body:
--1623800875.6173DA0.28589
Date: Tue, 15 Jun 2021 23:47:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1187387

            Bug ID: 1187387
           Summary: Add media type application/wasm
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: giecrilj@stegny.2a.pl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I get the following error:

hello.html:1246
wasm streaming compile failed:
TypeError: Failed to execute 'compile' on 'WebAssembly':
Incorrect response MIME type. Expected 'application/wasm'.

Request URL: http://localhost/~dell/hello.wasm
HTTP/1.1 200 OK
Date: Tue, 15 Jun 2021 23:39:42 GMT
Server: Apache
Last-Modified: Tue, 15 Jun 2021 22:46:30 GMT
Accept-Ranges: bytes
ETag: "3b52-5c4d5beb4a582"
Content-Length: 15186

Apache httpd does not report any Content-Type for this file.

summary: Add media type application/wasm


body:
--1623859048.fCAd5E0.11528
Date: Wed, 16 Jun 2021 15:57:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187425

            Bug ID: 1187425
           Summary: zypper resolves OBS URLs wrongly
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: marius.kittler-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 850320
  --> http://bugzilla.opensuse.org/attachment.cgi?id=850320&action=edit
How to reproduce & expected behavior

# problem
It is possible to use an URL with the scheme `obs://` to point to an OBS
project. This worked in Leap 15.2 but seems to be broken in Leap 15.3.

Apparently the `obs://` URLs are resolved by `zypper` which wrongly omits the
`openSUSE_`-prefix when determining the actual download URL.

# steps to reproduce and expected behavior
The problem can be reproduced using the container image of Leap 15.3. Checkout
the attached file for the command to reproduce. I have also appended a version
using Leap 15.2 to show how it is actually supposed to behave.

# further details
This breaks openQA's bootstrapping script:
https://progress.opensuse.org/issues/93609

summary: zypper resolves OBS URLs wrongly


--1623914095.D8E3DC20.32499
Date: Thu, 17 Jun 2021 07:14:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1187447

            Bug ID: 1187447
           Summary: libqca-qt5-2 prevents psi-plus from starting
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: christophe-at-krop.fr
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Psi-plus when started with libqca-qt5-2-2.3.3-1.1, sits infinitely in
QCA::KeyStoreManager::waitForBusyFinished:
> #0  0x00007fffee2a49da in __futex_abstimed_wait_common64 (futex_word=futex_word@entry=0x555556169bd0, expected=expected@entry=0, clockid=clockid@entry=0, abstime=abstime@entry=0x0,
>     private=private@entry=0, cancel=cancel@entry=true) at ../sysdeps/nptl/futex-internal.c:74
> #1  0x00007fffee2a4a3f in __GI___futex_abstimed_wait_cancelable64 (futex_word=futex_word@entry=0x555556169bd0, expected=expected@entry=0, clockid=clockid@entry=0, abstime=abstime@entry=0x0,
>     private=private@entry=0) at ../sysdeps/nptl/futex-internal.c:123
> #2  0x00007fffee29e280 in __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x555556169b80, cond=0x555556169ba8) at pthread_cond_wait.c:504
> #3  __pthread_cond_wait (cond=0x555556169ba8, mutex=0x555556169b80) at pthread_cond_wait.c:619
> #4  0x00007fffee926adb in QWaitConditionPrivate::wait (deadline=..., deadline=..., this=0x555556169b80) at thread/qwaitcondition_unix.cpp:146
> #5  QWaitCondition::wait (this=<optimized out>, mutex=0x555556168c08, deadline=...) at thread/qwaitcondition_unix.cpp:225
> #6  0x00007ffff7de4015 in QCA::KeyStoreManager::waitForBusyFinished() () from /lib64/libqca-qt5.so.2
> #7  0x000055555585b624 in main (argc=<optimized out>, argv=0x7fffffffde48) at ../src/main.cpp:532

'zypper in libqca-qt5' which uninstalls libqca-qt5-2 fixes this issue.


--1623953751.db00e30.15995
Date: Thu, 17 Jun 2021 18:15:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187475

            Bug ID: 1187475
           Summary: Firefox 89.0.1 (new version) is available
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
               URL: https://www.mozilla.org/en-US/firefox/89.0.1/releaseno
                    tes/
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: jayjayjazz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

Firefox 89.0.1 (new version) is available. It was released on June 17, 2021.

Changelog:
- Windows: Resolved an issue causing some screen readers to not interact
correctly with Firefox anymore (bug 1714212)
- Updated translations, including full Spanish (Mexico) localization and other
improvements (bug 1714946)
- Fix various font related regressions (bug 1694174)
- Linux: Fix performance and stability regressions with WebRender (bug 1715895,
bug 1715902)
- macOS: Fix screen flickering when scrolling a page on an external monitor
(bug 1715452)
- Enterprise: Fix for the DisableDeveloperTools policy not having effect
anymore (bug 1715777)
- Linux: Fix broken scrollbars on some GTK themes (bug 1714103)
- Various stability and security fixes.

Security Fixes:
https://www.mozilla.org/en-US/security/advisories/mfsa2021-27/

CVE-2021-29968: Out of bounds read when drawing text characters onto a Canvas

Impact: moderate

Description:
When drawing text onto a canvas with WebRender disabled, an out of bounds read
could occur.
This bug only affects Firefox on Windows. Other operating systems are
unaffected.

References: Bug 1712047

[all bug numbers refer to the Mozilla Bugzilla]

Please consider an update!


--1624001890.FAEd4eFc0.9569
Date: Fri, 18 Jun 2021 07:38:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1187481

            Bug ID: 1187481
           Summary: VUL-0: chromium: multiple security issues fixed in 91.0.4472.114
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html

CVE-2021-30554: Use after free in WebGL.
CVE-2021-30555: Use after free in Sharing.
CVE-2021-30556: Use after free in WebAudio.
CVE-2021-30557: Use after free in TabGroups.

Google is aware that an exploit for CVE-2021-30554 exists in the wild.


--1624236464.Bb6eFbD0.11191
Date: Mon, 21 Jun 2021 00:47:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187523

            Bug ID: 1187523
           Summary: Some default applications not properly handled
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: maurizio.galli-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

xfce-mimeapps.list needs to replace deprecated  exo-* entries, so that the
system can properly handle defaults for the assigned mime types.


--1624261192.ABCE0.18730
Date: Mon, 21 Jun 2021 07:39:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187531

            Bug ID: 1187531
           Summary: Ansible: missing python3-selinux requirement
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: felix.niederwanger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On a fresh Tumbleweed system, the ansible-playbook command fails due to missing
python3-selinux dependencies as follows

> ansible-playbook -i inventory duck-norris.yml
> ERROR! Unexpected Exception, this is probably a bug: Failed to detect selinux python bindings at ['/usr/lib64/python3.8/site-packages', '/usr/lib64/python3.8/site-packages', '/usr/lib/python3.8/site-packages', '/usr/local/lib64/python3.8/site-packages', '/usr/local/lib64/python3.8/site-packages', '/usr/local/lib/python3.8/site-packages']
> the full traceback was:
>
> Traceback (most recent call last):
>   File "/usr/bin/ansible-playbook", line 92, in <module>
>     mycli = getattr(__import__("ansible.cli.%s" % sub, fromlist=[myclass]), myclass)
>   File "/usr/lib/python3.8/site-packages/ansible/cli/__init__.py", line 25, in <module>
>     from ansible.parsing.dataloader import DataLoader
>   File "/usr/lib/python3.8/site-packages/ansible/parsing/dataloader.py", line 17, in <module>
>     from ansible.module_utils.basic import is_executable
>   File "/usr/lib/python3.8/site-packages/ansible/module_utils/basic.py", line 74, in <module>
>     import selinux
>   File "/home/phoenix/.local/lib/python3.8/site-packages/selinux/__init__.py", line 104, in <module>
>     check_system_sitepackages()
>   File "/home/phoenix/.local/lib/python3.8/site-packages/selinux/__init__.py", line 100, in check_system_sitepackages
>     raise Exception(
> Exception: Failed to detect selinux python bindings at ['/usr/lib64/python3.8/site-packages', '/usr/lib64/python3.8/site-packages', '/usr/lib/python3.8/site-packages', '/usr/local/lib64/python3.8/site-packages', '/usr/local/lib64/python3.8/site-packages', '/usr/local/lib/python3.8/site-packages']

Simply installing python3-selinux fixes the issue and we should probably
include this in the spec file.


body:
--1624318388.3D2EEb340.8923
Date: Mon, 21 Jun 2021 23:33:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187573

            Bug ID: 1187573
           Summary: Chromebook snow black screen hang
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: screening-team-bugs-at-suse.de
          Reporter: zombah-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

While start Chromebook Snow hang at subjectively
at some boot stage because screen never blink.
I'll try to collect serial console log and will attach
it.

pkgs: JeOS u-boot

summary: Chromebook snow black screen hang


--1624339170.EcE32.21531
Date: Tue, 22 Jun 2021 05:19:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187580

            Bug ID: 1187580
           Summary: raspberry pi 4 KDE image does not install Network Manager widget
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: oldkentuckymark-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The install image does not come with plasma-nm5 installed, making it confusing
and difficult to connect to the internet.


