--1546432148.B8Bd0.3155
Date: Wed, 2 Jan 2019 12:29:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120488

            Bug ID: 1120488
           Summary: VUL-1: CVE-2019-3500: aria2: metadata and potential password leaks via --log=
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/221964/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: mpluskal-at-suse.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic
Authentication username and password in a file, which might allow local users
to obtain sensitive information by reading this file.

References:
https://github.com/aria2/aria2/issues/1329
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-3500


--1546525076.21cC0.12557
Date: Thu, 3 Jan 2019 14:17:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120646

            Bug ID: 1120646
           Summary: VUL-1: CVE-2018-20330: libjpeg-turbo: tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/221727/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a
resultant heap-based buffer overflow via a BMP image because multiplication of
pitch and height is mishandled, as demonstrated by tjbench.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20330
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20330.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20330
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/304


body:
--1546610651.bfCC4.13813
Date: Fri, 4 Jan 2019 14:04:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120789

            Bug ID: 1120789
           Summary: GCC 9: ltrace build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/ltrace/standard/x86_64

[   51s] In function 'fprintf',
[   51s]     inlined from 'frame_callback' at output.c:660:2:
[   51s] /usr/include/bits/stdio2.h:97:10: error: '%s' directive argument is
null [-Werror=format-overflow=]
[   51s]    97 |   return __fprintf_chk (__stream, __USE_FORTIFY_LEVEL - 1,
__fmt,
[   51s]       |
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[   51s]    98 |    __va_arg_pack ());
[   51s]       |    ~~~~~~~~~~~~~~~~~

If I see correctly, it's a real bug. Unfortunately upstream looks somehow dead.

summary: GCC 9: ltrace build fails


body:
--1546688189.eAFd0.18413
Date: Sat, 5 Jan 2019 11:36:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120842

            Bug ID: 1120842
           Summary: youtube-dl missing ssl
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: opensuse-at-trummer.xyz
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The youtube-dl package is broken on Tumbleweed 20181224 due to a missing
dependency:

Traceback (most recent call last):
  File "/usr/lib64/python2.7/runpy.py", line 174, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code
    exec code in run_globals
  File "/usr/bin/youtube-dl/__main__.py", line 16, in <module>
  File "/usr/bin/youtube-dl/youtube_dl/__init__.py", line 15, in <module>
  File "/usr/bin/youtube-dl/youtube_dl/options.py", line 8, in <module>
  File "/usr/bin/youtube-dl/youtube_dl/downloader/__init__.py", line 3, in
<module>
  File "/usr/bin/youtube-dl/youtube_dl/downloader/common.py", line 10, in
<module>
  File "/usr/bin/youtube-dl/youtube_dl/utils.py", line 29, in <module>
ImportError: No module named ssl

It's working on another machine that probably has a ssl package for python
installed but I don't know which one that is.

summary: youtube-dl missing ssl


--1546712277.f40dD8C5.29804
Date: Sat, 5 Jan 2019 18:17:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120850

            Bug ID: 1120850
           Summary: Virtualization:containers/minikube: Bug - possible packaging changes
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: containers-bugowner-at-suse.de
          Reporter: bryan.gartner-at-suse.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: fcastelli-at-suse.com
          Found By: ---
           Blocker: ---

Some possible/suggested packaging changes for minikube ... (currently using
Leap 15 x86_64 as the base OS)

General:
- runtime requires kubectl (which is now a standalone package outside of
non-visible kubernetes-client package)

kubectl could not be found on your path. kubectl is a requirement for using
minikube

Somewhat unique (tied to trying to use minikube via -vm-driver=none for a
local, non-VM install use case - NOTE: this is currently a very lightly
documented use case upstream, so trial-and-error is still typical and WIP)

- seems btrfs is not a supported fs (in this local mode), so had to re-install
system with ext4 (probably an upstream fix required)

- each version of minikube seems to have somewhat specific docker version
requirements.

[preflight] Some fatal errors occurred:
    [ERROR SystemVerification]: unsupported docker version: 18.09.0

For instance, the current package, 0.32.0-lp150.19.1 (in this non-VM use case)
requires docker 18.06.1_ce. Of course this is available on OBS but requires the
manual step to override an install of the latest docker

- for this use case, it is suggested to also install socat

[WARNING FileExisting-socat]: socat not found in system path

With above workarounds, this is running now (both accessible via CLI and K8s
dashboard):

kubectl get nodes
NAME       STATUS    ROLES     AGE       VERSION
minikube   Ready     master    2h        v1.12.4

kubectl get pods
NAME                          READY     STATUS    RESTARTS   AGE
hello-node-6f6cbc4649-qg6nj   1/1       Running   0          2h

Let me know if you'd like me to direct some of these issues upstream


body:
--1546738052.0D4cA0.23474
Date: Sun, 6 Jan 2019 01:27:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120852

            Bug ID: 1120852
           Summary: SSSD may have incorrect service type
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: william-at-blackhats.net.au
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,

I recently have been testing samba 4.9.x from  network:samba:STABLE on a leap
15.0 transactional server. I noticed that when I installed this, it updates
ldb/tdb which is used by SSSD. The following error is experienced:

(Sun Jan  6 11:22:44 2019) [sssd] [ldb] (0x0010): Failed to unlock db:
../ldb_tdb/ldb_tdb.c:147: Reusing ldb opend by pid 3344 in process 3345
 / Protocol error

This is referenced by the upstream ticket:

https://pagure.io/SSSD/sssd/pull-request/3751

I note in the upstream ticket, that it implies that systemd should be starting
sssd with interactive mode which avoids the issue, but cwrap hits this with
daemon mode.

The systemd unit file for sssd on suse ships with sssd in daemon mode. Should
it perhaps be:

[Service]
EnvironmentFile=-/etc/sysconfig/sssd
ExecStart=/usr/sbin/sssd -i -f
# These two should be used with traditional UNIX forking daemons
# consult systemd.service(5) for more details
Type=simple
PIDFile=/var/run/sssd.pid

To match the "advice" of upstreams implementation?

summary: SSSD may have incorrect service type


--1546764321.64f34A3.7896
Date: Sun, 6 Jan 2019 08:45:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120854

            Bug ID: 1120854
           Summary: Leap 15.0, Kernel 4.12.14-lp150.12.28-default, does not work with Renesas uPD720202 xhci chipset
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: abittner-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Observed that my current Leap 15.0, with Kernel 4.12.14-lp150.12.28-default

apparently has problems to initialize or use the Renesas xhci usb3 pcie addon
card I just moments ago used on the same hardware, but booted via usb live
stick to current gparted.org distribution.

According to their release notes pages they use and have:
<https://gparted.org/gparted-live/stable/RELEASE-NOTES-GParted-live.txt>

GParted live 0.33.0-1.
...
 * Linux kernel was updated to 4.18.20-2.
...

I used:
d59946d1c666709af47c92c27b3573ec98f4c1ef2b21115c9dd9a0609e4acae8
gparted-live-0.33.0-1-amd64.iso

Leap 15.0 shows the devices as follows:

lspci -v | grep -i renesas
02:00.0 USB controller: Renesas Technology Corp. uPD720202 USB 3.0 Host
Controller (rev ff) (prog-if ff)

dmesg -e | grep xhci
[  +0.002181] xhci_hcd 0000:02:00.0: Resetting
[  +0.072015] xhci_hcd 0000:02:00.0: Refused to change power state, currently
in D3
[  +0.000076] xhci_hcd 0000:02:00.0: xHCI Host Controller
[  +0.000006] xhci_hcd 0000:02:00.0: new USB bus registered, assigned bus
number 8
[  +0.000012] xhci_hcd 0000:02:00.0: Host halt failed, -19
[  +0.000002] xhci_hcd 0000:02:00.0: can't setup: -19
[  +0.000026] xhci_hcd 0000:02:00.0: USB bus 8 deregistered
[  +0.000024] xhci_hcd 0000:02:00.0: init 0000:02:00.0 fail, -19

lspci -v | grep -i xhci
        Kernel modules: xhci_pci

I tried to use this pcie xhci card (has to external usb3 A ports) with some
simple external usb removal drive devices.

As stated, this very same physical machine worked nicely with simply booting it
with the gparted-live-0.33.0-1-amd64.iso

Thanks.


body:
--1546790824.ad3AF0CB4.30897
Date: Sun, 6 Jan 2019 16:07:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120864

            Bug ID: 1120864
           Summary: GCC 9: elfutils build fails on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/elfutils/standard/i586

[   70s] readelf.c: In function 'print_debug_str_section':
[   70s] readelf.c:10152:15: error: '%*llx' directive output between 4 and
2147483647 bytes may cause result to exceed 'INT_MAX'
[-Werror=format-overflow=]
[   70s] 10152 |       printf (" [%*" PRIx64 "]  \"%s\"\n", digits, (uint64_t)
offset, str);
[   70s]       |               ^~~~~~
[   70s] readelf.c:10152:18: note: format string is defined here
[   70s] 10152 |       printf (" [%*" PRIx64 "]  \"%s\"\n", digits, (uint64_t)
offset, str);
[   70s] readelf.c:10152:15: note: directive argument in the range [0,
18446744073709551614]
[   70s] 10152 |       printf (" [%*" PRIx64 "]  \"%s\"\n", digits, (uint64_t)
offset, str);
[   70s]       |               ^~~~~~

summary: GCC 9: elfutils build fails on i586


body:
--1546801079.Ea3aD24.31297
Date: Sun, 6 Jan 2019 18:57:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120868

            Bug ID: 1120868
           Summary: GCC 9: bison build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/build/openSUSE:Factory:Staging:Gcc7/standard/x86_64/bison/_log

[  189s] 158: S/R in initial                                  ok
[  190s] 159: %nonassoc and eof                               FAILED
(conflicts.at:370)
[  191s] 160: parse.error=verbose and consistent errors: lr.type=ielr ok

Started with GCC revision r260895, where we make more sanity checking about
profile generation.

summary: GCC 9: bison build fails


body:
--1546836533.B87480.14163
Date: Mon, 7 Jan 2019 04:48:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120873

            Bug ID: 1120873
           Summary: Vapoursynth is outdated
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: truelibertarian-at-protonmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This is my first report, so I apologize if anything is amiss.

