--1517560454.0ffc3a1.26336
Date: Fri, 2 Feb 2018 08:34:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1078997

            Bug ID: 1078997
           Summary: libstorage-ng  fails to build on armv6 and armv7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: guillaume.gardet-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

As reported on github: https://github.com/openSUSE/libstorage-ng/issues/440

armv7l and armv6l fails in OBS:
https://build.opensuse.org/package/show/openSUSE:Factory:ARM/libstorage-ng
Because humanstring.test fails in 'make check-TESTS'.

Here is the testsuite/Utils/humanstring.log:
Running 4 test cases...
humanstring.cc(139): error: in "test_big_numbers": check test("en_GB.UTF-8", 16
* EiB - 1 * B, true, 2, true) == "16.00 EiB" has failed [16 EiB != 16.00 EiB]
humanstring.cc(143): error: in "test_big_numbers": exception OverflowException
expected but not raised
humanstring.cc(144): error: in "test_big_numbers": exception OverflowException
expected but not raised

*** 3 failures are detected in the test module "libstorage"
FAIL humanstring.test (exit status: 201)

This is very annoying since YaST modules using libstorage-ng are not buildable.
We are not able to build new ARM images.


body:
--1517578296.De8BFED4.7889
Date: Fri, 2 Feb 2018 13:31:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079083

            Bug ID: 1079083
           Summary: ship current osc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: marco.strigl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

bug tracker for shipping current osc 0.162.1 (needed for sha256 verification)

summary: ship current osc


--1517581323.75F2Faf0.31169
Date: Fri, 2 Feb 2018 14:22:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079100

            Bug ID: 1079100
           Summary: VUL-0: CVE-2018-6544: mupdf: denial of service in pdf_load_obj_stm in pdf/pdf-xref.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199377/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: idonmez-at-suse.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-6544

pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the
object stream recursively and therefore run out of error stack, which allows
remote attackers to cause a denial of service via a crafted PDF document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6544
https://bugs.ghostscript.com/show_bug.cgi?id=698965
https://bugs.ghostscript.com/show_bug.cgi?id=698830
http://git.ghostscript.com/?p=mupdf.git;h=b03def134988da8c800adac1a38a41a1f09a1d89
http://git.ghostscript.com/?p=mupdf.git;h=26527eef77b3e51c2258c8e40845bfbc015e405d


--1517673281.040A41E0.7071
Date: Sat, 3 Feb 2018 15:54:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079221

            Bug ID: 1079221
           Summary: Leap 15.0 Beta - problems within VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: linuxkamarada-at-gmail.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

I use openSUSE Leap 42.3.

I downloaded openSUSE Leap 15.0 NET install to give it a try and created two
virtual machines in VirtualBox: one for KDE and the other for GNOME.

========================================
1) Information regarding both VMs
----------------------------------------

Both virtual machines render 640x480 and resizing the host window does not
resize the guest screen. Bidirectional clipboard works, so I know VirtualBox
guest additions are somehow working.

From https://forums.virtualbox.org/viewtopic.php?f=3&t=84652#p402321 :

"Hi, from other posts in the forums, it seems that there is an issue with VBox
video driver and X11 1.19.x, the virtual machine will work but the video will
not be able to be resized. We are awaiting any confirmation from
development..."

Both VMs have version 5.2.6 of virtualbox-guest-kmp-default installed:

# zypper info virtualbox-guest-kmp-default
Loading repository data...
Warning:
Repository 'openSUSE-Leap-15.0-Update' appears to be outdated. Consider using a
different mirror or server.
Reading installed packages...

Information for package virtualbox-guest-kmp-default:
-----------------------------------------------------
Repository     : openSUSE-Leap-15.0-1
Name           : virtualbox-guest-kmp-default
Version        : 5.2.6_k4.12.14_lp150.4-lp150.1.2
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 646.7 KiB
Installed      : Yes (automatically)
Status         : up-to-date
Source package : virtualbox-5.2.6-lp150.1.2.src
Summary        : Guest kernel modules for VirtualBox
Description    :
    VirtualBox is an extremely feature rich, high performance product
    for enterprise customers, it is also the only professional solution
    that is freely available as Open Source Software under the terms of the
    GNU Public License (GPL).

As well as version 5.2.6 of virtualbox-guest-x11:

# zypper info virtualbox-guest-x11
Loading repository data...
Warning: Repository 'openSUSE-Leap-15.0-Update' appears to be outdated.
Consider using a different mirror or server.
Reading installed packages...

Information for package virtualbox-guest-x11:
---------------------------------------------
Repository     : openSUSE-Leap-15.0-1
Name           : virtualbox-guest-x11
Version        : 5.2.6-lp150.1.2
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 6.3 MiB
Installed      : Yes (automatically)
Status         : up-to-date
Source package : virtualbox-5.2.6-lp150.1.2.src
Summary        : VirtualBox X11 drivers for mouse and video
Description    :
    VirtualBox
    This package contains X11 guest utilities and X11 guest mouse and video
drivers

========================================
2) KDE VM
----------------------------------------

Except for the fact that the display cannot be resized from 640x480, the KDE VM
works fine. Adding info from /var/log/Xorg.0.log :

...

[    26.329] (==) Matched vboxvideo as autoconfigured driver 0
[    26.329] (==) Matched modesetting as autoconfigured driver 1
[    26.329] (==) Matched fbdev as autoconfigured driver 2
[    26.329] (==) Matched vesa as autoconfigured driver 3
[    26.329] (==) Assigned the driver to the xf86ConfigLayout
[    26.329] (II) LoadModule: "vboxvideo"
[    26.343] (WW) Warning, couldn't open module vboxvideo
[    26.343] (II) UnloadModule: "vboxvideo"
[    26.343] (II) Unloading vboxvideo
[    26.343] (EE) Failed to load module "vboxvideo" (module does not exist, 0)

...

[    26.366] (**) FBDEV(1): claimed PCI slot 0@0:2:0
[    26.366] (II) FBDEV(1): using default device
[    26.366] (WW) Falling back to old probe method for vesa
[    26.366] (EE) Screen 0 deleted because of no matching config section.
[    26.366] (II) UnloadModule: "modesetting"
[    26.366] (II) FBDEV(0): Creating default Display subsection in
Screen section
       "Default Screen Section" for depth/fbbpp 24/32
[    26.366] (==) FBDEV(0): Depth 24, (==) framebuffer bpp 32
[    26.366] (==) FBDEV(0): RGB weight 888
[    26.366] (==) FBDEV(0): Default visual is TrueColor
[    26.366] (==) FBDEV(0): Using gamma correction (1.0, 1.0, 1.0)
[    26.366] (II) FBDEV(0): hardware: VESA VGA (video memory: 1216kB)
[    26.366] (II) FBDEV(0): checking modes against framebuffer device...
[    26.366] (II) FBDEV(0): checking modes against monitor...
[    26.366] (--) FBDEV(0): Virtual size is 640x480 (pitch 640)

...

It seems that I'm actually using fbdev as Xorg driver.

Note that line:

[    26.343] (EE) Failed to load module "vboxvideo" (module does not exist, 0)

========================================
3) GNOME VM
----------------------------------------

The GNOME VM has another problem: I'm not able to enter the GNOME desktop. When
the system boots up, GDM is shown, I enter username and password and hit Enter.
The screen goes black and then it comes back to GDM.

The GNOME VM does not produce /var/log/Xorg.0.log .

/var/lib/gdm/.local/share/xorg/Xorg.0.log :

...

[    44.335] (==) Matched vboxvideo as autoconfigured driver 0
[    44.335] (==) Matched modesetting as autoconfigured driver 1
[    44.335] (==) Matched fbdev as autoconfigured driver 2
[    44.335] (==) Matched vesa as autoconfigured driver 3
[    44.335] (==) Assigned the driver to the xf86ConfigLayout
[    44.335] (II) LoadModule: "vboxvideo"
[    44.335] (WW) Warning, couldn't open module vboxvideo
[    44.335] (II) UnloadModule: "vboxvideo"
[    44.335] (II) Unloading vboxvideo
[    44.335] (EE) Failed to load module "vboxvideo" (module does not exist, 0)

...