--1624344042.e7CEa8BE1.7680
Date: Tue, 22 Jun 2021 06:40:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187583

            Bug ID: 1187583
           Summary: [MC][regression] does not properly open .zip file containing .pdf file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://midnight-commander.org/ticket/4180
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: amajer-at-suse.com
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Original summary:
[MC][regression] does not properly open .zip file containing .pdf file

likely upstream bug (reported fixed in 4.8.26):
https://midnight-commander.org/ticket/4180

forum thread:
https://forums.opensuse.org/showthread.php/555778-after-leap-upgrade-midnight-commander-no-longer-unzips-archives-correctly

To reproduce:
1-Press <ENTER> on or double click on a .zip file that contains a .pdf file

Actual result:
1-window opens for choosing application from which to open the .zip file, or in
ark viewer

Expected result:
1-MC shows a directory list of the .zip file's content, as with any other .zip
or any other archive file type

Applies to MC 4.8.26 in 15.3 and TW, plus 4.8.26 in Mageia 8, plus 4.8.26 in
Fedora 34
Works as expected in MC 4.8.22 in 15.1 and 15.2.
.zip files containing other content open as expected, e.g.: *.html, *.txt, etc.


--1624371005.AE7c6CAd0.19822
Date: Tue, 22 Jun 2021 14:10:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187600

            Bug ID: 1187600
           Summary: virtualbox: check_module_dependencies.sh nowhere to be found
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
                CC: Larry.Finger-at-gmail.com
          Found By: ---
           Blocker: ---

```
16:08 fj:/usr/lib/virtualbox # ./vboxdrv.sh start
vboxdrv.sh: Starting VirtualBox services.
vboxdrv.sh: Building VirtualBox kernel modules.
./vboxdrv.sh: line 460: /usr/lib/virtualbox/check_module_dependencies.sh: No
such file or directory
```

virtualbox-6.1.22-lp152.2.27.3.x86_64


body:
--1624443064.e2E5cD5e0.23742
Date: Wed, 23 Jun 2021 10:11:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187648

            Bug ID: 1187648
           Summary: Firefox 89.0.2 (new version) available
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
               URL: https://ftp.mozilla.org/pub/firefox/releases/89.0.2/
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: jayjayjazz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

Firefox 89.0.2 (new version) available today.

Release notes not yet published. But the changeset mentiones these Mozilla
bugs, which are fixed in 89.0.2:
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1716731
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1708224
[3] https://bugzilla.mozilla.org/show_bug.cgi?id=1716735

89.0.2 builds are available on the Mozilla FTP:
[4] https://ftp.mozilla.org/pub/firefox/releases/89.0.2/

Release notes should be available later today:
[5] https://www.mozilla.org/en-US/firefox/89.0.2/releasenotes/

summary: Firefox 89.0.2 (new version) available


--1624484394.781e460.19237
Date: Wed, 23 Jun 2021 21:39:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187670

            Bug ID: 1187670
           Summary: RPM on Leap 15.2 fails to detect zstd compressed archives
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rpm-at-fthiessen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

RPM prior to 4.16.0 fails to detect zstd compressed source archives.
The magic bytes used for zstd detection were invalid, see upstream fix:

https://github.com/rpm-software-management/rpm/commit/c464f1ece501346da11ed7582b8d46682363a285

So without this rpm on Leap 15.2 can not use zstd compressed archives with the
%setup macros (it will handle the archive as plain tar, but tar is too old to
autodetect zstd, so it will fail with "does not look like a tar archive").


--1624520958.d75d0.2207
Date: Thu, 24 Jun 2021 07:49:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187674

            Bug ID: 1187674
           Summary: Cannot build with GPGME and pkgconfig (missing gpg-error and libassuan)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rpm-at-fthiessen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On Leap 15.2 and Leap 15.3 it is not possible (without patching) to build
packages that use gpgme using pkgconfig.

gpgme adds gpg-error and libassuan to its Requires in its pkgconfig file.
But neither gpg-error, nor libassuan on Leap provide a pkgconfig file.


--1624527530.63c03.3927
Date: Thu, 24 Jun 2021 09:38:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1187677

            Bug ID: 1187677
           Summary: yast-rake: set the "sle_latest" target to SLE15-SP4
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: lslezak-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The SP4 project already exists, the "sle_latest" target still points to
SLE15-SP3.


--1624606996.2e4B1.14009
Date: Fri, 25 Jun 2021 07:43:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187706

            Bug ID: 1187706
           Summary: VUL-0: CVE-2020-18671: roundcubemail: Cross Site Scripting (XSS) vulnerability via smtp config in /installer/test.php
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/302925/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: lars.vogdt-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2020-18671

Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp
config in /installer/test.php.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18671
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18671
https://github.com/roundcube/roundcubemail/issues/7406
https://lorexxar.cn/2020/06/10/roundcube-mail-xss/#store-xss-in-smtp-config
https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12


--1624607000.6FFD1A51.14042
Date: Fri, 25 Jun 2021 07:43:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187707

            Bug ID: 1187707
           Summary: VUL-0: CVE-2020-18670: roundcubemail:  Cross Site Scripting (XSS) vulneraibility via database host and user in /installer/test.php
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/302926/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: lars.vogdt-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2020-18670

Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database
host and user in /installer/test.php.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18670
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18670
https://github.com/roundcube/roundcubemail/issues/7406
https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12
https://lorexxar.cn/2020/06/10/roundcube-mail-xss/#Store-Xss-in-installer-test-php


--1624626931.43F0670.10009
Date: Fri, 25 Jun 2021 13:15:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187718

            Bug ID: 1187718
           Summary: variety fail with error is ImportError: No module named requests
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: petr-at-cervinka.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installed Leap 15.3 with Gnome desktop, variety ends with python error:

Traceback (most recent call last):
  File "/usr/bin/variety", line 38, in <module>
    import variety
  File "/usr/lib/python2.7/site-packages/variety/__init__.py", line 111, in
<module>
    from variety import VarietyWindow
  File "/usr/lib/python2.7/site-packages/variety/VarietyWindow.py", line 22, in
<module>
    from variety.FacebookHelper import FacebookHelper
  File "/usr/lib/python2.7/site-packages/variety/FacebookHelper.py", line 55,
in <module>
    from variety.Util import Util
  File "/usr/lib/python2.7/site-packages/variety/Util.py", line 17, in <module>
    import requests
ImportError: No module named requests

variety version is 0.6.6-bp153.1.14


body:
--1624867788.860D6cC00.8392
Date: Mon, 28 Jun 2021 08:09:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187749

            Bug ID: 1187749
           Summary: rpmlint 2.0 fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package is being in Staging:O and fails in the following manner:

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:O/rpmlint/standard/x86_64

[   70s] RPMLINT report:
[   70s] ===============
[   70s] Traceback (most recent call last):
[   70s]   File "/usr/bin/rpmlint", line 11, in <module>
[   70s]     load_entry_point('rpmlint==2.0.0', 'console_scripts', 'rpmlint')()
[   70s]   File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py",
line 489, in load_entry_point
[   70s]     return get_distribution(dist).load_entry_point(group, name)
[   70s]   File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py",
line 2852, in load_entry_point
[   70s]     return ep.load()
[   70s]   File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py",
line 2443, in load
[   70s]     return self.resolve()
[   70s]   File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py",
line 2449, in resolve
[   70s]     module = __import__(self.module_name, fromlist=['__name__'],
level=0)
[   70s]   File "/usr/lib/python3.8/site-packages/rpmlint/cli.py", line 6, in
<module>
[   70s]     from rpmlint.lint import Lint
[   70s]   File "/usr/lib/python3.8/site-packages/rpmlint/lint.py", line 12, in
<module>
[   70s]     from rpmlint.config import Config
[   70s] ModuleNotFoundError: No module named 'rpmlint.config'

and build package fails:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:O/build/standard/x86_64

[   20s] [    0s] expanding package dependencies...
[   20s] [    0s] Warning: distribution not specified, assuming 'default' (see
/usr/src/packages/BUILD/obs-build-20210120/configs).
[   20s] [    0s] expansion error
[   20s] [    0s]   nothing provides rpmlint-Factory
[   20s] [    0s]
[   20s] [    0s] goat05 failed "build libdummy1.spec" at Sun Jun 27 08:16:36
UTC 2021.
[   20s] [    0s]
[   20s] FAILED
[   20s] error: Bad exit status from /var/tmp/rpm-tmp.gqddSJ (%check)
[   20s]

summary: rpmlint 2.0 fails


--1624955439.68c86C0.2042
Date: Tue, 29 Jun 2021 08:30:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1187809

            Bug ID: 1187809
           Summary: sendmail: /var/spool/clientmqueue without %set_permissions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: werner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: matthias.gerstner-at-suse.com, security-team-at-suse.de
          Found By: ---
           Blocker: ---

There is still an inconsistency left in the /etc/permissions.d/sendmail*
drop-in files.

