--1637875062.daC0A1.23515
Date: Thu, 25 Nov 2021 21:17:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193092

            Bug ID: 1193092
           Summary: 'Update repository of openSUSE Backports' signing key expires Dec 10
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: maintenance-at-opensuse.org
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# zypper ref
[...]
Retrieving repository 'Update repository of openSUSE Backports' metadata
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------[/]
The gpg key signing file 'repomd.xml' will expire in 14 days.
  Repository:       Update repository of openSUSE Backports
  Key Fingerprint:  637B 32FF 3D83 F07A 7AE1 C40A 9C21 4D40 6517 6565
  Key Name:         openSUSE:Backports OBS Project
<openSUSE:Backports-at-build.opensuse.org>
  Key Algorithm:    RSA 2048
  Key Created:      Wed Oct  2 15:17:53 2019
  Key Expires:      Fri Dec 10 14:17:53 2021 (expires in 14 days)
  Rpm Name:         gpg-pubkey-65176565-5d94a381
[...]

zypper lr says this repo is
http://download.opensuse.org/update/leap/15.3/backports/

Please extend the key - ideally before it expires ;-)


body:
--1637942064.FcC38DD0.27036
Date: Fri, 26 Nov 2021 15:54:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193118

            Bug ID: 1193118
           Summary: munin doesn't work anymore correct.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

2021/11/26-00:30:03 CONNECT TCP Peer: "[::ffff:127.0.0.1]:49514" Local:
"[::ffff:127.0.0.1]:4949"
2021/11/26-00:30:03 [25375] Error output from diskstats:
2021/11/26-00:30:03 [25375]     Error in tempfile() using template
/var/lib/munin/plugin-state/nobody/XXXXXXXXXX: Could not create temp file
/var/lib/munin/plugin-state/nobody/dQcMJJa1jk: Permission denied at
/usr/lib/perl5/vendor_perl/5.34.0/Munin/Plugin.pm line 278.
2021/11/26-00:30:03 [25375] Service 'diskstats' exited with status 13/0.

/var/lib/munin/plugin-state/nobody is owned by munin:munin but munin tries to
write as "nobody".

And the new "hardening" options for "munin-node.service" blocks several plugins
from working. Especially all the ones for Rasperry Pi's. Don't know yet which
of the options is on fault.

summary: munin doesn't work anymore correct.


--1638138248.178f20.1031
Date: Sun, 28 Nov 2021 22:24:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193145

            Bug ID: 1193145
           Summary: X-server Plasma session crashes when changing the orientation of one monitor only in a dual monitor setting.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: stakanov-at-disroot.org
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Two monitor setup.
Monitor one (situated left) is
Messeltronik
MD2066 (DVI-0)
1920x1080

Monitor two:
Lenovo LEN T32h-20
(HDMI-0)
(1920x1200)

Graphiccard:     Device: AMD CEDAR (DRM 2.50.0 / 5.15.3-1-default, LLVM 12.0.1)
(0x68f9)

Change the orientation of the Lenovo. Apply. Plasma crashes and turns to the
sddm login. The session is completely erased, the new session will have the
very same TTY because it will result "free".

