--1656055503.Fb67Cb01.2016
Date: Fri, 24 Jun 2022 07:25:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1200899

            Bug ID: 1200899
           Summary: VUL-1: CVE-2022-34299: Heap-based buffer over-read in libdwarf 0.4.0
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/335354/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-34299

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related
to dwarf_global_formref_b.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-34299
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34299
https://github.com/davea42/libdwarf-code/issues/119
https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162


body:
--1656246452.61cDFca0.27949
Date: Sun, 26 Jun 2022 12:27:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1200944

            Bug ID: 1200944
           Summary: Lua failure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: epistemepromeneur-at-free.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I launch VLC 3.1.4 from OSS repo
I get an error about Lua, then I can't access to VLC web server with Lua
interface.

*******************************************************************************
localhost:~> vlc
VLC media player 3.0.17.4 Vetinari (revision 3.0.13-8-g41878ff4f2)
[00005625bf5d2b40] [http] lua interface error: Error loading script
/usr/lib64/vlc/lua/intf/http.luac: lua/modules/common.lua:3: attempt to call a
nil value (global 'module')
[00007f96903d73c0] lua probe error: Error loading script
/home/roubach/.local/share/vlc/lua/sd/tunein.lua: lua/modules/simplexml.lua:24:
attempt to call a nil value (global 'module')
[00005625bf4cd600] main libvlc: Lancement de vlc avec l'interface par d?faut.
Utiliser ??cvlc?? pour d?marrer VLC sans interface.
[00005625bf5ade90] qt interface error: cannot start Qt multiple times
[00007f9648025ae0] qt generic error: cannot start Qt multiple times
[00005625bf5ade90] skins2 interface error: cannot instantiate dialogs provider
[00005625bf562ae0] main playlist: playlist is empty
[00005625bf5ade90] [cli] lua interface error: Error loading script
/usr/lib64/vlc/lua/intf/cli.luac: lua/modules/common.lua:3: attempt to call a
nil value (global 'module')

*******************************************************************************

summary: Lua failure


body:
Build Identifier:

When installing mcomix from the Software package site, it appears to install,
but fails to run.
https://software.opensuse.org/package/mcomix

With help from the forum, I learned that if you install typelib-1_0-Gtk-3_0 it
will run as expected.

[First bug report, please let me know if there any mistakes I need to correct.]

Reproducible: Always

Steps to Reproduce:
1. Install mcomix from package sources
2. Run mcomix
3.
Actual Results:
mcomix
Traceback (most recent call last):
  File "/usr/bin/mcomix", line 11, in <module>
    load_entry_point('mcomix==2.0.2', 'console_scripts', 'mcomix')()
  File "/usr/lib/python3.6/site-packages/mcomix-2.0.2-py3.6.egg/mcomix/run.py",
line 124, in run
    require_version('Gtk', '3.0')
  File "/usr/lib64/python3.6/site-packages/gi/__init__.py", line 130, in
require_version
    (namespace, version))
ValueError: Namespace Gtk not available for version 3.0

Expected Results:
mcomix opens

I tried this on Tumbleweed before installing Leap 15.3 and it happened on both.
 The helpful forum folks told me how to fix it, but I though that whoever
controls what is listed as a dependency may want to update it to include
typelib-1_0-Gtk-3_0.

https://forums.opensuse.org/showthread.php/571760-mcomix-doesn-t-open?p=3137717#post3137717

summary: When installing mcomix, it fails to run unless typelib-1_0-Gtk-3_0 is installed


--1656321196.F0d50.18472
Date: Mon, 27 Jun 2022 09:13:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1200959

            Bug ID: 1200959
           Summary: fatal error on QtXkbCommonSupport/private/qxkbcommon_p.h
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: hillwoodroc-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

xkbcommon.h installs in "libxkbcommon/xkbcommon/", but its path is quoted as
"xkbcommon" in qxkbcommon_p.h

The same issue is also in Leap 15.4 and Tumbleweed.

[  208s] In file included from
/usr/include/qt5/QtWaylandClient/5.15.2/QtWaylandClient/private/qwaylanddisplay_p.h:71,
[  208s]                  from
/usr/include/qt5/QtWaylandClient/5.15.2/QtWaylandClient/private/qwaylandwindow_p.h:66,
[  208s]                  from
/home/abuild/rpmbuild/BUILD/dde-control-center-5.5.83/src/frame/window/modules/keyboard/waylandgrab.cpp:27:
[  208s]
/usr/include/qt5/QtXkbCommonSupport/5.15.2/QtXkbCommonSupport/private/qxkbcommon_p.h:59:10:
fatal error: xkbcommon/xkbcommon.h: No such file or directory
[  208s]    59 | #include <xkbcommon/xkbcommon.h>
[  208s]       |          ^~~~~~~~~~~~~~~~~~~~~~~
[  208s] compilation terminated.
[  208s] make[2]: ***
[src/frame/CMakeFiles/dde-control-center.dir/build.make:3489:
src/frame/CMakeFiles/dde-control-center.dir/window/modules/keyboard/waylandgrab.cpp.o]
Error 1
[  208s] make[2]: *** Waiting for unfinished jobs....
[  213s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/dde-control-center-5.5.83/build'
[  213s] make[1]: *** [CMakeFiles/Makefile2:1033:
src/frame/CMakeFiles/dde-control-center.dir/all] Error 2
[  213s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/dde-control-center-5.5.83/build'
[  213s] make: *** [Makefile:149: all] Error 2
[  213s] error: Bad exit status from /var/tmp/rpm-tmp.D2jcuV (%build)


--1656325363.efea6e0.23902
Date: Mon, 27 Jun 2022 10:22:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1200962

            Bug ID: 1200962
           Summary: binutils-gold drop affects ARM architectures
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

there have been some "drop binutils-gold dependency cause it is unneeded" and
"because it is unmaintained" submitrequests, and now ghc is broken:

[   31s] configure: error: Your linker is affected by binutils #16177, which
[   31s]                critically breaks linkage of GHC objects. Please either
upgrade
[   31s]                binutils or supply a different linker with the LD
environment
[   31s]                variable.

can you please include the patch then?


--1656333166.Abb66e570.32700
Date: Mon, 27 Jun 2022 12:32:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1200965

            Bug ID: 1200965
           Summary: iris driver crashes on Dell Latitude 7480
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: max-at-suse.com
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running with the iris driver, which is default on 15.4, I see crashes when
trying to open a module from the KDE system settings panel.

Additionally X appears to hang in a mouse and keyboard grab or so when putting
LibreOffice Impress into presentation mode. The only way I found out of that
was killing Impress.

Both problems are gone when I force the Intel driver to use i965 instead of
iris through ~/.drirc.

$ inxi -aG -y 80
Graphics:
  Device-1: Intel Skylake GT2 [HD Graphics 520] vendor: Dell driver: i915
  v: kernel bus-ID: 00:02.0 chip-ID: 8086:1916 class-ID: 0300
  Device-2: Sunplus Innovation Integrated_Webcam_HD type: USB driver: uvcvideo
  bus-ID: 1-5:2 chip-ID: 1bcf:2b96 class-ID: 0e02
  Device-3: Microsoft LifeCam VX-2000 type: USB driver: snd-usb-audio,uvcvideo
  bus-ID: 3-1.3:4 chip-ID: 045e:0761 class-ID: 0102
  Display: x11 server: X.Org 1.20.3 compositor: kwin_x11 driver: loaded: intel
  unloaded: fbdev,modesetting,vesa display-ID: :0 screens: 1
  Screen-1: 0 s-res: 3600x1200 s-dpi: 96 s-size: 951x317mm (37.4x12.5")
  s-diag: 1002mm (39.5")
  Monitor-1: DP2-1 res: 1680x1050 hz: 60 dpi: 91 size: 470x300mm (18.5x11.8")
  diag: 558mm (22")
  Monitor-2: HDMI1 res: 1920x1200 hz: 60 dpi: 94 size: 520x320mm (20.5x12.6")
  diag: 611mm (24")
  OpenGL: renderer: Mesa DRI Intel HD Graphics 520 (SKL GT2)
  v: 4.6 Mesa 21.2.4 compat-v: 3.0 direct render: Yes


body:
--1656374365.553C10.30579
Date: Mon, 27 Jun 2022 23:59:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1200974

            Bug ID: 1200974
           Summary: [trackerbug] lxd 5.3 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439

  + Extended raw.qemu support
  + fscache support for cephfs storage pools

summary: [trackerbug] lxd 5.3 update


body:
Build Identifier:

installing toolbox on a fresh system, it pulls in also docker as dependency.
But seems this tool requires podman instead.

