--1649607803.d7EFE5.32505
Date: Sun, 10 Apr 2022 16:23:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198279

            Bug ID: 1198279
           Summary: [openjdk][OpenJ9] Build Errors for mvn-based Projects using OpenJ9 1.8.0 Can Be Fixed By Using OpenJ9 11
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Java
          Assignee: java-maintainers-at-suse.de
          Reporter: holger.rauch-at-posteo.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[I'm aware that submitting this bug report based on OBS (openSUSE Build
Service) would've been the "cleaner" approach, but I still have got to
familiarize myself with OBS, hence this way]

Did a "git clone" of the Eclipse Language Server:

git cloned https://github.com/eclipse/eclipse.jdt.ls

on my LinuxONE instance. Performing the build using the default (master)
branch.

Installed the following OpenJDK OpenJ9 packages in order to compare build
results of
version 1.8.0 vs. version 11 (both are LTS (Long Term Support) versions of the
JDK):

java-1_8_0-openj9-devel-1.8.0.322-2.1.s390x
java-11-openj9-11.0.14.1-1.1.s390x
java-1_8_0-openj9-headless-1.8.0.322-2.1.s390x
java-1_8_0-openj9-1.8.0.322-2.1.s390x
java-11-openj9-headless-11.0.14.1-1.1.s390x
java-11-openj9-devel-11.0.14.1-1.1.s390x

NOTE: I fully deleted the local mvn cache (~/.m2/repository) between the two
mvn runs.

Testing with 1.8.0:

export JAVA_HOME=/usr/lib64/jvm/java-1.8.0-openj9-1.8.0
export PATH=$JAVA_HOME/bin:$PATH

which javac
/usr/lib64/jvm/java-1.8.0-openj9-1.8.0/bin/javac

javac -version
javac 1.8.0_322

mvn -version
Apache Maven 3.8.4 (SUSE 3.8.4-2.1)
Maven home: /usr/share/maven
Java version: 1.8.0_322, vendor: Eclipse OpenJ9, runtime:
/usr/lib64/jvm/java-1.8.0-openj9-1.8.0/jre
Default locale: de_DE, platform encoding: UTF-8
OS name: "linux", version: "5.16.15-1-default", arch: "s390x", family: "unix"

The builld fails relatively early in the build process with a java.lang (basic
JDK related) error:

linux1@oshrauch:~/github/eclipse.jdt.ls$ mvn install
Error injecting: org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant
java.lang.TypeNotPresentException: Type
org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant not present
    at org.eclipse.sisu.space.URLClassSpace.loadClass (URLClassSpace.java:147)
    at org.eclipse.sisu.space.NamedClass.load (NamedClass.java:46)
    at org.eclipse.sisu.space.AbstractDeferredClass.get
(AbstractDeferredClass.java:48)
    at com.google.inject.internal.ProviderInternalFactory.provision
(ProviderInternalFactory.java:81)
    at
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision
(InternalFactoryToInitializableAdapter.java:53)
    at com.google.inject.internal.ProviderInternalFactory$1.call
(ProviderInternalFactory.java:65)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:115)
    at org.eclipse.sisu.bean.BeanScheduler$CycleActivator.onProvision
(BeanScheduler.java:230)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:126)
    at com.google.inject.internal.ProvisionListenerStackCallback.provision
(ProvisionListenerStackCallback.java:68)
    at com.google.inject.internal.ProviderInternalFactory.circularGet
(ProviderInternalFactory.java:63)
    at com.google.inject.internal.InternalFactoryToInitializableAdapter.get
(InternalFactoryToInitializableAdapter.java:45)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call
(ProviderToInternalFactoryAdapter.java:46)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1092)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get
(ProviderToInternalFactoryAdapter.java:40)
    at com.google.inject.internal.SingletonScope$1.get
(SingletonScope.java:194)
    at com.google.inject.internal.InternalFactoryToProviderAdapter.get
(InternalFactoryToProviderAdapter.java:41)
    at com.google.inject.internal.InjectorImpl$2$1.call
(InjectorImpl.java:1019)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1085)
    at com.google.inject.internal.InjectorImpl$2.get (InjectorImpl.java:1015)
    at org.eclipse.sisu.inject.LazyBeanEntry.getValue (LazyBeanEntry.java:81)
    at org.eclipse.sisu.plexus.LazyPlexusBean.getValue (LazyPlexusBean.java:51)
    at org.eclipse.sisu.wire.EntryListAdapter$ValueIterator.next
(EntryListAdapter.java:111)
    at java.util.AbstractCollection.addAll (AbstractCollection.java:343)
    at org.apache.maven.DefaultMaven.getLifecycleParticipants
(DefaultMaven.java:397)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
Caused by: java.lang.UnsupportedClassVersionError: JVMCFRE003 Ung?ltige
?bergeordnete Version;
Klasse=org/eclipse/tycho/core/maven/TychoMavenLifecycleParticipant, Offset=6
    at java.lang.ClassLoader.defineClassImpl (Native Method)
    at java.lang.ClassLoader.defineClassInternal (ClassLoader.java:397)
    at java.lang.ClassLoader.defineClass (ClassLoader.java:358)
    at java.security.SecureClassLoader.defineClass (SecureClassLoader.java:142)
    at java.net.URLClassLoader.defineClass (URLClassLoader.java:682)
    at java.net.URLClassLoader.access$400 (URLClassLoader.java:89)
    at java.net.URLClassLoader$ClassFinder.run (URLClassLoader.java:1086)
    at java.security.AccessController.doPrivileged (AccessController.java:774)
    at java.net.URLClassLoader.findClass (URLClassLoader.java:589)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClassFromSelf
(ClassRealm.java:401)
    at org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass
(SelfFirstStrategy.java:42)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass
(ClassRealm.java:271)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass
(ClassRealm.java:247)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass
(ClassRealm.java:239)
    at org.eclipse.sisu.space.URLClassSpace.loadClass (URLClassSpace.java:139)
    at org.eclipse.sisu.space.NamedClass.load (NamedClass.java:46)
    at org.eclipse.sisu.space.AbstractDeferredClass.get
(AbstractDeferredClass.java:48)
    at com.google.inject.internal.ProviderInternalFactory.provision
(ProviderInternalFactory.java:81)
    at
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision
(InternalFactoryToInitializableAdapter.java:53)
    at com.google.inject.internal.ProviderInternalFactory$1.call
(ProviderInternalFactory.java:65)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:115)
    at org.eclipse.sisu.bean.BeanScheduler$CycleActivator.onProvision
(BeanScheduler.java:230)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:126)
    at com.google.inject.internal.ProvisionListenerStackCallback.provision
(ProvisionListenerStackCallback.java:68)
    at com.google.inject.internal.ProviderInternalFactory.circularGet
(ProviderInternalFactory.java:63)
    at com.google.inject.internal.InternalFactoryToInitializableAdapter.get
(InternalFactoryToInitializableAdapter.java:45)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call
(ProviderToInternalFactoryAdapter.java:46)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1092)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get
(ProviderToInternalFactoryAdapter.java:40)
    at com.google.inject.internal.SingletonScope$1.get
(SingletonScope.java:194)
    at com.google.inject.internal.InternalFactoryToProviderAdapter.get
(InternalFactoryToProviderAdapter.java:41)
    at com.google.inject.internal.InjectorImpl$2$1.call
(InjectorImpl.java:1019)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1085)
    at com.google.inject.internal.InjectorImpl$2.get (InjectorImpl.java:1015)
    at org.eclipse.sisu.inject.LazyBeanEntry.getValue (LazyBeanEntry.java:81)
    at org.eclipse.sisu.plexus.LazyPlexusBean.getValue (LazyPlexusBean.java:51)
    at org.eclipse.sisu.wire.EntryListAdapter$ValueIterator.next
(EntryListAdapter.java:111)
    at java.util.AbstractCollection.addAll (AbstractCollection.java:343)
    at org.apache.maven.DefaultMaven.getLifecycleParticipants
(DefaultMaven.java:397)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
[ERROR] Internal error: com.google.inject.ProvisionException: Unable to
provision, see the following errors:
[ERROR]
[ERROR] 1) Error in custom provider, java.lang.TypeNotPresentException: Type
org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant not present
[ERROR]   at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0,
parent: sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
[ERROR]   at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0,
parent: sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
[ERROR]   while locating org.apache.maven.AbstractMavenLifecycleParticipant
annotated with -at-com.google.inject.name.Named(value=TychoMavenLifecycleListener)
[ERROR]
[ERROR] 1 error: JVMCFRE003 Ung?ltige ?bergeordnete Version;
Klasse=org/eclipse/tycho/core/maven/TychoMavenLifecycleParticipant, Offset=6
[ERROR] -> [Help 1]
org.apache.maven.InternalErrorException: Internal error:
com.google.inject.ProvisionException: Unable to provision, see the following
errors:

1) Error in custom provider, java.lang.TypeNotPresentException: Type
org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant not present
  at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0, parent:
sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
  at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0, parent:
sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
  while locating org.apache.maven.AbstractMavenLifecycleParticipant annotated
with -at-com.google.inject.name.Named(value=TychoMavenLifecycleListener)

1 error
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:120)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
Caused by: com.google.inject.ProvisionException: Unable to provision, see the
following errors:

1) Error in custom provider, java.lang.TypeNotPresentException: Type
org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant not present
  at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0, parent:
sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
  at ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:2.5.0, parent:
sun.misc.Launcher$AppClassLoader@681ba2c9] (via modules:
org.eclipse.sisu.wire.WireModule ->
org.eclipse.sisu.plexus.PlexusBindingModule)
  while locating org.apache.maven.AbstractMavenLifecycleParticipant annotated
with -at-com.google.inject.name.Named(value=TychoMavenLifecycleListener)

1 error
    at com.google.inject.internal.InjectorImpl$2.get (InjectorImpl.java:1028)
    at org.eclipse.sisu.inject.LazyBeanEntry.getValue (LazyBeanEntry.java:81)
    at org.eclipse.sisu.plexus.LazyPlexusBean.getValue (LazyPlexusBean.java:51)
    at org.eclipse.sisu.wire.EntryListAdapter$ValueIterator.next
(EntryListAdapter.java:111)
    at java.util.AbstractCollection.addAll (AbstractCollection.java:343)
    at org.apache.maven.DefaultMaven.getLifecycleParticipants
(DefaultMaven.java:397)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
Caused by: java.lang.TypeNotPresentException: Type
org.eclipse.tycho.core.maven.TychoMavenLifecycleParticipant not present
    at org.eclipse.sisu.space.URLClassSpace.loadClass (URLClassSpace.java:147)
    at org.eclipse.sisu.space.NamedClass.load (NamedClass.java:46)
    at org.eclipse.sisu.space.AbstractDeferredClass.get
(AbstractDeferredClass.java:48)
    at com.google.inject.internal.ProviderInternalFactory.provision
(ProviderInternalFactory.java:81)
    at
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision
(InternalFactoryToInitializableAdapter.java:53)
    at com.google.inject.internal.ProviderInternalFactory$1.call
(ProviderInternalFactory.java:65)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:115)
    at org.eclipse.sisu.bean.BeanScheduler$CycleActivator.onProvision
(BeanScheduler.java:230)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:126)
    at com.google.inject.internal.ProvisionListenerStackCallback.provision
(ProvisionListenerStackCallback.java:68)
    at com.google.inject.internal.ProviderInternalFactory.circularGet
(ProviderInternalFactory.java:63)
    at com.google.inject.internal.InternalFactoryToInitializableAdapter.get
(InternalFactoryToInitializableAdapter.java:45)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call
(ProviderToInternalFactoryAdapter.java:46)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1092)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get
(ProviderToInternalFactoryAdapter.java:40)
    at com.google.inject.internal.SingletonScope$1.get
(SingletonScope.java:194)
    at com.google.inject.internal.InternalFactoryToProviderAdapter.get
(InternalFactoryToProviderAdapter.java:41)
    at com.google.inject.internal.InjectorImpl$2$1.call
(InjectorImpl.java:1019)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1085)
    at com.google.inject.internal.InjectorImpl$2.get (InjectorImpl.java:1015)
    at org.eclipse.sisu.inject.LazyBeanEntry.getValue (LazyBeanEntry.java:81)
    at org.eclipse.sisu.plexus.LazyPlexusBean.getValue (LazyPlexusBean.java:51)
    at org.eclipse.sisu.wire.EntryListAdapter$ValueIterator.next
(EntryListAdapter.java:111)
    at java.util.AbstractCollection.addAll (AbstractCollection.java:343)
    at org.apache.maven.DefaultMaven.getLifecycleParticipants
(DefaultMaven.java:397)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
Caused by: java.lang.UnsupportedClassVersionError: JVMCFRE003 Ung?ltige
?bergeordnete Version;
Klasse=org/eclipse/tycho/core/maven/TychoMavenLifecycleParticipant, Offset=6
    at java.lang.ClassLoader.defineClassImpl (Native Method)
    at java.lang.ClassLoader.defineClassInternal (ClassLoader.java:397)
    at java.lang.ClassLoader.defineClass (ClassLoader.java:358)
    at java.security.SecureClassLoader.defineClass (SecureClassLoader.java:142)
    at java.net.URLClassLoader.defineClass (URLClassLoader.java:682)
    at java.net.URLClassLoader.access$400 (URLClassLoader.java:89)
    at java.net.URLClassLoader$ClassFinder.run (URLClassLoader.java:1086)
    at java.security.AccessController.doPrivileged (AccessController.java:774)
    at java.net.URLClassLoader.findClass (URLClassLoader.java:589)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClassFromSelf
(ClassRealm.java:401)
    at org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass
(SelfFirstStrategy.java:42)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass
(ClassRealm.java:271)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass
(ClassRealm.java:247)
    at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass
(ClassRealm.java:239)
    at org.eclipse.sisu.space.URLClassSpace.loadClass (URLClassSpace.java:139)
    at org.eclipse.sisu.space.NamedClass.load (NamedClass.java:46)
    at org.eclipse.sisu.space.AbstractDeferredClass.get
(AbstractDeferredClass.java:48)
    at com.google.inject.internal.ProviderInternalFactory.provision
(ProviderInternalFactory.java:81)
    at
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision
(InternalFactoryToInitializableAdapter.java:53)
    at com.google.inject.internal.ProviderInternalFactory$1.call
(ProviderInternalFactory.java:65)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:115)
    at org.eclipse.sisu.bean.BeanScheduler$CycleActivator.onProvision
(BeanScheduler.java:230)
    at
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision
(ProvisionListenerStackCallback.java:126)
    at com.google.inject.internal.ProvisionListenerStackCallback.provision
(ProvisionListenerStackCallback.java:68)
    at com.google.inject.internal.ProviderInternalFactory.circularGet
(ProviderInternalFactory.java:63)
    at com.google.inject.internal.InternalFactoryToInitializableAdapter.get
(InternalFactoryToInitializableAdapter.java:45)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call
(ProviderToInternalFactoryAdapter.java:46)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1092)
    at com.google.inject.internal.ProviderToInternalFactoryAdapter.get
(ProviderToInternalFactoryAdapter.java:40)
    at com.google.inject.internal.SingletonScope$1.get
(SingletonScope.java:194)
    at com.google.inject.internal.InternalFactoryToProviderAdapter.get
(InternalFactoryToProviderAdapter.java:41)
    at com.google.inject.internal.InjectorImpl$2$1.call
(InjectorImpl.java:1019)
    at com.google.inject.internal.InjectorImpl.callInContext
(InjectorImpl.java:1085)
    at com.google.inject.internal.InjectorImpl$2.get (InjectorImpl.java:1015)
    at org.eclipse.sisu.inject.LazyBeanEntry.getValue (LazyBeanEntry.java:81)
    at org.eclipse.sisu.plexus.LazyPlexusBean.getValue (LazyPlexusBean.java:51)
    at org.eclipse.sisu.wire.EntryListAdapter$ValueIterator.next
(EntryListAdapter.java:111)
    at java.util.AbstractCollection.addAll (AbstractCollection.java:343)
    at org.apache.maven.DefaultMaven.getLifecycleParticipants
(DefaultMaven.java:397)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode
(Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main
(Launcher.java:356)
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/InternalErrorException

