--17369436773.6ccA.1110
Date: Wed, 15 Jan 2025 12:21:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1235892

            Bug ID: 1235892
           Summary: chromium 132.0.6834.83 CVE-2025-0434 CVE-2025-0435 CVE-2025-0436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0439 CVE-2025-0440 CVE-2025-0441 CVE-2025-0442 CVE-2025-0443 CVE-2025-0446 CVE-2025-0447 CVE-2025-0448
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

[$7000][374627491] High CVE-2025-0434: Out of bounds memory access in V8.
Reported by ddme on 2024-10-21
[$7000][379652406] High CVE-2025-0435: Inappropriate implementation in
Navigation. Reported by Alesandro Ortiz on 2024-11-18
[$3000][382786791] High CVE-2025-0436: Integer overflow in Skia. Reported by
Han Zheng (HexHive) on 2024-12-08
[$2000][378623799] High CVE-2025-0437: Out of bounds read in Metrics. Repor=
ted
by Xiantong Hou of Wuheng Lab and Pisanbao on 2024-11-12
[TBD][384186539] High CVE-2025-0438: Stack buffer overflow in Tracing. Repo=
rted
by Han Zheng (HexHive) on 2024-12-15
[$5000][371247941] Medium CVE-2025-0439: Race in Frames. Reported by Hafiiz=
h on
2024-10-03
[$5000][40067914] Medium CVE-2025-0440: Inappropriate implementation in
Fullscreen. Reported by Umar Farooq on 2023-07-22
[$2000][368628042] Medium CVE-2025-0441: Inappropriate implementation in Fe=
nced
Frames. Reported by someoneverycurious on 2024-09-21
[$2000][40940854] Medium CVE-2025-0442: Inappropriate implementation in
Payments. Reported by Ahmed ElMasry on 2023-11-08
[$1000][376625003] Medium CVE-2025-0443: Insufficient data validation in
Extensions. Reported by Anonymous on 2024-10-31
[$1000][359949844] Low CVE-2025-0446: Inappropriate implementation in
Extensions. Reported by Hafiizh on 2024-08-15
[$1000][375550814] Low CVE-2025-0447: Inappropriate implementation in
Navigation. Reported by Khiem Tran (@duckhiem) on 2024-10-25
[$1000][377948403] Low CVE-2025-0448: Inappropriate implementation in
Compositing. Reported by Dahyeon Park on 2024-11-08
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17369436773.6ccA.1110
Date: Wed, 15 Jan 2025 12:21:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1235892

          Summary
          chromium 132.0.6834.83 CVE-2025-0434 CVE-2025-0435 CVE-2025-0=
436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0439 CVE-2025-0440 CVE-2025-0441 C=
VE-2025-0442 CVE-2025-0443 CVE-2025-0446 CVE-2025-0447 CVE-2025-0448

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ro@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

[$7000][374627491] High CVE-2025-0434: Out of bounds memory =
access in V8.
Reported by ddme on 2024-10-21
[$7000][379652406] High CVE-2025-0435: Inappropriate implementation in
Navigation. Reported by Alesandro Ortiz on 2024-11-18
[$3000][382786791] High CVE-2025-0436: Integer overflow in Skia. Reported by
Han Zheng (HexHive) on 2024-12-08
[$2000][378623799] High CVE-2025-0437: Out of bounds read in Metrics. Repor=
ted
by Xiantong Hou of Wuheng Lab and Pisanbao on 2024-11-12
[TBD][384186539] High CVE-2025-0438: Stack buffer overflow in Tracing. Repo=
rted
by Han Zheng (HexHive) on 2024-12-15
[$5000][371247941] Medium CVE-2025-0439: Race in Frames. Reported by Hafiiz=
h on
2024-10-03
[$5000][40067914] Medium CVE-2025-0440: Inappropriate implementation in
Fullscreen. Reported by Umar Farooq on 2023-07-22
[$2000][368628042] Medium CVE-2025-0441: Inappropriate implementation in Fe=
nced
Frames. Reported by someoneverycurious on 2024-09-21
[$2000][40940854] Medium CVE-2025-0442: Inappropriate implementation in
Payments. Reported by Ahmed ElMasry on 2023-11-08
[$1000][376625003] Medium CVE-2025-0443: Insufficient data validation in
Extensions. Reported by Anonymous on 2024-10-31
[$1000][359949844] Low CVE-2025-0446: Inappropriate implementation in
Extensions. Reported by Hafiizh on 2024-08-15
[$1000][375550814] Low CVE-2025-0447: Inappropriate implementation in
Navigation. Reported by Khiem Tran (@duckhiem) on 2024-10-25
[$1000][377948403] Low CVE-2025-0448: Inappropriate implementation in
Compositing. Reported by Dahyeon Park on 2024-11-08

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17369436773.6ccA.1110--


--17369458500.A7BE367.1266
Date: Wed, 15 Jan 2025 12:57:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1235894

            Bug ID: 1235894
           Summary: Generalplus Technology Inc. Web cam no longer working since kernel >=3D 6.12.4
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Drivers
          Assignee: kernel-bugs-at-suse.de
          Reporter: m.rohrbacher@r-dev.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

With the patch "media: uvcvideo: Require entities to have a non-zero unique=
 ID"
(patches.kernel.org/6.12.4-039-media-uvcvideo-Require-entities-to-have-a-no=
n-.patch),
Generalplus Web Cams stopped working.

According to the maintainer of drivers/media/usb/uvc
(https://lore.kernel.org/linux-media/Z4aeK4Ct7L%2F9kR2H-at-quatroqueijos.casca=
rdo.eti.br/),
it would be appropriate to revert this patch until a better fix will be
available:

[quote]
Perhaps we should then revert the previous fix (which implies that this
same device would lead to some warnings, but they don't seem to cause any
other issues except for not exposing some media controls). And, then, we
work on reapplying it and another fix on top, or a different fix during
6.14 or 6.15.
[/quote]
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17369458500.A7BE367.1266
Date: Wed, 15 Jan 2025 12:57:30 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1235894

          Summary
          Generalplus Technology Inc. Web cam no longer working since k=
ernel >=3D 6.12.4

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          All

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Drivers

          Assignee
          kernel-bugs@suse.de

          Reporter
          m.rohrbacher@r-dev.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

With the patch "media: uvcvideo: Require entities to ha=
ve a non-zero unique ID"
(patches.kernel.org/6.12.4-039-media-uvcvideo-Require-entities-to-have-a-no=
n-.patch),
Generalplus Web Cams stopped working.

According to the maintainer of drivers/media/usb/uvc
(https://lore.kernel.org/linux-media/Z4aeK4Ct7L%=
2F9kR2H@quatroqueijos.cascardo.eti.br/),
it would be appropriate to revert this patch until a better fix will be
available:

[quote]
Perhaps we should then revert the previous fix (which implies that this
same device would lead to some warnings, but they don't seem to cause any
other issues except for not exposing some media controls). And, then, we
work on reapplying it and another fix on top, or a different fix during
6.14 or 6.15.
[/quote]

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17369458500.A7BE367.1266--


body:
--17370145163.09C20c0.149
Date: Thu, 16 Jan 2025 08:01:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1235936

            Bug ID: 1235936
           Summary: CONFIG_DMABUF_ configs unification
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Currently, we have:
SUSE-2025:config/arm64/default:CONFIG_DMABUF_MOVE_NOTIFY=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/arm64/default:CONFIG_DMABUF_HEAPS=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/arm64/default:CONFIG_DMABUF_HEAPS_SYSTEM=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_HEAPS_CMA is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/s390x/zfcpdump:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_MOVE_NOTIFY=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_HEAPS=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_HEAPS_SYSTEM=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_HEAPS_CMA is not set
SUSE-2025:config/x86_64/kvmsmall:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/x86_64/kvmsmall:# CONFIG_DMABUF_MOVE_NOTIFY is not set