Reproducible: Always

Steps to Reproduce:
0. remove podman and toolbox with all dependencies

$ sudo zypper rm -u toolbox podman

1. install only toolbox

$ sudo zypper in toolbox
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following recommended package was automatically selected:
  criu

The following 9 NEW packages are going to be installed:
  catatonit containerd criu docker docker-bash-completion libnet9
python310-protobuf runc toolbox

9 new packages to install.
Overall download size: 53.0 MiB. Already cached: 0 B. After the operation,
additional 219.2 MiB will be used.

2. toolbox is not working

$ toolbox enter

[no output]

$ toolbox list

[no output]

2. install also podman separately

$ sudo zypper in podman
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 2 recommended packages were automatically selected:
  cni-plugins podman-cni-config

The following 8 NEW packages are going to be installed:
  cni cni-plugins conmon fuse-overlayfs libcontainers-common podman
podman-cni-config slirp4netns

8 new packages to install.
Overall download size: 21.1 MiB. Already cached: 0 B. After the operation,
additional 97.9 MiB will be used.
Continue? [y/n/v/...? shows all options] (y):
Retrieving package cni-1.0.1-1.4.x86_64
          (1/8),   1.1 MiB (  5.1 MiB unpacked)
Retrieving: cni-1.0.1-1.4.x86_64.rpm
....................................................................................[done]
Retrieving package cni-plugins-1.1.1-1.4.x86_64
          (2/8),   6.9 MiB ( 47.0 MiB unpacked)
Retrieving: cni-plugins-1.1.1-1.4.x86_64.rpm
................................................................[done (2.8
MiB/s)]
Retrieving package conmon-2.1.0-1.2.x86_64
          (3/8),  49.3 KiB (156.2 KiB unpacked)
Retrieving: conmon-2.1.0-1.2.x86_64.rpm
.................................................................................[done]
Retrieving package fuse-overlayfs-1.7.1-1.5.x86_64
          (4/8),  66.3 KiB (136.5 KiB unpacked)
Retrieving: fuse-overlayfs-1.7.1-1.5.x86_64.rpm
.........................................................................[done]
Retrieving package libcontainers-common-20210626-10.1.noarch
          (5/8), 437.7 KiB (128.7 KiB unpacked)
Retrieving: libcontainers-common-20210626-10.1.noarch.rpm
...................................................[done (1.8 MiB/s)]
Retrieving package slirp4netns-1.1.11-1.6.x86_64
          (6/8),  44.3 KiB ( 82.1 KiB unpacked)
Retrieving: slirp4netns-1.1.11-1.6.x86_64.rpm
...........................................................................[done]
Retrieving package podman-4.1.1-1.1.x86_64
          (7/8),  12.1 MiB ( 45.3 MiB unpacked)
Retrieving: podman-4.1.1-1.1.x86_64.rpm
.....................................................................[done (2.6
MiB/s)]
Retrieving package podman-cni-config-4.1.1-1.1.noarch
          (8/8), 252.3 KiB ( 11.1 KiB unpacked)
Retrieving: podman-cni-config-4.1.1-1.1.noarch.rpm
......................................................................[done]

Checking for file conflicts:
............................................................................................[done]
(1/8) Installing: cni-1.0.1-1.4.x86_64
..................................................................................[done]
(2/8) Installing: cni-plugins-1.1.1-1.4.x86_64
..........................................................................[done]
(3/8) Installing: conmon-2.1.0-1.2.x86_64
...............................................................................[done]
(4/8) Installing: fuse-overlayfs-1.7.1-1.5.x86_64
.......................................................................[done]
(5/8) Installing: libcontainers-common-20210626-10.1.noarch
.............................................................[done]
(6/8) Installing: slirp4netns-1.1.11-1.6.x86_64
.........................................................................[done]
(7/8) Installing: podman-4.1.1-1.1.x86_64
...............................................................................[done]
(8/8) Installing: podman-cni-config-4.1.1-1.1.noarch
....................................................................[done]
Executing %posttrans scripts
............................................................................................[done]

4. now toolbox is operating correctly

$ toolbox list
CONTAINER ID  IMAGE                                          COMMAND
CREATED         STATUS                       PORTS       NAMES
4770d7618a0e  registry.opensuse.org/opensuse/toolbox:latest  sleep +Inf  17
minutes ago  Exited (143) 17 minutes ago              toolbox-andrea-user

$ toolbox enter
Container 'toolbox-andrea-user' already exists. Trying to start...
(To remove the container and start with a fresh toolbox, run: podman rm
'toolbox-andrea-user')
Container started.
Entering container. To exit, type 'exit'.

Expected Results:
installation of required package podman instead of docker

summary: toolbox installs docker as dependency but should depend on podman


--1656450129.41e1f00.27881
Date: Tue, 28 Jun 2022 21:02:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201001

            Bug ID: 1201001
           Summary: grep manpage slightly broken (contains some "tags" instead of rendered text)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: schwab-at-suse.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

man 1 grep   contains

    -r, --recursive
        [...] Note that if no file operand is given, B<grep> searches [...]

and

    Perl-compatible regular expressions  give  additional  functionality,
    and are documented in B<pcresyntax>(3) and B<pcrepattern>(3), but

Note the   B<grep>   and   B<pcresyntax>(3) and B<pcrepattern>(3)   parts,
which should be rendered as   grep   and   pcresyntax(3) and pcrepattern(3)


--1656610641.FCa3Fa1.27282
Date: Thu, 30 Jun 2022 17:37:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201066

            Bug ID: 1201066
           Summary: kernel upgrade fails with Failed to enroll new keys
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: doreilly-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 859935
  --> http://bugzilla.opensuse.org/attachment.cgi?id=859935&action=edit
/var/log/transactional-update.log

MicroOS transactional-update fails on RPi.

># cat /sys/firmware/devicetree/base/model
>Raspberry Pi 3 Model B Rev 1.2

> # head -2 /etc/os-release
> NAME="openSUSE MicroOS"
> # VERSION="20220622"

> # uname -a
> Linux wguard 5.18.4-1-default #1 SMP PREEMPT_DYNAMIC Wed Jun 15 06:00:33 UTC 2022 (ed6345d) aarch64 aarch64 aarch64 GNU/Linux

># transactional-update
>...
>The following product is going to be upgraded:
>openSUSE MicroOS
>  20220622-0 -> 20220628-0
>...
>(25/37) Installing: kernel-default-5.18.6-1.1.aarch64 [....
>...
>dracut: *** Creating image file '/boot/initrd-5.18.6-1-default' ***
>dracut: *** Creating initramfs image file '/boot/initrd-5.18.6-1-default' done ***
>Failed to enroll new keys
>Failed to import /etc/uefi/certs/1F673297.crt
>warning: %post(kernel-default-5.18.6-1.1.aarch64) scriptlet failed, exit status 255
>...
>2022-06-30 17:21:02 Application returned with exit status 107.
>2022-06-30 17:21 ERROR: zypper up on /.snapshots/3/snapshot failed with exit code 107!


--1656680213.11c045a0.16771
Date: Fri, 1 Jul 2022 12:56:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201096

            Bug ID: 1201096
           Summary: pinebook pro on warm reboot cannot boot from mmc1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: screening-team-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

u-boot prefers mmc1 (SD slot) over mmc0 (emmc).

However, on reboot booting from mmc1 fails and system boots from mmc0.


--1656745760.ce170.19888
Date: Sat, 2 Jul 2022 07:09:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201111

            Bug ID: 1201111
           Summary: python-flufl.i18n needs to rebuild on TW
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: asn-at-cryptomilk.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

python-flufl.i18n needs to rebuild on TW.

There is no python310-flufl.i18n available only python-flufl3.i18n. So all
projects requiring flufl.i18n fail to build!