The directory /var/spool/clientmqueue is still listed in these files:

W: [missing-set-permissions] /var/spool/clientmqueue
        - owned by system-user-mail-20170617-21.13.noarch.rpm
        - permissions.sendmail:5         : /var/spool/clientmqueue/ mail:mail
0770
        - permissions.sendmail.paranoid:5: /var/spool/clientmqueue/ mail:mail
0750

It is *owned* by the system-user-mail package, however (configured via
sysusers.d configuration file).

No package is calling %set_permissions for the path any more, rendering this
permissions entry more or less ineffective, except when somebody calls
`chkstat --system` explicitly.

The path should either be removed from /etc/permissions.d/sendmail* or some
package (probably sendmail?) should invoke %set_permissions for the path in
its spec file.


--1625132461.4EE7f6840.6381
Date: Thu, 1 Jul 2021 09:41:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187906

            Bug ID: 1187906
           Summary: /etc/dhcp/dhclient.d/chrony.sh references non-existent /usr/share/chrony-helper
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: opensuse-at-arnavion.dev
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[1] moved /usr/share/chrony-helper to /usr/lib/chrony/helper and
subsequently to /usr/libexec/chrony/helper but did not change
/etc/dhcp/dhclient.d/chrony.sh [2]

So /etc/dhcp/dhclient.d/chrony.sh references non-existent script
to register the NTP servers in DHCP response with chronyd.

[1]:
https://build.opensuse.org/package/rdiff/network:time/chrony?linkrev=base&rev=62

[2]:
https://build.opensuse.org/package/view_file/network:time/chrony/chrony.dhclient?expand=1


--1625135699.f1Db7A0.25313
Date: Thu, 1 Jul 2021 10:34:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187910

            Bug ID: 1187910
           Summary: [netcdf-fortran] Nothing provides nf-config
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: zed.three-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Nothing provides the netCDF Fortran configuration utility `nf-config`. For the
C API, `/usr/bin/nc-config` is provided by `netcdf-devel`; `netcdf-cxx4-tools`
provides the C++ version `/usr/bin/ncxx4-config`.

The C and C++ hpc packages also provide the environment modularised versions.

Separately, there is no non-environment module `netcdf-fortran` package.


--1625136836.015a0.28830
Date: Thu, 1 Jul 2021 10:53:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187913

            Bug ID: 1187913
           Summary: VUL-1: CVE-2019-25049: libressl: out-of-bounds read in asn1_item_print_ctx()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/303347/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-25049

LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx
(called from asn1_template_print_ctx).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-25049
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25049
https://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28a
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1965.yaml


--1625136959.B40c5aC0.29163
Date: Thu, 1 Jul 2021 10:55:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187914

            Bug ID: 1187914
           Summary: VUL-0: CVE-2019-25048: libressl: heap-based buffer over-read in do_print_ex()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/303348/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-25048

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex
(called from asn1_item_print_ctx and ASN1_item_print).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-25048
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1923.yaml
https://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28a
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25048


--1625162490.2acD1ad0.14385
Date: Thu, 1 Jul 2021 18:01:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187936

            Bug ID: 1187936
           Summary: Liferease package misses python3-gobject-Gdk dependency
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bluedzins-at-wp.pl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Current version of Liferea package provided is 1.12.9 and there is missing
python3-gobject-Gdk dependency. Without this package it is impossible to open
Plugins window.

This report is continuation of https://github.com/lwindolf/liferea/issues/1009


--1625233863.08E8751.12074
Date: Fri, 2 Jul 2021 13:51:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187971

            Bug ID: 1187971
           Summary: [Build 20210701] Upgrading 42.3 using KDE Live runs into timeout
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1817708/modules/awai
                    t_install/steps/14
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-KDE-Live-x86_64-kde_live_upgrade_leap_42.3@64bit-2G fails
in
[await_install](https://openqa.opensuse.org/tests/1817708/modules/await_install/steps/14)

## Test suite description
Uses the live installer on the kde live media for upgrading the system.

## Reproducible

Fails since (at least) Build
[20210701](https://openqa.opensuse.org/tests/1815609)

## Expected result

Last good: [20210629](https://openqa.opensuse.org/tests/1812962) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=KDE-Live&machine=64bit-2G&test=kde_live_upgrade_leap_42.3&version=Tumbleweed)


--1625320281.aDFCEDc0.10815
Date: Sat, 3 Jul 2021 13:51:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187988

            Bug ID: 1187988
           Summary: VUL-0: fossil: client-side TLS hostname verification bug
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: max-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Fossil before 2.14.2, 2.15.2, 2.16, when using client-side TLS, did not verify
that the server hostname matches its certificate

References:
https://fossil-scm.org/home/info/aaab2a15d1dfc22f
https://fossil-scm.org/home/doc/trunk/www/changes.wiki#v2_16
https://fossil-scm.org/home/doc/trunk/www/changes.wiki#v2_15
https://fossil-scm.org/home/doc/trunk/www/changes.wiki#v2_14


body:
--1625462502.AADde14d0.5650
Date: Mon, 5 Jul 2021 05:21:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1187996

            Bug ID: 1187996
           Summary: Qwt library is broken by C++20 code
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dap.darkness-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Leechcraft package fails to build via qwt & gcc11:

[  409s] In file included from /usr/include/qt5/qwt6/qwt_plot_seriesitem.h:17,
[  409s]                  from /usr/include/qt5/qwt6/qwt_plot_curve.h:14,
[  409s]                  from
/home/abuild/rpmbuild/BUILD/leechcraft-0.6.70-14522-g3ce98b2ddb/src/util/qml/plotitem.cpp:16:
[  409s] /usr/include/qt5/qwt6/qwt_series_store.h:75:5: error: template-id not
allowed for destructor
[  409s]    75 |     ~QwtSeriesStore<T>();
[  409s]       |     ^
[  409s] /usr/include/qt5/qwt6/qwt_series_store.h:139:1: error: no declaration
matches 'QwtSeriesStore<T>::~QwtSeriesStore()'
[  409s]   139 | QwtSeriesStore<T>::~QwtSeriesStore()
[  409s]       | ^~~~~~~~~~~~~~~~~
[  409s] /usr/include/qt5/qwt6/qwt_series_store.h:139:1: note: no functions
named 'QwtSeriesStore<T>::~QwtSeriesStore()'
[  409s] /usr/include/qt5/qwt6/qwt_series_store.h:65:7: note: 'class
QwtSeriesStore<T>' defined here
[  409s]    65 | class QwtSeriesStore: public virtual QwtAbstractSeriesStore
[  409s]       |       ^~~~~~~~~~~~~~
[  409s] make[2]: ***
[util/qml/CMakeFiles/leechcraft-util-qml-qt5.dir/build.make:230:
util/qml/CMakeFiles/leechcraft-util-qml-qt5.dir/plotitem.cpp.o] Error 1

See full log at
https://build.opensuse.org/package/live_build_log/home:DarkSS:branches:network/leechcraft/openSUSE_Tumbleweed/x86_64

It is a qwt issue like
https://stackoverflow.com/questions/63513984/can-class-template-constructors-have-a-redundant-template-parameter-list-in-c2

Could you please add a patch like this one:

@@ -69,10 +69,10 @@
      \brief Constructor
      The store contains no series
    */
-    explicit QwtSeriesStore<T>();
+    explicit QwtSeriesStore();

    //! Destructor
-    ~QwtSeriesStore<T>();
+    ~QwtSeriesStore();

    /*!
      Assign a series of samples

?

summary: Qwt library is broken by C++20 code


body:
--1625516273.5ffDE10.21187
Date: Mon, 5 Jul 2021 20:17:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188019

            Bug ID: 1188019
           Summary: Wicked CPU High on RaspberryPi 2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: armv7
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: opensuse@wolke7.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,
I installed OpenSUSE 15.2 in Raspberry Pi 2, and "/usr/sbin/wickedd --systemd
--foreground" always costs around 51% CPU in idle.
This happens both in ethernet or with USB wifi dongle.