And:
master:config/arm64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/arm64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/arm64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/arm64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/arm64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/armv6hl/default:# CONFIG_DMABUF_DEBUG is not set
master:config/armv6hl/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_HEAPS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/armv7hl/default:# CONFIG_DMABUF_DEBUG is not set
master:config/armv7hl/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_HEAPS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/i386/pae:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/i386/pae:# CONFIG_DMABUF_DEBUG is not set
master:config/i386/pae:# CONFIG_DMABUF_SELFTESTS is not set
master:config/i386/pae:# CONFIG_DMABUF_HEAPS is not set
master:config/i386/pae:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/ppc64le/default:# CONFIG_DMABUF_DEBUG is not set
master:config/ppc64le/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_HEAPS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/riscv64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/riscv64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/riscv64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/riscv64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/riscv64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/s390x/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/s390x/default:# CONFIG_DMABUF_DEBUG is not set
master:config/s390x/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/s390x/default:# CONFIG_DMABUF_HEAPS is not set
master:config/s390x/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/s390x/zfcpdump:# CONFIG_DMABUF_HEAPS is not set
master:config/x86_64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/x86_64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/x86_64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/x86_64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/x86_64/default:# CONFIG_DMABUF_SYSFS_STATS is not set

The former was enabled in:
commit b369d38572275c2cbc767ea564cb13ed35f49f6d
Author: Takashi Iwai <tiwai-at-suse.de>
Date:   Fri Sep 1 16:09:22 2023 +0200

    Update config files: CHT/BYT modularization, enable missing AMD features
(bsc#1214883)

Should that be somehow unified per archs. And/or copied to master too?
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17370145163.09C20c0.149
Date: Thu, 16 Jan 2025 08:01:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1235936

          Summary
          CONFIG_DMABUF_ configs unification

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          jslaby@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Currently, we have:
SUSE-2025:config/arm64/default:CONFIG_DMABUF_MOVE_NOTIFY=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/arm64/default:CONFIG_DMABUF_HEAPS=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/arm64/default:CONFIG_DMABUF_HEAPS_SYSTEM=3Dy
SUSE-2025:config/arm64/default:# CONFIG_DMABUF_HEAPS_CMA is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/ppc64le/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/s390x/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/s390x/zfcpdump:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_MOVE_NOTIFY=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_DEBUG is not set
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_SELFTESTS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_HEAPS=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
SUSE-2025:config/x86_64/default:CONFIG_DMABUF_HEAPS_SYSTEM=3Dy
SUSE-2025:config/x86_64/default:# CONFIG_DMABUF_HEAPS_CMA is not set
SUSE-2025:config/x86_64/kvmsmall:# CONFIG_DMABUF_HEAPS is not set
SUSE-2025:config/x86_64/kvmsmall:# CONFIG_DMABUF_MOVE_NOTIFY is not set

And:
master:config/arm64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/arm64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/arm64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/arm64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/arm64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/armv6hl/default:# CONFIG_DMABUF_DEBUG is not set
master:config/armv6hl/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_HEAPS is not set
master:config/armv6hl/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/armv7hl/default:# CONFIG_DMABUF_DEBUG is not set
master:config/armv7hl/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_HEAPS is not set
master:config/armv7hl/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/i386/pae:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/i386/pae:# CONFIG_DMABUF_DEBUG is not set
master:config/i386/pae:# CONFIG_DMABUF_SELFTESTS is not set
master:config/i386/pae:# CONFIG_DMABUF_HEAPS is not set
master:config/i386/pae:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/ppc64le/default:# CONFIG_DMABUF_DEBUG is not set
master:config/ppc64le/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_HEAPS is not set
master:config/ppc64le/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/riscv64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/riscv64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/riscv64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/riscv64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/riscv64/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/s390x/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/s390x/default:# CONFIG_DMABUF_DEBUG is not set
master:config/s390x/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/s390x/default:# CONFIG_DMABUF_HEAPS is not set
master:config/s390x/default:# CONFIG_DMABUF_SYSFS_STATS is not set
master:config/s390x/zfcpdump:# CONFIG_DMABUF_HEAPS is not set
master:config/x86_64/default:# CONFIG_DMABUF_MOVE_NOTIFY is not set
master:config/x86_64/default:# CONFIG_DMABUF_DEBUG is not set
master:config/x86_64/default:# CONFIG_DMABUF_SELFTESTS is not set
master:config/x86_64/default:# CONFIG_DMABUF_HEAPS is not set
master:config/x86_64/default:# CONFIG_DMABUF_SYSFS_STATS is not set

The former was enabled in:
commit b369d38572275c2cbc767ea564cb13ed35f49f6d
Author: Takashi Iwai <tiwai@sus=
e.de>
Date:   Fri Sep 1 16:09:22 2023 +0200

    Update config files: CHT/BYT modularization, enable missing AMD features
(bsc#1214883=
)

Should that be somehow unified per archs. And/or copied to master too?

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17370145163.09C20c0.149--

summary: CONFIG_DMABUF_ configs unification


--17373301412.6abc0.4758
Date: Sun, 19 Jan 2025 23:42:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236057

            Bug ID: 1236057
           Summary: Systemd cannot create cockpit runtime directory with selinux on slowroll
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rein+suse-at-purelymail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

With selinux enabled I keep getting this error when starting cockpit:

cockpit-certificate-ensure[20388]: cockpit-certificate-ensure: mkdir:
/run/cockpit/tls/server: File exist

The selinux alert corresponding to it is

SELinux is preventing systemd from rmdir access on the directory clients. F=
or
complete SELinux messages run: sealert -l d8166a7f-d4e3-4013-bd9e-52939f11b=
b45

Seems like systemd is prohibited from creating the runtime directory.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17373301412.6abc0.4758
Date: Sun, 19 Jan 2025 23:42:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236057

          Summary
          Systemd cannot create cockpit runtime directory with selinux =
on slowroll

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          rein+suse@purelymail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

With selinux enabled I keep getting this error when starting=
 cockpit:

cockpit-certificate-ensure[20388]: cockpit-certificate-ensure: mkdir:
/run/cockpit/tls/server: File exist

The selinux alert corresponding to it is

SELinux is preventing systemd from rmdir access on the directory clients. F=
or
complete SELinux messages run: sealert -l d8166a7f-d4e3-4013-bd9e-52939f11b=
b45

Seems like systemd is prohibited from creating the runtime directory.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17373301412.6abc0.4758--


--17374086120.a8e6D.6965
Date: Mon, 20 Jan 2025 21:30:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236149

            Bug ID: 1236149
           Summary: cockpit-machines does not work out of the box, missing libvirt daemon
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Cockpit
          Assignee: Cockpit-bugs-at-suse.de
          Reporter: rein+suse-at-purelymail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

cockpit-machines is giving me the error

Virtualization service (libvirt) is not active

I had to manually install and enable libvirt

cockpit-machines did install libvirt-daemon-qemu as a dependency, but this
package seemingly has no files (tested with rpm -ql)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17374086120.a8e6D.6965
Date: Mon, 20 Jan 2025 21:30:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236149

          Summary
          cockpit-machines does not work out of the box, missing libvir=
t daemon

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Cockpit

          Assignee
          Cockpit-bugs@suse.de

          Reporter
          rein+suse@purelymail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

cockpit-machines is giving me the error

Virtualization service (libvirt) is not active

I had to manually install and enable libvirt

cockpit-machines did install libvirt-daemon-qemu as a dependency, but this
package seemingly has no files (tested with rpm -ql)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17374086120.a8e6D.6965--


--17374339323.a9022225.7097
Date: Tue, 21 Jan 2025 04:32:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236153

            Bug ID: 1236153
           Summary: VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in Easy-RSA
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/437492/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: seroton10-at-gmail.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a
local attacker to more easily bruteforce the private CA key when created us=
ing
OpenSSL 3

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-13454
https://bugzilla.redhat.com/show_bug.cgi?id=3D2339062
https://www.cve.org/CVERecord?id=3DCVE-2024-13454
https://community.openvpn.net/openvpn/wiki/CVE-2024-13454
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17374339323.a9022225.7097
Date: Tue, 21 Jan 2025 04:32:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236153

          Summary
          VUL-0: CVE-2024-13454: easy-rsa: Weak encryption algorithm in=
 Easy-RSA