I saw in Factory that the vapoursynth package
(https://build.opensuse.org/package/show/openSUSE:Factory/vapoursynth) is on
version R43. The current version available from the GitHub developer page is
R45.1 (https://github.com/vapoursynth/vapoursynth). If this could be updated, I
would really appreciate it!

P.S. if there is a better way to report outdated software, or if/how I can
contribute updates to packages, please let me know.

summary: Vapoursynth is outdated


--1546849769.ba7F1B6A0.22748
Date: Mon, 7 Jan 2019 08:29:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120892

            Bug ID: 1120892
           Summary: VUL-1: CVE-2018-20073: chromium: URL metadata and potential password leaks via extended filesystem attributes
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/221995/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: josef.moellers-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20073

Posted by Hanno B�ck on Jan 03Chromium/Chrome variant of this issue got
CVE-2018-20073

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20073
http://seclists.org/oss-sec/2019/q1/18
https://seclists.org/oss-sec/2019/q1/0


--1546859936.5baDD810.20272
Date: Mon, 7 Jan 2019 11:18:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1120915

            Bug ID: 1120915
           Summary: gnustep-libobjc2 build failed on Leap 15.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: gyribeiro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

gnustep-libobjc2 build failed on Leap 15.1, log:

[   47s] In file included from
/home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.cc:5:
[   47s] In file included from
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/exception:142:
[   47s] In file included from
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/bits/exception_ptr.h:38:
[   47s]
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/bits/cxxabi_init_exception.h:63:7:
error: exception specification in declaration does not match previous
declaration
[   47s]       __cxa_allocate_exception(size_t) _GLIBCXX_NOTHROW;
[   47s]       ^
[   47s] /home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.h:9:7: note:
previous declaration is here
[   47s] void *__cxa_allocate_exception(size_t thrown_size);
[   47s]       ^
[   47s] In file included from
/home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.cc:5:
[   47s] In file included from
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/exception:142:
[   47s] In file included from
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/bits/exception_ptr.h:38:
[   47s]
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/bits/cxxabi_init_exception.h:66:7:
error: exception specification in declaration does not match previous
declaration
[   47s]       __cxa_free_exception(void*) _GLIBCXX_NOTHROW;
[   47s]       ^
[   47s] /home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.h:28:6: note:
previous declaration is here
[   47s] void __cxa_free_exception(void *thrown_exception);
[   47s]      ^

...

[   47s] /home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.cc:13:2: warning:
struct '__class_type_info' was previously declared as a class
[-Wmismatched-tags]
[   47s]         struct __class_type_info;
[   47s]         ^
[   47s]
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/typeinfo:45:9:
note: previous use is here
[   47s]   class __class_type_info;
[   47s]         ^
[   47s] /home/abuild/rpmbuild/BUILD/libobjc2-1.8.1/objcxx_eh.cc:25:8: error:
redefinition of 'type_info'
[   47s]         class type_info
[   47s]               ^
[   47s]
/usr/bin/../lib64/gcc/x86_64-suse-linux/7/../../../../include/c++/7/typeinfo:88:9:
note: previous definition is here
[   47s]   class type_info
[   47s]         ^

Full log can be found here:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/gnustep-libobjc2/standard/x86_64


--1546867804.caADd3.5526
Date: Mon, 7 Jan 2019 13:30:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120935

            Bug ID: 1120935
           Summary: mutt: SLE imported update drops the -doc and -lang split
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: werner-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: meissner-at-suse.com, werner-at-suse.com
          Found By: ---
           Blocker: ---

A maintenance update for mutt was imported from SLE 12 into the Leap 42.3
Maintenance queue:
https://build.opensuse.org/project/show/openSUSE:Maintenance:9239

Install checker complains:

found conflict of mutt-1.10.1-2.3.1.x86_64 with mutt-doc-1.8.2-1.7.noarch:
  - /usr/share/doc/packages/mutt/[...]
found conflict of mutt-1.10.1-2.3.1.x86_64 with mutt-lang-1.8.2-1.7.noarch:
  - /usr/share/locale/[...]

The spec change relative to the previous Leap 42.3 package drops the -doc and
-lang packages:
https://build.opensuse.org/package/rdiff/openSUSE:Maintenance:9239/mutt.openSUSE_Leap_42.3_Update?linkrev=base&rev=2
The package was switched to be inherited from SLE 12 so this was never relevant
or checked there.
https://build.opensuse.org/package/rdiff/openSUSE:Leap:42.3:Update/00Meta?linkrev=base&rev=167

So this is not entirely in sync, including a bit of changelog. We should decide
whether to fork the package to retainin the -doc and -lang split in Leap 42.3,
or make it parameterized...


body:
--1546868683.71e2d21.12453
Date: Mon, 7 Jan 2019 13:44:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120938

            Bug ID: 1120938
           Summary: Wrong repos added in installer
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Installer adds online repos from
http://download.opensuse.org/YaST/Repos/_openSUSE_Factory_Default.xml
which are fine for x86*, but wrong for other archs, such as aarch64.

summary: Wrong repos added in installer


body:
--1546886246.FEcfb4c0.9980
Date: Mon, 7 Jan 2019 18:37:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1120969

            Bug ID: 1120969
           Summary: Usbguard service doesn't autostart
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: michiel-at-nexigon.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installed usbguard (0.7.4) from Factory on current Tumbleweed (20181224)
Manual starting usbguard.service works
Enabled the systemd service, but during boot the service is not started.

Current factory repo has a rather old file usbguard.service with content:
[Unit]
Description=USBGuard daemon
Wants=systemd-udevd.service local-fs.target

[Service]
Type=simple
ExecStart=/usr/sbin/usbguard-daemon -k -c /etc/usbguard/usbguard-daemon.conf
Restart=on-failure

[Install]
WantedBy=base.target

Originating github repo has as changed service file:

[Unit]
Description=USBGuard daemon
Wants=systemd-udevd.service local-fs.target
Documentation=man:usbguard-daemon(8)

[Service]
Type=forking
PIDFile=/var/run/usbguard.pid
ExecStart=%sbindir%/usbguard-daemon -f -s -c
%sysconfdir%/usbguard/usbguard-daemon.conf
Restart=on-failure

[Install]
WantedBy=basic.target

Tested the above content (with absolute paths), now the service starts at boot.

summary: Usbguard service doesn't autostart


body:
--1546901016.fe5a0.3706
Date: Mon, 7 Jan 2019 22:43:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1120986

            Bug ID: 1120986
           Summary: supertuxkart build failed on Leap 15.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: gyribeiro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

supertuxkart build failed on Leap 15.1, "redeclared as different kind of
symbol" and "conflicting declaration" errors reported, log sample:

[  116s] In file included from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/gl_headers.hpp:58:0,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/abstract_renderer.hpp:21,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/irr_driver.hpp:36,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/addons/zip.cpp:22:
[  116s] /usr/include/GL/glext.h:12098:92: error: 'void
__glewGetFragmentMaterialfvSGIX(GLenum, GLenum, GLfloat*)' redeclared as
different kind of symbol
[  116s]  GLAPI void APIENTRY glGetFragmentMaterialfvSGIX (GLenum face, GLenum
pname, GLfloat *params);
[  116s]
                     ^
[  116s] In file included from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/gl_headers.hpp:27:0,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/abstract_renderer.hpp:21,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/irr_driver.hpp:36,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/addons/zip.cpp:22:
[  116s]
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/lib/glew/include/GL/glew.h:18265:52:
note: previous declaration 'void (* __glewGetFragmentMaterialfvSGIX)(GLenum,
GLenum, const GLfloat*)'
[  116s]  GLEW_FUN_EXPORT PFNGLGETFRAGMENTMATERIALFVSGIXPROC
__glewGetFragmentMaterialfvSGIX;
[  116s]
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

...