# zypper se -s flufl.i18n
Loading repository data...
Reading installed packages...

S | Name               | Type       | Version | Arch   | Repository
--+--------------------+------------+---------+--------+---------------------------
  | python-flufl.i18n  | srcpackage | 4.0-1.5 | noarch |
openSUSE-Tumbleweed-Source
  | python3-flufl.i18n | package    | 4.0-1.5 | noarch | Main Repository (OSS)


--1656764949.5FaB52e31.22054
Date: Sat, 2 Jul 2022 12:29:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201113

            Bug ID: 1201113
           Summary: flatpak-zsh-completion: invalid Supplements
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: gnome-bugs-at-suse.de
          Found By: ---
           Blocker: ---

flatpak-zsh-completion:

> [...]
> Supplements    : [4]
>     package
>     provides
>     zsh)
>     (flatpak and n)

from spec:

> %package zsh-completion
> [...]
> Supplements:    packageand(%{name}:%(rpm -q --qf '%%{NAME}' --whatprovides zsh))


--1656892519.bD1ffE811.24027
Date: Sun, 3 Jul 2022 23:55:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201125

            Bug ID: 1201125
           Summary: power-profiles-daemon DBus service configuration file moved from /etc to /usr/share
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: badshah400-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
                CC: fcrozat-at-suse.com, matthias.gerstner-at-suse.com
        Depends on: 1189900
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1189900 +++

With version 0.12, power-profiles-daemon has moved its dbus conf file to
/usr/share/dbus-1/ instead of /etc/dbus-1/, so rpmlint complains again:

> power-profiles-daemon.x86_64: E: dbus-file-unauthorized (Badness: 10) /usr/share/dbus-1/system.d/net.hadess.PowerProfiles.conf

Requesting a modification of the white-listing in rpmlint before I submit this
package to Factory. Test packages here:
https://build.opensuse.org/package/show/home:badshah400:branches:Base:System/power-profiles-daemon

Thanks in advance.


--1656907596.a6bACAF0.29179
Date: Mon, 4 Jul 2022 04:06:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201127

            Bug ID: 1201127
           Summary: python-brotlicffi / setuptools build_ext reproducible builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mcepl-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

I found
https://github.com/python-hyper/brotlicffi/blob/main/setup.py#L66
needed a "sorted(sources)" to become fully reproducible,
but IMHO that should not have to be added into setup.py
but one layer up, e.g. in build_ext
similar to
https://github.com/pypa/setuptools/commit/5a0404fa3875a069f7a6436f508116e852909cf2
https://github.com/pypa/setuptools/pull/1068/files


--1657004854.AC5ad281.26546
Date: Tue, 5 Jul 2022 07:07:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201211

            Bug ID: 1201211
           Summary: VUL-0: CVE-2022-230: chafa: Buffer Over-read
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/336250/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jubalh-at-iodoru.org
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2103678

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.

https://github.com/hpjansson/chafa/commit/56fabfa18a6880b4cb66047fa6557920078048d9
https://huntr.dev/bounties/f6b9114b-671d-4948-b946-ffe5c9aeb816

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2103678
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2301
https://github.com/hpjansson/chafa/commit/56fabfa18a6880b4cb66047fa6557920078048d9
https://huntr.dev/bounties/f6b9114b-671d-4948-b946-ffe5c9aeb816


--1657007772.F6CAff7.2437
Date: Tue, 5 Jul 2022 07:56:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201216

            Bug ID: 1201216
           Summary: VUL-0: chromium: multiple security issues fixed in 103.0.5060.114
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: Andreas.Stieger-at-gmx.de
          Found By: ---
           Blocker: ---

This update includes 4 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$TBD][1341043] High CVE-2022-2294: Heap buffer overflow in WebRTC. Reported by
Jan Vojtesek from the Avast Threat Intelligence team on 2022-07-01

[$7500][1336869] High CVE-2022-2295: Type Confusion in V8. Reported by avaue
and Buff3tts at S.S.L. on 2022-06-16

[$3000][1327087] High CVE-2022-2296: Use after free in Chrome OS Shell.
Reported by Khalil Zhani on 2022-05-19

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

Google is aware that an exploit for CVE-2022-2294 exists in the wild.

As usual, our ongoing internal security work was responsible for a wide range
of fixes:

[1338205] Various fixes from internal audits, fuzzing and other initiatives


--1657167299.dDb856dB0.25970
Date: Thu, 7 Jul 2022 04:14:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201272

            Bug ID: 1201272
           Summary: pythno3-Sphinx-4_2_0-latex lacks texlive-tex-gyre in its dependencies
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: akiyks-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Changelog of Sphinx 4.0.0 [1] says:

> Dependencies
>
> 4.0.0b1
>
> [...]
>   * LaTeX: add tex-gyre font dependency

[1]:
https://www.sphinx-doc.org/en/master/changes.html#release-4-0-0-released-may-09-2021

On openSUSE Leap 15.4, pythno3-Sphinx-4_2_0 is provided and
by installing pythno3-Sphinx-4_2_0-latex, generated LaTeX documents
are expected to be built without any additional texlive packages.

However, building such a LaTeX source ends up in the following error:

> Latexmk: Missing input file: 'tgtermes.sty' from line
>  '! LaTeX Error: File `tgtermes.sty' not found.'

This is due to the missing dependency to texlive-tex-gyre from
pythno3-Sphinx-4_2_0-latex.

Could you update the dependencies?


body:
--1657233932.4810cf0.18477
Date: Thu, 7 Jul 2022 22:45:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201307

            Bug ID: 1201307
           Summary: liburing 2.2 update breaks qemu build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: ddiss-at-suse.com
          Reporter: ddiss-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dmueller-at-suse.com, virt-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This showed up in the build service staging area and was reported by Dominique
via https://build.opensuse.org/request/show/987153:

[  224s] /usr/include/liburing.h:448:52: note: expected '__u64' {aka 'long long
unsigned int'} but argument is of type 'AioHandler *'
[  224s]   448 |                                              __u64 user_data)
[  224s]       |                                              ~~~~~~^~~~~~~~~
[  224s] cc1: all warnings being treated as errors

This appears to be caused by a pretty obvious API change in upstream
liburing-2.2:

commit d84c29b19ed0b130000619cff40141bb1fc3615b
Author: Jens Axboe <axboe-at-kernel.dk>
Date:   Sat Dec 4 15:55:31 2021 -0700

    Don't truncate addr fields to 32-bit on 32-bit
...
 static inline void io_uring_prep_poll_remove(struct io_uring_sqe *sqe,
-                                            void *user_data)
+                                            __u64 user_data)

It's dealt with in upstream QEMU (v7.0.0 and later) via:

commit 8a947c7a586e16a048894e1a0a73d154435e90ef
Author: Haiyue Wang <haiyue.wang-at-intel.com>
Date:   Tue Feb 22 00:24:01 2022 +0800

    aio-posix: fix build failure io_uring 2.2
...
-

summary: liburing 2.2 update breaks qemu build


--1657286364.c0BbC022.31019
Date: Fri, 8 Jul 2022 13:19:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201336

            Bug ID: 1201336
           Summary: withlock fails on non-existing /usr/bin/env python
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

withlock is tool used for a lot by openSUSE infra, however, it seems that the
withlock-0.4-bp154.1.19  in Leap 15.4 does not use the python3, and expects
python/python2 instead.

We've reduced python2 to the bare minimum in 15.4 as part of
https://code.opensuse.org/leap/features/issue/15

I'll submit simply the current version in Factory which has the python3 patch.


--1657369857.23E3CCb1.4476
Date: Sat, 9 Jul 2022 12:30:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201345

            Bug ID: 1201345
           Summary: AUDIT-WHITELIST: avahi: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Move /etc/dbus-1/system.d/avahi-dbus.conf to
/usr/share/dbus-1/system.d/avahi-dbus.conf

Devel prj: GNOME:Factory
Maintainer: gnome-maintainers


--1657370076.D0CD5AAd1.4939
Date: Sat, 9 Jul 2022 12:34:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201346

            Bug ID: 1201346
           Summary: AUDIT-WHITELIST: cups: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: jsmeix-at-suse.com
          Found By: ---
           Blocker: ---

Move /etc/dbus-1/system.d/cups.conf to /usr/share/dbus-1/system.d/cups.conf


--1657370251.dDbCaAF1.11804
Date: Sat, 9 Jul 2022 12:37:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201347

            Bug ID: 1201347
           Summary: AUDIT-WHITELIST: PackageKit: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Move /etc/dbus-1/system.d/org.freedesktop.PackageKit.conf to
/usr/share/dbus-1/system.d/org.freedesktop.PackageKit.conf


--1657446655.cD2C0.19432
Date: Sun, 10 Jul 2022 09:50:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201350

            Bug ID: 1201350
           Summary: file: filename garbled in the output when the filename contains multi-byte characters
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: d_werner-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

During analysis of bug 1201122 it turned out the cause is that "file" from
file-5.42-1.1.x86_64
outputs garbled file name when it contains multi-byte characters.
Observed with snapshot 20220702 up to current 20220708.

