--1566987062.03f40.32719
Date: Wed, 28 Aug 2019 10:11:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148517

            Bug ID: 1148517
           Summary: devel:gcc/cross-mips-gcc9: /usr/include/c++/9/cstdlib:41:10: fatal error: bits/c++config.h: No such file or directory
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: rguenther-at-suse.com
          Reporter: avemilia-at-protonmail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

I am unable to cross-compile from x86_64 to MIPS using
cross-mips-gcc9-9.1.1+r274111-1.1.x86_64 and
cross-mips-binutils-2.32-6.1.x86_64:

===
ave@pc ..uments/code/own/tcpppl/cpp-hello-world % cat main.cc
#include <cstdlib>
#include <iostream>

int main(int argc, char** argv) {
    std::cout << argv[0] << ": hello world\n";
    return EXIT_SUCCESS;
}

ave@pc ..uments/code/own/tcpppl/cpp-hello-world % mips-suse-linux-g++ main.cc
-o hello-world
In file included from main.cc:1:
/usr/include/c++/9/cstdlib:41:10: fatal error: bits/c++config.h: No such file
or directory
   41 | #include <bits/c++config.h>
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.
===

Compiler information:

===
ave@pc ..uments/code/own/tcpppl/cpp-hello-world % mips-suse-linux-g++ -v
Using built-in specs.
COLLECT_GCC=mips-suse-linux-g++
COLLECT_LTO_WRAPPER=/usr/lib64/gcc/mips-suse-linux/9/lto-wrapper
Target: mips-suse-linux
Configured with: ../configure --prefix=/usr --infodir=/usr/share/info
--mandir=/usr/share/man --libdir=/usr/lib64 --libexecdir=/usr/lib64
--enable-languages=c,c++ --disable-werror
--with-gxx-include-dir=/usr/include/c++/9 --enable-ssp --disable-libssp
--disable-libvtv --disable-cet --disable-libcc1 --disable-plugin
--with-bugurl=https://bugs.opensuse.org/ --with-pkgversion='SUSE Linux'
--with-slibdir=/lib64 --with-system-zlib --enable-libstdcxx-allocator=new
--disable-libstdcxx-pch --enable-version-specific-runtime-libs
--with-gcc-major-version-only --enable-linker-build-id --enable-linux-futex
--enable-gnu-indirect-function --program-suffix=-9
--program-prefix=mips-suse-linux- --target=mips-suse-linux --disable-nls
--with-sysroot=/usr/mips-suse-linux --with-build-sysroot=/usr/mips-suse-linux
--with-build-time-tools=/usr/mips-suse-linux/bin --build=x86_64-suse-linux
--host=x86_64-suse-linux
Thread model: posix
gcc version 9.1.1 20190805 [gcc-9-branch revision 274114] (SUSE Linux)

ave@pc ..uments/code/own/tcpppl/cpp-hello-world % mips-suse-linux-g++ --version
mips-suse-linux-g++ (SUSE Linux) 9.1.1 20190805 [gcc-9-branch revision 274114]
Copyright (C) 2019 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
===

I have also asked about this problem on #gcc Freenode channel, and here is one
response I got:

12:00 <pjb> It indicates the error in /usr/include/c++/9/cstdlib  which is the
host header, not the target header…  So yes, I would say it's a bug in the
cross-compiler.
12:00 <pjb> --with-gxx-include-dir=/usr/include/c++/9  seems suspicious.
12:01 <pjb> Perhaps the planed to use the same C++ headers for all the targets?
 But in that case the missing file may come from a missing dependency in the
packages.
12:01 <pjb> s/the/they/

Maybe you will find it useful.

I am not absolutely confident that it's not an error on my side, but from my
understanding, it should "just work". If not, please explain, how I should call
the compiler.


body:
--1567024915.EFAFDC0.3921
Date: Wed, 28 Aug 2019 20:41:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148642

            Bug ID: 1148642
           Summary: Eigen3Config.cmake incorrect
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ajmay81-at-googlemail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

/usr/share/eigen3/cmake/Eigen3Config.cmake contains the following lines which
are clearly not correct:

set (EIGEN3_INCLUDE_DIR  "${PACKAGE_PREFIX_DIR}/${PACKAGE_PREFIX_DIR}/include")
set (EIGEN3_INCLUDE_DIRS "${PACKAGE_PREFIX_DIR}/${PACKAGE_PREFIX_DIR}/include")

and this results in cmake determining EIGEN3_INCLUDE_DIR to be
/usr//usr/include/eigen3.

I think this all comes from:

https://build.opensuse.org/package/view_file/openSUSE:Leap:15.1/eigen3/eigen3.spec?expand=1

where there appears to be a misunderstanding as to what -DINCLUDE_INSTALL_DIR
is specifying.

summary: Eigen3Config.cmake incorrect


--1567071452.1aA570D50.20877
Date: Thu, 29 Aug 2019 09:37:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148728

            Bug ID: 1148728
           Summary: VUL-1: CVE-2019-15757: libmirage: version 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/241418/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15757

libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in
parser.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15757
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15757
https://sourceforge.net/p/cdemu/bugs/118/
https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932


--1567071785.2e410AaF0.28108
Date: Thu, 29 Aug 2019 09:43:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148736

            Bug ID: 1148736
           Summary: VUL-0: CVE-2019-15767: gnuchess: In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/241421/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15767

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load
function in frontend/cmd.cc via a crafted chess position in an EPD file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15767
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15767
https://lists.gnu.org/archive/html/bug-gnu-chess/2019-08/msg00004.html
https://lists.gnu.org/archive/html/bug-gnu-chess/2019-08/msg00005.html


--1567089749.E524410d20.30586
Date: Thu, 29 Aug 2019 14:42:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148824

            Bug ID: 1148824
           Summary: Issues with %clamp_mtime_to_source_date_epoch
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

An issue has appeared since we enabled %clamp_mtime_to_source_date_epoch for
openSUSE:Factory, i.e.

The files in the FTP Tree (boot/x86_64/{common,initrd,root) are being
built/packaged as part of the package installation-images. Those files
frequently change their content, even without i-i changing the changelog (based
on depending packages, like yast, kernel, ...)

The files are being extracted out of i-i's generated rpms and published on the
FTP Tree. From OBS to download.o.o, rsync is being used to sync the files.

the files are having unmodified mtime though, which makes rsync, in the default
config, ignore/skip those files from being resynced, resulting in broken FTP
Trees (uninstallable using NET installer)


--1567093997.2a5dc4.2118
Date: Thu, 29 Aug 2019 15:53:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148844

            Bug ID: 1148844
           Summary: VUL-1: CVE-2019-15784: srt: array overflow if there are many SRT connections.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/241447/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15784

Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if
there are many SRT connections.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15784
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15784
https://github.com/Haivision/srt/pull/811


--1567321388.ca135.20618
Date: Sun, 1 Sep 2019 07:03:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149065

            Bug ID: 1149065
           Summary: "ibus-engine-simple" and "ibus-daemon" crash with U004A U0301 in .XCompose
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ftake-at-geeko.jp
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Upstream: https://github.com/ibus/ibus/issues/2123

When .XCompose have the following line, ibus-simple exits abnormally and after
that ibus-daemon crashes with seg fault.

```
<dead_acute> <J>             : "J́"    # LATIN CAPITAL LETTER J U004A with
COMBINING ACUTE ACCENT U0301
```


--1567435351.DBCae20.4954
Date: Mon, 2 Sep 2019 14:42:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149119

            Bug ID: 1149119
           Summary: kernel-default-base does not have a debuginfo package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the kernel-default-base package was split out into a separate .spec file,
there is no -debuginfo (or -debugsource) emitted anymore.