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/437492/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          seroton10@gmail.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Weak encryption algorithm in Easy-RSA version 3.0.5 through =
3.1.7 allows a
local attacker to more easily bruteforce the private CA key when created us=
ing
OpenSSL 3

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-13454
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2339062
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-13454
https=
://community.openvpn.net/openvpn/wiki/CVE-2024-13454

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17374339323.a9022225.7097--


--17374746740.819CB.8986
Date: Tue, 21 Jan 2025 15:51:14 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236187

            Bug ID: 1236187
           Summary: Emulators/wine: Missing debug info for cross compiled binaries
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: meissner-at-suse.com
          Reporter: ralf.habacker-at-freenet.de
        QA Contact: screening-team-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The mentioned package provides cross compiled binaries in
/usr/lib/wine/*-windows and /usr/lib64/wine/*-windows, for which no debug
symbols are available when debugging..
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17374746740.819CB.8986
Date: Tue, 21 Jan 2025 15:51:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236187

          Summary
          Emulators/wine: Missing debug info for cross compiled binaries

          Classification
          openSUSE

          Product
          openSUSE.org

          Version
          unspecified

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          3rd party software

          Assignee
          meissner@suse.com

          Reporter
          ralf.habacker@freenet.de

          QA Contact
          screening-team-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The mentioned package provides cross compiled binaries in
/usr/lib/wine/*-windows and /usr/lib64/wine/*-windows, for which no debug
symbols are available when debugging..

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17374746740.819CB.8986--


body:
--17375001422.2ECDfc7.9736
Date: Tue, 21 Jan 2025 22:55:42 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236217

            Bug ID: 1236217
           Summary: go1.24 release tracking
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

go1.24 (expected February 2025) is a major release of Go.
Minor releases of go1.24.x will be provided through February 2026.
This issue tracks go1.24.x releases packaged and submitted initially
to openSUSE:Factory and can be referenced in submissions to
additional repositories.

Go Release Cycle
https://github.com/golang/go/wiki/Go-Release-Cycle

Go Release history
https://golang.org/doc/devel/release.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17375001422.2ECDfc7.9736
Date: Tue, 21 Jan 2025 22:55:42 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236217

          Summary
          go1.24 release tracking

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

go1.24 (expected February 2025) is a major release of Go.
Minor releases of go1.24.x will be provided through February 2026.
This issue tracks go1.24.x releases packaged and submitted initially
to openSUSE:Factory and can be referenced in submissions to
additional repositories.

Go Release Cycle
https://gith=
ub.com/golang/go/wiki/Go-Release-Cycle

Go Release history
https://golang.org/do=
c/devel/release.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17375001422.2ECDfc7.9736--

summary: go1.24 release tracking


--17376042151.C7CC02.12543
Date: Thu, 23 Jan 2025 03:50:15 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236290

            Bug ID: 1236290
           Summary: iio-sensor-proxy: DBus configuration update for version 3.6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: badshah400-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The dbus conf file for iio-sensor-proxy has been updated for version 3.6 and
needs to be re-reviewed for security issues. The rpmlint log suggests as mu=
ch:

iio-sensor-proxy.x86_64: E: dbus-file-digest-mismatch (Badness: 10)
/usr/share/dbus-1/system.d/net.hadess.SensorProxy.conf expected
sha256:4695ec7205d52d47595db7a1cab533ed216d3e8913ecc0ad81bf74ec3388b1ad,
has:b75b8be59e6900c34977acc97a8e17ca4f4cb56ad6384027cd61b4bcd74c0c54
A D-Bus configuration file changed in content. Packaging D-Bus services
requires a review and whitelisting by the SUSE security team. If the package
is intended for inclusion in any SUSE product please open a bug report to
request review of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
more information.

The relevant upstream commits are:

*
<https://gitlab.freedesktop.org/hadess/iio-sensor-proxy/-/commit/5e26805c2c=
b578fe590fff73f67ff8fef61fc440>
*
<https://gitlab.freedesktop.org/hadess/iio-sensor-proxy/-/commit/0cf3454fe7=
0bc98cf9db2639a608f4e0cad08ab0>

Thanks in advance.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17376042151.C7CC02.12543
Date: Thu, 23 Jan 2025 03:50:15 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236290

          Summary
          iio-sensor-proxy: DBus configuration update for version 3.6

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          badshah400@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The dbus conf file for iio-sensor-proxy has been updated for=
 version 3.6 and
needs to be re-reviewed for security issues. The rpmlint log suggests as mu=
ch:

iio-sensor-proxy.x86_64: E: dbus-file-digest-mismatch (Badness: 10)
/usr/share/dbus-1/system.d/net.hadess.SensorProxy.conf expected
sha256:4695ec7205d52d47595db7a1cab533ed216d3e8913ecc0ad81bf74ec3388b1ad,
has:b75b8be59e6900c34977acc97a8e17ca4f4cb56ad6384027cd61b4bcd74c0c54
A D-Bus configuration file changed in content. Packaging D-Bus services
requires a review and whitelisting by the SUSE security team. If the package
is intended for inclusion in any SUSE product please open a bug report to
request review of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit=
_bugs for
more information.

The relevant upstream commits are:

*
<https://gitlab.freedesktop.or=
g/hadess/iio-sensor-proxy/-/commit/5e26805c2cb578fe590fff73f67ff8fef61fc440=
>
*
<https://gitlab.freedesktop.or=
g/hadess/iio-sensor-proxy/-/commit/0cf3454fe70bc98cf9db2639a608f4e0cad08ab0=
>

Thanks in advance.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17376042151.C7CC02.12543--


--17376585510.C8B6812.14576
Date: Thu, 23 Jan 2025 18:55:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236340

            Bug ID: 1236340
           Summary: rtw89_8852ce 0000:02:00.0: c2h class 9 func 6 not support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Drivers
          Assignee: kernel-bugs-at-suse.de
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 879903
  --> https://bugzilla.suse.com/attachment.cgi?id=3D879903&action=3Dedit
full debug info

Upon update:

Operating System: openSUSE Tumbleweed 20250122
KDE Plasma Version: 6.2.5
KDE Frameworks Version: 6.10.0
Qt Version: 6.8.1
Kernel Version: 6.13.0-1-default (64-bit)
Graphics Platform: Wayland
Processors: 12 =C3=97 Intel=C2=AE Core=E2=84=A2 7 150U
Memory: 15.3 GiB of RAM
Graphics Processor: Mesa Intel=C2=AE Graphics
Manufacturer: Dell Inc.
Product Name: Inspiron 16 5640

Error: rtw89_8852ce 0000:02:00.0: c2h class 9 func 6 not support began show=
ing
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17376585510.C8B6812.14576
Date: Thu, 23 Jan 2025 18:55:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236340

          Summary
          rtw89_8852ce 0000:02:00.0: c2h class 9 func 6 not support

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Drivers

          Assignee
          kernel-bugs@suse.de

          Reporter
          jshand2013@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 879903 =
[details]
full debug info

Upon update:

Operating System: openSUSE Tumbleweed 20250122
KDE Plasma Version: 6.2.5
KDE Frameworks Version: 6.10.0
Qt Version: 6.8.1
Kernel Version: 6.13.0-1-default (64-bit)
Graphics Platform: Wayland
Processors: 12 =C3=97 Intel=C2=AE Core=E2=84=A2 7 150U
Memory: 15.3 GiB of RAM
Graphics Processor: Mesa Intel=C2=AE Graphics
Manufacturer: Dell Inc.
Product Name: Inspiron 16 5640

Error: rtw89_8852ce 0000:02:00.0: c2h class 9 func 6 not support began show=
ing

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17376585510.C8B6812.14576--


--17376752871.b7E1f4dD6.14945
Date: Thu, 23 Jan 2025 23:34:47 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236346

            Bug ID: 1236346
           Summary: libxml2 no longer performs transparent decompression
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dan-at-telarity.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

xmlstarlet no longer transparently decompressed a gzip-compressed XML file
before operating on it. This can be verified by installing xmlstarlet and
running:

$ echo '<xml>Working</xml>' | gzip | xmlstarlet sel -t -v /xml -nl
Working

If transparent decompression is working, the string "Working" will display.=
 If
it is not, the error message "-:1.1: Start tag expected, '<' not found" will
display.