/usr/bin/file test?????????.jpg
test\342\202\254\342\202\254\342: JPEG image data, JFIF standard 1.01,
resolution (DPI), density 72x72, segment length 16, baseline, precision 8,
600x800, components 3

According to the output of "file --help" file should prepend the filename of
the file it was called on except when the arguments
  -b, --brief                do not prepend filenames to output lines
are used.
Instead it produces garbled and truncated output.

rpm -qf /usr/bin/file
file-5.42-1.1.x86_64


--1657568488.6E20DBf1.951
Date: Mon, 11 Jul 2022 19:41:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201385

            Bug ID: 1201385
           Summary: AUDIT-0: [package-name]: review of permissions-file-setuid-bit: /usr/sbin/postlog (02755)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: chris-at-computersalat.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

postfix >= 3.7 introduces a new setuid-bit binary

[   57s] postfix.x86_64: E: permissions-file-setuid-bit (Badness: 10000)
/usr/sbin/postlog is packaged with setuid/setgid bits (02755)

https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES

Major changes - logging
-----------------------

[Feature 20210815] To make the maillog_file feature more useful,
the postlog(1) command is now set-gid postdrop, so that unprivileged
programs can use it to write logging through the postlogd(8) daemon.
This required hardening the postlog(1) command against privilege
escalation attacks. DO NOT turn on the set-gid bit with older
postlog(1) implementations.

Please review


--1657582707.0Ab4C80.15049
Date: Mon, 11 Jul 2022 23:38:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201387

            Bug ID: 1201387
           Summary: touch: cannot touch '/run/regenerate-initrd//usr/lib/modules/5.18.9-2-defa ult/vmlinuz-5.18.9-2-default': No such file or directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

this error happened when dracut was finalising settings etc...

however, this doesn't seem to cause any problems


body:
--1657730634.D827dB0.25651
Date: Wed, 13 Jul 2022 16:43:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201474

            Bug ID: 1201474
           Summary: sway is missing dependency on mesa
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running sway requires Mesa drivers but the sway package does not depend on
Mesa.

summary: sway is missing dependency on mesa


--1657743574.D20EdE00.7770
Date: Wed, 13 Jul 2022 20:19:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201483

            Bug ID: 1201483
           Summary: upstream fixes for multipath-tools 0.9.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

* Fix multipath -ll output for foreign nvme

(https://github.com/openSUSE/multipath-tools/commit/2306efa4de4f60e9ffca3bdfe59bd4c6aa59d435)

* fix find_multipaths_timeout for "unkown" arrays

(https://github.com/openSUSE/multipath-tools/commit/8efb4f93f295406b865e0b36bdc414877a52062c)


--1657800170.7dcD020.6599
Date: Thu, 14 Jul 2022 12:02:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201510

            Bug ID: 1201510
           Summary: libvirt must make use of nftables instead of iptables (if not already) and also reflect this in BuildRequires
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: trenn-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We want to drop iptables support for the future in favor of nftables.
firewalld already seem to make use of nftables and this has been fixed in
dependencies:
Thu Mar  3 14:26:57 UTC 2022 - Thorsten Kukuk <kukuk-at-suse.com>
- Cleanup dependencies:
  - ipset, ebtables and iptables are purely optional and deprecated,
    so don't require them

zypper search --requires iptables
shows these libvirt related pacakges:
i | libvirt-daemon-driver-network  | Network driver plugin for the
i | libvirt-daemon-driver-nwfilter | A nwfilter driver plugin for

Can the dependencies (possibly also BuildRequires:) be fixes to not make use of
iptables, please.


--1657922296.BAdaD81.1314
Date: Fri, 15 Jul 2022 21:58:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201558

            Bug ID: 1201558
           Summary: iio-sensor-proxy: Update adds polkit-user-privilege file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: badshah400-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Update to iio-sensor-proxy version 3.4 adds a polkit-user-privilege file, and
rpmlint now complains about:

> [   10s] iio-sensor-proxy.x86_64: E: polkit-user-privilege (Badness: 10) net.hadess.SensorProxy.claim-sensor (no:no:yes)
> [   10s] The package allows unprivileged users to carry out privileged operations
> [   10s] without root authentication. This could cause security problems if not done
> [   10s] carefully. If the package is intended for inclusion in any SUSE product please
> [   10s] open a bug report to request review of the package by the security team.

The updated package may be accessed for review at my home branch:
https://build.opensuse.org/package/show/home:badshah400:branches:hardware/iio-sensor-proxy
Upstream here:
https://gitlab.freedesktop.org/hadess/iio-sensor-proxy

I would be grateful for a security review of this, so that I can submit this to
update to Factory. Please let me know if I can help with any additional info.


--1658130282.23A30.20210
Date: Mon, 18 Jul 2022 07:44:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201579

            Bug ID: 1201579
           Summary: doxygen varies output from readdir order
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: pgajdos-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1041090
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I saw, doxygen picked up
non-determinism from filesystem readdir order and therefore produces variations
in build output

https://rb.zq1.de/compare.factory-20220704/diffs/libzypp-compare.out
https://rb.zq1.de/compare.factory-20220704/diffs/pipewire-compare.out

maybe also
https://rb.zq1.de/compare.factory-20220704/diffs/gnuradio-compare.out
https://rb.zq1.de/compare.factory-20220704/diffs/ldas-tools-framecpp-compare.out
https://rb.zq1.de/compare.factory-20220704/diffs/tesseract-ocr-compare.out
https://rb.zq1.de/compare.factory-20220704/diffs/trilinos-compare.out

At some point, there were also influences from ASLR, but these might have been
solved earlier.

The easiest way to reproduce is to use my 'rbk' tool from
https://github.com/bmwiedemann/reproducibleopensuse/
on a osc checkout

Alternatively, use osc build on two different ext4 filesystems in
OSC_BUILD_ROOT=
or use disorderfs to ensure random readdir order.


--1658131704.a3cb25A713.30185
Date: Mon, 18 Jul 2022 08:08:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201581

            Bug ID: 1201581
           Summary: VUL-0: CVE-2022-35409: mbedtls: Buffer overread in DTLS ClientHello parsing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/337399/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mpluskal-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-35409

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some
configurations, an unauthenticated attacker can send an invalid ClientHello
message to a DTLS server that causes a heap-based buffer over-read of up to 255
bytes. This can cause a server crash or possibly information disclosure based
on
error responses. Affected configurations have
MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on
the
configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to
571 bytes with a custom cookie check function.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35409
https://github.com/Mbed-TLS/mbedtls/releases
https://mbed-tls.readthedocs.io/en/latest/security-advisories/advisories/mbedtls-security-advisory-2022-07.html


--1658132182.b4e7281.32335
Date: Mon, 18 Jul 2022 08:16:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201582

            Bug ID: 1201582
           Summary: VUL-0: CVE-2022-35861: pyenv: Relative path traversal due to using version string in path
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/337488/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: thomas.schraitle-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-35861

pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a
.python-version file in the current working directory. An attacker can craft a
Python version string in .python-version to execute shims under their control.
(Shims are executables that pass a command along to a specific version of
pyenv.
The version string is used to construct the path to the command, and there is
no
validation of whether the version specified is a valid version. Thus, relative
path traversal can occur.)

