--17097229444.cdfF1Ca9.2334
Date: Wed, 6 Mar 2024 11:02:24 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221053

            Bug ID: 1221053
           Summary: VUL-0: CVE-2024-25817: eza: potential heap overflow in AArch64
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/396421/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jubalh-at-iodoru.org
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: carlos.lopez-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Buffer Overflow vulnerability in eza before version 0.18.2, allows local
attackers to execute arbitrary code via the .git/HEAD, .git/refs, and
.git/objects components.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25817
https://www.cubeyond.net/blog/my-cves/eza-cve-report
https://www.cve.org/CVERecord?id=3DCVE-2024-25817
https://github.com/advisories/GHSA-3qx3-6hxr-j2ch
https://bugzilla.redhat.com/show_bug.cgi?id=3D2268034
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17097229444.cdfF1Ca9.2334
Date: Wed, 6 Mar 2024 11:02:24 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221053

          Summary
          VUL-0: CVE-2024-25817: eza: potential heap overflow in AArch64

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/396421/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jubalh@iodoru.org

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          carlos.lopez@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Buffer Overflow vulnerability in eza before version 0.18.2, =
allows local
attackers to execute arbitrary code via the .git/HEAD, .git/refs, and
.git/objects components.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25817
https://ww=
w.cubeyond.net/blog/my-cves/eza-cve-report
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-25817
https://githu=
b.com/advisories/GHSA-3qx3-6hxr-j2ch
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2268034

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17097229444.cdfF1Ca9.2334--


body:
--17097430684.7CC5E.3374
Date: Wed, 6 Mar 2024 16:37:48 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221085

            Bug ID: 1221085
           Summary: encfs segfaults
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After upgrading from leap 15.5 to 15.6, mounting via encfs causes a segfaul=
t.
Reverting back to leap 15.5 package fixed.

My understanding is that this happens because we now build with openssl3 wh=
ile
it was openssl1 in leap 15.5.

When I rebuild the package with libopenssl-1_1-devel instead of openssl-dev=
el,
it starts working.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17097430684.7CC5E.3374
Date: Wed, 6 Mar 2024 16:37:48 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221085

          Summary
          encfs segfaults

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          tiwai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After upgrading from leap 15.5 to 15.6, mounting via encfs c=
auses a segfault.
Reverting back to leap 15.5 package fixed.

My understanding is that this happens because we now build with openssl3 wh=
ile
it was openssl1 in leap 15.5.

When I rebuild the package with libopenssl-1_1-devel instead of openssl-dev=
el,
it starts working.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17097430684.7CC5E.3374--

summary: encfs segfaults


--17097645250.6F3BEeba.3815
Date: Wed, 6 Mar 2024 22:35:25 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221094

            Bug ID: 1221094
           Summary: AUDIT-0: libvirt: Review new polkit permissions for node device save
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jfehlig-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

libvifrt commit 6e36f266514 introduced a new polkit rule for node-device.sa=
ve
operation that has been flagged by rpmlint

[  264s] libvirt-daemon-common.x86_64: E: polkit-untracked-privilege (Badne=
ss:
10000) org.libvirt.api.node-device.save (no:no:no)

I suppose it needs reviewed and whitelisted, similar to past occurrences su=
ch
as bug#1186270.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17097645250.6F3BEeba.3815
Date: Wed, 6 Mar 2024 22:35:25 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221094

          Summary
          AUDIT-0: libvirt: Review new polkit permissions for node devi=
ce save

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          jfehlig@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

libvifrt commit 6e36f266514 introduced a new polkit rule for=
 node-device.save
operation that has been flagged by rpmlint

[  264s] libvirt-daemon-common.x86_64: E: polkit-untracked-privilege (Badne=
ss:
10000) org.libvirt.api.node-device.save (no:no:no)

I suppose it needs reviewed and whitelisted, similar to past occurrences su=
ch
as bug#1186270.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17097645250.6F3BEeba.3815--


--17098024303.6D3B.4376
Date: Thu, 7 Mar 2024 09:07:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221103

            Bug ID: 1221103
           Summary: python311-oci-sdk wants to install python-base 2.7.18
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Cloud:Tools
          Assignee: public-cloud-maintainers-at-suse.de
          Reporter: toganm-at-dinamizm.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

On tumbleweed upgrade oracle cloud tools oci-sdk and oci-cli requests to
install python-base 2.7.18 which should be obsolute by now.=20

Problem: the to be installed python311-oci-sdk-2.121.1-1.1.noarch requires
'python311-sseclient', but this requirement cannot be provided
not installable providers: python311-sseclient-0.0.27-1.1.noarch[OSS]
Solution 1: deinstallation of python311-oci-sdk-2.121.0-1.1.noarch
Solution 2: keep obsolete python311-oci-sdk-2.121.0-1.1.noarch
Solution 3: remove lock to allow installation of
python-base-2.7.18-42.6.x86_64[OSS]
Solution 4: break python311-oci-sdk-2.121.1-1.1.noarch by ignoring some of =
its
dependencies

Choose from above solutions by number or skip, retry or cancel
[1/2/3/4/s/r/c/d/?] (c): 2
Resolving dependencies...
Computing distribution upgrade...

Problem: the to be installed oci-cli-3.37.9-1.1.noarch requires
'python3-oci-sdk >=3D 2.121.1', but this requirement cannot be provided
not installable providers: python311-oci-sdk-2.121.1-1.1.noarch[OSS]
Solution 1: deinstallation of oci-cli-3.37.8-1.1.noarch
Solution 2: keep obsolete oci-cli-3.37.8-1.1.noarch
Solution 3: remove lock to allow removal of
python311-oci-sdk-2.121.0-1.1.noarch
Solution 4: break oci-cli-3.37.9-1.1.noarch by ignoring some of its
dependencies
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17098024303.6D3B.4376
Date: Thu, 7 Mar 2024 09:07:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221103

          Summary
          python311-oci-sdk wants to install python-base 2.7.18

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Cloud:Tools

          Assignee
          public-cloud-maintainers@suse.de

          Reporter
          toganm@dinamizm.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

On tumbleweed upgrade oracle cloud tools oci-sdk and oci-cli=
 requests to
install python-base 2.7.18 which should be obsolute by now.=20

Problem: the to be installed python311-oci-sdk-2.121.1-1.1.noarch requires
'python311-sseclient', but this requirement cannot be provided
not installable providers: python311-sseclient-0.0.27-1.1.noarch[OSS]
Solution 1: deinstallation of python311-oci-sdk-2.121.0-1.1.noarch
Solution 2: keep obsolete python311-oci-sdk-2.121.0-1.1.noarch
Solution 3: remove lock to allow installation of
python-base-2.7.18-42.6.x86_64[OSS]
Solution 4: break python311-oci-sdk-2.121.1-1.1.noarch by ignoring some of =
its
dependencies

Choose from above solutions by number or skip, retry or cancel
[1/2/3/4/s/r/c/d/?] (c): 2
Resolving dependencies...
Computing distribution upgrade...

