--1544031481.68ED770.32211
Date: Wed, 5 Dec 2018 17:38:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118529

            Bug ID: 1118529
           Summary: VUL-0: chromium: multiple vulnerabilities fixed in 71.0.3578.80
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

Fixed in Chromium 71.0.3578.80

- CVE-2018-17480: Out of bounds write in V8
- CVE-2018-17481: Use after frees in PDFium
- CVE-2018-18335: Heap buffer overflow in Skia
- CVE-2018-18336: Use after free in PDFium
- CVE-2018-18337: Use after free in Blink
- CVE-2018-18338: Heap buffer overflow in Canvas
- CVE-2018-18339: Use after free in WebAudio
- CVE-2018-18340: Use after free in MediaRecorder
- CVE-2018-18341: Heap buffer overflow in Blink
- CVE-2018-18342: Out of bounds write in V8
- CVE-2018-18343: Use after free in Skia
- CVE-2018-18344: Inappropriate implementation in Extensions
- Multiple issues in SQLite via WebSQL
- CVE-2018-18345: Inappropriate implementation in Site Isolation
- CVE-2018-18346: Incorrect security UI in Blink
- CVE-2018-18347: Inappropriate implementation in Navigation
- CVE-2018-18348: Inappropriate implementation in Omnibox
- CVE-2018-18349: Insufficient policy enforcement in Blink
- CVE-2018-18350: Insufficient policy enforcement in Blink
- CVE-2018-18351: Insufficient policy enforcement in Navigation
- CVE-2018-18352: Inappropriate implementation in Media
- CVE-2018-18353: Inappropriate implementation in Network Authentication
- CVE-2018-18354: Insufficient data validation in Shell Integration
- CVE-2018-18355: Insufficient policy enforcement in URL Formatter
- CVE-2018-18356: Use after free in Skia
- CVE-2018-18357: Insufficient policy enforcement in URL Formatter
- CVE-2018-18358: Insufficient policy enforcement in Proxy.
- CVE-2018-18359: Out of bounds read in V8
- Inappropriate implementation in PDFium
- Use after free in Extensions
- Inappropriate implementation in Navigation
- Insufficient policy enforcement in Navigation
- Insufficient policy enforcement in URL Formatter
- Various fixes from internal audits, fuzzing and other initiatives


--1544081218.84a81.8494
Date: Thu, 6 Dec 2018 07:26:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118586

            Bug ID: 1118586
           Summary: VUL-1: CVE-2018-19857: vlc: denial of service and/or a potential infoleak when processing magic cookies in CAF files via read memory from an uninitialized pointer
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/220264/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: X11 Applications
          Assignee: dimstar-at-opensuse.org
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-19857

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player
3.0.4 may read memory from an uninitialized pointer when processing
magic cookies in CAF files, because a ReadKukiChunk() cast converts a
return value to an unsigned int even if that value is negative. This
could result in a denial of service and/or a potential infoleak.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19857


--1544088715.4A5b4.31843
Date: Thu, 6 Dec 2018 09:31:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118611

            Bug ID: 1118611
           Summary: python-Cython 0.29 removed support for subinterpreters
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ricardo.dias-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The recent version of python-Cython 0.29 included in Factory has removed the
support for subinterpreters by the use of a safe-guard that validates if a
cython module is being loaded by a different subinterpreted than the main
interpreter.

See commit:
https://github.com/cython/cython/commit/7e27c7cd51a2f048cd6d3c246740cd977f8d2e50

In the Ceph project, one of its components, the ceph-manager, heavily relies on
python subinterpreters to run python modules as plugins, and these python
modules import cython modules.

Because of the lack of support of subinterpreters in python-Cython 0.29, which
would completely break the ceph-manager component, the upstream Ceph project
had to restrict the version of python-Cython to '< 0.29' in the spec file.
This change to the spec file completely hinders the submission of new versions
of Ceph to Factory.

Therefore, we would like to request a downgrade of the python-Cython package in
Factory until this issue is fixed by the upstream Cython or Ceph community.


body:
--1544089903.2dEfCF420.19976
Date: Thu, 6 Dec 2018 09:51:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118619

            Bug ID: 1118619
           Summary: ninja fails to build software in 2038
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: idonmez-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
ninja fails to build software after 31 bits of the UNIX epoch timer run out:
date -d @$((0x80000000))
Tue Jan 19 04:14:08 CET 2038

There is already a fix in upstream master:

https://github.com/ninja-build/ninja/commit/5fcdcf95cb62ab3d593c36ef90df27cef63874a1#r30852768

Note: There are also some openSUSE packages, like libqt5-qtwebengine
that come with their own embedded affected ninja version.
They happily use openSUSE's ninja if available via BuildRequire.

summary: ninja fails to build software in 2038


--1544101265.Acc4620.15941
Date: Thu, 6 Dec 2018 13:01:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1118644

            Bug ID: 1118644
           Summary: Debug symbols are broken with gcc 8.2.1 20181108 and ld.gold 2.31.1.20180828-2) 1.16
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: asn-at-cryptomilk.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

$ cat xopen.c
#include <stdio.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <unistd.h>

#define TMP_TEST_FILE "/tmp/xopen.test"

int main(int argc, char *argv[])
{
    int fd;

    fd = open(TMP_TEST_FILE, O_CREAT);
    if (fd < 0) {
        return 1;
    }
    unlink(TMP_TEST_FILE);

    close(fd);

    return 0;
}

$�gcc -O0 -g -ggdb xopen.c
/usr/lib64/gcc/x86_64-suse-linux/8/../../../../x86_64-suse-linux/bin/ld:
warning: /tmp/ccPCVlhE.o: section .debug_str contains incorrectly aligned
strings; the alignment of those strings won't be preserved

$ gdb ./a.out
(gdb) b main
Breakpoint 1 at 0x400606
(gdb) r
Starting program: /home/asn/a.out

Breakpoint 1, 0x0000000000400606 in main ()
(gdb) n
Single stepping until exit from function main,
which has no line number information.
__libc_start_main (main=0x400602 <main>, argc=1, argv=0x7fffffffd878,
init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>,
stack_end=0x7fffffffd868)
    at ../csu/libc-start.c:342
342     ../csu/libc-start.c: No such file or directory.

...


--1544136066.8C467dFf3.22900
Date: Thu, 6 Dec 2018 22:41:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118689

            Bug ID: 1118689
           Summary: 32bit x86 4.19 pae and vanilla kernels randomly lockup or trigger reboot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i686
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

More info in forum thread:
https://forums.opensuse.org/showthread.php/534078-Runs-only-with-the-recovery-version

# lscpu
Architecture:        i686
CPU op-mode(s):      32-bit, 64-bit
Byte Order:          Little Endian
CPU(s):              2
On-line CPU(s) list: 0,1
Thread(s) per core:  2
Core(s) per socket:  1
Socket(s):           1
Vendor ID:           GenuineIntel
CPU family:          15
Model:               4
Model name:          Intel(R) Pentium(R) 4 CPU 3.00GHz
Stepping:            3
CPU MHz:             2992.597
BogoMIPS:            5985.19
L1d cache:           16K
L2 cache:            2048K
Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm
constant_tsc pebs bts cpuid pni dtes64 monitor ds_cpl est cid cx16 xtpr
# free
              total        used        free      shared  buff/cache   available
Mem:        2062696      279968     1120112        1660      662616     1551448
Swap:        530108           0      530108
# cat /proc/cmdline
root=LABEL=osTWst80 ipv6.disable=1 net.ifnames=0 noresume vga=791
video=1024x768@60 video=1440x900@60 5
# uname -a
Linux gx151 4.19.5-1-default #1 SMP Tue Nov 27 19:56:09 UTC 2018 (6210279) i686
i686 i386 GNU/Linux

PC was working fine on 4.18.15 pae before upgrade to 20181204 that included
4.19.5 pae. With 4.19, lockups or random reboots would occur at any time,
sometimes before completion of init, other times after running X for a while,
sometimes while running in multi-user. So, I ran memtest for several hours
without erros, then installed vanilla and default kernels. Vanilla rebooted
virtually as soon as initrd loaded. Default seems to be working as well as
4.18.15-pae works at least so far through upgrade to 20181205.