Testing with JDK 11:

export JAVA_HOME=/usr/lib64/jvm/java-11-openj9-11
export PATH=$JAVA_HOME/bin:$PATH

which javac
/usr/lib64/jvm/java-11-openj9-11/bin/javac

javac -version
javac 11.0.14.1

mvn -version
Apache Maven 3.8.4 (SUSE 3.8.4-2.1)
Maven home: /usr/share/maven
Java version: 11.0.14.1, vendor: Eclipse OpenJ9, runtime:
/usr/lib64/jvm/java-11-openj9-11
Default locale: de_DE, platform encoding: UTF-8
OS name: "linux", version: "5.16.15-1-default", arch: "s390x", family: "unix"

With version 11, the build gets way past the actual build of the language
servver, it even performs most tests:

linux1@oshrauch:~/github/eclipse.jdt.ls$ mvn install
[INFO]
[INFO] -


--1649661734.aEB7d68011.18171
Date: Mon, 11 Apr 2022 07:22:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198289

            Bug ID: 1198289
           Summary: VUL-1: CVE-2022-1286: mruby: heap-buffer-overflow in mrb_vm_exec in mruby prior to 3.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/328491/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: rpm-at-fthiessen.de
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-1286

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository
mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1286
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1286
https://github.com/mruby/mruby/commit/b1d0296a937fe278239bdfac840a3fd0e93b3ee9
http://www.cvedetails.com/cve/CVE-2022-1286/
https://huntr.dev/bounties/f918376e-b488-4113-963d-ffe8716e4189


body:
--1649668473.1383f0.6970
Date: Mon, 11 Apr 2022 09:14:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198309

            Bug ID: 1198309
           Summary: After last updates samba did not work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Samba
          Assignee: samba-maintainers@SuSE.de
          Reporter: virex-at-mail.ru
        QA Contact: samba-maintainers@SuSE.de
          Found By: ---
           Blocker: ---

After last updates samba did not work

Whyle starting got the error [2022/04/11 13:00:35.927769,  0]
../../source3/smbd/server.c:1741(main) but status is active

systemctl status smb
??? smb.service - Samba SMB Daemon
     Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor
preset: disabled)
     Active: active (running) since Mon 2022-04-11 13:00:36 +04; 9min ago
       Docs: man:smbd(8)
             man:samba(7)
             man:smb.conf(5)
    Process: 6290 ExecStartPre=/usr/share/samba/update-apparmor-samba-profile
(code=exited, status=0/SUCCESS)
   Main PID: 6294 (smbd)
     Status: "smbd: ready to serve connections..."
      Tasks: 4 (limit: 4915)
        CPU: 158ms
     CGroup: /system.slice/smb.service
             ??????6294 /usr/sbin/smbd --foreground --no-process-group
             ??????6296 /usr/sbin/smbd --foreground --no-process-group
             ??????6297 /usr/sbin/smbd --foreground --no-process-group
             ??????6738 /usr/sbin/smbd --foreground --no-process-group

?????? 11 13:00:35 lnxvrx53 systemd[1]: Starting Samba SMB Daemon...
?????? 11 13:00:35 lnxvrx53 smbd[6294]: [2022/04/11 13:00:35.927769,  0]
../../source3/smbd/server.c:1741(main)
?????? 11 13:00:35 lnxvrx53 smbd[6294]:   smbd version
4.16.0-git.224.70319beb8f8SUSE-oS15.9-x86_64 started.
?????? 11 13:00:35 lnxvrx53 smbd[6294]:   Copyright Andrew Tridgell and the Samba
Team 1992-2022
?????? 11 13:00:36 lnxvrx53 systemd[1]: Started Samba SMB Daemon.

summary: After last updates samba did not work


--1649684984.eC5a7E0.30816
Date: Mon, 11 Apr 2022 13:49:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198331

            Bug ID: 1198331
           Summary: python-moto: failed on test_boto3_availability_zones test_create_notebook_instance_bad_volume_size
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: dmueller-at-suse.com
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rjschwei-at-suse.com
          Found By: ---
           Blocker: ---

Hello

package python-moto fails to build on Leap 15.4

https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-15-SP4/python-moto/standard/x86_64

[  813s] =========================== short test summary info
============================
[  813s] FAILED
tests/test_ec2/test_availability_zones_and_regions.py::test_boto3_availability_zones
[  813s] FAILED
tests/test_sagemaker/test_sagemaker_notebooks.py::test_create_notebook_instance_bad_volume_size
[  813s] FAILED
tests/test_ssm/test_ssm_boto3.py::test_describe_parameters_invalid_parameter_filters
[  813s] = 3 failed, 3158 passed, 1 skipped, 69 deselected, 31 xfailed, 979
warnings in 786.32s (0:13:06) =
[  814s] error: Bad exit status from /var/tmp/rpm-tmp.8k7khZ (%check)
[  814s]


body:
--1649689001.bC3a01.1823
Date: Mon, 11 Apr 2022 14:56:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198345

            Bug ID: 1198345
           Summary: [Hibiscus] Charts not displayed due to java.lang.NoClassDefFoundError: org/eclipse/swtchart/Chart
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Java
          Assignee: java-maintainers-at-suse.de
          Reporter: postix-at-posteo.eu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 858034
  --> http://bugzilla.opensuse.org/attachment.cgi?id=858034&action=edit
Stacktrace

### Issue

The SWTCharts are not displayed in the "Analysis" sections, due to the error
"java.lang.NoClassDefFoundError: org/eclipse/swtchart/Chart".