Problem: the to be installed oci-cli-3.37.9-1.1.noarch requires
'python3-oci-sdk >=3D 2.121.1', but this requirement cannot be provided
not installable providers: python311-oci-sdk-2.121.1-1.1.noarch[OSS]
Solution 1: deinstallation of oci-cli-3.37.8-1.1.noarch
Solution 2: keep obsolete oci-cli-3.37.8-1.1.noarch
Solution 3: remove lock to allow removal of
python311-oci-sdk-2.121.0-1.1.noarch
Solution 4: break oci-cli-3.37.9-1.1.noarch by ignoring some of its
dependencies

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17098024303.6D3B.4376--


body:
--17098040570.C9bcE.4481
Date: Thu, 7 Mar 2024 09:34:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221105

            Bug ID: 1221105
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 122.0.6261.111
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: m.szczepaniak.000-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Stable channel has been updated to 122.0.6261.111/.112 for Windows and =
Mac
and 122.0.6261.111 to Linux which will roll out over the coming days/weeks.=
 A
full list of changes in this build is available in the

High CVE-2024-2173: Out of bounds memory access in V8. Reported by
5fceb6172bbf7e2c5a948183b53565b9 on 2024-02-19
High CVE-2024-2174: Inappropriate implementation in V8. Reported by
5f46f4ee2e17957ba7b39897fb376be8 on 2024-02-19
High CVE-2024-2176: Use after free in FedCM. Reported by Anonymous on
2024-02-20

https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-des=
ktop.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17098040570.C9bcE.4481
Date: Thu, 7 Mar 2024 09:34:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221105

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 122.0.6261.111

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          rfrohl@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          m.szczepaniak.000@gmail.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The Stable channel has been updated to 122.0.6261.111/.112 f=
or Windows and Mac
and 122.0.6261.111 to Linux which will roll out over the coming days/weeks.=
 A
full list of changes in this build is available in the

High CVE-2024-2173: Out of bounds memory access in V8. Reported by
5fceb6172bbf7e2c5a948183b53565b9 on 2024-02-19
High CVE-2024-2174: Inappropriate implementation in V8. Reported by
5f46f4ee2e17957ba7b39897fb376be8 on 2024-02-19
High CVE-2024-2176: Use after free in FedCM. Reported by Anonymous on
2024-02-20

https://chromereleases.googleblog.com/2024/03/stable-=
channel-update-for-desktop.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17098040570.C9bcE.4481--

pkgs: chromium ungoogled-chromium


--17098090985.71E6dA35.4877
Date: Thu, 7 Mar 2024 10:58:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221110

            Bug ID: 1221110
           Summary: [Build 20240306] openQA test fails in sway - waybar uninstallable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3995163/modules/sway
                    /steps/32
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

nothing provides 'libwireplumber-0.4.so.0()(64bit)' needed by the to be
installed waybar-0.9.24-1.5.x86_64

waybar currently is unresolvable in openSUSE:Factory:
nothing provides pkgconfig(wireplumber-0.4) (wp was updated to 0.5)

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-sway@64bit fails in
[sway](https://openqa.opensuse.org/tests/3995163/modules/sway/steps/32)

## Test suite description
The base test suite is used for job templates defined in YAML documents. It=
 has
no settings of its own.

## Reproducible

Fails since (at least) Build
[20240306](https://openqa.opensuse.org/tests/3994782)

## Expected result

Last good: [20240305](https://openqa.opensuse.org/tests/3989697) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dsway&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17098090985.71E6dA35.4877
Date: Thu, 7 Mar 2024 10:58:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221110

          Summary
          [Build 20240306] openQA test fails in sway - waybar uninstall=
able

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/3995163/modules/sway/steps/=
32

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

nothing provides 'libwireplumber-0.4.so.0()(64bit)' needed by the to be
installed waybar-0.9.24-1.5.x86_64

waybar currently is unresolvable in openSUSE:Factory:
nothing provides pkgconfig(wireplumber-0.4) (wp was updated to 0.5)

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-sway@64bit fails=
 in
[sway](https://openqa.opensuse.org/tests/3995163/modules/sway/steps/32)

## Test suite description
The base test suite is used for job templates defined in YAML documents. It=
 has
no settings of its own.

## Reproducible

Fails since (at least) Build
[20240306](https://op=
enqa.opensuse.org/tests/3994782)

## Expected result

Last good: [20240305](https://openqa.opensuse.org/tests/3989697) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx=
86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D64bit&test=
=3Dsway&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17098090985.71E6dA35.4877--


body:
--17099133450.173d0f5.8835
Date: Fri, 8 Mar 2024 15:55:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221183

            Bug ID: 1221183
           Summary: Upgrade problems with clang-cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: franz.sirl-obs-at-lauterbach.com
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

during a "zypper --releasever=3D15.6 dup" upgrade from a fully up-to-date 1=
5.5
installation I got the following messages:

Checking for file conflicts:
...........................................................................=
...........................................................................=
.............[error]
Detected 4 file conflicts:

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from install of
     clang13-13.0.1-bp156.7.42.x86_64 (Main Repository)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang11-11.0.1-150300.3.6.1.x86_64 (@System)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang15-15.0.7-150500.4.4.1.x86_64 (@System)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang7-7.0.1-150100.3.22.2.x86_64 (@System)

File conflicts happen when two packages attempt to install files with the s=
ame
name but different contents. If you continue, conflicting files will be
replaced losing the previous content.
Continue? [yes/no] (no): yes

Even though this is mostly harmless, it disturbs the upgrade experience and
probably can be easily fixed by backporting the clang-cpp/update-alternativ=
es
change from clang17 to the other clang versions that are part of Leap.

regards,
Franz
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17099133450.173d0f5.8835
Date: Fri, 8 Mar 2024 15:55:45 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221183