Repeatable: always. With only one monitor setting works as expected.
In the journal you find:
nov 28 23:01:47 silversurfer systemd[1]: Stopped Getty on tty1.
nov 28 23:01:47 silversurfer kscreen_backend_launcher[4947]: The X11 connection
broke (error 1). Did the X11 server die?
nov 28 23:01:47 silversurfer systemd[1]: getty@tty1.service: Deactivated
successfully.
nov 28 23:01:47 silversurfer systemd[1]: Stopped RealtimeKit Scheduling Policy
Service.
nov 28 23:01:47 silversurfer systemd[1]: rtkit-daemon.service: Deactivated
successfully.
nov 28 23:01:47 silversurfer cron[2133]: (CRON) INFO (Shutting down)
nov 28 23:01:47 silversurfer ModemManager[1176]: <info>  caught signal,
shutting down...
nov 28 23:01:47 silversurfer systemd[1]: Stopped Machine Check Exception
Logging Daemon.
nov 28 23:01:47 silversurfer Tor[20303]: Interrupt: exiting cleanly.
nov 28 23:01:47 silversurfer systemd[1]: mcelog.service: Deactivated
successfully.
nov 28 23:01:47 silversurfer systemd[1]: Stopped Virtual Machine and Container
Registration Service.
nov 28 23:01:47 silversurfer systemd[1]: systemd-machined.service: Deactivated
successfully.
nov 28 23:01:47 silversurfer systemd[1]: Stopped Self Monitoring and Reporting
Technology (SMART) Daemon.
nov 28 23:01:47 silversurfer systemd[1]: smartd.service: Deactivated
successfully.
nov 28 23:01:47 silversurfer systemd[1]: irqbalance.service: Consumed 1.203s
CPU time.
nov 28 23:01:47 silversurfer systemd[1]: Stopped irqbalance daemon.
nov 28 23:01:47 silversurfer systemd[1]: irqbalance.service: Deactivated
successfully.
nov 28 23:01:46 silversurfer spamd[1977]: spamd: server killed by SIGTERM,
shutting down
nov 28 23:01:46 silversurfer smartd[1075]: smartd is exiting (exit status 0)
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sdf [SAT], state
written to
/var/lib/smartmontools/smartd.WDC_WD20EFRX_68EUZN0-WD_WCC4M2DATKA1.ata.state
nov 28 23:01:46 silversurfer xdg-desktop-portal-kde[5124]: The X11 connection
broke (error 1). Did the X11 server die?
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sde [SAT], state
written to
/var/lib/smartmontools/smartd.WDC_WD40EFRX_68N32N0-WD_WCC7K6KS3SLK.ata.state
nov 28 23:01:46 silversurfer systemd[1]: Stopping Daemon for power
management...
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sdd [SAT], state
written to /var/lib/smartmontools/smartd.ST2000DM001_1ER164-Z4Z2QVSJ.ata.state
nov 28 23:01:46 silversurfer systemd[1]: Stopping Disk Manager...
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sdc [SAT], state
written to
/var/lib/smartmontools/smartd.ADATA_SP900-03205060500500001232.ata.state
nov 28 23:01:46 silversurfer systemd[1]: Stopping Anonymizing overlay network
for TCP...
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sdb [SAT], state
written to
/var/lib/smartmontools/smartd.WDC_WD40EFRX_68N32N0-WD_WCC7K0EK8X22.ata.state
nov 28 23:01:46 silversurfer kglobalaccel5[4742]: The X11 connection broke
(error 1). Did the X11 server die?
nov 28 23:01:46 silversurfer kactivitymanagerd[4863]: The X11 connection broke
(error 1). Did the X11 server die?
nov 28 23:01:46 silversurfer smartd[1075]: Device: /dev/sda [SAT], state
written to
/var/lib/smartmontools/smartd.WDC__WDS250G2B0A_00SM50-192686802401.ata.state
nov 28 23:01:46 silversurfer smartd[1075]: smartd received signal 15:
Terminated
nov 28 23:01:46 silversurfer systemd[1]: Stopped Anonymizing overlay network
for TCP (multi-instance master).
nov 28 23:01:46 silversurfer systemd[1]: tor-master.service: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopping Load/Save Random Seed...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Virtual Machine and Container
Registration Service...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Daemonized version of
spamassassin...
nov 28 23:01:46 silversurfer systemd[1]: Stopping DBus interface for snapper...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Samba SMB Daemon...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Self Monitoring and Reporting
Technology (SMART) Daemon...
nov 28 23:01:46 silversurfer systemd[1]: Stopping RealtimeKit Scheduling Policy
Service...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Machine Check Exception
Logging Daemon...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Initialize hardware
monitoring sensors...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Service that logs KVM kernel
module trace events...
nov 28 23:01:46 silversurfer sddm[2064]: Display server stopping...
nov 28 23:01:46 silversurfer sddm[2064]: Socket server stopped.
nov 28 23:01:46 silversurfer sddm[2064]: Socket server stopping...
nov 28 23:01:46 silversurfer sddm[2064]: Auth: sddm-helper exited with 15
nov 28 23:01:46 silversurfer sddm[2064]: Authentication error: "Process
crashed"
nov 28 23:01:46 silversurfer sddm[2064]: Auth: sddm-helper crashed (exit code
15)
nov 28 23:01:46 silversurfer sddm[2064]: Authentication error: "Process
crashed"
nov 28 23:01:46 silversurfer systemd[1]: Stopped Apply settings from
/etc/sysconfig/keyboard.
nov 28 23:01:46 silversurfer systemd[1]: kbdsettings.service: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopping irqbalance daemon...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Getty on tty2...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Getty on tty1...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Restore /run/initramfs on
shutdown...
nov 28 23:01:46 silversurfer systemd[1]: Stopping X Display Manager...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Make remote CUPS printers
available locally...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Command Scheduler...
nov 28 23:01:46 silversurfer bluetoothd[1053]: Terminating
nov 28 23:01:46 silversurfer systemd[1]: Stopping Clamav antivirus milter
daemon...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Bluetooth service...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Save/Restore Sound Card
State...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Accounts Service...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Modem Manager...
nov 28 23:01:46 silversurfer systemd[1]: Closed Load/Save RF Kill Switch Status
/dev/rfkill Watch.
nov 28 23:01:46 silversurfer systemd[1]: systemd-rfkill.socket: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Closed LVM2 poll daemon socket.
nov 28 23:01:46 silversurfer systemd[1]: lvm2-lvmpolld.socket: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped daily update of the root trust
anchor for DNSSEC.
nov 28 23:01:46 silversurfer systemd[1]: unbound-anchor.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Daily Cleanup of Temporary
Directories.
nov 28 23:01:46 silversurfer systemd[1]: systemd-tmpfiles-clean.timer:
Deactivated successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Timeline of Snapper Snapshots.
nov 28 23:01:46 silversurfer systemd[1]: snapper-timeline.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Daily Cleanup of Snapper
Snapshots.
nov 28 23:01:46 silversurfer systemd[1]: snapper-cleanup.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Reminder for degraded MD
arrays.
nov 28 23:01:46 silversurfer systemd[1]: mdmonitor-oneshot.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped MD array scrubbing.
nov 28 23:01:46 silversurfer systemd[1]: mdcheck_start.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped MD array scrubbing -
continuation.
nov 28 23:01:46 silversurfer systemd[1]: mdcheck_continue.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Daily man-db regeneration.
nov 28 23:01:46 silversurfer systemd[1]: man-db.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Daily rotation of log files.
nov 28 23:01:46 silversurfer systemd[1]: logrotate.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Discard unused blocks once a
week.
nov 28 23:01:46 silversurfer systemd[1]: fstrim.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Check if mainboard battery is
Ok.
nov 28 23:01:46 silversurfer systemd[1]: check-battery.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Scrub btrfs filesystem, verify
block checksums.
nov 28 23:01:46 silversurfer systemd[1]: btrfs-scrub.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Balance block groups on a
btrfs filesystem.
nov 28 23:01:46 silversurfer systemd[1]: btrfs-balance.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Backup of /etc/sysconfig.
nov 28 23:01:46 silversurfer systemd[1]: backup-sysconfig.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped Backup of RPM database.
nov 28 23:01:46 silversurfer systemd[1]: backup-rpmdb.timer: Deactivated
successfully.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Timer Units.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Sound Card.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Login Prompts.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Multi-User System.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Graphical Interface.
nov 28 23:01:46 silversurfer systemd[1]: Stopped target Bluetooth Support.
nov 28 23:01:46 silversurfer systemd[1]: Removed slice Slice /system/modprobe.
nov 28 23:01:46 silversurfer systemd[1]: Stopping Session 6 of User entropy...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Session 4 of User entropy...
nov 28 23:01:46 silversurfer systemd[1]: Stopping Session 2 of User entropy...
nov 28 23:01:46 silversurfer kded5[4737]: bluedevil: About to shut down
nov 28 23:01:46 silversurfer systemd-logind[1151]: System is rebooting.
nov 28 23:01:46 silversurfer org.kde.kwalletd5[32427]: ICE default IO error
handler doing an exit(), pid = 32427, errno = 2
nov 28 23:01:46 silversurfer org.kde.kdeconnect[32433]: ICE default IO error
handler doing an exit(), pid = 32433, errno = 2
nov 28 23:01:46 silversurfer ksmserver[4813]: org.kde.kf5.ksmserver: SmsDie
timeout, client  "/usr/lib64/libexec/kdeconnectd" (
1014a14114415d000163813689700000048130019 )
nov 28 23:01:46 silversurfer ksmserver[4813]: org.kde.kf5.ksmserver: SmsDie
timeout, client  "/usr/bin/kwalletd5" (
1014a14114415d000163813689600000048130018 )
nov 28 23:01:41 silversurfer akonadi_control[4958]: org.kde.pim.akonadicontrol:
Application '/usr/bin/akonadiserver' exited normally...
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f79245a0 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f7996688 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f799c268 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f7964c88 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f78b8228 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f79a1098 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f78b7c40 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kontact[4907]: kf.xmlgui: 0x5608f79f1138 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:38 silversurfer kded5[4737]: Service  ":1.347" unregistered
nov 28 23:01:37 silversurfer kontact[4907]:
FolderCollectionMonitor::~FolderCollectionMonitor()
MailCommon::FolderCollectionMonitor(0x5608f7a35660)
nov 28 23:01:37 silversurfer systemd[2300]: plasma-ksystemstats.service:
Consumed 3min 24.264s CPU time.
nov 28 23:01:37 silversurfer kded5[4737]: Service
"org.kde.StatusNotifierHost-4849" unregistered
nov 28 23:01:37 silversurfer kdeconnectd[32433]: kdeconnect.core: Could not
query capabilities from notifications server
nov 28 23:01:37 silversurfer kwin_x11[4741]: QMetaProperty::read: Unable to
handle unregistered datatype 'KWin::SessionState' for property
'KWin::EffectsHandlerImplX11::sessionState'
nov 28 23:01:37 silversurfer kwin_x11[4741]: QMetaProperty::read: Unable to
handle unregistered datatype 'KWin::SessionState' for property
'KWin::EffectsHandlerImplX11::sessionState'
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer plasmashell[4849]: QObject::disconnect: Unexpected
nullptr parameter
nov 28 23:01:37 silversurfer kontact[4907]: kf.xmlgui: 0x5608f7a6e870 deleted
without having been removed from the factory first. This will leak standalone
popupmenus and could lead to crashes.
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:23:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:22:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:21:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:20:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:69:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:68:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:67:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:66:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:63:
TypeError: Cannot read property 'pluginName' of null
nov 28 23:01:37 silversurfer plasmashell[4849]: trying to show an empty dialog
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:34:
TypeError: Cannot read property 'editMode' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:33:
TypeError: Cannot read property 'editMode' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:20:
TypeError: Cannot read property 'editMode' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:192:
TypeError: Cannot read property 'action' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:198:
TypeError: Cannot read property 'action' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxButton.qml:209:
TypeError: Cannot read property 'globalAction' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42:
TypeError: Cannot read property 'compactRepresentationItem' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42:
TypeError: Cannot read property 'compactRepresentationItem' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42:
TypeError: Cannot read property 'compactRepresentationItem' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42:
TypeError: Cannot read property 'compactRepresentationItem' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42:
TypeError: Cannot read property 'compactRepresentationItem' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:60:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:71:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:26:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:90:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:99:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:98:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.kdeconnect/contents/ui/main.qml:38:
TypeError: Cannot read property 'formFactor' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/global/Globals.qml:162:
TypeError: Cannot read property 'nativeInterface' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/main.qml:141:
TypeError: Cannot read property 'nativeInterface' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:255:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:247:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:241:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:235:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]:
file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:24:
TypeError: Cannot read property 'configuration' of null
nov 28 23:01:37 silversurfer plasmashell[4849]: libkcups: Cancel-Subscription
last error: 0 successful-ok
nov 28 23:01:37 silversurfer plasmashell[4849]: libkcups:
Create-Printer-Subscriptions last error: 0 successful-ok
nov 28 23:01:37 silversurfer plasmashell[4849]: libkcups: Cancel-Subscription
last error: 0 successful-ok

which I beleave is the relevant part.