[  116s] In file included from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/gl_headers.hpp:58:0,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/abstract_renderer.hpp:21,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/irr_driver.hpp:36,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/guiengine/widgets/model_view_widget.hpp:25,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/guiengine/widgets.hpp:29,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/states_screens/dialogs/addons_loading.hpp:24,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/states_screens/addons_screen.hpp:24,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/addons/news_manager.cpp:24:
[  116s] /usr/include/GL/glext.h:12066:105: error: conflicting declaration
'typedef void (* PFNGLFRAGMENTLIGHTFVSGIXPROC)(GLenum, GLenum, const GLfloat*)'
[  116s]  typedef void (APIENTRYP PFNGLFRAGMENTLIGHTFVSGIXPROC) (GLenum light,
GLenum pname, const GLfloat *params);
[  116s]
                                  ^
[  116s] In file included from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/gl_headers.hpp:27:0,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/abstract_renderer.hpp:21,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/graphics/irr_driver.hpp:36,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/guiengine/widgets/model_view_widget.hpp:25,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/guiengine/widgets.hpp:29,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/states_screens/dialogs/addons_loading.hpp:24,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/states_screens/addons_screen.hpp:24,
[  116s]                  from
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/src/addons/news_manager.cpp:24:
[  116s]
/home/abuild/rpmbuild/BUILD/supertuxkart-0.9.3/lib/glew/include/GL/glew.h:15125:28:
note: previous declaration as 'typedef void (*
PFNGLFRAGMENTLIGHTFVSGIXPROC)(GLenum, GLenum, GLfloat*)'
[  116s]  typedef void (GLAPIENTRY * PFNGLFRAGMENTLIGHTFVSGIXPROC) (GLenum
light, GLenum pname, GLfloat* params);
[  116s]                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~

Full log can be found here:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/supertuxkart/standard/x86_64

summary: supertuxkart build failed on Leap 15.1


body:
--1546901925.5EEDEa0.10113
Date: Mon, 7 Jan 2019 22:58:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1120988

            Bug ID: 1120988
           Summary: oyranos build failed on Leap 15.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: gyribeiro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

oyranos build failed on Leap 15.1, log sample of build errors reported:

[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:109:5:
error: 'glLinkProgramARB' was not declared in this scope
[   97s]      glLinkProgramARB (cmm_prog);
[   97s]      ^~~~~~~~~~~~~~~~
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:109:5:
note: suggested alternative: 'glHistogram'
[   97s]      glLinkProgramARB (cmm_prog);
[   97s]      ^~~~~~~~~~~~~~~~
[   97s]      glHistogram
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:112:5:
error: 'glUseProgramObjectARB' was not declared in this scope

[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:71:5:
error: 'glGetObjectParameterivARB' was not declared in this scope
[   97s]      glGetObjectParameterivARB (obj, GL_OBJECT_INFO_LOG_LENGTH_ARB,
&len);
[   97s]      ^~~~~~~~~~~~~~~~~~~~~~~~~
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:71:5:
note: suggested alternative: 'glGetTexParameteriv'
[   97s]      glGetObjectParameterivARB (obj, GL_OBJECT_INFO_LOG_LENGTH_ARB,
&len);
[   97s]      ^~~~~~~~~~~~~~~~~~~~~~~~~
[   97s]      glGetTexParameteriv
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:75:2:
error: 'glGetInfoLogARB' was not declared in this scope
[   97s]   glGetInfoLogARB (obj, len, &nwritten, log);
[   97s]   ^~~~~~~~~~~~~~~
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:75:2:
note: suggested alternative: 'glGetIntegerv'
[   97s]   glGetInfoLogARB (obj, len, &nwritten, log);
[   97s]   ^~~~~~~~~~~~~~~
[   97s]   glGetIntegerv

...

[   97s]      glUseProgramObjectARB (cmm_prog);
[   97s]      ^~~~~~~~~~~~~~~~~~~~~
[   97s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/build'
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:114:11:
error: 'glGetUniformLocation' was not declared in this scope
[   97s]      loc = glGetUniformLocation ((GLintptr)cmm_prog, "scale");
[   97s]            ^~~~~~~~~~~~~~~~~~~~
[   97s] [ 97%] Built target oyranos-xforms-modules
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:115:5:
error: 'glUniform1fARB' was not declared in this scope
[   97s]      glUniform1fARB (loc, clut_scale);
[   97s]      ^~~~~~~~~~~~~~
[   97s]
/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/src/examples/image_display/Oy_Fl_Shader_Box.h:121:5:
error: 'glUniform1iARB' was not declared in this scope
[   97s]      glUniform1iARB (loc, 0);
[   97s]      ^~~~~~~~~~~~~~

...

[   98s] error: Style sheet
'/home/abuild/rpmbuild/BUILD/oyranos-0.9.6/doc/doxygen.css' specified by
HTML_STYLESHEET does not exist!

Full build log can be found here:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/oyranos/standard/x86_64

summary: oyranos build failed on Leap 15.1


--1546936672.a6da22de5.16361
Date: Tue, 8 Jan 2019 08:37:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121032

            Bug ID: 1121032
           Summary: VUL-1: CVE-2015-9275: arc: directory traversal
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/222273/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: meissner-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: crrodriguez-at-opensuse.org, darin-at-darins.net,
                    kukuk-at-suse.com, mpluskal-at-suse.com, mseben-at-gmail.com,
                    pth-at-suse.com, werner-at-suse.com
          Found By: Security Response Team
           Blocker: ---

ARC 5.21q allows directory traversal via a full pathname in an archive file.

Debian patches:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774527#10

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1179142
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9275
https://bugs.debian.org/774527
http://www.cvedetails.com/cve/CVE-2015-9275/


body:
--1546941917.bFcb00.30165
Date: Tue, 8 Jan 2019 10:05:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121051

            Bug ID: 1121051
           Summary: FTBFS: gpgme fails since early 2019
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

since recently, gpgme started to fail building - apparently for no wrong-doing
on other packages.

From the build log:

[  194s] FAIL!  : TofuInfoTest::testTofuConflict() 'sig.validity() ==
Signature::Marginal' returned FALSE. ()
[  194s]    Loc: [t-tofuinfo.cpp(458)]
[  194s] PASS   : TofuInfoTest::cleanupTestCase()
[  194s] Totals: 7 passed, 1 failed, 0 skipped, 0 blacklisted, 1200ms
[  194s] ********* Finished testing of TofuInfoTest *********
[  194s] FAIL: t-tofuinfo

I somewhat interpret that as a signature no longer being valid, possibly there
was an expiry date of a key or something alike.

Since gpgme (the library) is an essential piece in the stack, please urgently
look into the matter to get this building again

complete build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory/gpgme/standard/x86_64

summary: FTBFS: gpgme fails since early 2019


--1546943069.7DA78C7C4.5847
Date: Tue, 8 Jan 2019 10:24:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121052

            Bug ID: 1121052
           Summary: ghc should not use fixed subpackage versions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: osukup-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: adrian-at-suse.com, ptrommler-at-icloud.com
          Found By: Development
           Blocker: ---

Packages that use fixed versions in subpackages confuse OBS
and related tools (and squid caches of repos)
https://github.com/openSUSE/open-build-service/issues/6690


--1546947812.bE722d0.17119
Date: Tue, 8 Jan 2019 11:43:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121066

            Bug ID: 1121066
           Summary: multipath-tools: compilation for SLE12-SP3 and older fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Compilation fails because kernel doesn't provide "linux/nvme_ioctl.h".


--1546961737.76874b40.23579
Date: Tue, 8 Jan 2019 15:35:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121091

            Bug ID: 1121091
           Summary: salt-call prints numerous error messages: AttributeError: module 'azure.storage' has no attribute '__version__'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Salt
          Assignee: salt-maintainers-at-suse.de
          Reporter: rombert-at-apache.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The salt version in Tumbleweed prints out numerous error message when applying
the high state (messages taken from upstream, I have patched my local machines
and no longer get the error ).

       [ERROR   ] Failed to import fileserver azurefs, this is due most likely
to a syntax error:
       Traceback (most recent call last):
         File "/usr/lib/python2.7/dist-packages/salt/loader.py", line 1514, in
_load_module
           mod = imp.load_module(mod_namespace, fn_, fpath, desc)
         File "/usr/lib/python2.7/dist-packages/salt/fileserver/azurefs.py",
line 68, in <module>
           if LooseVersion(azure.storage.__version__) < LooseVersion('0.20.0'):
       AttributeError: 'module' object has no attribute '__version__'
       [ERROR   ] Failed to import fileserver azurefs, this is due most likely
to a syntax error:
       Traceback (most recent call last):
         File "/usr/lib/python2.7/dist-packages/salt/loader.py", line 1514, in
_load_module
           mod = imp.load_module(mod_namespace, fn_, fpath, desc)
         File "/usr/lib/python2.7/dist-packages/salt/fileserver/azurefs.py",
line 68, in <module>
           if LooseVersion(azure.storage.__version__) < LooseVersion('0.20.0'):
       AttributeError: 'module' object has no attribute '__version__'

This is tracked upstream at https://github.com/saltstack/salt/issues/50535 and
I submitted a PR which solves the problem at
https://github.com/saltstack/salt/pull/50567 (already merged).