          Summary
          Upgrade problems with clang-cpp

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          x86-64

          OS
          Linux

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Upgrade Problems

          Assignee
          screening-team-bugs@suse.de

          Reporter
          franz.sirl-obs@lauterbach.com

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

during a "zypper --releasever=3D15.6 dup" upgrade from a fully up=
-to-date 15.5
installation I got the following messages:

Checking for file conflicts:
...........................................................................=
...........................................................................=
.............[error]
Detected 4 file conflicts:

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from install of
     clang13-13.0.1-bp156.7.42.x86_64 (Main Repository)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang11-11.0.1-150300.3.6.1.x86_64 (@System)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang15-15.0.7-150500.4.4.1.x86_64 (@System)

File /usr/bin/clang-cpp
  from install of
     clang17-17.0.6-150600.1.13.x86_64 (Main Repository)
  conflicts with file from package
     clang7-7.0.1-150100.3.22.2.x86_64 (@System)

File conflicts happen when two packages attempt to install files with the s=
ame
name but different contents. If you continue, conflicting files will be
replaced losing the previous content.
Continue? [yes/no] (no): yes

Even though this is mostly harmless, it disturbs the upgrade experience and
probably can be easily fixed by backporting the clang-cpp/update-alternativ=
es
change from clang17 to the other clang versions that are part of Leap.

regards,
Franz

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17099133450.173d0f5.8835--

summary: Upgrade problems with clang-cpp


body:
--17099338350.bf5f08.9507
Date: Fri, 8 Mar 2024 21:37:15 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221200

            Bug ID: 1221200
           Summary: Update Plasma to 5.27.11 and KDE Frameworks to 5.115
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: opendreas-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I think, there is no point in creating a separate report for each bug that =
is
fixed in the latest planned fix release for Plasma 5 LTS and KDE Frameworks.
https://kde.org/announcements/changelogs/plasma/5/5.27.10-5.27.11/
https://kde.org/announcements/frameworks/5/5.115.0

Since Leap 16 awaits many changes with ALP and Plasma 6, users may continue
using Leap 15.6 beyond its life cycle. Therefore, it makes sense to make Le=
ap
15.6 as stable as possible.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17099338350.bf5f08.9507
Date: Fri, 8 Mar 2024 21:37:15 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221200

          Summary
          Update Plasma to 5.27.11 and KDE Frameworks to 5.115

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          opendreas@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I think, there is no point in creating a separate report for=
 each bug that is
fixed in the latest planned fix release for Plasma 5 LTS and KDE Frameworks.
https://kde.org/announcements/changelogs/plasma/5/5.27.10-5.27.11/
https://kde.=
org/announcements/frameworks/5/5.115.0

Since Leap 16 awaits many changes with ALP and Plasma 6, users may continue
using Leap 15.6 beyond its life cycle. Therefore, it makes sense to make Le=
ap
15.6 as stable as possible.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17099338350.bf5f08.9507--

pkgs: baloo5 bluez-qt kapidox kcmutils kdav kdesu khtml kinit kjs kjsembed kpackage kparts kpeople5 kpty kross krunner kwayland purpose qt6-3d qt6-coap qt6-grpc qt6-mqtt sddm


body:
--17101839651.10BfDd.12840
Date: Mon, 11 Mar 2024 19:06:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221247

            Bug ID: 1221247
           Summary: openSUSEway pattern is broken.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: R_Nik_C-at-proton.me
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

> sudo zypper in openSUSEway
[sudo] password for root:=20
Refreshing service 'openSUSE'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: the to be installed openSUSEway-0.16.0-1.3.noarch requires
'sway-branding-openSUSE', but this requirement cannot be provided
  not installable providers:
sway-branding-openSUSE-0.16.0-1.3.noarch[openSUSE:repo-oss]
 Solution 1: do not install openSUSEway-0.16.0-1.3.noarch
 Solution 2: break openSUSEway-0.16.0-1.3.noarch by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c/d/?] (c): c
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17101839651.10BfDd.12840
Date: Mon, 11 Mar 2024 19:06:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221247

          Summary
          openSUSEway pattern is broken.

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          All

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Patterns

          Assignee
          dimstar@opensuse.org

          Reporter
          R_Nik_C@proton.me

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

> sudo zypper in openSUSEway
[sudo] password for root:=20
Refreshing service 'openSUSE'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: the to be installed openSUSEway-0.16.0-1.3.noarch requires
'sway-branding-openSUSE', but this requirement cannot be provided
  not installable providers:
sway-branding-openSUSE-0.16.0-1.3.noarch[openSUSE:repo-oss]
 Solution 1: do not install openSUSEway-0.16.0-1.3.noarch
 Solution 2: break openSUSEway-0.16.0-1.3.noarch by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c/d/?] (c): c

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17101839651.10BfDd.12840--

summary: openSUSEway pattern is broken.


--17101929052.3Ceaca.12930
Date: Mon, 11 Mar 2024 21:35:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221250

            Bug ID: 1221250
           Summary: glibc-locale-base missing locale() provides
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: georg.pfuetzenreuter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

the glibc-locale package ships with "Provide"s for the different locales it
ships:

```
$ rpm -q --provides glibc-locale|head
glibc-locale =3D 2.38-6.1
glibc-locale(x86-64) =3D 2.38-6.1
locale(glibc:aa_DJ)
locale(glibc:aa_DJ.utf8)
locale(glibc:aa_ER)
locale(glibc:aa_ER@saaho)
locale(glibc:aa_ET)
locale(glibc:af_ZA)
locale(glibc:af_ZA.utf8)
locale(glibc:agr_PE)
```

There are two locales which are shipped in glibc-locale-base - en_US.utf8 a=
nd
C.utf8.

Upon packaging something which requires one of them, I noticed that
glibc-locale-base is not shipping any `locale()` "Provide"s.

```
$ rpm -q --provides glibc-locale-base
glibc-locale-base =3D 2.38-6.1
glibc-locale-base(x86-64) =3D 2.38-6.1
libCNS.so()(64bit)
libGB.so()(64bit)
libISOIR165.so()(64bit)
libJIS.so()(64bit)
libJISX0213.so()(64bit)
libKSC.so()(64bit)
```

I would expect glibc-locale-base to Provide `locale(glibc:C.utf8)` and
`locale(glibc:en_US.utf8)` - both to have providers for all locales in the
distribution and to make packaging easier.