[    44.336] (II) Module fbdevhw: vendor="X.Org Foundation"
[    44.336]    compiled for 1.19.6, module version = 0.0.2
[    44.336]    ABI class: X.Org Video Driver, version 23.0
[    44.336] (**) FBDEV(1): claimed PCI slot 0@0:2:0
[    44.336] (II) FBDEV(1): using default device
[    44.336] (WW) Falling back to old probe method for vesa
[    44.336] (WW) VGA arbiter: cannot open kernel arbiter, no multi-card
support
[    44.336] (EE) Screen 0 deleted because of no matching config section.
[    44.336] (II) UnloadModule: "modesetting"
[    44.336] (II) FBDEV(0): Creating default Display subsection in Screen
section
        "Default Screen Section" for depth/fbbpp 24/32
[    44.336] (==) FBDEV(0): Depth 24, (==) framebuffer bpp 32
[    44.336] (==) FBDEV(0): RGB weight 888
[    44.336] (==) FBDEV(0): Default visual is TrueColor
[    44.336] (==) FBDEV(0): Using gamma correction (1.0, 1.0, 1.0)
[    44.336] (II) FBDEV(0): hardware: VESA VGA (video memory: 1216kB)
[    44.336] (II) FBDEV(0): checking modes against framebuffer device...
[    44.336] (II) FBDEV(0): checking modes against monitor...
[    44.336] (--) FBDEV(0): Virtual size is 640x480 (pitch 640)

...

Same as the KDE VM: it is using the fbdev Xorg driver.

But ~/.local/share/xorg/Xorg.0.log shows something different:

...

[    24.376] (==) Matched vboxvideo as autoconfigured driver 0
[    24.376] (==) Matched modesetting as autoconfigured driver 1
[    24.376] (==) Matched fbdev as autoconfigured driver 2
[    24.376] (==) Matched vesa as autoconfigured driver 3
[    24.376] (==) Assigned the driver to the xf86ConfigLayout
[    24.376] (II) LoadModule: "vboxvideo"
[    24.383] (WW) Warning, couldn't open module vboxvideo
[    24.383] (II) UnloadModule: "vboxvideo"
[    24.383] (II) Unloading vboxvideo
[    24.383] (EE) Failed to load module "vboxvideo" (module does not exist, 0)

...

[    24.412] (II) Module fbdevhw: vendor="X.Org Foundation"
[    24.412]    compiled for 1.19.6, module version = 0.0.2
[    24.412]    ABI class: X.Org Video Driver, version 23.0
[    24.412] (EE) open /dev/fb0: Permission denied
[    24.412] (WW) VGA arbiter: cannot open kernel arbiter, no multi-card
support
[    24.412] (EE) Screen 0 deleted because of no matching config section.
[    24.412] (II) UnloadModule: "modesetting"
[    24.412] (EE) Screen 0 deleted because of no matching config section.
[    24.412] (II) UnloadModule: "fbdev"
[    24.412] (II) UnloadSubModule: "fbdevhw"
[    24.412] (II) Loading sub module "vbe"
[    24.412] (II) LoadModule: "vbe"
[    24.413] (II) Loading /usr/lib64/xorg/modules/libvbe.so
[    24.413] (II) Module vbe: vendor="X.Org Foundation"
[    24.413]    compiled for 1.19.6, module version = 1.1.0
[    24.413]    ABI class: X.Org Video Driver, version 23.0
[    24.414] (II) Loading sub module "int10"
[    24.414] (II) LoadModule: "int10"
[    24.414] (II) Loading /usr/lib64/xorg/modules/libint10.so
[    24.415] (II) Module int10: vendor="X.Org Foundation"
[    24.415]    compiled for 1.19.6, module version = 1.0.0
[    24.415]    ABI class: X.Org Video Driver, version 23.0
[    24.415] (II) VESA(0): initializing int10
[    24.415] (EE) VESA(0): Cannot read int vect
[    24.415] (II) UnloadModule: "vesa"
[    24.415] (II) UnloadSubModule: "int10"
[    24.415] (II) Unloading int10
[    24.415] (II) UnloadSubModule: "vbe"
[    24.415] (II) Unloading vbe
[    24.415] (EE) Screen(s) found, but none have a usable configuration.
[    24.415] (EE)
Fatal server error:
[    24.415] (EE) no screens found(EE)
[    24.415] (EE)
Please consult the The X.Org Foundation support
         at http://wiki.x.org
 for help.
[    24.415] (EE) Please also check the log file at
"/home/kamarada/.local/share/xorg/Xorg.0.log" for additional information.
[    24.415] (EE)
[    24.419] (EE) Server terminated with error (1). Closing log file.

I didn't find helpful information on journalctl. Basically it contains those
two log files.

I already tried using a different display manager, like lightdm. The result is
similar: I get to the display manager, but not to the GNOME desktop.

========================================
4) Live image
----------------------------------------

Also related, I'm trying to build a live image for openSUSE Leap 15.0 Beta with
KDE desktop using OBS + KIWI NG.

Download:
https://api.opensuse.org/build/home:livesuse:15.0:dev/images/x86_64/Li
veSUSE-Leap-KDE/LiveSUSE-Leap-15.0-KDE.x86_64-15.0.2018020201-Build13.1.iso

Source:
https://build.opensuse.org/package/show/home:livesuse:15.0:dev/LiveSUSE-
Leap-KDE

If I boot it within VirtualBox, it should autologin the linux user and show the
KDE desktop. Instead, it shows tty1. The only way to get to KDE is logging in
as
root and then running startx. Except for that, everything seems to be fine.

/var/log/Xorg.0.log does not exist and journalctl does not show useful
information to debug why SDDM does not show up.

========================================
5) More information
----------------------------------------

This bug report comes from a discussion on the opensuse-factory mailing list:

https://lists.opensuse.org/opensuse-factory/2018-02/msg00093.html

https://lists.opensuse.org/opensuse-factory/2018-02/msg00094.html


--1517813668.5735b5.32571
Date: Mon, 5 Feb 2018 06:54:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1079287

            Bug ID: 1079287
           Summary: python-Markdown lacks dependency on python-setuptools
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

+BuildRequires:  python-Markdown
 %prep
 %setup -q
+> README.md
+markdown_py -o html5 README.md > README.html

[   15s] + markdown_py -o html5 README.md
[   15s] Traceback (most recent call last):
[   15s]   File "/usr/bin/markdown_py", line 6, in <module>
[   15s]     from pkg_resources import load_entry_point
[   15s] ImportError: No module named pkg_resources


--1517825780.482f05.19349
Date: Mon, 5 Feb 2018 10:16:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079320

            Bug ID: 1079320
           Summary: [Build 20180203] openQA test fails in NM_wpa2_enterprise
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/601692/modules/NM_wp
                    a2_enterprise/steps/26
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_on_gnome@64bit fails in
[NM_wpa2_enterprise](https://openqa.opensuse.org/tests/601692/modules/NM_wpa2_enterprise/steps/26)

## Reproducible

Fails since (at least) Build
[20170531](https://openqa.opensuse.org/tests/412233)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?machine=64bit&flavor=DVD&version=Tumbleweed&distri=opensuse&test=extra_tests_on_gnome&arch=x86_64)

This seems to be an interaction issue between GNOME Control Center and
NetworkManager 1.10 (?)

As can be seen in the screenshots, the connection has been established, just
g-c-c seems not able to show the status (something which somehow I could not
yet reprodcue on my own machine)


body:
--1517832098.0CE5d0.24608
Date: Mon, 5 Feb 2018 12:01:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079342

            Bug ID: 1079342
           Summary: Add back provides into libpng16 package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: pgajdos-at-suse.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/request/show/571330 removed the Provides: libpng >=
1.6

This seems to be used by some thirdparty packages.