It would be great if the patch would be applied to the salt version packaged in
TW. I waited for this to 'trickle down' via a released version, but since it
does not happen and it's very annoying I think it would be worthfile to add it
as a patch as it's quite simple.

diff --git a/salt/fileserver/azurefs.py b/salt/fileserver/azurefs.py
index 547a681016f8..032739d1602e 100644
-


--1546989814.F6dB71E0.26277
Date: Tue, 8 Jan 2019 23:23:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121134

            Bug ID: 1121134
           Summary: multipathd crashes in "multipathd show path INVAL"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

multipathd crashes if the command "multipathd show path " is run with an
invalid path name. This can be fixed by a simple NULL pointer check.


body:
--1547026883.B53ECA4.28508
Date: Wed, 9 Jan 2019 09:41:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121214

            Bug ID: 1121214
           Summary: GCC 9: libqt4 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[  368s] ../3rdparty/javascriptcore/JavaScriptCore/jit/JITStubs.cpp:519:1:
error: expected unqualified-id before string constant
[  368s]   519 | ".globl " SYMBOL_STRING(ctiVMThrowTrampoline) "\n"
[  368s]       | ^~~~~~~~~
[  368s] ../3rdparty/javascriptcore/JavaScriptCore/jit/JITStubs.cpp:518:15:
error: expected ')' before string constant
[  368s]   518 | asm volatile (
[  368s]       |              ~^
[  368s]       |               )
[  368s]   519 | ".globl " SYMBOL_STRING(ctiVMThrowTrampoline) "\n"

started with GCC:

SVN revision: 267280
Author: segher
c++, asm: Do not handle any asm-qualifiers in top-level asm

Previously, "volatile" was allowed.  Changing this simplifies the code,
makes things more regular, and makes the C and C++ frontends handle
this the same way.

cp/
    * parser.c (cp_parser_asm_definition): Do not allow any asm qualifiers
    on top-level asm.

testsuite/
    * g++.dg/asm-qual-3.C: New testcase.
    * gcc.dg/asm-qual-3.c: New testcase.

git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@267280
138bc75d-0d04-0410-961f-82ee72b054a4

So one can't use volatile in the top-level ASM statements.

summary: GCC 9: libqt4 build fails


body:
--1547030732.afb4c2E15.20210
Date: Wed, 9 Jan 2019 10:45:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121229

            Bug ID: 1121229
           Summary: GCC 9: intel-gpu-tools build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Build error:

/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..
-I../include/drm-uapi -I..  -Wall -Wpointer-arith -Wmissing-declarations
-Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs
-Wbad-function-cast -Wold-style-definition -Wdeclaration-after-statement
-Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute
-Wredundant-decls -Wlogical-op -Werror=implicit -Werror=nonnull
-Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point
-Werror=return-type -Werror=trigraphs -Werror=array-bounds
-Werror=write-strings -Werror=address -Werror=int-to-pointer-cast
-Werror=pointer-to-int-cast -fno-strict-aliasing -I/usr/include/libdrm
-I/usr/include/libdrm    -I/usr/include/kmod  -g3 -Og -Wno-maybe-uninitialized
  -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include
-DIGT_SRCDIR=\""/home/abuild/rpmbuild/BUILD/igt-gpu-tools-1.23/tests"\"
-DIGT_DATADIR=\""/usr/share/igt-gpu-tools"\" -D_GNU_SOURCE
-DIGT_LOG_DOMAIN=\""igt-fb"\" -pthread -I/usr/include/cairo
-I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/pixman-1
-I/usr/include/freetype2 -I/usr/include/libdrm -I/usr/include/libpng16 -O2
-Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -c -o igt_fb.lo
igt_fb.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include/drm-uapi -I..
-Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes
-Wmissing-prototypes -Wnested-externs -Wbad-function-cast
-Wold-style-definition -Wdeclaration-after-statement -Wunused -Wuninitialized
-Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls
-Wlogical-op -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main
-Werror=missing-braces -Werror=sequence-point -Werror=return-type
-Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address
-Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing
-I/usr/include/libdrm -I/usr/include/libdrm -I/usr/include/kmod -g3 -Og
-Wno-maybe-uninitialized -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include
-DIGT_SRCDIR=\"/home/abuild/rpmbuild/BUILD/igt-gpu-tools-1.23/tests\"
-DIGT_DATADIR=\"/usr/share/igt-gpu-tools\" -D_GNU_SOURCE
-DIGT_LOG_DOMAIN=\"igt-fb\" -pthread -I/usr/include/cairo
-I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/pixman-1
-I/usr/include/freetype2 -I/usr/include/libdrm -I/usr/include/libpng16 -O2
-Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -g -c igt_fb.c  -fPIC
-DPIC -o .libs/igt_fb.o
igt_fb.c: In function 'create_bo_for_fb':
igt_fb.c:413:16: warning: pointer of type 'void *' used in arithmetic
[-Wpointer-arith]
  413 |     memset(ptr + offsets[0], full_range ? 0x00 : 0x10,
      |                ^
igt_fb.c:415:16: warning: pointer of type 'void *' used in arithmetic
[-Wpointer-arith]
  415 |     memset(ptr + offsets[1], 0x80,
      |                ^
igt_fb.c: In function 'convert_rgb24_to_nv12':
igt_fb.c:1382:12: error: array subscript 2 is outside array bounds of 'struct
igt_vec4[2]' [-Werror=array-bounds]
 1382 |  rgb->d[0] = rgb24[2];
      |  ~~~~~~~~~~^~~~~~~~~~
igt_fb.c:1549:20: note: while referencing 'rgb'
 1549 |    struct igt_vec4 rgb[2];
      |                    ^~~
igt_fb.c:1383:12: error: array subscript 2 is outside array bounds of 'struct
igt_vec4[2]' [-Werror=array-bounds]
 1383 |  rgb->d[1] = rgb24[1];
      |  ~~~~~~~~~~^~~~~~~~~~
igt_fb.c:1549:20: note: while referencing 'rgb'
 1549 |    struct igt_vec4 rgb[2];
      |                    ^~~
igt_fb.c:1384:12: error: array subscript 2 is outside array bounds of 'struct
igt_vec4[2]' [-Werror=array-bounds]
 1384 |  rgb->d[2] = rgb24[0];
      |  ~~~~~~~~~~^~~~~~~~~~
igt_fb.c:1549:20: note: while referencing 'rgb'
 1549 |    struct igt_vec4 rgb[2];
      |                    ^~~
igt_fb.c:1385:12: error: array subscript 2 is outside array bounds of 'struct
igt_vec4[2]' [-Werror=array-bounds]
 1385 |  rgb->d[3] = 1.0f;
      |  ~~~~~~~~~~^~~~~~
igt_fb.c:1549:20: note: while referencing 'rgb'
 1549 |    struct igt_vec4 rgb[2];
      |                    ^~~

I'll report upstream bug.

summary: GCC 9: intel-gpu-tools build fails


--1547039321.0B8fC1.23080
Date: Wed, 9 Jan 2019 13:08:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121255

            Bug ID: 1121255
           Summary: Firefox 60.x ESR does not build for armv7 leap
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 793972
  --> http://bugzilla.opensuse.org/attachment.cgi?id=793972&action=edit
armv7 build patch

Leap 15.x uses Firefox 60.x ESR but armv7 build fails because it lacks
mozilla-bmo1463035.patch already added to Firefox from Tumbleweed:
https://build.opensuse.org/package/view_file/mozilla:Factory/MozillaFirefox/mozilla-bmo1463035.patch

I do not know which project host this ESR version used for Leap.


body:
--1547043251.8c084.30327
Date: Wed, 9 Jan 2019 14:14:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121268

            Bug ID: 1121268
           Summary: GCC 9: shim build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[   16s] gcc -ggdb -O0 -fno-stack-protector -fno-strict-aliasing -fpic
-fshort-wchar -Wall -Wsign-compare -Werror -fno-builtin -Werror=sign-compare
-ffreestanding -std=gnu89 -I/usr/lib64/gcc/x86_64-suse-linux/9/include
"-DDEFAULT_LOADER=L\"\\\\grubx64.efi\""
"-DDEFAULT_LOADER_CHAR=\"\\\\grubx64.efi\"" -nostdinc
-I/home/abuild/rpmbuild/BUILD/shim-15+git47/Cryptlib
-I/home/abuild/rpmbuild/BUILD/shim-15+git47/Cryptlib/Include -I/usr/include/efi
-I/usr/include/efi/x86_64 -I/usr/include/efi/protocol
-I/home/abuild/rpmbuild/BUILD/shim-15+git47/include -iquote
/home/abuild/rpmbuild/BUILD/shim-15+git47 -iquote
/home/abuild/rpmbuild/BUILD/shim-15+git47 -mno-mmx -mno-sse -mno-red-zone
-nostdinc -maccumulate-outgoing-args -m64 -DEFI_FUNCTION_WRAPPER
-DGNU_EFI_USE_MS_ABI -DNO_BUILTIN_VA_FUNCS -DMDE_CPU_X64 -DPAGE_SIZE=4096
"-DEFI_ARCH=L\"x64\"" "-DDEBUGDIR=L\"/usr/lib/debug/usr/lib64/efi/shim.debug\""
  -c -o MokManager.o MokManager.c
[   16s] MokManager.c: In function 'write_back_mok_list':
[   16s] MokManager.c:1056:19: error: taking address of packed member of
'struct <anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[   16s]  1056 |   if (CompareGuid(&(list[i].Type), &X509_GUID) == 0)
[   16s]       |                   ^~~~~~~~~~~~~~~
[   16s] MokManager.c:1078:19: error: taking address of packed member of
'struct <anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[   16s]  1078 |   if (CompareGuid(&(list[i].Type), &X509_GUID) == 0) {
[   16s]       |                   ^~~~~~~~~~~~~~~
[   16s] MokManager.c: In function 'delete_cert':
[   16s] MokManager.c:1119:19: error: taking address of packed member of
'struct <anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[   16s]  1119 |   if (CompareGuid(&(mok[i].Type), &X509_GUID) != 0)
[   16s]       |                   ^~~~~~~~~~~~~~
[   16s] MokManager.c: In function 'delete_hash_in_list':
[   16s] MokManager.c:1170:20: error: taking address of packed member of
'struct <anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[   16s]  1170 |   if ((CompareGuid(&(mok[i].Type), &Type) != 0) ||
[   16s]       |                    ^~~~~~~~~~~~~~
[   16s] MokManager.c: In function 'delete_keys':
[   16s] MokManager.c:1334:19: error: taking address of packed member of
'struct <anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[   16s]  1334 |   if (CompareGuid(&(del_key[i].Type), &X509_GUID) == 0) {
[   16s]       |                   ^~~~~~~~~~~~~~~~~~
[   17s] cc1: all warnings being treated as errors
[   17s] make: *** [<builtin>: MokManager.o] Error 1

summary: GCC 9: shim build fails


--1547049658.D3B71.5162
Date: Wed, 9 Jan 2019 16:00:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121286