### Additional Note

```
$ locate swtchart
/usr/lib/jameica/plugins/hibiscus/lib/swtchart/org.eclipse.swtchart.extensions_0.13.0.202009151159.jar
/usr/lib/jameica/plugins/hibiscus/lib/swtchart/org.eclipse.swtchart_0.13.0.202009151159.jar

/org.eclipse.swtchart.customcharts_0.13.0.202203292116.jar

/usr/share/eclipse/droplets/swtchart/plugins/org.eclipse.swtchart.extensions_0.13.0.202203292116.jar
/usr/share/eclipse/droplets/swtchart/plugins/org.eclipse.swtchart_0.13.0.202203292116.jar
(...)
```

### System

Operating System: openSUSE Tumbleweed 20220408
KDE Plasma Version: 5.24.4
KDE Frameworks Version: 5.92.0
Qt Version: 5.15.2
Graphics Platform: Wayland

Installed via the openSUSE TW repo:

eclipse-swt-4.15-6.1

jameica-2.10.1-1.1
SWT-Version: 4944 / gtk
Java-Version: 11.0.14.1 / Linux amd64
Build: 482 [Datum 19700117]

pkgs: eclipse-swtchart hibiscus


--1649706976.1dAfD1.3307
Date: Mon, 11 Apr 2022 19:56:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198361

            Bug ID: 1198361
           Summary: VUL-0: chromium: multiple security issues fixed in 100.0.4896.88
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Fixed in 100.0.4896.88:

CVE-2022-1305: Use after free in storage
CVE-2022-1306: Inappropriate implementation in compositing
CVE-2022-1307: Inappropriate implementation in full screen
CVE-2022-1308: Use after free in BFCache
CVE-2022-1309: Insufficient policy enforcement in developer tools
CVE-2022-1310: Use after free in regular expressions
CVE-2022-1311: Use after free in Chrome OS shell
CVE-2022-1312: Use after free in storage
CVE-2022-1313: Use after free in tab groups
CVE-2022-1314: Type Confusion in V8
Various fixes from internal audits, fuzzing and other initiatives

References:
https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html


--1649778159.aFE20.17131
Date: Tue, 12 Apr 2022 15:42:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198407

            Bug ID: 1198407
           Summary: liblinphone10 provides openldap libraries
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: gcomes.obs-at-gmail.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: expeehaa-at-outlook.com
          Found By: ---
           Blocker: ---

zypper info --provides liblinphone10
Provides       : [8]
    liblinphone.so.10()(64bit)
    liblber.so.2()(64bit)
    liblber.so.2(OPENLDAP_2.200)(64bit)
    libldap.so.2()(64bit)
    libldap.so.2(OPENLDAP_2.200)(64bit)
    liblinphone = 5.0.70
    liblinphone10 = 5.0.70-1.1
    liblinphone10(x86-64) = 5.0.70-1.1

why does linphone even have an intree copy of openldap?

it should be build with the system openldap.

I found this issue because it leads to "have choice for libldap2" when building
containers.


--1649822304.5ec31.18435
Date: Wed, 13 Apr 2022 03:58:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198423

            Bug ID: 1198423
           Summary: (CVE-2022-24675) VUL-0: CVE-2022-24675: go1.17,go1.18: encoding/pem: stack overflow
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

encoding/pem: fix stack overflow in Decode

A large (more than 5 MB) PEM input can cause a stack overflow in Decode,
leading the program to crash.

Thanks to Juho Nurminen of Mattermost who reported the error.

This is CVE-2022-24675 and https://go.dev/issue/51853.


--1649822787.1be8Ac11.14872
Date: Wed, 13 Apr 2022 04:06:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198424

            Bug ID: 1198424
           Summary: (CVE-2022-28327) VUL-0: CVE-2022-28327: go1.17,go1.18: crypto/elliptic: tolerate all oversized scalars in generic P-256
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A crafted scalar input longer than 32 bytes can cause P256().ScalarMult or
P256().ScalarBaseMult to panic. Indirect uses through crypto/ecdsa and
crypto/tls are unaffected. amd64, arm64, ppc64le, and s390x are unaffected.

This was discovered thanks to a Project Wycheproof test vector.

This is CVE-2022-28327 and https://go.dev/issue/52075.


--1649823744.A730FFbF1.17104
Date: Wed, 13 Apr 2022 04:22:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198427

            Bug ID: 1198427
           Summary: (CVE-2022-27536) VUL-0: CVE-2022-27536: go1.18: crypto/x509: Certificate.Verify crash on macOS with Go 1.18
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Verifying certificate chains containing certificates which are not compliant
with RFC 5280 causes Certificate.Verify to panic on macOS.

These chains can be delivered through TLS and can cause a crypto/tls or
net/http client to crash.

Thanks to Tailscale for doing weird things and finding this.

This is CVE-2022-27536 and https://go.dev/issue/51759.


--1649975913.74FB4.16104
Date: Thu, 14 Apr 2022 22:38:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198507

            Bug ID: 1198507
           Summary: gnome-session-binary started by systemd --user which does not run pam_loginuid.so
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: ericj-at-mcalvin.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When Gnome (/usr/share/xsessions/gnome.desktop) is started by the display
manager (both sddm and gdm tested), it executes 'gnome' which then executes
gnome-session-binary.  The parent process for gnome-session-binary is systemd
--user

The problem is systemd --user does not set the logname (/proc/PID/loginuid)
because /etc/pam.d/systemd-user  does not have session  required
pam_loginuid.so

Therefore, the gnome window manager and its children also do not have loginuid
set properly.  Some things still rely on this.

There was a patch which was merged into systemd in 2016 which RHEL 8 and Fedora
are including, but openSUSE 15.3 does not have this patch.
Reference: https://github.com/systemd/systemd/pull/3120/commits


--1650003279.A4C471C0.7301
Date: Fri, 15 Apr 2022 06:14:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198509

            Bug ID: 1198509
           Summary: VUL-0: CVE-2022-1364: chromium: multiple security issues fixed in 100.0.4896.127
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

This update includes 2 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$NA][1315901] High CVE-2022-1364: Type Confusion in V8. Reported by Cl?ment
Lecigne of Google's Threat Analysis Group on 2022-04-13

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

Google is aware that an exploit for CVE-2022-1364 exists in the wild.As usual,
our ongoing internal security work was responsible for a wide range of fixes:

    [1316420] Various fixes from internal audits, fuzzing and other initiatives


--1650050480.a5Ea3E0.27802
Date: Fri, 15 Apr 2022 19:21:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198526

            Bug ID: 1198526
           Summary: Nothing provides python3-sip4-common = 4.19.25 needed by python3-sip4-4.19.24
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: cornelis-at-solcon.nl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installing a package that somehow needs python3-sip4 gives error message of
summary.


--1650086011.DDfb0.28491
Date: Sat, 16 Apr 2022 05:13:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198531

            Bug ID: 1198531
           Summary: AppArmor profile for zgrep is incomplete
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: Stromeko@NexGo.DE
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Option processing in zgrep stopped working since the AppArmor profile does not
allow /usr/bin/expr to be executed:

~> zgrep -ah . /dev/null
/usr/bin/zgrep: line 69: /usr/bin/expr: Permission denied
/usr/bin/zgrep: eval: line 70: unexpected EOF while looking for matching `''
/usr/bin/zgrep: eval: line 71: syntax error: unexpected end of file
/usr/bin/zgrep: line 71: /usr/bin/expr: Permission denied
/usr/bin/grep: .: Is a directory

The following patch fixes the problem (after reloading the profile of course):

-


body:
--1650180772.C37cfBB0.28383
Date: Sun, 17 Apr 2022 07:32:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198544

            Bug ID: 1198544
           Summary: qbittorrent interface is broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: sndanailov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 858196
  --> http://bugzilla.opensuse.org/attachment.cgi?id=858196&action=edit
missing icons

After the latest update of the qbittorrent package, some icons are missing and
the theme doesn't follow the system settings.