Maybe this is intentional?


--1567436542.d475b5D337.1707
Date: Mon, 2 Sep 2019 15:02:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149121

            Bug ID: 1149121
           Summary: python3-base fails on tests - test_weakref hangs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

python3-base build hangs on 'test_weakref' for aarch64:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.2:ARM/python3-base/ports/aarch64


--1567438266.2b7daF0.28331
Date: Mon, 2 Sep 2019 15:31:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149124

            Bug ID: 1149124
           Summary: python3-cheroot insists it needs backports.functools_lru_cache
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ncutler-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On Leap 15.1:

$ rpm -q python3-cheroot
python3-cheroot-6.5.5-lp151.3.3.1.noarch

$ python3
python3
Python 3.6.5 (default, Mar 31 2018, 19:45:04) [GCC] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import pkg_resources; pkg_resources.require('cheroot')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 895,
in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 781,
in resolve
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'backports.functools_lru_cache'
distribution was not found and is required by cheroot

This causes the Ceph Dashboard to fail to load on openSUSE Leap 15.1. Hence
Severity: Critical

We tried this on Tumbleweed as well. Though it has apparently the exact same
version of cheroot, the error is not reproducible there.


--1567440773.4Eebe25.29911
Date: Mon, 2 Sep 2019 16:12:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149126

            Bug ID: 1149126
           Summary: Thunderbird-68 not localizing server set folder names (mozilla repo)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: duge@pre-sense.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hope this is right here...

Thunderbird-68 from
  https://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/
isn't localizing server set folder names (inbox, send, trash, ...).

Usually Thunderbird displays my inbox as "Posteingang" (German).
Thunderbird did so until updating to Thunderbird-68 (even with previous
Thunderbird<68 from the mozilla repo).

Also the official Thunderbird-68 for Linux64 from thunderbird.net still
localizes folder names.

Looks like something in the build process of Thunderbird-68 for the mozilla
repo is broken!


--1567468158.DeEE55e0.24234
Date: Mon, 2 Sep 2019 23:49:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149131

            Bug ID: 1149131
           Summary: transaction server shell does not mount /etc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: william.brown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

transactional-update shell does not mount /etc, meaning that attempts to use
commands like pip install fails in these environments.

/etc should be mounted as part of the shell process.


--1567495027.33E20.21001
Date: Tue, 3 Sep 2019 07:17:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149143

            Bug ID: 1149143
           Summary: VUL-0: CVE-2019-5869: chromium: Use-after-free in Blink
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop_26.html

Fixed in chromium 76.0.3809.132:

* CVE-2019-5869: Use-after-free in Blink
* Various fixes from internal audits, fuzzing and other initiatives


body:
--1567539218.6ACc9.10283
Date: Tue, 3 Sep 2019 19:33:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149259

            Bug ID: 1149259
           Summary: go1.13 release tracking
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

go1.13 (released 2019-09-03) is a major release of Go.
Minor releases of go1.13.x will be provided through August 2020.
This issue tracks go1.13.x releases packaged and submitted initially
to openSUSE:Factory and can be referenced in submissions to
additional repositories.

Go Release Cycle
https://github.com/golang/go/wiki/Go-Release-Cycle

Go Release history
https://golang.org/doc/devel/release.html

summary: go1.13 release tracking


--1567585631.c3EC7F0.6410
Date: Wed, 4 Sep 2019 08:27:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149319

            Bug ID: 1149319
           Summary: multipath: shaky paths may be reinstated prematurely
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When the configuration options san_path_err_threshold /
san_path_err_forget_rate/ san_path_err_recovery_time are used for "marginal"
oar "shaky" path detection, paths may be reinstated prematurely, because if a
path fails again while multipathd is waiting for the recovery time to expire,
the time origin is not reset as it should be.

For example:
 1. path X fails several times and is classified "marginal"
 2. path X comes back up at time T
 3. recovery timer is set to T + 30s (=san_path_err_recovery_time)
 4. path X fails again at T + 10
 5. path X comes back at T + 15
 6. path is reinstated at T + 30

Correctly, it should be handled like this:

 5. path X comes back at T + 15, recovery timer is set to T+15+30 = T+45
 6. path is reinstaed at T+45 (unless it fails again in the meantime)

Reproduction:

set e.g.
    san_path_err_recovery_time 30
    san_path_err_threshold 2
    san_path_err_forget_rate 6

and run a script that sets one iSCSI interface up/down every few seconds
(be sure that either routing or iSCSI is setup such that iSCSI can reach each
portal only through a dedicated interface).

Watch multipathd logs for path failures and reinstates.

Upstream patch:

From a7126e33e7eff8a985600b41b1723ee66b183586 Mon Sep 17 00:00:00 2001
From: Chongyun Wu <wu.chongyun@h3c.com>
Date: Tue, 27 Aug 2019 10:23:50 +0800
Subject: [PATCH] multipathd: "san_path_err" failure optimization


--1567586962.ad2eBe1.8358
Date: Wed, 4 Sep 2019 08:49:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149330

            Bug ID: 1149330
           Summary: devel:languages:ocaml/ocaml: New version available
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: ohering-at-suse.com
          Reporter: zaytsev_k-at-yahoo.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: andisugandi-at-opensuse.org
          Found By: ---
           Blocker: ---

OCaml 4.08.1 is available. Could you please update package?


--1567597487.a8faeaA0.31432
Date: Wed, 4 Sep 2019 11:44:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149382

            Bug ID: 1149382
           Summary: VUL-1: CVE-2019-15892: varnish: potential denial of service by sending crafted HTTP/1 requests
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/241668/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x
before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an
assert by sending crafted HTTP/1 requests. The assert will cause an automatic
restart with a clean cache, which makes it a Denial of Service attack.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15892
http://www.debian.org/security/-1/dsa-4514
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15892
https://varnish-cache.org/security/VSV00003.html


--1567601805.0bBfA15.31141
Date: Wed, 4 Sep 2019 12:56:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149392

            Bug ID: 1149392
           Summary: 'kubeadm init' fails to start inside openQA on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, fvogt-at-suse.com,
                    guillaume.gardet-at-arm.com, rbrown-at-suse.com
        Depends on: 1145002
          Found By: ---
           Blocker: ---

Created attachment 816842
  --> http://bugzilla.opensuse.org/attachment.cgi?id=816842&action=edit
journal.log

'kubeadm init' fails for an unknown reason.

openQA link: https://openqa.opensuse.org/tests/1024732#step/kubeadm/13


body:
--1567755767.0CC15280.30984
Date: Fri, 6 Sep 2019 07:42:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149704

            Bug ID: 1149704
           Summary: [glibc2.30] lttng-ust fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

glibc 2.30 has been submitted for inclusion into Factory - and Staged in :A

lttng-ust is one of the few packages failing to build in this setup

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:A/lttng-ust/standard/x86_64