Problem: sublime-text-3156-1.x86_64 requires libpng >= 1.6, but this
requirement cannot be provided
  deleted providers: libpng16-16-1.6.31-1.3.x86_64
 Solution 1: deinstallation of sublime-text-3156-1.x86_64
 Solution 2: keep obsolete libpng16-16-1.6.31-1.3.x86_64
 Solution 3: break sublime-text-3156-1.x86_64 by ignoring some of its
dependencies

summary: Add back provides into libpng16 package


--1517834475.AfB30.11365
Date: Mon, 5 Feb 2018 12:41:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079349

            Bug ID: 1079349
           Summary: VUL-0: CVE-2018-6612: jhead: An integer underflow bug in the process_EXIF function of the exif.c file of raises a heap-based buffer over-read when processing a malicious JPEGfile, which may allow a remote attacker to cause a DoS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199476/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: toganm-at-dinamizm.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-6612

An integer underflow bug in the process_EXIF function of the exif.c file of
jhead 3.00 raises a heap-based buffer over-read when processing a malicious
JPEG
file, which may allow a remote attacker to cause a denial-of-service attack or
unspecified other impact.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6612
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889272
https://launchpad.net/ubuntu/+source/jhead/1:3.00-6


--1517837761.d0fD0b110.25656
Date: Mon, 5 Feb 2018 13:36:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079358

            Bug ID: 1079358
           Summary: VUL-1: CVE-2018-3836 leptonica: gplotMakeOutput command injection
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199482/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: lazy.kent-at-opensuse.org
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1542005

An exploitable command injection vulnerability exists in the gplotMakeOutput
function of Leptonica 1.74.4. A specially crafted gplot rootname argument can
cause a command injection resulting in arbitrary code execution. An attacker
can provide a malicious path as input to an application that passes attacker
data to this function to trigger this vulnerability.

External References:

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0516

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1542005
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3836


--1517840957.fCa160.28699
Date: Mon, 5 Feb 2018 14:29:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079368

            Bug ID: 1079368
           Summary: VUL-0: CVE-2018-6621: ffmpeg: denial of service inside the decode_frame function in libavcodec/utvideodec.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199479/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-6621

The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.4.1
allows remote attackers to cause a denial of service (out of array read) via a
crafted AVI file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6621
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/118e1b0b3370dd1c0da442901b486689efd1654b


body:
--1517912774.10FEA4.8803
Date: Tue, 6 Feb 2018 10:26:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079543

            Bug ID: 1079543
           Summary: no cursor keys in midnight commander
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: marvin24-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I guess this is related to the last ncurses update. Using "TERM=xterm mc" makes
them work again. Terminal is konsole. xterm has the same problem when TERM set
to xterm-256color (default in konsole). Works fine in text console.

summary: no cursor keys in midnight commander


--1517927441.EeFA510.23827
Date: Tue, 6 Feb 2018 14:30:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1079600

            Bug ID: 1079600
           Summary: VUL-1: freetype2: Integer overflow issues in src/truetype/ttinterp.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

freetype2 contains integer overflow issues in src/truetype/ttinterp.c
(Ins_MSIRP, Ins_MIAP, Ins_MIRP), which were already fixed upstream.

References:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6027
https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/truetype/ttinterp.c?id=4a03f17449ae45f0dacf4de4694ccd6e5e1b24d1


--1517927617.264bbDE521.23827
Date: Tue, 6 Feb 2018 14:33:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1079601

            Bug ID: 1079601
           Summary: VUL-1: freetype2: Protection against invalid VF data
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There is an upstream commit handling invalid VF data more safely. This should
be applied to our product, since there is no new release of freetype2.

References:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5739
https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/truetype/ttgxvar.c?id=68dddcdcbe18a08d778026efc01b1369e35cbf6a


--1517927825.6a1a9.25306
Date: Tue, 6 Feb 2018 14:37:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1079603

            Bug ID: 1079603
           Summary: VUL-1: freetype: Avoid NULL reference in src/truetype/ttinterp.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There is an upstream commit to avoid NULL references in src/truetype/ttinterp.c

References:
https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/truetype/ttinterp.c?id=29c759284e305ec428703c9a5831d0b1fc3497ef
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736


--1517952110.DC2fecB0.30399
Date: Tue, 6 Feb 2018 21:21:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079672

            Bug ID: 1079672
           Summary: NetworkManager does not automatically connect to WLAN anymore
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: fkrueger-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Given KDE Plasma 5.11.95, after updating to NM 1.10.2 (TW20180203) it does not
connect automatically to my WLAN anymore, even though the option "Automatically
connect to this network when it is available” in the KDE Network applet is
chosen. In fact, it tries to connect, but quits after a while with the message
"no password provided", even though its there (I am using Kwallet).

I have to connect manually by using the "connect" button in the KDE Network
applet.


--1517988327.bc8fe2ba0.476
Date: Wed, 7 Feb 2018 07:25:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079744

            Bug ID: 1079744
           Summary: Java throws exception on start of oowriter
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LibreOffice
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: Ulrich.Windl-at-rz.uni-regensburg.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After installing the LO Upgrade 5.3 -> 5.4 (libreoffice-5.4.4.2-12.6.x86_64), a
Java exception was thrown on the first start:
Exception in thread "Thread-0" java.lang.NoClassDefFoundError:
com/sun/star/loader/XImplementationLoader
    at java.lang.ClassLoader.defineClass1(Native Method)
    at java.lang.ClassLoader.defineClass(ClassLoader.java:763)
    at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
    at java.net.URLClassLoader.defineClass(URLClassLoader.java:467)
    at java.net.URLClassLoader.access$100(URLClassLoader.java:73)
    at java.net.URLClassLoader$1.run(URLClassLoader.java:368)
    at java.net.URLClassLoader$1.run(URLClassLoader.java:362)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:361)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
Caused by: java.lang.ClassNotFoundException:
com.sun.star.loader.XImplementationLoader
    at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
    ... 11 more
Exception in thread "Thread-0" java.lang.NoClassDefFoundError:
com/sun/star/loader/XImplementationLoader
    at java.lang.ClassLoader.defineClass1(Native Method)
    at java.lang.ClassLoader.defineClass(ClassLoader.java:763)
    at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
    at java.net.URLClassLoader.defineClass(URLClassLoader.java:467)
    at java.net.URLClassLoader.access$100(URLClassLoader.java:73)
    at java.net.URLClassLoader$1.run(URLClassLoader.java:368)
    at java.net.URLClassLoader$1.run(URLClassLoader.java:362)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:361)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
Caused by: java.lang.ClassNotFoundException:
com.sun.star.loader.XImplementationLoader
    at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
    ... 11 more

The system has Java 1.8.0_151 and 1.7.0_161 installed, and it's not obvious
from LO settings which JRE is being used. In a terminal "java -version" prints:
OpenJDK Runtime Environment (IcedTea 3.6.0) (build 1.8.0_151-b12
suse-18.1-x86_64)
OpenJDK 64-Bit Server VM (build 25.151-b12, mixed mode)


--1517989397.DBdA13.3870
Date: Wed, 7 Feb 2018 07:43:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079747

            Bug ID: 1079747
           Summary: Kernel 4.15 seems often to stall the OBS workers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the upgrade to Kernel 4.15, I see a much increased number of 'stalled'
OBS workers.

The stall happens in various packages, most prominently, llvm5, ceph,
libreoffice and java-9-openjdk. Most of the time, they are 'fine' after several
attempts.