body:
--1638165538.eb68f50.1791
Date: Mon, 29 Nov 2021 05:58:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193149

            Bug ID: 1193149
           Summary: Base:System/sensors: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: jdelvare-at-suse.com
          Reporter: thighsaspillows-at-gmail.com
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

systemd security hardening efforts cause lm_sensors.service to fail to start

```
$ systemctl status lm_sensors
? lm_sensors.service - Initialize hardware monitoring sensors
     Loaded: loaded (/usr/lib/systemd/system/lm_sensors.service; enabled;
vendor preset: disabled)
     Active: failed (Result: exit-code) since Mon 2021-11-29 09:50:13 IST; 4s
ago
    Process: 2205 ExecStart=/sbin/modprobe -qab $BUS_MODULES $HWMON_MODULES
(code=exited, status=0/SUCCESS)
    Process: 2206 ExecStart=/usr/bin/sensors -s (code=exited, status=1/FAILURE)
   Main PID: 2206 (code=exited, status=1/FAILURE)
        CPU: 69ms
```

Commenting out the following line from lm_sensors.service makes it work again

ProtectKernelTunables=true

summary: Base:System/sensors: Bug


--1638184097.55080.14814
Date: Mon, 29 Nov 2021 11:08:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193172

            Bug ID: 1193172
           Summary: systemd[1]: klog.service: Failed with result 'exit-code'.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i686
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: suseino-at-riseup.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After updating TW (32-bit) from 20211116-1275.1 to 20211126-1296.1 klog.service
fails to start on boot.

Attaching journal excerpt.


--1638189422.5404dFf0.1824
Date: Mon, 29 Nov 2021 12:37:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193177

            Bug ID: 1193177
           Summary: Upgrade of devel:tools/bats to version 1.5.0 breaks builds for Leap and SLE
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: seroton10-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After accepting request 933599 to upgrade bats to version 1.5.0, all builds for
Leap and SLE are broken.

https://build.opensuse.org/package/show/devel:tools/bats

https://build.opensuse.org/request/show/933599


--1638191440.0bE2C256.4248
Date: Mon, 29 Nov 2021 13:10:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193179

            Bug ID: 1193179
           Summary: L3: Installing python3.9 in SLE image pulls in Python3.6 packages [ref:_00D1igLOd._5001iltVIZ:ref]
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: SLES 15
            Status: NEW
          Keywords: DSLA_REQUIRED
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: mcepl-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: andreas.taschner-at-suse.com, brent.griggs-at-suse.com,
                    bugzilla-notif-sf-at-suse.com, dleuenberger-at-suse.com,
                    mcepl-at-suse.com, nicola.dimarzo-at-suse.com,
                    tabraham-at-suse.com
        Depends on: 1192249
          Found By: Novell Technical Services
 Services Priority: 1000
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1192249 +++

If one installs Python3.9 in a SLE 15 SP3 image from us, then the dependencies
will bring in _both_ python 3.9 _and_ python3.6.

According to the customer this looks like some kind of dependency issue towards
/usr/bin/python that [in their opinion] looks wrong.
The fact that 3.6 is the 'system default' python is no excuse since nothing
else in the SLE images requires python ..

Easily reproduced like this :
- Run a SLES 15 SP3 image from registry.suse.com
- (optional) remove the apparently no-good container-suseconnect tool that
delays all zypper operations
- Add Basesystem repos from your favourite mirror
- zypper install python39

Example from my lab :
dilirium:~ # docker run -it registry.suse.com/suse/sle15:15.3.17.8.25 bash
d6f695acdf2f:/ # zypper rm -y container-suseconnect
[...]
d6f695acdf2f:/ # zypper ar -f
http://172.30.44.1/repo/SUSE/Products/SLE-Module-Basesystem/15-SP3/x86_64/product/
SLE-Module-Basesystem15-SP3-Pool
[...]
d6f695acdf2f:/ # zypper ar -f
http://172.30.44.1/repo/SUSE/Updates/SLE-Module-Basesystem/15-SP3/x86_64/update/
SLE-Module-Basesystem15-SP3-Updates
[...]
d6f695acdf2f:/ # rpm -qa | grep python
d6f695acdf2f:/ # zypper -n in --no-recommends python39
[...]
The following 7 NEW packages are going to be installed:
  libexpat1 libpython3_6m1_0 libpython3_9-1_0 python-rpm-macros python3-base
python39 python39-base
[...]
(1/7) Installing: libexpat1-2.2.5-3.6.1.x86_64 ...................../-/..[done]
(2/7) Installing: python-rpm-macros-20200207.5feb6c1-3.11.1.noarch ./-/..[done]
(3/7) Installing: libpython3_6m1_0-3.6.13-10.3.1.x86_64 ............/-/..[done]
(4/7) Installing: python3-base-3.6.13-10.3.1.x86_64 ................/-/..[done]
(5/7) Installing: libpython3_9-1_0-3.9.6-4.3.3.x86_64 ............../-/..[done]
(6/7) Installing: python39-base-3.9.6-4.3.3.x86_64 ................./-/..[done]
(7/7) Installing: python39-3.9.6-4.3.4.x86_64 ....................../-/..[done]

d6f695acdf2f:/ # rpm -qa | grep python | sort
libpython3_6m1_0-3.6.13-10.3.1.x86_64
libpython3_9-1_0-3.9.6-4.3.3.x86_64
python-rpm-macros-20200207.5feb6c1-3.11.1.noarch
python3-base-3.6.13-10.3.1.x86_64
python39-3.9.6-4.3.4.x86_64
python39-base-3.9.6-4.3.3.x86_64
d6f695acdf2f:/ #


--1638207491.FD3c661.12573
Date: Mon, 29 Nov 2021 17:38:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193189

            Bug ID: 1193189
           Summary: Bogus rpmlint.log differences for kernel-syms rebuilds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: mliska-at-suse.cz
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
                CC: kernel-bugs-at-opensuse.org
          Found By: ---
           Blocker: ---

When kernel-syms is rebuilt it always results in differing contents of
rpmlint.log.  It looks like cycling between two states:

comparing /.build.oldpackages/rpmlint.log and
/home/abuild/rpmbuild/OTHER/rpmlint.log
rpmlint.log files differ:
-


body:
--1638216157.eCa5cF0.2012
Date: Mon, 29 Nov 2021 20:02:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193192

            Bug ID: 1193192
           Summary: YaST is not ready for ruby 3.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: jreidinger-at-suse.com
          Reporter: jreidinger-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Tracking bug for various issues found during debugging staging with new ruby
3.0 as preparation for ruby 3.1.