Attempts to catch clues from journal proved fruitless due to journal "file
truncation".


--1544181423.F4BaC3B30.30506
Date: Fri, 7 Dec 2018 11:17:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118758

            Bug ID: 1118758
           Summary: Pleas define SYSTEMD_OFFLINE=1 when managing packages inside a chroot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

During package installations/removals/updates from within a chroot, all
attempts to contact PID1 (via systemctl {daemon-reload,start,stop,...}) by
package scriptlets should be avoided.

systemd offers an API for that "SYSTEMD_OFFLINE" which should be defined to
"1".

It would be nice if libzypp defines this variable in such scenarios.

Indeed libzypp seems a good place to do that because at least YAST, zypper and
Packagekit are linked against it.


--1544300808.84f411410.9294
Date: Sat, 8 Dec 2018 20:26:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118862

            Bug ID: 1118862
           Summary: [Snapshot 20180508] issue-generator doesn't ignore temporary files generating undesired content for /etc/issue
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: sergiolindo.empresa-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When using vim with backup enabled, files like 70-eth0.conf~ are created.
issue-generator takes also those temporary files into account, generating
undesired extra content in /run/issue -> /run/issue.


body:
Build Identifier:

Some exfat sticks never get mounted again when they were used with a MS Windows
system (VM or Phy).

mount or fsck will get ERROR: unknown entry type 0xc1.

Reproducible: Always

Steps to Reproduce:
same like:
https://github.com/relan/exfat/issues/81

The issue was fixed in 1.2.8.
But our Leap 15.0 was still shipping 1.2.7.

summary: exfat ERROR: unknown entry type 0xc1


body:
--1544442211.F5DEC0.10091
Date: Mon, 10 Dec 2018 11:43:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1118952

            Bug ID: 1118952
           Summary: AppArmor profile update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: jfehlig-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Upstream AppArmor is switching to named profiles -
    /usr/sbin/dnsmasq {
becomes
    profile dnsmasq /usr/sbin/dnsmasq {

This also means profiles referencing these profiles in a peer=... condition
need to be updated. One of them is the libvirtd profile - please send the
following patch upstream and also add it to the openSUSE packages:

-

summary: AppArmor profile update


body:
--1544442705.ECdf00.12903
Date: Mon, 10 Dec 2018 11:51:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1118953

            Bug ID: 1118953
           Summary: suse-module-tools depends on perl
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

suse-module-tools, which is deep down in the package dependency stack, depends
on perl because it contains modsign-verify, which is really only of interest
for developers of kernel module packages.

Suggested solution: move modsign-verify to the pesign-obs-integration package,
where it logically belongs anyway.

summary: suse-module-tools depends on perl


--1544523520.40Ea5E4.23147
Date: Tue, 11 Dec 2018 10:18:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119092

            Bug ID: 1119092
           Summary: llvm7: libLLVM is ABI incompatible between GCC and CLANG
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: msrb-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There is a clang-specific optimization in llvm::Optional, which makes code
compiled with gcc and clang incompatible with each other. We build libLLVM,
libclang, etc using clang, but the rest of the distribution is build using gcc.
So anything that links against libLLVM, libclang, etc may be broken.

Bug that introduced the clang-only optimization:
https://bugs.llvm.org/show_bug.cgi?id=35978

Fix (removing the optimization from everywhere):
https://reviews.llvm.org/D50710


body:
--1544607476.DFE086.17515
Date: Wed, 12 Dec 2018 09:37:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119220

            Bug ID: 1119220
           Summary: [PYTHON2] deja-dup requires python2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1071431
          Found By: ---
           Blocker: ---

deja-dup recommends python-boto and python-cloudfiles which are the python2
versions. Since deja-dup is recommended by the gnome pattern it pulls in
python2 into a default installation.

Please either fix deja-dup to not pull in python2 packages or remove deja-dup
from the gnome pattern.

summary: [PYTHON2] deja-dup requires python2


--1544607680.d4DeCA0.18945
Date: Wed, 12 Dec 2018 09:41:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119223

            Bug ID: 1119223
           Summary: [PYTHON2] mutt recommends urlscan which is python2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: werner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1119220
          Found By: ---
           Blocker: ---

urlscan as recommended by mutt is python2 based. The enhanced base pattern
recommends mutt, that means mutt pulls in python2 which we don't want in
default installation anymore.

Looks like urlscan supports python3 so please switch to using that one instead.


--1544613907.35Fdca0.2333
Date: Wed, 12 Dec 2018 11:25:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119245

            Bug ID: 1119245
           Summary: VUL-0: CVE-2018-19968, CVE-2018-19969, CVE-2018-19970: phpMyAdmin: multiple security issues fixed in 4.8.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://www.phpmyadmin.net/news/2018/12/11/security-fix-phpmyadmin-484-released/

The security fixes involve:

    Local file inclusion (https://www.phpmyadmin.net/security/PMASA-2018-6/),
    XSRF/CSRF vulnerabilities allowing a specially-crafted URL to perform
harmful operations (https://www.phpmyadmin.net/security/PMASA-2018-7/), and
    an XSS vulnerability in the navigation tree
(https://www.phpmyadmin.net/security/PMASA-2018-8/)

  - PMASA-2018-6 (CVE-2018-19968, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-6/
Local file inclusion through transformation feature
  - PMASA-2018-7 (CVE-2018-19969, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-7/
XSRF/CSRF vulnerability in phpMyAdmin
  - PMASA-2018-8 (CVE-2018-19970, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-8/
XSS vulnerability in navigation tree

In addition to the security fixes, this release also includes these bug fixes
and more as part of our regular release cycle:

    Issue with changing theme
    Ensure that database names with a dot ('.') are handled properly when
DisableIS is true
    Fix for message "Error while copying database (pma__column_info)"
    Move operation causes "SELECT * FROM `undefined`" error
    When logging with $cfg['AuthLog'] to syslog, successful login messages were
not logged when $cfg['AuthLogSuccess'] was true
    Multiple errors and regressions with Designer

https://build.opensuse.org/request/show/657511


body:
--1544638967.DD7AC50e0.23514
Date: Wed, 12 Dec 2018 18:22:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119302

            Bug ID: 1119302
           Summary: mc sftp fails (midnight commander)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jon-at-moozaad.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

http://midnight-commander.org/ticket/3406 This is now fixed.

Can we get a minor version increase or a patch please?

summary: mc sftp fails (midnight commander)


--1544690741.ba4Dc10.18929
Date: Thu, 13 Dec 2018 08:45:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119364

            Bug ID: 1119364
           Summary: VUL-0: CVE-2018-17481: chromium:  Use after free in PDFium (additional fixes in 71.0.3578.98)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop_12.html

Stable Channel Update for Desktop - 71.0.3578.98

- CVE-2018-17481: Use after free in PDFium

(This issue was first addressed in the initial Stable release of Chrome 70, but
received additional fixes in this release)


body:
--1544698671.6168B6.19445
Date: Thu, 13 Dec 2018 10:57:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119378

            Bug ID: 1119378
           Summary: Define labels for openSUSE containers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dleuenberger-at-suse.com, fvogt-at-suse.com
          Found By: ---
           Blocker: ---

We need to define and document the label hierarchy for openSUSE containers.

openSUSE base containers
openSUSE Kubic containers
Additional derived containers

summary: Define labels for openSUSE containers


body:
--1544708957.Fa16157F0.31019
Date: Thu, 13 Dec 2018 13:49:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119396

            Bug ID: 1119396
           Summary: Enable php7 testsuite
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mpluskal-at-suse.com
          Reporter: mpluskal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Lets enable php7 testsuite to be executed during build time:
* lets check build times first though
* compress and bundle test log

summary: Enable php7 testsuite


--1544816145.A6eEe750.32498
Date: Fri, 14 Dec 2018 19:35:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119580

            Bug ID: 1119580
           Summary: Frescobaldi doesn't start; probably bug in python-poppler-qt5 or python3-poppler-qt5
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: j.reitsma-at-hccnet.nl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Having installed the latest TW release, frescobaldi (v. 3.0.0-2.1 from TW repo)
does not start.