[   54s] ../include/lttng/ust-tid.h:38:21: error: static declaration of
'gettid' follows non-static declaration
[   54s]    38 | static inline pid_t gettid(void)

summary: [glibc2.30] lttng-ust fails to build


body:
--1567755980.fACF000.5762
Date: Fri, 6 Sep 2019 07:46:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149705

            Bug ID: 1149705
           Summary: [glibc2.30] postfix fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

glibc 2.30 has been submitted for inclusion into Factory - and staged in :A

postfix is amongst the packages failing to build:

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:A/postfix/standard/x86_64

[   30s] dns_str_resflags.c:63:22: error: 'RES_INSECURE1' undeclared here (not
in a function); did you mean 'RES_RECURSE'?
[   30s]    63 |     "RES_INSECURE1", RES_INSECURE1,

summary: [glibc2.30] postfix fails to build


--1567770934.ABcB4d3E9.26514
Date: Fri, 6 Sep 2019 11:55:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149792

            Bug ID: 1149792
           Summary: openssl 1.1.1c causes build failures in other packages
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: vcizek-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/project/show/openSUSE:Leap:15.2:Staging:B:

Build failed apr-util (i586, x86_64)
Build failed fipscheck (i586, x86_64)
Build failed git (i586, x86_64)
Build failed mysql-connector-cpp (x86_64)
Build failed neon (i586, x86_64)
Build failed openslp (i586, x86_64)
Build failed perl-DBD-mysql (i586, x86_64)
Build failed perl-IO-Socket-SSL (i586, x86_64)
Build failed perl-Net-SSLeay (i586, x86_64)
Build failed python (i586, x86_64)
Build failed python-M2Crypto (i586, x86_64)
Build failed python-pyOpenSSL (i586, x86_64)
Build failed python-tornado (i586, x86_64)
Build failed python3 (i586, x86_64)
Build failed thrift (i586, x86_64)

Some are as simple as a missing dependency on zlib, others are less obvious.
Could you please take a look?


--1567782323.F08bA7F4.26140
Date: Fri, 6 Sep 2019 15:05:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149839

            Bug ID: 1149839
           Summary: VUL-1: CVE-2019-15942: ffmpeg: Conditional jump or move depends on uninitialised value" issue in h2645_parse
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/241832/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gnome-bugs-at-suse.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised
value" issue in h2645_parse because alloc_rbsp_buffer in
libavcodec/h2645_parse.c mishandles rbsp_buffer.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15942
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15942
https://trac.ffmpeg.org/ticket/8093


--1567885682.F257d1.29281
Date: Sat, 7 Sep 2019 19:48:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149880

            Bug ID: 1149880
           Summary: server:monitoring/munin: Missing dependency for perl-rrdtool
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: SUSE Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: wolfgang-at-rosenauer.org
          Reporter: martin-at-oneiros.de
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: nix-at-opensuse.org
          Found By: ---
           Blocker: ---

After upgrading from 42.3 to 15.0 munin fails to run because RRDs.pm was
missing; it's provided by perl-rrdtool. That dependency seems to be missing.

Also: Please fix your bugzilla defaults: lrupp-at-suse.com can not be found by
bugzilla so it refuses to accept the pr.


--1568010986.AeA048e0.1491
Date: Mon, 9 Sep 2019 06:36:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149919

            Bug ID: 1149919
           Summary: VUL-1: CVE-2019-16091: libmysofa: out-of-bounds read in directblockRead in hdf/fractalhead.c.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/241964/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: 9+suse-at-cirno.systems
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16091

Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in
hdf/fractalhead.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16091
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16091
https://github.com/hoene/libmysofa/compare/f571522...e07edb3


--1568011083.3A735Ca123.1733
Date: Mon, 9 Sep 2019 06:38:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149920

            Bug ID: 1149920
           Summary: VUL-1: CVE-2019-16092: libmysofa: NULL pointer dereference in getHrtf in hrtf/reader.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/241965/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: 9+suse-at-cirno.systems
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16092

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in
hrtf/reader.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16092
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16092
https://github.com/hoene/libmysofa/compare/f571522...e07edb3


--1568011182.D23d0.8474
Date: Mon, 9 Sep 2019 06:39:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149922

            Bug ID: 1149922
           Summary: VUL-1: CVE-2019-16093: libmysofa invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/241966/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: 9+suse-at-cirno.systems
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16093

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout
in hdf/dataobject.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16093
https://github.com/hoene/libmysofa/compare/f571522...e07edb3


--1568011251.fFab4.8474
Date: Mon, 9 Sep 2019 06:40:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149924

            Bug ID: 1149924
           Summary: VUL-1: CVE-2019-16094: libmysofa: invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/241967/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: 9+suse-at-cirno.systems
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16094

Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout
in
hdf/dataobject.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16094
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16094
https://github.com/hoene/libmysofa/compare/f571522...e07edb3


--1568011523.5B113ED0.10207
Date: Mon, 9 Sep 2019 06:45:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149926

            Bug ID: 1149926
           Summary: VUL-1: CVE-2019-16095: libmysofa: invalid read in getDimension in hrtf/reader.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/241968/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: 9+suse-at-cirno.systems
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16095

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16095
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16095
https://github.com/hoene/libmysofa/compare/f571522...e07edb3


--1568015518.AbAeA0.23070
Date: Mon, 9 Sep 2019 07:51:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149945

            Bug ID: 1149945
           Summary: drbd: failed to build against kernel v5.2.11
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: nwang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since TW kernel update to kernel v5.2.11, drbd incompatible with the kernel.
Update using coccinelle for the compatible support and step into drbd10 phase
in master, with a branch for drbd-9.0.

Related failure for sle15sp2, bsc#1144702. See also
https://jira.suse.com/browse/PM-1294 for Coccinelle in SLE and discuss with
DRBD10

Kernel in TW: kernel-devel-5.2.11-1.2

Error messages when build:
[  159s]   CC [M]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.o
[  160s] In file included from
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_int.h:29,
[  160s]                  from
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.c:38:
[  160s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.c: In
function 'drbd_csum_pages':
[  160s] /usr/src/linux-5.2.11-1/include/crypto/hash.h:63:37: warning: ISO C90
forbids variable length array '__req_desc' [-Wvla]
[  160s]    63 |  char __##name##_desc[sizeof(struct ahash_request) + \
[  160s]       |                                     ^~~~~~~~~~~~~
[  160s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.c:332:2:
note: in expansion of macro 'AHASH_REQUEST_ON_STACK'
[  160s]   332 |  AHASH_REQUEST_ON_STACK(req, tfm);
[  160s]       |  ^~~~~~~~~~~~~~~~~~~~~~
[  160s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.c: In
function 'drbd_csum_bio':
[  160s] /usr/src/linux-5.2.11-1/include/crypto/hash.h:63:37: warning: ISO C90
forbids variable length array '__req_desc' [-Wvla]
[  160s]    63 |  char __##name##_desc[sizeof(struct ahash_request) + \
[  160s]       |                                     ^~~~~~~~~~~~~
[  160s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.c:357:2:
note: in expansion of macro 'AHASH_REQUEST_ON_STACK'
[  160s]   357 |  AHASH_REQUEST_ON_STACK(req, tfm);
[  160s]       |  ^~~~~~~~~~~~~~~~~~~~~~
[  162s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_sender.o:
warning: objtool: drbd_request_endio.cold()+0xe: unreachable instruction
[  162s]   CC [M]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_receiver.o
[  163s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_receiver.c:
In function 'drbd_do_auth':
[  163s]
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_receiver.c:8081:6:
error: 'struct shash_desc' has no member named 'flags'
[  163s]  8081 |  desc->flags = 0;
[  163s]       |      ^~
[  163s] make[2]: *** [/usr/src/linux-5.2.11-1/scripts/Makefile.build:280:
/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default/drbd_receiver.o]
Error 1
[  163s] make[1]: *** [/usr/src/linux-5.2.11-1/Makefile:1611:
_module_/home/abuild/rpmbuild/BUILD/drbd-9.0.19+git.6f5fa5d3/default] Error 2
[  163s] make: *** [../../../linux-5.2.11-1/Makefile:179: sub-make] Error 2