Unfortunately I could not figure out how the "Provide"s in glibc.spec are
generated myself, hence I am opening this report instead.

Cheers,
Georg
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17101929052.3Ceaca.12930
Date: Mon, 11 Mar 2024 21:35:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221250

          Summary
          glibc-locale-base missing locale() provides

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          georg.pfuetzenreuter@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

the glibc-locale package ships with "Provide"s for the different =
locales it
ships:

```
$ rpm -q --provides glibc-locale|head
glibc-locale =3D 2.38-6.1
glibc-locale(x86-64) =3D 2.38-6.1
locale(glibc:aa_DJ)
locale(glibc:aa_DJ.utf8)
locale(glibc:aa_ER)
locale(glibc:aa_ER@saaho)
locale(glibc:aa_ET)
locale(glibc:af_ZA)
locale(glibc:af_ZA.utf8)
locale(glibc:agr_PE)
```

There are two locales which are shipped in glibc-locale-base - en_US.utf8 a=
nd
C.utf8.

Upon packaging something which requires one of them, I noticed that
glibc-locale-base is not shipping any `locale()` "Provide"s.

```
$ rpm -q --provides glibc-locale-base
glibc-locale-base =3D 2.38-6.1
glibc-locale-base(x86-64) =3D 2.38-6.1
libCNS.so()(64bit)
libGB.so()(64bit)
libISOIR165.so()(64bit)
libJIS.so()(64bit)
libJISX0213.so()(64bit)
libKSC.so()(64bit)
```

I would expect glibc-locale-base to Provide `locale(glibc:C.utf8)` and
`locale(glibc:en_US.utf8)` - both to have providers for all locales in the
distribution and to make packaging easier.

Unfortunately I could not figure out how the "Provide"s in glibc.=
spec are
generated myself, hence I am opening this report instead.

Cheers,
Georg

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17101929052.3Ceaca.12930--


--17102944033.C5f0d97.15696
Date: Wed, 13 Mar 2024 01:46:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221317

            Bug ID: 1221317
           Summary: nothing provides Waybar dependency, 'libwireplumber-0.4.so.0()(64bit)'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: shayan.zahedana-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Can't properly install waybar because nothing provides
'libwireplumber-0.4.so.0()(64bit)' dependency. If I try to install anyway,
waybar just won't work, complaining about the missing dependency.

Zypper complaint:

`Problem: nothing provides 'libwireplumber-0.4.so.0()(64bit)' needed by the=
 to
be installed waybar-0.9.24-1.5.x86_64`
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17102944033.C5f0d97.15696
Date: Wed, 13 Mar 2024 01:46:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221317

          Summary
          nothing provides Waybar dependency, 'libwireplumber-0.4.so.0(=
)(64bit)'

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          shayan.zahedana@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Can't properly install waybar because nothing provides
'libwireplumber-0.4.so.0()(64bit)' dependency. If I try to install anyway,
waybar just won't work, complaining about the missing dependency.

Zypper complaint:

`Problem: nothing provides 'libwireplumber-0.4.so.0()(64bit)' needed by the=
 to
be installed waybar-0.9.24-1.5.x86_64`

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17102944033.C5f0d97.15696--


--17103027153.e2BBFF.15762
Date: Wed, 13 Mar 2024 04:05:15 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221320

            Bug ID: 1221320
           Summary: IceWM given generic name in YAST2 patterns & during install
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: rory.ashton-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 873460
  --> https://bugzilla.suse.com/attachment.cgi?id=3D873460&action=3Dedit
YaST2 Patterns

In YaST2 under Patterns it list many Window Managers then at the end of lis=
t it
says :

"A very basic desktop (previously part of x11 pattern)"

This is actually IceWM.

IceWM is given this same treatment during install, it is referred to as a
'basic desktop'.  I actually had no idea opensuse had installed icewm and w=
as
just running commands from the terminal.

It seems odd to not call IceWM by its name when millions of people have use=
d it
before and wont know what you are referring to by calling it only 'a very b=
asic
desktop'.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17103027153.e2BBFF.15762
Date: Wed, 13 Mar 2024 04:05:15 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221320

          Summary
          IceWM given generic name in YAST2 patterns & during insta=
ll

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Patterns

          Assignee
          dimstar@opensuse.org

          Reporter
          rory.ashton@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 873460 <=
a href=3D"attachment.cgi?id=3D873460&action=3Dedit" title=3D"YaST2 Patt=
erns">[details]
YaST2 Patterns

In YaST2 under Patterns it list many Window Managers then at the end of lis=
t it
says :

"A very basic desktop (previously part of x11 pattern)"

This is actually IceWM.

IceWM is given this same treatment during install, it is referred to as a
'basic desktop'.  I actually had no idea opensuse had installed icewm and w=
as
just running commands from the terminal.

It seems odd to not call IceWM by its name when millions of people have use=
d it
before and wont know what you are referring to by calling it only 'a very b=
asic
desktop'.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17103027153.e2BBFF.15762--


body:
--17103200973.6D3Fa.16146
Date: Wed, 13 Mar 2024 08:54:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221335

            Bug ID: 1221335
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 122.0.6261.128
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Stable channel has been updated to 122.0.6261.128 for Linux which will =
roll
out over the coming days/weeks.=20

This update includes 3 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[TBD][327696052] High CVE-2024-2400: Use after free in Performance Manager.
Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab on 2024-03-01

As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:

[329224653] Various fixes from internal audits, fuzzing and other initiativ=
es

https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-des=
ktop_12.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17103200973.6D3Fa.16146
Date: Wed, 13 Mar 2024 08:54:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221335

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 122.0.6261.128

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The Stable channel has been updated to 122.0.6261.128 for Li=
nux which will roll
out over the coming days/weeks.=20

This update includes 3 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[TBD][327696052] High CVE-2024-2400: Use after free in Performance Manager.
Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab on 2024-03-01

As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:

[329224653] Various fixes from internal audits, fuzzing and other initiativ=
es

https://chromereleases.googleblog.com/2024/03/stab=
le-channel-update-for-desktop_12.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17103200973.6D3Fa.16146--


--17104252313.C050cB3ab.19505
Date: Thu, 14 Mar 2024 14:07:11 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221411

            Bug ID: 1221411
           Summary: nothing provides '(python311-s3transfer >=3D 0.10.0 with python311-s3transfer < 0.11.0)' needed by the to be installed aws-cli-1.32.31-1.1.noarch
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Cloud:Tools
          Assignee: public-cloud-maintainers-at-suse.de
          Reporter: monkeyboyted-at-yahoo.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

doof@steamdeck:~> sudo zypper in aws-cli
[sudo] password for root:=20
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides '(python311-s3transfer >=3D 0.10.0 with
python311-s3transfer < 0.11.0)' needed by the to be installed
aws-cli-1.32.31-1.1.noarch
 Solution 1: do not install aws-cli-1.32.31-1.1.noarch
 Solution 2: break aws-cli-1.32.31-1.1.noarch by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c/d/?] (c): 1
Resolving dependencies...
Resolving package dependencies...
Nothing to do.
doof@steamdeck:~> zypper info python311-s3transfer
Loading repository data...
Reading installed packages...