My current version is: 4.4.2

summary: qbittorrent interface is broken


body:
--1650211310.D4EDd60.30040
Date: Sun, 17 Apr 2022 16:01:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198549

            Bug ID: 1198549
           Summary: Update TLP to the latest version 1.5.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: popov895-at-ukr.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A new version 1.5.0 of the TLP was released on January 07, but the repository
still contains version 1.4.0. Version 1.5.0 uses new sysfs attribute
charge_behaviour for recalibration and this will make the external kernel
module acpi_call obsolete. It also contains bugfixes and other improvements.
Please, update this package to the latest version 1.5.0.

summary: Update TLP to the latest version 1.5.0


body:
--1650213169.ebDA70.30723
Date: Sun, 17 Apr 2022 16:32:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198551

            Bug ID: 1198551
           Summary: audacity won't work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: werwolf131313-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

> [werwolf@home] ~
> ??? audacity
> audacity: error while loading shared libraries: lib-screen-geometry.so: cannot open shared object file: No such file or directory
> [werwolf@home] ~
> ??? LANG=c zypper se --provides lib-screen-geometry.so
> Loading repository data...
> Reading installed packages...
> S  | Name     | Summary                            | Type
> ---+----------+------------------------------------+--------
> i+ | audacity | A Multi Track Digital Audio Editor | package
>     Note: For an extended search including not yet activated remote resources please use 'zypper
>     search-packages'.
> [werwolf@home] ~
> ??? rpm -ql audacity | grep 'lib-screen-geometry.so'
> /usr/lib64/audacity/lib-screen-geometry.so
> [werwolf@home] ~
> ??? ls -lah /usr/lib64/audacity/lib-screen-geometry.so
> -rw-r--r

summary: audacity won't work


--1650270721.8A3CCB1.8735
Date: Mon, 18 Apr 2022 08:32:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198559

            Bug ID: 1198559
           Summary: [SELinux] greetd cannot run /bin/sh as it should
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: stdden-at-opensuse.org
          Found By: ---
           Blocker: ---

This is the follow-up to gh#openSUSE/openSUSEway#55 and perhaps even bug
1182554.

greetd is a login manager daemon, which when it gets through authenticating
user wants to run a shell script which runs the window manager and whole
desktop session itself. Unfortunately, when running as described in the GitHub
ticket, it fails with this AVC:

> type=AVC msg=audit(1643843896.477:52): avc:  denied
> { transition } for  pid=934 comm="greetd" path="/usr/bin/bash"
> dev="sda2" ino=77757
> scontext=system_u:system_r:unconfined_service_t:s0
> tcontext=unconfined_u:unconfined_r:unconfined_t:s0
> tclass=process permissive=0

Denys, what should the transition lead to? Do we want to have confined sway? It
runs as unconfined_service_t here, but is that the ideal? What is the SELinux
label of Gnome processes?


--1650314420.Cb7232B1.15596
Date: Mon, 18 Apr 2022 20:40:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198570

            Bug ID: 1198570
           Summary: mod_evasive.conf contains redundant LoadModule directive
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Apache
          Assignee: bnc-team-apache-at-forge.provo.novell.com
          Reporter: archie.cobbs-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I restart Apache, I see this warning in /var/log/messages:

    start_apache2[7333]: [Mon Apr 18 16:32:28.548153 2022] [so:warn] [pid 7333]
AH01574: module evasive24_module is already loaded, skipping

The problem is that the installed file /etc/apache2/conf.d/mod_evasive.conf
contains this:

    LoadModule evasive24_module /usr/lib64/apache2/mod_evasive24.so

But with openSUSE, LoadModule directives are auto-generated into
/etc/apache2/sysconfig.d/loadmodule.conf based on /etc/sysconfig/apache2.

So there is already a LoadModule directive for mod_evasive in
/etc/apache2/sysconfig.d/loadmodule.conf, making the one in
/etc/apache2/conf.d/mod_evasive.conf redundant.

So the LoadModule directive in /etc/apache2/conf.d/mod_evasive.conf should be
removed.


--1650440529.7eA161.399
Date: Wed, 20 Apr 2022 07:42:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198676

            Bug ID: 1198676
           Summary: VUL-0: CVE-2022-21465: virtualbox: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/329571/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21465

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.34.
Easily exploitable vulnerability allows high privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products (scope change). Successful attacks of
this vulnerability can result in unauthorized ability to cause a hang or
frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as
unauthorized update, insert or delete access to some of Oracle VM VirtualBox
accessible data. CVSS 3.1 Base Score 6.7 (Integrity and Availability impacts).
CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21465
https://www.oracle.com/security-alerts/cpuapr2022.html#CVE-2022-21465
https://www.oracle.com/security-alerts/cpuapr2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21465


--1650440532.aef3151.32485
Date: Wed, 20 Apr 2022 07:42:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198677

            Bug ID: 1198677
           Summary: VUL-0: CVE-2022-21471: virtualbox: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/329577/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.34.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products (scope change). Successful attacks of
this vulnerability can result in unauthorized ability to cause a hang or
frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1
Base Score 6.5 (Availability impacts). CVSS Vector:
(CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21471
https://www.oracle.com/security-alerts/cpuapr2022.html#CVE-2022-21471
https://www.oracle.com/security-alerts/cpuapr2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21471


--1650440534.6f85D6.399
Date: Wed, 20 Apr 2022 07:42:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198678

            Bug ID: 1198678
           Summary: VUL-1: CVE-2022-21487: virtualbox: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/329593/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21487

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.34.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products (scope change). Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Oracle
VM VirtualBox accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality
impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21487
https://www.oracle.com/security-alerts/cpuapr2022.html#CVE-2022-21487
https://www.oracle.com/security-alerts/cpuapr2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21487


--1650440537.2A8dF6.32485
Date: Wed, 20 Apr 2022 07:42:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198679

            Bug ID: 1198679
           Summary: VUL-1: CVE-2022-21488: virtualbox: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/329594/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21488

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.34.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products (scope change). Successful attacks of
this vulnerability can result in unauthorized update, insert or delete access
to
some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.8
(Integrity
impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21488
https://www.oracle.com/security-alerts/cpuapr2022.html#CVE-2022-21488
https://www.oracle.com/security-alerts/cpuapr2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21488


--1650440540.f065CCF711.399
Date: Wed, 20 Apr 2022 07:42:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198680

            Bug ID: 1198680
           Summary: VUL-0: CVE-2022-21491: virtualbox: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/329597/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21491

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.34.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. Successful attacks of this vulnerability can result in takeover of
Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only.
CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).
CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21491
https://www.oracle.com/security-alerts/cpuapr2022.html#CVE-2022-21491
https://www.oracle.com/security-alerts/cpuapr2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21491


body:
--1650448974.755f1.24411
Date: Wed, 20 Apr 2022 10:02:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198692

            Bug ID: 1198692
           Summary: Deepin DE cannot be installed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: nik.kaiser87-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 858271
  --> http://bugzilla.opensuse.org/attachment.cgi?id=858271&action=edit
Yast showing mentioned error

When selecting the deepin desktop environment in Yast as a pattern, it says
"nothing provides libqt5-dwaylandplugin", needed by patterns-deepin-basis.
Therefore, the installation is not possible.
Does OpenQA not test this?

summary: Deepin DE cannot be installed


body:
--1650452501.F4ca0.5608
Date: Wed, 20 Apr 2022 11:01:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198694

            Bug ID: 1198694
           Summary: bad output from colordiff 1.0.19
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

colordiff-1.0.19 shipped on Leap 15.4 seems producing a bad output.  Namely, it
hides -

summary: bad output from colordiff 1.0.19


--1650464541.C48fcf40.1065
Date: Wed, 20 Apr 2022 14:22:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198703

            Bug ID: 1198703
           Summary: package virtualbox-websrv needs sysvinit-tools
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: gweberbh-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When starting virtualbox-websrv with

systemctl start vboxweb-service

fails with

Apr 20 10:52:49 XXXXX systemd[1]: vboxweb-service.service: Control process
exited, code=exited, status=1/FAILURE
Apr 20 10:52:49 XXXXX systemd[1]: vboxweb-service.service: Failed with result
'exit-code'.
Apr 20 10:52:49 XXXXX systemd[1]: Failed to start vboxweb-service.service.

however it is running
root      2548  0.0  0.0 559936 14176 ?        Sl   10:42   0:00
/usr/lib/virtualbox/vboxwebsrv --background

The script /usr/lib/virtualbox/vboxweb-service.sh fails due to the lack of
pidof which is in package sysvinit-tools. Installing sysvinit-tools solves the
problem.