There seems to be one package reliably reproducing it: tar on i586

https://build.opensuse.org/package/live_build_log/openSUSE:Factory/tar/standard/i586

I'm CCing Adrian (OBS Admin) here, as he will likely be the only person that
can provide traces from the VM, at the time this happens.


body:
--1517992139.2afA000.15561
Date: Wed, 7 Feb 2018 08:28:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079756

            Bug ID: 1079756
           Summary: [glibc2.27] xfsprogs fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
        Depends on: 1079754
            Blocks: 1079753
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - xfsprogs is amongst the
packages failing to build

from the build log

[  105s] copy_file_range.c:46:1: error: conflicting types for 'copy_file_range'
[  105s]  copy_file_range(int fd, loff_t *src, loff_t *dst, size_t len)
[  105s]  ^~~~~~~~~~~~~~~
[  105s] In file included from ../include/platform_defs.h:33:0,
[  105s]                  from ../include/project.h:21,
[  105s]                  from ../include/input.h:24,
[  105s]                  from copy_file_range.c:23:
[  105s] /usr/include/unistd.h:1110:9: note: previous declaration of
'copy_file_range' was here
[  105s]  ssize_t copy_file_range (int __infd, __off64_t *__pinoff,
[  105s]          ^~~~~~~~~~~~~~~

Full build log at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C/xfsprogs/standard/x86_64

summary: [glibc2.27] xfsprogs fails to build


body:
--1517992280.aeb41af0.17065
Date: Wed, 7 Feb 2018 08:31:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079757

            Bug ID: 1079757
           Summary: [glibc2.27] postgresql10 fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - postgresql10 is amongst
the packages failing to build

[  186s] copy_fetch.c:159:1: error: conflicting types for 'copy_file_range'
[  186s]  copy_file_range(const char *path, off_t begin, off_t end, bool trunc)
[  186s]  ^~~~~~~~~~~~~~~
[  186s] In file included from copy_fetch.c:15:0:
[  186s] /usr/include/unistd.h:1110:9: note: previous declaration of
'copy_file_range' was here
[  186s]  ssize_t copy_file_range (int __infd, __off64_t *__pinoff,
[  186s]          ^~~~~~~~~~~~~~~

Full log at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C/postgresql10/standard/x86_64

summary: [glibc2.27] postgresql10 fails to build


body:
--1517993049.Fd3F0.21160
Date: Wed, 7 Feb 2018 08:44:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079761

            Bug ID: 1079761
           Summary: [glibc2.27] python3-base fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - python3-base is amongst
the packages failing to build

from the build log
[ 3308s] ======================================================================
[ 3308s] ERROR: test_float_with_comma (test.test_float.GeneralFloatCases)
[ 3308s] ----------------------------------------------------------------------
[ 3308s] Traceback (most recent call last):
[ 3308s]   File
"/home/abuild/rpmbuild/BUILD/Python-3.6.4/Lib/test/support/__init__.py", line
1588, in inner
[ 3308s]     return func(*args, **kwds)
[ 3308s]   File
"/home/abuild/rpmbuild/BUILD/Python-3.6.4/Lib/test/test_float.py", line 150, in
test_float_with_comma
[ 3308s]     if not locale.localeconv()['decimal_point'] == ',':
[ 3308s]   File "/home/abuild/rpmbuild/BUILD/Python-3.6.4/Lib/locale.py", line
110, in localeconv
[ 3308s]     d = _localeconv()
[ 3308s] UnicodeDecodeError: 'locale' codec can't decode byte 0xa0 in position
0: Invalid or incomplete multibyte or wide character
[ 3308s]
[ 3308s] ----------------------------------------------------------------------

Complete build log at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C/python3-base/standard/x86_64

summary: [glibc2.27] python3-base fails to build


--1518010592.AB14bEA0.8659
Date: Wed, 7 Feb 2018 13:36:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079832

            Bug ID: 1079832
           Summary: VUL-0: CVE-2018-6789: exim: Buffer overflow in an utility function
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199626/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Heiko Schlittermann:
CVE-2018-6789 Exim 4.90 and earlier
===================================

There is a buffer overflow in an utility function, if some pre-conditions
are met.  Using a handcrafted message, remote code execution seems to be
possible.

A patch exists already and is being tested.

Currently we're unsure about the severity, we *believe*, an exploit
is difficult. A mitigation isn't known.

Next steps:

* t0:     Distros will get access to our "security" non-public git repo
          (based on the SSH keys known to us)
* t0 +7d: Patch will be published on the official public git repo

t0 will be around 2018-02-08.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6789
http://seclists.org/oss-sec/2018/q1/133
https://exim.org/security/CVE-2018-6789.txt


body:
--1518011267.cbc2c3.10894
Date: Wed, 7 Feb 2018 13:47:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079838

            Bug ID: 1079838
           Summary: [glibc2.27] kbuild fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - kbuild is amongst the
packages failing to build

From the build log:

[   97s] chmod.o: In function `kmk_builtin_chmod':
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/kmkbuiltin/chmod.c:184:
warning: lchmod is not implemented and will always fail
[   97s] glob/libglob.a(glob.o): In function `glob_in_dir':
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:1386:
undefined reference to `__alloca'
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:1361:
undefined reference to `__alloca'
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:1302:
undefined reference to `__alloca'
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:1271:
undefined reference to `__alloca'
[   97s] glob/libglob.a(glob.o): In function `glob':
[   97s]
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:577:
undefined reference to `__alloca'
[   97s]
glob/libglob.a(glob.o):/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/src/kmk/glob/glob.c:728:
more undefined references to `__alloca' follow
[   97s] collect2: error: ld returned 1 exit status
[   97s] make[3]: *** [Makefile:749: kmk] Error 1
[   97s] make[3]: Leaving directory
'/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/out/linux.amd64/release/bootstrap/kmk'
[   97s] make[2]: *** [Makefile:1466: all-recursive] Error 1
[   97s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/out/linux.amd64/release/bootstrap/kmk'
[   97s] make[1]: *** [Makefile:649: all] Error 2
[   97s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/out/linux.amd64/release/bootstrap/kmk'
[   97s] make: *** [bootstrap.gmk:176:
/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110/out/linux.amd64/release/bootstrap/kmk/kmk]
Error 2
[   97s] kBuild/env.sh: info: rc=2: make -f bootstrap.gmk
SRCDIR=/home/abuild/rpmbuild/BUILD/kbuild-0.1.9998svn3110
[   97s] error: Bad exit status from /var/tmp/rpm-tmp.ofOyAV (%build)
[   97s]

complete log available at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C:DVD/kbuild/standard/x86_64

summary: [glibc2.27] kbuild fails to build


body:
--1518014518.B3b1e0.23714
Date: Wed, 7 Feb 2018 14:41:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079853

            Bug ID: 1079853
           Summary: [glibc2.27] libraw fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - libraw is amongst the
packages failing to build

From the build log:

[   43s] internal/dcraw_common.cpp:6830:80: error: call of overloaded
'powf64(int, int)' is ambiguous
[   43s]     10*(table_buf[iLensData+9]>>2) * powf64(4, (table_buf[iLensData+9]
& 0x03)-2);
[   43s]
         ^
[   43s] In file included from /usr/include/c++/7/cmath:45:0,
[   43s]                  from /usr/include/c++/7/math.h:36,
[   43s]                  from internal/dcraw_common.cpp:22:
[   43s] /usr/include/bits/mathcalls.h:140:1: note: candidate: _Float64
powf64(_Float64, _Float64)
[   43s]  __MATHCALL_VEC (pow,, (_Mdouble_ __x, _Mdouble_ __y));
[   43s]  ^

complete build log at
https://build.opensuse.org/build/openSUSE:Factory:Staging:C:DVD/standard/x86_64/libraw/_log

summary: [glibc2.27] libraw fails to build


--1518025836.53Be0.7095
Date: Wed, 7 Feb 2018 17:50:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1079905

            Bug ID: 1079905
           Summary: py2pack advertises obsolete upstream URL
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Documentation
          Assignee: fs-at-suse.com
          Reporter: giecrilj@stegny.2a.pl
        QA Contact: fs-at-suse.com
          Found By: ---
           Blocker: ---

Reading <URL: file:///usr/share/doc/packages/python-py2pack//README.rst >:
   :target: https://travis-ci.org/saschpe/py2pack

Travis CI:
    We couldn't find the repository
    saschpe/py2pack


--1518036989.B7241.14936
Date: Wed, 7 Feb 2018 20:56:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079924

            Bug ID: 1079924
           Summary: Kernel initrd is missing vmd.ko kernel module during and after installation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: valurolafsson-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

I tried installing Leap 42.3 on a new Dell Precision 7820 with a 1TB PCIe NVMe
Class 40 SSD, connected through a Front Flexbay system. During install, the
drive was not recognized/detected, which made it impossible for me to install
Leap 42.3 on to the system.

After looking into this, I found that the NVMe drive was connected through an
"Intel RAID bus controller". This controller required the vmd.ko kernel module
to function correctly during install.

After getting help from the forums on how to load vmd.ko during install
(https://forums.opensuse.org/showthread.php/528994-Unable-to-install-openSUSE-on-the-NVMe-disk-under-VMD-PCI-domain),
I made a Driver Update Disk with the vmd.ko kernel module. I was able to get it
to load before Yast installation was launched, so that I was able to see the
NVMe drive during install and the installation process for Leap 42.3 worked
perfectly.