Information for package python311-s3transfer:
---------------------------------------------
Repository     : openSUSE-Tumbleweed-Oss
Name           : python311-s3transfer
Version        : 0.8.2-1.2
Arch           : noarch
Vendor         : openSUSE
Installed Size : 633.1 KiB
Installed      : Yes
Status         : up-to-date
Source package : python-s3transfer-0.8.2-1.2.src
Upstream URL   : https://github.com/boto/s3transfer
Summary        : Python S3 transfer manager
Description    :=20
    A transfer manager for Amazon Web Services S3

doof@steamdeck:~>
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104252313.C050cB3ab.19505
Date: Thu, 14 Mar 2024 14:07:11 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221411

          Summary
          nothing provides '(python311-s3transfer >=3D 0.10.0 with p=
ython311-s3transfer < 0.11.0)' needed by the to be installed aws-cli-1.3=
2.31-1.1.noarch

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Cloud:Tools

          Assignee
          public-cloud-maintainers@suse.de

          Reporter
          monkeyboyted@yahoo.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

doof@steamdeck:~> sudo zypper in aws-cli
[sudo] password for root:=20
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides '(python311-s3transfer >=3D 0.10.0 with
python311-s3transfer < 0.11.0)' needed by the to be installed
aws-cli-1.32.31-1.1.noarch
 Solution 1: do not install aws-cli-1.32.31-1.1.noarch
 Solution 2: break aws-cli-1.32.31-1.1.noarch by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c/d/?] (c): 1
Resolving dependencies...
Resolving package dependencies...
Nothing to do.
doof@steamdeck:~> zypper info python311-s3transfer
Loading repository data...
Reading installed packages...

Information for package python311-s3transfer:
---------------------------------------------
Repository     : openSUSE-Tumbleweed-Oss
Name           : python311-s3transfer
Version        : 0.8.2-1.2
Arch           : noarch
Vendor         : openSUSE
Installed Size : 633.1 KiB
Installed      : Yes
Status         : up-to-date
Source package : python-s3transfer-0.8.2-1.2.src
Upstream URL   : https://git=
hub.com/boto/s3transfer
Summary        : Python S3 transfer manager
Description    :=20
    A transfer manager for Amazon Web Services S3

doof@steamdeck:~>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104252313.C050cB3ab.19505--


body:
--17104284181.58D1.19682
Date: Thu, 14 Mar 2024 15:00:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221414

            Bug ID: 1221414
           Summary: shells/bash-completion: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: werner-at-suse.com
          Reporter: opensuse-at-dstoecker.de
        QA Contact: screening-team-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

With 2.12 remote path completion with scp doesn't work anymore. With the la=
st
2.11 RPM it works.

How to reproduce:

Call "scp server:/var/li" and press tab. it should add the "b/" and the end=
 of
the prompt. This needs a ssh setup which allows passwordless access like Pu=
bkey
pbased login.

I built shell/bash-completion revision 133 (version 2.11) for Tumbleweed ag=
ain
and this solves the issue.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104284181.58D1.19682
Date: Thu, 14 Mar 2024 15:00:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221414

          Summary
          shells/bash-completion: Bug

          Classification
          openSUSE

          Product
          openSUSE.org

          Version
          unspecified

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          3rd party software

          Assignee
          werner@suse.com

          Reporter
          opensuse@dstoecker.de

          QA Contact
          screening-team-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

With 2.12 remote path completion with scp doesn't work anymo=
re. With the last
2.11 RPM it works.

How to reproduce:

Call "scp server:/var/li" and press tab. it should add the "=
b/" and the end of
the prompt. This needs a ssh setup which allows passwordless access like Pu=
bkey
pbased login.

I built shell/bash-completion revision 133 (version 2.11) for Tumbleweed ag=
ain
and this solves the issue.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104284181.58D1.19682--

summary: shells/bash-completion: Bug


--17104291730.ABb3.19714
Date: Thu, 14 Mar 2024 15:12:53 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221417

            Bug ID: 1221417
           Summary: icecream cannot be installed - missing user() dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: OpenStack
          Assignee: cloud-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since the upgrade to RPM 4.19, icecream can no longer be installed:

> sudo zypper in icecream
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides 'group(icecream)' needed by the to be installed
icecream-1.4.0-2.8.x86_64
 Solution 1: do not install icecream-1.4.0-2.8.x86_64
 Solution 2: break icecream-1.4.0-2.8.x86_64 by ignoring some of its
dependencies

Please see bug#1221415 for more details on possible solutions
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104291730.ABb3.19714
Date: Thu, 14 Mar 2024 15:12:53 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221417

          Summary
          icecream cannot be installed - missing user() dependency

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          OpenStack

          Assignee
          cloud-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Since the upgrade to RPM 4.19, icecream can no longer be ins=
talled:

> sudo zypper in icecream
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides 'group(icecream)' needed by the to be installed
icecream-1.4.0-2.8.x86_64
 Solution 1: do not install icecream-1.4.0-2.8.x86_64
 Solution 2: break icecream-1.4.0-2.8.x86_64 by ignoring some of its
dependencies

Please see bug#1221415 for more details on p=
ossible solutions

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104291730.ABb3.19714--


--17104295010.13C0a9.19738
Date: Thu, 14 Mar 2024 15:18:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221420

            Bug ID: 1221420
           Summary: sendfax cannot be installed - missing user() dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since the upgrade to RPM 4.19, sendfax can no longer be installed:

> sudo zypper in sendfax
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides 'user(fax)' needed by the to be installed
sendfax-1.2.1-9.6.x86_64
 Solution 1: do not install sendfax-1.2.1-9.6.x86_64
 Solution 2: break sendfax-1.2.1-9.6.x86_64 by ignoring some of its
dependencies

Please see bug#1221415 for more details on possible solutions
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104295010.13C0a9.19738
Date: Thu, 14 Mar 2024 15:18:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221420

          Summary
          sendfax cannot be installed - missing user() dependency

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Since the upgrade to RPM 4.19, sendfax can no longer be inst=
alled:

> sudo zypper in sendfax
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides 'user(fax)' needed by the to be installed
sendfax-1.2.1-9.6.x86_64
 Solution 1: do not install sendfax-1.2.1-9.6.x86_64
 Solution 2: break sendfax-1.2.1-9.6.x86_64 by ignoring some of its
dependencies

Please see bug#1221415 for more details on p=
ossible solutions

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104295010.13C0a9.19738--


--17104311112.E71b0A.19963
Date: Thu, 14 Mar 2024 15:45:11 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221427

            Bug ID: 1221427
           Summary: [Build 20240313] failed openSUSE-build-key-import.service
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4012636/modules/forc
                    e_scheduled_tasks/steps/10
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

The service fails to run the timer. In the journal, I could find:

Mar 14 11:10:00.498721 susetest (uild-key)[3311]:
openSUSE-build-key-import.service: Failed to locate executable=20
                 /usr/sbin/import-openSUSE-build-key: No such file or direc=
tory

According to the spec file, the import-%{name} was installed to %{_bindir} =
(not
%{sbindir)

%attr(755,root,root) %_bindir/import-%name

openQA test in scenario
opensuse-Tumbleweed-NET-x86_64-zdup_tw2twnext_gnome@64bit-3G fails in
[force_scheduled_tasks](https://openqa.opensuse.org/tests/4012636/modules/f=
orce_scheduled_tasks/steps/10)

## Test suite description
EXCLUDE_MODULES=3Dopensuse_welcome added as it is required for non TW zdup

## Reproducible

Fails since (at least) Build
[20240313](https://openqa.opensuse.org/tests/4012636) (current job)

## Expected result

Last good: [20240311](https://openqa.opensuse.org/tests/4008206) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DNET&machine=3D64bit-3G&test=3Dzdup_tw2twnext_gnome&version=
=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104311112.E71b0A.19963
Date: Thu, 14 Mar 2024 15:45:11 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221427

          Summary
          [Build 20240313] failed openSUSE-build-key-import.service

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4012636/modules/force_sched=
uled_tasks/steps/10

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

The service fails to run the timer. In the journal, I could find:

Mar 14 11:10:00.498721 susetest (uild-key)[3311]:
openSUSE-build-key-import.service: Failed to locate executable=20
                 /usr/sbin/import-openSUSE-build-key: No such file or direc=
tory

According to the spec file, the import-%{name} was installed to %{_bindir} =
(not
%{sbindir)

%attr(755,root,root) %_bindir/import-%name

openQA test in scenario
opensuse-Tumbleweed-NET-x86_64-zdup_tw2twnext_gnome@64bit-3G fails in
[force_scheduled_tasks](https://openqa.opensuse.org/tests=
/4012636/modules/force_scheduled_tasks/steps/10)

## Test suite description
EXCLUDE_MODULES=3Dopensuse_welcome added as it is required for non TW zdup

## Reproducible

Fails since (at least) Build
[20240313](https://op=
enqa.opensuse.org/tests/4012636) (current job)

## Expected result

Last good: [20240311](https://openqa.opensuse.org/tests/4008206) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/te=
sts/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DNET&machine=
=3D64bit-3G&test=3Dzdup_tw2twnext_gnome&version=3DTumbleweed)</=
pre>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104311112.E71b0A.19963--


body:
--17104346382.3e0cEFD7c.20119
Date: Thu, 14 Mar 2024 16:43:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221433

            Bug ID: 1221433
           Summary: [python-jirafs] Missing dependency PIL
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

tumbleweed-pkg~$ jirafs --help
Traceback (most recent call last):
  File "/usr/lib/python3.11/site-packages/jirafs/cmdline.py", line 16, in
<module>
    from jira.utils import JIRAError
  File "/usr/lib/python3.11/site-packages/jira/__init__.py", line 11, in
<module>
    from jira.client import (
  File "/usr/lib/python3.11/site-packages/jira/client.py", line 44, in <mod=
ule>
    from PIL import Image
ModuleNotFoundError: No module named 'PIL'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/bin/jirafs", line 5, in <module>
    from jirafs.cmdline import main
  File "/usr/lib/python3.11/site-packages/jirafs/cmdline.py", line 18, in
<module>
    from jira.exceptions import JIRAError
  File "/usr/lib/python3.11/site-packages/jira/__init__.py", line 11, in
<module>
    from jira.client import (
  File "/usr/lib/python3.11/site-packages/jira/client.py", line 44, in <mod=
ule>
    from PIL import Image
ModuleNotFoundError: No module named 'PIL'
tumbleweed-pkg~$
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104346382.3e0cEFD7c.20119
Date: Thu, 14 Mar 2024 16:43:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221433

          Summary
          [python-jirafs] Missing dependency PIL

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

tumbleweed-pkg~$ jirafs --help
Traceback (most recent call last):
  File "/usr/lib/python3.11/site-packages/jirafs/cmdline.py", lin=
e 16, in
<module>
    from jira.utils import JIRAError
  File "/usr/lib/python3.11/site-packages/jira/__init__.py", line=
 11, in
<module>
    from jira.client import (
  File "/usr/lib/python3.11/site-packages/jira/client.py", line 4=
4, in <module>
    from PIL import Image
ModuleNotFoundError: No module named 'PIL'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/bin/jirafs", line 5, in <module>
    from jirafs.cmdline import main
  File "/usr/lib/python3.11/site-packages/jirafs/cmdline.py", lin=
e 18, in
<module>
    from jira.exceptions import JIRAError
  File "/usr/lib/python3.11/site-packages/jira/__init__.py", line=
 11, in
<module>
    from jira.client import (
  File "/usr/lib/python3.11/site-packages/jira/client.py", line 4=
4, in <module>
    from PIL import Image
ModuleNotFoundError: No module named 'PIL'
tumbleweed-pkg~$

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104346382.3e0cEFD7c.20119--

summary: [python-jirafs] Missing dependency PIL


body:
--17104452034.C36c5.20464
Date: Thu, 14 Mar 2024 19:40:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221438

            Bug ID: 1221438
           Summary: trash_kcm conflicts kio-core
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: thomas.rahimi-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello,

in the freshly updated OpenSUSE Tumbleweed version 20240311, the trash_kcm
plugin for dolphin is missing in my installation. An attempt to install the
plugin leads to the message, that this conflicts kio-core and thus would le=
ad
to the removal of the overall desktop environment.
I'm by far not an expert in KDE Plasma packaging, but I suspect this depend=
ency
may be resolved without leading to this conflict.