When started from the terminal, I get
===========================================================================
`Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/frescobaldi_app/plugin.py", line 79, in
instance
return _instances[cls][obj]
File "/usr/lib64/python3.6/weakref.py", line 394, in getitem
return self.data[ref(key)]
KeyError: <weakref at 0x7f183c099868; to 'type' at 0x55e9db06e8b8
(PanelManager)>

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/bin/frescobaldi", line 11, in
main.main() # Parse command line, create windows etc
File "/usr/lib/python3.6/site-packages/frescobaldi_app/main.py", line 247, in
main
win = mainwindow.MainWindow()
File "/usr/lib/python3.6/site-packages/frescobaldi_app/mainwindow.py", line
128, in init
self.createMenus()
File "/usr/lib/python3.6/site-packages/frescobaldi_app/mainwindow.py", line
1010, in createMenus
menu.createMenus(self)
File "/usr/lib/python3.6/site-packages/frescobaldi_app/menu.py", line 61, in
createMenus
m.addMenu(menu_file(mainwindow))
File "/usr/lib/python3.6/site-packages/frescobaldi_app/menu.py", line 96, in
menu_file
m.addMenu(snippet.menu.TemplateMenu(mainwindow))
File "/usr/lib/python3.6/site-packages/frescobaldi_app/snippet/menu.py", line
139, in init
self.addAction(self.tool().actionCollection.templates_manage)
File "/usr/lib/python3.6/site-packages/frescobaldi_app/snippet/menu.py", line
59, in tool
return panelmanager.manager(self.mainwindow()).snippettool
File "/usr/lib/python3.6/site-packages/frescobaldi_app/panelmanager.py", line
36, in manager
return PanelManager.instance(mainwindow)
File "/usr/lib/python3.6/site-packages/frescobaldi_app/plugin.py", line 84, in
instance
result.init(obj)
File "/usr/lib/python3.6/site-packages/frescobaldi_app/panelmanager.py", line
51, in init
self.loadPanel("musicview.MusicViewPanel")
File "/usr/lib/python3.6/site-packages/frescobaldi_app/panelmanager.py", line
86, in loadPanel
import(module_name)
File "/usr/lib/python3.6/site-packages/frescobaldi_app/musicview/init.py", line
56, in
from . import documents
File "/usr/lib/python3.6/site-packages/frescobaldi_app/musicview/documents.py",
line 32, in
import popplerqt5
ValueError: PyCapsule_GetPointer called with incorrect name
==================================================================

According to the upstream maintainers of frescobaldi, "The problem is known and
reoccurs every now and then, the problem is that one of the dependency packages
(python-poppler-qt5 or python3-poppler-qt5) is not correctly recompiled against
the correct Qt version. So the issue becomes visible when Qt is updated in the
distribution but python-poppler-qt5 is not."


--1544838869.BB5A4D00.15658
Date: Sat, 15 Dec 2018 01:54:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119619

            Bug ID: 1119619
           Summary: certbot does not renew certificates (again)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jimc-at-math.ucla.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Formerly I had python-certbot-0.26.1-1.1.noarch and it could
renew certs.  Now I have
python3-certbot-0.28.0-2.1.noarch on OpenSuSE Tumbleweed VERSION="20181208"
This is the one with the dependency on python-mock restored/added.
It says "No renewals were attempted"  on both of my hosts that use certbot.
I tracked this down to a (non) migration issue: formerly the state dir
was /etc/certbot but now it is /etc/letsencrypt, which of course contains
no lineages, so no renewals were attempted.

Workaround:
mv /etc/letsencrypt /etc/letsencrypt.empty
mv /etc/certbot /etc/letsencrypt
ln -s letsencrypt certbot
The symlink is so explicit filenames in config files, or symlinks in e.g.
/etc/openssl/private, will still find the cert and key until I locate
and fix them.  Tested: my Apache webserver still can authenticate using
the (not quite expired) old cert.  I ran "certbot renew", its webroot
challenges were acceptable (despite some DNAT stuff), and the report was:
Congratulations, all renewals succeeded... (list of 1 renewed cert).
Testing: the webserver successfully uses the new cert.

By the way, old logs are in /var/log/certbot which is still there but is
supplanted by /var/log/letsencrypt.

It would be nice if the python3-certbot and python2-certbot packages
had a migration script for users who are having trouble figuring out
why their certs are not being renewed.

I'm not sure whether migration scripts in packages should be reported
upstream, or to the distro; if the former, let me know and I'll open a
ticket upstream.  Also I set the component to "security" since the X.509
certificate's purpose is security, but if a different component would
be more appropriate please feel free to change it.


--1544870068.F2F1e0.5233
Date: Sat, 15 Dec 2018 10:34:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119629

            Bug ID: 1119629
           Summary: cyrus-imapd.service contains bogus User and Group specification
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: janlin-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since recently, the cyrus-imapd package contains a native systemd unit file,
/usr/lib/systemd/system/cyrus-imapd.service, replacing the auto-generated
/run/systemd/generator.late/cyrus.service. As opposed to the latter, the native
service specifies the daemon process's user as cyrus and the group as mail.
That's broken, since it's the master daemon's own business to setuid() to the
daemon user, not systemd's. The master has to open protected ports (imap, 143,
among others) before setuid(), and fails if it runs as cyrus:

  master[1372]: unable to create imap listener socket: Permission denied

This is on cyrus-imapd-2.4.19-6.1.x86_64@tumbleweed. Works fine if User= and
Group= are omitted from the unit file.


--1544877708.5573cC4.9762
Date: Sat, 15 Dec 2018 12:41:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119634

            Bug ID: 1119634
           Summary: go: multi-version installation is broken on version switch
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The way that multi-version Go works on openSUSE is through update-alternatives.
One aspect of this is a profile.d script that sets GOROOT= to the current
version. This means that changing the Go version will make GOROOT incorrect in
the current login session


--1545032014.8BAF4119.1558
Date: Mon, 17 Dec 2018 07:33:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119674

            Bug ID: 1119674
           Summary: %fdupes macro breaks on spaces in file names
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: peter.simons-at-suse.com
          Reporter: sebastian.parschauer-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: werner-at-suse.com
          Found By: L3
           Blocker: ---

Long time ago there was a similar bug with bug 307727 already.

On Leap 15.0 it is hitting the game endless-sky. See bug 1119628 comment 6:

Broken symlinks created by fdupes in /usr/share/endless-sky:
./images/projectile/finisher-0.png -> finisher

"finisher-0.png" is equal to "finisher activating-1.png"

So fdupes is not able to handle spaces in paths properly (once again).