It appears that xmlstarlet is not performing this decompression itself, but=
 by
appearances rather libxml2 instead.=20

This was working Jan 17, 2025 on the opensuse/tumbleweed:latest container w=
ith
sha256:9132c606691fb0db8b05191c7e9d7954373f8edb6f9e54cf15edce95a2b8f93f but=
 is
failing today on
sha256:118a88dd71acc7a77c42ffcaa3fb1d5ed78ed0c48f766c21b8f2223dc8d358ba. The
failing libxml2 version is libxml2-2-2.13.5-1.1 and the working one is
libxml2-2-2.12.9-2.2.  I didn't spot anything in the libxml2 changelog that
would directly explain this.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17376752871.b7E1f4dD6.14945
Date: Thu, 23 Jan 2025 23:34:47 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236346

          Summary
          libxml2 no longer performs transparent decompression

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dan@telarity.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

xmlstarlet no longer transparently decompressed a gzip-compr=
essed XML file
before operating on it. This can be verified by installing xmlstarlet and
running:

$ echo '<xml>Working</xml>' | gzip | xmlstarlet sel -t -v /xml =
-nl
Working

If transparent decompression is working, the string "Working" wil=
l display. If
it is not, the error message "-:1.1: Start tag expected, '<' not fo=
und" will
display.

It appears that xmlstarlet is not performing this decompression itself, but=
 by
appearances rather libxml2 instead.=20

This was working Jan 17, 2025 on the opensuse/tumbleweed:latest container w=
ith
sha256:9132c606691fb0db8b05191c7e9d7954373f8edb6f9e54cf15edce95a2b8f93f but=
 is
failing today on
sha256:118a88dd71acc7a77c42ffcaa3fb1d5ed78ed0c48f766c21b8f2223dc8d358ba. The
failing libxml2 version is libxml2-2-2.13.5-1.1 and the working one is
libxml2-2-2.12.9-2.2.  I didn't spot anything in the libxml2 changelog that
would directly explain this.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17376752871.b7E1f4dD6.14945--


body:
--17376877433.Fa7D817.15053
Date: Fri, 24 Jan 2025 03:02:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236351

            Bug ID: 1236351
           Summary: pgvector: compiles with -march=3Dnative
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mrueckert-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1100677
  Target Milestone: ---
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our pgvector package build results depend on the CPU type of the build VM,
because it compiles code with -march=3Dnative

Steps to Reproduce:
osc build -M=3Dpostgresql13 -noservice
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17376877433.Fa7D817.15053
Date: Fri, 24 Jan 2025 03:02:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236351

          Summary
          pgvector: compiles with -march=3Dnative

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          mrueckert@suse.com

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          Blocks
          1100677

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

While working on reproducible builds for openSUSE, I found t=
hat
our pgvector package build results depend on the CPU type of the build VM,
because it compiles code with -march=3Dnative

Steps to Reproduce:
osc build -M=3Dpostgresql13 -noservice

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17376877433.Fa7D817.15053--

summary: pgvector: compiles with -march=3Dnative


body:
--17377033372.b4403.15227
Date: Fri, 24 Jan 2025 07:22:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236365

            Bug ID: 1236365
           Summary: lua-lmod Permission denied
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: obs.coke518-at-passinbox.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

When calling `less` the following message is shown:
/usr/share/lmod/8.7.55/init/bash: /usr/share/lmod/lmod/libexec/addto:
/usr/bin/lua5.4: bad interpreter: Permission denied

In /var/log/audit/audit.log:
type=3DAVC msg=3Daudit(1737703085.392:1630): apparmor=3D"DENIED" operation=
=3D"exec"
class=3D"file" profile=3D"/usr/bin/lessopen.sh"
name=3D"/usr/share/lmod/8.7.55/libexec/addto" pid=3D416014 comm=3D"lessopen=
.sh"
requested_mask=3D"x" denied_mask=3D"x" fsuid=3D1000 ouid=3D0

Very similar to bug 1206957
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17377033372.b4403.15227
Date: Fri, 24 Jan 2025 07:22:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236365

          Summary
          lua-lmod Permission denied

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          obs.coke518@passinbox.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

When calling `less` the following message is shown:
/usr/share/lmod/8.7.55/init/bash: /usr/share/lmod/lmod/libexec/addto:
/usr/bin/lua5.4: bad interpreter: Permission denied

In /var/log/audit/audit.log:
type=3DAVC msg=3Daudit(1737703085.392:1630): apparmor=3D"DENIED" =
operation=3D"exec"
class=3D"file" profile=3D"/usr/bin/lessopen.sh"
name=3D"/usr/share/lmod/8.7.55/libexec/addto" pid=3D416014 comm=
=3D"lessopen.sh"
requested_mask=3D"x" denied_mask=3D"x" fsuid=3D1000 oui=
d=3D0

Very similar to bug 1206957

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17377033372.b4403.15227--

summary: lua-lmod Permission denied


--17378157963.DC42f45.28144
Date: Sat, 25 Jan 2025 14:36:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236415

            Bug ID: 1236415
           Summary: Hitachi pi-500 EDID data causes GPU crash
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: declanseeley-at-icloud.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Just got a Hitachi pi-500 and was able to confirm that it is sending some
irregular EDID data which is crashing my GPU

info:
```
usr_40476@2xeon:~> kinfo
Operating System: openSUSE Tumbleweed 20250121
KDE Plasma Version: 6.2.5
KDE Frameworks Version: 6.10.0
Qt Version: 6.8.1
Kernel Version: 6.12.10-1-default (64-bit)
Graphics Platform: Wayland
Processors: 88 =C3=97 Intel=C2=AE Xeon=C2=AE CPU E5-2699 v4 @ 2.20GHz
Memory: 62.6 GiB of RAM
Graphics Processor: AMD Radeon R9 390 Series
usr_40476@2xeon:~>=20
```

kernel params:
```
resume=3D/dev/disk/by-uuid/fa9f1657-6f6a-4695-b9da-dcd01328cb84 security=3D=
apparmor
splash=3D0 radeon.si_support=3D0 amdgpu.si_support=3D1 radeon.cik_support=
=3D0
amdgpu.cik_support=3D1
```

from laptop (no issues):
```
Jan 24 20:03:20 indestructable kernel: EDID block 1 (tag 0x1e) checksum is
invalid, remainder is 132
```

