body:
I got a request by my mail provider to switch to secure communication. My
setting at the mail server up to now was USE (or MAY use) TLS, but not to force
it. So far I understand it, postfix fell back into an unencrypted connection.
But I got trouble as I changed the setting to force TLS, no mails are able to
deliver to my mail provider via smtp.

Reproducible: Always

Steps to Reproduce:
1.Start YaST2 -> Mail Server
2.Enforce the use of TLS
3.Do the remaining adjustments (authentication and so on)

to achieve a working system I've have done:

At first I updated the ca-certficates packages.
I did a rehash of /etc/ssl/certs (c_rehash /etc/ssl/certs)
I went through the settings in YAST/mail server
After that I corrected two things:
- ln -s /etc/ssl/certs /etc/postfix/ssl/cacerts
 (since there was a reference to it in the postfix/main.cf)
- commenting out this line in postfix/master.cf (old: #tlsmgr unix - - n 1000?
1 tlsmgr):
  tlsmgr    unix  -       -       n       1000?   1       tlsmgr
- removing the value of POSTFIX_TLS_CAFILE in /etc/sysconfig/postfix

Than I restart postfix.
Now I'm able to send mails via postfix and TLS.
Actual Results:
I wasn't able to deliver mail via TLS:

2014-02-05T21:57:13.884269+01:00 shuttle postfix/smtp[15012]: warning: connect
to private/tlsmgr: Connection refused
2014-02-05T21:57:13.896772+01:00 shuttle postfix/smtp[15012]: warning: problem
talking to server private/tlsmgr: Connection refused
2014-02-05T21:57:14.900666+01:00 shuttle postfix/smtp[15012]: warning: connect
to private/tlsmgr: Connection refused
2014-02-05T21:57:14.902788+01:00 shuttle postfix/smtp[15012]: warning: problem
talking to server private/tlsmgr: Connection refused
2014-02-05T21:57:14.907749+01:00 shuttle postfix/smtp[15012]: warning: no
entropy for TLS key generation: disabling TLS support
2014-02-05T21:57:15.002238+01:00 shuttle postfix/smtp[15012]: A831C473AE: TLS
is required, but our TLS engine is unavailable
2014-02-05T21:57:15.124226+01:00 shuttle postfix/smtp[15012]: A831C473AE:
to=<xxx-at-gxxx.com>, relay=mail.gmx.net[212.227.17.168]:587, delay=1
4, delays=0.11/1.1/0.17/0, dsn=4.7.5, status=deferred (TLS is required, but
our TLS engine is unavailable)

and (after enbling tlsmgr in postfix/master.conf):

2014-02-05T21:58:05.178154+01:00 shuttle postfix/qmgr[15134]: 1FAB0473A7:
from=<xxxxxx-at-gmx.net>, size=627, nrcpt=1 (queue active)
2014-02-05T21:58:05.458115+01:00 shuttle postfix/smtp[15140]: certificate
verification failed for mail.gmx.net[212.227.17.190]:587: untrusted issue
r /C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom
Root CA 2
2014-02-05T21:58:05.550335+01:00 shuttle postfix/smtp[15140]: 1FAB0473A7:
Server certificate not trusted
2014-02-05T21:58:05.720818+01:00 shuttle postfix/smtp[15140]: certificate
verification failed for mail.gmx.net[212.227.17.168]:587: untrusted issue
r /C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom
Root CA 2
 2014-02-05T21:58:05.850664+01:00 shuttle postfix/smtp[15140]: 1FAB0473A7:
to=<xxx-at-gxxx.com>, relay=mail.gmx.net[212.227.17.168]:587, delay=3
70, delays=369/0.1/0.54/0, dsn=4.7.5, status=deferred (Server certificate not
trusted)

Expected Results:
Sending mail sucessfully

summary: Unable to configure postfix SMTP with forced TLS using YaST2


https://bugzilla.novell.com/show_bug.cgi?id=862775

https://bugzilla.novell.com/show_bug.cgi?id=862775#c0

           Summary: Keyring not unlocked under GNOME classic
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: x86-64
        OS/Version: openSUSE 13.1
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: GNOME
        AssignedTo: bnc-team-gnome-at-forge.provo.novell.com
        ReportedBy: jdelvare-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: dimstar-at-opensuse.org, fcrozat-at-suse.com
          Found By: Community User
           Blocker: ---

I use Empathy for IM. When I log under the standard GNOME desktop environment,
I don't have to re-type my password to unlock the keyring for Empathy. However
as I switched to GNOME classic mode for testing, I am asked to re-type my
password after login, to unlock my keyring. If I don't, Empathy won't connect
to the IM server.


https://bugzilla.novell.com/show_bug.cgi?id=862824

https://bugzilla.novell.com/show_bug.cgi?id=862824#c0

           Summary: lsb package modularization into sub-packages
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: All
        OS/Version: openSUSE 13.2
            Status: NEEDINFO
          Severity: Enhancement
          Priority: P5 - None
         Component: Basesystem
        AssignedTo: pgajdos-at-suse.com
        ReportedBy: jsmeix-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: jeff-at-licquia.org, rschweikert-at-suse.com
      InfoProvider: rschweikert-at-suse.com
          Found By: Development
           Blocker: No

This is an enhancement request for modularization
of the lsb package into sub-packages.

The lsb package itself would require all its sub-packages
to ensure that when "lsb" is intalled the system actually
is LSB compliant (i.e. the system provides all requirements
as outlined in the LSB specification) according to
what Robert Schweikert wrote in
https://bugzilla.novell.com/show_bug.cgi?id=807747#c4
and
http://lists.linuxfoundation.org/pipermail/lsb-discuss/2013-May/007643.html

Reasoning for the modularization into sub-packages:

When a package actually requires only parts of the LSB specification
(e.g. when a package actually requires only "LSB core")
it would be nice when that package would not need to get
the whole LSB installed.

The whole LSB requires various graphical libraries, sound stuff,
printing stuff, and so on which could be much too much e.g. for
software that is meant to run also on a minimal server without
graphical libraries, sound stuff, printing stuff, and so on.

For an example see the rear package.
Rear is a set of bash scripts (plus documentation) for disaster
recovery in particular to be used also on server systems.
If the rear RPM would "Requires: lsb" then it could not
be installed on a minimal server.

See my issue report to Rear upstream as
"RFC: Cleanup of the LSB RPM requirements in Rear RPM"
on rear-devel-at-lists.relax-and-recover.org
http://pikachu.3ti.be/pipermail/rear-devel/2014-February/000293.html
and subsequent postings there.

I am not at all a LSB expert so that I am not the right one
to actually decide about modularization of the lsb package
but Jeff Licquia and Robert Schweikert are LSB experts...

Robert Schweikert and Jeff Licquia,
can you provide background information whether or not
such a modularization of the lsb package into sub-packages
makes sense and does not contradict the LSB specification.
Many thanks in advance!


body:
After update of seamonkey and seamonkey-translations-common to version 2.24-1.1
some languages are not included anymore.

Supported after update are only:

Chinese Sinplified (zh-CN)
Espanol (AR)
Espanol (Espana)
Magyar (HU)
Nederlands (NL)
Polski
Russian (RU)
Traditional Chinese (zh-TW)

The same in seamonkey-translations-comman packages for openSuSE 12.3 and 13.1.

Wolfgang could you take a look at this please.
Thank you very much.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

summary: seamonkey-translations-common / some languages not included anymore


3.3.2 and Perl 5.18.0: Altering hash requires restarting loop else UNDEFINED
behavior.

 or

Use of each() on hash after insertion without resetting hash iterator results
in undefined behavior, Perl interpreter: 0x1923010

See patches here:

https://issues.apache.org/SpamAssassin/attachment.cgi?id=5143&action=diff

Reproducible: Always

Steps to Reproduce:
1.
2.
3.


body:
https://bugzilla.novell.com/show_bug.cgi?id=862993

https://bugzilla.novell.com/show_bug.cgi?id=862993#c0

           Summary: server:monitoring/cacti: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Platform: x86-64
        OS/Version: SLES 11
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
        AssignedTo: nix-at-opensuse.org
        ReportedBy: m.castellazzi-at-niwa.co.nz
         QAContact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: Community User
           Blocker: Yes

I tried to install cacti-0.8.8b-18.1.noarch from
http://download.opensuse.org/repositories/server:/monitoring/SLE_11_SP3/x86_64/
on a fresh installed SLES11SP3 server.

The rpm seems to have been packaged against php5 but SLES11SP3 comes with
php53.

cacti3:~ # zypper in cacti
Problem: nothing provides apache2-mod_php5 needed by cacti-0.8.8b-18.1.noarch
 Solution 1: do not install cacti-0.8.8b-18.1.noarch
 Solution 2: break cacti-0.8.8b-18.1.noarch by ignoring some of its
dependencies
Choose from above solutions by number or cancel [1/2/c] (c):

cacti3:~ # zypper se -t package -s apache2-mod_php5
S | Name              | Type    | Version       | Arch   | Repository
--+-------------------+---------+---------------+--------+------------------------------
i | apache2-mod_php53 | package | 5.3.17-0.17.1 | x86_64 |
SLES11-SP3-Updates-64bit
v | apache2-mod_php53 | package | 5.3.17-0.15.1 | x86_64 |
SLES11-SP3-Updates-64bit
v | apache2-mod_php53 | package | 5.3.17-0.13.7 | x86_64 |
SLES11-SP3-Pool-64bit

As you can see below I have apache2-mod_php53 on my system but not
apache2-mod_php5.

cacti3:~ # rpm -q --provides apache2-mod_php53
mod_php_any = 5.3.17
<

summary: server:monitoring/cacti: Bug


body:
I got a USB keyboard which equals the inbuilt one of the Lenovo Thinkpads [=
1].
The keyboard has a trackpoint and 3 dedicated keys to replace the mouse
buttons.

Opensuse 13.1 on my thinkpad setup the trackpoint to enable scrolling while=
 the
middle (mouse) key button is hold out-of-the-box. How do I get the same wit=
h my
keyboard.

I can get it working with some xinput calls in the console:
xinput set-int-prop 10 "Evdev Wheel Emulation Button" 8 2 && xinput
set-int-prop 10 "Evdev Wheel Emulation" 8 1

But this can only be a work-around. I think there must be a way to make this
automatically by udev-rules or something like this.

[1]:
http://www.amazon.de/LENOVO-ThinkPad-USB-Keyboard-TrackPoint/dp/B002XGUXPG/=
ref=3Dsr_1_3?s=3Dcomputers&ie=3DUTF8&qid=3D1391428911

Reproducible: Always

Steps to Reproduce:
- plug in the keyboard (or it is already)
- try to scroll in firefox by holding the middle mouse button and moving the
trackpoint
Actual Results:=20=20
- instead of scrolling, the cursor moves

Expected Results:=20=20
scrolling

I don't need to call xinput on my Lenovo Thinkpad Laptop. I think it should=
 be
the same of this keyboard.

lsusb:

Bus 002 Device 004: ID 17ef:6009 Lenovo ThinkPad Keyboard with TrackPoint

xinput list:
=E2=8E=A1 Virtual core pointer                          id=3D2    [master p=
ointer  (3)]
=E2=8E=9C   =E2=86=B3 Virtual core XTEST pointer                id=3D4    [=
slave  pointer  (2)]
=E2=8E=9C   =E2=86=B3 PixArt USB Optical Mouse                  id=3D8    [=
slave  pointer  (2)]
=E2=8E=9C   =E2=86=B3 Lite-On Technology Corp. ThinkPad USB Keyboard with T=
rackPoint    id=3D10=20=20
[slave  pointer  (2)]
=E2=8E=9C   =E2=86=B3 PS/2 Generic Mouse                        id=3D12   [=
slave  pointer  (2)]
=E2=8E=A3 Virtual core keyboard                         id=3D3    [master k=
eyboard (2)]
    =E2=86=B3 Virtual core XTEST keyboard               id=3D5    [slave  k=
eyboard (3)]
    =E2=86=B3 Power Button                              id=3D6    [slave  k=
eyboard (3)]
    =E2=86=B3 Power Button                              id=3D7    [slave  k=
eyboard (3)]
    =E2=86=B3 Lite-On Technology Corp. ThinkPad USB Keyboard with TrackPoin=
t    id=3D9=20=20=20
[slave  keyboard (3)]
    =E2=86=B3 AT Translated Set 2 keyboard              id=3D11   [slave  k=
eyboard (3)]

-

summary: Separate Lenovo Thinkpad USB keyboard is not setup correctly to allow scrolling with the trackpoint


body:
It is possible to make a video search on YouTube, Vimeo, Blip-TV on the Sidebar
from Videos (Totem). It is NOT possible to make playing the found video on
YouTube or Vimeo. By trying to play the video from YouTube Grilo sends a
warning (failed to get video URL). On the other hand, trying to play the video
by choosing from Vimeo Totem shows (totem:2722): Totem-WARNING **: Current
element has no URL to play.

Reproducible: Always

Steps to Reproduce:
1.Make a Search on the Sidebar from Videos (Totem)
2.Pick one up or click on anyone title searched from the Sidebar to play it
3.Nothing happens, not playing anything.
Actual Results:
Launching Videos (Totem) from GNOME-Terminal shows no particular issues. By
making the search for any video on the Search (Sidebar) seems to work fine too.
Once, you pick or click on the video from the Sidebar it make the error
evident.

(totem:2722): Grilo-WARNING **: [youtube] grl-youtube.c:614: Failed to get
video URL. totem-pl-parser error '0'

(totem:2722): Totem-WARNING **: Current element has no URL to play

Expected Results:
Every time you click on the selected video on the Sidebar it is supposed to
open and play on Videos (Totem) as it used to play on older 3.8.2 version
(IIRC)

Outcome from GNOME-Terminal.

(totem:2722): Grilo-WARNING **: [youtube] grl-youtube.c:614: Failed to get
video URL. totem-pl-parser error '0'

(totem:2722): Totem-WARNING **: Current element has no URL to play

summary: Videos 3.10.1 aka Totem is not able to play any video picked from the Sidebar


body:
I tried to install on a 32 bit OS 13.1 DHCP and DNS via Yast 2 (Former dos &
windows only user). Both work, but do not cooperate, so that the DNS is not
updating its database concerning DHCP leases in the LAN.
But it works when one switches off the AppArmor feature.

I have 2 network cards installed, Squid and Firewall are running. 1 network
card is connected to the router (external) and the other one is internal.

More Information below (a link to the forum)

Reproducible: Always

Steps to Reproduce:
In the forum, 1. page, last entry

Actual Results:
Using the workaround "Disable AppArmor" allows full functionality.

I wrote about it first in the forum - here is the link:
forums.opensuse.org/showthread.php/495147-OS13-1-DNS-External-name-resolution-works-but-absolutely-no-cooperation-with-the-DHCP/page1

summary: Dynamic DNS does not cooperate with DHCP If AppArmor is enabled


body:
tindog:/home/lancelot # systemctl status wickedd.service
wickedd.service - wicked network management service daemon
   Loaded: loaded (/usr/lib/systemd/system/wickedd.service; enabled)
   Active: failed (Result: start-limit) since Tue 2014-02-11 20:37:37 GMT; 2min
2s ago
  Process: 997 ExecStart=/usr/sbin/wickedd $WICKED_DEBUG_PARAM --systemd
--foreground (code=dumped, signal=SEGV)
 Main PID: 997 (code=dumped, signal=SEGV)
   CGroup: /system.slice/wickedd.service

Feb 11 20:37:37 tindog systemd[1]: wickedd.service: main process exited,
code=dumped, status=11/SEGV
Feb 11 20:37:37 tindog systemd[1]: Unit wickedd.service entered failed state.
Feb 11 20:37:37 tindog systemd[1]: wickedd.service holdoff time over,
scheduling restart.
Feb 11 20:37:37 tindog systemd[1]: Stopping wicked network management service
daemon...
Feb 11 20:37:37 tindog systemd[1]: Starting wicked network management service
daemon...
Feb 11 20:37:37 tindog systemd[1]: wickedd.service start request repeated too
quickly, refusing to start.
Feb 11 20:37:37 tindog systemd[1]: Failed to start wicked network management
service daemon.
Feb 11 20:37:37 tindog systemd[1]: Unit wickedd.service entered failed state.
tindog:/home/lancelot # systemctl status wicked.service
wicked.service - wicked managed network interfaces
   Loaded: loaded (/usr/lib/systemd/system/wicked.service; enabled)
   Active: failed (Result: exit-code) since Tue 2014-02-11 20:37:34 GMT; 2min
25s ago
  Process: 748 ExecStart=/usr/sbin/wicked $WICKED_DEBUG_PARAM --systemd ifup
all (code=exited, status=1/FAILURE)
 Main PID: 748 (code=exited, status=1/FAILURE)
   CGroup: /system.slice/wicked.service

Feb 11 20:37:33 tindog wicked[748]: device wlp0s22f2u1u4u3 failed: device was
deleted
Feb 11 20:37:34 tindog systemd[1]: wicked.service: main process exited,
code=exited, status=1/FAILURE
Feb 11 20:37:34 tindog systemd[1]: Failed to start wicked managed network
interfaces.
Feb 11 20:37:34 tindog systemd[1]: Unit wicked.service entered failed state.
tindog:/home/lancelot # ifconfig -a
br0       Link encap:Ethernet  HWaddr 00:1C:F0:5B:65:5A
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

enp3s0    Link encap:Ethernet  HWaddr 50:E5:49:C8:2E:8C
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

enp5s6    Link encap:Ethernet  HWaddr 00:1C:F0:5B:65:5A
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:18 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1060 (1.0 Kb)  TX bytes:1060 (1.0 Kb)

wlp0s22f2 Link encap:Ethernet  HWaddr 00:0E:2E:F1:36:99
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
Only lo gets configured, wlan has ESSID and PASSPHRASE configured
tindog:~ # cat /ifcfg-br0
BOOTPROTO='static'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='192.168.10.10/24'
MTU=''
NAME='DGE-528T Gigabit Ethernet Adapter'
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
BRIDGE='yes'
BRIDGE_PORTS='enp5s6'
BRIDGE_STP=''
# cat ifcfg-wlp0s22f2u1u4u3
BOOTPROTO='dhcp'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR=''
MTU=''
NAME='RT73_Wireless'
NETMASK=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='hotplug'
USERCONTROL='no'
WIRELESS_AP=''
WIRELESS_AP_SCANMODE='1'
WIRELESS_AUTH_MODE='psk'
WIRELESS_BITRATE='auto'
WIRELESS_CA_CERT=''
WIRELESS_CHANNEL=''
WIRELESS_CLIENT_CERT=''
WIRELESS_CLIENT_KEY=''
WIRELESS_CLIENT_KEY_PASSWORD=''
WIRELESS_DEFAULT_KEY='0'
WIRELESS_EAP_AUTH=''
WIRELESS_EAP_MODE=''
WIRELESS_ESSID='TALKTALK-123456'
WIRELESS_FREQUENCY=''
WIRELESS_KEY=''
WIRELESS_KEY_0=''
WIRELESS_KEY_1=''
WIRELESS_KEY_2=''
WIRELESS_KEY_3=''
WIRELESS_KEY_LENGTH='128'
WIRELESS_MODE='Managed'
WIRELESS_NICK=''
WIRELESS_NWID=''
WIRELESS_PEAP_VERSION=''
WIRELESS_POWER='yes'
WIRELESS_WPA_ANONID=''
WIRELESS_WPA_IDENTITY=''
WIRELESS_WPA_PASSWORD=''
WIRELESS_WPA_PSK='xxxxxx'
PREFIXLEN='32'

In order to get network up I have to delete the bridge, configure enp5s6
manually and add the default route.

Reproducible: Always

Steps to Reproduce:
1. Reboot
2.
3.
Actual Results:
No network

Expected Results:
Network should come up configured.

summary: Network configuration problems using wicked


body:
https://bugzilla.novell.com/show_bug.cgi?id=863451

https://bugzilla.novell.com/show_bug.cgi?id=863451#c0

           Summary: science/python-matplotlib: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Platform: x86-64
        OS/Version: openSUSE 13.1
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: 3rd party software
        AssignedTo: werner.ho-at-gmx.de
        ReportedBy: fishdude-at-gmx.net
         QAContact: opensuse-communityscreening-at-forge.provo.novell.com
                CC: dmitry-at-roshchin.org
          Found By: ---
           Blocker: ---

Since changing matplotlib to 1.3.1 in the science repository, pylab can not be
imported anymore.
It fails with an ImportError, because it cannot find the windowing backend,
requested by tkagg.

See the output below:
python -c 'import pylab'
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib64/python2.7/site-packages/pylab.py", line 1, in <module>
    from matplotlib.pylab import *
  File "/usr/lib64/python2.7/site-packages/matplotlib/pylab.py", line 269, in
<module>
    from matplotlib.pyplot import *
  File "/usr/lib64/python2.7/site-packages/matplotlib/pyplot.py", line 98, in
<module>
    _backend_mod, new_figure_manager, draw_if_interactive, _show =
pylab_setup()
  File "/usr/lib64/python2.7/site-packages/matplotlib/backends/__init__.py",
line 28, in pylab_setup
    globals(),locals(),[backend_name],0)
  File
"/usr/lib64/python2.7/site-packages/matplotlib/backends/backend_tkagg.py", line
14, in <module>
    import matplotlib.backends.windowing as windowing
ImportError: No module named windowing

The same matplotlib version for opensuse 12.3 from the science repository does
not show this error.

summary: science/python-matplotlib: Bug


body:
The problem seems to be the location of the scdaemon program.  In gpg2 shipped
with OpenSUSE 13.1 it's in /usr/lib64/scdaemon.  However, if you do gpgconf
--check-programs, that shows it's expected in /usr/bin/scdaemon.  Simply
installing a link from /usr/bin/scdaemon -> /usr/lib64/scdaemon makes this work
again, so I think this is a packaging error.

Reproducible: Always

Steps to Reproduce:
gpg --card-status
Actual Results:
it says it can't find the card

Expected Results:
it should list my card status

summary: gpg2 no longer works with crypto stick


body:
Mounting a NFSv3 UDP only export fails. To mount a NFSv3 UDP only export you
have to add a mount options (-o udp or -o nfsvers=3). This should be not
necessary because of auto-negotiation.

Reproducible: Always

Steps to Reproduce:
1.Server with NFSv3 UDP only
2.Mount the server NFSv3 export without any options (-o udp or -o nfsvers=3)

Actual Results:
Mount fails with mount.nfs: mount(2): Connection refused
Auto-negotiation is stuck on NFSv4.

Expected Results:
Mount success.

In the attachment is my testcase log for following scenario:
Client: openSUSE 13.1 32bit, Kernel 3.11.10-7-default
Server_1: NFSv3 UDP only
 Mounting Server_1: NFSv3 UDP only without mount options (-o udp or -o
nfsvers=3) == Fail
 Mounting Server_1: NFSv3 UDP only with mount options (-o upd or -o nfsvers=3)
== Success
Server_2: NFSv3 TCP/UDP
 Mounting Server_2: NFSv3 TCP/UDP without mount options (.o upd or -o
nfsvers=3) == Success
mount -v logs and /var/log/messages

summary: NFSv3 fallback failure when NFSv3 Server is UDP only


https://bugzilla.novell.com/show_bug.cgi?id=863815

https://bugzilla.novell.com/show_bug.cgi?id=863815#c0

           Summary: NTP should timeout immediately with ipv6 address when getting ICMP Port Unreachable Answer
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
        AssignedTo: bnc-team-screening-at-forge.provo.novell.com
        ReportedBy: mmaher-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: bwiedemann-at-suse.com
          Found By: Development
           Blocker: No

When ipv6 is configured and the NTP deamon wants to reach the public NTP
servers, one of our Endpoints sends a ICMP Port Unreachable Package. The NTP
deamon just print this message out "Recieved no usable packet from [ipv6 addr]"
and try the operation again after a few seconds. So it took up to tree-four
Minutes when finally the NTP timeouted completely.


body:
Hi, I am having problem attaching a usb device. I tried to search the net on
how but I am unable to since I am getting error.

lsusb output

Bus 002 Device 003: ID 051d:0002 American Power Conversion Uninterruptible
Power Supply

my xml file.
<hostdev mode='subsystem' type='usb'>
<source>
<vendor id='0x051d'/>
<product id='0x0002'/>
</source>
</hostdev>

Then after running virsh attac-device <domain> <xml file> I am getting below

Welcome to virsh, the virtualization interactive terminal.

Type: 'help' for help with commands
'quit' to quit

virsh # attach-device Win8 /etc/libvirt/qemu/usb_device.xml
error: Failed to attach device from /etc/libvirt/qemu/usb_device.xml
error: Path '/dev/bus/usb/000/000' is not accessible: No such file or directory

virsh #

KVM patterns version
Name: efont-unicode-bitmap-fonts
Version: 0.4.2-223.1.2

Name: xorg-x11-fonts
Version: 7.6-27.1.2

Name: libvirt
Version: 1.1.2-2.14.2

Name: xorg-x11-fonts-core
Version: 7.6-27.1.2

Name: tftp
Version: 5.2-7.1.2

Name: virt-manager
Version: 0.9.5-6.1.3

Name: libvirt-daemon-qemu
Version: 1.1.2-2.14.2

Name: patterns-openSUSE-kvm_server
Version: 13.1-13.6.1

Name: virt-viewer
Version: 0.5.7-3.1.4

Name: xauth
Version: 1.0.7-6.1.2

Name: tightvnc
Version: 1.3.10-14.2.1

Name: fontconfig
Version: 2.11.0-4.1

Name: fonts-config
Version: 20080121-82.2.1

Name: bridge-utils
Version: 1.5-16.1.2

Name: vm-install
Version: 0.7.8-4.1

Name: kvm
Version: 1.6.0-3.1.1
Any help would be appreciated. Thanks

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

It works when attaching before boot. But not when its already online. As far as
I researched probably the new version of libvirt is already fixed. However I am
not sure unless I switch to fedora or redhat or debian based system.

summary: Cannot attach usb


https://bugzilla.novell.com/show_bug.cgi?id=864094

https://bugzilla.novell.com/show_bug.cgi?id=864094#c0

           Summary: improperly formatted /usr/bin/qemu-kvm causes Exec format error
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: KVM
        AssignedTo: brogers-at-suse.com
        ReportedBy: brogers-at-suse.com
         QAContact: jdouglas-at-suse.com
          Found By: ---
           Blocker: ---

I'm not sure how this even slipped by, but our shell script for
/usr/bin/qemu-kvm needs a sh-bang header to be able to execute correctly in all
instances. I've bumped into the case where libvirt complains as follows:

error: internal error: Child process (LC_ALL=C
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
/usr/bin/qemu-kvm -help) unexpected exit status 1: libvirt:  error : cannot
execute binary /usr/bin/qemu-kvm: Exec format error

We need to add the following to the start of that shell script:
#!/bin/sh

Doing so resolves this issue


https://bugzilla.novell.com/show_bug.cgi?id=864141

https://bugzilla.novell.com/show_bug.cgi?id=864141#c0

           Summary: kms driver affects initial mouse pointer visibility
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
        AssignedTo: kernel-maintainers-at-forge.provo.novell.com
        ReportedBy: brogers-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: sreeves-at-suse.com
          Found By: ---
           Blocker: ---

I've seen this for a while, first under KVM virtualization, then on physical
hardware as I move from machine to machine.

Using the gnome based gui environment, on the initial login screen, the mouse
pointer is not visible, even though the mouse is active (you can move it to
cause the login prompt area to be highlighted. In playing around I see that by
adding "nomodeset" to the kernel command line this problem goes away, thus my
initial suspicion that there is some failure in the KMS drivers or interface to
those drivers.

The physical machine in question has the following graphics card:
hwinfo --gfxcard
63: PCI c00.0: 0300 VGA compatible controller (VGA)
  [Created at pci.323]
  UDI: /org/freedesktop/Hal/devices/pci_102b_522
  Unique ID: zb5c.eidvwO3DyD5
  Parent ID: 0Rrv.5n39a0oWAV1
  SysFS ID: /devices/pci0000:00/0000:00:1c.7/0000:0c:00.0
  SysFS BusID: 0000:0c:00.0
  Hardware Class: graphics card
  Model: "Matrox G200 SE A (PCI)"
  Vendor: pci 0x102b "Matrox Graphics, Inc."
  Device: pci 0x0522 "G200 SE A (PCI)"
  SubVendor: pci 0x8086 "Intel Corporation"
  SubDevice: pci 0x0103
  Revision: 0x05
  Memory Range: 0xea000000-0xeaffffff (ro,non-prefetchable)
  Memory Range: 0xd0810000-0xd0813fff (rw,non-prefetchable)
  Memory Range: 0xd0000000-0xd07fffff (rw,non-prefetchable)
  Memory Range: 0xd0800000-0xd080ffff (ro,non-prefetchable,disabled)
  IRQ: 11 (no events)
  I/O Ports: 0x3c0-0x3df (rw)
  Module Alias: "pci:v0000102Bd00000522sv00008086sd00000103bc03sc00i00"
  Driver Info #0:
    XFree86 v4 Server Module: mga
    Extensions:
    Options: NoHal
    XF86Config Entry: Option "XaaNoScreenToScreenCopy"
  Config Status: cfg=no, avail=yes, need=no, active=unknown
  Attached to: #43 (PCI bridge)

Primary display adapter: #63

As I mentioned above, a qemu-kvm openSUSE 13.1 guest also experiences this when
using the default emulated cirrus card. If instead I use the STD VGA emulated
card, then I don't see this problem.


body:
since ff 24  till 27 geo-location is broken
 when using geo-location map is not centered at your location .

this occurs with many sites  : openstreetmap , maps.google.fr, viamichelin.fr
etc.

this pb does not occurs with chrome or chromium

see my report
https://bugzilla.mozilla.org/show_bug.cgi?id=895942

don't know if it is true but according to comment 8 by a ff dev
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1231273

each distribution must acquire a key to access to www.googlapis.com
geo-location service
and
firefox must be build with the configure flag --with-google-api-keyfile=file.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

summary: firefox,broken geo-location


https://bugzilla.novell.com/show_bug.cgi?id=864171

https://bugzilla.novell.com/show_bug.cgi?id=864171#c0

           Summary: network/openssh: Bug: Unable to login to sshd 6.5p1
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Platform: x86-64
        OS/Version: openSUSE 12.3
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: 3rd party software
        AssignedTo: pcerny-at-suse.com
        ReportedBy: martin-at-oneiros.de
         QAContact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Last night my Server was upgrade to openssh 6.5p1.

Today I was unable to login with an 6.4 and an 4.8 client; I had to downgrade
the server to 6.1. Even a "ssh localhost" on the server fails.

Here's a client debug:

> ssh -vvvv localhost
OpenSSH_6.5, OpenSSL 1.0.1e 11 Feb 2013
debug1: Reading configuration data /home/ms/.ssh/config
debug1: /home/ms/.ssh/config line 2: Applying options for localhost
debug3: cipher ok: arcfour
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: aes128-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: 3des-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: blowfish-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: cast128-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: aes192-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: cipher ok: aes256-cbc
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug3: ciphers ok:
[arcfour,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc]
debug1: /home/ms/.ssh/config line 52: Applying options for *
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 20: Applying options for *
debug1: /etc/ssh/ssh_config line 81: Applying options for localhost
debug1: /etc/ssh/ssh_config line 88: Applying options for *
debug1: auto-mux: Trying existing master
debug1: Control socket "/home/ms/.ssh/.control/localhost.22.ms" does not exist
debug2: ssh_connect: needpriv 0
debug1: Connecting to localhost [::1] port 22.
debug1: Connection established.
debug1: identity file /home/ms/.ssh/id_rsa type -1
debug1: identity file /home/ms/.ssh/id_rsa-cert type -1
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/ms/.ssh/id_dsa" as a RSA1 public key
debug1: identity file /home/ms/.ssh/id_dsa type 2
debug1: identity file /home/ms/.ssh/id_dsa-cert type -1
debug1: identity file /home/ms/.ssh/id_ecdsa type -1
debug1: identity file /home/ms/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/ms/.ssh/id_ed25519 type -1
debug1: identity file /home/ms/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.5
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.5
debug1: match: OpenSSH_6.5 pat OpenSSH* compat 0x04000000
debug2: fd 3 setting O_NONBLOCK
debug3: load_hostkeys: loading entries for host "localhost" from file
"/home/ms/.ssh/known_hosts"
debug3: load_hostkeys: found key type DSA in file /home/ms/.ssh/known_hosts:11
debug3: load_hostkeys: found key type RSA in file /home/ms/.ssh/known_hosts:27
debug3: load_hostkeys: loaded 2 keys
debug3: order_hostkeyalgs: prefer hostkeyalgs:
ssh-rsa-cert-v01-at-openssh.com,ssh-dss-cert-v01-at-openssh.com,ssh-rsa-cert-v00-at-openssh.com,ssh-dss-cert-v00-at-openssh.com,ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit:
curve25519-sha256-at-libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit:
ssh-rsa-cert-v01-at-openssh.com,ssh-dss-cert-v01-at-openssh.com,ssh-rsa-cert-v00-at-openssh.com,ssh-dss-cert-v00-at-openssh.com,ssh-rsa,ssh-dss,ecdsa-sha2-nistp256-cert-v01-at-openssh.com,ecdsa-sha2-nistp384-cert-v01-at-openssh.com,ecdsa-sha2-nistp521-cert-v01-at-openssh.com,ssh-ed25519-cert-v01-at-openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519
debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160-at-openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160-at-openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib-at-openssh.com,zlib
debug2: kex_parse_kexinit: none,zlib-at-openssh.com,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit:
curve25519-sha256-at-libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519
debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160-at-openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160-at-openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib-at-openssh.com
debug2: kex_parse_kexinit: none,zlib-at-openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_setup: found hmac-md5-etm-at-openssh.com
debug1: kex: server->client aes128-ctr hmac-md5-etm-at-openssh.com none
debug2: mac_setup: found hmac-md5-etm-at-openssh.com
debug1: kex: client->server aes128-ctr hmac-md5-etm-at-openssh.com none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Read from socket failed: Connection reset by peer

And here's the server output with DEBUG3:
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug3: oom_adjust_setup
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: Set
/proc/self/oom_score_adj from 0 to -1000
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug2: fd 3 setting
O_NONBLOCK
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug1: Bind to port 22 on
0.0.0.0.
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: Server listening on
0.0.0.0 port 22.
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug2: fd 4 setting
O_NONBLOCK
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug3: sock_set_v6only:
set socket 4 IPV6_V6ONLY
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: debug1: Bind to port 22 on
::.
Feb 15 12:27:13 lucien.local.oneiros.de sshd[14489]: Server listening on ::
port 22.
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14489]: debug3: fd 5 is not
O_NONBLOCK
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14489]: debug1: Forked child
14494.
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14489]: debug3: send_rexec_state:
entering fd = 8 config len 498
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14489]: debug3: ssh_msg_send: type
0
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14489]: debug3: send_rexec_state:
done
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: oom_adjust_restore
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: Set
/proc/self/oom_score_adj to 0
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: rexec start in 5
out 5 newsock 5 pipe 7 sock 8
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: inetd sockets
after dupping: 3, 3
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: Connection from ::1 port
43845 on ::1 port 22
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: Client protocol
version 2.0; client software version OpenSSH_6.5
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: match: OpenSSH_6.5
pat OpenSSH* compat 0x04000000
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: Enabling
compatibility mode for protocol 2.0
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: Local version
string SSH-2.0-OpenSSH_6.5
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: fd 3 setting
O_NONBLOCK
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: ssh_sandbox_init:
preparing seccomp filter sandbox
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: Network child is
on pid 14495
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: preauth child
monitor started
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: key_is_private:
bad key type 4 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: privsep user:group
100:101 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1:
permanently_set_uid: 100/101 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: ssh_sandbox_child:
setting PR_SET_NO_NEW_PRIVS [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug3: ssh_sandbox_child:
attaching seccomp filter program [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1:
list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: SSH2_MSG_KEXINIT
sent [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug1: SSH2_MSG_KEXINIT
received [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
curve25519-sha256-at-libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
none,zlib-at-openssh.com [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
none,zlib-at-openssh.com [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
first_kex_follows 0  [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
reserved 0  [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
curve25519-sha256-at-libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
ssh-rsa-cert-v01-at-openssh.com,ssh-dss-cert-v01-at-openssh.com,ssh-rsa-cert-v00-at-openssh.com,ssh-dss-cert-v00-at-openssh.com,ssh-rsa,ssh-dss,ecdsa-sha2-nistp256-cert-v01-at-openssh.com,ecdsa-sha2-nistp384-cert-v01-at-openssh.com,ecdsa-sha2-nistp521-cert-v01-at-openssh.com,ssh-ed25519-cert-v01-at-openssh.com,ecdsa-sha2-nistp256,ecds
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm-at-openssh.com,aes256-gcm-at-openssh.com,chacha20-poly1305-at-openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc-at-lysator.liu.se
[preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
hmac-md5-etm-at-openssh.com,hmac-sha1-etm-at-openssh.com,umac-64-etm-at-openssh.com,umac-128-etm-at-openssh.com,hmac-sha2-256-etm-at-openssh.com,hmac-sha2-512-etm-at-openssh.com,hmac-ripemd160-etm-at-openssh.com,hmac-sha1-96-etm-at-openssh.com,hmac-md5-96-etm-at-openssh.com,hmac-md5,hmac-sha1,umac-64-at-openssh.com,umac-128-at-openssh.com,hmac
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
none,zlib-at-openssh.com,zlib [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
none,zlib-at-openssh.com,zlib [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
 [preauth]
Feb 15 12:27:18 lucien.local.oneiros.de sshd[14494]: debug2: kex_parse_kexinit:
 [preauth]


body:
Upstream Minor Bug Fix Release

Bugs fixed in this release with Ubunutu launchpad bug numbers

lp#1154467: Web download bible db's getting locked
lp#1173749: Songs with mismatching formatting tags still throw an exception
lp#1252477: Changing theme on bible settings tab causes an error when saving
service
lp#1012110: pptviewlib does not accept unicode filename
lp#1199639: Formatting tags opened and closed in different verses throw an
exception
lp#1206886: HTTP Server gets deleted
lp#1222534: KeyError when "Allow presentation application to be overridden"=
 and
Spanish language is selected
lp#1223841: Transition does not work if texts are the same
lp#1225763: Replacing background with video unblank screen even if "Blanked=
 to
Theme"
lp#1251437: BibleGateway importer crashes on non unicode urls
lp#1258634: TypeError when saving service from previous versions with notes
lp#1259606: Clicking Verse Button doesn't alter live slide
lp#1266271: Output display returns after pressing esc when looping slides
lp#1157938: "Alt + Tab" =3D some pixelated icons and missing icons
lp#1211049: Can no long download bible verses
lp#1216234: Layout style has not effect when using a second bible
lp#1240942: Troubleshooting guide is outdated
lp#1265368: [regression] Traceback in web remote
lp#1163874: Add Slovak bible to First Run Wizard. (SK - Katolick=C3=BD (P=
=C3=ADsmo
Sv=C3=A4t=C3=A9))

Reproducible: Always

--=20
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail
-----

summary: Update OpenLP from 2.0.3 to 2.0.4


body:
Hello,

The package atftp does not include a systemd service file
Since systemd is now the default in suse i would expect one to be included

service file : /usr/lib/systemd/system/atftp.service
contents :
[Unit]
Description=Advanced TFTP Server
After=syslog.target network.target

[Service]
Type=forking
ExecStart=/usr/sbin/atftpd --daemon --port 69

[Install]
WantedBy=multi-user.target

Reproducible: Always

Steps to Reproduce:
rpm -ql to see what is included
Actual Results:
no service file

Expected Results:
should have a service file

summary: atftp does not have a systemd service file


body:
ntp-wait is a perl-prog parsing output of ntpq.

The current version of ntp-wait obvoiusly fails to parse the changed output of
the corresponding ntpq program thus hangs forever.

I

Reproducible: Always

Steps to Reproduce:
1. startntp demon
2. (optional) wait for ntp synced message in /var/log/messages
3. call /usr/sbin/ntp-wait
Actual Results:
hangs forever

Expected Results:
retunrs after ntp synched time successfully / returns immediately

i paste a corrected /usr/sbin/ntp-wait script here with changed call to ntpq
and adapted output parsing. worked for me.

Also this version does more safely check whether the ntpq result is in an
expected range

========== corrected /usr/sbin/ntp-wait script ==========
#! /usr/bin/perl -w

die "perl5 needed\n" unless ($] > 5);

use Getopt::Std;

$opt_h = 0;            # Print help message
$opt_f = 0;            # 'Hard' failure if 'state' is unknown
$opt_n = 1000;            # How many tries before we give up? (10 min+)
$opt_s = 6;            # Seconds to sleep between tries (6s = 10/min)
$opt_v = 0;            # Be verbose?

getopts('hfn:s:v');

$cmd = 'ntpq -c "rv"';

$| = 1;                # Autoflush output.

if( $opt_h )
{
    print "\nUsage: ntp-wait [ options ]\n\n".
      "   -h    Print this message\n".
      "   -f    'Hard' failure if 'state' is unknown\n".
      "   -n    How many tries before we give up? Default 1000 (ca 10 min)\n".
      "   -s    Seconds to sleep between tries. Default 6.\n".
      "   -v    Be verbose\n\n";
    exit 0;
}

print "Waiting for ntpd to synchronize...  " if ($opt_v);
for ($i = 0; $i < $opt_n; ++$i) {
    open(Q, $cmd." 2>&1 |") || die "Can't start ntpq: $!";
    while(<Q>) {
      # second of 4 digits will be 0 if "not yet synchronized", so [1-9] if
synchronized
      # Ref: http://www.eecis.udel.edu/~mills/ntp/html/decode.html#sys
      if (/\bstatus=[0-9][1-9][0-9][0-9]\b/) {
    print "\bOK!\n" if ($opt_v);
    exit 0;
      }

      if (/request variable was unknown/) {
    print "\bCan't tell!\nPerhaps you are running an old version of ntpd.\n" if
($opt_v);
    exit $opt_f;
      }

      if (/Connection refused/) {
    print "\bntpd is not running!\n" if ($opt_v);
    exit 1;
      }

      if ( ! /\bstatus=[0-9]0[0-9][0-9]\b/) {
    print "\bntpd output unexpected!\n" if ($opt_v);
    exit 1;
      }
    }
    close(Q);
    print "\b".substr("*+:.", $i % 4, 1) if ($opt_v);
    sleep($opt_s);
}
print "\bNo!\nntpd did not synchronize.\n" if ($opt_v);
exit 1;
==========

summary: ntp-wait does not return / is useless / does not match description of associated ntpq


body:
From https://bugs.launchpad.net/percona-toolkit/+bug/1279502
There is a security / privacy concern, even though the automatic version check
is mentioned on the change log.

It would make sense for a distribution maintained package to turn this off by
default.

Reproducible: Always

Steps to Reproduce:
user@host:~> PTDEBUG=1 pt-index-usage
user#host:~> PTDEBUG=1 pt-index-usage 2>&1 | grep VersionCheck
Actual Results:
user#host:~> PTDEBUG=1 pt-index-usage
[...]
# OptionParser:974 9596 version-check default: yes
# VersionCheck:5696 9596 Version check file percona-version-check in /tmp
# VersionCheck:5810 9596 Version check file /tmp/percona-version-check
contents: 0,1390762187
[...]

user#host:~> PTDEBUG=1 pt-index-usage 2>&1 | grep VersionCheck
# VersionCheck:5716 9621 FindBin::Bin: /usr/bin
# VersionCheck:5875 9621 SELECT CONCAT(@@hostname, @@port)
# VersionCheck:5896 9621 MySQL instance: d613005ef7763ae15e44be64c85ffe8b
tux3306 $VAR1 = {};
# VersionCheck:5696 9621 Version check file percona-version-check in /tmp
# VersionCheck:5810 9621 Version check file /tmp/percona-version-check
contents: 0,1390762187
# VersionCheck:5818 9621 Intsance d613005ef7763ae15e44be64c85ffe8b last checked
1390762187 now 1392584082 diff 1821895 hours until next check -482.08
# VersionCheck:5825 9621 Time to check $VAR1 = {
# VersionCheck:5818 9621 Intsance 0 last checked 1390762187 now 1392584082 diff
1821895 hours until next check -482.08
# VersionCheck:5825 9621 Time to check $VAR1 = {
# VersionCheck:5739 9621 2 instances to check
# VersionCheck:5748 9621 Using https
# VersionCheck:5914 9621 Server response: $VAR1 = {
# VersionCheck:6015 9621 Items: $VAR1 = {
# VersionCheck:6160 9621 Perl version for $DBD::mysql::VERSION = 4.021
# VersionCheck:6160 9621 Perl version for $Percona::Toolkit::VERSION = 2.2.6
# VersionCheck:6149 9621 Perl version 5.18.1
# VersionCheck:6075 9621 platform: Linux
# VersionCheck:6080 9621 lsb_release: /usr/bin/lsb_release
# VersionCheck:6139 9621 OS version = openSUSE 13.1 (Bottle) (i586)
# VersionCheck:6191 9621 SHOW VARIABLES
# VersionCheck:6198 9621 MySQL version for MySQL = openSUSE package on tux3306
# VersionCheck:6198 9621 MySQL version for MySQL = 5.5.33-MariaDB on tux3306
# VersionCheck:5945 9621 Client response: $VAR1 = {
# VersionCheck:5948 9621 Server suggestions: $VAR1 = {
# VersionCheck:5696 9621 Version check file percona-version-check in /tmp
# VersionCheck:5839 9621 Updating last check time: 1392584083
# VersionCheck:5782 9621 Error updating version check file: Cannot write to
/tmp/percona-version-check: Permission denied at /usr/bin/pt-index-usage line
5858.

Expected Results:
1. package owns /etc/percona-toolkit
2. package ghosts /etc/percona-toolkit/percona-toolkit.conf (pt-*.conf)
3. commands do not run version checks by default, unless specifically asked to
do so

pkgs: percona-toolkit xtrabackup

summary: Percona Toolkit automatic version check transmits information to external entity


https://bugzilla.novell.com/show_bug.cgi?id=864299

https://bugzilla.novell.com/show_bug.cgi?id=864299#c0

           Summary: libpoppler-devel: missing runtime dependency
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
        AssignedTo: zaitor-at-opensuse.org
        ReportedBy: lazy.kent-at-opensuse.org
         QAContact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The libpoppler-devel package includes poppler-cpp.pc and libpoppler-cpp.so
(symlink to libpoppler-cpp.so.*).
So libpoppler-devel must require libpoppler-cpp.

openSUSE 12.3 and 13.1 are affected also.


body:
Gecko) Chrome/31.0.1650.63 Safari/537.36 SUSE/31.0.1650.63

Name        : tar
Version     : 1.26
Release     : 19.1.2

Cannot deal with large uid_t.

Reason: Default format got changed from GNU to POSIX.

Problem: In contrast to what the GNU tar documentation claims --format=3Dpo=
six
cannot deal with large uids.

Reproducible: Always

Steps to Reproduce:
1. create directory hierarchy testdir/ with large uidnumber e.g. 20000001.
2. tar cvf deleteme.tar testdir/
3. echo $? will give a 2.
Actual Results:=20=20
$? is 2

Expected Results:=20=20
$? should be 0.

tar cvf --format=3Dgnu gives the expected result.

This is a regression from older versions of OpenSuSE which used to have=20
--format=3Dgnu as a default format.

E.g.=20

OpenSuSE 11.3:

km82rt@rt-z9854:~> tar --version
tar (GNU tar) 1.23

km82rt@rt-z9854:~> tar =E2=80=93help | tail -5
*Dieses* =E2=80=9Etar=E2=80=9C hat als Voreinstellung:
--format=3Dgnu -f- -b20 --quoting-style=3Descape --rmt-command=3D/usr/libex=
ec/rmt
--rsh-command=3D/usr/bin/rsh

OpenSuSE 13.1:

km82rt@rt-ccs7560:tmp> tar --version
tar (GNU tar) 1.26
km82rt@rt-ccs7560:tmp> tar --help | tail -5
*This* tar defaults to:
--format=3Dposix -f- -b20 --quoting-style=3Descape --rmt-command=3D/usr/lib=
/rmt
--rsh-command=3D/usr/bin/rsh

The misleading documentation is available from
http://www.gnu.org/software/tar/manual/html_section/Formats.html

Format |     UID   File Size File Name  Devn=20
-------+-----------------------------------------
gnu    |   1.8e19  Unlimited Unlimited   63
oldgnu |   1.8e19  Unlimited Unlimited   63=20
v7     |  2097151       8GB     99       n/a
ustar  |  2097151       8GB    256       21
posix  | Unlimited Unlimited Unlimited Unlimited=20

Workaround: Go back to=20
+export DEFAULT_ARCHIVE_FORMAT=3D"GNU"
-export DEFAULT_ARCHIVE_FORMAT=3D"POSIX"
in tar.spec and recreate the tar RPM.

The current bug breaks many existing shell scripts which evaluate the exit =
code
of tar.
The bug is often triggered in setups using idmap_rid. For obvious reasons t=
here
is no way in large installation to change the uid to values which accomodate
the buggy tar implementation.

--=20
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail
-----

summary: GNU tar rpm cannot dealt with large uid_t


body:
Ran into KDE bug 329076 (https://bugs.kde.org/show_bug.cgi?id=329076)
This happens under openSuSE 13.1 with KDE 4.11.4 ,5 and 6

Nobody at kde.org seems to look at this, but it's a very annoying bug. Killing
the kscreenlocker_greet process gets you a new window where you can type your
password

Reproducible: Always

Steps to Reproduce:
1.Wait until the screenlocker kicks in
2.Wait 60 more seconds
3.Try to unlock the screen

Expected Results:
Display the window where you can typei-in the password

summary: KDE screenlocker doesn't show widget to type the password in


https://bugzilla.novell.com/show_bug.cgi?id=3D864314

https://bugzilla.novell.com/show_bug.cgi?id=3D864314#c0

           Summary: zypper: misleading conflict resolution problem message
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
        AssignedTo: zypp-maintainers-at-forge.provo.novell.com
        ReportedBy: jengelh-at-inai.de
         QAContact: qa-bugs-at-suse.de
          Found By: Beta-Customer
           Blocker: ---

Despite download-in-advance being the default and in use, zypper shows a
"...because it is not yet downloaded:" message which is incorrect at the ti=
me
it is being printed.
In addition, the installation does not show an indicator for installation s=
teps
"2/3" and "3/3" (basically, steps n-1 and n-2 are missing for any n>=3D3
involving openSUSE-release in the set).

rpm -q zypper
zypper-1.10.7-1.1.x86_64

v-sfac:~ # zypper in --no-recommends -f openSUSE-release
Loading repository data...
Reading installed packages...
Forcing installation of 'openSUSE-release-13.2-1.2.x86_64' from repository
'factory'.
Resolving package dependencies...

The following package is going to be reinstalled:
  openSUSE-release=20

The following product is going to be reinstalled:
  openSUSE=20

1 package to reinstall.
Overall download size: 180.7 KiB. No additional space will be used or freed=
=20
after the operation.
Continue? [y/n/? shows all options] (y):=20
(Use the Enter or Space key to scroll the text by lines or pages.)

LICENSE AGREEMENT
openSUSE=C2=AE 13.1
[and so on]
Retrieving package openSUSE-release-13.2-1.2.x86_64
                                           (1/1), 180.7 KiB (282.9 KiB
unpacked)
Retrieving: openSUSE-release-13.2-1.2.x86_64.rpm
........................[done]
Checking for file conflicts:
............................................[done]
Warning: Checking for file conflicts requires not installed packages to be
downloaded in advance in order to access their file lists. See option
'--download-in-advance' in the zypper manual page for details.

The following package had to be excluded from file conflicts check because =
it
is not yet downloaded:
  product:openSUSE

(1/3) Installing: openSUSE-release-13.2-1.2
.............................[done]

--=20
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail
-----


body:
Hi, the package seccheck-2.0-1348.1.noarch is from the security repo for
openSUSE 13.1. It contains a cron job that detects 60 minutes of inactivity at
the console and logs out the idle user.

But: when you logon via console (I start my box in multiuser.target aka
runlevel 3) just to "startx" the GUI, you are logged out quite unexpectedly
after 60 minutes, right during work... Marcus Meissner told me on the
openSUSE-en mailing list to open a bug and assign it to abergmann at suse.com
(which I can't when creating a bug).

Reproducible: Always

Steps to Reproduce:
1. install the package
2. issue "startx" in runlevel 3 (or multiuser.target)
3. work 60 minutes
4. see your GUI crash
Actual Results:
I am logged out because of console inactivity

Expected Results:
the running GUI is recognized, and activity detection includes the respective
GUI

summary: buggy autologout in seccheck-2.0-1348.1.noarch


body:
https://bugzilla.novell.com/show_bug.cgi?id=864561

https://bugzilla.novell.com/show_bug.cgi?id=864561#c0

           Summary: Pango packaging issue
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
        AssignedTo: bnc-team-gnome-at-forge.provo.novell.com
        ReportedBy: msvec-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: sbrabec-at-suse.com
          Found By: ---
           Blocker: ---

It looks like dependencies in pango packages are not right:

(30/33) Installing: pango-tools-1.36.1-4.2
.............................................................................................[done]
Additional rpm output:
/usr/bin/pango-querymodules-64: error while loading shared libraries:
libpango-1.0.so.0: cannot open shared object file: No such file or directory
warning: %post(pango-tools-1.36.1-4.2.x86_64) scriptlet failed, exit status 127

(31/33) Installing: libpango-1_0-0-1.36.1-4.2
..........................................................................................[done]

It was installed using zypper (and neither libpango nor pango-tools
have been installed before).

summary: Pango packaging issue


body:
Default /etc/X11/xorg.conf.d/50-synaptics.conf contains

Option    "HorizScrollDelta"    "0"

Zero is invalid value for VertScrollDelta/HorizScrollDelta. Having it set to 0
makes it impossible to flip natural scrolling in GNOME - it attempts to set
pair of "Synaptics Scrolling Distance" property where one value is zero and
this is rejected.

See https://bugs.freedesktop.org/show_bug.cgi?id=75074 for details.

If intention is to disable horizontal scrolling by default, it should be done
using HorizEdgeScroll option.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

summary: HorizScrollDelta=0 in default 50-synaptics.conf breaks natural scrolling


body:
Source can be found at KDE:Frameworks5/kauth. As with kinit package, code is
just ported to Qt5/KF5. org.kde.kf5auth.conf was renamed from org.kde.auth.conf
so it can be co-installed with kdelibs4 package(s)
Thus - asking for whitelist =)
Thanks!

Reproducible: Always

pkgs: kauth rpmlint

summary: AUDIT-0: libKF5Auth4.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.kf5auth.conf


body:
real hugh jobs (more than 2147483647 bytes) can not print via cups-lpd because
of int type of looping var.
error message sever side: Trailing character after file is not nul (48)!

see also: https://www.cups.org/str.php?L4351
and https://www.cups.org/strfiles.php/3266/str4351.patch

Reproducible: Always

Steps to Reproduce:
1.lpadmin -p P001 -v lpd://192.168.100.10/lp -D "Test" -m Postscript.ppd  -E
2.lp -d P001 huge_file.ps
3.follow /var/log/cups/error_log
Actual Results:
error message sever side: Trailing character after file is not nul (48)!
job restart due to the error (endless loop)

Expected Results:
accept and print the job

this is also relevant up to openSUSE 13.1

summary: cups-lpd hugh jobs (>2G) fail


body:
openSUSE currently uses Phalanx as the default chess engine for GNOME Chess.  I
recommend switching to GNU Chess instead.

I guess Phalanx is probably used by default because it has traditionally been
weaker than GNU Chess and easier to play against, whereas GNU Chess has been
comparatively difficult. Unfortunately, Phalanx is still far too difficult for
most players, even on the easiest difficulty level. GNU Chess 6 is a complete
rewrite that provides many more options for controlling the difficulty than
Phalanx or GNU Chess 5. Beginning with GNOME 3.12, GNOME Chess will take
advantage of this to make the game much easier on lower difficulty levels.

The gnome-games pattern currently Recommends Phalanx and Suggests GNU Chess.
Those could probably just be switched.

Reproducible: Always

Some less-relevant considerations:

* GNU Chess is already used by default in Debian, Ubuntu, and Fedora.
* GNU Chess is actively maintained. I'm not sure when Phalanx last received a
stable release, but it's been at least eight years, and probably more.
* openSUSE is the only distro I'm aware of that ships a beta version of
Phalanx, so it alone has to deal with bugs introduced since the last stable
release. The only time I tested it, last May, I found a serious bug with
castling (fixed in openSUSE) that caused GNOME Chess to appear to hang.
* I am the upstream maintainer of GNOME Chess. (I'm not associated with GNU
Chess.)

summary: Consider switching default chess engine to GNU Chess


https://bugzilla.novell.com/show_bug.cgi?id=865018

https://bugzilla.novell.com/show_bug.cgi?id=865018#c0

           Summary: The manual page if current insserv is to short
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: All
        OS/Version: openSUSE 13.1
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
        AssignedTo: lnussel-at-suse.com
        ReportedBy: werner-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: lnussel-at-suse.com, mt-at-suse.com, nfbrown-at-suse.com,
                    krienke@uni-koblenz.de, arvidjaar-at-gmail.com,
                    jzhang-at-suse.com
        Depends on: 861489
          Found By: Development
           Blocker: ---

In fact the lines

 SYNOPSIS
       insserv [[-r] <script>]
 OPTIONS
       --remove, -r
           Remove the listed scripts from all runlevels
 DESCRIPTION
       This version of insserv is just a stub for compatibility.

does not explain anything about

         ### BEGIN INIT INFO
         # Provides:          boot_facility_1 [ boot_facility_2 ...]
         # Required-Start:    boot_facility_1 [ boot_facility_2 ...]
         # Required-Stop:     boot_facility_1 [ boot_facility_2 ...]
         # Should-Start:      boot_facility_1 [ boot_facility_2 ...]
         # Should-Stop:       boot_facility_1 [ boot_facility_2 ...]
         # X-Start-Before:    boot_facility_1 [ boot_facility_2 ...]
         # X-Stop-After:      boot_facility_1 [ boot_facility_2 ...]
         # Default-Start:     run_level_1 [ run_level_2 ...]
         # Default-Stop:      run_level_1 [ run_level_2 ...]
         # X-Interactive:     true
         # Short-Description: single_line_description
         # Description:       multiline_description
         ### END INIT INFO

Tbhis bug is also relevant for SLES12


body:
sudo may display a spurious warning when using pam_sss.

Reproducible: Always

Steps to Reproduce:
1. Setup sssd
2. pam-config --add --sss
3. sudo -i
Actual Results:
The following warning is displayed even though 'sudo -i' was successful.

sudo: unable to establish credentials: User not known to the underlying
authentication module

Expected Results:
No warning.

sudo has already been patched upstream to resolve this issue.

http://www.sudo.ws/repos/sudo/rev/b6022e26135a

summary: spurious sudo warning when pam_sss is enabled


body:
https://bugzilla.novell.com/show_bug.cgi?id=865243

https://bugzilla.novell.com/show_bug.cgi?id=865243#c0

           Summary: ntop package missing /var/lib/ntop
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
        AssignedTo: bg-at-suse.com
        ReportedBy: msvec-at-suse.com
         QAContact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The lib dir is not created and is apparently missing in the specfile.
ntop does not start without that dir created.

summary: ntop package missing /var/lib/ntop


body:
https://bugzilla.novell.com/show_bug.cgi?id=865325

https://bugzilla.novell.com/show_bug.cgi?id=865325#c0

           Summary: wicked clobbers hostname
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
        AssignedTo: mt-at-suse.com
        ReportedBy: schwab-at-suse.com
         QAContact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If sysconfig/network/config:DHCLIENT_SET_HOSTNAME=no then the hostname must not
be changed.

summary: wicked clobbers hostname


https://bugzilla.novell.com/show_bug.cgi?id=865539

https://bugzilla.novell.com/show_bug.cgi?id=865539#c0

           Summary: nsslowhash.h header missing at least on 13.1 maybe even older systems
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
        AssignedTo: wolfgang-at-rosenauer.org
        ReportedBy: mrueckert-at-suse.com
         QAContact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

network:time/chrony needs it for NSS support.

works still on SLE 11 SP2. might also be broken on SLE 11 SP3.

Wolfgang already found out it checks for kernel version 2.6 to enable that
feature. so everything newer should be broken.


body:
slipstream:/home/lancelot # systemctl start apache2.service
Job for apache2.service failed. See 'systemctl status apache2.service' and
'journalctl -xn' for details.
slipstream:/home/lancelot # systemctl status apache2.service -l
apache2.service - The Apache Webserver
   Loaded: loaded (/usr/lib/systemd/system/apache2.service; enabled)
   Active: failed (Result: exit-code) since Tue 2014-02-25 13:21:30 GMT; 16s
ago
  Process: 7030 ExecStop=/usr/sbin/start_apache2 -D SYSTEMD -DFOREGROUND -k
graceful-stop (code=exited, status=1/FAILURE)
  Process: 6978 ExecStart=/usr/sbin/start_apache2 -D SYSTEMD -DFOREGROUND -k
start (code=exited, status=1/FAILURE)
 Main PID: 6978 (code=exited, status=1/FAILURE)

Feb 25 13:21:30 slipstream start_apache2[6978]: Module "systemd" is not
installed, ignoring.
Feb 25 13:21:30 slipstream start_apache2[6978]: Check the APACHE_MODULES
setting in /etc/sysconfig/apache2.
Feb 25 13:21:30 slipstream start_apache2[6978]: httpd2-prefork: Syntax error on
line 177 of /etc/apache2/httpd.conf: Syntax error on line 99 of
/etc/apache2/default-server.conf: Syntax error on line 1 of
/etc/apache2/conf.d/mod_evasive.conf: Cannot load
/usr/lib64/apache2/mod_evasive20.so into server:
/usr/lib64/apache2/mod_evasive20.so: cannot open shared object file: No such
file or directory
Feb 25 13:21:30 slipstream systemd[1]: apache2.service: main process exited,
code=exited, status=1/FAILURE
Feb 25 13:21:30 slipstream start_apache2[7030]: Module "systemd" is not
installed, ignoring.
Feb 25 13:21:30 slipstream start_apache2[7030]: Check the APACHE_MODULES
setting in /etc/sysconfig/apache2.
Feb 25 13:21:30 slipstream start_apache2[7030]: httpd2-prefork: Syntax error on
line 177 of /etc/apache2/httpd.conf: Syntax error on line 99 of
/etc/apache2/default-server.conf: Syntax error on line 1 of
/etc/apache2/conf.d/mod_evasive.conf: Cannot load
/usr/lib64/apache2/mod_evasive20.so into server:
/usr/lib64/apache2/mod_evasive20.so: cannot open shared object file: No such
file or directory
Feb 25 13:21:30 slipstream systemd[1]: apache2.service: control process exited,
code=exited status=1
Feb 25 13:21:30 slipstream systemd[1]: Failed to start The Apache Webserver.
Feb 25 13:21:30 slipstream systemd[1]: Unit apache2.service entered failed
state.

/etc/apache2/conf.d/mod_evasive.conf
-------------------------------------------------
LoadModule evasive20_module /usr/lib64/apache2/mod_evasive20.so

<IfModule mod_evasive20.c>

# l  /usr/lib64/apache2/mod_evasive*
-rwxr-xr-x 1 root root 19008 Dec  8 06:00 /usr/lib64/apache2/mod_evasive24.so*

Reproducible: Always

Steps to Reproduce:
1.Start apache2
2.
3.
Actual Results:
Fails

Expected Results:
Should start

summary: Apache not working in factory - mod_evasive problem


body:
Xorg segmentation fault when using the "xf86-video-mach64" driver on x86
platform when launching apps "firefox" and "openoffice" from plasma desktop.
This is on a new install of openSuSE 13.1 on x86 32-bit motherboard.

Xorg.0.log shows:
[CODE]

[   538.135] (EE)
[   538.135] (EE) Backtrace:
[   538.157] (EE) 0: /usr/bin/Xorg (xorg_backtrace+0x49) [0x81df3e9]
[   538.157] (EE) 1: /usr/bin/Xorg (0x8048000+0x19b174) [0x81e3174]
[   538.157] (EE) 2: linux-gate.so.1 (__kernel_rt_sigreturn+0x0) [0xb777240c]
[   538.157] (EE) 3: /usr/lib/xorg/modules/drivers/mach64_drv.so
(0xb6d2d000+0x1e645) [0xb6d4b645]
[   538.157] (EE) 4: /usr/lib/xorg/modules/drivers/mach64_drv.so
(0xb6d2d000+0x1e72c) [0xb6d4b72c]
[   538.157] (EE) 5: /usr/lib/xorg/modules/libexa.so (0xb6358000+0xc609)
[0xb6364609]
[   538.157] (EE) 6: /usr/bin/Xorg (0x8048000+0x11a971) [0x8162971]
[   538.157] (EE) 7: /usr/bin/Xorg (CompositeGlyphs+0xa6) [0x8150ec6]
[   538.157] (EE) 8: /usr/bin/Xorg (0x8048000+0x11411c) [0x815c11c]
[   538.157] (EE) 9: /usr/bin/Xorg (0x8048000+0x10fbbd) [0x8157bbd]
[   538.157] (EE) 10: /usr/bin/Xorg (0x8048000+0x36ecd) [0x807eecd]
[   538.157] (EE) 11: /usr/bin/Xorg (0x8048000+0x24f6a) [0x806cf6a]
[   538.157] (EE) 12: /lib/libc.so.6 (__libc_start_main+0xf3) [0xb72749d3]
[   538.157] (EE) 13: /usr/bin/Xorg (0x8048000+0x25339) [0x806d339]
[   538.157] (EE)
[   538.157] (EE) Segmentation fault at address 0xc
[   538.157] (EE)
Fatal server error:
[   538.157] (EE) Caught signal 11 (Segmentation fault). Server aborting
[   538.157] (EE)
[   538.157] (EE)
Please consult the The X.Org Foundation support
         at http://wiki.x.org
 for help.
[   538.157] (EE) Please also check the log file at "/var/log/Xorg.0.log" for
additional information.
[   538.157] (EE)
[   538.257] (EE) Server terminated with error (1). Closing log file.

[/CODE]

Motherboard VGA chip information:
[CODE]
lspci | grep VGA
00:09.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Rage
XL PCI (rev 27)
[/CODE]

This backtrace and symptoms seem to match the problem discussed here:
https://bugs.freedesktop.org/show_bug.cgi?id=70556
The upstream bug report and the commit there fixes the crash.

Reproducible: Always

Steps to Reproduce:
1. Login to KDE desktop
2. Click "firefox" or "openoffice" icons in plasma desktop
3. X crashes and you are presented with the graphical login again
Actual Results:
Xorg.0.log  show segfault pasted above.

Expected Results:
Normal application launch.

Problem and diagnosis was discussed in the following thread.
https://forums.opensuse.org/showthread.php/495697-New-13-1-x86-32-bit-install-KDE-Xorg-crashes-launching-apps

In addition to confirming that the upstream commit resolved the crash, so also
did the following circumvention while still using the faulty
"xf86-video-mach64"  driver as suggested in the upstream bug report.

Create file named /etc/X11/xorg.conf.d/50-mydevice.conf  containing
[CODE]
Section "Device"

  Identifier "Default Device"

  Driver "mach64"
  Option "ExaNoComposite" "true"
EndSection
[/CODE]

summary: Xorg segfault launching apps with  "xf86-video-mach64" driver


body:
On Intel Haswell systems, pthread_mutex_trylock violates POSIX semantics.  It
fails to return EBUSY when the mutex is in the locked state.  This breaks
existing software that expects POSIX semantics and links dynamically with libc
on openSUSE 13.1.

Reproducible: Always

Steps to Reproduce:
1. Put a mutex into the locked state with pthread_mutex_lock.
2. Query the state of the mutex with pthread_mutex_trylock.
Actual Results:
pthread_mutex_trylock returns 0.

Expected Results:
pthread_mutex_trylock should return EBUSY.

See https://www.sourceware.org/ml/libc-alpha/2012-12/msg00398.html.

Andi Kleen writes:
> I would claim to be at least covered by the rationale, but ok.
> Too bad it's a shall.

> Can you point me to any real software impacted by this?

VMware Workstation and Player are real software packages that are impacted by
this decision.

summary: pthread_mutex_trylock violates POSIX semantics on systems with lock elision


body:
The packaged version (2013.05.23-2.1.2) of youtube-dl fails on my system.

2014.02.27.1 works flawlessly.

Reproducible: Always

Steps to Reproduce:
1.Install youtube-dl
2.Try downloading a video

Actual Results:
> youtube-dl -v https://www.youtube.com/watch?v=XXXXXXXXXXX
[debug] System config: []
[debug] User config: []
[debug] Command-line args: ['-v',
'https://www.youtube.com/watch?v=XXXXXXXXXXX']
[debug] youtube-dl version 2013.05.23
[debug] Python version 2.7.5 -
Linux-3.11.10-7-desktop-x86_64-with-SuSE-13.1-x86_64
[debug] Proxy map: {}
[youtube] Setting language
[youtube] XXXXXXXXXXX: Downloading video webpage
[youtube] XXXXXXXXXXX: Downloading video info webpage
[youtube] XXXXXXXXXXX: Extracting video information
Traceback (most recent call last):
  File "/usr/lib64/python2.7/runpy.py", line 162, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code
    exec code in run_globals
  File "/usr/bin/youtube-dl/__main__.py", line 18, in <module>
  File "/usr/bin/youtube-dl/youtube_dl/__init__.py", line 603, in main
  File "/usr/bin/youtube-dl/youtube_dl/__init__.py", line 587, in _real_main
  File "/usr/bin/youtube-dl/youtube_dl/FileDownloader.py", line 719, in
download
  File "/usr/bin/youtube-dl/youtube_dl/FileDownloader.py", line 462, in
extract_info
  File "/usr/bin/youtube-dl/youtube_dl/InfoExtractors.py", line 99, in extract
  File "/usr/bin/youtube-dl/youtube_dl/InfoExtractors.py", line 659, in
_real_extract
KeyError: 'sig'

Expected Results:
Have downloaded a .mp4 file.

summary: Youtube-dl fails


body:
I have these messages in my dmesg:

[   20.526382] EXT4-fs (sda1): mounting ext3 file system using the ext4
subsystem
[   20.572718] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts:
acl,user_xattr
[   20.653012] EXT4-fs (dm-0): warning: checktime reached, running e2fsck is
recommended
[   20.700149] EXT4-fs (dm-0): mounted filesystem with ordered data mode. Opts:
acl,user_xattr,journal_checksum
[   20.780360] SGI XFS with ACLs, security attributes, realtime, large
block/inode numbers, no debug enabled
[   20.877039] EXT4-fs (dm-2): warning: checktime reached, running e2fsck is
recommended
[   20.891707] XFS (dm-6): Mounting Filesystem
[   20.911392] XFS (dm-7): Mounting Filesystem
[   20.913928] EXT4-fs (dm-2): mounted filesystem with ordered data mode. Opts:
acl,user_xattr,journal_checksum
[   20.960387] XFS (dm-8): Mounting Filesystem
[   21.907109] EXT4-fs (dm-5): mounted filesystem with ordered data mode. Opts:
acl,user_xattr
[   21.928877] EXT4-fs (dm-9): warning: checktime reached, running e2fsck is
recommended
[   21.929530] XFS (dm-7): Ending clean mount
[   21.945120] XFS (dm-8): Ending clean mount
[   21.966153] EXT4-fs (dm-9): mounted filesystem with ordered data mode. Opts:
acl,user_xattr,journal_checksum
[   22.015595] EXT4-fs (dm-4): mounted filesystem with ordered data mode. Opts:
acl,user_xattr,journal_checksum
[   22.193371] XFS (dm-6): Ending clean mount

Although the relevant filesystems have the right flags in /etc/fstab, no
automatic fsck is run.

This is a system with LVM on RAID5.

mounts:
> mount|fgrep ext4
/dev/mapper/system-root on / type ext4
(rw,relatime,journal_checksum,data=ordered)
/dev/mapper/system-home on /home type ext4
(rw,relatime,journal_checksum,data=ordered)
/dev/mapper/system-space on /space type ext4
(rw,relatime,journal_checksum,data=ordered)
/dev/mapper/raid-nelson--boot on /raid/nelson/boot type ext4
(ro,relatime,stripe=256,data=ordered)
/dev/mapper/raid-backup on /raid/backup type ext4
(rw,relatime,journal_checksum,stripe=64,data=ordered)
/dev/mapper/raid-raid on /raid/raid type ext4
(rw,relatime,journal_checksum,stripe=64,data=ordered)

> l /dev/mapper/
insgesamt 0
drwxr-xr-x  2 root root     260 28. Feb 13:52 ./
drwxr-xr-x 20 root root    4300 28. Feb 13:52 ../
crw-----

summary: No automatic fsck on ext4 fs after checktime reached


body:
on a dual homed system you may choose the parameter bind starting up services
with xinetd. I have done so e.g. for saned in /etc/xinetd.d/sane-port. In the
case xinetd could not start the service [message in Var/log/messages:
xinetd: bind failed (Cannot assign requested address (errno=99)) . service =
sane-port

Reproducible: Always

Steps to Reproduce:
1. Every time on reboot
2. when restarting xinetd after startup was finished with
systemctl restart xinetd.service
everything works.
3.
Actual Results:
For me it helpd to add the follwing line in
/usr/lib/systemd/system/xinetd.service

After=network.service

(in the [Unit] section)

I head to learn a bit about systemd to find the locations - is there a good
tutorial e.g. in the SDB?

summary: xinetd must wait on boot time for network.service before starting up


body:
https://bugzilla.novell.com/show_bug.cgi?id=866442

https://bugzilla.novell.com/show_bug.cgi?id=866442#c0

           Summary: ImageMagick is unupdatable
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: X11 Applications
        AssignedTo: pgajdos-at-suse.com
        ReportedBy: coolo-at-suse.com
         QAContact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

I can't update to the new version of ImageMagick because the shared library
policy is violated. These are just examples of files conflicting

File /etc/ImageMagick-6/francais.xml
  from install of
     libMagickCore-6_Q16-2-6.8.8.7-1.1.x86_64(repo-oss)
  conflicts with file from package
     libMagickCore-6_Q16-1-6.8.8.1-2.1.x86_64(@System)

File /etc/ImageMagick-6/francais.xml
  from install of
     libMagickCore-6_Q16-2-6.8.8.7-1.1.x86_64(repo-oss)
  conflicts with file from package
     libMagickCore-6_Q8-1-6.8.6.9-1.1.x86_64(@System)

File /usr/lib64/ImageMagick-6.8.8/config-Q16/configure.xml
  from install of
     libMagickCore-6_Q16-2-6.8.8.7-1.1.x86_64(repo-oss)
  conflicts with file from package
     libMagickCore-6_Q16-1-6.8.8.1-2.1.x86_64(@System)

File /usr/lib64/ImageMagick-6.8.8/modules-Q16/coders/aai.so
  from install of
     libMagickCore-6_Q16-2-6.8.8.7-1.1.x86_64(repo-oss)
  conflicts with file from package
     libMagickCore-6_Q16-1-6.8.8.1-2.1.x86_64(@System)

summary: ImageMagick is unupdatable


body:
https://bugzilla.novell.com/show_bug.cgi?id=866870

https://bugzilla.novell.com/show_bug.cgi?id=866870#c0

           Summary: ifplug doesn't work
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: x86-64
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
        AssignedTo: mt-at-suse.com
        ReportedBy: mhrusecky-at-suse.com
         QAContact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have my network card set in ifplug mode

STARTMODE='ifplugd'

But when I plug in cable, nothing happens. ifplugstatus shows that cable
detection works well, but after starting network, there is no ifplug process
running. Not sure what else you will need to investigate, just ask and I'll
provide more info.

summary: ifplug doesn't work


body:
https://bugzilla.novell.com/show_bug.cgi?id=866874

https://bugzilla.novell.com/show_bug.cgi?id=866874#c0

           Summary: Xsession argument parsing bug
    Classification: openSUSE
           Product: openSUSE Factory
           Version: 13.2 Milestone 0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
        AssignedTo: sndirsch-at-suse.com
        ReportedBy: cxiong-at-novell.com
         QAContact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

While trying to fix bnc#863709, I've come across some bug in Xsession.

It's a array iteration issue:

See a patch at
https://build.opensuse.org/package/rdiff/home:cxiong:branches:X11:XOrg/xdm?linkrev=base&rev=2

This bug messes up arguments that's used to start up GNOME session, a related
fix:

https://build.opensuse.org/package/rdiff/home:cxiong:branches:GNOME:Factory/gnome-session?linkrev=base&rev=2

The deleted lines are unnecessary but introduced because of the Xsession bug.

pkgs: gnome-session xdm

summary: Xsession argument parsing bug


body:
[fontforge 20120731-2.1.2]
[libpng12-0 1.2.50-3.1.1]
[libpng15-15 1.5.13-3.1.1]

Calling fontforge gives

  Copyright (c) 2000-2012 by George Williams.
   Executable based on sources from 14:57 GMT 31-Jul-2012.
   Library based on sources from 14:57 GMT 31-Jul-2012.
  Application was compiled with png.h from libpng-1.5.13
  Application  is  running with png.c from libpng-1.2.50
  Incompatible libpng version in application and library
  Segmentation Fault

Recompiling fontforge from the original sources fixed this issue for me.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

summary: fontforge segfaults if both libpng12-0 and libpng15-15 are installed


https://bugzilla.novell.com/show_bug.cgi?id=867055

https://bugzilla.novell.com/show_bug.cgi?id=867055#c0

           Summary: ipsec-tools not working in specific setup
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
        AssignedTo: jbohac-at-suse.com
        ReportedBy: meissner-at-suse.com
         QAContact: qa-bugs-at-suse.de
                CC: mt-at-suse.com
          Found By: ---
           Blocker: ---

customer report via security-at-suse.de

Date: Thu, 06 Mar 2014 15:07:41 +1100
Subject: [security-at-suse.de] [DOS][openSuSE13.1] ipsec-tools-0.7.3-29.2.2

Hi,
I have found an issue that causes IPSEC to fail in unexpected ways.
This was discovered in the process of upgrading some router/firewalls
from openSuSE 12.1 to openSuSE 13.1.  It was found that simple IPSEC
setups do indeed work, but the more complicated setup in use here fails.

Impact:
The following scenario *DOES* work with the RPM as supplied

                      network


body:
I have installed acct and I can start accounting manually:
  systemctl start acct.service
But I'm not able to start it on boot:
  systemctl is-enabled acct.service
static
  systemctl preset acct.service
The unit files have no [Install] section. They are not meant to be enabled
using systemctl.
Possible reasons for having this kind of units are:
1) A unit may be statically enabled by being symlinked from another unit's
   .wants/ or .requires/ directory.
2) A unit's purpose may be to act as a helper for some other unit which has
   a requirement dependency on it.
3) A unit may be started when needed via activation (socket, path, timer,
   D-Bus, udev, scripted systemctl call, ...).

After a reboot acct is not restarted and I cannot find in the documentation
any indication of what to do.

Reproducible: Always

Steps to Reproduce:
1.install acct
2.reboot
3.
Actual Results:
acct service is not started automatically

Expected Results:
acct should be started automatically on boot or it should be possible to run:
systemctl enable acct.service

summary: accounting service cannot be started on boot


body:
The KDE Oxygen theme segfaults  gnucash 2.6.2, 2.6.1, , see the gnucash-devel
thread (stack trace included in thread)

http://lists.gnucash.org/pipermail/gnucash-devel/2014-March/037186.html

the fault freezes the X Screen

Repeatable

Temp Fix - change there to HighCOntrast

Also reported under RedHat

Reproducible: Always

Steps to Reproduce:
1.Stat X/ KDE
2.Start gnucash
3.bug appears after use & click on menubar
Actual Results:
gnucash segfaults

I can gdb on demand if required

summary: KDE Oxygen Theme segfaults gnucash 2.6.2


body:
I have two mouses and two keyboards and want to start a multiseat-like Xephyr
for guests.

This is how I start Xephyr:
...........
export DISPLAY=:0
MOUSE="/dev/input/by-id/usb-Logitech_USB_Optical_Mouse-event-mouse"
KBD="/dev/input/by-id/usb-Dell_Dell_USB_Keyboard-event-kbd"

Xephyr :11 \
        -ac \
        -screen 1280x1024 \
        -dpms \
        -keybd
"evdev,,device=${KBD},xkbrules=evdev,xkbmodel=evdev,xkblayout=de,xkbvariant=nodeadkeys,xkboptions=compose:rwin"
\
        -mouse "evdev,,device=${MOUSE}" \
...........

When I startkde3 within Xephyr (DISPLAY=:11) it crashs as soon as I move the
2nd mouse:
(EE)
(EE) Backtrace:
(EE) 0: Xephyr (xorg_backtrace+0x3d) [0x575a0d]
(EE) 1: Xephyr (0x400000+0x179779) [0x579779]
(EE) 2: /lib64/libpthread.so.0 (0x7fd9930e1000+0xf9f0) [0x7fd9930f09f0]
(EE) 3: /lib64/libc.so.6 (strlen+0x2a) [0x7fd991aefeea]
(EE) 4: Xephyr (0x400000+0x13f765) [0x53f765]
(EE) 5: Xephyr (0x400000+0x14009c) [0x54009c]
(EE) 6: Xephyr (0x400000+0x4a75e) [0x44a75e]
(EE) 7: Xephyr (0x400000+0x22b2a) [0x422b2a]
(EE) 8: /lib64/libc.so.6 (__libc_start_main+0xf5) [0x7fd991a8ebe5]
(EE) 9: Xephyr (0x400000+0x22e71) [0x422e71]
(EE)
(EE) Segmentation fault at address 0x8
(EE)
Fatal server error:
(EE) Caught signal 11 (Segmentation fault). Server aborting
(EE)

If I don't use kde3 but a simple windowmanager like twm or fvwm then it
survives a bit longer. But still not stable.
My setup was working a long time since openSUSE 11.4 without problems. It
stopped working in Dec or Jan 2013/14 probably after some online updates.

Backtrace:

Core was generated by `Xephyr :11 -ac -screen 1280x1024 -dpms -keybd
evdev,,device=/dev/input/by-id/us'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007fd991aa2849 in __GI_raise (sig=sig@entry=6) at
./nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007fd991aa2849 in __GI_raise (sig=sig@entry=6) at
./nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fd991aa3cd8 in __GI_abort () at abort.c:89
#2  0x000000000057b99e in OsAbort () at utils.c:1299
#3  0x000000000047eca1 in AbortDDX (error=error@entry=EXIT_ERR_ABORT) at
kdrive.c:237
#4  0x0000000000580482 in AbortServer () at log.c:767
#5  0x0000000000581188 in FatalError (f=f@entry=0x5a05e8 "Caught signal %d
(%s). Server aborting\n") at log.c:908
#6  0x00000000005797cc in OsSigHandler (signo=11, sip=<optimized out>,
unused=<optimized out>) at osinit.c:147
#7  <signal handler called>
#8  strlen () at ../sysdeps/x86_64/strlen.S:106
#9  0x000000000053f765 in SizeDeviceInfo (dev=dev@entry=0x2b04810) at
xiquerydevice.c:195
#10 0x000000000054009c in ProcXIQueryDevice (client=0x2e48b30) at
xiquerydevice.c:100
#11 0x000000000044a75e in Dispatch () at dispatch.c:432
#12 0x0000000000422b2a in main (argc=10, argv=0x7fffe5878cf8, envp=<optimized
out>) at main.c:298

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

summary: Xephyr crash when moving evdev mouse


body:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.6.html

* The NFS dissector could crash
  wnpa-sec-2014-01 CVE-2014-2281
* The M3UA dissector could crash
  wnpa-sec-2014-02 CVE-2014-2282
* The RLC dissector could crash
  wnpa-sec-2014-03 CVE-2014-2283
* The MPEG file parser could overflow a buffer
  wnpa-sec-2014-04 CVE-2014-2299

https://www.wireshark.org/docs/relnotes/wireshark-1.8.13.html

* The NFS dissector could crash
  wnpa-sec-2014-01 CVE-2014-2281
* The RLC dissector could crash
  wnpa-sec-2014-03 CVE-2014-2283
* The MPEG file parser could overflow a buffer
  wnpa-sec-2014-04 CVE-2014-2299

Reproducible: Didn't try

summary: Wireshark 1.10.6 and 1.8.13 maintenance released fix several vulnerabilities


https://bugzilla.novell.com/show_bug.cgi?id=867607

https://bugzilla.novell.com/show_bug.cgi?id=867607#c0

           Summary: server:monitoring/cacti: Bug require apache2-mod_php5
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Platform: x86-64
        OS/Version: openSUSE 13.1
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
        AssignedTo: nix-at-opensuse.org
        ReportedBy: bruno@ioda-net.ch
         QAContact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

At install time cacti has a hard require on apache2-mod_php5

This create a conflicting situation in several case.
First if apache2-mod_php5 is installed it drive the download of apache2
apache2-mod_prefork.

Numerous admins could setup and use different webserver like lighthttpd or
nginx or other apache2 mpm (like worker and mpm)

PhP5 could be used in fcgid, php-pfm, or fastcgi mode.

Cacti should allow those setup without requiring something that could not be
installed.


https://bugzilla.novell.com/show_bug.cgi?id=867665

https://bugzilla.novell.com/show_bug.cgi?id=867665#c0

           Summary: update-apparmor-samba-profile not called at samba startup
    Classification: openSUSE
           Product: openSUSE 13.1
           Version: Final
          Platform: Other
        OS/Version: openSUSE 13.1
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Samba
        AssignedTo: samba-maintainers@SuSE.de
        ReportedBy: suse-beta-at-cboltz.de
         QAContact: samba-maintainers@SuSE.de
          Found By: Beta-Customer
           Blocker: ---

(playing bug proxy again)

You probably remember that the good old /etc/init.d/smb called
update-apparmor-samba-profile at startup.

Unfortunately smb.service does not do this, which results in angry users on the
german mailinglist complaining about AppArmor and why it breaks their newly
setup fileserver. (People who updated from an older openSUSE version will still
have a working AppArmor sniplet, which means it works for them "for historical
reasons"[tm] unless they add a new share.)

Long story short: Please change smb.service to call
update-apparmor-samba-profile (maybe as ExecStartPre=).

Please also prepare an update for 13.1, and make sure to also include the fix
for bug 856759.


https://bugzilla.novell.com/show_bug.cgi?id=867887

https://bugzilla.novell.com/show_bug.cgi?id=867887#c0

           Summary: devel:languages:python:Factory/python: test failures with SQLite 3.8.4
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Platform: All
        OS/Version: openSUSE 13.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
        AssignedTo: jmatejek-at-suse.com
        ReportedBy: Andreas.Stieger-at-gmx.de
         QAContact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: Community User
           Blocker: ---

Hello,

Python and python3 in factory fail with SQLite 3.8.4 (3.8.4.1)
https://build.opensuse.org/request/show/225584

test_sqlite fails with the below:

[ 296s] test_sqlite
[ 296s] /home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/dbapi.py:656:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] b = sqlite.Binary(chr(0) + "'")
[ 296s] /home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/types.py:70:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] val = buffer("Guglhupf")
[ 296s] /home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/types.py:234:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] val = buffer("Guglhupf")
[ 296s] /home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/types.py:350:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] result = self.con.execute('select ? as "x [bin]"',
(buffer(zlib.compress(testdata)),)).fetchone()[0]
[ 296s]
/home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/userfunctions.py:39:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] return buffer("blob")
[ 296s]
/home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/userfunctions.py:206:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] self.assertEqual(val, buffer("blob"))
[ 296s]
/home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/userfunctions.py:249:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] cur.execute("select isblob(?)", (buffer("blob"),))
[ 296s]
/home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/userfunctions.py:273:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] ("foo", 5, 3.14, None, buffer("blob"),))
[ 296s]
/home/abuild/rpmbuild/BUILD/Python-2.7.6/Lib/sqlite3/test/userfunctions.py:365:
DeprecationWarning: buffer() not supported in 3.x
[ 296s] cur.execute("select checkType('blob', ?)", (buffer("blob"),))
[ 296s] test test_sqlite failed