I would like to suggest adding sysvinit-tools to the dependencies of
virtualbox-websrv.


--1650535389.D66D4.3740
Date: Thu, 21 Apr 2022 10:03:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198718

            Bug ID: 1198718
           Summary: gvfs: Invalid argument mounting SMB shares
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: scabrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Nautilus fails to mount SMB shares with samba 4.16. Upstream bugs:

https://gitlab.gnome.org/GNOME/gvfs/-/issues/611
https://gitlab.gnome.org/GNOME/gvfs/-/issues/619

Upstream patches:

https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/138


--1650548175.18Cd0.25272
Date: Thu, 21 Apr 2022 13:36:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198725

            Bug ID: 1198725
           Summary: Krusader - Compress here (as ZIP) does not work any more
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: GlobalUnity-at-disroot.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Prefix: TUMBLEWEED
Title: Krusader v2.7.2 "Peace of Mind" - The Compress menu option does not work

The Compress option does not do anything when you select either files or a
folder

Reference to BUG:

https://bugs.kde.org/show_bug.cgi?id=441376

Comment 18 Yaroslav Sidlovsky 2022-04-07 17:55:14 UTC

There is no new release (2.7.3) with fix, it's only fixed in master.
Version 2.7.2 still has this bug obviously.
Ping maintainer of your distro to include this patch.


--1650560008.fCdC0.10324
Date: Thu, 21 Apr 2022 16:53:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198731

            Bug ID: 1198731
           Summary: libmount: when moving a mounted tree, all mounted sub tree entries in utab should also be updated
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This has been reported to upstream too:
https://github.com/systemd/systemd/issues/15266

I created this bug to make sure that both openSUSE distros and SLE ones will be
fixed once it will be solved by upstream.

The problem has been discovered when addressing bsc#1175850, which depends on
the resolution of the reported issue.


--1650564757.1D5Ffd6b1.17238
Date: Thu, 21 Apr 2022 18:12:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198734

            Bug ID: 1198734
           Summary: glusterfs: missing dependency on rpcbind and python-xml
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-15-SP3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: opensuse_buildservice-at-ojkastl.de
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

Installation of glusterfs 3.12.3 on SLES15.3 from the PackageHub does not
require rpcbind.service or python-xml.

The glusterd.service has a hard requirement for rpcbind.service, that is not
fulfilled unless the rpcbind package is installed:

```
# systemctl cat glusterd
# /usr/lib/systemd/system/glusterd.service
[Unit]
Description=GlusterFS, a clustered file-system server
Requires=rpcbind.service
After=network.target rpcbind.service
Before=network-online.target
[...]
```

This leads to the service not being able to start.

```
# systemctl start glusterd
Failed to start glusterd.service: Unit rpcbind.service not found.
#
```

python2.7 is being required, but does not automatically pull in python-xml.
This results in errors like the following when using the gluster command:

```
# gluster volume list
Traceback (most recent call last):
  File "/usr/lib/glusterfs/python/syncdaemon/gsyncd.py", line 34, in <module>
    from monitor import monitor
  File "/usr/lib/glusterfs/python/syncdaemon/monitor.py", line 17, in <module>
    import xml.etree.ElementTree as XET
ImportError: No module named xml.etree.ElementTree
Connection failed. Please check if gluster daemon is operational.

```

I am preparing a MR for this, but need to work out how to properly get this
into Leap 15.3 and the Backports.

SLES15.4 / Leap 15.4 are not affected, as they already have the newer 9.3
version of glusterfs that does no longer need rpcbind or python2.


--1650709237.CEFe06c0.19539
Date: Sat, 23 Apr 2022 10:20:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198783

            Bug ID: 1198783
           Summary: Starting amavis.service gives Unit var-run.mount not found.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a periodic test on a running amavis.service and when it is not running
the command "systemctl start amavis.service is given.
However this service does not start and gives the error message:

Failed to restart amavis.service: Unit var-run.mount not found.

Inspection of /usr/lib/systemd/system/amavis.service shows:

Requires=var-run.mount
After=var-run.mount

This element, var-run.mount is missing - at least I cannot find it- , although
amavis does start after a reboot.


--1650723156.CaEA70.4826
Date: Sat, 23 Apr 2022 14:12:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198785

            Bug ID: 1198785
           Summary: The shared libraries for the hugin tools are in the wrong directory
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: at1969-at-achimtheobald.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The shared libraries for the higin tools are installed in "/usr/lib64/hugin".
But the hugin tools, e.g. nona, look for them in "/usr/lib64".

#
nona: error while loading shared libraries: libhuginbase.so.0.0: cannot open
shared object file: No such file or directory
#

/usr/lib64/hugin
/usr/lib64/hugin/libceleste.so.0.0
/usr/lib64/hugin/libhuginbase.so.0.0
/usr/lib64/hugin/libhuginbasewx.so.0.0
/usr/lib64/hugin/libicpfindlib.so.0.0
/usr/lib64/hugin/liblocalfeatures.so.0.0


body:
--1650801891.f358370.27992
Date: Sun, 24 Apr 2022 12:04:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198790

            Bug ID: 1198790
           Summary: texlive packaging: Some lua files have double shebangs
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hiwatari.seiji-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Some lua-files that are part of the texlive packaging seem to have double
shebangs. In the original source, there is only one, but packging seems to add
a second line. The two files I found are:

```
/usr/share/texmf/tex/generic/pgfplots/lua/prepcontour.lua
/usr/share/texmf/tex/generic/pgfplots/lua/prepcontour_cli.lua
```

At the top, they have:
```
#! /usr/bin/texlua
#!/usr/bin/luatex
```
The one with the space seems to have been added by packaging. Here is the
original file:
https://github.com/pgf-tikz/pgfplots/blob/master/tex/generic/pgfplots/lua/prepcontour.lua
This additional line throws off the lua parser, causing everything using this
file to fail more or less silently (sometimes more ... sometimes less).

pkgs: texlive-specs-a texlive-specs-b texlive-specs-c texlive-specs-d texlive-specs-e texlive-specs-f texlive-specs-g texlive-specs-h texlive-specs-i texlive-specs-j texlive-specs-k texlive-specs-l texlive-specs-m texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-q texlive-specs-r texlive-specs-s texlive-specs-t texlive-specs-u texlive-specs-v texlive-specs-w texlive-specs-x texlive-specs-y texlive-specs-z


--1650826419.Cbc40.17034
Date: Sun, 24 Apr 2022 18:53:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198795

            Bug ID: 1198795
           Summary: bcm20702a1-firmware pulls in firmware-all
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: opensuse@1.opensuse.bgcomp.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package bcm20702a1-firmware has a dependency on kernel-firmware.

Kernel-firmware pulls in all kernel-firmware-* rpms.

It should not, that is being abusive.

While I need this rpm, I do not need chelsio, mellanox, nvidia and a host of
other firmware packages that I am forced to install.