from desktop (GPU crash)
```
Jan 24 16:04:04 2xeon kernel: ------------[ cut here ]------------
Jan 24 16:04:04 2xeon kernel: memmove: detected field-spanning write (size
4224) of single field "sink->dc_edid.raw_edid" at
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_helpers.c:932 (si=
ze
2048)
Jan 24 16:04:04 2xeon kernel: WARNING: CPU: 74 PID: 1040 at
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_helpers.c:932
dm_helpers_read_local_edid+0x239/0x280 [amdgpu]
Jan 24 16:04:04 2xeon kernel: Modules linked in: mptcp_diag tcp_diag udp_di=
ag
raw_diag inet_diag unix_diag rfcomm snd_seq_dummy snd_hrtimer snd_seq ccm t=
un
af_packet nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet
nf_rej>
Jan 24 16:04:04 2xeon kernel:  uvc intel_pmc_bxt videobuf2_memops snd_hda_c=
ore
snd_rawmidi iTCO_vendor_support videobuf2_v4l2 cfg80211 snd_hwdep
snd_seq_device videobuf2_common bluetooth kvm r8169 snd_pcm videodev aiptek
snd_timer real>
Jan 24 16:04:04 2xeon kernel: CPU: 74 UID: 0 PID: 1040 Comm: kworker/74:1H =
Not
tainted 6.12.10-1-default #1 openSUSE Tumbleweed
92f8b4bfae9b116207d57ef1371c30c09d434808
Jan 24 16:04:04 2xeon kernel: Hardware name: INTEL X99/X99, BIOS 5.11
03/06/2024
Jan 24 16:04:04 2xeon kernel: Workqueue: events_highpri dm_irq_work_func
[amdgpu]
Jan 24 16:04:04 2xeon kernel: RIP: 0010:dm_helpers_read_local_edid+0x239/0x=
280
[amdgpu]
Jan 24 16:04:04 2xeon kernel: Code: 0f 85 8c fe ff ff b9 00 08 00 00 48 c7 =
c2
88 72 80 c1 48 c7 c7 f8 72 80 c1 48 89 74 24 08 c6 05 28 3f 3f 00 01 e8 57 =
c8
bc d5 <0f> 0b 48 8b 74 24 08 e9 5c fe ff ff 41 80 bd 70 07 00 00 00 41 b8
Jan 24 16:04:04 2xeon kernel: RSP: 0000:ffffb63bc241fc08 EFLAGS: 00210286
Jan 24 16:04:04 2xeon kernel: RAX: 0000000000000000 RBX: ffff91ba6edb2000 R=
CX:
0000000000000027
Jan 24 16:04:04 2xeon kernel: RDX: ffff91c97f727848 RSI: 0000000000000001 R=
DI:
ffff91c97f727840
Jan 24 16:04:04 2xeon kernel: RBP: ffff91ba4d628800 R08: 0000000000000000 R=
09:
ffffb63bc241fa98
Jan 24 16:04:04 2xeon kernel: R10: ffff91c97cafffa8 R11: 0000000000000003 R=
12:
0000000000000003
Jan 24 16:04:04 2xeon kernel: R13: ffff91ba4277a000 R14: ffff91ba4277ad58 R=
15:
ffff91bb8768e000
Jan 24 16:04:04 2xeon kernel: FS:  0000000000000000(0000)
GS:ffff91c97f700000(0000) knlGS:0000000000000000
Jan 24 16:04:04 2xeon kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005=
0033
Jan 24 16:04:04 2xeon kernel: CR2: 00000000c9dfcc28 CR3: 0000000f1c838004 C=
R4:
00000000003726f0
Jan 24 16:04:04 2xeon kernel: DR0: 0000000000000000 DR1: 0000000000000000 D=
R2:
0000000000000000
Jan 24 16:04:04 2xeon kernel: DR3: 0000000000000000 DR6: 00000000fffe0ff0 D=
R7:
0000000000000400
Jan 24 16:04:04 2xeon kernel: Call Trace:
Jan 24 16:04:04 2xeon kernel:  <TASK>
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? __warn.cold+0x93/0xf7
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? report_bug+0xff/0x140
Jan 24 16:04:04 2xeon kernel:  ? prb_read_valid+0x1b/0x30
Jan 24 16:04:04 2xeon kernel:  ? handle_bug+0x58/0x90
Jan 24 16:04:04 2xeon kernel:  ? exc_invalid_op+0x17/0x70
Jan 24 16:04:04 2xeon kernel:  ? asm_exc_invalid_op+0x1a/0x20
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  detect_link_and_local_sink+0x4e7/0x1050 [amd=
gpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_write_reg_func+0x47/0xb0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_write_reg_func+0x47/0xb0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? generic_reg_update_ex+0x144/0x280 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  link_detect+0x38/0x4e0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dal_gpio_destroy_irq+0x25/0x40 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? query_hpd_status+0x6e/0xa0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  handle_hpd_irq_helper+0x116/0x190 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  process_one_work+0x16b/0x320
Jan 24 16:04:04 2xeon kernel:  worker_thread+0x2da/0x410
Jan 24 16:04:04 2xeon kernel:  ? __pfx_worker_thread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  kthread+0xd2/0x100
Jan 24 16:04:04 2xeon kernel:  ? __pfx_kthread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  ret_from_fork+0x34/0x50
Jan 24 16:04:04 2xeon kernel:  ? __pfx_kthread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  ret_from_fork_asm+0x1a/0x30
Jan 24 16:04:04 2xeon kernel:  </TASK>
Jan 24 16:04:04 2xeon kernel: ---[ end trace 0000000000000000 ]---
```
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17378157963.DC42f45.28144
Date: Sat, 25 Jan 2025 14:36:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236415

          Summary
          Hitachi pi-500 EDID data causes GPU crash

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          declanseeley@icloud.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Just got a Hitachi pi-500 and was able to confirm that it is=
 sending some
irregular EDID data which is crashing my GPU

info:
```
usr_40476@2xeon:~> kinfo
Operating System: openSUSE Tumbleweed 20250121
KDE Plasma Version: 6.2.5
KDE Frameworks Version: 6.10.0
Qt Version: 6.8.1
Kernel Version: 6.12.10-1-default (64-bit)
Graphics Platform: Wayland
Processors: 88 =C3=97 Intel=C2=AE Xeon=C2=AE CPU E5-2699 v4 @ 2.20GHz
Memory: 62.6 GiB of RAM
Graphics Processor: AMD Radeon R9 390 Series
usr_40476@2xeon:~>=20
```

kernel params:
```
resume=3D/dev/disk/by-uuid/fa9f1657-6f6a-4695-b9da-dcd01328cb84 security=3D=
apparmor
splash=3D0 radeon.si_support=3D0 amdgpu.si_support=3D1 radeon.cik_support=
=3D0
amdgpu.cik_support=3D1
```

from laptop (no issues):
```
Jan 24 20:03:20 indestructable kernel: EDID block 1 (tag 0x1e) checksum is
invalid, remainder is 132
```