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35861
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35861
https://github.com/pyenv/pyenv/commit/22fa683571d98b59ea16e5fe48ac411c67939653


body:
--1658182674.55F0fb1e0.16303
Date: Mon, 18 Jul 2022 22:17:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201615

            Bug ID: 1201615
           Summary: pcapdump does not work after installing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jmader2-at-gmu.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# zypper in pcapdump
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 2 NEW packages are going to be installed:
  pcapdump perl-Net-Pcap

# pcapdump
Can't locate Data/Hexdumper.pm in @INC (you may need to install the
Data::Hexdumper module) (@INC contains:
/usr/lib/perl5/site_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/site_perl/5.26.1
/usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.26.1
/usr/lib/perl5/5.26.1/x86_64-linux-thread-multi /usr/lib/perl5/5.26.1
/usr/lib/perl5/site_perl) at /usr/bin/pcapdump line 3.
BEGIN failed--compilation aborted at /usr/bin/pcapdump line 3.

summary: pcapdump does not work after installing


body:
--1658216742.cBEe0.13931
Date: Tue, 19 Jul 2022 07:45:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201627

            Bug ID: 1201627
           Summary: openssl-1_0_0 FTBFS 2023-05-26
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: jsikes-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: pmonrealgonzalez-at-suse.com
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our openssl-1_0_0 package fails build after 2023-05-26

To Reproduce:
osc co openSUSE:Factory/openssl-1_0_0 && cd $_
osc build --vm-type=kvm --noservice --clean \
  --build-opt=--vm-custom-opt="-rtc base=2023-05-26T18:00:00" standard

It is probably possible to re-use the solution from bug 1185637

summary: openssl-1_0_0 FTBFS 2023-05-26


--1658303641.Ae1281.9921
Date: Wed, 20 Jul 2022 07:54:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201679

            Bug ID: 1201679
           Summary: VUL-0: chromium: multiple security issues fixed in 103.0.5060.134
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

This update includes 11 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$16000][1336266] High CVE-2022-2477 : Use after free in Guest View. Reported
by anonymous on 2022-06-14

[$7500][1335861] High CVE-2022-2478 : Use after free in PDF. Reported by
triplepwns on 2022-06-13

[$3000][1329987] High CVE-2022-2479 : Insufficient validation of untrusted
input in File. Reported by anonymous on 2022-05-28

[$NA][1339844] High CVE-2022-2480 : Use after free in Service Worker API.
Reported by Sergei Glazunov of Google Project Zero on 2022-06-27

[$TBD][1341603] High CVE-2022-2481: Use after free in Views. Reported by
YoungJoo Lee(@ashuu_lee) of CompSecLab at Seoul National University on
2022-07-04

[$7000][1308341] Low CVE-2022-2163: Use after free in Cast UI and Toolbar.
Reported by Chaoyuan Peng (@ret2happy) on 2022-03-21

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.As usual, our ongoing internal security work was responsible for a wide
range of fixes:

[1345513] Various fixes from internal audits, fuzzing and other initiatives


--1658327189.5Cb50.28117
Date: Wed, 20 Jul 2022 14:26:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201720

            Bug ID: 1201720
           Summary: VUL-0: CVE-2022-21571,CVE-2022-21554: Vulnerability in the Oracle VM VirtualBox (component: Core) affecting version prior to 6.1.36
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/337709/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: Larry.Finger-at-gmail.com
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Vulnerabilities in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.36.
Easily exploitable vulnerability allows high privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products (scope change). Successful attacks of
this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1
Base
Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21571
https://www.oracle.com/security-alerts/cpujul2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21571https://www.oracle.com/security-alerts/cpujul2022.html


--1658428966.85b0f560.30619
Date: Thu, 21 Jul 2022 18:42:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201766

            Bug ID: 1201766
           Summary: udev fails to load kvm modules automatically
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: georg.pfuetzenreuter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

it seems udev fails to load the kvm_amd module during boot since my latest
upgrade of Tumbleweed which came with an update to udev-251.2-1.1.x86_64:

```
georg@dreamland ~> sudo modinfo kvm_amd | grep alias
alias:         cpu:type:x86,ven*fam*mod*:feature:*00C2*

georg@dreamland ~> cat /sys/devices/system/cpu/modalias|grep 00C2
cpu:type:x86,ven0002fam0019mod0050:feature:,0000,0001,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C
,0020,0021,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0036,0037,0038,0039,003A,003B,003D,0064,0068,006E,0070,0072,0074,00
75,0078,0079,007A,007C,007D,0080,0081,0083,0089,008C,008D,0093,0094,0096,0097,0099,009A,009B,009C,009D,009E,00C0,00C1,00C2,00C3,00C4,00C5,00C6,00C7,00C8,00C9,
00CA,00CC,00CD,00D1,00D6,00D7,00D8,00DA,00DC,00DD,00DE,00E2,00E4,00E6,00E8,00ED,00F0,00F1,00F2,00F3,00F5,00F6,00F9,00FA,00FB,00FC,010F,0120,0123,0125,0127,012
8,0129,012A,012C,012F,0132,0133,0134,0137,0138,013D,0140,0141,0142,0143,0160,0161,0162,0163,0165,016C,01A0,01A1,01A2,01A4,01A6,01A9,01AA,01AC,01AD,01AE,01AF,0
1B1,01B2,01B3,01B4,01B8,01BB,01BC,01BD,01C2,01E0,01E1,01E2,01E3,01E4,01E5,01E6,01E7,01EA,01EB,01EC,01ED,01EF,01F0,01F1,01F3,01F4,01FC,0202,0203,0204,0207,0209
,020A,0216,0220,0221,0223,0224,0225,0244,0262,026B,026C,026D,026E,0270

georg@dreamland ~> journalctl | grep truncated |grep 00C2
Jul 21 19:30:23 dreamland systemd-udevd[861]: cpu9:
/usr/lib/udev/rules.d/80-drivers.rules:5 The command 'kmod load
'cpu:type:x86,ven0002fam0019mod0050:featur
e:,0000,0001,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C,0020,0021,0022,0023,0024,0025,0026,0027,
0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0036,0037,0038,0039,003A,003B,003D,0064,0068,006E,0070,0072,0074,0075,0078,0079,007A,007C,007D,0080,0081,008
3,0089,008C,008D,0093,0094,0096,0097,0099,009A,009B,009C,009D,009E,00C0,00C1,00C2,00C3,00C4,00C5,00C6,00C7,00C8,00C9,00CA,00CC,00CD,00D1,00D6,00D7,00D8,00DA,0
0DC,00DD,00DE,00E2,00E4,00E6,00E8,00ED,00F0,00F1,00F2,00F3,00F5,00F6,00F9,00FA,00FB,00FC,010F,0120,0123,0125,0127,0128,0129,012A,012C,012F,0132,0133,0134,0137
,0138,013D,0140,0141,0142,0143,0160,0161,0162,0163,0165,016C,01A0,01A1,01A2,01A4,01A6,01A9,01AA,01AC,01AD,01AE,01AF,01B1,01B2,01B3,01B4,01B8,01BB,01BC,01BD,01
C2,01E0,01E1,01E2,01E3,01E4,01E5,01E6,01E7,01EA,01EB,01EC,01ED,01EF,01F0,01F1,01F3,01F4,01FC,0202,0203,0204,0207,0209,020A,0216,0220,0221,0223,0224,0225,0244,
0262,026B,026C,026D,026' is truncated while substituting into 'kmod load
'$env{MODALIAS}'', refusing to invoke the command
```

Loading the module manually using `modprobe kvm && modprobe kvm_amd` resolves
the qemu errors I received about the lacking kernel module.

There is an existing upstream issue on this:
https://github.com/systemd/systemd/issues/23607

And someone already submitted a patch for it:
https://github.com/systemd/systemd/commit/c3613ee51e3aff61dfea22501c48d19c20cb7b71

Whilst I assume it will be pulled into the openSUSE fork of systemd soon and
released to factory with a coming update anyways, I still wanted to track this
issue here to ensure it does not get overlooked.

Best,
Georg


--1658443171.eF2F85.19685
Date: Thu, 21 Jul 2022 22:39:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201770

            Bug ID: 1201770
           Summary: VUL-0: CVE-2014-9862: libostree: bundled bsdiff Improper checking of input allows arbitrary write on heap
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gnome-bugs-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

see bug 990660 / CVE-2014-9862
libostree has a bundled version of bsdiff
from https://github.com/ostreedev/ostree/releases/tag/v2022.1

> The git submodule for bsdiff has been updated to latest upstream revision,
> picking up additional bound-checks and fixing CVE-2014-9862.

https://github.com/ostreedev/ostree/commit/97399c166dbf402c7948a96d770ce55dcdfa8853


--1658473301.BcFB331.10823
Date: Fri, 22 Jul 2022 07:01:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201772

            Bug ID: 1201772
           Summary: LXQt Configuration Center-> keyboard and mouse module not function
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LXQt
          Assignee: mvetter-at-suse.com
          Reporter: viking018-mailbox-at-yahoo.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Upon click on above mention option from menu "Preferences->LXQt
Settings->Keyboard and Mouse" there is not widow pop-up or error message.