--1568024198.eE4E4e0.17414
Date: Mon, 9 Sep 2019 10:16:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1149986

            Bug ID: 1149986
           Summary: telegram-desktop cannot be started with enabled GTK integration and libqt5-qtstyleplugins-platformtheme-gtk2 installed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: tux93-at-opensuse.org
          Reporter: tux93-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Trying to start telegram-desktop built with enabled GTK integration and
libqt5-qtstyleplugins-platformtheme-gtk2 installed fails with
> ~>telegram-desktop
> (telegram-desktop:4205): GLib-GObject-WARNING **: 17:15:44.346: cannot register existing type 'GdkDisplayManager'
> (telegram-desktop:4205): GLib-CRITICAL **: 17:15:44.346: g_once_init_leave: assertion 'result != 0' failed
> (telegram-desktop:4205): GLib-GObject-CRITICAL **: 17:15:44.346: g_object_new_with_properties: assertion 'G_TYPE_IS_OBJECT (object_type)' failed

Currently this is resolved by a conflict of telegram-desktop with
libqt5-qtstyleplugins-platformtheme-gtk2 which leads to cunfusion of users (bug
1148509)

Ideally the root cause should be found and patched.

A package without the conflict for testing can be found at
https://build.opensuse.org/project/show/home:tux93:tdesktop-no-conflict


--1568025144.C8F03.7875
Date: Mon, 9 Sep 2019 10:32:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1149995

            Bug ID: 1149995
           Summary: Shared libraries missing source level debug info
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: rguenther-at-suse.com
          Reporter: schwab-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Probably due to LTO the debuginfo of shared libaries is broken, for example for
libbfd.


--1568032909.b5D0A70.9111
Date: Mon, 9 Sep 2019 12:41:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1150013

            Bug ID: 1150013
           Summary: vorbisgain needs to be ported to C99 compilers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Linux
            Status: NEW
          Keywords: patch
          Severity: Minor
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: fweimer-at-redhat.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 817404
  --> http://bugzilla.opensuse.org/attachment.cgi?id=817404&action=edit
vorbisgain-c99.patch

There is a missing prototype for the isatty function.

Upstream has already confirmed that there will be no new release for this.


--1568132126.fB7B7D0.30246
Date: Tue, 10 Sep 2019 16:15:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1150208

            Bug ID: 1150208
           Summary: latex2html problems with new perl and images
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ajmay81-at-googlemail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running latex2html on a project that runs fine on leap I see the following
perl warning on tumbleweed:

Loading /usr/share/latex2html/styles/texdefs.perl...
Package: loading /usr/share/latex2html/styles/article.perl
Package: loading /usr/share/latex2html/styles/graphicx.perl
Package: loading /usr/share/latex2html/styles/graphics-support.perlUnescaped
left brace in regex is deprecated here (and will be fatal in Perl 5.32), passed
through in regex; marked by <


--1568206019.a20d5.1329
Date: Wed, 11 Sep 2019 12:46:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1150345

            Bug ID: 1150345
           Summary: AUDIT-1: nagios: review of setgid directory /var/spool/nagios
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jsegitz-at-suse.com, malte.kraus-at-suse.com,
                    matthias.gerstner-at-suse.com
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1150189
Like discussed in the proactive security team we want to catch up with
packages installing set*id items that haven't been whitelisted yet in the
permissions package. Formerly this rpmlint check type didn't cause badness and
therefore didn't require packagers to actually have them reviewed.

Nagios is one of the packages installing a setgid directory that isn't
currently whitelisted:

/var/spool/nagios drwxrwsr-x from nagios-4.4.3-3.1.i586.rpm

The secure use of this directory needs to be reviewed and if all is good a
whitelisting entry in all our permission profiles must be added.


--1568211106.6ED185.26516
Date: Wed, 11 Sep 2019 14:11:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1150366

            Bug ID: 1150366
           Summary: AUDIT-1: ceph-common: review of setgid directory /var/log/ceph
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jsegitz-at-suse.com, malte.kraus-at-suse.com,
                    matthias.gerstner-at-suse.com, ncutler-at-suse.com
            Blocks: 1150189
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1150189
Like discussed in the proactive security team we want to catch up with
packages installing set*id items that haven't been whitelisted yet in the
permissions package. Formerly this rpmlint check type didn't cause badness and
therefore didn't require packagers to actually have them reviewed.

ceph-common is one of the packages installing a setgid directory that isn't
currently whitelisted:

/var/log/ceph drwxrws--T from ceph-common-14.2.2.354+g8878cf2360-1.1.x86_64.rpm

The secure use of this directory needs to be reviewed and if all is good a
whitelisting entry in all our permission profiles must be added.


body:
--1568233260.e4A1FaFB0.13682
Date: Wed, 11 Sep 2019 20:21:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1150413

            Bug ID: 1150413
           Summary: ratbagctl and piper do not work: ratbagd API version is -1 but we require 1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: rombert-at-apache.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I've installed piper and it displays an error when starting: Incompatible
ratbagd API version (required: 1, provided: -1).

The CLI tools ratbagctl has the same problem, fails with:

Traceback (most recent call last):
  File "/usr/bin/ratbagctl", line 2468, in <module>
    main(sys.argv[1:])
  File "/usr/bin/ratbagctl", line 2452, in main
    _r = open_ratbagd(verbose=cmd.verbose)
  File "/usr/bin/ratbagctl", line 2418, in open_ratbagd
    r = Ratbagd(1)
  File "/usr/bin/ratbagctl", line 266, in __init__
    raise RatbagdIncompatible(self.api_version or -1, api_version)
__main__.RatbagdIncompatible: ratbagd API version is -1 but we require 1

The service is active

$ sudo systemctl is-active ratbagd.service
active

Relevant versions:
$ rpm -q piper libratbag-tools ratbagd
piper-0.3-1.1.noarch
libratbag-tools-0.10-1.1.x86_64
ratbagd-0.10-1.1.x86_64

pkgs: libratbag piper


--1568250434.74Aa53Fb0.32292
Date: Thu, 12 Sep 2019 01:07:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1150425

            Bug ID: 1150425
           Summary: VUL-0: chromium: multiple security issues fixed in 77.0.3865.75
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html