If I use Raspberry Pi's default OS Raspbian, there is no such a problem.

I have tried "sudo zypper update" it doesn't work.
The internet is gotten by DHCP from home router.

see below output from htop:

>    0[|||||||||                                                  7.4%]   Tasks: 26, 9 thr; 2 running
>    1[|||||||                                                    5.4%]   Load average: 1.83 1.98 2.01
>    2[|||||||||||||||||||||||||||||||||||||||||||||||||||||||   53.4%]   Uptime: 10:04:10
>    3[||||||||||||||||||||                                      19.5%]
>
>   Mem[|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||303M/889M]
>   Swp[|                                                                                256K/500M]

>  PID USER      PRI  NI  VIRT   RES   SHR S CPU%-MEM%   TIME+  Command
>  540 root       20   0  227M  224M  4468 R 52.9 25.3  3h42:31 /usr/sbin/wickedd --systemd --foreground
>  525 root       20   0 30880 27636  4372 D  6.9  3.0 36:14.69 /usr/lib/wicked/bin/wickedd-dhcp4 --systemd --foreground
>  366 root       20   0  236M  142M  141M S  4.1 16.0 24:44.72 /usr/lib/systemd/systemd-journald
>  459 messagebu  20   0  6812  3960  3368 S  1.4  0.4  8:00.35 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
>    1 root       20   0 12324  7420  6056 S  0.0  0.8  2:50.52 /usr/lib/systemd/systemd --switched-root --system --deserialize 23
>  381 root       20   0 15044  3656  2916 S  0.0  0.4  0:01.30 /usr/lib/systemd/systemd-udevd
>  440 root       16  -4 11692  1404  1228 S  0.0  0.2  0:00.10 /sbin/auditd
>  441 root       16  -4 11692  1404  1228 S  0.0  0.2  0:00.00 /sbin/auditd
>  473 root       20   0 44268 26188 12656 S  0.0  2.9  0:09.69 /usr/bin/python3 -Es /usr/sbin/firewalld --nofork --nopid
>  479 root       20   0  9528  5092  4628 S  0.0  0.6  0:01.11 /usr/lib/systemd/systemd-logind
>  521 root       20   0  8368  4632  3892 S  0.0  0.5  0:00.15 /usr/lib/wicked/bin/wickedd-dhcp6 --systemd --foreground
>  526 root       20   0  8368  4688  3944 S  0.0  0.5  0:00.12 /usr/lib/wicked/bin/wickedd-auto4 --systemd --foreground
>  561 root       20   0  8392  4708  3972 S  0.0  0.5  0:00.17 /usr/sbin/wickedd-nanny --systemd --foreground
>  737 root       20   0 44268 26188 12656 S  0.0  2.9  0:00.00 /usr/bin/python3 -Es /usr/sbin/firewalld --nofork --nopid
>  738 polkitd    20   0  243M 19028 14804 S  0.0  2.1  0:00.53 /usr/lib/polkit-1/polkitd --no-debug
>  740 polkitd    20   0  243M 19028 14804 S  0.0  2.1  0:00.00 /usr/lib/polkit-1/polkitd --no-debug

summary: Wicked CPU High on RaspberryPi 2


body:
--1625576417.D2ba0dC00.16825
Date: Tue, 6 Jul 2021 13:00:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188040

            Bug ID: 1188040
           Summary: spack load does not work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: cgoll-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After sourcing the file
. /usr/share/spack/setup-env.sh
the command
spack -d load netcdf-c@4.7.4
the command fails with the output
==> [2021-07-06-15:00:05.180191] Imported load from built-in commands
==> [2021-07-06-15:00:05.180730] Imported load from built-in commands
==> [2021-07-06-15:00:05.181551] Reading config file
/usr/etc/spack/defaults/config.yaml
==> [2021-07-06-15:00:05.195800] Reading config file
/home/chris/.spack/config.yaml
==> [2021-07-06-15:00:05.209350] DATABASE LOCK TIMEOUT: 3s
==> [2021-07-06-15:00:05.209384] PACKAGE LOCK TIMEOUT: No timeout
==> [2021-07-06-15:00:05.211501] Reading config file
/usr/etc/spack/defaults/repos.yaml
==> [2021-07-06-15:00:05.236345] Reading config file
/usr/etc/spack/defaults/modules.yaml
==> [2021-07-06-15:00:05.244761] Reading config file
/usr/etc/spack/defaults/linux/modules.yaml
Traceback (most recent call last):
  File "/usr/bin/spack", line 66, in <module>
    sys.exit(spack.main.main())
  File "/usr/lib/spack/spack/main.py", line 762, in main
    return _invoke_command(command, parser, args, unknown)
  File "/usr/lib/spack/spack/main.py", line 490, in _invoke_command
    return_val = command(parser, args)
  File "/usr/lib/spack/spack/cmd/load.py", line 79, in load
    env_mod.extend(uenv.environment_modifications_for_spec(spec))
  File "/usr/lib/spack/spack/user_environment.py", line 88, in
environment_modifications_for_spec
    build_environment.modifications_from_dependencies(
NameError: name 'build_environment' is not defined

summary: spack load does not work


body:
--1625585716.e0AcEE10.2548
Date: Tue, 6 Jul 2021 15:35:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188045

            Bug ID: 1188045
           Summary: Include vboximg-mount in VirtualBox
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: ahpgh0-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

VirtualBox's command line utility vboximg-mount for FUSE mounting virtual disk
images [1] is missing from RPM packages provided by openSUSE. It is available
on Linux hosts since version 6.1.0 [2] and now present in VirtualBox's binary
packages [3] and in official package repository of various Linux distributions
[4]. This is a request to include the utility in openSUSE Tumbleweed.

[1] https://www.virtualbox.org/manual/UserManual.html#vboximg-mount
[2] https://www.virtualbox.org/wiki/Changelog-6.1#v0
[3] https://www.virtualbox.org/wiki/Linux_Downloads
[4] https://pkgs.org/search/?q=vboximg-mount&on=files

summary: Include vboximg-mount in VirtualBox


--1625648694.E32ea10.32092
Date: Wed, 7 Jul 2021 09:04:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188074

            Bug ID: 1188074
           Summary: Konsole has no menu entry to remove toolbar
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i686
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: jazz_fan-at-arcor.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 850813
  --> http://bugzilla.opensuse.org/attachment.cgi?id=850813&action=edit
No menu entry for toolbar removal (there should be one above or below the "Show
Menubar" switch).

After yesterdays update konsole (version 21.04.2) suddenly has a toolbar (it
might have had that feature earlier but then I could get rid of it). An
internet search suggested that there should be a menu entry under settings to
remove the toolbar like there is one for hiding the menu bar. However, there is
no such entry (see first attachment). The only way to (temporarily) get rid of
the toolbar is to right click in a tiny area on the left between the (visible)
menu bar and the toolbar. Having done that there is no way to save this change,
so the next time a konsole is opened the toolbar comes up again. I think there
should also be an entry in the settings dialog under general (see second
attachment)


--1625650997.Bb0Bc8B0.18819
Date: Wed, 7 Jul 2021 09:43:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188076

            Bug ID: 1188076
           Summary: [linux-glibc-devel 5.13] gcc10 fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Tumbleweed has been integrating kernel 5.13 and is now in process of
also updating linux-glibc-devel to 5.13

gcc10 is one of the few packages currently failing to build:

[11044s]
../../../../libsanitizer/sanitizer_common/sanitizer_platform_limits_posix.cpp:133:10:
fatal error: linux/cyclades.h: No such file or directory
[11044s]   133 | #include <linux/cyclades.h>
[11044s]       |          ^~~~~~~~~~~~~~~~~~


--1625726474.2612c71.30233
Date: Thu, 8 Jul 2021 06:41:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188098

            Bug ID: 1188098
           Summary: Include iio-sensor-proxy in live image and install
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Live Medium
          Assignee: dimstar-at-opensuse.org
          Reporter: herzenschein-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Current live USB with openSUSE Tumbleweed Live KDE is missing iio-sensor-proxy
for touchscreen rotation, I assume this would be the same for the installation
if the user were to proceed with the defaults.

Together with bug 1184014 (maliit) and its respective virtual keyboards kcm,
these are the last components to make openSUSE fully touch-enabled by default
on the Wayland session.

iio-sensor-proxy already comes with KDE Neon and Kubuntu Impish and it's
planned to be in Fedora 35.