from desktop (GPU crash)
```
Jan 24 16:04:04 2xeon kernel: ------------[ cut here ]------------
Jan 24 16:04:04 2xeon kernel: memmove: detected field-spanning write (size
4224) of single field "sink->dc_edid.raw_edid" at
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_helpers.c:932 (si=
ze
2048)
Jan 24 16:04:04 2xeon kernel: WARNING: CPU: 74 PID: 1040 at
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_helpers.c:932
dm_helpers_read_local_edid+0x239/0x280 [amdgpu]
Jan 24 16:04:04 2xeon kernel: Modules linked in: mptcp_diag tcp_diag udp_di=
ag
raw_diag inet_diag unix_diag rfcomm snd_seq_dummy snd_hrtimer snd_seq ccm t=
un
af_packet nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet
nf_rej>
Jan 24 16:04:04 2xeon kernel:  uvc intel_pmc_bxt videobuf2_memops snd_hda_c=
ore
snd_rawmidi iTCO_vendor_support videobuf2_v4l2 cfg80211 snd_hwdep
snd_seq_device videobuf2_common bluetooth kvm r8169 snd_pcm videodev aiptek
snd_timer real>
Jan 24 16:04:04 2xeon kernel: CPU: 74 UID: 0 PID: 1040 Comm: kworker/74:1H =
Not
tainted 6.12.10-1-default #1 openSUSE Tumbleweed
92f8b4bfae9b116207d57ef1371c30c09d434808
Jan 24 16:04:04 2xeon kernel: Hardware name: INTEL X99/X99, BIOS 5.11
03/06/2024
Jan 24 16:04:04 2xeon kernel: Workqueue: events_highpri dm_irq_work_func
[amdgpu]
Jan 24 16:04:04 2xeon kernel: RIP: 0010:dm_helpers_read_local_edid+0x239/0x=
280
[amdgpu]
Jan 24 16:04:04 2xeon kernel: Code: 0f 85 8c fe ff ff b9 00 08 00 00 48 c7 =
c2
88 72 80 c1 48 c7 c7 f8 72 80 c1 48 89 74 24 08 c6 05 28 3f 3f 00 01 e8 57 =
c8
bc d5 <0f> 0b 48 8b 74 24 08 e9 5c fe ff ff 41 80 bd 70 07 00 00 00 4=
1 b8
Jan 24 16:04:04 2xeon kernel: RSP: 0000:ffffb63bc241fc08 EFLAGS: 00210286
Jan 24 16:04:04 2xeon kernel: RAX: 0000000000000000 RBX: ffff91ba6edb2000 R=
CX:
0000000000000027
Jan 24 16:04:04 2xeon kernel: RDX: ffff91c97f727848 RSI: 0000000000000001 R=
DI:
ffff91c97f727840
Jan 24 16:04:04 2xeon kernel: RBP: ffff91ba4d628800 R08: 0000000000000000 R=
09:
ffffb63bc241fa98
Jan 24 16:04:04 2xeon kernel: R10: ffff91c97cafffa8 R11: 0000000000000003 R=
12:
0000000000000003
Jan 24 16:04:04 2xeon kernel: R13: ffff91ba4277a000 R14: ffff91ba4277ad58 R=
15:
ffff91bb8768e000
Jan 24 16:04:04 2xeon kernel: FS:  0000000000000000(0000)
GS:ffff91c97f700000(0000) knlGS:0000000000000000
Jan 24 16:04:04 2xeon kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005=
0033
Jan 24 16:04:04 2xeon kernel: CR2: 00000000c9dfcc28 CR3: 0000000f1c838004 C=
R4:
00000000003726f0
Jan 24 16:04:04 2xeon kernel: DR0: 0000000000000000 DR1: 0000000000000000 D=
R2:
0000000000000000
Jan 24 16:04:04 2xeon kernel: DR3: 0000000000000000 DR6: 00000000fffe0ff0 D=
R7:
0000000000000400
Jan 24 16:04:04 2xeon kernel: Call Trace:
Jan 24 16:04:04 2xeon kernel:  <TASK>
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? __warn.cold+0x93/0xf7
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? report_bug+0xff/0x140
Jan 24 16:04:04 2xeon kernel:  ? prb_read_valid+0x1b/0x30
Jan 24 16:04:04 2xeon kernel:  ? handle_bug+0x58/0x90
Jan 24 16:04:04 2xeon kernel:  ? exc_invalid_op+0x17/0x70
Jan 24 16:04:04 2xeon kernel:  ? asm_exc_invalid_op+0x1a/0x20
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_helpers_read_local_edid+0x239/0x280 [am=
dgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  detect_link_and_local_sink+0x4e7/0x1050 [amd=
gpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_write_reg_func+0x47/0xb0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dm_write_reg_func+0x47/0xb0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? generic_reg_update_ex+0x144/0x280 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  link_detect+0x38/0x4e0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? dal_gpio_destroy_irq+0x25/0x40 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  ? query_hpd_status+0x6e/0xa0 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  handle_hpd_irq_helper+0x116/0x190 [amdgpu
145e705fb20fed36f5fe6263fd32206135db95c0]
Jan 24 16:04:04 2xeon kernel:  process_one_work+0x16b/0x320
Jan 24 16:04:04 2xeon kernel:  worker_thread+0x2da/0x410
Jan 24 16:04:04 2xeon kernel:  ? __pfx_worker_thread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  kthread+0xd2/0x100
Jan 24 16:04:04 2xeon kernel:  ? __pfx_kthread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  ret_from_fork+0x34/0x50
Jan 24 16:04:04 2xeon kernel:  ? __pfx_kthread+0x10/0x10
Jan 24 16:04:04 2xeon kernel:  ret_from_fork_asm+0x1a/0x30
Jan 24 16:04:04 2xeon kernel:  </TASK>
Jan 24 16:04:04 2xeon kernel: ---[ end trace 0000000000000000 ]---
```

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17378157963.DC42f45.28144--


--17379162802.b1bEb2CD.28536
Date: Sun, 26 Jan 2025 18:31:20 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236438

            Bug ID: 1236438
           Summary: VUL-0: abseil-cpp: potential integer overflow in hash container create/resize
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: bwiedemann-at-suse.com, fstrba-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

from https://github.com/abseil/abseil-cpp/releases/tag/20240722.1

> Patch 1 addresses a security issue in hash container create/resize.

from
https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622=
cb74d90c1

> The sized constructors, reserve(), and rehash() methods of
> absl::{flat,node}_hash_{set,map} did not impose an upper bound on
> their size argument. As a result, it was possible for a caller to pass
> a very large size that would cause an integer overflow when computing
> the size of the container's backing store. Subsequent accesses to the
> container might then access out-of-bounds memory.
>=20
> The fix is in two parts:
>=20
> 1) Update max_size() to return the maximum number of items that can be
> stored in the container
>=20
> 2) Validate the size arguments to the constructors, reserve(), and
> rehash() methods, and abort the program when the argument is invalid
>=20
> We've looked at uses of these containers in Google codebases like
> Chrome, and determined this vulnerability is likely to be difficult to
> exploit. This is primarily because container sizes are rarely
> attacker-controlled.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17379162802.b1bEb2CD.28536
Date: Sun, 26 Jan 2025 18:31:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236438

          Summary
          VUL-0: abseil-cpp: potential integer overflow in hash contain=
er create/resize

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          bwiedemann@suse.com, fstrba@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

from https://github.com/abseil/abseil-cpp/releases/tag/2024072=
2.1

> Patch 1 addresses a security issue in hash conta=
iner create/resize.

from
https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e=
3958dd90bb8569a2766622cb74d90c1

> The sized constructors, reserve(), and rehash() =
methods of
> absl::{flat,node}_hash_{set,map} did not impose an upper bound on
> their size argument. As a result, it was possible for a caller to pass
> a very large size that would cause an integer overflow when computing
> the size of the container's backing store. Subsequent accesses to the
> container might then access out-of-bounds memory.
>=20
> The fix is in two parts:
>=20
> 1) Update max_size() to return the maximum number of items that can be
> stored in the container
>=20
> 2) Validate the size arguments to the constructors, reserve(), and
> rehash() methods, and abort the program when the argument is invalid
>=20
> We've looked at uses of these containers in Google codebases like
> Chrome, and determined this vulnerability is likely to be difficult to
> exploit. This is primarily because container sizes are rarely
> attacker-controlled.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17379162802.b1bEb2CD.28536--


--17380690391.A7062.31802
Date: Tue, 28 Jan 2025 12:57:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236538

            Bug ID: 1236538
           Summary: Wrong content/indications in /usr/etc/polkit-default-privs/local.template
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: stakanov-at-disroot.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

/usr/etc/polkit-default-privs/local.template
has the polkit-default-privs.local template for Tumbleweed and opensuse.=20

But the indications for the usage are in conflict with the how-to for suse =
and
tumblweed.=20

Indications in the file local.template:=20

# /etc/polkit-default-privs/local
# NOTE: This file is a template ONLY. Please create a copy of it in
#       /etc/polkit-default-privs/local and remove this NOTE.
#
# This file is used by the set_polkit_default_privs tool to generate polkit
# rules. It is meant for local overrides of the active profile (defined in
# /etc/sysconfig/security) by the administrator of the system: any definiti=
ons
# here take precedence over the distribution defaults in
# /usr/etc/polkit-default-privs/profiles/<profile>.
#
# The syntax for this file is defined in polkit-default-privs(5). Note that=
 you
# need to run /sbin/set_polkit_default_privs for changes to take effect.

But the howto of openSUSE says:=20
https://manpages.opensuse.org/Tumbleweed/polkit-default-privs/polkit-defaul=
t-privs.5.en.html

 Do not modify the profile settings in the files listed above. To define yo=
ur
own custom Polkit settings, use /etc/polkit-default-privs.local. For detail=
s,
refer to Section 18.4.3, =E2=80=9CModifying the SUSE default privileges=E2=
=80=9D.

The indications of the template file should respect the indications given in
the howto and should follow the same name scheme.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17380690391.A7062.31802
Date: Tue, 28 Jan 2025 12:57:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236538

          Summary
          Wrong content/indications in /usr/etc/polkit-default-privs/lo=
cal.template

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          stakanov@disroot.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

/usr/etc/polkit-default-privs/local.template
has the polkit-default-privs.local template for Tumbleweed and opensuse.=20

But the indications for the usage are in conflict with the how-to for suse =
and
tumblweed.=20

Indications in the file local.template:=20

# /etc/polkit-default-privs/local
# NOTE: This file is a template ONLY. Please create a copy of it in
#       /etc/polkit-default-privs/local and remove this NOTE.
#
# This file is used by the set_polkit_default_privs tool to generate polkit
# rules. It is meant for local overrides of the active profile (defined in
# /etc/sysconfig/security) by the administrator of the system: any definiti=
ons
# here take precedence over the distribution defaults in
# /usr/etc/polkit-default-privs/profiles/<profile>.
#
# The syntax for this file is defined in polkit-default-privs(5). Note that=
 you
# need to run /sbin/set_polkit_default_privs for changes to take effect.