Fixed in Chromium 77.0.3865.75:
This update includes 52 security fixes

CVE-2019-5870: Use-after-free in media
CVE-2019-5871: Heap overflow in Skia
CVE-2019-5872: Use-after-free in Mojo
CVE-2019-5874: External URIs may trigger other browsers
CVE-2019-5875: URL bar spoof via download redirect
CVE-2019-5876: Use-after-free in media
CVE-2019-5877: Out-of-bounds access in V8
CVE-2019-5878: Use-after-free in V8
CVE-2019-5879: Extension can bypass same origin policy
CVE-2019-5880: SameSite cookie bypass
CVE-2019-5881: Arbitrary read in SwiftShader
CVE-2019-13659: URL spoof
CVE-2019-13660: Full screen notification overlap
CVE-2019-13661: Full screen notification spoof
CVE-2019-13662: CSP bypass
CVE-2019-13663: IDN spoof
CVE-2019-13664: CSRF bypass
CVE-2019-13665: Multiple file download protection bypass
CVE-2019-13666: Side channel using storage size estimate
CVE-2019-13667: URI bar spoof when using external app URIs
CVE-2019-13668: Global window leak via console
CVE-2019-13669: HTTP authentication spoof
CVE-2019-13670: V8 memory corruption in regex
CVE-2019-13671: Dialog box fails to show origin
CVE-2019-13673: Cross-origin information leak using devtools
CVE-2019-13674: IDN spoofing
CVE-2019-13675: Extensions can be disabled by trailing slash
CVE-2019-13676: Google URI shown for certificate warning
CVE-2019-13677: Chrome web store origin needs to be isolated
CVE-2019-13678: Download dialog spoofing
CVE-2019-13679: User gesture needed for printing
CVE-2019-13680: IP address spoofing to servers
CVE-2019-13681: Bypass on download restrictions
CVE-2019-13682: Site isolation bypass
CVE-2019-13683: Exceptions leaked by devtools
Various fixes from internal audits, fuzzing and other initiatives


--1568289808.6dc0CDc13.10602
Date: Thu, 12 Sep 2019 12:03:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1150553

            Bug ID: 1150553
           Summary: AUDIT-1: rkhunter: review of cron job file(s): /etc/cron.daily/suse.de-rkhunter
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jsegitz-at-suse.com, malte.kraus-at-suse.com,
                    matthias.gerstner-at-suse.com
            Blocks: 1150175
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1150175
As discussed in the proactive security team we want to restrict the
installation of cron job files in the future. To achieve this we first need to
cover the currently existing packages that do this.

rkhunter installs a cron file in /etc/cron.daily/suse.de-rkhunter. It should
be reviewed and whitelisted if all is well.


--1568320134.7BbF01.8534
Date: Thu, 12 Sep 2019 20:28:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1150614

            Bug ID: 1150614
           Summary: yast2-gpmc ignore a directory listing fail if the directory doesn't exist
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

gpmc was trying to list the PolicyDefinitions directory to lookup additional
settings. On a new AD domain, this directory may not exist yet. Don't crash if
it's missing.

  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/wizards.py",
line 12, in <lambda>
    'gpme' : [(lambda lp, creds: GPME(lp, creds).Show()), lp, creds]
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 45, in Show
    self.__reset()
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 33, in __reset
    Wizard.SetContentsButtons('Group Policy Management Editor',
self.__gpme_page(), 'Group Policy Management Editor', '', 'Close')
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 240, in __gpme_page
    HWeight(1, self.__policy_tree()),
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 370, in __policy_tree
    admin_templates = self.__fetch_admin_templates()
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 268, in __fetch_admin_templates
    for f in self.conn.list('../PolicyDefinitions/'):
  File
"/tmp/.mount_admin-cJM3yz/usr/share/YaST2/clients/../include/gpmc/complex.py",
line 420, in list
    return self.conn.list(path)
samba.NTSTATUSError: (3221225524, 'The object name is not found.')


body:
--1568321381.63eE72.13877
Date: Thu, 12 Sep 2019 20:49:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1150616

            Bug ID: 1150616
           Summary: yast2-gpmc crashes when deleting GPO
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

2019-09-12 20:41:52 <3> dmm-sle15(40203) [Python] clients/gpmc.py(<module>):60
Traceback (most recent call last):
  File
"/tmp/.mount_admin-LGH0hN/usr/share/YaST2/clients/../include/gpmc/wizards.py",
line 11, in <lambda>
    'gpmc' : [(lambda lp, creds: GPMC(lp, creds).Show()), lp, creds],
  File
"/tmp/.mount_admin-LGH0hN/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 628, in Show
    current_page = self.del_gpo(selected_gpo[1]['displayName'][-1])
  File
"/tmp/.mount_admin-LGH0hN/usr/share/YaST2/clients/../include/gpmc/dialogs.py",
line 552, in del_gpo
    self.q.delete_gpo(displayName)
  File
"/tmp/.mount_admin-LGH0hN/usr/share/YaST2/clients/../include/gpmc/complex.py",
line 269, in delete_gpo
    self.delete_link(gpo_dn, container['distinguishedName'][0].decode())
  File
"/tmp/.mount_admin-LGH0hN/usr/share/YaST2/clients/../include/gpmc/complex.py",
line 254, in delete_link
    self.ldap_modify(container_dn, stringify_ldap([(ldap.MOD_DELETE, 'gPLink',
None), (ldap.MOD_ADD, 'gPLink', [gplink_str.encode('utf-8')])]))
NameError: name 'ldap' is not defined

summary: yast2-gpmc crashes when deleting GPO


--1568573074.ca0f70280.3789
Date: Sun, 15 Sep 2019 18:44:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1150807

            Bug ID: 1150807
           Summary: NFS-client is broken, nfs.service does not exist.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: emailej-at-yahoo.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After update to Tumbleweed 20190909:

Existing NFS share fails to mount at boot as normal. Running yast nfs client
returns following message on initialization:

These packages need to be installed: nfsidmap

allow install results in the following error message:

Installing required packages failed. If you continue without installing
required packages, Yast may not work properly.

If process is continued Yast fails to start NFS.

Additionally nfs.service seems to not exist:

# systemctl start nfs.service
Failed to start nfs.service: Unit nfs.service not found.

# systemctl status nfs.service
● nfs.service
   Loaded: not-found (Reason: Unit nfs.service not found.)
   Active: active (exited) since Sat 2019-09-14 22:28:27 PDT; 12h ago
 Main PID: 15926 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/nfs.service

 # systemctl status nfs-idmapd.service
● nfs-idmapd.service - NFSv4 ID-name mapping service
   Loaded: loaded (/usr/lib/systemd/system/nfs-idmapd.service; static; vendor
preset: disabled)
   Active: active (running) since Sun 2019-09-15 11:29:28 PDT; 4s ago
  Process: 10919 ExecStart=/usr/sbin/rpc.idmapd (code=exited, status=0/SUCCESS)
 Main PID: 10920 (rpc.idmapd)
    Tasks: 1 (limit: 4915)
   Memory: 396.0K
   CGroup: /system.slice/nfs-idmapd.service
           └─10920 /usr/sbin/rpc.idmapd

Sep 15 11:29:28 linux-ka5p systemd[1]: Stopping NFSv4 ID-name mapping
service...
Sep 15 11:29:28 linux-ka5p systemd[1]: nfs-idmapd.service: Main process exited,
code=killed, status=15/TERM
Sep 15 11:29:28 linux-ka5p systemd[1]: nfs-idmapd.service: Succeeded.
Sep 15 11:29:28 linux-ka5p systemd[1]: Stopped NFSv4 ID-name mapping service.
Sep 15 11:29:28 linux-ka5p systemd[1]: Starting NFSv4 ID-name mapping
service...
Sep 15 11:29:28 linux-ka5p rpc.idmapd[10919]: rpc.idmapd: config error at
/etc/nfs.conf:12: error loading included config
Sep 15 11:29:28 linux-ka5p rpc.idmapd[10919]: config error at /etc/nfs.conf:12:
error loading included config
Sep 15 11:29:28 linux-ka5p rpc.idmapd[10920]: Setting log level to 0
Sep 15 11:29:28 linux-ka5p systemd[1]: Started NFSv4 ID-name mapping service.