            Bug ID: 1121286
           Summary: Errors calculating how much should Windows be resized
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: ancor-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

During installation, the so-called Storage Proposal (a.k.a. Partitioning Guided
Setup), calculates how much to reduce the existing Windows partitions in order
to make space for the new system being installed.

But the current implementation calculating that number is very simplistic.
Sometimes it underestimates the space that is needed and reduces the Windows
partition less than actually needed. As a result, the algorithm wrongly
concludes that resizing Windows is not enough to install the system and, as a
fallback, decides to completely delete partitions. Quite a catastrophic side
effect for the miscalculation.

Unfortunately, that error condition is relatively simple to trigger. Any disk
with unused spaces can confuse the current calculation.

On other hand, when resizing Windows partitions with a misaligned end. The
current algorithm keeps the wrong alignment. Instead of fixing the wrong
alignment, the current algorithm always reduces the Windows partition by an
extra MiB IN ALL CASES (also when the original partition was aligned) just in
case.

Not trying to reduce the alignment (introducing the extra MiB instead) is
specially bad when resizing a partition that was at the end of a GPT disk. In
that case, the installer "propagates" the mandatory gap of 16.5KiB that is
usually present at the end of the disk, so a second unnecessary gap is
introduced.

Both errors (underestimating the needed space and propagating the wrong
alignment) are demonstrated by the tests included in the following commits:

https://github.com/ancorgs/yast-storage-ng/commit/a3ad6d71b883f94e1c2315dac8e7518e5803af67

https://github.com/ancorgs/yast-storage-ng/commit/ed10454343ad5534601f2bb3b642679523f5f4b8


body:
--1547107661.bF60Bc4.30471
Date: Thu, 10 Jan 2019 08:07:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121387

            Bug ID: 1121387
           Summary: GCC 9:  casync build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There's failing test-case due to:

$ cat foreachstring.c
#define STRV_MAKE(...) ((char**) ((const char*[]) { __VA_ARGS__, 0}))

#define FOREACH_STRING(x, ...)                               \
        for (char **_l = ({                                  \
                char **_ll = STRV_MAKE(__VA_ARGS__);         \
                x = _ll ? _ll[0] : 0;                     \
                _ll;                                         \
        });                                                  \
        _l && *_l;                                           \
        x = ({                                               \
                _l ++;                                       \
                _l[0];                                       \
        }))

int main(int argc, char **argv)
{
  const char *n;
  FOREACH_STRING(n, "TMPDIR", "TEMP", "TMP") {
    if (__builtin_strcmp (argv[0], n) == 0)
      return 1;
  }

  return 0;
}

$ gcc foreachstring.c -O2 -Wall && valgrind ./a.out
foreachstring.c: In function ‘main’:
foreachstring.c:10:15: warning: ‘<Uec60>’ is used uninitialized in this
function [-Wuninitialized]
   10 |         _l && *_l;                                           \
      |               ^
==31342== Memcheck, a memory error detector
==31342== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==31342== Using Valgrind-3.14.0 and LibVEX; rerun with -h for copyright info
==31342== Command: ./a.out
==31342==
==31342== Conditional jump or move depends on uninitialised value(s)
==31342==    at 0x40104B: main (in /tmp/a.out)
==31342==
==31342== Conditional jump or move depends on uninitialised value(s)
==31342==    at 0x40106B: main (in /tmp/a.out)
==31342==
==31342==
==31342== HEAP SUMMARY:
==31342==     in use at exit: 0 bytes in 0 blocks
==31342==   total heap usage: 0 allocs, 0 frees, 0 bytes allocated
==31342==
==31342== All heap blocks were freed

summary: GCC 9:  casync build fails


body:
--1547109174.f2eAFf4.4335
Date: Thu, 10 Jan 2019 08:32:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121391

            Bug ID: 1121391
           Summary: GCC 9: xen build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/xen/standard/x86_64

[  281s] trace.c: In function '__trace_hypercall':
[  281s] trace.c:826:19: error: taking address of packed member of 'struct
<anonymous>' may result in an unaligned pointer value
[-Werror=address-of-packed-member]
[  281s]   826 |     uint32_t *a = d.args;
[  281s]       |                   ^

summary: GCC 9: xen build fails


body:
--1547111763.BAcAfB4.15955
Date: Thu, 10 Jan 2019 09:16:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121404

            Bug ID: 1121404
           Summary: GCC 9: bluez build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/bluez/standard/x86_64

[  123s] ./test-driver: line 112: 11127 Aborted                 "$@" >
$log_file 2>&1
[  123s] FAIL: unit/test-sdp

summary: GCC 9: bluez build fails


body:
Build Identifier:

package byobu apparently should require/depend-on package python3-newt, but
doesn't.

when package python3-newt is not installed, then, when running byobu and
pressing F9 (or running 'byobu-config' from the prompt in one of its windows),
instead of bringing up the byobu help/config dialog box, that byobu window is
rather rudely killed with no explanation.

Reproducible: Always

Steps to Reproduce:
1. install byobu
2. run byobu
3. hit f9 or type 'byobu-config' at the shell prompt in current byobu window
Actual Results:
no help/config dialog box comes up. even worse, the byobu window is killed, and
you're down to one less window in your byobu session. if that was the last
window in your byobu session, then byobu dies completely.

no error message or feedback is given to the user as to what happened.

Expected Results:
1) get a pop-up help/config dialog box inside current window.

2) secondarily, if there is a problem with dependencies (e.g., something is
missing which is normally packaged in python3-newt), it would help if byobu
itself gave the user some kind of helpful message about what is missing,
instead of just killing user's byobu window/shell.

This is in Tumbleweed version 20181224

Please let me know if there's any information I can add to be helpful.

summary: broken dependency: byobu / python3-newt


--1547176665.1bCD122.31521
Date: Fri, 11 Jan 2019 03:17:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121525

            Bug ID: 1121525
           Summary: xorg-x11-driver-input should not recommend xf86-input-{mouse,keyboard,joystick,vmmouse}
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

The vmmouse protocol is handled by the kernel driver, which outputs evdev
events.
Dito for mouse and keyboard, these directly access the devices and bypass the
kernel drivers.
Joystick is useless for most generic purposes (see manpage Description).


body:
--1547197587.aAeD4.11978
Date: Fri, 11 Jan 2019 09:06:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121561

            Bug ID: 1121561
           Summary: GCC 9: libqt5-qtbase build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/build/openSUSE:Factory:Staging:Gcc7/standard/x86_64/libqt5-qtbase/_log

fails with:

[   81s]
/home/abuild/rpmbuild/BUILD/qtbase-everywhere-src-5.12.0/src/corelib/global/qrandom.cpp:
In static member function 'static void
QRandomGenerator::SystemAndGlobalGenerators::securelySeed(QRandomGenerator*)':
[   81s]
/home/abuild/rpmbuild/BUILD/qtbase-everywhere-src-5.12.0/src/corelib/global/qrandom.cpp:455:62:
error: no matching function for call to 'std::mersenne_twister_engine<unsigned
int, 32, 624, 397, 31, 2567483615, 11, 4294967295, 7, 2636928640, 15,
4022730752, 18,
1812433253>::mersenne_twister_engine(QRandomGenerator::SystemGenerator&)'
[   81s]   455 |         new (&rng->storage.engine())
RandomEngine(self()->sys);
[   81s]       |                                                              ^
[   81s] In file included from /usr/include/c++/9/random:49,
[   81s]                  from
/home/abuild/rpmbuild/BUILD/qtbase-everywhere-src-5.12.0/src/corelib/global/qrandom.h:45,
[   81s]                  from
/home/abuild/rpmbuild/BUILD/qtbase-everywhere-src-5.12.0/src/corelib/global/qrandom.cpp:43:
[   81s] /usr/include/c++/9/bits/random.h:530:9: note: candidate:
'template<class _Sseq, class> std::mersenne_twister_engine<_UIntType, __w, __n,
__m, __r, __a, __u, __d, __s, __b, __t, __c, __l,
__f>::mersenne_twister_engine(_Sseq&)'
[   81s]   530 |         mersenne_twister_engine(_Sseq& __q)
[   81s]       |         ^~~~~~~~~~~~~~~~~~~~~~~
[   81s] /usr/include/c++/9/bits/random.h:530:9: note:   template argument
deduction/substitution failed:
[   81s] /usr/include/c++/9/bits/random.h:519:7: note: candidate:
'std::mersenne_twister_engine<_UIntType, __w, __n, __m, __r, __a, __u, __d,
__s, __b, __t, __c, __l,
__f>::mersenne_twister_engine(std::mersenne_twister_engine<_UIntType, __w, __n,
__m, __r, __a, __u, __d, __s, __b, __t, __c, __l, __f>::result_type) [with
_UIntType = unsigned int; long unsigned int __w = 32; long unsigned int __n =
624; long unsigned int __m = 397; long unsigned int __r = 31; _UIntType __a =
2567483615; long unsigned int __u = 11; _UIntType __d = 4294967295; long
unsigned int __s = 7; _UIntType __b = 2636928640; long unsigned int __t = 15;
_UIntType __c = 4022730752; long unsigned int __l = 18; _UIntType __f =
1812433253; std::mersenne_twister_engine<_UIntType, __w, __n, __m, __r, __a,
__u, __d, __s, __b, __t, __c, __l, __f>::result_type = unsigned int]'
[   81s]   519 |       mersenne_twister_engine(result_type __sd)
[   81s]       |       ^~~~~~~~~~~~~~~~~~~~~~~
[   81s] /usr/include/c++/9/bits/random.h:519:43: note:   no known conversion
for argument 1 from 'QRandomGenerator::SystemGenerator' to
'std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18, 1812433253>::result_type' {aka
'unsigned int'}
[   81s]   519 |       mersenne_twister_engine(result_type __sd)
[   81s]       |                               ~~~~~~~~~~~~^~~~
[   81s] /usr/include/c++/9/bits/random.h:516:7: note: candidate:
'std::mersenne_twister_engine<_UIntType, __w, __n, __m, __r, __a, __u, __d,
__s, __b, __t, __c, __l, __f>::mersenne_twister_engine() [with _UIntType =
unsigned int; long unsigned int __w = 32; long unsigned int __n = 624; long
unsigned int __m = 397; long unsigned int __r = 31; _UIntType __a = 2567483615;
long unsigned int __u = 11; _UIntType __d = 4294967295; long unsigned int __s =
7; _UIntType __b = 2636928640; long unsigned int __t = 15; _UIntType __c =
4022730752; long unsigned int __l = 18; _UIntType __f = 1812433253]'
[   81s]   516 |       mersenne_twister_engine() :
mersenne_twister_engine(default_seed) { }
[   81s]       |       ^~~~~~~~~~~~~~~~~~~~~~~
[   81s] /usr/include/c++/9/bits/random.h:516:7: note:   candidate expects 0
arguments, 1 provided
[   81s] /usr/include/c++/9/bits/random.h:461:11: note: candidate: 'constexpr
std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18,
1812433253>::mersenne_twister_engine(const
std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18, 1812433253>&)'
[   81s]   461 |     class mersenne_twister_engine
[   81s]       |           ^~~~~~~~~~~~~~~~~~~~~~~
[   81s] /usr/include/c++/9/bits/random.h:461:11: note:   no known conversion
for argument 1 from 'QRandomGenerator::SystemGenerator' to 'const
std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18, 1812433253>&'
[   81s] /usr/include/c++/9/bits/random.h:461:11: note: candidate: 'constexpr
std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18,
1812433253>::mersenne_twister_engine(std::mersenne_twister_engine<unsigned int,
32, 624, 397, 31, 2567483615, 11, 4294967295, 7, 2636928640, 15, 4022730752,
18, 1812433253>&&)'
[   81s] /usr/include/c++/9/bits/random.h:461:11: note:   no known conversion
for argument 1 from 'QRandomGenerator::SystemGenerator' to
'std::mersenne_twister_engine<unsigned int, 32, 624, 397, 31, 2567483615, 11,
4294967295, 7, 2636928640, 15, 4022730752, 18, 1812433253>&&'
[   81s] gmake: *** [Makefile:316: qrandom.o] Error 1
[   81s] gmake: *** Waiting for unfinished jobs....
[   83s] error: Bad exit status from /var/tmp/rpm-tmp.T3nJiN (%build)

summary: GCC 9: libqt5-qtbase build fails


--1547200524.fBecc0700.10846
Date: Fri, 11 Jan 2019 09:55:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121570

            Bug ID: 1121570
           Summary: VUL-1: CVE-2018-20683: gitolite: commands/rsync mishandles the rsync command line
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/222586/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tchatzimichos-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: chris-at-computersalat.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20683

commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync,
mishandles the rsync command line, which allows attackers to have a "bad"
impact
by triggering use of an option other than -v, -n, -q, or -P.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20683
https://bugs.debian.org/918849
https://groups.google.com/forum/#!topic/gitolite-announce/6xbjjmpLePQ
https://github.com/sitaramc/gitolite/commit/5df2b817255ee919991da6c310239e08c8fcc1ae
https://github.com/sitaramc/gitolite/blob/master/CHANGELOG


--1547212845.ec4a2a85.5425
Date: Fri, 11 Jan 2019 13:20:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121609

            Bug ID: 1121609
           Summary: [BuildCycle] python-oslo.config <-> python-oslo.log
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: OpenStack
          Assignee: cloud-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Factory lists a build cycle between the two packages

  python-oslo.config and python-oslo.log

When we bump python to version 3.7, this will be fatal, as both packages would
turn out to be 'unresolvable'
  (Nothing provides python(abi) = 3.6 needed by <the other one>)

Additionally, this is also an issue when boot-strapping new projects (think
SLE16)


--1547213052.b5ce5.7016
Date: Fri, 11 Jan 2019 13:24:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121610

            Bug ID: 1121610
           Summary: [BuildCycle] python-cliff, python-stestr, python-stevedore
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: OpenStack
          Assignee: cloud-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE:Factory lists a build cycle between the three packages

  python-cliff, python-stestr and python-stevedore

When we bump python to version 3.7, this will be fatal, as both packages would
turn out to be 'unresolvable'
  (Nothing provides python(abi) = 3.6 needed by <the other one>)

Additionally, this is also an issue when boot-strapping new projects (think
SLE16)

(picking OpenStack as component, as at least one in the chain is maintainer by
the OpenStack team, namely python-stevedore)


--1547213101.A0f44aeE0.5451
Date: Fri, 11 Jan 2019 13:25:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121611

            Bug ID: 1121611
           Summary: Repositories added from .repo file are not set to auto-refresh but `zypper ar --help` and the man page tells otherwise
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: okurz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

Repositories added from .repo files are not set to auto-refresh but the help
and man page tells otherwise.

Simple test to try out yourself:

```
docker run -it --rm opensuse/tumbleweed sh -c 'zypper ar
https://download.opensuse.org/repositories/devel:/tools:/scm/openSUSE_Tumbleweed/devel:tools:scm.repo
; zypper lr' | grep -B 2 'devel_tools_scm'
```

showing

```
# | Alias           | Name                                                    |
Enabled | GPG Check | Refresh
--+-----------------+---------------------------------------------------------+---------+-----------+--------
1 | devel_tools_scm | Software configuration management (openSUSE_Tumbleweed) |
Yes     | ( p) Yes  | No
```

whereas `zypper ar --help` says "-f, --refresh               Enable
auto-refresh of the repository. Default: true" and the man page (on openSUSE
Leap 15.0) says:

```
Newly added repositories have auto-refresh disabled by default (except for
repositories imported from a .repo, having the auto-refresh enabled)
```

## Problem

Documentation and implementation inconsistency


--1547243118.0d74E4.4815
Date: Fri, 11 Jan 2019 21:45:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121694

            Bug ID: 1121694
           Summary: youtube-dl requires python-xml, but there is no proper dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: gp-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

1. Install youtube-dl:

   % zypper in youtube-dl
   Loading repository data...
   Reading installed packages...
   Resolving package dependencies...

   The following NEW package is going to be installed:
     youtube-dl

   1 new package to install.
   Retrieving package youtube-dl-2019.01.10-1.1.noarch
   Retrieving: youtube-dl-2019.01.10-1.1.noarch.rpm
   Checking for file conflicts:
   (1/1) Installing: youtube-dl-2019.01.10-1.1.noarch ...

2. Try to use it, and see it fail:

   % youtube-dl -h
   Traceback (most recent call last):
     File "/usr/lib64/python2.7/runpy.py", line 174, in _run_module_as_main
       "__main__", fname, loader, pkg_name)
     File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code
       exec code in run_globals
     File "/usr/bin/youtube-dl/__main__.py", line 16, in <module>
     File "/usr/bin/youtube-dl/youtube_dl/__init__.py", line 15, in <module>
     File "/usr/bin/youtube-dl/youtube_dl/options.py", line 8, in <module>
     File "/usr/bin/youtube-dl/youtube_dl/downloader/__init__.py", line 3, in
<module>
     File "/usr/bin/youtube-dl/youtube_dl/downloader/common.py", line 9, in
<module>
     File "/usr/bin/youtube-dl/youtube_dl/compat.py", line 22, in <module>
   ImportError: No module named xml.etree.ElementTree

3. Debug a little, and install python-xml as well:

   % zypper in python-xml
   Loading repository data...
   Reading installed packages...
   Resolving package dependencies...