@Peter or Werner: Can you please have a look at this? TIA


body:
--1545039533.e4bb6e6e0.17982
Date: Mon, 17 Dec 2018 09:38:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119686

            Bug ID: 1119686
           Summary: python-sphinx alias broken in TW
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: peter.simons-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/show/devel:languages:haskell:ghc-8.6.x/ghc
stopped building recently and became "unresolvable", because of the following
error:

> nothing provides python2-sphinxcontrib needed by python2-Sphinx

The spec file depends on "python-sphinx", which gets resolved to
"python2-Sphinx", I suppose? It looks like that build is broken in TW, but for
all I know the issue could also be with the way the version-less name is
resolved on OBS.

summary: python-sphinx alias broken in TW


--1545045949.2A180.27586
Date: Mon, 17 Dec 2018 11:25:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119706

            Bug ID: 1119706
           Summary: go get broken for   import path patterns containing "..."
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jmassaguerpla-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Go 1.11.3 and go 1.10.6 introduced a bug that broke go get for
  import path patterns containing "...".

See the Go 1.11.4 milestone on our
  issue tracker for details.

https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved

See the Go 1.10.7 milestone on upstream issue tracker for details.

https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards
("...")


--1545050774.eBbcB60.21881
Date: Mon, 17 Dec 2018 12:46:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119713

            Bug ID: 1119713
           Summary: kubectl should be same version as supported SUSE CaaS Platform
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: otuominen-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

kubectl which is provided from repo is lacking behind of SUSE CaaS Platform
which is in v1.10.11 version atm. kubectl should be same as supported CaaS
Platform.

kubectl version
Client Version: version.Info{Major:"1", Minor:"9", GitVersion:"v1.9.8",
GitCommit:"c138b85178156011dc934c2c9f4837476876fb07", GitTreeState:"clean",
BuildDate:"2018-07-19T12:00:00Z", GoVersion:"go1.9.7", Compiler:"gc",
Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.11",
GitCommit:"637c7e288581ee40ab4ca210618a89a555b6e7e9", GitTreeState:"clean",
BuildDate:"2018-12-05T09:28:01Z", GoVersion:"go1.9.7", Compiler:"gc",
Platform:"linux/amd64"}

Repository     : openSUSE-Leap-15.0-Update
Name           : kubectl
Version        : 1.9.8-lp150.3.1


body:
Build Identifier:

The driver included with the latest OpenSuse 15.0 does not work with newer
Realtek 8152 USB networking cards. Realtek has an updated driver on their
website which fixes this. I just bought two docking stations for my laptop, and
neither works without this updated driver.[142872.262780] usb 4-1.1: new
SuperSpeed USB device number 3 using xhci_hcd
[142872.283157] usb 4-1.1: New USB device found, idVendor=0bda, idProduct=8153
[142872.283159] usb 4-1.1: New USB device strings: Mfr=1, Product=2,
SerialNumber=6
[142872.283160] usb 4-1.1: Product: USB 10/100/1000 LAN
[142872.283161] usb 4-1.1: Manufacturer: Realtek
[142872.283161] usb 4-1.1: SerialNumber: 001000001
[142872.305009] r8152 4-1.1:2.0: Unknown version 0x6010