Operating System: openSUSE Tumbleweed 20190909
KDE Plasma Version: 5.16.5
KDE Frameworks Version: 5.61.0
Qt Version: 5.13.1
Kernel Version: 5.2.11-1-default
OS Type: 64-bit
Processors: 2 × Intel® Celeron® 2955U @ 1.40GHz
Memory: 7.7 GiB of RAM

Identical behavior observed on separate machine running kernel 4.20.0-1-default


--1568717261.8D3c0.26797
Date: Tue, 17 Sep 2019 10:47:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151044

            Bug ID: 1151044
           Summary: NFS exports from lates TW cannot be mounted from older systems
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: P.Suetterlin-at-royac.iac.es
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the latest Tumbleweed update to 20190909 NFS shares exported by the
upgraded system cannot be mounted by older systems.

I have a home NFS server running Leap 42.3 that I recently re-installed (new
partition) with TW 20190909.  The main client machine is running TW 20180525
(no updates because 3rd party software doesn't like newer ffmpeg stuff).

The client cannot mount the export from the new installation.  It can see
exports from the server machine using 'showmount -e', but trying to mount the
export results in a
  mount.nfs: access denied by server while mounting 192.168.1.36:/export/Video

From my laptop (also running TW 20190909) I can mount the export without
problems.

I've also set up an export on my laptop, but neither the old TW nor the Leap
42.3 installation can mount the share, they get the same error.

The Leap machine runs nfs-client 1.3.0, the old TW has 2.1.1.
The current TW has 2.3.3


--1568734039.21acf0a5.15457
Date: Tue, 17 Sep 2019 15:27:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151081

            Bug ID: 1151081
           Summary: transactional-update shell does not provide resolv.conf
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: iforster-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kubic-bugs-at-opensuse.org
          Found By: ---
           Blocker: ---

Inside the t-u shell, /etc/resolv.conf is dangling, which means that no DNS
lookups are possible.


--1568796075.BC0D0.16925
Date: Wed, 18 Sep 2019 08:41:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151150

            Bug ID: 1151150
           Summary: Tensorflow uses protobuf v3.6.1.2 tarball instead of protobuf from distribution
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Tensorflow uses protobuf v3.6.1.2 tarball instead of protobuf provided by
Tumbleweed, which leads to a build failure on armNN as Caffe is using protobuf
from Tumbleweed (v3.9.1) which confilcts with protobuf v3.6.1.2 from
Tensorflow.

[  368s] [ 52%] Building CXX object
CMakeFiles/armnnCaffeParser.dir/src/armnnCaffeParser/RecordByRecordCaffeParser.cpp.o
[  368s] /usr/bin/c++  -DARMCOMPUTENEON_ENABLED -DARMNN_CAFFE_PARSER
-DARMNN_SERIALIZER
-DARMNN_SERIALIZER_SCHEMA_PATH=\"/home/abuild/rpmbuild/BUILD/armnn-19.05/src/armnnSerializer/ArmnnSchema.fbs\"
-DARMNN_TF_LITE_PARSER
-DARMNN_TF_LITE_SCHEMA_PATH=\"/usr/include/tensorflow/lite/schema/schema.fbs\"
-DARMNN_TF_PARSER -DBOOST_ALL_DYN_LINK -DPROTOBUF_USE_DLLS
-DarmnnCaffeParser_EXPORTS -I/home/abuild/rpmbuild/BUILD/armnn-19.05/include
-I/home/abuild/rpmbuild/BUILD/armnn-19.05/src/armnnUtils -isystem
/usr/lib/python3.7/site-packages/tensorflow/include -isystem /usr/include/half
-isystem /home/abuild/rpmbuild/BUILD/armnn-19.05/third-party  -O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -pthread -std=c++14
-Wall -Werror -Wold-style-cast -Wno-missing-braces -Wconversion  -O2 -g  -fPIC
 -o
CMakeFiles/armnnCaffeParser.dir/src/armnnCaffeParser/RecordByRecordCaffeParser.cpp.o
-c
/home/abuild/rpmbuild/BUILD/armnn-19.05/src/armnnCaffeParser/RecordByRecordCaffeParser.cpp
[  368s] In file included from /usr/include/caffe/proto/caffe.pb.h:37,
[  368s]                  from
/home/abuild/rpmbuild/BUILD/armnn-19.05/src/armnnCaffeParser/RecordByRecordCaffeParser.hpp:12,
[  368s]                  from
/home/abuild/rpmbuild/BUILD/armnn-19.05/src/armnnCaffeParser/RecordByRecordCaffeParser.cpp:6:
[  368s] /usr/include/google/protobuf/port_def.inc:74:2: error: #error
PROTOBUF_DEPRECATED was previously defined
[  368s]    74 | #error PROTOBUF_DEPRECATED was previously defined
[  368s]       |  ^~~~~

As a workaround, Tensorflow has been disabled in armNN until this bug is fixed.


body:
--1568807467.BFde3Ee5.20089
Date: Wed, 18 Sep 2019 11:51:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1151186

            Bug ID: 1151186
           Summary: Changes to preferences not saved in Thunderbird's CardBook add-on
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: psychonaut-at-nothingisreal.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I am using the CardBook add-on for Thunderbird and am running up against a
problem that occurs only with the Thunderbird from the openSUSE RPMs, not from
the official Thunderbird binary downloaded from thunderbird.net.  So I think
the problem must lie with whatever patches are being applied to the openSUSE
RPMs.

The problem is that changes to the CardBook preferences do not persist.

Steps to reproduce:

0. If necessary, first install the CardBook add-on from
<https://addons.thunderbird.net/addon/cardbook/>.
1. Open the CardBook tab (Tools->CardBook) and press the Preferences button to
bring up the CardBook Preferences tab.
2. Change some of the preferences.  (For example, try enabling the Debug log.)
3. Close the CardBook Preferences tab.
4. In the CardBook tab, press the Preferences button to bring up the CardBook
Preferences tab.