--1625730813.3c70cca30.30052
Date: Thu, 8 Jul 2021 07:53:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188105

            Bug ID: 1188105
           Summary: virtualbox after last updates of tumbleweed did not run vbox machines
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: virex-at-mail.ru
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 850847
  --> https://bugzilla.suse.com/attachment.cgi?id=850847&action=edit
Vbox.log

virtualbox after last updates of tumbleweed did not run vbox machines

try last version from virtaulization repo, from repo tumbleweed, from leap 15.2
and from 15.3 same error


--1625736203.6C071.11571
Date: Thu, 8 Jul 2021 09:23:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188110

            Bug ID: 1188110
           Summary: pkcon system-upgrade leads to unbootable system with kernel upgrade
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: alois1@gmx-topmail.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I recently installed MicroOS Desktop KDE. I attempted to upgrade this system
from 20210704 to 20210706 using pkcon, which included a kenel upgrade to 5.13.

This upgrade lead to an unbootable system with the following symptoms:
* In the GRUB menu, it is attempted to load the wrong kernel version (5.12.13).
* When manually editing the kernel and initrd version to 5.13.0, the initrd
enters emergency mode after some delay.
* Further investigation shows that initrd is incomplete and lacks at least
crypttab, so the partitions on the encrypted disks cannot be mounted and caused
the timeout.

The issue is reproducible, after rolling back to the last snapshot on 20210704
and attempting the upgrade again the symptoms are the same.

I have for now upgraded the system using zypper dup inside tukit. This lead to
a working upgraded system.


body:
--1625738583.4D465aB0.23257
Date: Thu, 8 Jul 2021 10:03:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188111

            Bug ID: 1188111
           Summary: [ftm 8.0] ceph fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

FMT 8.0 has been submitted for inclusion into openSUSE:Factory

ceph is at this moment the only package failing to build and not supporting fmt
8 yet.

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/ceph/standard/x86_64

summary: [ftm 8.0] ceph fails to build


body:
--1625751147.8Af40.12315
Date: Thu, 8 Jul 2021 13:32:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188127

            Bug ID: 1188127
           Summary: tzdata.zi not packaged
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

from systemd v249:

When enumerating time zones the timedatectl tool will now consult the
'tzdata.zi' file shipped by the IANA time zone database package, in
addition to 'zone1970.tab', as before. This makes sure time zone
aliases are now correctly supported. Some distributions so far did
not install this additional file, most do however. If you
distribution does not install it yet, it might make sense to change
that.

Looks like we don't install it yet.

summary: tzdata.zi not packaged


--1625899470.c2B78ddB0.10675
Date: Sat, 10 Jul 2021 06:44:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188188

            Bug ID: 1188188
           Summary: VUL-0: CVE-2020-14424: cacti: Lack of escaping on template import can lead to XSS exposure under 'midwinter' theme
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Fixed in cacti 1.2.18:
Lack of escaping on template import can lead to XSS exposure under 'midwinter'
theme

https://github.com/Cacti/cacti/pull/4261


--1626160252.cFa52b40.28588
Date: Tue, 13 Jul 2021 07:10:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188235

            Bug ID: 1188235
           Summary: mutt gpg doesnt work out of the box with gpg
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

