirdparty/ittnotify/ittnotify_static.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_taskdeps.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_cancel.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_ftn_cdecl.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_ftn_extra.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/kmp_version.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/ompt-general.cpp.o
projects/openmp/runtime/src/CMakeFiles/omp.dir/z_Linux_asm.S.o  -lpthread  -ldl
&& cd /home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/build/lib64 && /usr/bin/cmake
-E create_symlink libomp.so libgomp.so && /usr/bin/cmake -E create_symlink
libomp.so libiomp5.so && cd
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/build/projects/openmp/runtime/src
&& /usr/bin/cmake -E make_directory
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/exports/common.dia.ompt.optional/include
&& /usr/bin/cmake -E copy omp.h
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/exports/common.dia.ompt.optional/include
&& cd
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/build/projects/openmp/runtime/src
&& /usr/bin/cmake -E copy omp-tools.h
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/exports/common.dia.ompt.optional/include
&& cd
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/build/projects/openmp/runtime/src
&& /usr/bin/cmake -E make_directory
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/exports/lin_aarch64.dia.ompt.optional/lib
&& /usr/bin/cmake -E copy
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/build/lib64/libomp.so
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/runtime/exports/lin_aarch64.dia.ompt.optional/lib
[ 3583s] [5459/5812] : &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -fPIC -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -Wall -Wcast-qual
-Wformat-pedantic -Wimplicit-fallthrough -Wsign-compare -Wno-extra
-Wno-pedantic -std=gnu++14 -O2 -g -DNDEBUG  -Wl,--as-needed -Wl,--build-id=sha1
-Wl,-z,defs -Wl,-z,nodelete -fuse-ld=gold -flto=thin -shared
-Wl,-soname,libomptarget.so -o lib64/libomptarget.so
projects/openmp/libomptarget/src/CMakeFiles/omptarget.dir/api.cpp.o
projects/openmp/libomptarget/src/CMakeFiles/omptarget.dir/device.cpp.o
projects/openmp/libomptarget/src/CMakeFiles/omptarget.dir/interface.cpp.o
projects/openmp/libomptarget/src/CMakeFiles/omptarget.dir/rtl.cpp.o
projects/openmp/libomptarget/src/CMakeFiles/omptarget.dir/omptarget.cpp.o  -ldl