Observed behaviour:

5. The preferences have reverted to their previous state.

Expected behaviour:

5. The changes made to the preferences in Step 2 should have persisted.

I am using Thunderbird 68.1.0 (MozillaThunderbird-68.1.0-6.1.x86_64) and
CardDav 42.0 on openSUSE Tumbleweed.  The problem is not reproducible when
using the same version of Thunderbird downloaded from thunderbird.net.

pkgs: MozillaFirefox MozillaThunderbird


--1568813298.db6Bfcf4.12625
Date: Wed, 18 Sep 2019 13:28:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151203

            Bug ID: 1151203
           Summary: neovim coredumps with '*** stack smashing detected ***: <unknown> terminated'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This started happening with the most recent Tumbleweed snapshot update
(20190917-0). A quick search shows that this might be an issue with the
libvterm0 update that was included in this update[1] --
libvterm0-0.1+bzr755-1.1.

[1]: https://bugs.archlinux.org/task/61384


--1568834664.d2eF1307.22055
Date: Wed, 18 Sep 2019 19:24:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151229

            Bug ID: 1151229
           Summary: VUL-0: CVE-2019-13685,CVE-2019-13686,CVE-2019-13687,CVE-2019- 13688: chromium: multiple use-after-free issues fixed in 77.0.3865.90
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop_18.html

* CVE-2019-13685: Use-after-free in UI
* CVE-2019-13688: Use-after-free in media
* CVE-2019-13687: Use-after-free in media
* CVE-2019-13686: Use-after-free in offline pages


--1568890336.3e7162730.19522
Date: Thu, 19 Sep 2019 10:52:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151317

            Bug ID: 1151317
           Summary: enigmail erroneously marked as "for SeaMonkey"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: bernd.speiser@uni-tuebingen.de
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The description (summary) of package enigmail reads "OpenPGP addon for
Thunderbird and SeaMonkey", which is somewhat misleading, since sadly SeaMonkey
support of enigmail has recently been dropped, see
https://sourceforge.net/p/enigmail/forum/announce/thread/146129feca/?limit=25#0c23

Although, I'd rather see continued support for this browser/e-mail client
suite, at least the erroneous information should be deleted from the
repositories.
Thank you!


body:
--1568960398.7A175.21314
Date: Fri, 20 Sep 2019 06:19:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151418

            Bug ID: 1151418
           Summary: sysprof 3.34 build fails with suse-dbus-unauthorized-service check
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: fezhang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

sysprof 3.34 introduces a new org.gnome.Sysprof3 daemon using GDBus instead of
libsystemd to improve portability. This triggers badness in rpmlinting at build
time.

The build failure is blocking us from updating the whole GNOME 3.34 stack for
SLE15-SP2.

Please see
https://build.opensuse.org/package/live_build_log/GNOME:Next/sysprof/SLE_15_SP2/x86_64
for the failures.

pkgs: polkit-default-privs rpmlint


--1568973179.Da5074dc1.26108
Date: Fri, 20 Sep 2019 09:52:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151457

            Bug ID: 1151457
           Summary: Xvfb should be in its own separate package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: rbranco-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

When I build a Docker image with Xvfb (needed to run Selenium tests in headless
mode), it pulls lots of dependencies resulting in an image half a gig larger
than an Alpine based image, which uses its own xvfb package.

Xvfb right now is in the xorg-x11-server package, which pulls lots of
dependencies.

The Docker image in question is:
https://github.com/ricardobranco777/hawk_test


--1568985942.BdbD0.15651
Date: Fri, 20 Sep 2019 13:25:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151490

            Bug ID: 1151490
           Summary: Regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1149792
          Found By: ---
           Blocker: ---

According to https://bugs.python.org/issue36263 failing
test.test_hashlib.KDFTests.test_scrypt in Python 3.* (Python 2.7 is
surprisingly not affected) is caused by the bug resolved in the GitHub PR
https://github.com/openssl/openssl/pull/8483 and also there is a long
discussion on the theme on the Fedora bug https://bugzilla.redhat.com/1688284.


--1569221779.12caFBa0.25874
Date: Mon, 23 Sep 2019 06:56:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151591

            Bug ID: 1151591
           Summary: postgrsql contains still SuSEfirewall2 configuration file and directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

postgresql-server contains still the SuSEfirewall2.d directory and
configuration file, but there is no SuSEfirewall2 anymore in Factory.


--1569222313.eeB7bBa0.29303
Date: Mon, 23 Sep 2019 07:05:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151594

            Bug ID: 1151594
           Summary: distcc: update from v3.3->v3.3.3 to fix "munmap_chunk(): invalid pointer" crash
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bapabooiee-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running /usr/bin/distcc crashes each time it is ran, with the following error:

----SNIP----
$ /usr/bin/distcc gcc /tmp/test.c -c -o /tmp/test.o
munmap_chunk(): invalid pointer
Aborted (core dumped)
----/SNIP----

Backtrace:

----SNIP----
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007ffff7de8549 in __GI_abort () at abort.c:79
#2  0x00007ffff7e4161f in __libc_message (action=action@entry=do_abort,
fmt=fmt@entry=0x7ffff7f4dab9 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#3  0x00007ffff7e47d9c in malloc_printerr (str=str@entry=0x7ffff7f4f360
"munmap_chunk(): invalid pointer") at malloc.c:5356
#4  0x00007ffff7e48064 in munmap_chunk (p=<optimized out>) at malloc.c:2840
#5  0x000055555555ec17 in dcc_get_hostlist (ret_nhosts=0x7fffffffdd00,
ret_list=0x7fffffffdd10) at src/hosts.c:190
#6  dcc_get_hostlist (ret_list=0x7fffffffdd10, ret_nhosts=0x7fffffffdd00) at
src/hosts.c:157
#7  0x0000555555562a8f in dcc_read_localslots_configuration () at
src/where.c:92
#8  dcc_build_somewhere (argv=<optimized out>, sg_level=<optimized out>,
status=0x7fffffffde54) at src/compile.c:917
#9  0x0000555555557d6d in dcc_build_somewhere_timed (status=0x7fffffffde54,
sg_level=0, argv=0x5555555d22c0) at src/compile.c:985
#10 main (argc=<optimized out>, argv=<optimized out>) at src/distcc.c:352
---/SNIP----

How to reproduce:

1. $ echo -e "int main(){return 0;}" > /tmp/test.c
2. $ /usr/bin/distcc gcc /tmp/test.c -c -o /tmp/test.o

Proposed fix:

Upgrade from version 3.3 to 3.3.3.

Notes:

This also happens when I clone from https://github.com/distcc/distcc and
checkout the tag/branch v3.3 and build from source, so it has nothing to do
with how the program is built with openSUSE.
And when I checkout tag/branch v3.3.3, build, and run the same command, the
crash disappears and the program appears to work normally.

Thanks.


--1569268230.4DfFAE141.16676
Date: Mon, 23 Sep 2019 19:50:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151733

            Bug ID: 1151733
           Summary: yast2-gpmc fails to authenticate with "The object name is not found." when searching for the dc name
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The problem is that gpmc only auth's successfully if the realm name is set in
smb.conf, even if a realm name is supplied during authentication.


--1569271020.B52CDC1.31448
Date: Mon, 23 Sep 2019 20:37:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151738

            Bug ID: 1151738
           Summary: yast2-gpmc crashes when highlighting the domain
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

This is due to a copy/paste typo in the fix for bug 1151733.