But the howto of openSUSE says:=20
https://manpages.opensuse.org/Tumbleweed/polk=
it-default-privs/polkit-default-privs.5.en.html

 Do not modify the profile settings in the files listed above. To define yo=
ur
own custom Polkit settings, use /etc/polkit-default-privs.local. For detail=
s,
refer to Section 18.4.3, =E2=80=9CModifying the SUSE default privileges=E2=
=80=9D.

The indications of the template file should respect the indications given in
the howto and should follow the same name scheme.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17380690391.A7062.31802--


--17381048256.2fee0b.378
Date: Tue, 28 Jan 2025 22:53:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236586

            Bug ID: 1236586
           Summary: VUL-0: CVE-2025-0762: chromium: 132.0.6834.159 stable release
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-des=
ktop_28.html

Fixed in chromium 132.0.6834.159:=20

* CVE-2025-0762: Use after free in DevTools
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17381048256.2fee0b.378
Date: Tue, 28 Jan 2025 22:53:45 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236586

          Summary
          VUL-0: CVE-2025-0762: chromium: 132.0.6834.159 stable release

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://chromereleases.googleblog.c=
om/2025/01/stable-channel-update-for-desktop_28.html

Fixed in chromium 132.0.6834.159:=20

* CVE-2025-0762: Use after free in DevTools

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17381048256.2fee0b.378--


body:
--17381348912.1b1a04.495
Date: Wed, 29 Jan 2025 07:14:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236592

            Bug ID: 1236592
           Summary: snapper-zypp-plugin not installed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4812933/modules/snap
                    per_zypp/steps/5
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: felix.niederwanger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

The openSUSE-Leap-15.6-ARM-JeOS-efi.aarch64-2024.05.03-Build13.461.raw.xz i=
mage
does not ship with the snapper-zypp-plugin.

See https://openqa.opensuse.org/tests/4812933/modules/snapper_zypp/steps/5
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17381348912.1b1a04.495
Date: Wed, 29 Jan 2025 07:14:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236592

          Summary
          snapper-zypp-plugin not installed

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4812933/modules/snapper_zyp=
p/steps/5

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          felix.niederwanger@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

The openSUSE-Leap-15.6-ARM-JeOS-efi.aarch64-2024.05.03-Build=
13.461.raw.xz image
does not ship with the snapper-zypp-plugin.

See https://openqa.opensuse.org/tests/4812933/modules/snapper_zypp/=
steps/5

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17381348912.1b1a04.495--

summary: snapper-zypp-plugin not installed


--17382787050.bBBE4c.5993
Date: Thu, 30 Jan 2025 23:11:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236660

            Bug ID: 1236660
           Summary: Flatpak build command freezes system every time
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: andrew-at-sourceflow.dev
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The following commands freeze my system every time that I run the last comm=
and.
It always crashes on the same printed message, saying something like,
"Generating metadata".

$ git clone https://github.com/flathub/studio.okcode.open_alert_viewer
$ cd studio.okcode.open_alert_viewer
$ flatpak run org.flatpak.Builder --force-clean --sandbox --ccache
--mirror-screenshots-url=3Dhttps://dl.flathub.org/media/ --repo=3Drepo buil=
ddir
studio.okcode.open_alert_viewer.yml

The command is a shortened version of the one listed here:

https://docs.flathub.org/docs/for-app-authors/submission/

Previously, running similar commands on similar data did not cause my OS to
crash.

The first time I checked, I saw no relevant error messages in `journalctl -=
e -b
-1` after the flatpak builder entry, but this time, I do see:=20

Jan 30 17:52:13 mercury.lan systemd[2299]:
dbus-:1.2-org.gnome.Epiphany.SearchProvider@0.service: Unit process 3780
(WebKitNetworkPr) remains running after unit stopped.
Jan 30 17:52:30 mercury.lan systemd[2299]: Started
app-flatpak-org.flatpak.Builder-4754.scope.
Jan 30 17:52:31 mercury.lan systemd[2299]: gnome-terminal-server.service:
Consumed 1.763s CPU time.
Jan 30 17:52:32 mercury.lan gnome-shell[2474]: Received error from D-Bus se=
arch
provider org.gnome.Terminal.desktop: Gio.IOErrorEnum: Cannot invoke method;
proxy is for the well-known name org.gnome.Terminal without an owner, and p=
roxy
was constructed with the G_DBUS_PROXY_FLAGS_DO_NOT_AUTO_START flag

I'm running Tumbleweed with a "13th Gen Intel(R) Core(TM) i5-1335U" process=
or.

Here's the YAML file for reference:

```
# SPDX-FileCopyrightText: 2025 Open Alert Viewer authors
#
# SPDX-License-Identifier: MIT
#
id: studio.okcode.open_alert_viewer
runtime: org.freedesktop.Platform
runtime-version: "24.08"
sdk: org.freedesktop.Sdk
command: open_alert_viewer
finish-args:
  - --share=3Dipc
  - --socket=3Dfallback-x11
  - --socket=3Dwayland
  - --device=3Ddri
  - --socket=3Dpulseaudio
  - --talk-name=3Dorg.freedesktop.Notifications
modules:
  - name: open_alert_viewer
    buildsystem: simple
    build-commands:
      - cp -R bundle/* /app/
      - mkdir /app/bin/
      - ln -s ../open_alert_viewer /app/bin/open_alert_viewer
      - install -Dm644
sources/assets/icon/open_alert_viewer_circle_footprint.svg
/app/share/icons/hicolor/scalable/apps/studio.okcode.open_alert_viewer.svg
      - install -Dm644
sources/linux/oav-custom/studio.okcode.open_alert_viewer.desktop
/app/share/applications/studio.okcode.open_alert_viewer.desktop
      - install -Dm644
sources/linux/oav-custom/studio.okcode.open_alert_viewer.metainfo.xml
/app/share/metainfo/studio.okcode.open_alert_viewer.metainfo.xml
    sources:
      - type: archive
        url:
https://github.com/okcode-studio/open_alert_viewer/archive/refs/tags/v1.1.1=
5.tar.gz
        sha256:
f5c181fb96f977c0f596d827b3a5f5f740e65651530536e65c0061a3a346eba3
        dest: sources
      - type: archive
        only-arches:
          - x86_64
        url:
https://github.com/okcode-studio/open_alert_viewer/releases/download/v1.1.1=
5/oav-bundle-ubuntu-noble-x86_64.tar.gz
        sha256:
d365ac9567077beb05161cd612096e0aea0752026f14fb6a68769d551371b456
        dest: bundle
      - type: archive
        only-arches:
          - aarch64
        url:
https://github.com/okcode-studio/open_alert_viewer/releases/download/v1.1.1=
5/oav-bundle-ubuntu-noble-aarch64.tar.gz
        sha256:
fa6c72ea7433e12b4a9dbf1f8982aa418acc269b6ea6b41d786ab3cb1a0a7ead
        dest: bundle
```
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17382787050.bBBE4c.5993
Date: Thu, 30 Jan 2025 23:11:45 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236660

          Summary
          Flatpak build command freezes system every time

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Linux

          Status
          NEW

          Severity
          Critical

          Priority
          P5 - None

          Component
          Containers

          Assignee
          containers-bugowner@suse.de

          Reporter
          andrew@sourceflow.dev

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The following commands freeze my system every time that I ru=
n the last command.
It always crashes on the same printed message, saying something like,
"Generating metadata".

$ git clone https://github.com/flathub/studio.okcode.open_alert_viewer
$ cd studio.okcode.open_alert_viewer
$ flatpak run org.flatpak.Builder --force-clean --sandbox --ccache
--mirror-screenshots-url=3Dhttps:=
//dl.flathub.org/media/ --repo=3Drepo builddir
studio.okcode.open_alert_viewer.yml

The command is a shortened version of the one listed here:

https=
://docs.flathub.org/docs/for-app-authors/submission/

Previously, running similar commands on similar data did not cause my OS to
crash.