lsusb -v -v -s 1:6

Bus 001 Device 006: ID 0bda:58c2 Realtek Semiconductor Corp.
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass          239 Miscellaneous Device
  bDeviceSubClass         2
  bDeviceProtocol         1 Interface Association
  bMaxPacketSize0        64
  idVendor           0x0bda Realtek Semiconductor Corp.
  idProduct          0x58c2
  bcdDevice           62.02
  iManufacturer           3 CN0JCXG0724876ANB0VPA00
  iProduct                1 Integrated_Webcam_HD
  iSerial                 2 200901010001
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength          779
    bNumInterfaces          2
    bConfigurationValue     1
    iConfiguration          4 USB Camera
    bmAttributes         0x80
      (Bus Powered)
    MaxPower              500mA
    ** UNRECOGNIZED:  28 ff 42 49 53 54 00 01 06 07 10 00 00 00 00 00 01 08 f4
01 02 09 f4 01 03 0a f4 01 04 0b f4 01 05 0c f4 01 06 0d e8 03
    Interface Association:
      bLength                 8
      bDescriptorType        11
      bFirstInterface         0
      bInterfaceCount         2
      bFunctionClass         14 Video
      bFunctionSubClass       3 Video Interface Collection
      bFunctionProtocol       0
      iFunction               5 Integrated Webcam
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      1 Video Control
      bInterfaceProtocol      0
      iInterface              5 Integrated Webcam
      VideoControl Interface Descriptor:
        bLength                13
        bDescriptorType        36
        bDescriptorSubtype      1 (HEADER)
        bcdUVC               1.00
        wTotalLength          107
        dwClockFrequency       15.000000MHz
        bInCollection           1
        baInterfaceNr( 0)       1
      VideoControl Interface Descriptor:
        bLength                18
        bDescriptorType        36
        bDescriptorSubtype      2 (INPUT_TERMINAL)
        bTerminalID             1
        wTerminalType      0x0201 Camera Sensor
        bAssocTerminal          0
        iTerminal               0
        wObjectiveFocalLengthMin      0
        wObjectiveFocalLengthMax      0
        wOcularFocalLength            0
        bControlSize                  3
        bmControls           0x0000000a
          Auto-Exposure Mode
          Exposure Time (Absolute)
      VideoControl Interface Descriptor:
        bLength                11
        bDescriptorType        36
        bDescriptorSubtype      5 (PROCESSING_UNIT)
      Warning: Descriptor too short
        bUnitID                 2
        bSourceID               1
        wMaxMultiplier          0
        bControlSize            2
        bmControls     0x0000177f
          Brightness
          Contrast
          Hue
          Saturation
          Sharpness
          Gamma
          White Balance Temperature
          Backlight Compensation
          Gain
          Power Line Frequency
          White Balance Temperature, Auto
        iProcessing             0
        bmVideoStandards     0x 9
          None
          SECAM - 625/50
      VideoControl Interface Descriptor:
        bLength                 9
        bDescriptorType        36
        bDescriptorSubtype      3 (OUTPUT_TERMINAL)
        bTerminalID             3
        wTerminalType      0x0101 USB Streaming
        bAssocTerminal          0
        bSourceID               4
        iTerminal               0
      VideoControl Interface Descriptor:
        bLength                27
        bDescriptorType        36
        bDescriptorSubtype      6 (EXTENSION_UNIT)
        bUnitID                 4
        guidExtensionCode         {8ca72912-b447-9440-b0ce-db07386fb938}
        bNumControl             2
        bNrPins                 1
        baSourceID( 0)          7
        bControlSize            2
        bmControls( 0)       0x00
        bmControls( 1)       0x06
        iExtension              0
      VideoControl Interface Descriptor:
        bLength                29
        bDescriptorType        36
        bDescriptorSubtype      6 (EXTENSION_UNIT)
        bUnitID                 7
        guidExtensionCode         {c385b80f-c268-4745-90f7-8f47579d95fc}
        bNumControl             0
        bNrPins                 1
        baSourceID( 0)          2
        bControlSize            4
        bmControls( 0)       0x0f
        bmControls( 1)       0x00
        bmControls( 2)       0x00
        bmControls( 3)       0x00
        iExtension              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0010  1x 16 bytes
        bInterval               6
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      VideoStreaming Interface Descriptor:
        bLength                            15
        bDescriptorType                    36
        bDescriptorSubtype                  1 (INPUT_HEADER)
        bNumFormats                         2
        wTotalLength                      473
        bEndPointAddress                  129
        bmInfo                              0
        bTerminalLink                       3
        bStillCaptureMethod                 2
        bTriggerSupport                     1
        bTriggerUsage                       0
        bControlSize                        1
        bmaControls( 0)                    11
        bmaControls( 1)                    11
      VideoStreaming Interface Descriptor:
        bLength                            11
        bDescriptorType                    36
        bDescriptorSubtype                  6 (FORMAT_MJPEG)
        bFormatIndex                        1
        bNumFrameDescriptors                4
        bFlags                              1
          Fixed-size samples: Yes
        bDefaultFrameIndex                  1
        bAspectRatioX                       0
        bAspectRatioY                       0
        bmInterlaceFlags                 0x00
          Interlaced stream or variable: No
          Fields per frame: 1 fields
          Field 1 first: No
          Field pattern: Field 1 only
          bCopyProtect                      0
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  7 (FRAME_MJPEG)
        bFrameIndex                         1
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                           1280
        wHeight                           720
        dwMinBitRate                442368000
        dwMaxBitRate                442368000
        dwMaxVideoFrameBufferSize     1843200
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  7 (FRAME_MJPEG)
        bFrameIndex                         2
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            960
        wHeight                           540
        dwMinBitRate                248832000
        dwMaxBitRate                248832000
        dwMaxVideoFrameBufferSize     1036800
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  7 (FRAME_MJPEG)
        bFrameIndex                         3
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            848
        wHeight                           480
        dwMinBitRate                195379200
        dwMaxBitRate                195379200
        dwMaxVideoFrameBufferSize      814080
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  7 (FRAME_MJPEG)
        bFrameIndex                         4
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                           1280
        wHeight                           720
        dwMinBitRate                442368000
        dwMaxBitRate                442368000
        dwMaxVideoFrameBufferSize     1843200
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            18
        bDescriptorType                    36
        bDescriptorSubtype                  3 (STILL_IMAGE_FRAME)
        bEndpointAddress                    0
        bNumImageSizePatterns               3
        wWidth( 0)                       1280
        wHeight( 0)                       720
        wWidth( 1)                        960
        wHeight( 1)                       540
        wWidth( 2)                        848
        wHeight( 2)                       480
        bNumCompressionPatterns             3
      VideoStreaming Interface Descriptor:
        bLength                             6
        bDescriptorType                    36
        bDescriptorSubtype                 13 (COLORFORMAT)
        bColorPrimaries                     1 (BT.709,sRGB)
        bTransferCharacteristics            1 (BT.709)
        bMatrixCoefficients                 4 (SMPTE 170M (BT.601))
      VideoStreaming Interface Descriptor:
        bLength                            27
        bDescriptorType                    36
        bDescriptorSubtype                  4 (FORMAT_UNCOMPRESSED)
        bFormatIndex                        2
        bNumFrameDescriptors                8
        guidFormat
{59555932-0000-1000-8000-00aa00389b71}
        bBitsPerPixel                      16
        bDefaultFrameIndex                  1
        bAspectRatioX                       0
        bAspectRatioY                       0
        bmInterlaceFlags                 0x00
          Interlaced stream or variable: No
          Fields per frame: 2 fields
          Field 1 first: No
          Field pattern: Field 1 only
          bCopyProtect                      0
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         1
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            340
        wHeight                           340
        dwMinBitRate                 55488000
        dwMaxBitRate                 55488000
        dwMaxVideoFrameBufferSize      231200
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         2
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            640
        wHeight                           480
        dwMinBitRate                147456000
        dwMaxBitRate                147456000
        dwMaxVideoFrameBufferSize      614400
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         3
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            640
        wHeight                           360
        dwMinBitRate                110592000
        dwMaxBitRate                110592000
        dwMaxVideoFrameBufferSize      460800
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         4
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            424
        wHeight                           240
        dwMinBitRate                 48844800
        dwMaxBitRate                 48844800
        dwMaxVideoFrameBufferSize      203520
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         5
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            320
        wHeight                           240
        dwMinBitRate                 36864000
        dwMaxBitRate                 36864000
        dwMaxVideoFrameBufferSize      153600
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         6
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            320
        wHeight                           180
        dwMinBitRate                 27648000
        dwMaxBitRate                 27648000
        dwMaxVideoFrameBufferSize      115200
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         7
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            160
        wHeight                           120
        dwMinBitRate                  9216000
        dwMaxBitRate                  9216000
        dwMaxVideoFrameBufferSize       38400
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  5 (FRAME_UNCOMPRESSED)
        bFrameIndex                         8
        bmCapabilities                   0x00
          Still image unsupported
        wWidth                            340
        wHeight                           340
        dwMinBitRate                 55488000
        dwMaxBitRate                 55488000
        dwMaxVideoFrameBufferSize      231200
        dwDefaultFrameInterval         333333
        bFrameIntervalType                  1
        dwFrameInterval( 0)            333333
      VideoStreaming Interface Descriptor:
        bLength                            30
        bDescriptorType                    36
        bDescriptorSubtype                  3 (STILL_IMAGE_FRAME)
        bEndpointAddress                    0
        bNumImageSizePatterns               6
        wWidth( 0)                        640
        wHeight( 0)                       480
        wWidth( 1)                        640
        wHeight( 1)                       360
        wWidth( 2)                        424
        wHeight( 2)                       240
        wWidth( 3)                        320
        wHeight( 3)                       240
        wWidth( 4)                        320
        wHeight( 4)                       180
        wWidth( 5)                        160
        wHeight( 5)                       120
        bNumCompressionPatterns             6
      VideoStreaming Interface Descriptor:
        bLength                             6
        bDescriptorType                    36
        bDescriptorSubtype                 13 (COLORFORMAT)
        bColorPrimaries                     1 (BT.709,sRGB)
        bTransferCharacteristics            1 (BT.709)
        bMatrixCoefficients                 4 (SMPTE 170M (BT.601))
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       1
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x0080  1x 128 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       2
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       3
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x0400  1x 1024 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       4
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x0b00  2x 768 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       5
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x0c00  2x 1024 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       6
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x1380  3x 896 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       7
      bNumEndpoints           1
      bInterfaceClass        14 Video
      bInterfaceSubClass      2 Video Streaming
      bInterfaceProtocol      0
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x1400  3x 1024 bytes
        bInterval               1
Device Qualifier (for other device speed):
  bLength                10
  bDescriptorType         6
  bcdUSB               2.00
  bDeviceClass          239 Miscellaneous Device
  bDeviceSubClass         2
  bDeviceProtocol         1 Interface Association
  bMaxPacketSize0        64
  bNumConfigurations      1
can't get debug descriptor: Resource temporarily unavailable
Device Status:     0x0000
  (Bus Powered)

After compiling and installing the new Realtek driver it works fine.

These are the two docking stations I bought:
https://smile.amazon.com/gp/product/B07KSXG1G3/ref=oh_aui_detailpage_o02_s00?ie=UTF8&psc=1
https://smile.amazon.com/gp/product/B07G23YMGN/ref=oh_aui_detailpage_o02_s00?ie=UTF8&psc=1

The driver can be downloaded from Realtek following this URL:
https://www.realtek.com/en/component/zoo/category/network-interface-controllers-10-100-1000m-gigabit-ethernet-usb-3-0-software
They require an email address to get the download link and entering a Captcha.

Reproducible: Always

Steps to Reproduce:
1. Plug in new USB C dock with network port
2. See that it isn't supported
3.