However, after install I rebooted, and the system was not able to detect the
NVMe drive. I then booted into rescue mode (using my Driver Update Disk),
mounted the NVMe drive, made a '01-dist.conf' file in /etc/dracut.conf.d
containing the single line 'force_drivers+="vmd"', ran 'mkinitrd', and
rebooted. The system was then able to find the NVMe drive and booted correctly
into the freshly installed Leap 42.3.

I'm guessing that these types of PCIe controllers will become more common, as
more systems use PCIe NVMe drives. To avoid future complication installing
openSUSE on such systems, it would be advisable to include vmd.ko into the
initrd file (for both Leap 42.3 if possible, and any future Leap versions),
both for the installation media and after the system has been installed.

The controller in question has the following information after running 'hwinfo
--storage' on Leap 42.3 running on my system:
103: PCI 1705.5: 0104 RAID bus controller
  [Created at pci.378]
  Unique ID: 0siH.saXLQ4XDZNB
  SysFS ID: /devices/pci0000:17/0000:17:05.5
  SysFS BusID: 0000:17:05.5
  Hardware Class: storage
  Model: "Intel RAID bus controller"
  Vendor: pci 0x8086 "Intel Corporation"
  Device: pci 0x201d
  SubVendor: pci 0x8086 "Intel Corporation"
  SubDevice: pci 0x0000
  Revision: 0x04
  Driver: "vmd"
  Driver Modules: "vmd"
  Memory Range: 0x38007c000000-0x38007dffffff (ro,non-prefetchable)
  Memory Range: 0x92000000-0x93ffffff (rw,non-prefetchable)
  Memory Range: 0x38007ff00000-0x38007fffffff (rw,non-prefetchable)
  Module Alias: "pci:v00008086d0000201Dsv00008086sd00000000bc01sc04i00"
  Driver Info #0:
    Driver Status: vmd is active
    Driver Activation Cmd: "modprobe vmd"
  Config Status: cfg=no, avail=yes, need=no, active=unknown
As can be seen above, the controller needs the 'vmd' kernel module to function.


body:
--1518042671.C1Da0.31210
Date: Wed, 7 Feb 2018 22:31:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079938

            Bug ID: 1079938
           Summary: [glibc2.27] ffado fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - ffado is amongst the
packages failing to build

From the build log:

[  139s] In file included from src/libutil/IpcRingBuffer.h:37:0,
[  139s]                  from src/libutil/IpcRingBuffer.cpp:24:
[  139s] src/libutil/PosixMessageQueue.h:117:38: error: 'sigval_t' has not been
declared
[  139s]      static void notifyCallbackStatic(sigval_t t) {
[  139s]                                       ^~~~~~~~

Complete buildlog available at
https://build.opensuse.org/public/build/openSUSE:Factory:Staging:C/standard/x86_64/ffado/_log

summary: [glibc2.27] ffado fails to build


--1518077441.Bcefa0.1318
Date: Thu, 8 Feb 2018 08:10:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1079997

            Bug ID: 1079997
           Summary: server:database/influxdb: X-Influxdb-Version incorrect value
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: matwey.kornilov-at-gmail.com
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

There is an issue with the HTTP-Header X-Influxdb-Version.

It is set to unknown instead of Influxdb version.


body:
--1518088951.1c8Ea6.25568
Date: Thu, 8 Feb 2018 11:22:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080044

            Bug ID: 1080044
           Summary: Plasma shows wrong hovered state
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: alarrosa-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In Plasma, dragging an icon on the desktop will cause the icon at the top-left
of the screen (if any) to switch to hovered state, as the release coordinates
on the
drag pixmap window (showing a dragged icon) fall into the geometry
of the top-left icon.

https://bugreports.qt.io/browse/QTBUG-66103
https://codereview.qt-project.org/#/c/215939/

summary: Plasma shows wrong hovered state


--1518090005.BB3CdA6a4.29580
Date: Thu, 8 Feb 2018 11:40:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080048

            Bug ID: 1080048
           Summary: Newer mariadb releases are not recognized correctly by Qt
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: alarrosa-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The MariaDB define check should be extended to cover the later versions too.

https://codereview.qt-project.org/#/c/206850/
https://bugzilla.redhat.com/show_bug.cgi?id=1491316


--1518090348.c4E1Fcd1.5111
Date: Thu, 8 Feb 2018 11:45:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080051

            Bug ID: 1080051
           Summary: Yast2 Network Settings fails to load if /etc/hosts does not end with a new line
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: amantia-at-kde.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

If the last line in /etc/hosts is an ip address/host combination and not a new
line, the network settings module won't load and will result in the error
described here:
https://forums.opensuse.org/showthread.php/522168-Yast-Error-when-configuring-network


body:
--1518093395.78d205C5.18062
Date: Thu, 8 Feb 2018 12:36:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080061

            Bug ID: 1080061
           Summary: [glibc2.27] flatpak fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Factory is in progress of merging GLIBC 2.27 - guile is amongst the
packages failing to build

From the build log:
[   52s] In file included from ./libglnx/glnx-missing.h:95:0,
[   52s]                  from ./libglnx/libglnx.h:28,
[   52s]                  from common/flatpak-oci-registry.c:27:
[   52s] ./libglnx/glnx-missing-syscall.h:142:23: error: static declaration of
'copy_file_range' follows non-static declaration
[   52s]  static inline ssize_t copy_file_range(int fd_in, loff_t *off_in,
[   52s]                        ^~~~~~~~~~~~~~~
[   52s] In file included from /usr/include/glib-2.0/gio/gcredentials.h:32:0,
[   52s]                  from /usr/include/glib-2.0/gio/gio.h:46,
[   52s]                  from
/usr/include/gio-unix-2.0/gio/gunixoutputstream.h:24,
[   52s]                  from common/flatpak-oci-registry.c:24:
[   52s] /usr/include/unistd.h:1110:9: note: previous declaration of
'copy_file_range' was here
[   52s]  ssize_t copy_file_range (int __infd, __off64_t *__pinoff,

Complete build log available at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C:DVD/flatpak/standard/x86_64

summary: [glibc2.27] flatpak fails to build


body:
--1518100485.FAD2E1.18068
Date: Thu, 8 Feb 2018 14:34:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080086

            Bug ID: 1080086
           Summary: psgml package breaks emacs js-mode
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: aspiers-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

If the psgml package is installed (which can be pulled in as a requirement of
the xslide package) then in emacs, js-mode can fail to load.

Steps to reproduce:

1. emacs -q

2. C-h v load-path shows that "/usr/share/emacs/site-lisp/psgml" is in
load-path (I'm guessing this is set up by
/usr/share/emacs/site-lisp/suse-start-psgml.el which is loaded by
/usr/share/emacs/site-lisp/site-start.el)

3. Load an existing Javascript file or create a new Javascript buffer, e.g. C-x
f foo.js

4. Observe a "File mode specification error: (void-variable sgml-name-re)"
error and the fact that the newly opened buffer is not in js-mode

This was first reported upstream and confirmed as an openSUSE-only bug:

https://lists.gnu.org/archive/html/bug-gnu-emacs/2016-09/msg00884.html

but I couldn't find any corresponding downstream bug, so here it is.

A workaround is simply to deinstall the psgml package (and xslide if necessary)
but obviously this is not ideal.

summary: psgml package breaks emacs js-mode


--1518166260.E484fA3.17559
Date: Fri, 9 Feb 2018 08:51:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080244

            Bug ID: 1080244
           Summary: conflict of liberation-fonts and liberation2-fonts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: thomas.schraitle-at-suse.com
          Reporter: sbrabec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When calling zypper dup, I got an upgrade problem:

Problem: suse-xsl-stylesheets-2.0.8-2.1.noarch requires liberation-fonts, but
this requirement cannot be provided
  uninstallable providers: liberation-fonts-1.07.4-1.8.noarch[repo-oss]
 Solution 1: Following actions will be done:
  deinstallation of suse-xsl-stylesheets-2.0.8-1.4.noarch
  deinstallation of daps-2.4.0-3.5.noarch
 Solution 2: deinstallation of liberation2-fonts-2.00.1-7.8.noarch
 Solution 3: keep obsolete suse-xsl-stylesheets-2.0.8-1.4.noarch
 Solution 4: break suse-xsl-stylesheets-2.0.8-2.1.noarch by ignoring some of
its dependencies

I tried 2, and it works, but I am not sure whether it is correct. It looks as
downgrade.