Looking forward to a resolution, if any is possible

Kind regards

Thomas
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104452034.C36c5.20464
Date: Thu, 14 Mar 2024 19:40:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221438

          Summary
          trash_kcm conflicts kio-core

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          thomas.rahimi@mailbox.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hello,

in the freshly updated OpenSUSE Tumbleweed version 20240311, the trash_kcm
plugin for dolphin is missing in my installation. An attempt to install the
plugin leads to the message, that this conflicts kio-core and thus would le=
ad
to the removal of the overall desktop environment.
I'm by far not an expert in KDE Plasma packaging, but I suspect this depend=
ency
may be resolved without leading to this conflict.

Looking forward to a resolution, if any is possible

Kind regards

Thomas

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104452034.C36c5.20464--

summary: trash_kcm conflicts kio-core


--17104977832.1D843F.21436
Date: Fri, 15 Mar 2024 10:16:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221459

            Bug ID: 1221459
           Summary: Following TW update to 20240311 (Plasma6): Dolphin no longer plays (from the "Preview Panel") audio files.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: paul.pgp-7-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Following the TW update to 20240311 (Plasma6): Dolphin no longer plays (From
the "Preview Panel") audio files (of any format, mp3, ogg, wav...)

Logged to journal:
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: Phonon::createPat=
h:
Cannot connect  Phonon::MediaObject ( no objectName ) to  EmbeddedVideoPlay=
er (
no objectName ).
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: Phonon::createPat=
h:
Cannot connect  Phonon::MediaObject ( no objectName ) to  Phonon::AudioOutp=
ut (
no objectName ).
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:27 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:28 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:28 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded

Package "libphonon4qt6" is installed. This package recommends
"phonon-backend-qt6" which does not seem to be available (?):

paul@Orion-15:~$ sudo zypper in phonon-backend-qt6
[sudo] password for root:=20
Loading repository data...
Reading installed packages...
'phonon-backend-qt6' not found in package names. Trying capabilities.
No provider of 'phonon-backend-qt6' found.
Resolving package dependencies...
Nothing to do.
paul@Orion-15:~$

Operating System: openSUSE Tumbleweed 20240313
KDE Plasma Version: 6.0.1
KDE Frameworks Version: 6.0.0
Qt Version: 6.6.2
Kernel Version: 6.7.9-1-default (64-bit)
Graphics Platform: X11
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17104977832.1D843F.21436
Date: Fri, 15 Mar 2024 10:16:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221459

          Summary
          Following TW update to 20240311 (Plasma6): Dolphin no longer =
plays (from the "Preview Panel") audio files.

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          paul.pgp-7@gmx.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Following the TW update to 20240311 (Plasma6): Dolphin no lo=
nger plays (From
the "Preview Panel") audio files (of any format, mp3, ogg, wav...)

Logged to journal:
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: Phonon::createPat=
h:
Cannot connect  Phonon::MediaObject ( no objectName ) to  EmbeddedVideoPlay=
er (
no objectName ).
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: Phonon::createPat=
h:
Cannot connect  Phonon::MediaObject ( no objectName ) to  Phonon::AudioOutp=
ut (
no objectName ).
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:26 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:27 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:28 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded
Mar 15 10:05:28 Orion-15.openSUSE dolphin[2766]: WARNING: bool
Phonon::FactoryPrivate::createBackend() phonon backend plugin could not be
loaded

Package "libphonon4qt6" is installed. This package recommends
"phonon-backend-qt6" which does not seem to be available (?):

paul@Orion-15:~$ sudo zypper in phonon-backend-qt6
[sudo] password for root:=20
Loading repository data...
Reading installed packages...
'phonon-backend-qt6' not found in package names. Trying capabilities.
No provider of 'phonon-backend-qt6' found.
Resolving package dependencies...
Nothing to do.
paul@Orion-15:~$

Operating System: openSUSE Tumbleweed 20240313
KDE Plasma Version: 6.0.1
KDE Frameworks Version: 6.0.0
Qt Version: 6.6.2
Kernel Version: 6.7.9-1-default (64-bit)
Graphics Platform: X11

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17104977832.1D843F.21436--


--17105729231.46bb7DD.23031
Date: Sat, 16 Mar 2024 07:08:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221496

            Bug ID: 1221496
           Summary: Booting the virtual machine freezes at startup in VirtualBox
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: opendreas-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Booting an existing virtual machine or starting to install a new operating
system results in freezing.=20
It also fails to kill the process, so you have to do a hard reboot of the
system.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17105729231.46bb7DD.23031
Date: Sat, 16 Mar 2024 07:08:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221496

          Summary
          Booting the virtual machine freezes at startup in VirtualBox

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          opendreas@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Booting an existing virtual machine or starting to install a=
 new operating
system results in freezing.=20
It also fails to kill the process, so you have to do a hard reboot of the
system.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17105729231.46bb7DD.23031--


--17105832772.f7EAcE58c.23085
Date: Sat, 16 Mar 2024 10:01:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221501

            Bug ID: 1221501
           Summary: Missing posttls-finger in postfix though changes mention it
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: toganm-at-dinamizm.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The change file of postfix 3.8.6 dated Mar 5 16:46:16 UTC 2024 has the
following change.=20

Cleanup: this fixes posttls-finger certificate match expectations for all T=
LS
security levels, including warnings for levels that don't implement certifi=
cate
matching. By Viktor Dukhovni.

However posttls-finger is not available in the postfix package. Two questio=
ns
arise

1. Why is posttls-finger not included?=20

2. If it is not included why bother to put the above entry to the changelog.
Cut copy paste is meaningful only if what is pasted reflects the reality.