Expected Results:
I expect it to work.

summary: Please upgrade Realtek r8152 driver


--1545117336.a15Be6Ff0.12240
Date: Tue, 18 Dec 2018 07:15:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119785

            Bug ID: 1119785
           Summary: VUL-1: CVE-2018-18247:  icingaweb2: XSS via /icingaweb2/navigation/add
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221287/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: ecsos-at-schirra.net
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-18247

Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon
parameter.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18247
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18247.html


--1545118223.bc08C650.17675
Date: Tue, 18 Dec 2018 07:30:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119789

            Bug ID: 1119789
           Summary: VUL-1: CVE-2018-20190: libsass: NULL ptr deref in Sass::Eval::operator()(Sass::Supports_Operator*)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221276/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: cbosdonnat-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20190

In LibSass 3.5.5, a NULL Pointer Dereference in the function
Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a
Denial of Service (application crash) via a crafted sass input file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20190
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20190.html
http://www.cvedetails.com/cve/CVE-2018-20190/


--1545125580.e0F20.30441
Date: Tue, 18 Dec 2018 09:33:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119799

            Bug ID: 1119799
           Summary: VUL-1: CVE-2018-18249: icingaweb2: injection of PHP ini-file directives involves environment variables as channel to send out information
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221290/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-18249

Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via
vectors involving environment variables as the channel to send information
to the attacker, such as a
name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to
/icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18249
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18249.html


--1545125844.5378d30.31241
Date: Tue, 18 Dec 2018 09:37:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119800

            Bug ID: 1119800
           Summary: VUL-1: CVE-2018-18250: icingaweb2: parameters can break navigation dashlets
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221285/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-18250

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets,
as demonstrated by a single '$' character as the Name of a Navigation item.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18250
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18250.html


--1545126078.43C6D0.1410
Date: Tue, 18 Dec 2018 09:41:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119801

            Bug ID: 1119801
           Summary: VUL-1: CVE-2018-18248: isingaweb2: an XSS attack is possible via query strings or a dir parameter
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221284/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-18248

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir
parameter, the /icingaweb2/user/list query string, the
/icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup
query string.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18248
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18248.html


--1545154293.03b5E0.13588
Date: Tue, 18 Dec 2018 17:31:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119873

            Bug ID: 1119873
           Summary: zypper search: inconsistent results for `-t package kernel-default` vs `package:kernel-default`
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: ma-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

zypper 1.14.18
zypper search `-t package kernel-default` vs `package:kernel-default`

Both forms should be equivalent, but while `-t package` as expected lists just
packages, `package:kernel-default` also includes srcpackages.


--1545172304.b1FAa1B0.28443
Date: Tue, 18 Dec 2018 22:31:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119897

            Bug ID: 1119897
           Summary: multipath-tools: path group prio displayed incorrectly
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

"multipathd show topology" always prints path group priority "0" for all path
groups. This is caused by an upstream bug.


--1545172469.2b2C1d60.29204
Date: Tue, 18 Dec 2018 22:34:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119898

            Bug ID: 1119898
           Summary: multipath-tools: ANA information missing for NVMe maps
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

multipath doesn't have any support for NVMe ANA. It allows deriving path
priorities like ALUA.

A patch series for this is in preparation.


--1545214029.782c10.8221
Date: Wed, 19 Dec 2018 10:07:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1119937

            Bug ID: 1119937
           Summary: apparmor sendmsg denied / nfs: rpc call returned error 13
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: per-at-computer.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have just 30mins ago updated a webserver which is on Leap15 on nfs
root on real iron. Now I'm seeing an increasing number of $SUBJ.
Kernel is the latest, 4.12.14-lp150.12.28-default.

A simple thing such as :

# less srv003057/logs/access-log-20181206.gz
/usr/bin/lessopen.sh: line 31: mktemp: command not found
"srv003057/logs/access-log-20181206.gz" may be a binary file. See it
anyway?

or

# less srv003057/logs/access-log-20181206.gz
/usr/bin/lessopen.sh: line 14: /usr/bin/grep: Permission denied
/usr/bin/lessopen.sh: line 31: mktemp: command not found

grep and mktemp are both present, but $SUBJ gets in the way.
The NFS server was not changed, it's quite ancient.

It looks like this happens with kernel 4.12.14-lp150.12.28 and
4.12.14-lp150.12.25, but with 4.12.14-lp150.12.16 there is no problem.

Apparmor ?

Yes indeed -

type=AVC msg=audit(1545211515.082:140): apparmor="DENIED" operation="sendmsg"
profile="/usr/bin/lessopen.sh" pid=4077 comm="lessopen.sh" laddr=10.42.8.240
lport=980 faddr=10.42.8.254 fport=2049 family="inet" sock_type="stream"
protocol=6
type=AVC msg=audit(1545211515.082:141): apparmor="DENIED" operation="sendmsg"
profile="/usr/bin/lessopen.sh" pid=4077 comm="lessopen.sh" laddr=10.42.8.240
lport=980 faddr=10.42.8.254 fport=2049 family="inet" sock_type="stream"
protocol=6

type=AVC msg=audit(1545210738.216:264): apparmor="DENIED" operation="sendmsg"
profile="/usr/bin/lessopen.sh" pid=5074 comm="grep" laddr=10.42.8.240 lport=795
faddr=10.42.8.254 fport=2049 family="inet" sock_type="stream" protocol=6
type=AVC msg=audit(1545210738.216:265): apparmor="DENIED" operation="sendmsg"
profile="/usr/bin/lessopen.sh" pid=5074 comm="grep" laddr=10.42.8.240 lport=795
faddr=10.42.8.254 fport=2049 family="inet" sock_type="stream" protocol=6

I guess this "sendmsg" restriction is new in the most recent kernels?

See also https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499


--1545223717.5aFcC0df3.25051
Date: Wed, 19 Dec 2018 12:48:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1119962

            Bug ID: 1119962
           Summary: mm: put_and_wait_on_page_locked() while page is migrated: breaks ksm
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: s.priebe-at-profihost.ag
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

Commit: 204599c0178d3c863a82995da67a6c2248f2d040 introduces the patch
patches.fixes/mm-put_and_wait_on_page_locked-while-page-is-migrated.patch which
breaks ksm while running kvm.