In any case, it indicates missing Obsoletes or Provides in the spec file and
blocks seamless Tumbleweed update.


--1518168290.c150d0.30220
Date: Fri, 9 Feb 2018 09:24:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080251

            Bug ID: 1080251
           Summary: rrdtool: librrd infinite loop and crashing with pango 1.40
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 759537
  --> http://bugzilla.opensuse.org/attachment.cgi?id=759537&action=edit
Test application to reproduce the issue

Hello,

I am running openSUSE Leap 42.3 with libpango-1_0-0-1.40.1-3.4.x86_64 and
rrdtool-1.4.7-25.20.x86_64 and I have the following behavior.

When calling librrd from different threads in the test application the
following happens:

(process:22577): GLib-GObject-CRITICAL **: g_object_ref: assertion
'object->ref_count > 0' failed

(process:22577): Pango-CRITICAL **: pango_font_map_get_serial: assertion
'PANGO_IS_FONT_MAP (fontmap)' failed

(process:22577): Pango-CRITICAL **: pango_font_map_get_serial: assertion
'PANGO_IS_FONT_MAP (fontmap)' failed

(process:22577): Pango-CRITICAL **: pango_font_map_get_serial: assertion
'PANGO_IS_FONT_MAP (fontmap)' failed

Then an application either crashes with segmentation fault or persists in
infinite loop with 100% CPU load.

Expected behavior is the following. The application returns successfully with
no output.

Please note, that it is not generic threading race condition issue, because
test application calls librrd only from one thread at each time moment. It is
guaranteed by mutex protection.

There is known fix to this issue introduced in rrdtool 1.5.0 (rebased version
is attached here):

From e1f6ee13380e1eeeaae66506348ce39a5ff33572 Mon Sep 17 00:00:00 2001
From: Joakim Soderberg <joakim.soderberg-at-gmail.com>
Date: Wed, 1 Apr 2015 15:28:58 +0200
Subject: [PATCH] Fix pango fontmap threading issue.

Since pango v1.32.6 `pango_cairo_font_map_get_default` returns a per thread
`fontmap`. But since we're allocating this statically on the first call to
`rrd_init`,
if we then try to access it again via another thread glib will get stuck in an
infinte assertion loop.

Instead use `pango_cairo_font_map_new()` when creating the `fontmap`. This will
not create a per thread version and glib will be happy.

Also added some extra locking whenever using the `im->layout` pango structure
that uses the `fontmap` internally as a precaution.


--1518168501.B2cA4400.31191
Date: Fri, 9 Feb 2018 09:28:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080253

            Bug ID: 1080253
           Summary: VUL-0: CVE-2018-1052: postgresql10: Fix processing of partition keys containing multiple expressions
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/199649/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: max-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-1052

https://www.postgresql.org/about/news/1829/

not much detail on there, but affects only v10 => Factory only

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1052
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-1052.html


body:
--1518169714.c7EDd2df4.2636
Date: Fri, 9 Feb 2018 09:48:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080259

            Bug ID: 1080259
           Summary: HPC modules show wrong summary
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: cgoll-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Most of the HPC lmod modules show the wrong summary. E.g. for the package
openmpi-gnu-hpc thethe command
module spider
outputs
openmpi: openmpi/1.10.7
    Dependency package for openmpi_1_10_7-gnu-hpc-devel-static
which is self refering and useless. It should be
"A powerful implementation of MPI"

pkgs: hdf5 mpiP netcdf netcdf-cxx4 netcdf-fortran papi petsc scalapack suse-hpc

summary: HPC modules show wrong summary


body:
--1518175823.CA5664F10.3151
Date: Fri, 9 Feb 2018 11:30:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080281

            Bug ID: 1080281
           Summary: Tracker Bug nextcloud upstream release
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: opensuse-communityscreening-at-forge.provo.novell.com
          Reporter: asemen-at-suse.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Tracker Bug Froxlor upstream release

to version 13.0.0

summary: Tracker Bug nextcloud upstream release


body:
Build Identifier:

Reproducible with OpenSUSE 42 and 15 Beta, maybe also Tumbleweed.

Reproducible: Always

Steps to Reproduce:
1. start Yast
2. select VNC module
3. next > next > next
Actual Results:
crash of X environment, terminal appears with textual login prompt

Expected Results:
Xorg does not crash, active session continues

summary: Xorg crashes when Yast tries to configure VNC


--1518187981.a821FE0.6443
Date: Fri, 9 Feb 2018 14:53:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080312

            Bug ID: 1080312
           Summary: Infinite recursion in animated cursor code
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Reported by @NVIDIA ...

There is a bug in version 1.19 of the X.org X server that can cause an infinite
recursion in the animated cursor code. It has been fixed, but no existing
release includes the fix, yet.

The following four commits in the server-1.19-branch branch fix the problem:

https://cgit.freedesktop.org/xorg/xserver/commit/?h=server-1.19-branch&id=
26841b2c9ea03fda8b2d0da254e0344fd2a3afce
https://cgit.freedesktop.org/xorg/xserver/commit/?h=server-1.19-branch&id=
354c48304d27f75b7c33c03a0adb050c37788ccf
https://cgit.freedesktop.org/xorg/xserver/commit/?h=server-1.19-branch&id=
693f0e21d55d6e9fe792d91e76e4168aa813db71
https://cgit.freedesktop.org/xorg/xserver/commit/?h=server-1.19-branch&id=
5e83ebd76738455c443a66024b0b5eb92930b36c

(There are an additional two cleanup changes in the master branch that aren’t
strictly necessary to fix the problem; one of them introduces an ABI break.)

Since Tumbleweed and SLE 15 use a 1.19 X server, you’ll want to make sure that
they get these fixes backported.


--1518247619.FB78C03.24210
Date: Sat, 10 Feb 2018 07:26:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080426

            Bug ID: 1080426
           Summary: [HPC] PKG_CONFIG_PATH is not amended by modulefiles although pkgconfig File is present
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Several HPC packages don't prepend the path to an existing pkgconfig file to
PKG_CONFIG_PATH. SInce it is in a non-standard location, for this file to be
found, an environment variable needs to be set.


--1518267024.Bb31dCF3.23550
Date: Sat, 10 Feb 2018 12:50:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080434

            Bug ID: 1080434
           Summary: [HPC] scalapack HPC Builds don't pull in the right Headers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Traditionally, the Blacs headers were in the blacs-devel-headers. This however
doesn't take the versioned nature of the modulerized HPC packages into account.
For HPC builds include the headers in the libblacs devel
package.blacs-devel-headers


--1518284393.fD707E43.30542
Date: Sat, 10 Feb 2018 17:39:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080442

            Bug ID: 1080442
           Summary: [HPC] hdf5 Modules File Package needs to be Arch dependent
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

The modules file package of hdf5 needs to be arch dependent of course as it
contains some arch-dependent paths - unlike a cluelessly helpful rpmlint test
tries to suggest.


--1518295706.a6620.18593
Date: Sat, 10 Feb 2018 20:48:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080446

            Bug ID: 1080446
           Summary: AppStream spec/appstreamcli misses recommended runtime dependency on curl
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kossebau-at-kde.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

appstreamcli uses curl optionally for some tests (see
https://github.com/ximion/appstream/blob/master/src/as-validator.c), so ideally
curl would be listed as recommended runtime dep in
https://build.opensuse.org/package/view_file/openSUSE:Factory/AppStream/AppStream.spec?expand=1


--1518384816.FAE08E603.14228
Date: Sun, 11 Feb 2018 21:33:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080492

            Bug ID: 1080492
           Summary: GL errors after latest update to kernel 4.15.1 with radeon driver
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: connormcl-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After the latest tumbleweed update with kernel 4.15.1 and the radeon driver, i
get a few GL_INVALID_OPERATIONS errors in wine which results in black screen
wine window.