Found so far:

new finalizer warning:
"/home/abuild/rpmbuild/BUILD/yast2-ruby-bindings-4.4.4/src/ruby/yast/ui.rb:4:
warning: finalizer references object to be finalized

probably not related race condition in integration tests. Quote from IRC:
<lslezak> jreidinger: the tests should contain "await" call
https://github.com/yast/yast-ruby-bindings/blob/master/tests/libyui/rspec_tmux_tui.rb#L85-L89
like here
https://github.com/yast/yast-ruby-bindings/blob/master/tests/libyui/multi_selection_box_spec.rb#L77

and also webrick is no longer part of ruby stdlib. After discussion we decided
to not fail if not found to avoid too much build dependencies.

summary: YaST is not ready for ruby 3.0


body:
--1638313058.D5BFfaBa5.1116
Date: Tue, 30 Nov 2021 22:57:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193262

            Bug ID: 1193262
           Summary: python-dmidecode requires Python 2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: galaxy-bugs-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kstreitova-at-suse.com, steven.kowalik-at-suse.com,
                    sweiberg-at-suse.com
            Blocks: 1190966
          Found By: ---
           Blocker: ---

Python 2 has been end of life since January 1st, 2020 and the Python team is
currently working on removing Python 2 in SLE15 SP4 (SLE-16747).

Your package has been identified that either BuildRequires or Requires python
or python-devel. Please look at either updating this package to use Python 3,
upgrading to a newer version that supports Python 3, or considering dropping
the package if it can't be fixed. Alternatively, please reach out if the
Packaging Team can assist.

Please note that the work on removing Python 2 is already in progress so we
would ask you to take a look and submit your changes as soon as possible.

summary: python-dmidecode requires Python 2


--1638347620.643C0.25701
Date: Wed, 1 Dec 2021 08:33:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193272

            Bug ID: 1193272
           Summary: devel:libraries:c_c++/libffi causes fallout in Staging:A
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rguenther-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The libffi update causes build FAILs of

gjs
python-atspi:test
python-dbus-python
python-matplotlib:test
python-python-dbusmock

(and some more that look unrelated)


body:
--1638362137.8baCD3c00.32220
Date: Wed, 1 Dec 2021 12:35:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193282

            Bug ID: 1193282
           Summary: grub2 sbat security contact
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: mchang-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Is the security contact address in
https://build.opensuse.org/package/view_file/openSUSE:Factory/grub2/grub2.spec
really meant to be -team? Or rather security-at-suse.de instead?

summary: grub2 sbat security contact


--1638370208.48CF1A0.24706
Date: Wed, 1 Dec 2021 14:50:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193291

            Bug ID: 1193291
           Summary: amavisd-new should require packets perl-IO-stringy and perl-Net-LibIDN
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Trying to start amavis.service from packet amavisd-new in a fresh Tumbleweed
system gives an error. It requires IO::Stringy and Net::LibIDN. After "zypper
in perl-IO-stringy perl-Net-LibIDN" the service starts as expected. It should
be a requirement in packaging amavisd-new.


body:
--1638433265.7B0aC570.4816
Date: Thu, 2 Dec 2021 08:21:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193310

            Bug ID: 1193310
           Summary: fwupd 1.7.2: new polkit rules to audit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

fwupd is prepared to be upgraded to version 1.7.2 (in Base:System)

There are new polkit warnings in rpmlint:

fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10)
org.freedesktop.fwupd.downgrade-internal-trusted
(auth_admin:no:auth_admin_keep)
fwupd.x86_64: E: polkit-untracked-privilege (Badness: 10)
org.freedesktop.fwupd.downgrade-hotplug-trusted (auth_admin:no:auth_admin_keep)

Package can be found at
https://build.opensuse.org/package/show/Base:System/fwupd

summary: fwupd 1.7.2: new polkit rules to audit


body:
--1638462024.16172F0.17902
Date: Thu, 2 Dec 2021 16:20:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193334

            Bug ID: 1193334
           Summary: multipathd: double free in remove_map()
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Original bug report from Lixiaokeng ("libmultipath: clear removed path from
mpp") upstream:

    multipathd[3525635]: ==3525635==ERROR: AddressSanitizer:
heap-use-after-free on address 0xffffa4902fc0 at pc 0xffffac7d5b88 bp
0xffffa948dac0 sp 0xffffa948dae0
    multipathd[3525635]: READ of size 8 at 0xffffa4902fc0 thread T7
    multipathd[3525635]:    #0 0xffffac7d5b87 in free_multipath
(/usr/lib64/libmultipath.so.0+0x4bb87)
    multipathd[3525635]:    #1 0xaaaad6cf7057  (/usr/sbin/multipathd+0x17057)
    multipathd[3525635]:    #2 0xaaaad6cf78eb  (/usr/sbin/multipathd+0x178eb)
    multipathd[3525635]:    #3 0xaaaad6cff4df  (/usr/sbin/multipathd+0x1f4df)
    multipathd[3525635]:    #4 0xaaaad6cfffe7  (/usr/sbin/multipathd+0x1ffe7)
    multipathd[3525635]:    #5 0xffffac807be3 in uevent_dispatch
(/usr/lib64/libmultipath.so.0+0x7dbe3)
    multipathd[3525635]:    #6 0xaaaad6cf563f  (/usr/sbin/multipathd+0x1563f)
    multipathd[3525635]:    #7 0xffffac6877af
(/usr/lib64/libpthread.so.0+0x87af)
    multipathd[3525635]:    #8 0xffffac44118b  (/usr/lib64/libc.so.6+0xd518b)
    multipathd[3525635]: 0xffffa4902fc0 is located 1344 bytes inside of
1440-byte region [0xffffa4902a80,0xffffa4903020)
    multipathd[3525635]: freed by thread T7 here:
    multipathd[3525635]:    #0 0xffffac97d703 in free
(/usr/lib64/libasan.so.4+0xd0703)
    multipathd[3525635]:    #1 0xffffac824827 in orphan_paths
(/usr/lib64/libmultipath.so.0+0x9a827)
    multipathd[3525635]:    #2 0xffffac824a43 in remove_map
(/usr/lib64/libmultipath.so.0+0x9aa43)
    multipathd[3525635]:    #3 0xaaaad6cf7057  (/usr/sbin/multipathd+0x17057)
    multipathd[3525635]:    #4 0xaaaad6cf78eb  (/usr/sbin/multipathd+0x178eb)
    multipathd[3525635]:    #5 0xaaaad6cff4df  (/usr/sbin/multipathd+0x1f4df)
    multipathd[3525635]:    #6 0xaaaad6cfffe7  (/usr/sbin/multipathd+0x1ffe7)
    multipathd[3525635]:    #7 0xffffac807be3 in uevent_dispatch
(/usr/lib64/libmultipath.so.0+0x7dbe3)
    multipathd[3525635]:    #8 0xaaaad6cf563f  (/usr/sbin/multipathd+0x1563f)
    multipathd[3525635]:    #9 0xffffac6877af
(/usr/lib64/libpthread.so.0+0x87af)
    multipathd[3525635]:    #10 0xffffac44118b  (/usr/lib64/libc.so.6+0xd518b)

    When mpp only has one path and log out the path, there is an asan error.
    In remove_mpp, the pp is freed firstly in orphan_path but is accessed,
    changed in free_multipath later. Before free_path(pp), the pp should be
    cleared from pp->mpp.

summary: multipathd: double free in remove_map()


--1638462501.6D18b0.18727
Date: Thu, 2 Dec 2021 16:28:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193336

            Bug ID: 1193336
           Summary: "systemd-udev-settle.service is deprecated. Please fix multipathd.service not to pull it in."
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Warning during boot:

> udevadm[2615]: systemd-udev-settle.service is deprecated. Please fix multipathd.service not to pull it in.

Latest upstream multipath-tools was redesigned such that the dependency on
systemd-udev-settle can indeed be dropped.


--1638462924.62E78C0.14838
Date: Thu, 2 Dec 2021 16:35:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193338

            Bug ID: 1193338
           Summary: multipathd won't start when stopped during reconfigure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After sending "RELOADING=1" to systemd, a service must send
"READY=1" before "STOPPING=1". Otherwise systemd will be confused
and will not regard the service as stopped. Subsequent attempts
to start multipathd via socket activation fail until systemd times
out the reload operation.