--1658571110.2D0f5.20318
Date: Sat, 23 Jul 2022 10:11:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201800

            Bug ID: 1201800
           Summary: VUL-1: libostree:  ed25519: Invalid out of bound reads
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gnome-bugs-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

It was discovered that in ostree before 2022.5 the ed25519 signature
verification code did not check that the signature is the correct length. As a
result, if the signature is too short, libsodium would end up reading a few
bytes out of bounds. Theoretically, this could cause an bad signature to be
accepted. However, for this to happen, the out-of-bounds data would need to
form a valid signature when combined with the actual data, which means that the
file must have actually been signed. A more likely possibility is that
libsodium winds up reading into an adjacent unmapped page and crashes.

The second was that if there are N keys in the keyring, M revoked keys, and O
signatures, libostree will consume O(N * M * O) (cubic) time checking for key
revocation. This can be reduced to O(N * O + M log M + N) time or better by
using an associative array to filter out revoked keys and by moving the
revocation check out of the for-each-signature loop.

References:
https://github.com/ostreedev/ostree/security/advisories/GHSA-gqf4-p3gv-g8vw
https://github.com/ostreedev/ostree/commit/83e6357186be11fb8f2a6b66fab3730c44ee59dd


body:
--1658580881.cEF53db00.27959
Date: Sat, 23 Jul 2022 12:54:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201803

            Bug ID: 1201803
           Summary: Building the grep tool for PCRE2 usage
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: Markus.Elfring-at-web.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The dependencies for the software package ???grep 3.7-4.1??? contain the
information ???Requires: libpcre.so.1()(64bit)???.
How are the chances to support the API ???PCRE2??? (with library versions ??? 10.40)?
https://github.com/PCRE2Project/pcre2

https://build.opensuse.org/package/view_file/openSUSE:Factory/grep/grep.spec?expand=1

summary: Building the grep tool for PCRE2 usage


--1658733956.6A81fb1.20614
Date: Mon, 25 Jul 2022 07:25:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201822

            Bug ID: 1201822
           Summary: VUL-0: CVE-2022-34037: caddy: oob read allows for DoS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/338088/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: alexandre.vicenzi-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2110269

An out-of-bounds read in the rewrite function at
/modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause
a Denial of Service (DoS) via a crafted URI.

https://github.com/caddyserver/caddy/issues/4775

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2110269
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-34037
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34037
https://github.com/caddyserver/caddy/issues/4775


--1658752406.0A7c50.1133
Date: Mon, 25 Jul 2022 12:33:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201836

            Bug ID: 1201836
           Summary: [Build 20220722] openQA test fails in docker: firewalld dropped ipv4 support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2480220/modules/dock
                    er/steps/41
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Network
          Assignee: meissner-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rfrohl-at-suse.com, trenn-at-suse.com
          Found By: openQA
           Blocker: Yes

After the firewalld submission https://build.opensuse.org/request/show/989313,
docker fails to start because of firewalld errors:

Jul 25 08:28:32 susetest firewalld[6456]: WARNING: COMMAND_FAILED: INVALID_IPV:
'ipv4' is not a valid backend or is unavailable
Jul 25 08:28:32 susetest firewalld[6456]: WARNING: COMMAND_FAILED: INVALID_IPV:
'ipv4' is not a valid backend or is unavailable
Jul 25 08:28:32 susetest firewalld[6456]: WARNING: COMMAND_FAILED: INVALID_IPV:
'ipv4' is not a valid backend or is unavailable
Jul 25 08:28:32 susetest firewalld[6456]: WARNING: COMMAND_FAILED: INVALID_IPV:
'ipv4' is not a valid backend or is unavailable

Reverting firewalld fixes the issue.

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-containers_host_docker@64bit fails in
[docker](https://openqa.opensuse.org/tests/2480220/modules/docker/steps/41)

## Test suite description
Maintainer: dheidler. Extra tests about CLI software in container module

## Reproducible

Fails since (at least) Build
[20220721](https://openqa.opensuse.org/tests/2477865)

## Expected result

Last good: [20220719](https://openqa.opensuse.org/tests/2475508) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=containers_host_docker&version=Tumbleweed)


body:
--1658767026.bCdd0.18073
Date: Mon, 25 Jul 2022 16:37:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201848

            Bug ID: 1201848
           Summary: libstdc++6-pp-gcc12 missing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: rguenther-at-suse.com
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
                CC: matz-at-suse.com
          Found By: ---
           Blocker: ---

There's no prettyprinting for programs built under the current gcc12-based
Tumbleweed environment.

summary: libstdc++6-pp-gcc12 missing


--1658770693.1Dd720.24024
Date: Mon, 25 Jul 2022 17:38:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201852

            Bug ID: 1201852
           Summary: mail(1) is missing any reasonable documentation
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: werner-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I run I get just the stupid blurb from FSF about breaking the standard
Unix documentation:

stitny~$ man mail
MAIL(1)                          User Commands                         MAIL(1)

NAME
       mail - manual page for mail (GNU Mailutils)

SYNOPSIS
       mail [OPTION...] [address...]

DESCRIPTION
       GNU mail


--1658820896.4Db6f1.5087
Date: Tue, 26 Jul 2022 07:34:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1201862

            Bug ID: 1201862
           Summary: VUL-0: CVE-2022-34749: python-mistune: High amount of backtracking in regex
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/338164/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using
regular expressions that can involve a high amount of backtracking on certain
edge cases. This behavior is commonly named catastrophic backtracking.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-34749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34749
https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2
https://github.com/lepture/mistune/releases


--1659094375.b83b0.5844
Date: Fri, 29 Jul 2022 11:32:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201982

            Bug ID: 1201982
           Summary: pam_systemd(login:session): Failed to release session: Interrupted system call
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/2486904/modules/jour
                    nal_check/steps/10
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-AArch64-arm-jeos@aarch32-HD24G fails in
[journal_check](https://openqa.opensuse.org/tests/2486904/modules/journal_check/steps/10)

The error is:
localhost.localdomain login[1246]: pam_systemd(login:session): Failed to
release session: Interrupted system call

## Test suite description
Maintainer: fvogt, mnowak

Start JeOS from the HDD image, configure it using the firstboot wizard and then
run basic tests. console=tty0 added as needed for aarch64.

## Reproducible

Fails since (at least) Build
[20220712](https://openqa.opensuse.org/tests/2466933)

## Expected result

Last good: [20220711](https://openqa.opensuse.org/tests/2464944) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=arm&distri=opensuse&flavor=JeOS-for-AArch64&machine=aarch32-HD24G&test=jeos&version=Tumbleweed)


body:
--1659138973.E55EE0.29197
Date: Fri, 29 Jul 2022 23:56:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201993

            Bug ID: 1201993
           Summary: cryfs is years out of date
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: Lance@TheHaverkamps.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package cryfs that shipped with 15.4 was woefully out of date. The version
that replaced the 9.9 version that Leap is using was replaced back in January
of 2019. In other words, when 15.4 finalized, version 9.9 had been replaced 3
years earlier. Our version is incompatible with any version since late 2019.

Can we please get a backport, at least new enough to be compatible with other
operating systems?  That would be anything 10.0 or higher.

Thanks,
Lance

summary: cryfs is years out of date


body:
--1659169604.fC4b53A0.22254
Date: Sat, 30 Jul 2022 08:26:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1201994

            Bug ID: 1201994
           Summary: Xen DomU unable to emulate audio device
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xen
          Assignee: xen-bugs-at-suse.de
          Reporter: erwin.pacua-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On OpenSUSE 15.3, the xl toolstack is able to emulate an audio device on a domU
using the parameter:

soundhw="ac97"

and I can use the audio device no prob.

Since I've reinstalled to 15.4, that parameter is now deprecated and is now
replaced by "device=..." as per log file

[root@pc1:/var/log/xen]# cat qemu-dm-winxp.log
qemu-system-i386: warning: '-soundhw ac97' is deprecated, please use '-device
AC97' instead
audio: warning: Using timer based audio emulation

So I went ahead and tried the new parameter to no effect.