mutt 2.0.7

```
[


--1626181706.F73E2DB20.14964
Date: Tue, 13 Jul 2021 13:08:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188265

            Bug ID: 1188265
           Summary: libproxy:  system libmodman is no longer required
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: holgerbruenjes-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

in package libproxy-0.4.17-1.4.src.rpm

the spec.file required libmodman-devel is obsolet

libproxy used now only the included version and the command option

 -DFORCE_SYSTEM_LIBMODMAN=ON \

is also obsolet

build/CMakeCache.txt

//No help, variable specified on the command line.
FORCE_SYSTEM_LIBMODMAN:UNINITIALIZED=ON

CMakeLists.txt

### Subdirectories
add_subdirectory(libmodman)

in older version the commandline option was used

### Subdirectories
# Conditionally build bundled libmodman
option(FORCE_SYSTEM_LIBMODMAN "Force using system libmodman" OFF)
find_package(libmodman QUIET)


--1626227727.E4abe8a0.6941
Date: Wed, 14 Jul 2021 01:55:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188291

            Bug ID: 1188291
           Summary: Error logged by systemd update: systemd-udevd-control.socket: Socket service systemd-udevd.service already active, refusing.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: archie.cobbs-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Often when I do an upgrade (via zypper up), and systemd gets updated, the
following errors are logged to /var/log/warn:

    systemd[1]: systemd-udevd-control.socket: Socket service
systemd-udevd.service already active, refusing.
    systemd[1]: Failed to listen on udev Control Socket.
    systemd[1]: systemd-udevd-kernel.socket: Socket service
systemd-udevd.service already active, refusing.
    systemd[1]: Failed to listen on udev Kernel Socket.

This doesn't seem to cause a problem, but it is an annoyance because these
machines send monitoring alerts when any errors are logged.

In in case, it's an error so it could also indicate a real problem and
therefore should be investigated.


--1626248745.b3afD60.23662
Date: Wed, 14 Jul 2021 07:45:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188296

            Bug ID: 1188296
           Summary: [Build 20210712] apparmor/dovecot profile too restrictive
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1839343/modules/usr_
                    lib_dovecot_pop3/steps/47
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit
fails in
[usr_lib_dovecot_pop3](https://openqa.opensuse.org/tests/1839343/modules/usr_lib_dovecot_pop3/steps/47)

type=AVC msg=audit(1626220647.522:754): apparmor="DENIED" operation="open"
profile="dovecot-auth" name="/etc/login.defs.d/" pid=5031 comm="auth"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0FSUID="root" OUID="root"
type=USER_AUTH msg=audit(1626220647.530:755): pid=5031 uid=0 auid=4294967295
ses=4294967295 subj==dovecot-auth (enforce) msg='op=PAM:authentication
grantors=pam_gnome_keyring,pam_unix acct="recipient"
exe="/usr/lib/dovecot/auth" hostname=::1 addr=::1 terminal=dovecot
res=success'UID="root" AUID="unset"
type=AVC msg=audit(1626220647.530:756): apparmor="DENIED" operation="open"
profile="dovecot-auth" name="/etc/login.defs.d/" pid=5031 comm="auth"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0FSUID="root" OUID="root"
type=USER_ACCT msg=audit(1626220647.530:757): pid=5031 uid=0 auid=4294967295
ses=4294967295 subj==dovecot-auth (enforce) msg='op=PAM:accounting
grantors=pam_unix acct="recipient" exe="/usr/lib/dovecot/auth" hostname=::1
addr=::1 terminal=dovecot res=success'UID="root" AUID="unset"
SCRIPT_FINISHEDgrprv-0-

## Test suite description
Maintainer: llzhao-at-suse.de.
Test AppArmor profiles with an existing disk image.

## Reproducible

Fails since (at least) Build
[20210412](https://openqa.opensuse.org/tests/1697443)

## Expected result

Last good: [20210410](https://openqa.opensuse.org/tests/1696381) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=apparmor_profile&version=Tumbleweed)


--1626344675.cCCB3.17418
Date: Thu, 15 Jul 2021 10:24:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188327

            Bug ID: 1188327
           Summary: kernel 5.13.1 is crashing on boot on armv7 due to 'Unhandled fault: alignment exception' in ecdsa_set_pub_key
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
               URL: https://openqa.opensuse.org/tests/1841539/modules/welc
                    ome/steps/6
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    mbrugger-at-suse.com
          Found By: openQA
           Blocker: Yes

Created attachment 851007
  --> http://bugzilla.opensuse.org/attachment.cgi?id=851007&action=edit
kernel traces

## Observation

openQA test in scenario opensuse-Tumbleweed-NET-arm-create_hdd_minimalx@aarch32
fails in
[welcome](https://openqa.opensuse.org/tests/1841539/modules/welcome/steps/6)

Since update to kernel 5.13.1 [0], kernel is crashing on boot on armv7 due to
'Unhandled fault: alignment exception'
See attachment for the full log.

[0]: https://build.opensuse.org/request/show/905770

## Test suite description

## Reproducible

Fails since (at least) Build
[20210714](https://openqa.opensuse.org/tests/1841078)

## Expected result

Last good: [20210712](https://openqa.opensuse.org/tests/1838553) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=arm&distri=opensuse&flavor=NET&machine=aarch32&test=create_hdd_minimalx&version=Tumbleweed)


--1626347270.dDe425770.20255
Date: Thu, 15 Jul 2021 11:07:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188330

            Bug ID: 1188330
           Summary: Firefox 90 - no data in about:support page
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: kaykaykay123-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Firefox 90.0 displays no data in about:support system page, only blank tables.
Firefox ESR 78.12.0esr works OK.


--1626350825.bDE20.23819
Date: Thu, 15 Jul 2021 12:07:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188336

            Bug ID: 1188336
           Summary: openSUSE Tumbleweed unattended installation in libvirt fails due to invalid autoyast.xml
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: jroedel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 851013
  --> https://bugzilla.suse.com/attachment.cgi?id=851013&action=edit
Install failure screenshot

The unattended installation of a openSUSE TW guest on an TW host fails, the
generated autoyast.xml file fails to validate in the installer.

I tried to install an TW guest on a TW host with this virt-install command:

virt-install \
        --arch x86_64 \
        --name "TW-Guest" \
        --vcpus 4 \
        --cpu EPYC \
        --memory 4096 \
        --machine q35 \
        --disk size=32,target.bus=scsi \
        --controller type=scsi,model=virtio-scsi,driver.iommu=on \
        --network network=default,model=virtio,driver.iommu=on \
        --boot uefi \
        --install os=opensusetumbleweed \
        --unattended
admin-password-file=pw,user-login=joro,user-password-file=pw

The attached screenshot of the installer show that the validation of the
autoyast.xml file fails, so the installer does not proceed.

Further investigation showed that the <language> section in the file is causing
the problem. Removing this section makes the installer proceed, but it shows a
message that no language is set and it will use the default one.

I am not sure whether the bug is in the generated autoyast.xml file or in the
validation xml file. The /usr/share/YaST2/schema/autoyast/rng/profile.rng file
does not list <language> as an optional attribute under <profile>. I guess that
is why the validation fails.

Please investigate.


--1626419332.2fCF7c0.2753
Date: Fri, 16 Jul 2021 07:08:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188373

            Bug ID: 1188373
           Summary: VUL-0: chromium: update to 91.0.4472.164
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Stable Channel Update for Desktop
Thursday, July 15, 2021

The Stable channel has been updated to 91.0.4472.164 for Windows, Mac and Linux
which will roll out over the coming days/weeks.

A full list of changes in this build is available in the log. Interested in
switching release channels?  Find out how here. If you find a new issue, please
let us know by filing a bug. The community help forum is also a great place to
reach out for help or learn about common issues.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority
of users are updated with a fix. We will also retain

restrictions if the bug exists in a third party library that other projects
similarly depend on, but haven???t yet fixed.

This update includes 8 security fixes. Below, we highlight fixes that were
contributed by external researchers.

Please see the Chrome Security Pagfor more information.

[$7500][1219082] High CVE-2021-30559: Out of bounds write in ANGLE. Reported by
Seong-Hwan Park (SeHwa) of SecunologyLab on 2021-06-11

[$5000][1214842] High CVE-2021-30541: Use after free in V8. Reported by Richard
Wheeldon on 2021-05-31

[$N/A][1219209] High CVE-2021-30560: Use after free in Blink XSLT. Reported by
Nick Wellnhofer on 2021-06-12

[$TBD][1219630] High CVE-2021-30561: Type Confusion in V8. Reported by Sergei
Glazunov of Google Project Zero on 2021-06-14

[$TBD][1220078] High CVE-2021-30562: Use after free in WebSerial. Reported by
Anonymous on 2021-06-15

[$TBD][1228407] High CVE-2021-30563: Type Confusion in V8. Reported by
Anonymous on 2021-07-12

[$TBD][1221309] Medium CVE-2021-30564: Heap buffer overflow in WebXR. Reported
by Ali Merchant, iQ3Connect VR Platform on 2021-06-17

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

Google is aware of reports that an exploit for CVE-2021-30563 exists in the
wild.

As usual, our ongoing internal security work was responsible for a wide range
of fixes:

    [1229408] Various fixes from internal audits, fuzzing and other initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Srinivas Sista
Google Chrome

https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html


--1626526923.5AAf0.8033
Date: Sat, 17 Jul 2021 13:02:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188416

            Bug ID: 1188416
           Summary: fcitx pinyin suggestion window unreadeable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 851065
  --> https://bugzilla.suse.com/attachment.cgi?id=851065&action=edit
screenshot

Note: I use MATE dark theme so I have no idea where the light background comes
from. With the lightgreen text (again no idea where the color comes from) is
unreadable.


--1626683313.82EBa0.12587
Date: Mon, 19 Jul 2021 08:28:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188441