The problem can be reproduced by running "multipathd shutdown"
quickly after "multipathd reconfigure".

Solved in latest upstream multipath-tools.


--1638464682.3cCdfC0.23147
Date: Thu, 2 Dec 2021 17:04:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193342

            Bug ID: 1193342
           Summary: Various coverity defects in multipath-tools
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Coverity finds a number of defects in multipath-tools.
A recent upstream patch series fixes all of them.

df9ccd5 libmultipath (coverity): check return values in dm_get_multipath()
2e61b8f libmultipath (coverity): Revert "setup_map: wait for pending path
checkers to finish"
f455285 libmultipath (coverity): avoid sleeping in dm_mapname()
d770ae2 multipathd (coverity): daemonize(): use dup2
b0f6df5 kpartx: find_unused_loop_device(): add newlines
7c6714e kpartx: use opened loop device immediately
1ffd7c9 kpartx: open /dev/loop-control only once
8c71adc multipathd (coverity): simplify set_oom_adj()
75d580a libmultipath (coverity): set umask before mkstemp
8f6c9fc multipath: remove pointless code from getopt processing
f6e71e8 libmultipath (coverity): silence unchecked return value warning
c9c7db3 multipath, multipathd: exit if bindings file is broken
ed7dc96 libmultipath (coverity): fix tainted values in alua_rtpg.c
5ed05b1 libmultipath: use strbuf in parse_vpd_pg83()
216845c multipath-tools: add tests for broken VPD page 83
d331b8a libmultipath (coverity): improve input checking in parse_vpd_pg83
df63773 libmultipath: strbuf: add __get_strbuf_buf()
544a75d multipathd (coverity): terminate uxlsnr when polls allocation fails
bcb771e multipathd (coverity): check atexit() return value


--1638539854.EfF30.21034
Date: Fri, 3 Dec 2021 13:57:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193372

            Bug ID: 1193372
           Summary: VUL-0: CVE-2021-28237: libredwg: heap-buffer overflow via decode_preR13.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/316190/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-28237

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via
decode_preR13.

Upstream fix commit:
https://github.com/LibreDWG/libredwg/commit/ea0b9522f63d049ded2c3cff8d9a8c360119951c

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-28237
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28237
https://github.com/LibreDWG/libredwg/issues/325
http://www.cvedetails.com/cve/CVE-2021-28237/


body:
--1638875131.AAdd20.17193
Date: Tue, 7 Dec 2021 11:05:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193473

            Bug ID: 1193473
           Summary: /etc/cron.daily/suse-texlive from texlive causes warnings
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bjoernv-at-arcor.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The daily cron job /etc/cron.daily/suse-texlive causes warnings via e-mail:

mktexlsr: cannot read files, skipping: /usr/local/share/texmf
mktexlsr: cannot read files, skipping: /var/cache/texmf/fonts/texmf

Both directories do not exist. I did not actively use texlive and did not
changed the configuration.

At least I do not want to read those warnings every day.

pkgs: texlive-filesystem texlive-specs-a texlive-specs-b texlive-specs-c texlive-specs-d texlive-specs-e texlive-specs-f texlive-specs-g texlive-specs-h texlive-specs-i texlive-specs-j texlive-specs-k texlive-specs-l texlive-specs-m texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-q texlive-specs-r texlive-specs-s texlive-specs-t texlive-specs-u texlive-specs-v texlive-specs-w texlive-specs-x texlive-specs-y texlive-specs-z


--1638957356.dccCa0.15120
Date: Wed, 8 Dec 2021 09:55:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193519

            Bug ID: 1193519
           Summary: VUL-0: chromium: multiple security issues fixed in 96.0.4664.93
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: smash_bz-at-suse.de
          Found By: Security Response Team
           Blocker: ---

[$15000][1267661] High CVE-2021-4052: Use after free in web apps. Reported by
Wei Yuan of MoyunSec VLab on 2021-11-07

[$10000][1267791] High CVE-2021-4053: Use after free in UI. Reported by Rox on
2021-11-08

[$8500][1265806] High CVE-2021-4079: Out of bounds write in WebRTC. Reported by
Brendon Tiszka on 2021-11-01

[$5000][1239760] High CVE-2021-4054: Incorrect security UI in autofill.
Reported by Alesandro Ortiz on 2021-08-13

[$5000][1268738] High CVE-2021-4078: Type confusion in V8. Reported by Nan
Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab on 2021-11-09

[$1000][1266510] High CVE-2021-4055: Heap buffer overflow in extensions.
Reported by Chen Rong on 2021-11-03

[$TBD][1260939] High CVE-2021-4056: Type Confusion in loader. Reported by
@__R0ng of 360 Alpha Lab on 2021-10-18

[$TBD][1262183] High CVE-2021-4057: Use after free in file API. Reported by
Sergei Glazunov of Google Project Zero on 2021-10-21

[$TBD][1267496] High CVE-2021-4058: Heap buffer overflow in ANGLE. Reported by
Abraruddin Khan and Omair  on 2021-11-06

[$TBD][1270990] High CVE-2021-4059: Insufficient data validation in loader.
Reported by Luan Herrera (@lbherrera_) on 2021-11-17

[$TBD][1271456] High CVE-2021-4061: Type Confusion in V8. Reported by Paolo
Severini on 2021-11-18

[$TBD][1272403] High CVE-2021-4062: Heap buffer overflow in BFCache. Reported
by Leecraso and Guang Gong of 360 Alpha Lab on 2021-11-22

[$TBD][1273176] High CVE-2021-4063: Use after free in developer tools. Reported
by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on
2021-11-23

[$TBD][1273197] High CVE-2021-4064: Use after free in screen capture. Reported
by @ginggilBesel on 2021-11-23

[$TBD][1273674] High CVE-2021-4065: Use after free in autofill. Reported by
5n1p3r0010 on 2021-11-25

[$TBD][1274499] High CVE-2021-4066: Integer underflow in ANGLE. Reported by
Jaehun Jeong(@n3sk) of Theori on 2021-11-29

[$TBD][1274641] High CVE-2021-4067: Use after free in window manager. Reported
by @ginggilBesel on 2021-11-29

[$500][1265197] Low CVE-2021-4068: Insufficient validation of untrusted input
in new tab page. Reported by NDevTK on 2021-10-31


--1638976448.eA2c0.31807
Date: Wed, 8 Dec 2021 15:14:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193538

            Bug ID: 1193538
           Summary: [Build 5.1] openQA test fails in ristretto: tumbler not installed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2076199/modules/rist
                    retto/steps/5
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

ristretto doesn't really work without tumbler, maybe it should require or
recommend it?

## Observation

openQA test in scenario opensuse-15.4-Rescue-CD-x86_64-rescue@64bit-2G fails in
[ristretto](https://openqa.opensuse.org/tests/2076199/modules/ristretto/steps/5)

## Test suite description

## Reproducible

Fails since (at least) Build [4.9](https://openqa.opensuse.org/tests/2010763)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=Rescue-CD&machine=64bit-2G&test=rescue&version=15.4)


--1639060401.16F2A17f0.6674
Date: Thu, 9 Dec 2021 14:33:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193579

            Bug ID: 1193579
           Summary: Lifearea misses python3-cairo dependency
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bluedzins-at-wp.pl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Lifearea misses python3-cairo dependency, without using TrayIcon plugin is
impossible, and in turn it is not possible to close&stay Lifera window, which
for such type of the program is basically a must.