It is for Broadcom bluetooth devices. IT DOES NOT REQUIRE ANY ADDITIONAL RPMs.


body:
--1650827607.0faf5B0.14768
Date: Sun, 24 Apr 2022 19:13:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198796

            Bug ID: 1198796
           Summary: kig crashes on export
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: axel@hiq2.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Please update kig to version 20.12 as the shipped version 20.04 has a severe
and annoying bug, see https://bugs.kde.org/show_bug.cgi?id=422665
Thank you.

summary: kig crashes on export


--1650908200.AbfF0.7609
Date: Mon, 25 Apr 2022 17:36:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198849

            Bug ID: 1198849
           Summary: texworks fails to build at error: aggregate 'QPainterPath clipPath' has incomplete type and cannot be defined
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: badshah400-at-gmail.com
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello package texworks fails to build in Leap 15.4

Build log:
https://build.opensuse.org/build/openSUSE:Backports:SLE-15-SP4/standard/x86_64/texworks/_log

[  169s]  QT_DEPRECATED_X("Use std::sort") inline void
qSort(RandomAccessIterator start, RandomAccessIterator end, LessThan lessThan)
[  169s]                                               ^~~~~
[  169s]
/home/abuild/rpmbuild/BUILD/texworks-release-0.6.5/modules/QtPDF/src/PDFBackend.cpp:744:22:
error: aggregate 'QPainterPath clipPath' has incomplete type and cannot be
defined
[  169s]          QPainterPath clipPath;
[  169s]                       ^~~~~~~~
[  169s]
/home/abuild/rpmbuild/BUILD/texworks-release-0.6.5/modules/QtPDF/src/PDFBackend.cpp:764:24:
error: aggregate 'QPainterPath pp' has incomplete type and cannot be defined
[  169s]            QPainterPath pp;
[  169s]                         ^~
[  169s] make[2]: *** [modules/QtPDF/CMakeFiles/qtpdf.dir/build.make:266:
modules/QtPDF/CMakeFiles/qtpdf.dir/src/PDFBackend.cpp.o] Error 1
[  169s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/texworks-release-0.6.5/build'


--1650974328.28Dd4Fc3.14777
Date: Tue, 26 Apr 2022 11:58:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198885

            Bug ID: 1198885
           Summary: Uranium fails in %check on aarch64 only in Backports due to an issue with numpy and libopenblas_pthreads.so.0
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    lubos.kocman-at-suse.com
          Found By: ---
           Blocker: ---

Uranium fails in %check on aarch64 only in Backports due to an issue with numpy
and libopenblas_pthreads.so.0.

This is likely a more general issue with numpy on aarch64 with SLE15-SP4.

Error log:
[   45s] + /usr/bin/python3 -m pytest -v -k 'not TestHttpRequestManager.py'
[   45s] ImportError while loading conftest
'/home/abuild/rpmbuild/BUILD/Uranium-4.13.1/tests/conftest.py'.
[   45s] tests/conftest.py:8: in <module>
[   45s]     from UM.Qt.QtApplication import QtApplication #QTApplication
import is required, even though it isn't used.
[   45s] UM/Qt/QtApplication.py:19: in <module>
[   45s]     from UM.Backend.Backend import Backend #For typing.
[   45s] UM/Backend/Backend.py:15: in <module>
[   45s]     import UM.Application
[   45s] UM/Application.py:9: in <module>
[   45s]     from UM.Controller import Controller
[   45s] UM/Controller.py:3: in <module>
[   45s]     from UM.Scene.Iterator.DepthFirstIterator import
DepthFirstIterator
[   45s] UM/Scene/Iterator/DepthFirstIterator.py:3: in <module>
[   45s]     from UM.Scene.SceneNode import SceneNode
[   45s] UM/Scene/SceneNode.py:7: in <module>
[   45s]     import numpy
[   45s] /usr/lib64/python3.6/site-packages/numpy/__init__.py:142: in <module>
[   45s]     from . import core
[   45s] /usr/lib64/python3.6/site-packages/numpy/core/__init__.py:47: in
<module>
[   45s]     raise ImportError(msg)
[   45s] E   ImportError:
[   45s] E
[   45s] E   IMPORTANT: PLEASE READ THIS FOR ADVICE ON HOW TO SOLVE THIS ISSUE!
[   45s] E
[   45s] E   Importing the numpy c-extensions failed.
[   45s] E   - Try uninstalling and reinstalling numpy.
[   45s] E   - If you have already done that, then:
[   45s] E     1. Check that you expected to use Python3.6 from
"/usr/bin/python3",
[   45s] E        and that you have no directories in your PATH or PYTHONPATH
that can
[   45s] E        interfere with the Python and numpy version "1.17.3" you're
trying to use.
[   45s] E     2. If (1) looks fine, you can open a new issue at
[   45s] E        https://github.com/numpy/numpy/issues.  Please include
details on:
[   45s] E        - how you installed Python
[   45s] E        - how you installed numpy
[   45s] E        - your operating system
[   45s] E        - whether or not you have multiple versions of Python
installed
[   45s] E        - if you built from source, your compiler versions and
ideally a build log
[   45s] E
[   45s] E   - If you're working with a numpy git repository, try `git clean
-xdf`
[   45s] E     (removes all files not under version control) and rebuild numpy.
[   45s] E
[   45s] E   Note: this error has many possible causes, so please don't comment
on
[   45s] E   an existing issue about this - open a new one instead.
[   45s] E
[   45s] E   Original error was: libopenblas_pthreads.so.0: cannot open shared
object file: No such file or directory
[   45s] error: Bad exit status from /var/tmp/rpm-tmp.Vrf6ZC (%check)


body:
Build Identifier:

All headers of libsrtp2-devel are installed in `/usr/include/srtp2`, but all
the `#include "foo.h"` directives are rewritten as `#include "srtp/foo.h"`.

Reproducible: Always

Steps to Reproduce:
zypper in libsrtp2-devel
gcc -E /usr/include/srtp2/cipher.h
Actual Results:
# 1 "/usr/include/srtp2/cipher.h"
# 1 "<built-in>"
# 1 "<command-line>"
# 31 "<command-line>"
# 1 "/usr/include/stdc-predef.h" 1 3 4
# 32 "<command-line>" 2
# 1 "/usr/include/srtp2/cipher.h"
/usr/include/srtp2/cipher.h:48:11: fatal error: srtp/srtp.h: No such file or
directory
 #include  <srtp/srtp.h>
           ^~~~~~~~~~~~~
compilation terminated.

Expected Results:
gcc: warning: /usr/include/srtp2/: linker input file unused because linking not
done

summary: libsrtp2-devel: broken headers


--1651049970.fFA5DADa0.28621
Date: Wed, 27 Apr 2022 08:59:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198922

            Bug ID: 1198922
           Summary: zgrep does not support zstd compressed files
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE's zgrep has long been enhanced to also support other compression
formats than only gz (bz2, xz and lzma)

The latest compression hype is around zstd - those files are not yet supported
by our zgrep though (yes, there is zstdgrep available, but integration would be
nice)


body:
--1651084172.FB4B570.30951
Date: Wed, 27 Apr 2022 18:29:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1198949

            Bug ID: 1198949
           Summary: tor: improved congestion control
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Network
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: bwiedemann-at-suse.com
          Found By: ---
           Blocker: ---

tor project released 0.4.7.7 as stable
https://forum.torproject.net/t/stable-release-0-4-7-7/3108

The main feature is improved network level congestion control. The projects
requests that packages be made available in order for exit noted to be able to
upgrade, for the whole network to be able to make use of this feature. We
should oblige via a maintenance update, also to have users benefit from bug
fixes and improved security.

summary: tor: improved congestion control


--1651133950.1EbFF75.24265
Date: Thu, 28 Apr 2022 08:19:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1198965

            Bug ID: 1198965
           Summary: VUL-1: CVE-2022-1507: chafa: NULL Pointer Dereference in function gif_internal_decode_frame
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/330190/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mvetter-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-1507

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at
libnsgif.c:599 allows attackers to cause a denial of service (crash) via a
crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2.
chafa:
NULL Pointer Dereference in function gif_internal_decode_frame at
libnsgif.c:599
allows attackers to cause a denial of service (crash) via a crafted input file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1507
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1507
https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9
https://huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95


--1651215673.ED445331.5983
Date: Fri, 29 Apr 2022 07:01:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199002