The errors are:

0085:err:d3d:wined3d_debug_callback 0x1915b8: "GL_INVALID_OPERATION in
glUseProgram(program 7 not linked)".
0085:err:d3d:wined3d_debug_callback 0x1915b8: "GL_INVALID_OPERATION in
glUniform(program not linked)".

I am not sure which component is responsible. I have reverted the system,
freezed wine and the radeon drivers to a working version and updated again, the
error comes up again. So it seem not to be wine, but driver or libGL related.
I will again revert back to working state before update and try again to
identify the broken component...


--1518392178.04ca2e0.24090
Date: Sun, 11 Feb 2018 23:36:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080494

            Bug ID: 1080494
           Summary: fvwm2 missing alternatives configuration
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: jsrain-at-suse.com
          Reporter: tonysu@su-networking.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Since the change in Tumbleweed to manage window managers using
update-alternatives, most window manager seem to be configured with
alternatives but it looks like fvwm2 was overlooked.

The following does what is needed although someone may wish to modify the
priority (my setting 30)

update-alternatives --install /usr/share/xsessions/default.desktop
default.xsession.desktop /usr/share/xsessions/fvm2.desktop 30


body:
--1518441988.2e4A310.31450
Date: Mon, 12 Feb 2018 13:26:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080595

            Bug ID: 1080595
           Summary: cloud-init uses missing wheel group
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rjschwei-at-suse.com
          Found By: Development
           Blocker: ---

When running a Leap-15.0 image, cloud-init prints 2 warnings
about missing a wheel group.
It probably wants to change group ownership of /var/log/cloud-init.log
to it.

Either the package should pull in the correct wheel group metapackage
or change configs to use the root group or something existing
(best also with dependency on it).

summary: cloud-init uses missing wheel group


body:
--1518441496.cA5c0.29095
Date: Mon, 12 Feb 2018 13:18:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080592

            Bug ID: 1080592
           Summary: feh needs libjpeg-turbo
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: novell-at-howorth.org.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I sometimes use 'feh' to browse images. I used it today but when I
tried to rotate a picture (File/Edit in Place/Rotate 90 CW) the rotate
didn't happen and I got a useful error message in the command terminal:

$ feh WARNING: lossless rotate: Is 'jpegtran' installed? Failed to
exec: No such file or directory feh WARNING: lossless rotate: Got
exitcode 1 from jpegtran. Commandline was: jpegtran -copy all -rotate
90 -outfile P1020918.JPG P1020918.JPG

This is on 42.3. The last time I used rotate was on 42.2 and I'm fairly
sure it worked there. The current version of feh is 2.18.3-7.1-x86_64
from openSUSE-Leap-42.3-Oss. YaST doesn't show me any results when I
search for jpegtran.

rpmfind OTOH finds libjpeg-turbo-1.5.3-42.1 and says it contains
jpegtran. And sure enough after I install libjpeg-turbo, rotation works
in feh. But YaST still doesn't return any results for jpegtran.

I believe:

feh should require libjpeg-turbo since it is required for feh to function
properly.

summary: feh needs libjpeg-turbo


body:
--1518454844.2B8Bc0.9984
Date: Mon, 12 Feb 2018 17:00:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080640

            Bug ID: 1080640
           Summary: ocaml-docs is non-free
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: kstreitova-at-suse.com
          Reporter: kstreitova-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: ohering-at-suse.com
          Found By: ---
           Blocker: ---

According to RHBZ#1530647 [1], ocaml documentation is non-free. We should
remove it from openSUSE and SLE packages.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1530647

summary: ocaml-docs is non-free


body:
--1518493907.B37d0.17876
Date: Tue, 13 Feb 2018 03:51:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080694

            Bug ID: 1080694
           Summary: tor package needs updating
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: david-at-kronlid.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The tor package in OpenSUSE 42.3 official repos reached end of life on the 26th
of January 2018. Se https://software.opensuse.org/package/tor
It's currently at 0.3.0.13

Because of a build failing and nobody fixing it the network repo is serving an
even older version from september 2017.

Running 0.3.0.x isn't recommended and an error message says it might contain
bugs or security problems.

pkgs: tor zstd

summary: tor package needs updating


--1518537072.23aa0.4295
Date: Tue, 13 Feb 2018 15:51:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080826

            Bug ID: 1080826
           Summary: VUL-1: CVE-2018-0487 mbedtls: Risk of remote code execution when verifying RSASSA-PSS signatures
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199923/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1544728

When RSASSA-PSS signature verification is enabled, sending a maliciously
constructed certificate chain can be used to cause a buffer overflow on the
peer's stack, potentially leading to crash or remote code execution. This can
be triggered remotely from either side in both TLS and DTLS.

RSASSA-PSS is the part of PKCS #1 v2.1 standard and can be enabled by the
compile time option MBEDTLS_PKCS1_V21 in config.h. If MBEDTLS_PKCS1_V21 is
disabled when compiling the library, then the vulnerability is not present.
RSASSA-PSS signatures are enabled in the default configuration.

Affected versions: all versions of Mbed TLS from version 1.3.8 and up,
including all 2.1 and later releases

Reference:

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1544728
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0487


--1518537092.a18B0.1633
Date: Tue, 13 Feb 2018 15:51:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1080828

            Bug ID: 1080828
           Summary: VUL-1: CVE-2018-0488 mbedtls: Risk of remote code execution when truncated HMAC is enabled
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/199924/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1544727

When the truncated HMAC extension is enabled and CBC is used, sending a
malicious application packet can be used to selectively corrupt 6 bytes on the
peer's heap, potentially leading to a crash or remote code execution. This can
be triggered remotely from either side in both TLS and DTLS.

If the truncated HMAC extension, which can be set by the compile time option
MBEDTLS_SSL_TRUNCATED_HMAC in config.h, is disabled when compiling the library,
then the vulnerability is not present. The truncated HMAC extension is enabled
in the default configuration.

The vulnerability is only present if

* The compile-time option MBEDTLS_SSL_TRUNCATED_HMAC is set in config.h. (It is
set by default) AND
* The truncated HMAC extension is explicitly offered by calling
mbedtls_ssl_conf_truncated_hmac(). (It is not offered by default)

Affects versions: all versions of Mbed TLS from version 1.3.0 and up, including
all 2.1 and later releases

Reference:

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1544727
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0488


--1518608088.53170.20816
Date: Wed, 14 Feb 2018 11:34:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1080973

            Bug ID: 1080973
           Summary: VUL-0: mbedtls: bounds check bypass through overflow in PSK identity parsing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The check `if( *p + n > end )` in `ssl_parse_client_psk_identity` is
unsafe because `*p + n` might overflow, thus bypassing the check. As
`n` is a user-specified value up to 65K, this is relevant if the
library happens to be located in the last 65K of virtual memory.

This commit replaces the check by a safe version.

Affected:
openSUSE:Leap:42.3:Update

Already fixed in openSUSE:Factory due to previous version bump.

References:
https://github.com/ARMmbed/mbedtls/commit/83c9f495ffe70c7dd280b41fdfd4881485a3bc28


--1518637857.71dA0.5218
Date: Wed, 14 Feb 2018 19:50:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081045

            Bug ID: 1081045
           Summary: plasma-integration: tray submenu does not shows
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: egdfree-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Run this test app qt5-dbus-tray-tester from Qt bug (also reproduced with
vacuum-im i.e.).
https://bugreports.qt.io/browse/QTBUG-45803

This patch fix problem. With package plasma-integration-plugin 5.12.0 installed
from Tumbleweed work correct.
https://cgit.kde.org/plasma-integration.git/commit/?id=f2275d4440a63d270aad9867700380a653514c0d


body:
--1518649315.DDff1.7636
Date: Wed, 14 Feb 2018 23:01:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081072

            Bug ID: 1081072
           Summary: lamp_server pattern now requires php7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have notice an irregularity when it comes to the lamp server pattern, nothing
provides php5 anymore, as it seems php7 is now the default

summary: lamp_server pattern now requires php7


body:
--1518674216.FDF0bF570.26652
Date: Thu, 15 Feb 2018 05:56:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081099

            Bug ID: 1081099
           Summary: Package Mypaint is broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bluesmpt-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package "mypaint" is broken, when installing just drops this error message
and nothing happens

https://paste.opensuse.org/7144299

im on tumbleweed "20180213"

summary: Package Mypaint is broken


body:
--1518690840.bcC80.6383
Date: Thu, 15 Feb 2018 10:34:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081147

            Bug ID: 1081147
           Summary: FTBFS: creduce is 'unresolvable'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

creduce in openSUSE:Factory is currently not buildable

https://build.opensuse.org/package/show/openSUSE:Factory/creduce

  nothing provides clang4-devel-static

This is true, as llvm4/5 were changed to be on shared libs again

summary: FTBFS: creduce is 'unresolvable'


--1518707178.BC5CB0.9391
Date: Thu, 15 Feb 2018 15:06:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081189

            Bug ID: 1081189
           Summary: For consideration: thunarx-python dependson python-gnome
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In openSUSE:Factory, the package python-gnome would preferably be dropped.