For the record


--1639066873.Af8530F0.28038
Date: Thu, 9 Dec 2021 16:21:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193584

            Bug ID: 1193584
           Summary: VUL-0: CVE-2021-44540: Multiple issues fixed in Privoxy 3.0.33 stable
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/316954/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: mseben-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-44540 via oss-sec mailing list

https://seclists.org/oss-sec/2021/q4/148

Multiple issues fixed in Privoxy 3.0.33 stable

- CVE-2021-44540: get_url_spec_param(): Free memory of compiled pattern spec
before bailing.
- CVE-2021-44541: process_encrypted_request_headers(): Free header memory when
failing to get the request destination.
- CVE-2021-44542: send_http_request(): Prevent memory leaks when handling
errors
- CVE-2021-44543: cgi_error_no_template(): Encode the template name to prevent
XSS (cross-site scripting)


--1639088117.DBBdd8D0.7911
Date: Thu, 9 Dec 2021 22:15:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193597

            Bug ID: 1193597
           Summary: (CVE-2021-44716) VUL-0: CVE-2021-44716: go1.16,go1.17: net/http: limit growth of header canonicalization cache
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

An attacker can cause unbounded memory growth in a Go server accepting HTTP/2
requests.

For users who cannot immediately update to the new release, setting the
GODEBUG=http2server=0 environment variable before calling Serve will disable
HTTP/2 unless it was manually configured through the golang.org/x/net/http2
package.

This issue is also fixed in golang.org/x/net/http2
v0.0.0-20211209124913-491a49abca63, for users manually configuring HTTP/2.

Thank you to murakmii for reporting this issue.

This is CVE-2021-44716 and Go issue go#50058.

References:

https://github.com/golang/go/issues/50058


body:
--1639363767.8AFAaAc40.30864
Date: Mon, 13 Dec 2021 02:49:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193649

            Bug ID: 1193649
           Summary: [trackerbug] lxd 4.21 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860

  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members

summary: [trackerbug] lxd 4.21 update


--1639385471.1cDe0e0.22376
Date: Mon, 13 Dec 2021 08:51:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193656

            Bug ID: 1193656
           Summary: [hplip, keyserver] The Keyserver used by hplip is dysfunctional
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Printing
          Assignee: martin.wilck-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: jsmeix-at-suse.com
                CC: asn-at-cryptomilk.org
          Found By: Development
           Blocker: ---

The keyserver used by hplip to verify the archive containing its proprietary
plugins after download has been changed to pool.sks-keyservers.net just
recently by Andreas Schneider.
Wed Oct 16 07:48:29 UTC 2019 - Andreas Schneider <asn-at-cryptomilk.org>
[...]
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch

Unfortunately, this keyserver seems to be down permanently - due to GDPR
takedown notices: (See: https://sks-keyservers.net/).
Now, the keyserver used by 'upstream' (pgp.mit.edu) seems to be not much more
reliable.
I've gotten lucky using keys.openpgp.org or keyserver.ubuntu.com.
Both seem to be advocated in various posts recently.

I'm unsure which keyserver to use, though, thus I'm not submitting any change
to the package but put this up for discussion here.

The issue is hitting Leap (15.3) and possibly also SLE-15-SP3 - as hplip seems
to be shipped there as well.


--1639387739.a8A0D6.27996
Date: Mon, 13 Dec 2021 09:28:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193657

            Bug ID: 1193657
           Summary: [BP SLE15-SP4] link to /usr/lib64/libclzma.so fails with: undefined reference to `Sha256_UpdateBlocks_HW'
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-15-SP3
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: packagehub-bugs-at-suse.com
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    lubos.kocman-at-suse.com, mlin-at-suse.com
          Found By: ---
           Blocker: ---

Since the update of lzma-sdk [0], gzdoom and slade fail to build on aarch64
with the following error:
/usr/lib64/gcc/aarch64-suse-linux/7/../../../../aarch64-suse-linux/bin/ld:
/usr/lib64/libclzma.so: undefined reference to `Sha256_UpdateBlocks_HW'

[0]: https://build.opensuse.org/request/show/937633


body:
Build Identifier:

Compiling the following code results in an internal compiler error since g++
(SUSE Linux) 11.2.1 20211124 at any optimization level except -O0.

---

#include <coroutine>
#include <string_view>

struct awaitable {
    struct promise_type {
        auto initial_suspend() noexcept    { return std::suspend_never(); }
        auto final_suspend() noexcept { return std::suspend_never(); }
        void return_void();
        void unhandled_exception() noexcept;
        awaitable get_return_object() noexcept;
    };
};

struct coro_test {
    std::string_view s_;

    awaitable f()
    {
        if (s_.empty()) {
            co_return;
        }
    }
};

---

Reproducible: Always

Steps to Reproduce:
> g++ -std=c++20 -O1 -c test.cpp
Actual Results:
test.cpp: In function ???void
coro_test::f(coro_test::f()::_ZN9coro_test1fEv.Frame*)???:
test.cpp:22:9: internal compiler error: in is_this_parameter, at
cp/semantics.c:10672
   22 |         }
      |         ^
0xeaf047 internal_error(char const*, ...)
        ???:0
0xea55a6 fancy_abort(char const*, int, char const*)
        ???:0
0x10c1745 maybe_constant_value(tree_node*, tree_node*, bool)
        ???:0
0x10c23c4 cp_fold_maybe_rvalue(tree_node*, bool)
        ???:0
0xfe436f walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0xfe451e walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0xfe47a7 walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0xfe451e walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0xfe485f walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0xfe4831 walk_tree_1(tree_node**, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*,
tree_node* (*)(tree_node**, int*, tree_node* (*)(tree_node**, int*, void*),
void*, hash_set<tree_node*, false, default_hash_traits<tree_node*> >*))
        ???:0
0x10d202e cp_fold_function(tree_node*)
        ???:0
0x15a485b c_parse_file()
        ???:0
0x15950e6 c_common_parse_file()
        ???:0

summary: g++ internal compiler error: in is_this_parameter, at cp/semantics.c:10672


--1639435471.BcA1B1.9326
Date: Mon, 13 Dec 2021 22:44:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193706

            Bug ID: 1193706
           Summary: pkcon reporting a (spurious?) read-only fs error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: dfaggioli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hey! So, since some users were complaining about pkcon throwing errors on
MicroOS, I decided to try myself (I just installed snapshot 20211211).

It is, in fact, the case that the following shows up:

dario@localhost:~> pkcon install rclone
Fatal error: Failed to create directory
"/.snapshots/4/snapshot/etc/dnf/modules.d": 30 - Read-only file system

However, if I try again, it seems the package was installed inside of the
snapshot:

dario@localhost:~> pkcon -v install rclone
22:33:59    PackageKit          Verbose debugging enabled (on console 1)
22:34:00    PackageKit          role now resolve
PackageKit          adding state 0x559f4fd43be0
PackageKit          notify::connected
PackageKit          remove state 0x559f4fd43be0
Fatal error: rclone-1.57.0-1.1.x86_64 is already installed

And if I reboot, rclone is there:

dario@localhost:~> rclone -h

Rclone syncs files to and from cloud storage providers as well as
mounting them, listing them in lots of different ways.

See the home page (https://rclone.org/) for installation, usage,
documentation, changelog and configuration walkthroughs.

Usage:
  rclone [flags]
  rclone [command]
  ... ... ...

So, is that "Fatal error" just some spurious message we should suppress? Or has
something really gone bad, despite the package ending up being installed (from
what I can tell) correctly?

Neal, any idea?