            Bug ID: 1188441
           Summary: GCC requires 11GB of memory for building libecpint for s390x in comparison to 3.3GB on x86
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ada.lovelace-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

I figured out the "Out of memory" exception for s390x as the reason for failed
builds for s390x with the package libecpint.
https://build.opensuse.org/package/show/openSUSE:Factory:zSystems/libecpint

8GB of memory were not enough in comparison to 3,3GB on x86, too. Where is the
power of the mainframe with GCC?
"11 GB" of memory have to be configured for a successful build (with gcc) of a
small C++ library.
Logfile of the successful build with 11GB of memory:
https://build.opensuse.org/package/live_build_log/home:AdaLovelace:branches:science/libecpint/openSUSE_Factory_zSystems/s390x

@IBM: Can we receive support for performance optimization of the gcc compiler
or should the mainframe represent a worst-case performance in comparison to
x86?


--1626702443.8Bc60.19168
Date: Mon, 19 Jul 2021 13:47:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188470

            Bug ID: 1188470
           Summary: VUL-0: CVE-2021-36740: varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/304008/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1982409

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL
authorization bypass via a large Content-Length header for a POST request. This
affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x
before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.

Reference:
https://varnish-cache.org/security/VSV00007.html

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1982409
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36740
https://github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c41f4291792214a29405cf
https://github.com/varnishcache/varnish-cache/commit/82b0a629f60136e76112c6f2c6372cce77b683be
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36740
https://docs.varnish-software.com/security/VSV00007/
https://varnish-cache.org/security/VSV00007.html


body:
--1626709456.fE200Be80.32372
Date: Mon, 19 Jul 2021 15:44:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188477

            Bug ID: 1188477
           Summary: Syntax error in config.postfix
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: noreply.section+dev-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

TW snapshot 20210717 apparently introduced a syntax error, i.e. missing ')', in
the script /usr/sbin/config.postfix.

Error message displayed:
/sbin/config.postfix: line 98: unexpected EOF while looking for matching `)'
/sbin/config.postfix: line 1537: syntax error: unexpected end of file

summary: Syntax error in config.postfix


--1626718069.AdFb0.14252
Date: Mon, 19 Jul 2021 18:07:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188480

            Bug ID: 1188480
           Summary: Firefox 90.0.1 is available (new release)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
               URL: https://ftp.mozilla.org/pub/firefox/releases/90.0.1/
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: jayjayjazz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

Today Firefox 90.0.1 was released. This is a bugfix release.

Release Notes:
- Fixed a crash when using some accessibility clients on Windows (bug 1720696)
- Fixed busy looping processing some HTTP3 responses (bug 1720079)
- Fixed transient errors authenticating with some smart cards (bug 1715325)
- Fixed a rare crash on shutdown (bug 1707057)
- Fixed a race on startup that caused about:support to end up empty after
upgrade (bug 1717894)

All bug numbers refer to the Mozilla Bugzilla.

URL to Release Notes:
https://www.mozilla.org/en-US/firefox/90.0.1/releasenotes/

Release: https://ftp.mozilla.org/pub/firefox/releases/90.0.1/

Please consider an update.


--1626789143.78Da1.24609
Date: Tue, 20 Jul 2021 13:52:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188516

            Bug ID: 1188516
           Summary: Pipewire sets volume to 73% when plugging in headphones
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: alarrosa-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tiwai-at-suse.com
          Found By: ---
           Blocker: ---

After upgrading from an older TW to Snapshot 20210712, the master volume is set
to 73% every time I plug in headphones or line out. This happens no matter
whether the volume was lower, higher or even muted completely before
unplugging.
Especially with headphones this is a rather unpleasant experience.

Using ftrace, I saw that pipewire is causing this. After systemctl --user mask
pipewire, the issue stops. It's back immediately after starting pipewire again.

This system uses pulseaudio as main sound server, pipewire is only installed
and enabled to enable screen sharing.


--1626847014.6Ab70.18557
Date: Wed, 21 Jul 2021 05:56:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188535

            Bug ID: 1188535
           Summary: VUL-0: CVE-2021-2454: virtualbox: Improper input validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/304757/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2454

Risk: Low

CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
[PCI]

CVE-ID: CVE-2021-2454

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No
Description

The vulnerability allows a local authenticated user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Core
component in Oracle VM VirtualBox. A local authenticated user can exploit this
vulnerability to execute arbitrary code.

Mitigation

Install update from vendor's website.
Vulnerable software versions

Oracle VM VirtualBox: 6.1.0, 6.1.2, 6.1.4, 6.1.6, 6.1.8, 6.1.10, 6.1.12,
6.1.14, 6.1.16, 6.1.18, 6.1.20, 6.1.22

References:
https://www.cybersecurity-help.cz/vdb/SB2021072060
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2454
https://www.oracle.com/security-alerts/cpujul2021.html#CVE-2021-2454


--1626847017.f871aCe0.18601
Date: Wed, 21 Jul 2021 05:56:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188536

            Bug ID: 1188536
           Summary: VUL-0: CVE-2021-2409: virtualbox: Improper input validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/304715/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2409

Risk: Low

CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
[PCI]

CVE-ID: CVE-2021-2409

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No
Description

The vulnerability allows a local privileged user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Core
component in Oracle VM VirtualBox. A local privileged user can exploit this
vulnerability to execute arbitrary code.

Mitigation

Install update from vendor's website.
Vulnerable software versions

Oracle VM VirtualBox: 6.1.0, 6.1.2, 6.1.4, 6.1.6, 6.1.8, 6.1.10, 6.1.12,
6.1.14, 6.1.16, 6.1.18, 6.1.20, 6.1.22

References:
https://www.cybersecurity-help.cz/vdb/SB2021072060
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2409
https://www.oracle.com/security-alerts/cpujul2021.html#CVE-2021-2409


--1626847019.d37b70.18633
Date: Wed, 21 Jul 2021 05:56:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188537

            Bug ID: 1188537
           Summary: VUL-0: CVE-2021-2442: virtualbox: Improper input validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/304745/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2442

Risk: Low

CVSSv3.1: 5.2 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]
[PCI]

CVE-ID: CVE-2021-2442

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No
Description

The vulnerability allows a local privileged user to a crash the entire system.

The vulnerability exists due to improper input validation within the Core
component in Oracle VM VirtualBox. A local privileged user can exploit this
vulnerability to a crash the entire system.

Mitigation

Install update from vendor's website.
Vulnerable software versions

Oracle VM VirtualBox: 6.1.0, 6.1.2, 6.1.4, 6.1.6, 6.1.8, 6.1.10, 6.1.12,
6.1.14, 6.1.16, 6.1.18, 6.1.20, 6.1.22

References:
https://www.cybersecurity-help.cz/vdb/SB2021072060
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2442
https://www.oracle.com/security-alerts/cpujul2021.html#CVE-2021-2442


--1626847024.e63b0.25958
Date: Wed, 21 Jul 2021 05:57:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188538

            Bug ID: 1188538
           Summary: VUL-0: CVE-2021-2443: virtualbox: Improper input validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/304746/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2443

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H/E:U/RL:O/RC:C]
[PCI]

CVE-ID: CVE-2021-2443

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No
Description

The vulnerability allows a local privileged user to read and manipulate data.

The vulnerability exists due to improper input validation within the Core
component in Oracle VM VirtualBox. A local privileged user can exploit this
vulnerability to read and manipulate data.

Mitigation

Install update from vendor's website.
Vulnerable software versions

Oracle VM VirtualBox: 6.1.0, 6.1.2, 6.1.4, 6.1.6, 6.1.8, 6.1.10, 6.1.12,
6.1.14, 6.1.16, 6.1.18, 6.1.20, 6.1.22

References:
https://www.cybersecurity-help.cz/vdb/SB2021072060
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2443
https://www.oracle.com/security-alerts/cpujul2021.html#CVE-2021-2443


body:
--1626876608.E71aCE630.26756
Date: Wed, 21 Jul 2021 14:10:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188577

            Bug ID: 1188577
           Summary: Latex - new version 2021-06-01
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lw-at-weberhofer.at
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I run into a LaTeX problem (https://tex.stackexchange.com/q/605851/48642) which
seems to be fixed in the latest version.

According to https://www.latex-project.org/news/latex2e-news/ there exists a
version from 2021-06-01. In the installation packages its only version
2020-10-01 available.

An upgrade to the latest working LaTeX version would be appreciated.

summary: Latex - new version 2021-06-01


--1626896816.bcf3D5.9705
Date: Wed, 21 Jul 2021 19:46:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188590

            Bug ID: 1188590
           Summary: VUL-0: chromium: Update to 92.0.4515.107
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: CONFIRMED
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: Andreas.Stieger-at-gmx.de, atoptsoglou-at-suse.com,
                    meissner-at-suse.com, security-team-at-suse.de
          Found By: ---
           Blocker: ---