Why is it that the man page for xl.cfg still mentions soundhw= if that is no
longer supported?

So I tried different combinations of:
audiodev = "pa,id=snd0"
device = "AC97" # ...and ac97. I also tried device=["ac97"]
audio = "ac97"

I also tried vsnd and followed the exact sample as per xl.cfg man page.
vsnd = [
['CARD, short-name=Main, sample-formats=s16_le;s8;u32_be',
'PCM, name=Main',
'STREAM, id=0, type=p',
]
]

but the id=0 failed big time saying it is not valid. wtf???

summary: Xen DomU unable to emulate audio device


--1659420856.Cf7a0.23138
Date: Tue, 2 Aug 2022 06:14:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202043

            Bug ID: 1202043
           Summary: firewalld can no more use ipsets with iptables
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: arvidjaar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
                CC: trenn-at-suse.com
          Found By: ---
           Blocker: ---

Firewalld checks availability of various tools at build time. After this:

* Thu Jul 14 2022 Thomas Renninger <trenn-at-suse.de>
- Also remove ipset, ebtables and iptables from the BuildRequires
  list (compare with change from 2022-03-03 - Thorsten Kukuk <kukuk-at-suse.com>)

firewalld cannot use these tools

COMMANDS = {
    "ipv4":         "/sbin/iptables",
    "ipv4-restore": "/sbin/iptables-restore",
    "ipv6":         "/sbin/ip6tables",
    "ipv6-restore": "/sbin/ip6tables-restore",
    "eb":           "/bin/false",
    "eb-restore":   "/bin/false",
    "ipset":        "/bin/false",
    "modprobe":     "/sbin/modprobe",
    "rmmod":        "/sbin/rmmod",
}

iptables happen to works because they are still in BuildRequies, even though
changelog entry claims to remove them.

If the goal is to completely disable even possibility to use iptables, this
should at least be consistent and certainly better communicated. Otherwise
either these BuildRequires are needed, or firewalld has to be built with
explicit --with-iptables etc providing full path to respective tools.


--1659445466.5DaAE1.4563
Date: Tue, 2 Aug 2022 13:04:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202059

            Bug ID: 1202059
           Summary: AUDIT-0: ruby3.1-rubygem-d-installer: review of D-Bus services org.opensuse.DInstaller (and friends)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: igonzalezsosa-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Hi all,

As you might know, we are working on a YaST and web-based experimental
installer (https://github.com/yast/d-installer). It uses a set of D-Bus
services:

* org.opensuse.DInstaller
* org.opensuse.DInstaller.Language
* org.opensuse.DInstaller.Software
* org.opensuse.DInstaller.Users

Most probably we are going to add more services in the near future. We have
defined them in a D-Bus configuration file:
https://github.com/yast/d-installer/blob/master/service/share/dbus.conf (is
installed as /etc/dbus-1/system.d/org.opensuse.DInstaller.conf).

While trying to submit D-installer to factory, we found out that we need some
validation from the security point of view (see
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:adi:19/rubygem-d-installer/standard/x86_64).

So my first question is, should we have one D-Bus configuration file per
service? If that's the case, I will split services and D-Bus configuration
files.

Any other comment?

Thanks in advance!

Regards,
Imo


body:
--1659456687.BdC7205.30239
Date: Tue, 2 Aug 2022 16:11:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202070

            Bug ID: 1202070
           Summary: nautilus (gvfsd) fails to open admin:/// URL due to missing pkexec
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: arvidjaar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
                CC: meissner-at-suse.com, os.gnome.maintainers-at-gmail.com
          Found By: ---
           Blocker: ---

Instead of opening super-user browser "nautilus admin:///" fails with

Oops! Something went wrong.
Don't have permission to access the requested location.

The reason is missing pkexec:

1986  execve("/bin/sh", ["/bin/sh", "-c", "pkexec /usr/libexec/gvfs/gvfsd-admin
\"$@\" --address $DBUS_SESSION_BUS_ADDRESS --dir $XDG_RUNTIME_DIR",
"gvfsd-admin", "--spawner", ":1.12", "/org/gtk/gvfs/exec_spaw/3"],
0x7ffe1fec9ea8 /* 69 vars */ <unfinished ...>
...
1986  write(2, "gvfsd-admin: line 1: pkexec: command not found\n", 47) = 47

because of

* Mon Jul 18 2022 Marcus Meissner <meissner-at-suse.com>
- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).

Probably gvfs-backends (which includes admin backend) should have hard
requirement on pkexec. Besides, I would really hope packagers started to use
split-aliases when factoring out commands into separate packages
(https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Splitting_a_package_into_two):

pkexec
Provides: polkit:/usr/bin/pkexec

pkgs: gvfs polkit


--1659478722.Afb21.755
Date: Tue, 2 Aug 2022 22:18:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202075

            Bug ID: 1202075
           Summary: VUL-0: chromium: multiple security issues fixed in 104.0.5112.79
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html

Chromium 104.0.5112.79

CVE-2022-2604: Use after free in Safe Browsing
CVE-2022-2605: Out of bounds read in Dawn
CVE-2022-2606: Use after free in Managed devices API
CVE-2022-2607: Use after free in Tab Strip
CVE-2022-2608: Use after free in Overview Mode
CVE-2022-2609: Use after free in Nearby Share
CVE-2022-2610: Insufficient policy enforcement in Background Fetch
CVE-2022-2611: Inappropriate implementation in Fullscreen API
CVE-2022-2612: Side-channel information leakage in Keyboard input
CVE-2022-2613: Use after free in Input
CVE-2022-2614: Use after free in Sign-In Flow
CVE-2022-2615: Insufficient policy enforcement in Cookies
CVE-2022-2616: Inappropriate implementation in Extensions API
CVE-2022-2617: Use after free in Extensions API
CVE-2022-2618: Insufficient validation of untrusted input in Internals
CVE-2022-2619: Insufficient validation of untrusted input in Settings
CVE-2022-2620: Use after free in WebUI
CVE-2022-2621: Use after free in Extensions
CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
CVE-2022-2623: Use after free in Offline
CVE-2022-2624: Heap buffer overflow in PDF


--1659548658.DAbe0.14566
Date: Wed, 3 Aug 2022 17:44:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202118

            Bug ID: 1202118
           Summary: Add Requires: libsoftokn3 to MozillaFirefox.spec
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: factory-mozilla-at-lists.opensuse.org
          Reporter: michael-at-stroeder.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If package libsoftokn3 is not installed Firefox crashes. So it seems this
package is required to be installed.


--1659568276.4ac40.18273
Date: Wed, 3 Aug 2022 23:11:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202125

            Bug ID: 1202125
           Summary: Unable to change display brightness thought brightness keys or applet slider.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: info.djvar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello there.
After installing openSUSE Tumbleweed on my partner's laptop (Lenovo IdeaPad
Flex 15D with an AMD A6 APU (with ATI Radeon HD 8400 graphics processor)), I
noticed that the display brightness is so low and I can't change it at all, not
through the brightness keys on the keyboard, nor through the display brightness
slider in the power management applet. I am on XFCE4 and with the latest kernel
5.18.12-1-default. The curious thing is that I noticed this exact same
behaviour (brightness stuck at previous state) on my own Lenovo ThinkPad as
well. But rolling back BTRFS snapshot to previous kernel version
(5.18.11-1-default) fixed the issue and brightness keys and brightness slider
were working as expected again, so I now know that this is a kernel bug of
5.18.12-1-default. Now, I  managed to downgrade the kernel on the Lenovo
IdeaPad Flex 15D by downloading it from an archive of recent Tumbleweed
snapshots, but the problem was still there, nothing changed at all, so I
thought I potentially missed on some other packages needed to solve the issue,
that don't come bundled with the kernel (like some additional firmware or other
similar stuff), but downgrading kernel version to the previous one on my Lenovo
ThinkPad definitely solves this issue, as I said before, after the upgrade even
the ThinkPad started behaving the same way, but downgrading to a previous
snapshot helped.

I am more than happy to give you logs or additional troubleshooting information
that you might need. I just hope that you can help me get rid of this annoyance
for my partner.