   The following NEW package is going to be installed:
     python-xml

   1 new package to install.
   Retrieving package python-xml-2.7.15-4.1.x86_64
   Retrieving: python-xml-2.7.15-4.1.x86_64.rpm
   Checking for file conflicts:
   (1/1) Installing: python-xml-2.7.15-4.1.x86_64 ...

4. Try again, and see it work:

   % youtube-dl  --version
   2019.01.10

Now try to remove python-xml which is essential, and notice there is no
warning/error
regarding youtuble-dl.


--1547303661.85f843.8078
Date: Sat, 12 Jan 2019 14:34:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121715

            Bug ID: 1121715
           Summary: openSUSE-2019-37 - Recommended update for kernel-firmware
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: 64bit
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: willyreinhardt-at-kurdy.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 794263
  --> http://bugzilla.opensuse.org/attachment.cgi?id=794263&action=edit
Picture of crashed screen with error

Hi,
After applying the following update openSUSE-2019-37 - Recommended update for
kernel-firmware .
I can't boot anymore due to kernel panic with ath10k_pci.

See picture attached.

Thanks


body:
--1547464103.33CEe0.2678
Date: Mon, 14 Jan 2019 11:08:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121829

            Bug ID: 1121829
           Summary: libpng16 fails in make test on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 794349
  --> http://bugzilla.opensuse.org/attachment.cgi?id=794349&action=edit
aarch64 build log

Failing tests are:
[  125s] FAIL: tests/pngvalid-gamma-expand16-transform
[  154s] FAIL: tests/pngvalid-transform

summary: libpng16 fails in make test on aarch64


body:
--1547468421.e80a1d0.24653
Date: Mon, 14 Jan 2019 12:20:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121841

            Bug ID: 1121841
           Summary: polkit-default-privs: use _service file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: matthias.gerstner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

polkit-default-privs still uses an old mechanism to generate the tarball
manually from git. The tarball has a fixed name even though the content
changes. That way is not considered state of the art anymore. Please have a
look at aaa_base and it's _service file for a better way to do it.

summary: polkit-default-privs: use _service file


body:
--1547471207.5CD1cc30.31054
Date: Mon, 14 Jan 2019 13:06:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121851

            Bug ID: 1121851
           Summary: dmidecode: license in wrong directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jdelvare-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Everybody uses the default directory /usr/share/licenses for the package
licenses with %license.
dmidecode changes the default directory, so that per default users and tools
don't find it, as everybody is looking in /usr/share/licenses.

summary: dmidecode: license in wrong directory


--1547471413.EEAdA0.31943
Date: Mon, 14 Jan 2019 13:10:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121852

            Bug ID: 1121852
           Summary: python3-base: LICENSE in wrong directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mcepl-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The default directory for licenses are /usr/share/licenses. That's where users
and tools look today for licenses. python3-base changes the default path of
%license to /usr/share/doc for no good reason.


--1547505334.A3dbC5c70.25147
Date: Mon, 14 Jan 2019 22:35:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121914

            Bug ID: 1121914
           Summary: PCP monitoring agent leaves behind zombie processes
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: ddiss-at-suse.com
          Reporter: ddiss-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# pcp -V
pcp version 4.1.1

# systemctl status pmcd
● pmcd.service - Performance Metrics Collector Daemon
   Loaded: loaded (/usr/lib/systemd/system/pmcd.service; disabled; vendor
preset: disabled)
   Active: active (running) since Mon 2019-01-14 23:23:40 CET; 6min ago
     Docs: man:pmcd(8)
  Process: 5328 ExecStart=/usr/share/pcp/lib/pmcd start (code=exited,
status=0/SUCCESS)
 Main PID: 5420 (pmcd)
    Tasks: 7 (limit: 20889)
   CGroup: /system.slice/pmcd.service
           ├─5420 /usr/lib64/pcp/bin/pmcd
           ├─5423 /var/lib/pcp/pmdas/root/pmdaroot
           ├─5425 /var/lib/pcp/pmdas/xfs/pmdaxfs -d 11
           └─5427 /var/lib/pcp/pmdas/kvm/pmdakvm -d 95

Jan 14 23:23:40 kerbus systemd[1]: Starting Performance Metrics Collector
Daemon...
Jan 14 23:23:40 kerbus pmcd[5328]: Starting pmcd ... ..done
Jan 14 23:23:40 kerbus systemd[1]: Started Performance Metrics Collector
Daemon.

# ps -elf|grep pmda
4 S root       5423   5420  0  80   0 - 16399 core_s 23:23 ?        00:00:00
/var/lib/pcp/pmdas/root/pmdaroot
1 Z root       5424   5423  0  80   0 -     0 -      23:23 ?        00:00:00
[pmdaroot] <defunct>
4 S root       5425   5423  0  80   0 - 15832 -      23:23 ?        00:00:00
/var/lib/pcp/pmdas/xfs/pmdaxfs -d 11
1 Z root       5426   5423  0  80   0 -     0 -      23:23 ?        00:00:00
[pmdaroot] <defunct>
4 S root       5427   5423  0  80   0 - 15827 -      23:23 ?        00:00:00
/var/lib/pcp/pmdas/kvm/pmdakvm -d 95
0 R root       5767   5277  0  80   0 -  1858 -      23:29 pts/4    00:00:00
grep --color=auto pmda

It seems that the zombies correspond to the "proc" and "linux" pmdas, which
fail to be spawned by the parent pmdaroot process - /var/log/pcp/pmcd/root.log:

[Mon Jan 14 23:23:40] pmdaroot(5423) Info: Starting proc agent:
/var/lib/pcp/pmdas/proc/pmdaproc -d 3
pmdaroot: error starting /var/lib/pcp/pmdas/proc/pmdaproc: No such file or
directory
[Mon Jan 14 23:23:40] pmdaroot(5423) Info: Starting xfs agent:
/var/lib/pcp/pmdas/xfs/pmdaxfs -d 11
[Mon Jan 14 23:23:40] pmdaroot(5423) Info: Starting linux agent:
/var/lib/pcp/pmdas/linux/pmdalinux
pmdaroot: error starting /var/lib/pcp/pmdas/linux/pmdalinux: No such file or
directory
[Mon Jan 14 23:23:40] pmdaroot(5423) Info: Starting kvm agent:
/var/lib/pcp/pmdas/kvm/pmdakvm -d 95


--1547510679.0dB732c0.12374
Date: Tue, 15 Jan 2019 00:04:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1121920

            Bug ID: 1121920
           Summary: PCP regression: monitoring agent binaries dropped from package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: ddiss-at-suse.com
          Reporter: ddiss-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kkaempf-at-suse.com
          Found By: ---
           Blocker: ---

The [open]SUSE PCP source includes a patch atop upstream which drops the
execute permission from installed .so libraries.
Between Base:System/pcp revisions 61 and 63 we went from installing some
monitoring agent binary and library files, with 0755 and 0644 mode flags
respectively, to only installing library files:

E.g.  Base:System/pcp> osc diff -r 61:63 |grep -A7 -e "pmdas/linux/" -e
Install-libraries-without-exec-permission
...
--
Index: 0001-Install-libraries-without-exec-permission.patch
===================================================================
-


--1547536956.1d26510.26082
Date: Tue, 15 Jan 2019 07:22:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121943

            Bug ID: 1121943
           Summary: VUL-1: CVE-2019-6283: libsass: heap-based buffer over-read exists in Sass:Prelexer:parenthese_scope in prelexer.hpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/222771/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: cbosdonnat-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in
Sass::Prelexer::parenthese_scope in prelexer.hpp.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6283
http://www.cvedetails.com/cve/CVE-2019-6283/
https://github.com/sass/libsass/issues/2814


--1547537040.fFE7F0.26655
Date: Tue, 15 Jan 2019 07:24:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121944

            Bug ID: 1121944
           Summary: VUL-1: CVE-2019-6284: libsass: heap-based buffer over-read exists in Sass:Prelexer:alternatives in prelexer.hpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/222772/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: cbosdonnat-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in
Sass::Prelexer::alternatives in prelexer.hpp.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6284
http://www.cvedetails.com/cve/CVE-2019-6284/
https://github.com/sass/libsass/issues/2816


--1547537141.dbfd60.24801
Date: Tue, 15 Jan 2019 07:25:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121945

            Bug ID: 1121945
           Summary: VUL-1: CVE-2019-6286: libsass: heap-based buffer over-read exists in Sass:Prelexer:skip_over_scopes in prelexer.hpp when called from Sass:Parser:parse_import()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/222774/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: cbosdonnat-at-suse.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in
Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from
Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6286
http://www.cvedetails.com/cve/CVE-2019-6286/
https://github.com/sass/libsass/issues/2815


body:
--1547547116.08DCC50.26142
Date: Tue, 15 Jan 2019 10:11:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1121972

            Bug ID: 1121972
           Summary: FreeCAD Crash when Creating Fillet
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: paul-at-pointdee.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 794442
  --> http://bugzilla.opensuse.org/attachment.cgi?id=794442&action=edit
Sample file to recreate crash

FreeCAD crashes when trying to create a fillet which crosses an edge seam.
Attached is a FreeCAD document which can be used to recreate the bug. If you
try to create a fillet where the cylinder and arc intersect on the right hand
side and set the radius to greater than 2.18 FreeCAD will crash. Please see
https://forum.freecadweb.org/viewtopic.php?f=3&t=33051, post 1 describes the
problem in more detail and post 10 gives a possible solution
(https://salsa.debian.org/science-team/opencascade/blob/master/debian/patches/enable-exception-handling.patch).