            Bug ID: 1199002
           Summary: VUL-1: CVE-2021-41945: python-httpx: Improper input validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/330308/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: michael-at-stroeder.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-41945

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in
`httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-41945
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41945
https://github.com/encode/httpx
https://github.com/encode/httpx/discussions/1831
https://github.com/encode/httpx/issues/2184
http://encode.com
https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571


--1651219409.BbaC6bB00.13868
Date: Fri, 29 Apr 2022 08:03:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199007

            Bug ID: 1199007
           Summary: fpc:doc fails to build on Tumbleweed due to a LaTex error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: werner-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 858524
  --> http://bugzilla.opensuse.org/attachment.cgi?id=858524&action=edit
user.log

fpc:doc fails to build on Tumbleweed due to a LaTex error:
**********
pdfTeX warning (ext4): destination with the same identifier (name{page.1}) has
been already used, duplicate ignored
<to be read again>
                   \relax
l.58 \chapter
             {Introduction} [1

]
Chapter 1.
! Undefined control sequence.
\refref ->\htmladdnormallink
                             {Reference Guide}{../ref/ref.html}\xspace
l.67 \refref
             for these things. For a description of the possibilities and the
?
! Emergency stop.
\refref ->\htmladdnormallink
                             {Reference Guide}{../ref/ref.html}\xspace
l.67 \refref
             for these things. For a description of the possibilities and the
End of file on the terminal!
**********

Latest build results are available at
https://build.opensuse.org/package/live_build_log/devel:languages:pascal/fpc:doc/openSUSE_Factory/x86_64


--1651237945.88fA0.24263
Date: Fri, 29 Apr 2022 13:12:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199026

            Bug ID: 1199026
           Summary: pam_keyinit is being used by some unexpected applications
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Those users look suspicious:

/usr/etc/pam.d/groupadd:session  optional   pam_keyinit.so revoke
/usr/etc/pam.d/groupdel:session  optional   pam_keyinit.so revoke
/usr/etc/pam.d/groupmod:session  optional   pam_keyinit.so revoke
/usr/etc/pam.d/newusers:session  optional   pam_keyinit.so revoke

since this PAM module is supposed to be used by login processes (such as login,
sshd and so on).

Please not that it's not an exhaustive list, the full list of pam_keyinit users
should be verified.


--1651394466.42DC52B1.1660
Date: Sun, 1 May 2022 08:41:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199047

            Bug ID: 1199047
           Summary: The TCP port of the HTTP server is privileged or already in use: (port = 8042)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Following up on the discussion
https://lists.opensuse.org/archives/list/support-at-lists.opensuse.org/thread/T6PUSZ6DXUCU2LJXWVX5KMDLGCWJLG3G/

Orthanc server can't be started in https mode, as orthanc reads the unversioned
libcrypto.so, instead of libcrypto.so.<major> . This is an issue with all Leap
and TW versions

This was reported upstream already, but seems not to be a problem under Debian,
so the author sees it as distribution specific issue.

As short-term workaround we could ship libopenssl-devel as runtime dependency
to make it work.

Long term:
- let libopenssl create an unversioned link
- let orthanc create a link to libopenssl.so (not sure if OBS allows this)

What do you security experts propose?


body:
--1651432611.f8A00Ff0.25931
Date: Sun, 1 May 2022 19:16:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199054

            Bug ID: 1199054
           Summary: ldc should move away from llvm7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aaronpuchert@alice-dsl.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We currently have in Factory LLVM versions up to llvm14, and I would like to
get rid of older versions. The oldest version currently in use is llvm7 and
it's used by two packages. From llvm8 to llvm10 there are no users, so this is
really an outlier.

Current versions of ldc seem to support newer LLVMs, the problem seems to be
the bootstrapping with older versions. I don't really have an idea for this,
but perhaps you can use another Go compiler such as gcc-go instead or do it
like Rust.

summary: ldc should move away from llvm7


body:
--1651491151.03834E7C0.27683
Date: Mon, 2 May 2022 11:32:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199076

            Bug ID: 1199076
           Summary: llvm14: libomp.so varies between builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: aaronpuchert@alice-dsl.net
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: martin.liska-at-suse.com
            Blocks: 1041090
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
the llvm14 package libomp.so varied between builds
with obvious ordering issues such as

-

summary: llvm14: libomp.so varies between builds


--1651517566.eeA10.2707
Date: Mon, 2 May 2022 18:52:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199118

            Bug ID: 1199118
           Summary: VUL-0: chromium: update to version 101.0.4951.54
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

New version released


body:
--1651573826.cE53C8E1.14789
Date: Tue, 3 May 2022 10:30:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199151

            Bug ID: 1199151
           Summary: Problem with Lua Busted
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mvetter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

$: zypper in lua53-busted

$: busted
/usr/bin/lua: /usr/bin/busted:3: module 'busted.runner' not found:
    no field package.preload['busted.runner']
    no file '/usr/share/lua/5.4/busted/runner.lua'
    no file '/usr/share/lua/5.4/busted/runner/init.lua'
    no file '/usr/lib64/lua/5.4/busted/runner.lua'
    no file '/usr/lib64/lua/5.4/busted/runner/init.lua'
    no file './busted/runner.lua'
    no file './busted/runner/init.lua'
    no file '/usr/lib64/lua/5.4/busted/runner.so'
    no file '/usr/lib64/lua/5.4/loadall.so'
    no file './busted/runner.so'
    no file '/usr/lib64/lua/5.4/busted.so'
    no file '/usr/lib64/lua/5.4/loadall.so'
    no file './busted.so'
stack traceback:
    [C]: in function 'require'
    /usr/bin/busted:3: in main chunk
    [C]: in ?

Encountered when updating rehex to version 0.5.1

pkgs: lua-busted rehex

summary: Problem with Lua Busted


body:
--1651653927.DcE0Cd671.31473
Date: Wed, 4 May 2022 08:45:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199184

            Bug ID: 1199184
           Summary: switch Tumbleweed to a 4096bit RSA signing key
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: dimstar-at-opensuse.org
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dmueller-at-suse.com
          Found By: ---
           Blocker: ---

We currently still use a 2048 bit key for signing.

It would be better to switch to a 4096 RSA key.

pkgs: openSUSE-build-key rpm-repos-openSUSE


body:
--1651656099.Bad24a0.7217
Date: Wed, 4 May 2022 09:21:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199190

            Bug ID: 1199190
           Summary: Ark is not able to open .7zip
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: ivo.grimaldi-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Ark is not able to open .7zip
but itfI use konsole that's all ok
Inside kde bugzilla:
[ark] [Bug 387996] New: Impossible to extract ZIP compressed with LZMA method
https://kde-bugs-dist.kde.narkive.com/vnE9jGk7/ark-bug-387996-new-impossible-to-extract-zip-compressed-with-lzma-method

there's a solution: disable libzip inside Ark.

Is possible to do this solution inside an update for Tumbleweed?

summary: Ark is not able to open .7zip


body:
--1651721724.Be60D5F0.13817
Date: Thu, 5 May 2022 03:35:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199215

            Bug ID: 1199215
           Summary: [trackerbug] lxd 4.24 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550

  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel

summary: [trackerbug] lxd 4.24 update


body:
--1651724966.FbbE80.19363
Date: Thu, 5 May 2022 04:29:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1199216

            Bug ID: 1199216
           Summary: [trackerbug] lxd 5.1 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956

  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy

summary: [trackerbug] lxd 5.1 update


--1651820418.6e5ee4840.4208
Date: Fri, 6 May 2022 07:00:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1199268

            Bug ID: 1199268
           Summary: [META] rpmlint: E: binary-or-shlib-defines-rpath
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Meta for all binary-or-shlib-defines-rpath rpmlint errors.