I thank you all very much for your attention


--1659612426.bd0Be6F0.1365
Date: Thu, 4 Aug 2022 11:27:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202137

            Bug ID: 1202137
           Summary: Python packlage loader does not find application in standard path
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: All
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently I see if I call urlscan from package urlscan

Traceback (most recent call last):
  File "/usr/bin/urlscan", line 6, in <module>
    from pkg_resources import load_entry_point
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 3251,
in <module>
    @_call_aside
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 3235,
in _call_aside
    f(*args, **kwargs)
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 3264,
in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 583,
in _build_master
    ws.require(__requires__)
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 900,
in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 786,
in resolve
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'urlscan==0.9.9' distribution was not
found and is required by the application

... the same for urlscan 0.9.7 but the file list shows

  /usr/bin/urlscan
  /usr/lib/python3.6/site-packages/urlscan
  /usr/lib/python3.6/site-packages/urlscan/__init__.py
  /usr/lib/python3.6/site-packages/urlscan/__main__.py
  /usr/lib/python3.6/site-packages/urlscan/__pycache__
  /usr/lib/python3.6/site-packages/urlscan/__pycache__/__init__.cpython-36.pyc
  /usr/lib/python3.6/site-packages/urlscan/__pycache__/__main__.cpython-36.pyc
  /usr/lib/python3.6/site-packages/urlscan/__pycache__/urlchoose.cpython-36.pyc
  /usr/lib/python3.6/site-packages/urlscan/__pycache__/urlscan.cpython-36.pyc
  /usr/lib/python3.6/site-packages/urlscan/assets
  /usr/lib/python3.6/site-packages/urlscan/assets/tlds-alpha-by-domain.txt
  /usr/lib/python3.6/site-packages/urlscan/urlchoose.py
  /usr/lib/python3.6/site-packages/urlscan/urlscan.py

why the heck does python3

  ll /usr/bin/python3
  lrwxrwxrwx 1 root root 9 Jul  6 16:30 /usr/bin/python3 -> python3.6

not find the application below /usr/lib/python3.6/site-packages/


--1659627109.e37561.20674
Date: Thu, 4 Aug 2022 15:31:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202147

            Bug ID: 1202147
           Summary: tukit D-Bus API can't parse fields with comma
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: iforster-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Using the Snapshot.List D-Bus API call from the prerelease version of
transactional-update (4.0.0~rc4) reveals that the interface is designed
improperly: The queried fields must not contain any comma, otherwise the
returned string can't be parsed correctly any more.

Example:
busctl call org.opensuse.tukit /org/opensuse/tukit/Snapshot
org.opensuse.tukit.Snapshot List "s" "number,description,default"

would return a list such as

"2334,Hello, this is a test!,no"


--1659685657.c147530.9931
Date: Fri, 5 Aug 2022 07:47:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202161

            Bug ID: 1202161
           Summary: [Build 20220804] dns/libvirt denied messages in log
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2498064/modules/usr_
                    sbin_dnsmasq/steps/63
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

type=AVC msg=audit(1659682891.314:1744): apparmor="DENIED"
operation="file_mmap" profile="dnsmasq//libvirt_leaseshelper"
name="/usr/libexec/libvirt_leaseshelper" pid=9065 comm="libvirt_leasesh"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-apparmor_profile_dnsmasq@64bit fails in
[usr_sbin_dnsmasq](https://openqa.opensuse.org/tests/2498064/modules/usr_sbin_dnsmasq/steps/63)

## Test suite description
Maintainer: llzhao-at-suse.com

## Reproducible

Fails since (at least) Build
[20220804](https://openqa.opensuse.org/tests/2497577)

## Expected result

Last good: [20220803](https://openqa.opensuse.org/tests/2496445) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=apparmor_profile_dnsmasq&version=Tumbleweed)


body:
--1659698314.3bdEf50.8923
Date: Fri, 5 Aug 2022 11:18:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1202169

            Bug ID: 1202169
           Summary: libwebkit2gtk update crash Eclipse
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: one-at-contezero.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After updating these packages from Tumbleweed 20220802

libwebkit2gtk-4_0-37|2.36.5-1.1|x86_64
webkit2gtk-4_0-injected-bundles|2.36.5-1.1|x86_64
libjavascriptcoregtk-4_0-18|2.36.5-1.1|x86_64

Eclipse IDE 2022-06 crashes every time code assist is called and nothing is
showed on the console output.

Reverting to previous version (2.36.4-1.1) of these packages solves the issue.

summary: libwebkit2gtk update crash Eclipse


body:
--1659947232.E3588DD0.23691
Date: Mon, 8 Aug 2022 08:27:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1202208

            Bug ID: 1202208
           Summary: cmake:full fails with glibc 2.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/cmake:full/standard/x86_64

due to:
[  753s] OUTPUTMODULE =
/home/abuild/rpmbuild/BUILD/cmake-3.23.3/Tests/BundleUtilities/testdir1/module1.so
[  753s]

summary: cmake:full fails with glibc 2.36


body:
--1659947598.8b480.25063
Date: Mon, 8 Aug 2022 08:33:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1202212

            Bug ID: 1202212
           Summary: hdparm fails with glibc 2.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/hdparm/standard/x86_64

due to:
[    9s] /usr/include/features.h:194:3: warning: #warning "_BSD_SOURCE and
_SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-Wcpp]
[    9s]   194 | # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use
_DEFAULT_SOURCE"
[    9s]       |   ^~~~~~~
[    9s] In file included from /usr/include/linux/fs.h:19,
[    9s]                  from hdparm.c:28:
[    9s] /usr/include/linux/mount.h:95:6: error: redeclaration of 'enum
fsconfig_command'
[    9s]    95 | enum fsconfig_command {
[    9s]       |      ^~~~~~~~~~~~~~~~

summary: hdparm fails with glibc 2.36


body:
--1659947798.dbD42a10.25396
Date: Mon, 8 Aug 2022 08:36:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1202215

            Bug ID: 1202215
           Summary: llvm14 fails with glibc 2.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/llvm14/standard/x86_64

due to:
[ 2766s] In file included from /usr/include/linux/fs.h:19:
[ 2766s] /usr/include/linux/mount.h:95:6: error: redefinition of
'fsconfig_command'
[ 2766s] enum fsconfig_command {
[ 2766s]      ^
[ 2766s] /usr/include/sys/mount.h:189:6: note: previous definition is here
[ 2766s] enum fsconfig_command
[ 2766s]      ^

which is a known upstream issue:
https://github.com/llvm/llvm-project/issues/56421

and we will need a backport.

summary: llvm14 fails with glibc 2.36


body:
--1659948001.D38D0.27079
Date: Mon, 8 Aug 2022 08:40:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1202221

            Bug ID: 1202221
           Summary: systemd fails with glibc 2.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/systemd/standard/x86_64

due to:
[   58s] In file included from ../src/basic/stat-util.h:13,
[   58s]                  from ../src/basic/chase-symlinks.h:7,
[   58s]                  from ../src/basic/devnum-util.c:6:
[   58s] ../src/basic/missing_stat.h:39:8: error: redefinition of ???struct
statx_timestamp???
[   58s]    39 | struct statx_timestamp {
[   58s]       |        ^~~~~~~~~~~~~~~
[   58s] In file included from /usr/include/bits/statx.h:31,
[   58s]                  from /usr/include/sys/stat.h:465,
[   58s]                  from ../src/basic/devnum-util.c:4:
[   58s] /usr/include/linux/stat.h:56:8: note: originally defined here
[   58s]    56 | struct statx_timestamp {
[   58s]       |        ^~~~~~~~~~~~~~~
[   58s] ../src/basic/missing_stat.h:45:8: error: redefinition of ???struct
statx???
[   58s]    45 | struct statx STATX_DEFINITION;
[   58s]       |        ^~~~~
[   58s] /usr/include/linux/stat.h:99:8: note: originally defined here
[   58s]    99 | struct statx {
[   58s]       |        ^~~~~

summary: systemd fails with glibc 2.36


body:
--1659948055.10c2A850.27073
Date: Mon, 8 Aug 2022 08:40:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1202222

            Bug ID: 1202222
           Summary: xdm fails with glibc 2.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/xdm/standard/x86_64

due to:
[   32s] genauth.c:45:12: fatal error: bsd/stdlib.h: No such file or directory
[   32s]    45 | #  include <bsd/stdlib.h>
[   32s]       |            ^~~~~~~~~~~~~~
[   32s] compilation terminated.
[   32s] make[2]: *** [Makefile:578: genauth.o] Error 1

summary: xdm fails with glibc 2.36