FreeCAD 0.18, Libs: 0.18RUnknown
� Juergen Riegel, Werner Mayer, Yorik van Havre 2001-2018
  #####                 ####  ###   ####
  #                    #      # #   #   #
  #     ##  #### ####  #     #   #  #   #
  ####  # # #  # #  #  #     #####  #   #
  #     #   #### ####  #    #     # #   #
  #     #   #    #     #    #     # #   #  ##  ##  ##
  #     #   #### ####   ### #     # ####   ##  ##  ##

Fasteners workbench Loaded
Sheet Metal workbench loaded
Connecting to deprecated signal
QDBusConnectionInterface::serviceOwnerChanged(QString,QString,QString)
kbuildsycoca4 running...
Program received signal SIGSEGV, Segmentation fault.
#0  /lib64/libc.so.6(+0x34fe0) [0x7fb83ff5efe0]
#1  0x7fb81b694155 in Standard_Transient::DecrementRefCounter() const from
/usr/lib64/libTKernel.so.7+0x5
#2  0x7fb820dfa78f in TopoDS_Shape::operator=(TopoDS_Shape const&) from
/usr/lib64/FreeCAD/lib/Part.so+0x1f
#3  0x7fb81f1e8cf0 in ChFi3d_Builder::PerformIntersectionAtEnd(int) from
/usr/lib64/libTKFillet.so.7+0x6300
#4  0x7fb81f1ee985 in ChFi3d_Builder::PerformOneCorner(int, bool) from
/usr/lib64/libTKFillet.so.7+0x1195
#5  0x7fb81f18e924 in ChFi3d_Builder::PerformFilletOnVertex(int) from
/usr/lib64/libTKFillet.so.7+0x504
#6  0x7fb81f18eff1 in ChFi3d_Builder::Compute() from
/usr/lib64/libTKFillet.so.7+0x5e1
#7  0x7fb81f3419a0 in BRepFilletAPI_MakeFillet::Build() from
/usr/lib64/libTKFillet.so.7+0x20
#8  0x7fb7bcdbce18 in PartDesign::Fillet::execute() from
/usr/lib64/FreeCAD/lib/_PartDesign.so+0x3e8
#9  0x7fb84237ef1d in App::DocumentObject::recompute() from
/usr/lib64/FreeCAD/lib/libFreeCADApp.so+0x8d
#10  0x7fb820e15bbb in Part::Feature::recompute() from
/usr/lib64/FreeCAD/lib/Part.so+0xb
#11  0x7fb8423421ec in App::Document::_recomputeFeature(App::DocumentObject*)
from /usr/lib64/FreeCAD/lib/libFreeCADApp.so+0x9c
#12  0x7fb8423466d9 in App::Document::recomputeFeature(App::DocumentObject*)
from /usr/lib64/FreeCAD/lib/libFreeCADApp.so+0x89
#13  0x7fb840a0823a in QMetaObject::activate(QObject*, QMetaObject const*, int,
void**) from /usr/lib64/libQtCore.so.4+0x2da
#14  0x7fb842db61e3 in Gui::QuantitySpinBox::valueChanged(double) from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0x33
#15  0x7fb842db6318 in Gui::QuantitySpinBox::userInput(QString const&) from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0x128
#16  0x7fb840a0823a in QMetaObject::activate(QObject*, QMetaObject const*, int,
void**) from /usr/lib64/libQtCore.so.4+0x2da
#17  0x7fb841333a02 in QLineEdit::textChanged(QString const&) from
/usr/lib64/libQtGui.so.4+0x22
#18  /usr/lib64/libQtGui.so.4(+0x5dbdd9) [0x7fb841333dd9]
#19  0x7fb840a0823a in QMetaObject::activate(QObject*, QMetaObject const*, int,
void**) from /usr/lib64/libQtCore.so.4+0x2da
#20  0x7fb841585175 in QLineControl::textChanged(QString const&) from
/usr/lib64/libQtGui.so.4+0x25
#21  0x7fb84133941d in QLineControl::finishChange(int, bool, bool) from
/usr/lib64/libQtGui.so.4+0x1ed
#22  0x7fb84133b120 in QLineControl::processKeyEvent(QKeyEvent*) from
/usr/lib64/libQtGui.so.4+0x450
#23  0x7fb8413303fa in QLineEdit::keyPressEvent(QKeyEvent*) from
/usr/lib64/libQtGui.so.4+0x1a
#24  0x7fb840f87ec4 in QWidget::event(QEvent*) from
/usr/lib64/libQtGui.so.4+0x994
#25  0x7fb8413357e1 in QLineEdit::event(QEvent*) from
/usr/lib64/libQtGui.so.4+0x51
#26  0x7fb8412ee2f9 in QAbstractSpinBox::keyPressEvent(QKeyEvent*) from
/usr/lib64/libQtGui.so.4+0x2a9
#27  0x7fb842db993b in Gui::QuantitySpinBox::keyPressEvent(QKeyEvent*) from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0xbb
#28  0x7fb840f87ec4 in QWidget::event(QEvent*) from
/usr/lib64/libQtGui.so.4+0x994
#29  0x7fb842db9a06 in Gui::QuantitySpinBox::event(QEvent*) from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0x26
#30  0x7fb840f35a3c in QApplicationPrivate::notify_helper(QObject*, QEvent*)
from /usr/lib64/libQtGui.so.4+0x8c
#31  0x7fb840f3d231 in QApplication::notify(QObject*, QEvent*) from
/usr/lib64/libQtGui.so.4+0x14e1
#32  0x7fb842b48921 in Gui::GUIApplication::notify(QObject*, QEvent*) from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0x41
#33  0x7fb8409f42cd in QCoreApplication::notifyInternal(QObject*, QEvent*) from
/usr/lib64/libQtCore.so.4+0x6d
#34  /usr/lib64/libQtGui.so.4(+0x27aec7) [0x7fb840fd2ec7]
#35  /usr/lib64/libQtGui.so.4(+0x27b269) [0x7fb840fd3269]
#36  0x7fb840faee7f in QApplication::x11ProcessEvent(_XEvent*) from
/usr/lib64/libQtGui.so.4+0x94f
#37  /usr/lib64/libQtGui.so.4(+0x27d9c2) [0x7fb840fd59c2]
#38  /usr/lib64/libglib-2.0.so.0(g_main_context_dispatch+0x254)
[0x7fb83a0f0134]
#39  /usr/lib64/libglib-2.0.so.0(+0x4c388) [0x7fb83a0f0388]
#40  /usr/lib64/libglib-2.0.so.0(g_main_context_iteration+0x2c)
[0x7fb83a0f042c]
#41  0x7fb840a210fe in
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) from
/usr/lib64/libQtCore.so.4+0x7e
#42  /usr/lib64/libQtGui.so.4(+0x27da76) [0x7fb840fd5a76]
#43  0x7fb8409f2e8f in
QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) from
/usr/lib64/libQtCore.so.4+0x2f
#44  0x7fb8409f3185 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>)
from /usr/lib64/libQtCore.so.4+0x175
#45  0x7fb8409f85d9 in QCoreApplication::exec() from
/usr/lib64/libQtCore.so.4+0x89
#46  0x7fb842ae6d0e in Gui::Application::runApplication() from
/usr/lib64/FreeCAD/lib/libFreeCADGui.so+0x162e
#47  FreeCAD(main+0x74b) [0x4037cb]
#48  /lib64/libc.so.6(__libc_start_main+0xf5) [0x7fb83ff4a725]
#49  FreeCAD(_start+0x29) [0x404739]

summary: FreeCAD Crash when Creating Fillet


--1547561339.fbDD27e40.14331
Date: Tue, 15 Jan 2019 14:08:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1122012

            Bug ID: 1122012
           Summary: libzmq5-32bit not installable: nothing provides libunwind.so.8 needed by libzmq5-32bit
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/831608#step/install_
                    packages/9
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: pmonrealgonzalez-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: pmonrealgonzalez-at-suse.com, tchvatal-at-suse.com
            Blocks: 1121717
          Found By: Security Response Team
           Blocker: ---

libzmq5-32bit is not installable on Leap 42.3:

+++ PROBLEMS: +++
nothing provides libunwind.so.8 needed by libzmq5-32bit-4.2.2-2.5.2.x86_64
  + solution
    - do not ask to install libzmq5-32bit-4.2.2-2.5.2.x86_64
PCBS 'libzmq5-32bit-4.2.2-2.5.2.x86_64': 'nothing provides libunwind.so.8
needed by libzmq5-32bit-4.2.2-2.5.2.x86_64'

https://openqa.opensuse.org/tests/831608#step/install_packages/9
https://openqa.opensuse.org/tests/831609#step/install_packages/9
https://openqa.opensuse.org/tests/831610#step/install_packages/9

Already fixed in Leap 15.0 and Tumbleweed.
Blocks a security update from being released. (bug 1121717)
Also I see that bug 936786 appears to be outstanding in libunwind.