--1639475245.dDBaA00F0.22116
Date: Tue, 14 Dec 2021 09:47:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193713

            Bug ID: 1193713
           Summary: VUL-0: chromium: multiple security issues fixed in 96.0.4664.110
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: smash_bz-at-suse.de
          Found By: Security Response Team
           Blocker: ---

[$NA][1263457] Critical CVE-2021-4098: Insufficient data validation in Mojo.
Reported by Sergei Glazunov of Google Project Zero on 2021-10-26

[$5000][1270658] High CVE-2021-4099: Use after free in Swiftshader. Reported by
Aki Helin of Solita on 2021-11-16

[$5000][1272068] High CVE-2021-4100: Object lifecycle issue in ANGLE. Reported
by Aki Helin of Solita on 2021-11-19

[$TBD][1262080] High CVE-2021-4101: Heap buffer overflow in Swiftshader.
Reported by Abraruddin Khan and Omair  on 2021-10-21

[$TBD][1278387] High CVE-2021-4102: Use after free in V8. Reported by Anonymous
on 2021-12-09

Ressources:
https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html


--1639501877.4b265B0.20294
Date: Tue, 14 Dec 2021 17:11:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193739

            Bug ID: 1193739
           Summary: openSUSE 15.3 barrier still vulnerable to CVE-2021-42072, CVE-2021-42073
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: robin.roevens-at-disroot.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I found out barrier was updated in Tumbleweed to v2.4.0 due to  CVE-2021-42072,
CVE-2021-42073.
According to https://www.suse.com/security/cve/CVE-2021-42072.html and
https://www.suse.com/security/cve/CVE-2021-42073.html barrier was also updated
on openSUSE 15.2 for the same reason.

Also the announcement on security-announce:
https://lists.opensuse.org/archives/list/security-announce-at-lists.opensuse.org/thread/74GXCIF4KQYNWDBG745K5PJQT5VK2BHK/
only mentions Leap 15.2

But no mention of openSUSE Leap 15.3 anywhere, and openSUSE Leap 15.3 is still
shipped with barrier 2.3.3
(http://download.opensuse.org/distribution/leap/15.3/repo/oss/x86_64/barrier-2.3.3-bp153.1.16.x86_64.rpm)
with no update available in the update repo.

And in extension, also on SLES 15 SP3 (SUSE-PackageHub-15-SP3-Backports-Pool),
still a vulnerable barrier 2.3.3 is shipped without available update.

Is this intentional? or just overlooked ?

(I also noticed that software.opensuse.org fails to find any official version
of barrier for Leap 15.3 while it is available in in the main pool)


body:
--1639514345.aF5e00.9661
Date: Tue, 14 Dec 2021 20:39:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193742

            Bug ID: 1193742
           Summary: go1.18 release tracking
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

go1.18 (expected February 2022) is a major release of Go.
Minor releases of go1.18.x will be provided through February 2023.
This issue tracks go1.18.x releases packaged and submitted initially
to openSUSE:Factory and can be referenced in submissions to
additional repositories.

Go Release Cycle
https://github.com/golang/go/wiki/Go-Release-Cycle

Go Release history
https://golang.org/doc/devel/release.html

summary: go1.18 release tracking


body:
--1639567629.fedC110.17150
Date: Wed, 15 Dec 2021 11:27:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193759

            Bug ID: 1193759
           Summary: bfq scheduler set on loop devices
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

while chasing something else I noticed that on my tumbleweed system, all loop
back block devices are having a "bfq" scheduler set.

$ grep . /sys/block/loop1/queue/scheduler
/sys/block/loop1/queue/scheduler:mq-deadline kyber [bfq] none

does that make sense? why? I was expecting something like "none" instead.

summary: bfq scheduler set on loop devices


body:
--1639689822.efBd581F0.25094
Date: Thu, 16 Dec 2021 21:23:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193845

            Bug ID: 1193845
           Summary: MozillaFirefox: update to 91.4.1esr
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: cgrobertson-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING error messages
when trying to connect to various microsoft.com domains (bmo#1745600)

pkgs: MozillaFirefox MozillaThunderbird

summary: MozillaFirefox: update to 91.4.1esr


--1639755695.DbDeaca0.16066
Date: Fri, 17 Dec 2021 15:41:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193874

            Bug ID: 1193874
           Summary: VUL-0: CVE-2021-36977: matio: heap-based buffer overflow in H5MM_memcpy()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/304598/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: badshah400-at-gmail.com
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer
overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry).

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1984613
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36977
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36977
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2021-440.yaml


--1639758363.e8c61.18428
Date: Fri, 17 Dec 2021 16:26:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193879

            Bug ID: 1193879
           Summary: VUL-1: CVE-2021-40690: xml-security: XPath Transform abuse allows for information disclosure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/310339/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and
2.1.7 are vulnerable to an issue where the "secureValidation" property is not
passed correctly when creating a KeyInfo from a KeyInfoReference element. This
allows an attacker to abuse an XPath Transform to extract any local .xml files
in a RetrievalMethod element.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2011190
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-40690
http://seclists.org/oss-sec/2021/q3/177
https://access.redhat.com/errata/RHSA-2021:5170.html
http://www.debian.org/security/-1/dsa-5010
https://access.redhat.com/errata/RHSA-2021:5150.html
https://access.redhat.com/errata/RHSA-2021:5151.html
https://access.redhat.com/errata/RHSA-2021:5149.html
https://access.redhat.com/errata/RHSA-2021:5154.html
http://www.cvedetails.com/cve/CVE-2021-40690/
https://exchange.xforce.ibmcloud.com/vulnerabilities/209586
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40690
https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E
https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994569
https://seclists.org/oss-sec/2021/q3/177
https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E


--1639900341.74F6C0.17744
Date: Sun, 19 Dec 2021 07:52:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1193893

            Bug ID: 1193893
           Summary: qbitorrent: Session logout cancelled by qBittorrent
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: 79625490833-at-yandex.ru
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This bug is known to the author of the program, but he still has the solutions.
We have already duplicated this error on github 5 times. Here is my duplicate
error and the primary error.
This bug is related to plasma 5(kde)
https://github.com/qbittorrent/qBittorrent/issues/13865


--1640040945.bbeC68a0.14369
Date: Mon, 20 Dec 2021 22:55:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193938

            Bug ID: 1193938
           Summary: squid hardening kills perl store-id program
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jimc-at-jfcarter.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 854720
  --> http://bugzilla.opensuse.org/attachment.cgi?id=854720&action=edit
Configuration file for Squid

Version: squid-5.2-2.1.x86_64 installed 2021-12-15
My squid.conf (attached, not likely useful) says:
store_id_program /etc/squid/store-id-distro.pl
Starting when the new Squid version was installed, it filled up the
root partition (/var/log/squid/cache.log) with complaints like this:

Can't locate strict.pm:   /usr/lib/perl5/site_perl/5.34.0/\
    x86_64-linux-thread-multi/strict.pm: Permission denied at \
    /etc/squid/store-id-distro.pl line 50.
BEGIN failed--compilation aborted at /etc/squid/store-id-distro.pl line 50.
(followed by complaints that too few store_id processes are running, and
it starts another one, again failing, until the disc fills up.)

strict.pm is actually at /usr/lib/perl5/5.34.0/strict.pm .
This reminds me of a chroot situation, but more likely it's partial,
i.e. a hardening command added in SuSE's current hardening campaign.