[$15000][1210985] High CVE-2021-30565: Out of bounds write in Tab Groups.
Reported by David Erceg on 2021-05-19

[$10000][1202661] High CVE-2021-30566: Stack buffer overflow in Printing.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-04-26

[$10000][1211326] High CVE-2021-30567: Use after free in DevTools. Reported by
DDV_UA on 2021-05-20

[$8500][1219886] High CVE-2021-30568: Heap buffer overflow in WebGL. Reported
by Yangkang (@dnpushme) of 360 ATA on 2021-06-15

[$500][1218707] High CVE-2021-30569: Use after free in sqlite. Reported by
Chris Salls (@salls) of Makai Security on 2021-06-11

[$TBD][1101897] High CVE-2021-30571: Insufficient policy enforcement in
DevTools. Reported by David Erceg on 2020-07-03

[$TBD][1214234] High CVE-2021-30572: Use after free in Autofill. Reported by
Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on
2021-05-28

[$TBD][1216822] High CVE-2021-30573: Use after free in GPU. Reported by
Security For Everyone Team - https://securityforeveryone.com on 2021-06-06

[$TBD][1227315] High CVE-2021-30574: Use after free in protocol handling.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-08

[$15000][1213313] Medium CVE-2021-30575: Out of bounds read in Autofill.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-05-26

[$10000][1194896] Medium CVE-2021-30576: Use after free in DevTools. Reported
by David Erceg on 2021-04-01

[$10000][1204811] Medium CVE-2021-30577: Insufficient policy enforcement in
Installer. Reported by Jan van der Put (REQON B.V) on 2021-05-01

[$7500][1201074] Medium CVE-2021-30578: Uninitialized Use in Media. Reported by
Chaoyuan Peng  on 2021-04-21

[$7500][1207277] Medium CVE-2021-30579: Use after free in UI framework.
Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin
Group on 2021-05-10

[$5000][1189092] Medium CVE-2021-30580: Insufficient policy enforcement in
Android intents. Reported by @retsew0x01 on 2021-03-17

[$5000][1194431] Medium CVE-2021-30581: Use after free in DevTools. Reported by
David Erceg on 2021-03-31

[$5000][1205981] Medium CVE-2021-30582: Inappropriate implementation in
Animation. Reported by George Liu  on 2021-05-05

[$3000][1179290] Medium CVE-2021-30583: Insufficient policy enforcement in
image handling on Windows. Reported by Muneaki Nishimura (nishimunea) on
2021-02-17

[$3000][1213350] Medium CVE-2021-30584: Incorrect security UI in Downloads.
Reported by @retsew0x01 on 2021-05-26

[$N/A][1023503] Medium CVE-2021-30585: Use after free in sensor handling.
Reported by niarci on 2019-11-11

[$TBD][1201032] Medium CVE-2021-30586: Use after free in dialog box handling on
Windows. Reported by kkomdal with kkwon and neodal on 2021-04-21

[$N/A][1204347] Medium CVE-2021-30587: Inappropriate implementation in
Compositing on Windows. Reported by Abdulrahman Alqabandi, Microsoft Browser
Vulnerability Research on 2021-04-30

[$5000][1195650] Low CVE-2021-30588: Type Confusion in V8. Reported by Jose
Martinez (tr0y4) from VerSprite Inc. on 2021-04-04

[$3000][1180510] Low CVE-2021-30589: Insufficient validation of untrusted input
in Sharing. Reported by Kirtikumar Anandrao Ramchandani (@Kirtikumar_A_R) and
Patrick Walker (@homesen) on 2021-02-20


body:
--1626980644.8B1bd0.18989
Date: Thu, 22 Jul 2021 19:04:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188623

            Bug ID: 1188623
           Summary: ICE: Segmentation fault
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: rguenther-at-suse.com
          Reporter: schwab-at-suse.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/home:Andreas_Schwab:glibc:rebuild/opie/f/x86_64

[   41s] gcc -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection
-Werror=return-type -flto=auto -ffat-lto-objects -g -fno-strict-aliasing
-Dlinux -DLINUX_PAM -ansi -D_POSIX_SOURCE -Wall -Wwrite-strings -Wpointer-arith
-Wcast-qual -Wcast-align -Wtraditional -Wstrict-prototypes -Wmissing-prototypes
-Wnested-externs -Winline -Wshadow -pedantic -fPIC -DPAM_DYNAMIC   -c
pam_opie.c -o dynamic/pam_opie.o
[   41s] In file included from /usr/include/features.h:488,
[   41s]                  from /usr/include/bits/libc-header-start.h:33,
[   41s]                  from /usr/include/stdlib.h:25,
[   41s]                  from pam_opie.c:29:
[   41s] /usr/include/sys/cdefs.h:1: internal compiler error: Segmentation
fault
[   41s]     1 | /* Copyright (C) 1992-2021 Free Software Foundation, Inc.
[   41s]       |
[   41s] 0xdf7115 internal_error(char const*, ...)
[   41s]        ???:0
[   41s] 0xde0516 cpp_sys_macro_p(cpp_reader*)
[   41s]        ???:0
[   41s] 0xf07e86 _cpp_parse_expr
[   41s]        ???:0
[   41s] 0xf072b2 _cpp_handle_directive
[   41s]        ???:0
[   41s] 0xf02224 _cpp_lex_token
[   41s]        ???:0
[   41s] 0xf186c5 c_lex_with_flags(tree_node**, unsigned int*, unsigned char*,
int)
[   41s]        ???:0
[   41s] 0x1403818 c_parse_file()
[   41s]        ???:0
[   41s] 0x140143b c_common_parse_file()
[   41s]        ???:0

summary: ICE: Segmentation fault


body:
--1627044810.F3c38A0.9900
Date: Fri, 23 Jul 2021 12:53:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188650

            Bug ID: 1188650
           Summary: libcamera too old for pipewire
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: jengelh-at-inai.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/835

summary: libcamera too old for pipewire


--1627142122.A71C0.9806
Date: Sat, 24 Jul 2021 15:55:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188683

            Bug ID: 1188683
           Summary: Astrometa DVB-T2 stopped working with kernel 5.3.18-lp152.84
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: petr.licman-at-tieto.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,
I am using Leap 15.2 with Astrometa DVB-T2 tuner USB device, based on chipsets
RTL2832, Sony CXD2837ER, R820T. So far it was working properly, but after
update to kernel 5.3.18-lp152.84, it is not working anymore. When I switch back
to previous kernel 5.3.18-lp152.81 it is working properly again. Here is the
output of dmesg. It is detected as RTL2830 (not 2832), Sony CXD2837ER not
detected at all. Error "mxl5005s I2C reset failed" shown when accessed by
Kaffeine. Could you please check it and fix it? Thank you.

WORKING (5.3.18-lp152.81):

[   71.538799] usb 1-5.2: new high-speed USB device number 10 using xhci_hcd
[   71.650394] usb 1-5.2: New USB device found, idVendor=15f4, idProduct=0131,
bcdDevice= 1.00
[   71.650400] usb 1-5.2: New USB device strings: Mfr=1, Product=2,
SerialNumber=0
[   71.650403] usb 1-5.2: Product: dvbt2
[   71.650405] usb 1-5.2: Manufacturer: astrometadvbt2
[   71.660904] usb 1-5.2: dvb_usb_v2: found a 'Astrometa DVB-T2' in warm state
[   71.807727] usb 1-5.2: dvb_usb_v2: will pass the complete MPEG2 transport
stream to the software demuxer
[   71.807736] dvbdev: DVB: registering new adapter (Astrometa DVB-T2)
[   71.807741] usb 1-5.2: media controller created
[   71.808162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux'
registered.
[   71.812054] i2c i2c-13: Added multiplexed i2c bus 14
[   71.812058] rtl2832 13-0010: Realtek RTL2832 successfully attached
[   71.812091] i2c i2c-13: cxd2841er_attach(): I2C adapter 00000000a7dc62a8
SLVX addr 6e SLVT addr 6c
[   71.816820] i2c i2c-13: cxd2841er_attach(): attaching CXD2837ER DVB-C/T/T2
frontend
[   71.816825] i2c i2c-13: cxd2841er_attach(): chip ID 0xb1 OK.
[   71.816833] usb 1-5.2: DVB: registering adapter 0 frontend 0 (Realtek
RTL2832 (DVB-T))...
[   71.816842] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832
(DVB-T)' registered.
[   71.816973] usb 1-5.2: DVB: registering adapter 0 frontend 1 (Sony CXD2837ER
DVB-T/T2/C demodulator)...
[   71.816977] dvbdev: dvb_create_media_entity: media entity 'Sony CXD2837ER
DVB-T/T2/C demodulator' registered.
[   71.817295] r820t 14-003a: creating new instance
[   71.825191] r820t 14-003a: Rafael Micro r820t successfully identified
[   71.825209] r820t 14-003a: attaching existing instance
[   71.844220] r820t 14-003a: Rafael Micro r820t successfully identified
[   71.854121] rtl2832_sdr rtl2832_sdr.1.auto: Registered as swradio0
[   71.854125] rtl2832_sdr rtl2832_sdr.1.auto: Realtek RTL2832 SDR attached
[   71.854127] rtl2832_sdr rtl2832_sdr.1.auto: SDR API is still slightly
experimental and functionality changes may follow
[   71.862118] Registered IR keymap rc-empty
[   71.862198] rc rc0: Astrometa DVB-T2 as
/devices/pci0000:00/0000:00:14.0/usb1/1-5/1-5.2/rc/rc0
[   71.862367] rc rc0: lirc_dev: driver dvb_usb_rtl28xxu registered at minor =
0, raw IR receiver, no transmitter
[   71.862436] input: Astrometa DVB-T2 as
/devices/pci0000:00/0000:00:14.0/usb1/1-5/1-5.2/rc/rc0/input28
[   71.862793] usb 1-5.2: dvb_usb_v2: schedule remote query interval to 200
msecs
[   71.871651] usb 1-5.2: dvb_usb_v2: 'Astrometa DVB-T2' successfully
initialized and connected

BROKEN ON KERNEL 5.3.18-lp152.84:

[   43.547124] usb 1-5.2: new high-speed USB device number 10 using xhci_hcd
[   43.657440] usb 1-5.2: New USB device found, idVendor=15f4, idProduct=0131,
bcdDevice= 1.00
[   43.657441] usb 1-5.2: New USB device strings: Mfr=1, Product=2,
SerialNumber=0
[   43.657442] usb 1-5.2: Product: dvbt2
[   43.657443] usb 1-5.2: Manufacturer: astrometadvbt2
[   43.666489] usb 1-5.2: dvb_usb_v2: found a 'Astrometa DVB-T2' in warm state
[   43.716625] usb 1-5.2: dvb_usb_v2: will pass the complete MPEG2 transport
stream to the software demuxer
[   43.716628] dvbdev: DVB: registering new adapter (Astrometa DVB-T2)
[   43.716629] usb 1-5.2: media controller created
[   43.716751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux'
registered.
[   43.717789] i2c i2c-13: Added multiplexed i2c bus 14
[   43.717790] rtl2830 13-0010: Realtek RTL2830 successfully attached
[   43.717796] usb 1-5.2: DVB: registering adapter 0 frontend 0 (Realtek
RTL2830 (DVB-T))...
[   43.717798] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830
(DVB-T)' registered.
[   43.717824] MXL5005S: Attached at address 0x63
[   43.724454] Registered IR keymap rc-empty
[   43.724469] rc rc0: Astrometa DVB-T2 as
/devices/pci0000:00/0000:00:14.0/usb1/1-5/1-5.2/rc/rc0
[   43.724485] rc rc0: lirc_dev: driver dvb_usb_rtl28xxu registered at minor =
0, scancode receiver, no transmitter
[   43.724505] input: Astrometa DVB-T2 as
/devices/pci0000:00/0000:00:14.0/usb1/1-5/1-5.2/rc/rc0/input28
[   43.724535] usb 1-5.2: dvb_usb_v2: schedule remote query interval to 400
msecs
[   43.732640] usb 1-5.2: dvb_usb_v2: 'Astrometa DVB-T2' successfully
initialized and connected
[   63.116056] mxl5005s I2C reset failed
[   63.142423] mxl5005s I2C write failed
[   63.155316] mxl5005s I2C write failed
[   63.181549] mxl5005s I2C write failed