The package has long been unmaintained (allbeit it still builds) and stems from
the time of GNOME 2.28 (so even the latest GNOME 2.x released no longer pulled
that package up)

There is currently a single package depending on python-gnome, and that is
thunarx-gnome.

Can you please assess if there is any chance of eliminating that dependency?
Possibly some of the code could be moved from python-gnome to thunarx-python


--1518713326.c67F2d3.10733
Date: Thu, 15 Feb 2018 16:48:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081217

            Bug ID: 1081217
           Summary: [HPC] conman doesn't work for non-root user
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Conman needs its local data files in directories it has access to:
it therefore needs its own rundir and logdir.


--1518760528.834af20.10514
Date: Fri, 16 Feb 2018 05:55:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081281

            Bug ID: 1081281
           Summary: VirtualBox video capture is buggy in version 5.2.6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: Larry.Finger-at-lwfinger.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When VirtualBox 5.2.4 is used to capture a video of a VM, the resulting file is
corrupt. According to https://www.virtualbox.org/ticket/17307, the cause is
that the variable used to record the time code is only 16 bits.

A patch changing this value to 32 bits has been prepared, and the changed code
pushed to Factory. From there, it will be available to update TW and Leap 15.0.
I do not believe that VB 5.1.32, which is used for Leap 42.3, is affected.


--1518782884.fe4E5bAa4.8401
Date: Fri, 16 Feb 2018 12:08:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1081335

            Bug ID: 1081335
           Summary: Rename openssl-1_1_0 package to reflect SO number of the 1.1.x branch
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: vcizek-at-suse.com
          Reporter: vcizek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: astieger-at-suse.com, meissner-at-suse.com,
                    tchvatal-at-suse.com
          Found By: ---
           Blocker: ---

Minor versions of OpenSSL 1.1.x branch will have the same .so number and are
guaranteed to keep ABI stability.

The package name should should reflect that and contain just 1.1.


--1518793498.014c58f0.16672
Date: Fri, 16 Feb 2018 15:04:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1081360

            Bug ID: 1081360
           Summary: virtualbox requires virtualbox-host-kmp-default but in some cases virtualbox-host-source provides needed infrastructure to build modules locally
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: nettezzaumanaa-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

similar situation like in here:

https://bugzilla.suse.com/show_bug.cgi?id=1042726

actually, if you use in leap kernel repos

http://download.opensuse.org/repositories/Kernel:/stable/standard/
http://download.opensuse.org/repositories/Kernel:/stable:/KMP/standard/
http://download.opensuse.org/repositories/security:/tls/openSUSE_Leap_42.3/

it won't work with kernel 4.15.x because of

depmod: WARNING: //lib/modules/4.15.3-1.g8d4f579-default/misc/vboxpci.ko needs
unknown symbol vfs_write

It is also NOT possible to install vbox 5.2.6 from kernel repo in leap because
of missing

Problem: nothing provides libQt5Core.so.5(Qt_5.10)(64bit) needed by
virtualbox-qt-5.2.6-3.14.x86_64

this is neverending story because vbox maintainer struggles hard to create
usable build that would work in case that Kernel:/stable repos are added. Just
to make long story short I propose following solution:

PROPOSED SOLUTION:

as far as virtualbox package brings /sbin/vboxconfig script that is supposed to
build a modules locally in case of some non-standard kernel I think that
``virtualbox-host-kmp-default'' SHALL be recommended and not `hardwired' via
dependencies with virtualbox

also //sbin/vboxconfig should be included in virtualbox-host-source package and
not in virtualbox because without that it won't work anyway (it's just mess).

Actually, semi-broken dependencies of vbox forces me to keep

# ls -la /boot/vmlinuz
lrwxrwxrwx 1 root root 26 Feb 16 15:11 /boot/vmlinuz ->
vmlinuz-4.4.114-42-default

just to be able to build modules locally for my actual kernel using
/sbin/vboxconfig .. This is not good.

regards, daniel


--1518879849.dC44da11.25819
Date: Sat, 17 Feb 2018 15:04:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081432

            Bug ID: 1081432
           Summary: mlmmj confirmation mail is double-utf8-encoded
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: suse-beta-at-cboltz.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
                CC: aj-at-ajaissle.de
          Found By: Beta-Customer
           Blocker: ---

[copy of https://progress.opensuse.org/issues/31546 because maintenance updates
require a boo number]

The confirmation mail you get when writing to
opensuse-translation-de+help-at-opensuse.org is double-utf8-encoded and includes
things like ... hinzuzufügen. Das heißt, ... when viewed in the mail client.

The subject also looks broken: Anmeldebestätigung für Liste ...

Looking at the mail source, I see double-encoded utf8:

Subject:
=?utf-8?q?Anmeldebest=C3=83=C2=A4tigung_f=C3=83=C2=BCr_Liste_opensuse-translation-de=40opensuse.org?=
From: opensuse-translation-de+help-at-opensuse.org
[...]
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

[...]
Jemand (hoffentlich Sie selbst) hat darum gebeten, Ihre Mailadresse
<opensuse-at-cboltz.de> der Liste hinzuzufÃ¼gen. Das heiÃt, dass Sie eine
Kopie jeder Mail erhalten, die an die Liste geschickt wird.

It turned out that mlmmj started to ship utf8 templates some years ago, but the
spec still does a recode latin1..utf8.

This is already fixed in Tumbleweed, see
https://build.opensuse.org/request/show/574598

I'll submit a maintenance update for 42.3.


--1518972333.F86b5CDc0.13916
Date: Sun, 18 Feb 2018 16:45:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081470

            Bug ID: 1081470
           Summary: Sudo's Password Prompt Contains String Instead of Root
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: fkrueger-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After the update to sudo 1.8.22 (Tumbleweed 20180216) "sudo" gives the password
prompt "[sudo] password for %{p}:", instead of "[sudo] password for root:".


--1519049311.80bd0.3807
Date: Mon, 19 Feb 2018 14:08:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081576

            Bug ID: 1081576
           Summary: VUL-1: CVE-2018-7186 leptonica: Stack-based buffer overflows in gplotRead() and ptaReadStream() when parsing crafted files can lead to denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200341/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1546029

Leptonica before 1.75.3 does not limit the number of characters in a %s format
argument to fscanf or sscanf, which allows remote attackers to cause a denial
of
service (stack-based buffer overflow) or possibly have unspecified other impact
via a long string, as demonstrated by the gplotRead and ptaReadStream
functions.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1546029
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7186
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-7186.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890548
http://www.cvedetails.com/cve/CVE-2018-7186/
https://lists.debian.org/debian-lts/2018/02/msg00054.html
https://github.com/DanBloomberg/leptonica/commit/ee301cb2029db8a6289c5295daa42bba7715e99a


--1519056244.feC21.14020
Date: Mon, 19 Feb 2018 16:04:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081620

            Bug ID: 1081620
           Summary: bnx2 driver fails to load - [kubic-20180218]
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: pgonin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

after installation of kubic on IBM LS22 blade (2GB RAM - 2 AMD Opteron CPUs) no
network connectivity is possible.

dmesg reports
Direct firmware load for bnx/bnx2-mips-09-6.2.1b.fw failed with error -2
bnx2: Can't load firmware file "bnx2-mips-09-6.2.1b.fw"