Crash and trace:
2018-12-18 12:43:05     list_del corruption. prev->next should be
ffffeed8f47fffe0, but was ffffeed8f46b0020
2018-12-18 12:43:05     ------------[ cut here ]------------
2018-12-18 12:43:05     kernel BUG at lib/list_debug.c:53!
2018-12-18 12:43:05     invalid opcode: 0000 [#1] SMP PTI
2018-12-18 12:43:05     CPU: 9 PID: 410 Comm: ksmd Tainted: G
4.12.0+134-ph #1 SLE15 (unreleased)
2018-12-18 12:43:05     Hardware name: Dell Inc. PowerEdge
R740xd/01KPX8, BIOS 1.5.6 10/17/2018
2018-12-18 12:43:05     task: ffff9b387f8b8d40 task.stack: ffffb5c3998a0000
2018-12-18 12:43:05     RIP: 0010:__list_del_entry_valid+0x70/0x90
2018-12-18 12:43:05     RSP: 0018:ffffb5c3998a3dc8 EFLAGS: 00010092
2018-12-18 12:43:05     RAX: 0000000000000054 RBX: ffffeed8f47fffc0 RCX:
000000000000083f
2018-12-18 12:43:05     RDX: 0000000000000000 RSI: 00000000000000f6 RDI:
000000000000083f
2018-12-18 12:43:05     RBP: ffff9bba7f1253d8 R08: 0000000000000001 R09:
00000000000005dc
2018-12-18 12:43:05     R10: ffff9b3763be0000 R11: 0000000000000040 R12:
0000000000000033
2018-12-18 12:43:05     R13: ffffeed8f47fffe0 R14: ffff9bba7f1253f8 R15:
0000000000000033
2018-12-18 12:43:05     FS: 0000000000000000(0000)
GS:ffff9bba7f100000(0000) knlGS:0000000000000000
2018-12-18 12:43:05     CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2018-12-18 12:43:05     CR2: 00007f4d9de4e000 CR3: 000000f8c600a001 CR4:
00000000007626e0
2018-12-18 12:43:05     DR0: 0000000000000000 DR1: 0000000000000000 DR2:
0000000000000000
2018-12-18 12:43:05     DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
0000000000000400
2018-12-18 12:43:05     PKRU: 55555554
2018-12-18 12:43:05     Call
Trace:free_pcppages_bulk+0x144/0x5c0free_unref_page+0x54/0x70ksm_scan_thread+0x679/0x1360
2018-12-18 12:43:05     ? remove_wait_queue+0x60/0x60kthread+0xff/0x130
2018-12-18 12:43:05     ? try_to_merge_with_ksm_page+0x90/0x90
2018-12-18 12:43:05     ?
kthread_create_on_node+0x40/0x40ret_from_fork+0x1f/0x40
2018-12-18 12:43:05     Code: 70 f9 e3 bc e8 96 ba d3 ff 0f 0b 48 89 fe
48 c7 c7 a8 f9 e3 bc e8 85 ba d3 ff 0f 0b 48 89 fe 48 c7 c7 e0 f9 e3 bc
e8 74 ba d3 ff <0f> 0b 48 89 fe 48 c7 c7 20 fa e3 bc e8 63 ba d3 ff 0f
0b 66 2e
2018-12-18 12:43:05     Modules linked in: act_police(N) cls_basic(N)
sch_ingress(N) sch_htb(N) netconsole(N) ebtable_filter(N) ebtables(N)
ip6t_REJECT(N) nf_reject_ipv6(N) nf_conntrack_ipv6(N) nf_defrag_ipv6(N)
ip6table_filter(N) ip6_tables(N) xt_physdev(N) xt_comment(N)
nf_conntrack_ipv4(N) nf_defrag_ipv4(N) xt_tcpudp(N) xt_mark(N)
xt_addrtype(N) xt_conntrack(N) nf_conntrack(N) xt_multiport(N)
ipt_REJECT(N) nf_reject_ipv4(N) xt_set(N) ip_set_hash_net(N) ip_set(N)
iptable_filter(N) 8021q(N) garp(N) bonding(N) fuse(N) softdog(N)
nfnetlink_log(N) nfnetlink(N) skx_edac(N) x86_pkg_temp_thermal(N)
coretemp(N) dcdbas(N) tcp_htcp(N) sch_fq_codel(N) kvm_intel(N) kvm(N)
irqbypass(N) crc32_pclmul(N) ghash_clmulni_intel(N) mgag200(N) ttm(N)
drm_kms_helper(N) sg(N) drm(N) drm_panel_orientation_quirks(N)
fb_sys_fops(N)
2018-12-18 12:43:05     syscopyarea(N) sysfillrect(N) sysimgblt(N)
i2c_algo_bit(N) lpc_ich(N) shpchp(N) mfd_core(N) ipmi_si(N)
ipmi_devintf(N) ipmi_msghandler(N) button(N) vhost_net(N) tun(N)
vhost(N) tap(N) ip_tables(N) x_tables(N) btrfs(N) zstd_decompress(N)
zstd_compress(N) xxhash(N) raid10(N) raid456(N) async_raid6_recov(N)
async_memcpy(N) async_pq(N) async_xor(N) async_tx(N) xor(N) raid6_pq(N)
raid0(N) multipath(N) linear(N) raid1(N) md_mod(N) sd_mod(N) mpt3sas(N)
raid_class(N) scsi_transport_sas(N) mlx5_core(N) devlink(N) ptp(N)
xhci_pci(N) i2c_i801(N) pps_core(N) xhci_hcd(N) ahci(N) i2c_core(N)
usbcore(N) libahci(N) usb_common(N)
2018-12-18 12:43:05     Supported: No, Unreleased kernel
2018-12-18 12:43:05     ---[ end trace 53035a07bb3e17c9 ]---
2018-12-18 12:43:05     RIP: 0010:__list_del_entry_valid+0x70/0x90
2018-12-18 12:43:05     RSP: 0018:ffffb5c3998a3dc8 EFLAGS: 00010092
2018-12-18 12:43:05     RAX: 0000000000000054 RBX: ffffeed8f47fffc0 RCX:
000000000000083f
2018-12-18 12:43:05     RDX: 0000000000000000 RSI: 00000000000000f6 RDI:
000000000000083f
2018-12-18 12:43:05     RBP: ffff9bba7f1253d8 R08: 0000000000000001 R09:
00000000000005dc
2018-12-18 12:43:05     R10: ffff9b3763be0000 R11: 0000000000000040 R12:
0000000000000033
2018-12-18 12:43:05     R13: ffffeed8f47fffe0 R14: ffff9bba7f1253f8 R15:
0000000000000033
2018-12-18 12:43:05     FS: 0000000000000000(0000)
GS:ffff9bba7f100000(0000) knlGS:0000000000000000
2018-12-18 12:43:05     CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2018-12-18 12:43:05     CR2: 00007f4d9de4e000 CR3: 000000f8c600a001 CR4:
00000000007626e0
2018-12-18 12:43:05     DR0: 0000000000000000 DR1: 0000000000000000 DR2:
0000000000000000
2018-12-18 12:43:05     DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
0000000000000400
2018-12-18 12:43:05     PKRU: 55555554
2018-12-18 12:43:05     Kernel panic - not syncing: Fatal exception
2018-12-18 12:43:05     Kernel Offset: 0x3b000000 from
0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

After reverting that commit everything is working fine.

Greets,
Stefan


--1545302398.00A00.30641
Date: Thu, 20 Dec 2018 10:39:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120061

            Bug ID: 1120061
           Summary: VUL-1: CVE-2018-20230: pspp: a heap-based buffer overflow in read_bytes_internal can cause DOS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221456/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: opensuse.lietuviu.kalba-at-gmail.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer
overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c,
which allows attackers to cause a denial of service (application crash) or
possibly have unspecified other impact.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20230
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20230.html
http://www.cvedetails.com/cve/CVE-2018-20230/
https://bugzilla.redhat.com/show_bug.cgi?id=1660318


body:
--1545317271.4a1c4aFE11.8670
Date: Thu, 20 Dec 2018 14:47:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120090

            Bug ID: 1120090
           Summary: Flickering screen since 20181214
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: dutchkind-at-txoriaskea.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After I upgraded to the latest Tumbleweed version 20181214 with a lot of Mesa
and Plasma packages, my system has become unusable. Plasma opens with a heavy
flickering screen, after a while it becomes readable but whenever I try to open
something it is immediately covered by black squares. Right now I am in IceWM,
the only way yo do something. Plasma Wayland starts nicely but none of the
browsers is starting (cannot connect to display :1) so also not an option.
I was able to run journalctl in terminal 1 and it was filled with
kscreen.xcb.helper with new states detected for backlight and other xcb
messages. Any hope for a solution?

summary: Flickering screen since 20181214


body:
--1545321450.7aF88120.29783
Date: Thu, 20 Dec 2018 15:57:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120098

            Bug ID: 1120098
           Summary: Clang 7 packaging is inconsistent
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: aaronpuchert@alice-dsl.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In llvm7.spec, the Clang binaries are renamed:

# Fix the clang -> clang-X.Y symlink to work with update-alternatives
mv %{buildroot}%{_bindir}/clang-%{_sonum} %{buildroot}%{_bindir}/clang
ln -s %{_bindir}/clang-%{_relver} %{buildroot}%{_bindir}/clang-%{_minor}

but the installed CMake files (in /usr/lib64/cmake/clang/) aren't changed
accordingly. This makes it hard to build software that uses libclang. (I came
across this when trying to update include-what-you-use.)

The issue is easy to reproduce. Just create a folder with a CMakeLists.txt
having just this line:

find_package(Clang CONFIG REQUIRED)

Then run "cmake ." and there will be an error message like

CMake Error at /usr/lib64/cmake/clang/ClangTargets.cmake:296 (message):
  The imported target "clang" references the file

     "/usr/bin/clang-7"

  but this file does not exist.  Possible reasons include: [...]

Indeed, we have

* /usr/bin/clang -> /etc/alternatives/clang -> /usr/bin/clang-7.0.0
* /usr/bin/clang-7.0 -> /usr/bin/clang-7.0.0

but no /usr/bin/clang-7. That is a bit unusual. On the other hand for gcc, we
have

* /usr/bin/gcc -> /usr/bin/gcc-8

summary: Clang 7 packaging is inconsistent


--1545379237.DbEcAcC0.6914
Date: Fri, 21 Dec 2018 08:00:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120170

            Bug ID: 1120170
           Summary: [tmux] split-window/new-window behaviour changed when PWD differs from caller current directory
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: sledz@zone42.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

tmux 2.8 contains a change in behaviour compared to previous versions when
the current directory differs from the contents of the PWD environment
variable:

Consider running the following at a shell prompt in a tmux session:

 cd /
 PWD=/etc tmux split-window

With tmux 2.7 (Leap 15.0) the shell in the new split ends up with its
current directory set to /, whereas with tmux 2.8 the shell in the new
split ends up with its current directory set to /etc.

Unfortunately, this breaks processes (such as openembedded's terminal.py)
which change the current directory but don't change PWD.

The problem was reported upstream at https://github.com/tmux/tmux/issues/1549
and it has been fixed.


--1545385334.2A5AdFE0.30361
Date: Fri, 21 Dec 2018 09:42:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1120189

            Bug ID: 1120189
           Summary: 389-ds build fail in the post-check due to modified permissions
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: varkoly-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

389-ds build failed in Leap 15.1 recently, it fails in the post-check due to
caught modified permissions, the full build log can be found at
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/389-ds/standard/x86_64


--1545389657.B7EB86c0.30776
Date: Fri, 21 Dec 2018 10:54:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120205

            Bug ID: 1120205
           Summary: VUL-0: CVE-2018-19960: python-onionshare: debug_mode function might allow local users to overwrite files or obtain sensitive information
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/220430/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: axel.braun-at-gmx.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-19960

The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug
is enabled, uses the /tmp/onionshare_server.log pathname for logging, which
might allow local users to overwrite files or obtain sensitive information by
using this pathname.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1660495
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19960
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915859
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-19960.html
https://bugs.debian.org/915859
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19960


body:
--1545525049.26Ce7050.2343
Date: Sun, 23 Dec 2018 00:30:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120263

            Bug ID: 1120263
           Summary: zypper ps should mention "reboot needed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Please enhance zypper ps so that it mentions if a reboot is needed.

I know that this is not as easy to detect as open files ;-) - but there might
be a good-enough simple way to implement this:

a) when installing a patch with the "reboot needed" flag, zypper should
   create a file  /run, basically   touch /run/reboot_needed   (needless to
   say that /run is a ramdisk, so that file will be gone after a reboot)

b) zypper ps should then check if that file exists, and print "reboot needed"

Bonus points if the kernel %post also creates the /run/reboot_needed file ;-)

summary: zypper ps should mention "reboot needed


body:
--1545777328.CCF5aea80.7162
Date: Tue, 25 Dec 2018 22:35:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120300

            Bug ID: 1120300
           Summary: gnuserv dysfunnctional
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dieter.jurzitza@t-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When trying to start gnuclient on leap 15 it fails badly. Using the standard
emacs from the distribution it states:

error in process filter: invalid function: 1

when performing an upgrade to emacs 26.1 the error message is

error in process filter: Wrong type argument: listp, "/home/fred/.profile"
when trying to load ".profile" into a gnuclient - buffer.

The related entries in .gnu-emacs-custom are:
(autoload 'gnuserv-start "gnuserv-compat")
(add-hook 'emacs-startup-hook '(lambda() (gnuserv-start)))

what used to work for decades.

Maybe Mr. Fink would be a knowledgeable person in this regard? Thanks anyways
for looking into this ...

Dieter Jurzitza

summary: gnuserv dysfunnctional


--1545842691.6a85C60.15250
Date: Wed, 26 Dec 2018 16:44:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120310

            Bug ID: 1120310
           Summary: Nextcloud-client 2.5.1 crashes on account setup
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bugreporter-at-candymail.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Nextcloud-client 2.5.1 crashes when trying to set up an account.
The problem is already known and apparently related to a change in
qt5-webengine:
https://github.com/nextcloud/desktop/issues/941

A potential fix is already available:
https://github.com/nextcloud/desktop/pull/959


--1546214521.5fFba0.11058
Date: Mon, 31 Dec 2018 00:02:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120406

            Bug ID: 1120406
           Summary: blender: "OSL support disabled in this build."
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: Ulrich.Windl-at-rz.uni-regensburg.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a book (ISBN 9783836244541) on Blender 2.7 that demonstrates OSL-Scripts
(OSL = Open Shading Language). Unfortunately I cannot follow the books
instructions (page 508) for a demonstration as Blender
(blender-2.79b-lp150.2.3.1.x86_64) seems to be built without OSL support.
When trying to activate a loaded script, the message is: "OSL support disabled
in this build."

The example script is:
include "stdosl.h"

shader sine_pattern(
    color Color = 0.8,
    float Time = 1.0,
    float Intensity = 1.0,
    int Stripes = 10,
    point Vector = P,
    output float Fac = 1.0,
    output color ColorOut = 0.8)
{
    point Pos = Vector;
    float pattern_col = 0.0;

    for( float i = 0.0; i < Stripes; ++i )
    {
        float t = Time/10.0 * (i);

        Pos[0] += sin( (Pos[1] + t) * 10.0  ) * 0.1;

        float f = abs(Intensity / Pos[0] * 0.001);
        pattern_col += f;
    }

    Fac = pattern_col;
    ColorOut = Color * Fac;
}


--1546355527.f1dAAd780.6654
Date: Tue, 1 Jan 2019 15:12:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120429

            Bug ID: 1120429
           Summary: Netflix (Widevine component) stopped working after upate to Chromium 71
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: lnussel-at-suse.com
          Reporter: noga.dany-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have Chromium from Leap 15 standard repositories and Widevine from Packman
Essentials. Chromium 70 can play videos on Netflix, but after update to
Chromium 71 Netflix stopped working.

To confirm bug is not needed to have Netflix, Widevine can be detected on
https://bitmovin.com/demos/drm

Diskused on
https://forums.opensuse.org/showthread.php/534420-Netflix-on-Chromium-71-does-not-work

Probably same bug like in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916058


--1546420970.cb4dF0.31229
Date: Wed, 2 Jan 2019 09:22:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120463

            Bug ID: 1120463
           Summary: Zypper dup does not allow changing the vendor of installed resolvables
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: fkrueger-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Afte a fresh installation of TW20181224 with the Packman repo enabled, besides
the standard ones, 'sudo zypper dup --allow-vendor-change' does not change the
vendor of installed resolvables. For example, vlc-3.0.4-1.3.x86_64 and the
corresponding packages from Tumbleweed are not updated to version
3.0.4-4.15.x86_64 from Packman.


--1546425885.daaEB370.5189
Date: Wed, 2 Jan 2019 10:44:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120472

            Bug ID: 1120472
           Summary: [Build 20181231] openQA test fails in aa_logprof
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/822549/modules/aa_lo
                    gprof/steps/24
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-apparmor@aarch64 fails
in
[aa_logprof](https://openqa.opensuse.org/tests/822549/modules/aa_logprof/steps/24)

## Reproducible

Fails since (at least) Build
[20181231](https://openqa.opensuse.org/tests/822362)

## Expected result

Last good: [20181224](https://openqa.opensuse.org/tests/821330) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&test=apparmor&version=Tumbleweed&distri=opensuse&machine=aarch64&flavor=DVD)