I made a copy of /usr/lib/systemd/system/squid.service (in /etc/systemd...)
and commented out hardening commands in various combinations.  If I
comment out "ProtectHome=true", leaving the others active, Squid returns
to normal operation: store_id program is running, and cache.log is
svelte.  I recommend this change for other users of Squid.


body:
--1640077251.Ee3fC0.8092
Date: Tue, 21 Dec 2021 09:00:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193945

            Bug ID: 1193945
           Summary: kcron5 security audit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

For some reasons, rpmlint complains about the KCron 21.12 DBus services files
and the polkit ones after the package was accepted into openSUSE:Factory.

https://build.opensuse.org/package/live_build_log/openSUSE:Factory/kcron/standard/x86_64

kcron.x86_64: E: polkit-untracked-privilege (Badness: 10000)
local.kcron.crontab.save (no:no:auth_admin_keep)

kcron.x86_64: E: dbus-file-unauthorized (Badness: 10000)
/usr/share/dbus-1/system-services/local.kcron.crontab.service

The upstream change was added with this commit:
 https://invent.kde.org/system/kcron/-/commit/50effd71ea17

pkgs: kcron polkit-default-privs

summary: kcron5 security audit


body:
--1640099824.dA475CDd0.10853
Date: Tue, 21 Dec 2021 15:17:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1193965

            Bug ID: 1193965
           Summary: pcmanfm is highly out-of-date
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rdkracz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The version in the openSUSE Leap repository is from Dec 10, 2016. There were
three releases (Apr 21, 2018; Dec 17, 2018; Feb 5, 2021) so far.

summary: pcmanfm is highly out-of-date


--1640186321.fA0A20.28456
Date: Wed, 22 Dec 2021 15:18:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194017

            Bug ID: 1194017
           Summary: VUL-1: CVE-2021-44917: gnuplot: Divide by Zero in the boundary3d function in graph3d.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/318527/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: werner-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2034740

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function
in graph3d.c, which could cause a Arithmetic exception and application crash.

https://sourceforge.net/p/gnuplot/bugs/2474/

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2034740
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44917
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44917
https://sourceforge.net/p/gnuplot/bugs/2474/


body:
--1640298110.6FD4Db0.31996
Date: Thu, 23 Dec 2021 22:21:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194055

            Bug ID: 1194055
           Summary: chromium: SIGSEGV when using GCC 11
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: martin.liska-at-suse.com
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: Andreas.Stieger-at-gmx.de
          Found By: ---
           Blocker: ---

Created attachment 854789
  --> http://bugzilla.opensuse.org/attachment.cgi?id=854789&action=edit
Broken chromium log

See included chromium log.

SIGSEGV only when building with GCC 11
GCC 10 works fine

summary: chromium: SIGSEGV when using GCC 11


--1640380461.6a6C0.5321
Date: Fri, 24 Dec 2021 21:14:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194065

            Bug ID: 1194065
           Summary: VirtualBox 6.1.30 guests + kernel 5.15.8 = broken Xorg sessions and errors
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: sb56637-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 854806
  --> http://bugzilla.opensuse.org/attachment.cgi?id=854806&action=edit
dmesg from IceWM session with infinite xmessage errors describe in this report

Hi, there has been a major issue with the VirtualBox guest modules since kernel
5.15.8. On a basic Tumbleweed installation from the net installer with IceWM
under VirtualBox the Xorg session is usable, but no resolution resizing and an
infinite cycle of xmessage windows:

> VBoxClient: VbglR3InitUser failed: VERR_ACCESS_DENIED

> VBoxClient: Failed to request display change events, rc=VERR_INVALID_HANDLE

> VBoxClient: Failed to register resizing support, rc=VERR_INVALID_HANDLE

On a custom live ISO I built with VirtualBox guest support and XFCE, it is
unusable. When booting with the normal VMSVGA graphics the Xorg session won't
load at all. If I put it in 3D then it eventually loads the XFCE session but
with the entire screen full of truncated notifications:

> VBoxClient: Failure waiting for event, r...

I don't see anything interesting in the guest's dmesg, attached.

This same live ISO works fine with Qemu/KVM and on bare metal.

The latest official openSUSE Tumbleweed live ISO also works fine as a
VirtualBox guest because the ISO doesn't come with VirtualBox guest support
pre-configured.

Thanks a lot for your time and help!


--1640680762.dfAdB0.20053
Date: Tue, 28 Dec 2021 08:39:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194109

            Bug ID: 1194109
           Summary: [Build 20211227] openQA test fails in qgis
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PowerPC-64
               URL: https://openqa.opensuse.org/tests/2108134/modules/qgis
                    /steps/9
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-ppc64le-extra_tests_gnome@ppc64le fails in
[qgis](https://openqa.opensuse.org/tests/2108134/modules/qgis/steps/9)

On ppc64le QA, qgis is not installable, as the dep chain cannot be re-built

> osc r openSUSE:Factory:PowerPC -a ppc64le -r standard  qgis -v
standard             ppc64le    unresolvable:
                                    nothing provides PDAL-devel
                                    nothing provides pkgconfig(pdal) >= 2.2.0

> osc r openSUSE:Factory:PowerPC -a ppc64le -r standard  -v PDAL
standard             ppc64le    failed

## Test suite description
Maintainer: QE Core, asmorodskyi. Extra tests which were designed to run on
gnome

## Reproducible

Fails since (at least) Build
[20210302](https://openqa.opensuse.org/tests/1652729)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=ppc64le&distri=opensuse&flavor=DVD&machine=ppc64le&test=extra_tests_gnome&version=Tumbleweed)


--1640762732.BA210eec0.1681
Date: Wed, 29 Dec 2021 07:25:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194126

            Bug ID: 1194126
           Summary: VirtualBox share clipboard support for Wayland
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: arvidjaar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently VBoxClient --clipboard is started only in X11 session via xinit. It
also works in Wayland session (via XWayland). I use the following proof of
concept systemd unit:

tux@localhost:~> systemctl --user cat vboxclient-clipboard.service
# /home/tux/.local/share/systemd/user/vboxclient-clipboard.service
[Unit]
Description=VirtualBox shared clipboard for Wayland
ConditionEnvironment=XDG_SESSION_TYPE=wayland
After=graphical-session.target

[Service]
Type=forking
RemainAfterExit=true
ExecStart=/usr/bin/VBoxClient --clipboard

[Install]
WantedBy=graphical-session.target
tux@localhost:~>

Condition is there to avoid redundant starting in X11. The above is pasted in
Windows host from GNOME Wayland session in guest :)


--1640765490.E3AE1F0.3265
Date: Wed, 29 Dec 2021 08:11:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194128

            Bug ID: 1194128
           Summary: virtualbox-guest-x11 needs libnotify-tools
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: arvidjaar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

VBoxClient is using notify-send for (error) messages. Without libnotify-tools
you get ugly basic X11 dialogue window. With libnotify-tools it is integrated
in standard desktop notifications.


--1640829548.20b6c6563.4563
Date: Thu, 30 Dec 2021 01:59:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194159

            Bug ID: 1194159
           Summary: xorg-x11-server: Failed to open 'xbb.conf': No such file or directory
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: Ulrich.Windl-at-rz.uni-regensburg.de
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Upgrading from Leap 15.2 to 15.3 via "zypper dup" showed this error message:

(3788/5706) Installing: xorg-x11-server-1.20.3-22.5.33.1.x86_64 .....[done]
Additional rpm output:
Failed to open 'xbb.conf': No such file or directory
Updating /etc/sysconfig/displaymanager ...


--1640875953.1EfE6CE0.18266
Date: Thu, 30 Dec 2021 14:52:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194182

            Bug ID: 1194182
           Summary: [Build 20211229] chromium fails to render pages
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2112449/modules/chro
                    mium/steps/20
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-NET-x86_64-gnome@64bit fails in
[chromium](https://openqa.opensuse.org/tests/2112449/modules/chromium/steps/20)

Snapshot 1229 was the one containing the chromium submission with the 'own'
wrapper, for Wayland. 100% of the tests in 1228 for chromium failed. A run of
1128 showed chromium working there, making that SR a prime candidate to cause
this issue

## Test suite description
Revert schedule to working settings - dleuenberger, 20211117

## Reproducible

Fails since (at least) Build
[20211229](https://openqa.opensuse.org/tests/2112449) (current job)

## Expected result

Last good: [20211228](https://openqa.opensuse.org/tests/2110907) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=NET&machine=64bit&test=gnome&version=Tumbleweed)