--1569313038.A334a3c1.24687
Date: Tue, 24 Sep 2019 08:17:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151788

            Bug ID: 1151788
           Summary: VUL-1: CVE-2019-16723: cacti: authenticated users may bypass authorization checks  via a direct graph_json.php request
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/243173/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-16723

In Cacti through 1.2.6, authenticated users may bypass authorization checks
(for
viewing a graph) via a direct graph_json.php request with a modified
local_graph_id parameter.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-16723
http://www.cvedetails.com/cve/CVE-2019-16723/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16723
https://github.com/Cacti/cacti/issues/2964


--1569317579.EeaB3.28709
Date: Tue, 24 Sep 2019 09:32:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151807

            Bug ID: 1151807
           Summary: ixgbe: driver drops packets [fix available]
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: jmozdzen-at-nde.ag
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Summary: In IPSec scenarios, the ixgbe driver may drop packets even if the
interface in question is not taking part in the IPSec tunnel. IPsec traffic is
then interrupted.

The bug is known & fixed upstream and needs a back-port to the current Leap
kernel.

Details:

- Linux server Atom 64bit, Leap 15.1,
kernel-default-4.12.14-lp151.28.13.1.x86_64

- The server is an IPsec terminator & local router for various networks

- multiple Ethernet interfaces: some 1 Gbps, two 10 Gbps. kernel module ixgbe
used for two-port 10 Gbps interface card.

- 10 Gbps interfaces (eth0, eth1) per bond as bond10

- IPSec traffic (Strongswan) across a single 1 Gbps interface (eth5)

- kernel reports the following for one of the 10 Gbps interfaces only:

ixgbe 0000:09:00.1 eth1: ixgbe_ipsec_tx: bad sa_idx=64512 handle=0

IPsec tunnels could be established, but bi-directional traffic from local
subnets (VLANs on bond10) would not work.

Identical symptoms are described in
https://www.spinics.net/lists/netdev/msg598949.html and led to an upstream fix
by Greg KH: https://lkml.org/lkml/2019/9/18/187

The driver in Leap 15.1 seems to be different, but is suffering from the same
symptoms. Using the sources from kernel-source-4.12.14-lp151.28.13.1.noarch, I
applied the following patch and replaced the kernel module:

-


--1569322580.Ff7fd23.5922
Date: Tue, 24 Sep 2019 10:56:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151839

            Bug ID: 1151839
           Summary: Starting clamd through systemd gives time out.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ivan.topolsky@isb-sib.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 819302
  --> http://bugzilla.opensuse.org/attachment.cgi?id=819302&action=edit
Switching type to simple and starting in foreground

Over time the database of virus signature by ClamAV has grown substantially,
over 6 million entries as of writing this.

The signature themselves aren't simple string pattern matches anymore, some of
the signatures require bytecode (which depending on clamd installtion might be
JITed during load time of clamd).

So over the three years since bug #962227, diminutive low-power devices such as
the Raspberry Pi aren't the only ones where clamd's systemd .service times out.
It now also happens on some old-ish intel CPUs.

I would kindly ask to reconsider the "WONTFIX" timeout situation.

Either increasing the time-out limits locally for clamd.service (see older
raspberry pi thread for suggestion),
or alternatively running clamd in foreground and switch the unit type to
"simple" (see attached diff).

A signal for reloading the database (instead of plain restarting the daemon)
could also help (yet another situation where (re-)startup timeout could
happen).

Thank you very much for your consideration.


body:
--1569334343.D65a4E70.9100
Date: Tue, 24 Sep 2019 14:12:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1151874

            Bug ID: 1151874
           Summary: [trackerbug] lxd 3.17 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 3.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-17-has-been-released/5679
  + Storage pool backed image tarballs and backups
  + Container configuration as YAML on lxc init and lxc launch
  * Ported to final Dqlite 1.0
  * Database rework
  * Container devices rework
  * Storage rework

summary: [trackerbug] lxd 3.17 update


--1569401480.1Fcec4D9.28676
Date: Wed, 25 Sep 2019 08:51:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151955

            Bug ID: 1151955
           Summary: backport request: x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: tdevries-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I ran into a kernel bug on openSUSE Leap 15.1 with the default 4.12 kernel.

The bug is triggered by two tests in the gdb testsuite, and I've just
committed a fix upstream (
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=3d4352200e3e98a6d8855e6f3a39b6d33d84e36b
) to work around the kernel bug.

The bug is fixed in 4.14 onwards by commit 0852b374173b "x86/fpu: Add
FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs".

Is it possible and a good idea to backport the fix to openSUSE kernels?


--1569404136.Daf4f6321.9566
Date: Wed, 25 Sep 2019 09:35:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1151960

            Bug ID: 1151960
           Summary: yast2 bootloader causes "File descriptor ... leaked on vgs invocation"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: aspiers-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

As described in bug #1148809, running `yast2 bootloader` can cause a lot of fd
leakage errors in the logs.  This seems mostly harmless, but the extra noise
risks masking more serious errors, e.g. in bug #1148809 it made it much harder
to spot a real error:

       Execution of command "[["/usr/bin/grub2-editenv", "list"]]" failed. Exit
code: 1 Error output: File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 7 (pipe:[4428632]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 8
(pipe:[4428632]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv File descriptor 9 (pipe:[4428633]) leaked on vgs
invocation. Parent PID 18319: /usr/bin/grub2-editenv File descriptor 10
(pipe:[4428633]) leaked on vgs invocation. Parent PID 18319:
/usr/bin/grub2-editenv /usr/bin/grub2-editenv: error: disk
`lvmid/m4f2UJ-widt-pyk9-QkKY-KyJQ-pbwq-V8zzwL/MsUIK0-r51d-MJck-aQwk-ZiAS-A2BI-XdT2vl'
not found.

So ideally this noise should be fixed, although it is lower priority.

As noted by Michael in bug #1148809 comment #9, the leak is not in
grub2-editenv, as the leaked descriptor could originate from yast bootloader,
or any parent process invoking grub2-editenv, which in turn invokes vgs.

We couldn't reproduce with running grub2-editenv solely from command line, but
with this testing shell script it is reproducible:

    #!/bin/sh
    exec 4<>/tmp/test
    grub2-editenv list


body:
--1569487216.D35a7a4.10415
Date: Thu, 26 Sep 2019 08:40:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1152105

            Bug ID: 1152105
           Summary: info vs gzip
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: werner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kstreitova-at-suse.com, vcizek-at-suse.com
          Found By: ---
           Blocker: ---

$ osc rbl openSUSE:Factory rpm-config-SUSE standard x86_64
[...]
[   20s] info-6.6-1.1
########################################
[   20s] sh: gzip: command not found
[   20s] install-info: warning: no info dir entry in
`/usr/share/info/info-stnd.info.gz'
[   20s] coreutils-8.31-1.6
########################################
[   20s] sh: gzip: command not found
[   20s] install-info: warning: no info dir entry in
`/usr/share/info/coreutils.info.gz'
[...]

Looks like gzip should be installed before info but then gzip also has info
pages...

We have a patch to use libzio for reading. Maybe libzio could be used for
writing too?

pkgs: emacs mailutils texinfo

summary: info vs gzip


--1569619015.2a4afB1.32481
Date: Fri, 27 Sep 2019 21:16:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1152357

            Bug ID: 1152357
           Summary: yast2-gpmc create/delete gpo breaks the Windows gpmc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Something about the way yast2-gpmc is creating and deleting gpos causes the
Windows gpmc to crash.