-Wl,--version-script=/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/projects/openmp/libomptarget/src/exports
&& :
[ 3583s] [5460/5812] : && /usr/bin/cmake -E rm -f lib64/libarcher_static.a &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/llvm-ar Dqc
lib64/libarcher_static.a
projects/openmp/tools/archer/CMakeFiles/archer_static.dir/ompt-tsan.cpp.o &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/llvm-ranlib -D
lib64/libarcher_static.a && :
[ 3587s] [5461/5812] : &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -fPIC -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -Wall -Wcast-qual
-Wformat-pedantic -Wimplicit-fallthrough -Wsign-compare -Wno-extra
-Wno-pedantic -std=gnu++14 -O2 -g -DNDEBUG  -Wl,--as-needed -Wl,--build-id=sha1
-Wl,-z,defs -Wl,-z,nodelete -fuse-ld=gold -flto=thin -shared
-Wl,-soname,libarcher.so -o lib64/libarcher.so
projects/openmp/tools/archer/CMakeFiles/archer.dir/ompt-tsan.cpp.o   && :
[ 3620s] [5462/5812]
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -D_GNU_SOURCE
-D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS
-Itools/llvm-readobj -I../tools/llvm-readobj -Iinclude -I../include -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -O2 -g -DNDEBUG  -fno-exceptions
-std=c++14 -MD -MT
tools/llvm-readobj/CMakeFiles/llvm-readobj.dir/ELFDumper.cpp.o -MF
tools/llvm-readobj/CMakeFiles/llvm-readobj.dir/ELFDumper.cpp.o.d -o
tools/llvm-readobj/CMakeFiles/llvm-readobj.dir/ELFDumper.cpp.o -c
../tools/llvm-readobj/ELFDumper.cpp
[ 3784s] [5463/5812] : &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/clang++ -O2 -Wall
-D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables  -Werror=return-type -DNDEBUG -fPIC
-fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter -Wwrite-strings
-Wcast-qual -Wmissing-field-initializers -pedantic -Wno-long-long
-Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin -O2 -g -DNDEBUG -Wl,--as-needed
-Wl,--build-id=sha1 -fuse-ld=gold -flto=thin -Wl,-allow-shlib-undefined
-Wl,-O3 -Wl,--gc-sections
tools/lli/ChildTarget/CMakeFiles/lli-child-target.dir/ChildTarget.cpp.o -o
bin/lli-child-target  -Wl,-rpath,"\$ORIGIN/../lib64"  lib64/libLLVMOrcError.a
lib64/libLLVMOrcJIT.a  lib64/libLLVMRuntimeDyld.a  lib64/libLLVMSupport.a
-lpthread  lib64/libLLVMOrcError.a  lib64/libLLVMExecutionEngine.a
lib64/libLLVMRuntimeDyld.a  lib64/libLLVMJITLink.a  lib64/libLLVMPasses.a
lib64/libLLVMCoroutines.a  lib64/libLLVMipo.a  lib64/libLLVMInstrumentation.a
lib64/libLLVMScalarOpts.a  lib64/libLLVMAggressiveInstCombine.a
lib64/libLLVMInstCombine.a  lib64/libLLVMVectorize.a
lib64/libLLVMFrontendOpenMP.a  lib64/libLLVMIRReader.a
lib64/libLLVMAsmParser.a  lib64/libLLVMLinker.a  lib64/libLLVMTarget.a
lib64/libLLVMTransformUtils.a  lib64/libLLVMBitWriter.a
lib64/libLLVMAnalysis.a  lib64/libLLVMObject.a  lib64/libLLVMBitReader.a
lib64/libLLVMMCParser.a  lib64/libLLVMMC.a  lib64/libLLVMDebugInfoCodeView.a
lib64/libLLVMDebugInfoMSF.a  lib64/libLLVMTextAPI.a  lib64/libLLVMProfileData.a
 lib64/libLLVMCore.a  lib64/libLLVMBinaryFormat.a  lib64/libLLVMRemarks.a
lib64/libLLVMBitstreamReader.a  lib64/libLLVMSupport.a  -lz  -lrt  -ldl
-lpthread  -lm  lib64/libLLVMDemangle.a && :
[ 3785s] [5464/5812] : && /usr/bin/cmake -E rm -f lib64/libLLVMExegesis.a &&
/home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/llvm-ar Dqc
lib64/libLLVMExegesis.a
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/Analysis.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/Assembler.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/BenchmarkResult.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/BenchmarkRunner.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/Clustering.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/CodeTemplate.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/Error.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/LatencyBenchmarkRunner.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/LlvmState.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/MCInstrDescView.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/ParallelSnippetGenerator.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/PerfHelper.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/RegisterAliasing.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/RegisterValue.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/SchedClassResolution.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/SerialSnippetGenerator.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/SnippetFile.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/SnippetGenerator.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/SnippetRepetitor.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/Target.cpp.o
tools/llvm-exegesis/lib/CMakeFiles/LLVMExegesis.dir/UopsBenchmarkRunner.cpp.o
&& /home/abuild/rpmbuild/BUILD/llvm-11.0.0.src/stage1/bin/llvm-ranlib -D
lib64/libLLVMExegesis.a && :

summary: llvm11 build hangs on aarch64


--1603486280.a4c3450.8066
Date: Fri, 23 Oct 2020 20:51:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178085

            Bug ID: 1178085
           Summary: openSUSE:Factory/rss2email: No longer working after update to feedparser 6.0.x
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: 3rd party software
          Assignee: dleuenberger-at-suse.com
          Reporter: karl-at-huftis.org
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After the recent update to feedparser 6.0.x, rss2email (r2e) no longer works.
Running it results in an error message:

$ r2e run
Traceback (most recent call last):
  File "/usr/bin/r2e", line 5, in <module>
    rss2email.main.run()
  File "/usr/lib/python3.8/site-packages/rss2email/main.py", line 186, in run
    args.func(feeds=feeds, args=args)
  File "/usr/lib/python3.8/site-packages/rss2email/command.py", line 90, in run
    feed.run(send=args.send)
  File "/usr/lib/python3.8/site-packages/rss2email/feed.py", line 897, in run
    for (guid, state, sender, message) in self._process(parsed):
  File "/usr/lib/python3.8/site-packages/rss2email/feed.py", line 381, in
_process
    self._check_for_errors(parsed)
  File "/usr/lib/python3.8/site-packages/rss2email/feed.py", line 436, in
_check_for_errors
    elif isinstance(exc, _feedparser.zlib.error):
AttributeError: module 'feedparser' has no attribute 'zlib'

This seems to be fixed upstream:
https://github.com/rss2email/rss2email/pull/149


--1603615033.330B0.26721
Date: Sun, 25 Oct 2020 08:37:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178103

            Bug ID: 1178103
           Summary: py2pack: Fault -32500: 'HTTPTooManyRequests
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I am running python3-py2pack-0.8.4-lp152.1.1.noarch on openSUSE Leap 15.2 and
see the following issue during any (fetch, generate) py2pack command:

Actual result:

> py2pack fetch numpy
Traceback (most recent call last):
  File "/usr/bin/py2pack", line 10, in <module>
    sys.exit(main())
  File "/usr/lib/python3.6/site-packages/py2pack/__init__.py", line 350, in
main
    args.func(args)
  File "/usr/lib/python3.6/site-packages/py2pack/__init__.py", line 86, in
fetch
    check_or_set_version(args)
  File "/usr/lib/python3.6/site-packages/py2pack/__init__.py", line 273, in
check_or_set_version
    args.version = pypi.package_releases(args.name)[0]              # return
first (current) release number
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 1112, in __call__
    return self.__send(self.__name, args)
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 1452, in __request
    verbose=self.__verbose
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 1154, in request
    return self.single_request(host, handler, request_body, verbose)
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 1170, in single_request
    return self.parse_response(resp)
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 1342, in parse_response
    return u.close()
  File "/usr/lib64/python3.6/xmlrpc/client.py", line 656, in close
    raise Fault(**self._stack[0])
xmlrpc.client.Fault: <Fault -32500: 'HTTPTooManyRequests: The action could not
be performed because there were too many requests by the client. Limit may
reset in 0 seconds.'>

Expected result:

sources are downloaded and spec file is generated.


--1603701948.DC1Ff0.27382
Date: Mon, 26 Oct 2020 08:45:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178116

            Bug ID: 1178116
           Summary: [DupBin] blacs-devel-headers generated by multiple source packages
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

blacs-devel-headers:
  - scalapack:openmpi3
  - scalapack:openmpi4

i.e. blacs-devel-headers is an output binary package of both listed source
packages.

The result in the download repo is not defined: it could be either one (but
always only one!) of those two being published.


body:
--1603727890.db653Fb0.24715
Date: Mon, 26 Oct 2020 15:58:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178141

            Bug ID: 1178141
           Summary: Enable qemu modularization with virt-manager tweak
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: brogers-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 842997
  --> http://bugzilla.opensuse.org/attachment.cgi?id=842997&action=edit
patch for qemu spice modularization detection

This issue relates to boo#1175320, but I didn't want to re-open that bug,
because it was already dealing with multiple different issues and fixes.

qemu has begun modularizing it's functionality which provides multiple
benefits, but the changes to the virtualization tools stack to correctly deal
with this change have not yet happened. virt-manager, libvirt, and even more
qemu changes are needed to handle this modularization properly.

The additional qemu and libvirt work will take time, but I see a fairly
straight forward fix for virt-manager to resolve this issue.

virt-manager doesn't really have much smarts built in for choosing whether to
use spice and spice related features vs vnc features when choosing an x86
default installation configuration. It doesn't really probe libvirt for this
decision. Given this it's easy to add just a little more smarts there to make
the correct decision whether spice or vnc is the way to go.

I propose adding code to virt-manager to better detect whether qemu as
currently installed will provide the needed defaults for virt-manager's
spice-based install, and if so, continue to choose spice, else back off to vnc.
With this change in place, qemu can undo the work around of boo#1175320 of
using the packaging Requires for qemu-hw-display-qxl and qemu-usb-redirect, and
use Recommends again, enabling the benefits of that modularization.

I've attached the proposed virt-manager patch with this bug report.
A virt-manager built with this can be found at
https://build.opensuse.org/package/show/home:bfrogers:branches:Virtualization/virt-manager

(Note that the in-progress v5.2 qemu further modularizes the spice pieces in
qemu, so an additional tweak will be required for handling v5.2 when it comes
out)

pkgs: qemu virt-manager


--1603810136.7DDBaeC0.32146
Date: Tue, 27 Oct 2020 14:48:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1178196

            Bug ID: 1178196
           Summary: VUL-0: CVE-2020-15238: blueman: Local privilege escalation in org.blueman.Mechanism D-Bus interface
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/270276/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-15238

The DhcpClient method of the D-Bus interface to blueman-mechanism is prone to
an argument injection vulnerability.

The impact highly depends on the system configuration.

If Polkit-1 is disabled and for versions lower than 2.0.6, any local user can
possibly exploit this. If Polkit-1 is enabled for version 2.0.6 and later, a
possible attacker needs to be allowed to use the org.blueman.dhcp.client
action. That is limited to users in the wheel group in the shipped rules file
that do have the privileges anyway.

On systems with ISC DHCP client (dhclient), attackers can pass arguments to ip
link with the interface name that can e.g. be used to bring down an interface
or add an arbitrary XDP/BPF program.

On systems with dhcpcd and without ISC DHCP client, attackers can even run
arbitrary scripts by passing -c/path/to/script as an interface name.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-15238
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-15238.html
https://bugs.launchpad.net/ubuntu/+source/blueman/+bug/1897287
https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx