--1551684988.8cc0a301.22666
Date: Mon, 4 Mar 2019 07:36:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127672

            Bug ID: 1127672
           Summary: [Build 20190301] openQA test fails in partitioning, missing x11 pattern because Mesa-drivers build failure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PowerPC
               URL: https://openqa.opensuse.org/tests/866750/modules/parti
                    tioning/steps/1
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: normand-at-linux.vnet.ibm.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

[Build 20190301] openQA test fails in partitioning missing x11 pattern

most probably caused by Mesa-drivers build failure
===
[   79s] Native C++ compiler: c++ (gcc 8.2.1 "c++ (SUSE Linux) 8.2.1 20190204
[gcc-8-branch revision 268513]")
[   79s] Build machine cpu family: ppc64
[   79s] Build machine cpu: ppc64le
[   79s]
[   79s] meson.build:194:6: ERROR:  Problem encountered: Unknown architecture
ppc64. Please pass -Dvulkan-drivers to set driver options. Patches gladly
accepted to fix this.
[   79s]
[   79s] A full log can be found at
/home/abuild/rpmbuild/BUILD/mesa-18.3.4/build/meson-logs/meson-log.txt
[   79s] error: Bad exit status from /var/tmp/rpm-tmp.ZHWd8q (%build)
===

as per jobhist seems to be caused by last source change from sr
https://build.opensuse.org/request/show/677779
===
$osc jobhist -l3 openSUSE:Factory:PowerPC/Mesa-drivers standard ppc64le
time                 package                                            reason
         code              build time      worker
2019-02-01 12:53:28  Mesa-drivers                                       meta
change      succeeded               39m 53s   obs-power8-04:2
2019-02-05 01:37:21  Mesa-drivers                                       source
change    succeeded               36m 16s   obs-power8-03:29
2019-02-24 20:05:26  Mesa-drivers                                       source
change    failed                   1m 34s   obs-power8-03:10
===

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-ppc64le-RAID0@ppc64le fails in
[partitioning](https://openqa.opensuse.org/tests/866750/modules/partitioning/steps/1)

## Test suite description

## Reproducible

Fails since (at least) Build
[20190228](https://openqa.opensuse.org/tests/865832)

## Expected result

Last good: [20190214](https://openqa.opensuse.org/tests/854646) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?machine=ppc64le&arch=ppc64le&version=Tumbleweed&test=RAID0&flavor=DVD&distri=opensuse)


--1551692777.dFD0ee80.24360
Date: Mon, 4 Mar 2019 09:46:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1127700

            Bug ID: 1127700
           Summary: bash patch bash50-001/bash50-002 seems to break env expansion
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Tony Jones made me aware that using build(1) on tumbleweed is no longer
possible for his userid. It is not really clear whats special about his user
but we digged this far:

build(1) at some point runs this function:

recipe_setup_spec() {
    TOPDIR=`chroot $BUILD_ROOT su -c "rpm --eval '%_topdir'" - $BUILD_USER`
    if test -z "$TOPDIR"; then
        cleanup_and_exit 1 "Error: TOPDIR empty"
    fi
    test "$DO_INIT_TOPDIR" = false || rm -rf "$BUILD_ROOT$TOPDIR"
    for i in BUILD RPMS/`uname -m` RPMS/i386 RPMS/noarch SOURCES SPECS SRPMS
BUILDROOT OTHER ; do
        mkdir -p $BUILD_ROOT$TOPDIR/$i
    done
    chown -R "$ABUILD_UID:$ABUILD_GID" "$BUILD_ROOT$TOPDIR"
    mkdir -p $BUILD_ROOT$TOPDIR/SOURCES
    echo ":: MYSRCDIR: $MYSRCDIR"
    ls -ld "$MYSRCDIR"/*
    cp -p "$MYSRCDIR"/* $BUILD_ROOT$TOPDIR/SOURCES/
}

what we observed is that

  cp -p "$MYSRCDIR"/* $BUILD_ROOT/ ..

expands to

  cp -p <empty> $BUILD_ROOT

leading to an error message. we have validated that $MYSRCDIR is actually
properly set (as can be seen by the echo before". with other words

  ls -ld "$MYSRCDIR"/*

expands to *empty*, while

  ls -ld $MYSRCDIR/*

properly expands. MYSRCDIR is without spaces or other weird characters (the
only non-normal thing in there is a literal '.').

We have validated that building bash without bash50-001/bash50-002 patches
fixes this problem.


body:
--1551695519.b548aa216.9302
Date: Mon, 4 Mar 2019 10:31:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127711

            Bug ID: 1127711
           Summary: ibus: build requires nodejs-emojione
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: qzhao-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: ftake-at-geeko.jp
          Found By: ---
           Blocker: ---

On openSUSE ibus requries nodejs-emojione for building. Is that real? I can't
see where it's actually used during build.

summary: ibus: build requires nodejs-emojione


--1551725241.d8CbD70.8942
Date: Mon, 4 Mar 2019 18:47:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127790

            Bug ID: 1127790
           Summary: security:netfilter/xtables-addons: Bug build with Linux 5, "error: implicit declaration of function 'do_gettimeofday'; did you mean 'do_settimeofday64'?"
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: jengelh-at-inai.de
          Reporter: pgnet.dev-at-gmail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: Community User
           Blocker: ---

Building 'xtable-addons', locally, for just-released Linux 5.0,

https://build.opensuse.org/package/show/home:pgnd:Kernel:stable/xtables-addons

fails at

https://build.opensuse.org/public/build/home:pgnd:Kernel:stable/openSUSE_Leap_15.0/x86_64/xtables-addons/_log

    ...
    [53s]gcc -Wp, -MD,
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions/.xt_condition.o.d
 -nostdinc -isystem /usr/lib64/gcc/x86_64-suse-linux/8/include
-I/usr/src/linux-5.0.0-lp150.4.g6bc6477/arch/x86/include
-I./arch/x86/include/generated  -I/usr/src/linux-5.0.0-lp150.4.g6bc6477/include
-I./include -I/usr/src/linux-5.0.0-lp150.4.g6bc6477/arch/x86/include/uapi
-I./arch/x86/include/generated/uapi
-I/usr/src/linux-5.0.0-lp150.4.g6bc6477/include/uapi -I./include/generated/uapi
-include /usr/src/linux-5.0.0-lp150.4.g6bc6477/include/linux/kconfig.h -include
/usr/src/linux-5.0.0-lp150.4.g6bc6477/include/linux/compiler_types.h
-I/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions
-I/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions
-D__KERNEL__ -Wall -Wundef -Werror=strict-prototypes -Wno-trigraphs
-fno-strict-aliasing -fno-common -fshort-wchar -fno-PIE
-Werror-implicit-function-declaration -Werror=implicit-int -Wno-format-security
-std=gnu89-mno-sse -mno-mmx -mno-sse2-mno-3dnow -mno-avx
-m64-falign-jumps=1-falign-loops=1-mno-80387-mno-fp-ret-in-387-mpreferred-stack-boundary=3-mskip-rax-setup
-mtune=generic -mno-red-zone -mcmodel=kernel -DCONFIG_X86_X32_ABI
-DCONFIG_AS_CFI=1-DCONFIG_AS_CFI_SIGNAL_FRAME=1-DCONFIG_AS_CFI_SECTIONS=1-DCONFIG_AS_FXSAVEQ=1-DCONFIG_AS_SSSE3=1-DCONFIG_AS_AVX=1-DCONFIG_AS_AVX2=1-DCONFIG_AS_AVX512=1-DCONFIG_AS_SHA1_NI=1-DCONFIG_AS_SHA256_NI=1-Wno-sign-compare
-fno-asynchronous-unwind-tables -mindirect-branch=thunk-extern
-mindirect-branch-register -fno-delete-null-pointer-checks -Wno-frame-address
-Wno-format-truncation -Wno-format-overflow -Wno-int-in-bool-context
-O2--param=allow-store-data-races=0-Wframe-larger-than=2048-fstack-protector
-Wno-unused-but-set-variable -Wno-unused-const-variable
-fno-var-tracking-assignments -pg -mrecord-mcount -mfentry -DCC_USING_FENTRY
-fno-inline-functions-called-once -Wdeclaration-after-statement -Wvla
-Wno-pointer-sign -Wno-stringop-truncation -fno-strict-overflow
-fno-merge-all-constants -fmerge-constants -fno-stack-check -fconserve-stack
-Werror=date-time -Werror=incompatible-pointer-types -Werror=designated-init
-fmacro-prefix-map=/usr/src/linux-5.0.0-lp150.4.g6bc6477/=
-Wno-packed-not-aligned  -DMODULE  -DKBUILD_BASENAME='"xt_condition"'
-DKBUILD_MODNAME='"xt_condition"' -c -o
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions/xt_condition.o
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions/xt_condition.c

[53s]/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions/xt_SYSRQ.c:
In function 'sysrq_crypto_init':

[53s]/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.2/extensions/xt_SYSRQ.c:342:2:
error: implicit declaration of function 'do_gettimeofday'; did you mean
'do_settimeofday64'? [
    -Werror=implicit-function-declaration
    ]
    [53s]do_gettimeofday(&now);
    [53s]^~~~~~~~~~~~~~~
    [53s]do_settimeofday64
    [53s]cc1: some warnings being treated as errors
    ...

Doing some limited digging, I do find

    https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1811721/comments/6

which, although re: NVIDIA build, *does* point out

    ...
    change in kernel function do_gettimeofday to efi_gettimeofday
    ...

I haven't yet found the documentation of that change on kernel.org for v5.0 ...


--1551774245.4AfaBEEd0.30933
Date: Tue, 5 Mar 2019 08:24:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127857

            Bug ID: 1127857
           Summary: libreoffice fails to build against devel:gcc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: rguenther-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

gcc8 slated for submission to Factory (SR#679161) fails to build libreoffice.
Local build of Factory status results in

[10399s] [build CUT] sw_uwriter
[10399s] /bin/sh: line 1:  6191 Segmentation fault      (
LD_LIBRARY_PATH=${LD_LIBRARY_PATH:+$LD_LIBRARY_PATH:}"$I/program:$I/program":$W/UnpackedTarball/cppunit/src/cppunit/.libs
MALLOC_CHECK_=2 MALLOC_PERTURB_=153 $W/LinkTarget/Executable/cppunittester
$W/LinkTarget/CppunitTest/libtest_sw_uwriter.so --headless
"-env:BRAND_BASE_DIR=file://$S/instdir" "-env:BRAND_SHARE_SUBDIR=share"
"-env:BRAND_SHARE_RESOURCE_SUBDIR=program/resource"
"-env:UserInstallation=file://$W/CppunitTest/sw_uwriter.test.user"
"-env:CONFIGURATION_LAYERS=xcsxcu:file://$I/share/registry
xcsxcu:file://$W/unittest/registry" "-env:UNO_TYPES=file://$I/program/types.rdb
file://$I/program/types/offapi.rdb file://$I/program/types/oovbaapi.rdb"
"-env:UNO_SERVICES=file://$W/Rdb/ure/services.rdb
file://$W/ComponentTarget/comphelper/util/comphelp.component
file://$W/ComponentTarget/configmgr/source/configmgr.component
file://$W/ComponentTarget/framework/util/fwk.component
file://$W/ComponentTarget/i18npool/util/i18npool.component
file://$W/ComponentTarget/package/util/package2.component
file://$W/ComponentTarget/package/source/xstor/xstor.component
file://$W/ComponentTarget/sfx2/util/sfx.component
file://$W/ComponentTarget/ucb/source/core/ucb1.component
file://$W/ComponentTarget/ucb/source/ucp/file/ucpfile1.component
file://$W/ComponentTarget/unotools/util/utl.component
file://$W/ComponentTarget/unoxml/source/service/unoxml.component
file://$W/ComponentTarget/uui/util/uui.component"
-env:URE_INTERNAL_LIB_DIR=file://$I/program -env:LO_LIB_DIR=file://$I/program
-env:LO_JAVA_DIR=file://$I/program/classes --protector
$W/LinkTarget/Library/unoexceptionprotector.so unoexceptionprotector
--protector $W/LinkTarget/Library/unobootstrapprotector.so
unobootstrapprotector --protector
$W/LinkTarget/Library/libvclbootstrapprotector.so vclbootstrapprotector
"-env:CPPUNITTESTTARGET=$W/CppunitTest/sw_uwriter.test" ) >
$W/CppunitTest/sw_uwriter.test.log 2>&1
[10399s] ToxMiscTest::testTdf73162 finished in: 0ms
[10399s]
ToxTextGeneratorTest::EmptyStringIsReturnedForPageNumberPlaceholderOfZeroItems
finished in: 0ms
[10399s]
ToxTextGeneratorTest::OneAtSignIsReturnedForPageNumberPlaceholderOfOneItem
finished in: 0ms
[10399s]
ToxTextGeneratorTest::TwoAtSignsAreReturnedForPageNumberPlaceholderOfOneItem
finished in: 0ms
[10399s]
ToxTextGeneratorTest::TwoAtSignsAreReturnedForPageNumberPlaceholderOfOneItem
finished in: 0ms
[10399s]
ToxTextGeneratorTest::EmptyStringIsReturnedAsNumStringIfNoTextMarkIsSet
finished in: 0ms
[10399s]
ToxTextGeneratorTest::EmptyStringIsReturnedAsNumStringIfToxSourcesIsEmpty
finished in: 0ms
[10399s] which: no gdb in
(/usr/local/bin:/usr/bin:/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin:/usr/lib64/jvm/java/bin)
[10399s] You need gdb in your path to show backtraces
[10400s]
[10400s] Error: a unit test failed, please do one of:
[10400s]
[10400s] make CppunitTest_sw_uwriter CPPUNITTRACE="gdb --args"
[10400s]     # for interactive debugging on Linux
[10400s] make CppunitTest_sw_uwriter VALGRIND=memcheck
[10400s]     # for memory checking
[10400s] make CppunitTest_sw_uwriter DEBUGCPPUNIT=TRUE
[10400s]     # for exception catching
[10400s]
[10400s] You can limit the execution to just one particular test by:
[10400s]
[10400s] make CPPUNIT_TEST_NAME="testXYZ" ...above mentioned params...
[10400s]
[10400s] make[1]: ***
[/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/solenv/gbuild/CppunitTest.mk:121:
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/workdir/CppunitTest/sw_uwriter.test]
Error 1
[10400s] make[1]: *** Waiting for unfinished jobs....
[10425s] In member function '_ZN10ScDPSource17FillMemberResultsEv.part.548',
[10425s]     inlined from 'FillMemberResults' at
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1018:6,
[10425s]     inlined from 'getResults' at
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1063:22:
[10425s]
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1036:84:
warning: argument 1 value '18446744073709551615' exceeds maximum object size
9223372036854775807 [-Walloc-size-larger-than=]
[10425s]              pColResults.reset(new
uno::Sequence<sheet::MemberResult>[nColLevelCount]);
[10425s]
             ^
[10425s]
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:
In member function 'getResults':
[10425s] /usr/include/c++/8/new:122:7: note: in a call to allocation function
'operator new []' declared here
[10425s]  void* operator new[](std::size_t) _GLIBCXX_THROW (std::bad_alloc)
[10425s]        ^
[10425s] In member function '_ZN10ScDPSource17FillMemberResultsEv.part.548',
[10425s]     inlined from 'FillMemberResults' at
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1018:6,
[10425s]     inlined from 'getResults' at
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1063:22:
[10425s]
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:1050:85:
warning: argument 1 value '18446744073709551615' exceeds maximum object size
9223372036854775807 [-Walloc-size-larger-than=]
[10425s]              pRowResults.reset( new
uno::Sequence<sheet::MemberResult>[nRowLevelCount] );
[10425s]
              ^
[10425s]
/home/abuild/rpmbuild/BUILD/libreoffice-6.2.0.3/sc/source/core/data/dptabsrc.cxx:
In member function 'getResults':
[10425s] /usr/include/c++/8/new:122:7: note: in a call to allocation function
'operator new []' declared here
[10425s]  void* operator new[](std::size_t) _GLIBCXX_THROW (std::bad_alloc)
[10425s]        ^
[10425s] make: *** [Makefile:286: build] Error 2
[10425s] error: Bad exit status from /var/tmp/rpm-tmp.veZtng (%check)
[10425s]
[10425s]
[10425s] RPM build errors:
[10425s]     Macro expanded in comment on line 23: %define tarball_url
https://download.documentfoundation.org/libreoffice/src/6.1.0
[10425s]
[10425s]     Bad exit status from /var/tmp/rpm-tmp.veZtng (%check)
[10425s]
[10425s] murzim failed "build libreoffice.spec" at Mon Mar  4 16:22:26 UTC
2019.
[10425s]

I'm not sure whether the interleaved compiler warnings/notes have anything
to say or whether just the segmentation fault is the issue (I think that's it).
gdb is not in BuildRequires so we don't get a meaningful backtrace.


--1551778806.Cd3bD2fC0.14971
Date: Tue, 5 Mar 2019 09:40:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1127877

            Bug ID: 1127877
           Summary: apparmor can not handle  /bin/sh or /bin/bash if those are links
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If /bin/sh is a link this has to work as well:

 noether:/ # ll -G  /bin/sh
 lrwxrwxrwx 1 root 25 Mar  4 09:43 /bin/sh -> /etc/alternatives/_bin_sh
 noether:/ # ll -G  /etc/alternatives/_bin_sh
 lrwxrwxrwx 1 root 11 Mar  4 09:43 /etc/alternatives/_bin_sh -> /usr/bin/sh
 noether:/ # ll -G  /usr/bin/sh
 lrwxrwxrwx 1 root 20 Mar  4 09:43 /usr/bin/sh -> /etc/alternatives/sh
 noether:/ # ll -G  /etc/alternatives/sh
 lrwxrwxrwx 1 root 13 Mar  4 09:43 /etc/alternatives/sh -> /usr/bin/bash

... note that the last link can be also any other bournce shell like

  /usr/bin/dash
  /usr/bin/ksh
  /usr/bin/mksh
  /usr/bin/obosh

or whatsoever we have around


--1551785788.8CeBe0.8461
Date: Tue, 5 Mar 2019 11:36:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127907

            Bug ID: 1127907
           Summary: obs-service-tar_scm breaks with unicode in filenames
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: FSchreiner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 31:
ordinal not in range(128)


--1551787996.4FCa215.25294
Date: Tue, 5 Mar 2019 12:13:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1127911

            Bug ID: 1127911
           Summary: Minetest 5.0.0 needs group and user whitelisted
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mvetter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

minetestserver in Minetest 5.0.0 needs user and group 'minetest' whitelisted in
rpmlint.


body:
--1551792165.EB7EEEDe0.25275
Date: Tue, 5 Mar 2019 13:22:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127934

            Bug ID: 1127934
           Summary: dvipdf fails in tumbleweed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: vidar-at-hi.is
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

dvipdf bref_isl.dvi
/usr/bin/dvipdf: line 36: /usr/bin/basename: Permission denied
/usr/bin/dvipdf: line 46: /usr/bin/dvips: Permission denied
/usr/bin/dvipdf: line 46: /usr/bin/dvips: Success
/usr/bin/dvipdf: line 46: /usr/bin/gs: Permission denied

dvips is OK, but ps2pdf fails in a similar manner.
This might be a bug in another subsystem.

--
Vi�ar Gu�mundsson

summary: dvipdf fails in tumbleweed


--1551796076.2Fd7DE5.24916
Date: Tue, 5 Mar 2019 14:27:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1127954

            Bug ID: 1127954
           Summary: openstack client produce issubclass() arg 1 must be a class
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: OpenStack
          Assignee: cloud-bugs-at-suse.de
          Reporter: kyrylo.shatskyy-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Is reproducible  for openstack-3.7 only:

```
$ openstack-3.7 server list
issubclass() arg 1 must be a class
```

```
Traceback (most recent call last):
  File "/usr/lib/python3.7/site-packages/cliff/app.py", line 400, in
run_subcommand
    result = cmd.run(parsed_args)
  File "/usr/lib/python3.7/site-packages/osc_lib/command/command.py", line 41,
in run
    return super(Command, self).run(parsed_args)
  File "/usr/lib/python3.7/site-packages/cliff/display.py", line 119, in run
    self.produce_output(parsed_args, column_names, data)
  File "/usr/lib/python3.7/site-packages/cliff/lister.py", line 82, in
produce_output
    parsed_args,
  File "/usr/lib/python3.7/site-packages/cliff/formatters/table.py", line 101,
in emit_list
    self.add_rows(x, column_names, data)
  File "/usr/lib/python3.7/site-packages/cliff/formatters/table.py", line 80,
in add_rows
    first_row = next(data_iter)
  File "/usr/lib/python3.7/site-packages/openstackclient/compute/v2/server.py",
line 1326, in <genexpr>
    ) for s in data))
  File "/usr/lib/python3.7/site-packages/osc_lib/utils/__init__.py", line 495,
in get_item_properties
    if issubclass(formatter, cliff_columns.FormattableColumn):
  File "/usr/lib64/python3.7/abc.py", line 143, in __subclasscheck__
    return _abc_subclasscheck(cls, subclass)
TypeError: issubclass() arg 1 must be a class
clean_up ListServer: issubclass() arg 1 must be a class
Traceback (most recent call last):
  File "/usr/lib/python3.7/site-packages/osc_lib/shell.py", line 135, in run
    ret_val = super(OpenStackShell, self).run(argv)
  File "/usr/lib/python3.7/site-packages/cliff/app.py", line 279, in run
    result = self.run_subcommand(remainder)
  File "/usr/lib/python3.7/site-packages/osc_lib/shell.py", line 175, in
run_subcommand
    ret_value = super(OpenStackShell, self).run_subcommand(argv)
  File "/usr/lib/python3.7/site-packages/cliff/app.py", line 400, in
run_subcommand
    result = cmd.run(parsed_args)
  File "/usr/lib/python3.7/site-packages/osc_lib/command/command.py", line 41,
in run
    return super(Command, self).run(parsed_args)
  File "/usr/lib/python3.7/site-packages/cliff/display.py", line 119, in run
    self.produce_output(parsed_args, column_names, data)
  File "/usr/lib/python3.7/site-packages/cliff/lister.py", line 82, in
produce_output
    parsed_args,
  File "/usr/lib/python3.7/site-packages/cliff/formatters/table.py", line 101,
in emit_list
    self.add_rows(x, column_names, data)
  File "/usr/lib/python3.7/site-packages/cliff/formatters/table.py", line 80,
in add_rows
    first_row = next(data_iter)
  File "/usr/lib/python3.7/site-packages/openstackclient/compute/v2/server.py",
line 1326, in <genexpr>
    ) for s in data))
  File "/usr/lib/python3.7/site-packages/osc_lib/utils/__init__.py", line 495,
in get_item_properties
    if issubclass(formatter, cliff_columns.FormattableColumn):
  File "/usr/lib64/python3.7/abc.py", line 143, in __subclasscheck__
    return _abc_subclasscheck(cls, subclass)
TypeError: issubclass() arg 1 must be a class

END return value: 1
```


body:
--1551890759.B0Ea81b6.6578
Date: Wed, 6 Mar 2019 16:45:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128195

            Bug ID: 1128195
           Summary: gnome-control-center

summary: gnome-control-center


--1551958061.b6dB0.1509
Date: Thu, 7 Mar 2019 11:27:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128323

            Bug ID: 1128323
           Summary: Add the latest pytest macros to python-rpm-macros from Factory
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We need %pytest and %pytest_arch macros from
https://github.com/openSUSE/python-rpm-macros/pull/20 and
https://github.com/openSUSE/python-rpm-macros/pull/21 in SUSE:SLE-12:Update and
SUSE:SLE-15:Update code streams.


body:
--1551959420.4f4a0.21951
Date: Thu, 7 Mar 2019 11:50:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128329

            Bug ID: 1128329
           Summary: xmonad 0.13 loses state on restart
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

fixed upstream in 0.14

summary: xmonad 0.13 loses state on restart


body:
--1552036341.80Bd4.9247
Date: Fri, 8 Mar 2019 09:12:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128460

            Bug ID: 1128460
           Summary: GCC 9: libunistring build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails for very same reason as:
https://bugzilla.opensuse.org/show_bug.cgi?id=1120894

summary: GCC 9: libunistring build fails


--1552038329.3b7A8e10.27304
Date: Fri, 8 Mar 2019 09:45:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1128467

            Bug ID: 1128467
           Summary: Recently introduced apparmor profile for ghostscript breaks printing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the latest ghostscript update, printing basically any document fails with
"filter failed" log message.

The cups error_log file contains:

> D [08/Mar/2019:09:02:07 +0100] [Job 123] Starting renderer with command: gs -dShowAcroForm  -q -dBATC
> D [08/Mar/2019:09:02:07 +0100] [Job 123] PAGE: 1 1
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Filetype: PDF
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Storing temporary files in /var/spool/cups/tmp
> D [08/Mar/2019:09:02:07 +0100] [Job 123] PID 31260 (/usr/lib/cups/filter/pdftopdf) exited with no errors.
> D [08/Mar/2019:09:02:07 +0100] [Job 123] File contains 1 pages
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Starting renderer with command: gs -dShowAcroForm  -q -dBATCH -dPARANOIDSAFER -dQUIET -dNOPAUSE -sDEVICE=ijs -sIjsServer=hpijs -dDEVICEWIDTHPOINTS=595 -dDEVICEHEIGHTPOINTS=842 -sDeviceManufacturer=\"HEWLETT-PACKARD\" -sDeviceModel=\"deskjet 5550\" -dDuplex=true -dTumble=false -r600 -sIjsParams=Quality:Quality=0,Quality:ColorMode=2,Quality:MediaType=0,Quality:PenSet=2,PS:MediaPosition=7 -dIjsUseOutputFD -sOutputFile=-   /var/spool/cups/tmp/foomatic-gHncRI
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Starting process \"kid3\" (generation 1)
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Starting process \"kid4\" (generation 2)
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Starting process \"renderer\" (generation 2)
> D [08/Mar/2019:09:02:07 +0100] [Job 123] JCL: \033%-12345X@PJL
> D [08/Mar/2019:09:02:07 +0100] [Job 123] <job data>
> D [08/Mar/2019:09:02:07 +0100] [Job 123] GPL Ghostscript 9.26: Can\'t start ijs server \"hpijs\"
> D [08/Mar/2019:09:02:07 +0100] [Job 123] **** Unable to open the initial device, quitting.
> D [08/Mar/2019:09:02:07 +0100] [Job 123] renderer exited with status 1
> D [08/Mar/2019:09:02:07 +0100] [Job 123] Possible error on renderer command line or PostScript error. Check options.Kid3 exit status: 3
> D [08/Mar/2019:09:02:07 +0100] [Job 123] prnt/backend/hp.c 919: ERROR: null print job total=0

Where this last, not very helpful message is the only thing seen in the system
journal.

strace on cupsd shows this problem:

> 31268 1552032127.625520 execve("/usr/lib/cups/filter/sh", ["sh", "-c", "hpijs"], 0x7ffc16bdd7a0 /* 35 vars */) = -1 ENOENT (No such file or directory)
> 31268 1552032127.625613 execve("/usr/bin/sh", ["sh", "-c", "hpijs"], 0x7ffc16bdd7a0 /* 35 vars */) = -1 EACCES (Permission denied)
> 31268 1552032127.625731 execve("/usr/sbin/sh", ["sh", "-c", "hpijs"], 0x7ffc16bdd7a0 /* 35 vars */) = -1 ENOENT (No such file or directory)
> 31268 1552032127.625812 execve("/bin/sh", ["sh", "-c", "hpijs"], 0x7ffc16bdd7a0 /* 35 vars */) = -1 EACCES (Permission denied)
> 31268 1552032127.625922 execve("/usr/bin/sh", ["sh", "-c", "hpijs"], 0x7ffc16bdd7a0 /* 35 vars */) = -1 EACCES (Permission denied)

audit.log shows this:

> type=AVC msg=audit(1552000855.174:2629): apparmor="DENIED" operation="exec" profile="/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}" name="/bin/bash" pid=2761 comm="gs" requested_mask="x" denied_mask="x" fsuid=4 ouid=0

The problem is obviously caused by

> * Thu Feb 07 2019 jsegitz-at-suse.com
> - Added apparmor_usr.bin.gs. This profile prevents execution of
>   executables to serve as hardening for the binaries that process
>   ghostscript. This is of limited use but prevents simple exploits.

I believe this was introduced while working on bug 1117336. I'm all for
security, but isn't it bit harsh to break printing completely without explicit
warning or notice, and without any error messages that might give users a clue
where to look?


--1552046290.81a738E0.17803
Date: Fri, 8 Mar 2019 11:58:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128503

            Bug ID: 1128503
           Summary: VUL-0: CVE-2018-12181: edk2: Stack buffer overflow with corrupted BMP
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/225914/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: guillaume.gardet-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1686783

A stack buffer overflow was found in edk2 when the HII database contains a
Bitmap who claims as 4-bit or 8-bit per pixel, but the palette contains more
than 16(2^4) or 256(2^8) colors.

Upstream issue:

https://bugzilla.tianocore.org/show_bug.cgi?id=1135

References:
https://lists.01.org/pipermail/edk2-devel/2019-March/037626.html
https://bugzilla.redhat.com/show_bug.cgi?id=1686783
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12181


--1552076176.d7ac5.15355
Date: Fri, 8 Mar 2019 20:16:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128570

            Bug ID: 1128570
           Summary: pcmanfm-qt crashes when no application is assigned to a file type
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LXQt
          Assignee: mvetter-at-suse.com
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running pcmanfm-qt-0.14.1-2.1.i586
Right click on a file, say a .avi
Chose Open or open with -> other application.
Result: pcmanfm-qt crashes
Expected behaviour: Show dialog that allows selection of application.
In this context: VLC player is not listed as installed application, mplayer is
(after you install them, of course


body:
--1552177113.5b3200.32190
Date: Sun, 10 Mar 2019 00:18:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128607

            Bug ID: 1128607
           Summary: gs profile should have a profile name
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: jsegitz-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Please change

profile
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
{

to

profile ghostscript
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
{

In case you overlooked it: the actual diff is

-profile /usr/bin/...
+profile ghostscript /usr/bin/...

This has the advantage that you'll get a much more readable profile name in
audit.log, aa-status output, ps Zaux etc., and avoids problems if you ever have
to add another executable to the attachment.

Please also rename /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript.

summary: gs profile should have a profile name


body:
--1552177600.eCdD068E0.32286
Date: Sun, 10 Mar 2019 00:26:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128608

            Bug ID: 1128608
           Summary: ghostscript: AppArmor packaging issues
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: jsegitz-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I noticed two issues with the packaging of the ghostscript AppArmor profile:

a) ghostscript owns the /etc/apparmor.d/ directory

This doesn't really hurt, but   Requires: apparmor-abstractions   would be a
better choice.

b) the profile doesn't get loaded/reloaded on package updates

You can do this with

BuildRequires:  apparmor-rpm-macros

%post
%apparmor_reload /etc/apparmor.d/ghostscript

(obviously this assumes that you handle bug 1128607 first ;-)

summary: ghostscript: AppArmor packaging issues


body:
--1552301659.eDf5Cd0.2666
Date: Mon, 11 Mar 2019 10:54:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128697

            Bug ID: 1128697
           Summary: ghostscript: AppArmor profile additions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: jsegitz-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Discussions on the opensuse-de mailinglist with Thorsten Marquardt showed that
the ghostscript AppArmor profile needs more additions:

  /usr/bin/ps2pdf14 ix,

  /usr/bin/dirname Cx,

  profile /usr/bin/dirname {
    #include <abstractions/base>
    /usr/bin/dirname mr,
  }

summary: ghostscript: AppArmor profile additions


body:
Build Identifier:

It's in Tumbleweed and numerous other private repositories already.

Reproducible: Always

summary: Wishlist: Please consider updating Virtualbox to 6.0.4


--1552360642.2AC6E5e1.11390
Date: Tue, 12 Mar 2019 03:17:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128794

            Bug ID: 1128794
           Summary: GCC: Internal compiler error with -mtune=cortex-a57 -O2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 799668
  --> http://bugzilla.opensuse.org/attachment.cgi?id=799668&action=edit
Preprocessed source

When compiling openBLAS with TARGET=DYNAMIC_ARCH, the compiler throws an
internal error when compiling some functions with mtune=cortex-a57:

gcc  -O2   -march=armv8-a -mtune=cortex-a57   -c saxpby_k_CORTEXA57.pp.c -o
tmp.o
---
../kernel/arm64/../arm/axpby.c: In function 'saxpby_k_CORTEXA57':
../kernel/arm64/../arm/axpby.c:94:1: internal compiler error: Segmentation
fault
 }
 ^
---

When using -O1 or -mtune=cortex-a53, the code compiles fine.

GCC version (Leap 15.1, aarch64):
$> gcc -v
Using built-in specs.
Reading specs from /usr/lib64/gcc/aarch64-suse-linux/7/defaults.spec
COLLECT_GCC=/usr/bin/gcc
COLLECT_LTO_WRAPPER=/usr/lib64/gcc/aarch64-suse-linux/7/lto-wrapper
Target: aarch64-suse-linux
Configured with: ../configure --prefix=/usr --infodir=/usr/share/info
--mandir=/usr/share/man --libdir=/usr/lib64 --libexecdir=/usr/lib64
--enable-languages=c,c++,objc,fortran,obj-c++,ada,go --enable-checking=release
--disable-werror --with-gxx-include-dir=/usr/include/c++/7 --enable-ssp
--disable-libssp --disable-libvtv --disable-libmpx --disable-libcc1
--disable-plugin --with-bugurl=http://bugs.opensuse.org/
--with-pkgversion='SUSE Linux' --with-slibdir=/lib64 --with-system-zlib
--enable-libstdcxx-allocator=new --disable-libstdcxx-pch
--enable-version-specific-runtime-libs --with-gcc-major-version-only
--enable-linker-build-id --enable-linux-futex --enable-gnu-indirect-function
--program-suffix=-7 --without-system-libunwind --enable-fix-cortex-a53-835769
--enable-fix-cortex-a53-843419 --build=aarch64-suse-linux
--host=aarch64-suse-linux
Thread model: posix
gcc version 7.4.0 (SUSE Linux)

GCC from Leap 15.0 fails as well, while gcc 8.2.1 or 8.3.1 from TW works.


body:
--1552383969.eEbd25.22261
Date: Tue, 12 Mar 2019 09:46:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1128844

            Bug ID: 1128844
           Summary: scdoc with flawed pkgconfig file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mvetter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In the pc file of scdoc 1.9.4 on TW we have 'prefix=/usr/local' which is wrong.

For this reason sway 1.0 is detecting scdoc 1.9.4 but is not able to find the
correct path to it.

This happened because PREFIX=%{_prefix} was set for make install but not for
make.

pkgs: scdoc sway

summary: scdoc with flawed pkgconfig file


--1552384353.DfEa5b0.10553
Date: Tue, 12 Mar 2019 09:52:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128845

            Bug ID: 1128845
           Summary: Libreoffice 6.2.1 VCL kde5 copy paste broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: LibreOffice
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: denni.granata-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Libreoffice Calc 6.2.1.2 VCL kde5
OS Tumbleweed 2019-03-11

Steps to reproduce:

Execute Libreoffice Calc.
1 - Copy from application outside Calc, paste inside Calc. Works.
2 - Copy inside Calc, paste inside/outside Calc. Works.
3 - Copy outside Calc, paste inside Calc will not work anymore. Calc will paste
the item copied inside Calc on step 2.

It seems a know bug from Libreoffice 6.2.0.3
fixes are coming.
https://bugs.documentfoundation.org/show_bug.cgi?id=122689


--1552384593.BFDdBaf0.28315
Date: Tue, 12 Mar 2019 09:56:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1128846

            Bug ID: 1128846
           Summary: chrony-dnssrv@.service has wrong path to helper script
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: thomas.blume-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# cat /etc/os-release
NAME="openSUSE Tumbleweed"
# VERSION="20190307"

# grep helper /usr/lib/systemd/system/chrony-dnssrv@.service
ExecStart=/usr/share/chrony-helper update-dnssrv-servers %I
          ^^^^^^^^^^^^^^^^^^^^^^^^

rpm -ql chrony | grep helper
/usr/lib/chrony/helper
^^^^^^^^^^^^^^^^^^^^^^

Please correct the path in ExecStart to point correctly to the helper script.


--1552402133.42D843fe4.21284
Date: Tue, 12 Mar 2019 14:48:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1128927

            Bug ID: 1128927
           Summary: The .treeinfo file for openSUSE Leap 15.1 contains 15.0 instead of 15.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: carnold-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The .treeinfo file needs to be updated from 15.0 to 15.1
This text file lives at the root of the installation media and is used
by the virtualization tools to identify the media.

For reference, see bug 1088558.


body:
--1552403799.17A7beEE0.1041
Date: Tue, 12 Mar 2019 15:16:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1128936

            Bug ID: 1128936
           Summary: bash LINENO variable wrong
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: gunreben@t-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

With bash version 5.0.2(1)-release I found, that the LINENO variable is not
always updated correctly.
The following script:
---
#/bin/bash

echo "003: $LINENO"
echo x && {
    (PATH=/bin; sh -c :)
}
echo "007: $LINENO"
---

results in this output:
---
003: 3
x
007: 6
---

This is the reason for one of the autoconf-testsuite failures on
openSUSE:Factory:zSystems.

To reproduce, just start a manual build of some openSUSE:Factory:zSystems
package and then do a chroot into the build environment.

summary: bash LINENO variable wrong


body:
--1552472793.41F28Cd60.27298
Date: Wed, 13 Mar 2019 10:26:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1129059

            Bug ID: 1129059
           Summary: VUL-0: chromium: 73.0.3683.75 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html

[$TBD][913964] High CVE-2019-5787: Use after free in Canvas. Reported by Zhe
Jin（金哲），Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo 360
Technology Co. Ltd on 2018-12-11
[$N/A][925864] High CVE-2019-5788: Use after free in FileAPI. Reported by Mark
Brand of Google Project Zero on 2019-01-28
[$N/A][921581] High CVE-2019-5789: Use after free in WebMIDI. Reported by Mark
Brand of Google Project Zero on 2019-01-14
[$7500][914736] High CVE-2019-5790: Heap buffer overflow in V8. Reported by
Dimitri Fourny (Blue Frost Security) on 2018-12-13
[$1000][926651] High CVE-2019-5791: Type confusion in V8. Reported by Choongwoo
Han of Naver Corporation on 2019-01-30
[$500][914983] High CVE-2019-5792: Integer overflow in PDFium. Reported by
pdknsk on 2018-12-13
[$TBD][937487] Medium CVE-2019-5793: Excessive permissions for private API in
Extensions. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research
on 2019-03-01
[$TBD][935175] Medium CVE-2019-5794: Security UI spoofing. Reported by Juno Im
of Theori on 2019-02-24
[$N/A][919643] Medium CVE-2019-5795: Integer overflow in PDFium. Reported by
pdknsk on 2019-01-07
[$N/A][918861] Medium CVE-2019-5796: Race condition in Extensions. Reported by
Mark Brand of Google Project Zero on 2019-01-03
[$N/A][916523] Medium CVE-2019-5797: Race condition in DOMStorage. Reported by
Mark Brand of Google Project Zero on 2018-12-19
[$N/A][883596] Medium CVE-2019-5798: Out of bounds read in Skia. Reported by
Tran Tien Hung (@hungtt28) of Viettel Cyber Security on 2018-09-13
[$1000][905301] Medium CVE-2019-5799: CSP bypass with blob URL. Reported by
sohalt on 2018-11-14
[$1000][894228] Medium CVE-2019-5800: CSP bypass with blob URL. Reported by Jun
Kokatsu (@shhnjk) on 2018-10-10
[$500][921390] Medium CVE-2019-5801: Incorrect Omnibox display on iOS. Reported
by Khalil Zhani on 2019-01-13
[$500][632514] Medium CVE-2019-5802: Security UI spoofing. Reported by Ronni
Skansing on 2016-07-28
[$1000][909865] Low CVE-2019-5803: CSP bypass with Javascript URLs'. Reported
by Andrew Comminos of Facebook on 2018-11-28
[$500][933004] Low CVE-2019-5804: Command line command injection on Windows.
Reported by Joshua Graham of TSS on 2019-02-17

summary: VUL-0: chromium: 73.0.3683.75 update


--1552636235.f4cc70.26137
Date: Fri, 15 Mar 2019 07:50:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129362

            Bug ID: 1129362
           Summary: openSUSE:Leap:15.1/erlang-rebar-testsuite failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/erlang-rebar-testsuite/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: nkrinner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/erlang-rebar-testsuite failed to build. Please see build
log:

https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/erlang-rebar-testsuite/standard/x86_64


--1552735496.3CEDAD640.9005
Date: Sat, 16 Mar 2019 11:24:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129473

            Bug ID: 1129473
           Summary: devel:languages:python/python-pythonwhois: Regex bug python 3.7
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
               URL: https://github.com/joepie91/python-whois/issues/142
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: sebix+novell.com-at-sebix.at
          Reporter: sebix+novell.com-at-sebix.at
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Upstream issue including a fix:
https://github.com/joepie91/python-whois/issues/142

Causes a build fail in
https://build.opensuse.org/package/show/devel:languages:python/python-whois_similarity_distance

Will apply the proposed fix


--1552846002.63BEA3.30102
Date: Sun, 17 Mar 2019 18:06:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129497

            Bug ID: 1129497
           Summary: btrfs kernel crash in 15.0 update kernel [Build 20190317-3] openQA test fails in sshfs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/882333/modules/sshfs
                    /steps/15
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-15.0-DVD-Updates-x86_64-kde@64bit-2G fails in
[sshfs](https://openqa.opensuse.org/tests/882333/modules/sshfs/steps/15)

## Test suite description
TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in
kde@USBboot_64 scenario.

Added by : oorlov;

Related ticket: poo#37000

## Reproducible

Fails since (at least) Build
[20190311-4](https://openqa.opensuse.org/tests/876927)

## Expected result

Last good: [20190311-3](https://openqa.opensuse.org/tests/876575) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?machine=64bit-2G&arch=x86_64&distri=opensuse&version=15.0&test=kde&flavor=DVD-Updates)


--1552912243.e05514.15276
Date: Mon, 18 Mar 2019 12:30:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129582

            Bug ID: 1129582
           Summary: devel:languages:ocaml/opam: No default solver, can't create a switch
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: ohering-at-suse.com
          Reporter: dawid.zych-at-yandex.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: andisugandi-at-opensuse.org
          Found By: ---
           Blocker: ---

Opam warns me it's been compiled without a solver and I'm unable to create a
switch:

    $ opam switch create default 4.07.1
    [ERROR] No available solver found. Make sure your solver configuration is
correct. This opam has been
            compiled without a built-in solver, so you need to install and
configure an external one. See
            http://opam.ocaml.org/doc/Install.html#ExternalSolvers for details.
    Switch initialisation failed: clean up? ('n' will leave the switch
partially installed) [Y/n]

Here's spec file from Fedora, in case it helps:
https://src.fedoraproject.org/rpms/opam/blob/master/f/opam.spec


body:
--1552920674.3Ab321.16262
Date: Mon, 18 Mar 2019 14:51:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129614

            Bug ID: 1129614
           Summary: openSUSE:Leap:15.1/allegro failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/allegro/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: lnussel-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/allegro failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/allegro/standard/x86_64

[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c: In
function 'allegro_gl_make_video_bitmap_helper1':
[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c:121:3:
warning: implicit declaration of function 'glGenFramebuffersEXT'; did you mean
'glXGetFrameUsageMESA'? [-Wimplicit-function-declaration]
[  128s]    glGenFramebuffersEXT(1, &((*pvid)->fbo));
[  128s]    ^~~~~~~~~~~~~~~~~~~~
[  128s]    glXGetFrameUsageMESA
[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c:127:3:
warning: implicit declaration of function 'glBindFramebufferEXT'
[-Wimplicit-function-declaration]
[  128s]    glBindFramebufferEXT(GL_FRAMEBUFFER_EXT, (*pvid)->fbo);
[  128s]    ^~~~~~~~~~~~~~~~~~~~
[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c:128:3:
warning: implicit declaration of function 'glFramebufferTexture2DEXT'
[-Wimplicit-function-declaration]
[  128s]    glFramebufferTexture2DEXT(GL_FRAMEBUFFER_EXT,
GL_COLOR_ATTACHMENT0_EXT, (*pvid)->target, (*pvid)->tex, 0);
[  128s]    ^~~~~~~~~~~~~~~~~~~~~~~~~
[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c:129:7:
warning: implicit declaration of function 'glCheckFramebufferStatusEXT'
[-Wimplicit-function-declaration]
[  128s]    if (glCheckFramebufferStatusEXT(GL_FRAMEBUFFER_EXT) !=
GL_FRAMEBUFFER_COMPLETE_EXT) {
[  128s]        ^~~~~~~~~~~~~~~~~~~~~~~~~~~
[  128s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/videovtb.c:132:4:
warning: implicit declaration of function 'glDeleteFramebuffersEXT'
[-Wimplicit-function-declaration]
[  128s]     glDeleteFramebuffersEXT(1, &((*pvid)->fbo));
[  128s]     ^~~~~~~~~~~~~~~~~~~~~~~
[  129s] [ 53%] Building C object
addons/allegrogl/CMakeFiles/allegrogl.dir/src/x.c.o
[  129s] cd /home/abuild/rpmbuild/BUILD/allegro-4.4.2/build/addons/allegrogl &&
/usr/bin/cc -Dallegrogl_EXPORTS
-I/home/abuild/rpmbuild/BUILD/allegro-4.4.2/include
-I/home/abuild/rpmbuild/BUILD/allegro-4.4.2/build/include -isystem
/usr/include/alsa
-I/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/include
-I/home/abuild/rpmbuild/BUILD/allegro-4.4.2/build/addons/allegrogl/include
-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2
-fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables
-fstack-clash-protection -g -W -Wall -Wno-unused-parameter
-Wdeclaration-after-statement -O3 -DNDEBUG -fPIC   -DALLEGRO_GL_SRC_BUILD -o
CMakeFiles/allegrogl.dir/src/x.c.o   -c
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c
[  129s] /home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c: In
function 'decode_fbconfig':
[  129s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c:653:55:
error: 'GLX_RGBA_FLOAT_BIT' undeclared (first use in this function); did you
mean 'GLX_RGBA_FLOAT_BIT_ARB'?
[  129s]   if (!(render_type & GLX_RGBA_BIT) && !(render_type &
GLX_RGBA_FLOAT_BIT)) {
[  129s]
^~~~~~~~~~~~~~~~~~
[  129s]
GLX_RGBA_FLOAT_BIT_ARB
[  129s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c:653:55:
note: each undeclared identifier is reported only once for each function it
appears in
[  129s] /home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c: In
function 'allegro_gl_x_vsync':
[  129s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c:1607:3:
warning: implicit declaration of function 'glXGetVideoSyncSGI'
[-Wimplicit-function-declaration]
[  129s]    glXGetVideoSyncSGI(&count);
[  129s]    ^~~~~~~~~~~~~~~~~~
[  129s]
/home/abuild/rpmbuild/BUILD/allegro-4.4.2/addons/allegrogl/src/x.c:1608:3:
warning: implicit declaration of function 'glXWaitVideoSyncSGI'
[-Wimplicit-function-declaration]
[  129s]    glXWaitVideoSyncSGI(2, (count+1) & 1, &count);

Did we update some library in incompatible ways?

summary: openSUSE:Leap:15.1/allegro failed


--1552931610.04F330d5.15940
Date: Mon, 18 Mar 2019 17:53:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129633

            Bug ID: 1129633
           Summary: VUL-0: putty: multiple vulnerabilities fixed in 0.71
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

From https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

Fixed in 0.71:

Security fixes found by an EU-funded bug bounty programme:
  * a remotely triggerable memory overwrite in RSA key exchange, which can
occur before host key verification
  * potential recycling of random numbers used in cryptography
  * on Unix, remotely triggerable buffer overflow in any kind of
server-to-client forwarding
  * multiple denial-of-service attacks that can be triggered by writing to the
terminal
  * Other security enhancements: major rewrite of the crypto code to remove
cache and timing side channels

Already fixed in Factory:
https://build.opensuse.org/request/show/685782


--1552956912.fEE43.14530
Date: Tue, 19 Mar 2019 00:55:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129664

            Bug ID: 1129664
           Summary: CIFS VFS: Free previous auth_key.response
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: VMWare
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: alfred-at-scherff.eu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Have mounted a CIFS via Samba. My Samba mount is fine.

After update to 4.12.14-lp150.12.48-default I get warning logs in journalctl
like:

Mar 17 18:16:04 TESTSYSTEM kernel: CIFS VFS: Free previous auth_key.response =
ffff8ff13ff3ff00

The warning message also is visible on console.


--1552999367.e56e0.25615
Date: Tue, 19 Mar 2019 12:42:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129755

            Bug ID: 1129755
           Summary: VUL-1: CVE-2019-9751: otrs: attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/226353/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9751

An issue was discovered in Open Ticket Request System (OTRS) 6.x before
6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an
admin user may manipulate the URL to cause execution of JavaScript in the
context of OTRS. This is related to Kernel/Output/Template/Document.pm.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9751
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9751.html


--1553021791.5Df8FeF2.17757
Date: Tue, 19 Mar 2019 18:56:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129821

            Bug ID: 1129821
           Summary: VUL-0: MozillaFirefox: 66 / 60.6 ESR releases (MFSA2019-07, MFSA2019-08)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Firefox
          Assignee: cgrobertson-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: wolfgang-at-rosenauer.org
          Found By: ---
           Blocker: ---

https://www.mozilla.org/en-US/security/advisories/mfsa2019-08/

Security vulnerabilities fixed in Firefox ESR 60.6

* CVE-2019-9790 bmo#1525145
  Use-after-free when removing in-use DOM elements
* CVE-2019-9791 bmo#1530958
  Type inference is incorrect for constructors entered through on-stack
replacement with IonMonkey
* CVE-2019-9792 bmo#1532599
  IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
* CVE-2019-9793 bmo#1528829
  Improper bounds checks when Spectre mitigations are disabled
* CVE-2019-9794 bmo#1530103
  Command line arguments not discarded during execution
* CVE-2019-9795 bmo#1514682
  Type-confusion in IonMonkey JIT compiler
* CVE-2019-9796 bmo#1531277
  Use-after-free with SMIL animation controller
* CVE-2018-18506 bmo#1503393
  Proxy Auto-Configuration file can define localhost access to be proxied
* CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
  bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
  Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6

https://www.mozilla.org/en-US/security/advisories/mfsa2019-07/

Security vulnerabilities fixed in Firefox 66:

* CVE-2019-9790 bmo#1525145
  Use-after-free when removing in-use DOM elements
* CVE-2019-9791 bmo#1530958
  Type inference is incorrect for constructors entered through on-stack
replacement with IonMonkey
* CVE-2019-9792 bmo#1532599
  IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
* CVE-2019-9793 bmo#1528829
  Improper bounds checks when Spectre mitigations are disabled
* CVE-2019-9794 bmo#1530103
  Command line arguments not discarded during execution
* CVE-2019-9795 bmo#1514682
  Type-confusion in IonMonkey JIT compiler
* CVE-2019-9796 bmo#1531277
  Use-after-free with SMIL animation controller
* CVE-2019-9797 bmo#1528909
  Cross-origin theft of images with createImageBitmap
* CVE-2019-9799 bmo#1505678
  Information disclosure via IPC channel messages
* CVE-2019-9802 bmo#1415508
  Chrome process information leak
* CVE-2019-9803 bmo#1515863 bmo#1437009
  Upgrade-Insecure-Requests incorrectly enforced for same-origin navigation
* CVE-2019-9805 bmo#1521360
  Potential use of uninitialized memory in Prio
* CVE-2019-9806 bmo#1525267
  Denial of service through successive FTP authorization prompts
* CVE-2019-9807 bmo#1362050
  Text sent through FTP connection can be incorporated into alert messages
* CVE-2019-9809 bmo#1282430 bmo#1523249
  Denial of service through FTP modal alert error messages
* CVE-2019-9808 bmo#1434634
  WebRTC permissions can display incorrect origin with data: and blob: URLs
* CVE-2019-9789 1520483 bmo#1522987 bmo#1528199 bmo#1519337 bmo#1525549
bmo#1516179
  bmo#1518524 bmo#1518331 bmo#1526579 bmo#1512567 bmo#1524335 bmo#1448505
bmo#1518821
  Memory safety bugs fixed in Firefox 66
* CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
  bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
  Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6


--1553072885.EE0e20.10713
Date: Wed, 20 Mar 2019 09:08:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129868

            Bug ID: 1129868
           Summary: VUL-1: CVE-2019-9779: libredwg: NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226499/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9779

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL
pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than
CVE-2019-9776).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9779
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9779
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073091.44fBFedE3.8801
Date: Wed, 20 Mar 2019 09:11:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129869

            Bug ID: 1129869
           Summary: VUL-1: CVE-2019-9778: libredwg: heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226498/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9778

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based
buffer over-read in the function dwg_dxf_LTYPE at dwg.spec.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9778
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9778
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073185.eaaBe8aF0.9374
Date: Wed, 20 Mar 2019 09:13:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129870

            Bug ID: 1129870
           Summary: VUL-1: CVE-2019-9777: libredwg: heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226497/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9777

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based
buffer over-read in the function dxf_header_write at header_variables_dxf.spec.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9777
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9777
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073322.70aEEE3E28.8801
Date: Wed, 20 Mar 2019 09:15:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129873

            Bug ID: 1129873
           Summary: VUL-1: CVE-2019-9776: libredwg: NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226496/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9776

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL
pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than
CVE-2019-9779).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9776
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9776
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073410.7bCE12.12527
Date: Wed, 20 Mar 2019 09:16:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129874

            Bug ID: 1129874
           Summary: VUL-0: CVE-2019-9773: libredwg: heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226493/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9773

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based
buffer overflow in the function dwg_decode_eed_data at decode.c for the z
dimension.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9773
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9773
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073484.50af0.15495
Date: Wed, 20 Mar 2019 09:18:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129875

            Bug ID: 1129875
           Summary: VUL-1: CVE-2019-9772: libredwg: NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226492/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9772

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL
pointer dereference in the function dwg_dxf_LEADER at dwg.spec.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9772
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9772
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073560.c7cdaC15.11160
Date: Wed, 20 Mar 2019 09:19:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129876

            Bug ID: 1129876
           Summary: VUL-1: CVE-2019-9771: libredwg: NULL pointer dereference in the function bit_convert_TU at bits.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226491/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9771

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL
pointer dereference in the function bit_convert_TU at bits.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9771
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9771
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073720.ddbc0.15643
Date: Wed, 20 Mar 2019 09:22:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129878

            Bug ID: 1129878
           Summary: VUL-1: CVE-2019-9775: libredwg: out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226495/
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9775

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an
out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9775
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9775
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073780.5d1261f0.17403
Date: Wed, 20 Mar 2019 09:23:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129879

            Bug ID: 1129879
           Summary: VUL-1: CVE-2019-9774: libredwg: out-of-bounds read in the function bit_read_B at bits.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226494/
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9774

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an
out-of-bounds read in the function bit_read_B at bits.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9774
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9774
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


--1553073874.6eC5bf70.18511
Date: Wed, 20 Mar 2019 09:24:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129881

            Bug ID: 1129881
           Summary: VUL-0: CVE-2019-9770: libredwg: heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/226490/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9770

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based
buffer overflow in the function dwg_decode_eed_data at decode.c for the y
dimension.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9770
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9770
https://savannah.gnu.org/bugs/index.php?55893
https://github.com/LibreDWG/libredwg/issues/99


body:
--1553086264.dc14B53.22648
Date: Wed, 20 Mar 2019 12:51:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129920

            Bug ID: 1129920
           Summary: openSUSE:Leap:15.1/itpp failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/itpp/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mpluskal-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/itpp failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/itpp/standard/x86_64

[   79s] + /usr/bin/cmake /home/abuild/rpmbuild/BUILD/itpp-4.3.1/. '-GUnix
Makefiles' -DCMAKE_INSTALL_PREFIX:PATH=/usr
-DINCLUDE_INSTALL_DIR:PATH=/usr/include -DLIB_INSTALL_DIR:PATH=/usr/lib64
-DSYSCONF_INSTALL_DIR:PATH=/etc -DSHARE_INSTALL_PREFIX:PATH=/usr/share
-DCMAKE_INSTALL_LIBDIR:PATH=/usr/lib64 -DCMAKE_BUILD_TYPE=RelWithDebInfo
'-DCMAKE_C_FLAGS=-fmessage-length=0 -grecord-gcc-switches -O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -DNDEBUG'
'-DCMAKE_CXX_FLAGS=-fmessage-length=0 -grecord-gcc-switches -O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -DNDEBUG'
'-DCMAKE_Fortran_FLAGS=-fmessage-length=0 -grecord-gcc-switches -O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -DNDEBUG'
'-DCMAKE_EXE_LINKER_FLAGS=-Wl,--as-needed -Wl,--no-undefined -Wl,-z,now'
-DCMAKE_MODULE_LINKER_FLAGS=-Wl,--as-needed
'-DCMAKE_SHARED_LINKER_FLAGS=-Wl,--as-needed -Wl,--no-undefined -Wl,-z,now'
-DLIB_SUFFIX=64 -DCMAKE_SKIP_RPATH:BOOL=ON -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON
-DBUILD_SHARED_LIBS:BOOL=ON -DBUILD_STATIC_LIBS:BOOL=OFF
-DCMAKE_COLOR_MAKEFILE:BOOL=OFF -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF
-DCMAKE_MODULES_INSTALL_DIR=/usr/share/cmake/Modules
-DGTEST_DIR=/usr/include/gtest -DLAPACK_LIBRARIES=/usr/lib64/liblapack.so.3
-DCMAKE_BUILD_TYPE=Release /usr/bin/make -O VERBOSE=1 -j3
[   79s] CMake Error: The source directory
"/home/abuild/rpmbuild/BUILD/itpp-4.3.1/build/-j3" does not exist.
[   79s] Specify --help for usage, or press the help button on the CMake GUI.

summary: openSUSE:Leap:15.1/itpp failed


--1553096873.e7fC60.29707
Date: Wed, 20 Mar 2019 15:47:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1129951

            Bug ID: 1129951
           Summary: dhclient: Don't touch files in /var during post script
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: iforster-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The dhclient package is creating its .leases files in /var as part of its post
script
(https://build.opensuse.org/package/view_file/network:dhcp/dhcp/dhcp.spec?expand=1,
currently lines 444-447). This does not work with transactional-update, as /var
is not accessible during updates.
In this case this may be quite hypothetical, as dhclient will probably always
be installed during the initial installation anyway, but the files are still
cluttering up the root file system.

Creating the files sounds like a classical case for systemd-tmpfiles (if it's
still necessary to manually create the files at all, maybe the lines can simply
be deleted?).


--1553159077.bAeA8Ac60.24907
Date: Thu, 21 Mar 2019 09:04:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1130028

            Bug ID: 1130028
           Summary: /usr/bin/ruby.ruby2.6 is not a PIE executable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Ruby
          Assignee: ruby-devel-at-suse.de
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I noticed that /proc/$PID/maps of YaST shows /usr/bin/ruby.ruby2.6 at
0x00400000, which is usual for non-PIE binaries.

And indeed, both file and readelf report that it's not a PIE binary.


--1553163206.15bE6c0.22535
Date: Thu, 21 Mar 2019 10:13:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1130041

            Bug ID: 1130041
           Summary: steam not able to start since missing libopenssl1_0_0-steam
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: vcizek-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

With the last openssl-1_0_0 update[1] from SLE which has removed
libopenssl1_0_0-steam subpackage, however in openSUSE Leap we still provides
steam, steam requires libopenssl1_0_0-steam to start, maybe we should enable
libopenssl1_0_0-steam subpackage if it's build on openSUSE, ie. %is_opensuse.

[1] https://build.opensuse.org/request/show/684481


--1553173859.8C3bbd0a13.9301
Date: Thu, 21 Mar 2019 13:10:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130083

            Bug ID: 1130083
           Summary: openSUSE:Leap:15.1/python-python-gnupg failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/python-python-gnupg/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mcepl-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/python-python-gnupg failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/python-python-gnupg/standard/x86_64

[  180s] ======================================================================
[  180s] FAIL: encrypt (gnupg.GPG)
[  180s] Doctest: gnupg.GPG.encrypt
[  180s] ----------------------------------------------------------------------
[  180s] Traceback (most recent call last):
[  180s]   File "/usr/lib64/python3.6/doctest.py", line 2199, in runTest
[  180s]     raise self.failureException(self.format_failure(new.getvalue()))
[  180s] AssertionError: Failed doctest test for gnupg.GPG.encrypt
[  180s]   File "/home/abuild/rpmbuild/BUILD/python-gnupg-0.4.4/gnupg.py", line
1521, in encrypt
[  180s]
[  180s] ----------------------------------------------------------------------
[  180s] File "/home/abuild/rpmbuild/BUILD/python-gnupg-0.4.4/gnupg.py", line
1542, in gnupg.GPG.encrypt
[  180s] Failed example:
[  180s]     result = gpg.encrypt("hello again", fp1)
[  180s] Exception raised:
[  180s]     Traceback (most recent call last):
[  180s]       File "/usr/lib64/python3.6/doctest.py", line 1330, in __run
[  180s]         compileflags, 1), test.globs)
[  180s]       File "<doctest gnupg.GPG.encrypt[16]>", line 1, in <module>
[  180s]         result = gpg.encrypt("hello again", fp1)
[  180s]       File "/home/abuild/rpmbuild/BUILD/python-gnupg-0.4.4/gnupg.py",
line 1564, in encrypt
[  180s]         result = self.encrypt_file(data, recipients, **kwargs)
[  180s]       File "/home/abuild/rpmbuild/BUILD/python-gnupg-0.4.4/gnupg.py",
line 1498, in encrypt_file
[  180s]         raise ValueError('No recipients specified with asymmetric '
[  180s]     ValueError: No recipients specified with asymmetric encryption


body:
--1553174295.75FBBB00.13127
Date: Thu, 21 Mar 2019 13:18:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130085

            Bug ID: 1130085
           Summary: openSUSE:Leap:15.1/orc failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/orc/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: idonmez-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/orc failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/orc/standard/x86_64

Fails in testsuite, retrigger didn't help

summary: openSUSE:Leap:15.1/orc failed


--1553176294.46fd0.27442
Date: Thu, 21 Mar 2019 13:51:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1130091

            Bug ID: 1130091
           Summary: libtinfo: "munmap_chunk(): invalid pointer" when restoring TERM=linux after setting it to TERM=dumb
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,

I can reproduce this issue systematically when most of the terminfo are
missing:

# systemd-nspawn -D /var/tmp/systemd-test.219Nte/nspawn-root/
Spawning container nspawn-root on /var/tmp/systemd-test.219Nte/nspawn-root.
Press ^] three times within 1s to kill container.
-bash-5.0# find /usr/share/terminfo/
/usr/share/terminfo/
/usr/share/terminfo/l
/usr/share/terminfo/l/linux
-bash-5.0# echo $TERM
linux
-bash-5.0# export TERM=dumb
-bash-5.0# export TERM=linux
munmap_chunk(): invalid pointer
Container nspawn-root terminated by signal SEGV.

# rpm -q libncurses6
libncurses6-6.1-13.1.x86_64


--1553291977.503dEE2.18402
Date: Fri, 22 Mar 2019 21:59:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130262

            Bug ID: 1130262
           Summary: VUL-0: CVE-2019-9810,CVE-2019-9813: MozillaFirefox: 66.0.1 / 60.6.1 ESR releases (MFSA2019-09, MFSA2019-10)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: cgrobertson-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: cgrobertson-at-suse.com, wolfgang-at-rosenauer.org
          Found By: Community User
           Blocker: ---

https://www.mozilla.org/en-US/security/advisories/mfsa2019-09/
https://www.mozilla.org/en-US/security/advisories/mfsa2019-10/

Fixed in Mozilla Firefox 66.0.1, 60.6.1 ESR:

* CVE-2019-9810 bmo#1537924
  IonMonkey MArraySlice has incorrect alias information
* CVE-2019-9813 bmo#1538006
  Ionmonkey type confusion with __proto__ mutations


--1553499955.DD18DB15.9471
Date: Mon, 25 Mar 2019 07:45:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1130321

            Bug ID: 1130321
           Summary: xdm shows black text fields for login and password
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: jslaby-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Created attachment 801051
  --> http://bugzilla.suse.com/attachment.cgi?id=801051&action=edit
screenshot

I haven't run xdm on Tumbleweed for quite some time. Now I did and fields to
input login and password are black, so that one cannot see what they write. See
the screenshot.

Also the "Password:" label is not visible until Enter key is pressed. Not sure
if this is OK.


body:
--1553508380.bEBA5c9.18125
Date: Mon, 25 Mar 2019 10:06:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130355

            Bug ID: 1130355
           Summary: NIS / ypbind fails to start
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: sckang-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: iforster-at-suse.com, kukuk-at-suse.com, lnussel-at-suse.com
            Blocks: 1129587
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1129587 +++

NetworkManager-wait-online needs to be enabled together with NetworkManager,
iow the following upstream patch needs to be backported to 15:

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/commit/167e42a87e97ed7fb26a4263c22f1774716ac51b

summary: NIS / ypbind fails to start


--1553509247.0EFFA0.24992
Date: Mon, 25 Mar 2019 10:20:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130360

            Bug ID: 1130360
           Summary: VUL-1: CVE-2019-9917: znc: crash on invalid encoding
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/226948/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mpluskal-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9917

[crash on invalid encoding]

Upstream commit:
https://github.com/znc/znc/commit/64613bc8b6b4adf1e32231f9844d99cd512b8973

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9917
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9917.html


--1553521836.2E14012.15750
Date: Mon, 25 Mar 2019 13:50:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130395

            Bug ID: 1130395
           Summary: Valgrind fails to build on armv6 and armv7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Build logs:
* armv6:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:ARM/valgrind/standard/armv6l
* armv7:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:ARM/valgrind/standard/armv7l


body:
--1553584719.eCDf66.4759
Date: Tue, 26 Mar 2019 07:18:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130478

            Bug ID: 1130478
           Summary: Rebase sle-classic patches over 3.32.0.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: yfjiang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We've been shipping sle-classic for tumbleweed, and it seems in need of rebase
because of the gnome stack's update.

summary: Rebase sle-classic patches over 3.32.0.


--1553594875.BbeBC5AA0.26856
Date: Tue, 26 Mar 2019 10:07:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1130503

            Bug ID: 1130503
           Summary: virtualbox fails to build against Qt 5.13
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[ 1192s] In file included from
/home/abuild/rpmbuild/BUILD/VirtualBox-6.0.4/src/VBox/Frontends/VirtualBox/src/VBoxGLSupportInfo.cpp:34:
[ 1192s]
/home/abuild/rpmbuild/BUILD/VirtualBox-6.0.4/include/VBox/VBoxGL2D.h:116:19:
error: conflicting declaration 'typedef ptrdiff_t GLsizeiptr'
[ 1192s]  typedef ptrdiff_t GLsizeiptr;
[ 1192s]                    ^~~~~~~~~~
[ 1192s] In file included from /usr/include/qt5/QtGui/qopengl.h:146,
[ 1192s]                  from /usr/include/qt5/QtOpenGL/qgl.h:45,
[ 1192s]                  from /usr/include/qt5/QtOpenGL/QGLWidget:1,
[ 1192s]                  from
/home/abuild/rpmbuild/BUILD/VirtualBox-6.0.4/src/VBox/Frontends/VirtualBox/src/VBoxGLSupportInfo.cpp:22:
[ 1192s] /usr/include/qt5/QtGui/qopenglext.h:475:30: note: previous declaration
as 'typedef long int GLsizeiptr'
[ 1192s]  typedef signed long int      GLsizeiptr;


body:
--1553597372.cD21A474.11498
Date: Tue, 26 Mar 2019 10:49:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1130510

            Bug ID: 1130510
           Summary: live-kiwi-hook file conflict with infos-creator-rpm
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: cbosdonnat-at-suse.com
          Found By: ---
           Blocker: ---

both live-kiwi-hook and infos-creator-rpm contain /usr/lib/build/kiwi_post_run.
So repochecker complains. Can we add conflicts there to make sure they never
can be installed together?

pkgs: infos-creator-rpm live-kiwi-hook