The first time I checked, I saw no relevant error messages in `journalctl -=
e -b
-1` after the flatpak builder entry, but this time, I do see:=20

Jan 30 17:52:13 mercury.lan systemd[2299]:
dbus-:1.2-org.gnome.Epiphany.SearchProvider@0.service: Unit process 3780
(WebKitNetworkPr) remains running after unit stopped.
Jan 30 17:52:30 mercury.lan systemd[2299]: Started
app-flatpak-org.flatpak.Builder-4754.scope.
Jan 30 17:52:31 mercury.lan systemd[2299]: gnome-terminal-server.service:
Consumed 1.763s CPU time.
Jan 30 17:52:32 mercury.lan gnome-shell[2474]: Received error from D-Bus se=
arch
provider org.gnome.Terminal.desktop: Gio.IOErrorEnum: Cannot invoke method;
proxy is for the well-known name org.gnome.Terminal without an owner, and p=
roxy
was constructed with the G_DBUS_PROXY_FLAGS_DO_NOT_AUTO_START flag

I'm running Tumbleweed with a "13th Gen Intel(R) Core(TM) i5-1335U&quo=
t; processor.

Here's the YAML file for reference:

```
# SPDX-FileCopyrightText: 2025 Open Alert Viewer authors
#
# SPDX-License-Identifier: MIT
#
id: studio.okcode.open_alert_viewer
runtime: org.freedesktop.Platform
runtime-version: "24.08"
sdk: org.freedesktop.Sdk
command: open_alert_viewer
finish-args:
  - --share=3Dipc
  - --socket=3Dfallback-x11
  - --socket=3Dwayland
  - --device=3Ddri
  - --socket=3Dpulseaudio
  - --talk-name=3Dorg.freedesktop.Notifications
modules:
  - name: open_alert_viewer
    buildsystem: simple
    build-commands:
      - cp -R bundle/* /app/
      - mkdir /app/bin/
      - ln -s ../open_alert_viewer /app/bin/open_alert_viewer
      - install -Dm644
sources/assets/icon/open_alert_viewer_circle_footprint.svg
/app/share/icons/hicolor/scalable/apps/studio.okcode.open_alert_viewer.svg
      - install -Dm644
sources/linux/oav-custom/studio.okcode.open_alert_viewer.desktop
/app/share/applications/studio.okcode.open_alert_viewer.desktop
      - install -Dm644
sources/linux/oav-custom/studio.okcode.open_alert_viewer.metainfo.xml
/app/share/metainfo/studio.okcode.open_alert_viewer.metainfo.xml
    sources:
      - type: archive
        url:
<a href=3D"https://github.com/okcode-studio/open_alert_viewer/archive/refs/=
tags/v1.1.15.tar.gz">https://github.com/okcode-studio/open_alert_viewer/arc=
hive/refs/tags/v1.1.15.tar.gz</a>
        sha256:
f5c181fb96f977c0f596d827b3a5f5f740e65651530536e65c0061a3a346eba3
        dest: sources
      - type: archive
        only-arches:
          - x86_64
        url:
<a href=3D"https://github.com/okcode-studio/open_alert_viewer/releases/down=
load/v1.1.15/oav-bundle-ubuntu-noble-x86_64.tar.gz">https://github.com/okco=
de-studio/open_alert_viewer/releases/download/v1.1.15/oav-bundle-ubuntu-nob=
le-x86_64.tar.gz</a>
        sha256:
d365ac9567077beb05161cd612096e0aea0752026f14fb6a68769d551371b456
        dest: bundle
      - type: archive
        only-arches:
          - aarch64
        url:
<a href=3D"https://github.com/okcode-studio/open_alert_viewer/releases/down=
load/v1.1.15/oav-bundle-ubuntu-noble-aarch64.tar.gz">https://github.com/okc=
ode-studio/open_alert_viewer/releases/download/v1.1.15/oav-bundle-ubuntu-no=
ble-aarch64.tar.gz</a>
        sha256:
fa6c72ea7433e12b4a9dbf1f8982aa418acc269b6ea6b41d786ab3cb1a0a7ead
        dest: bundle
```

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17382787050.bBBE4c.5993--


--17383191522.2928caAdB.6446
Date: Fri, 31 Jan 2025 10:25:52 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236667

            Bug ID: 1236667
           Summary: vim-plugin-cscope: E568: Duplicate cscope database not added
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mhocko-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

When opening files with cscope db available I am getting

Error detected while processing /usr/share/vim/site/plugin/cscope_maps.vim:
line   42:
E568: Duplicate cscope database not added
Press ENTER or type command to continue

I have tried to silence this in my ~/.vimrc by adding
set nocscopeverbose

but this didn't help.

The following silenced this error, though
-


--17383246111.91B34Db06.6632
Date: Fri, 31 Jan 2025 11:56:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236671

            Bug ID: 1236671
           Summary: [SELinux] transactional-update 5.0.0 support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: iforster-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 880072
  --> https://bugzilla.suse.com/attachment.cgi?id=3D880072&action=3Dedit
audit.log

Operating System: openSUSE MicroOS

The new transactional-update version 5.0.0 requires SELinux policy changes:=
 It
is using a snapper plugin (/usr/lib/snapper/plugins/50-etc) to create a
snapshot for /etc. This plugin also does the inital migration from the prev=
ious
overlayfs based /etc to the new nested BTRFS snapshot based system, where -
among others - the previous contents of /etc are deleted (lots of permission
denied errors for `rm`) and rsync is called to transfer the old /etc conten=
ts
into the new snapshot.

Test packages are available from
https://build.opensuse.org/project/show/home:fos:branches:Base:System, both=
 the
"transactional-update" and the "read-only-root-fs" packages have to be upda=
ted.

Needs to be in SLE 16.x.

The audit.log was created when calling `transactional-update initrd`, once =
with
enforcing, once with permissive SELinux policy.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17383246111.91B34Db06.6632
Date: Fri, 31 Jan 2025 11:56:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236671

          Summary
          [SELinux] transactional-update 5.0.0 support

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          iforster@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 880072 [det=
ails]
audit.log

Operating System: openSUSE MicroOS

The new transactional-update version 5.0.0 requires SELinux policy changes:=
 It
is using a snapper plugin (/usr/lib/snapper/plugins/50-etc) to create a
snapshot for /etc. This plugin also does the inital migration from the prev=
ious
overlayfs based /etc to the new nested BTRFS snapshot based system, where -
among others - the previous contents of /etc are deleted (lots of permission
denied errors for `rm`) and rsync is called to transfer the old /etc conten=
ts
into the new snapshot.

Test packages are available from
https://build.opensuse.org/project/show/home:fos:branches:Base:Syste=
m, both the
"transactional-update" and the "read-only-root-fs" pack=
ages have to be updated.

Needs to be in SLE 16.x.

The audit.log was created when calling `transactional-update initrd`, once =
with
enforcing, once with permissive SELinux policy.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17383246111.91B34Db06.6632--


--17385786914.8dfAc60e7.8522
Date: Mon, 3 Feb 2025 10:31:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1236737

            Bug ID: 1236737
           Summary: VUL-0: CVE-2024-57966: ark: libarchiveplugin.cpp can extract to an absolute path from an archive
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/439250/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: lbeltrame-at-kde.org
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: andrea.mattiazzo-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute p=
ath
from an archive.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-57966
https://www.cve.org/CVERecord?id=3DCVE-2024-57966
https://github.com/KDE/ark/commit/fe518d81b338941e0bf1c5ce5e75a9ab6de4bb58
https://github.com/KDE/ark/compare/v24.11.90...v24.12.0
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17385786914.8dfAc60e7.8522
Date: Mon, 3 Feb 2025 10:31:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1236737

          Summary
          VUL-0: CVE-2024-57966: ark: libarchiveplugin.cpp can extract =
to an absolute path from an archive

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/439250/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          lbeltrame@kde.org

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          andrea.mattiazzo@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract t=
o an absolute path
from an archive.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-57966
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-57966
https://github.com/KDE/ark/commit/fe518d81b338941e0bf1c5ce5e75a=
9ab6de4bb58
https:/=
/github.com/KDE/ark/compare/v24.11.90...v24.12.0

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17385786914.8dfAc60e7.8522--