I would rather see that posttls-finger is included in the package.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17105832772.f7EAcE58c.23085
Date: Sat, 16 Mar 2024 10:01:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221501

          Summary
          Missing posttls-finger in postfix though changes mention it

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          toganm@dinamizm.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The change file of postfix 3.8.6 dated Mar 5 16:46:16 UTC 20=
24 has the
following change.=20

Cleanup: this fixes posttls-finger certificate match expectations for all T=
LS
security levels, including warnings for levels that don't implement certifi=
cate
matching. By Viktor Dukhovni.

However posttls-finger is not available in the postfix package. Two questio=
ns
arise

1. Why is posttls-finger not included?=20

2. If it is not included why bother to put the above entry to the changelog.
Cut copy paste is meaningful only if what is pasted reflects the reality.

I would rather see that posttls-finger is included in the package.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17105832772.f7EAcE58c.23085--


--17106804081.A5009D.23451
Date: Sun, 17 Mar 2024 13:00:08 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221515

            Bug ID: 1221515
           Summary: unsatisfied dependency problems for Plasma 6 / Gear 24.02
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: openSUSE Leap 15.5
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: o.g.m.belleux-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 873571
  --> https://bugzilla.suse.com/attachment.cgi?id=3D873571&action=3Dedit
result of ```sudo zypper -v dup -D --allow-vendor-change|tee zypper_dup.txt=
```

I added kde repositories as described in
https://en.opensuse.org/SDB:KDE_repositories and try ```sudo zypper -v dup =
-D
--allow-vendor-change``` which give me 2 Problems:

=E2=80=93 Problem: the to be installed libKPim6Mime6-24.02.0-kf.276.1.x86_6=
4 requires
'kmime >=3D 24.02.0', but this requirement cannot be provided

=E2=80=93 Problem: the to be installed kdepim-runtime-24.02.0-kf.347.1.x86_=
64 requires
'akonadi', but this requirement cannot be provided

I checked with zypper se and at the openbuildservice; kmime and akonadi are
availables.

I've tried to solve these problems, but it just keeps producing more and mo=
re
of them.

I did ```sudo zypper -v dup -D --allow-vendor-change|tee zypper_dup.txt```
choosing the uninstall solution with the smallest number for info. I attach=
 the
file zypper_dup.txt.

I think these are simple problems of dependencies and "conflict" or "obsole=
te"
in specs due to changes between "KDE 5" and "KDE 6".=20

In doubt, I'd rather wait for them to be resolved than break everything bef=
ore
upgrading to Plasma 6.

Thanks to all the KDE Team for the great work you do voluntarily.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17106804081.A5009D.23451
Date: Sun, 17 Mar 2024 13:00:08 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221515

          Summary
          unsatisfied dependency problems for Plasma 6 / Gear 24.02

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          openSUSE Leap 15.5

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          o.g.m.belleux@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created <a href=3D"attachment.cgi?id=3D8735=
71" name=3D"attach_873571" title=3D"result of ```sudo zypper -v dup -D --al=
low-vendor-change|tee zypper_dup.txt```">attachment 873571 <a href=3D"a=
ttachment.cgi?id=3D873571&action=3Dedit" title=3D"result of ```sudo zyp=
per -v dup -D --allow-vendor-change|tee zypper_dup.txt```">[details]</s=
pan>
result of ```sudo zypper -v dup -D --allow-vendor-change|tee zypper_dup.txt=
```

I added kde repositories as described in
https://en.opensus=
e.org/SDB:KDE_repositories and try ```sudo zypper -v dup -D
--allow-vendor-change``` which give me 2 Problems:

=E2=80=93 Problem: the to be installed libKPim6Mime6-24.02.0-kf.276.1.x86_6=
4 requires
'kmime >=3D 24.02.0', but this requirement cannot be provided

=E2=80=93 Problem: the to be installed kdepim-runtime-24.02.0-kf.347.1.x86_=
64 requires
'akonadi', but this requirement cannot be provided

I checked with zypper se and at the openbuildservice; kmime and akonadi are
availables.

I've tried to solve these problems, but it just keeps producing more and mo=
re
of them.

I did ```sudo zypper -v dup -D --allow-vendor-change|tee zypper_dup.txt```
choosing the uninstall solution with the smallest number for info. I attach=
 the
file zypper_dup.txt.

I think these are simple problems of dependencies and "conflict" =
or "obsolete"
in specs due to changes between "KDE 5" and "KDE 6".=20

In doubt, I'd rather wait for them to be resolved than break everything bef=
ore
upgrading to Plasma 6.

Thanks to all the KDE Team for the great work you do voluntarily.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17106804081.A5009D.23451--


--17107374210.b72ac.23786
Date: Mon, 18 Mar 2024 04:50:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221526

            Bug ID: 1221526
           Summary: VUL-0: CVE-2022-41404: org.ini4j: unspecified DoS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/344862/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

An issue in the fetch() method in the BasicProfile class of org.ini4j before
v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified
vectors.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2022-41404
https://www.cve.org/CVERecord?id=3DCVE-2022-41404
https://sourceforge.net/p/ini4j/bugs/56/
https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
https://bugzilla.redhat.com/show_bug.cgi?id=3D2269884
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17107374210.b72ac.23786
Date: Mon, 18 Mar 2024 04:50:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221526

          Summary
          VUL-0: CVE-2022-41404: org.ini4j: unspecified DoS

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/344862/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          fstrba@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

An issue in the fetch() method in the BasicProfile class of =
org.ini4j before
v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified
vectors.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2022-41404
https://www.c=
ve.org/CVERecord?id=3DCVE-2022-41404
https://sourceforge.ne=
t/p/ini4j/bugs/56/
https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2269884

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17107374210.b72ac.23786--


--17107426511.BbB316Ad.23831
Date: Mon, 18 Mar 2024 06:17:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1221528

            Bug ID: 1221528
           Summary: VUL-0: CVE-2018-25099: perl-CryptX: gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/397975/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: lars.vogdt-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: abergmann-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and
chacha20poly1305_decrypt_verify() do not verify the tag.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2018-25099
https://www.cve.org/CVERecord?id=3DCVE-2018-25099
https://github.com/DCIT/perl-CryptX/issues/47
https://github.com/libtom/libtomcrypt/pull/451
https://metacpan.org/dist/CryptX/changes
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17107426511.BbB316Ad.23831
Date: Mon, 18 Mar 2024 06:17:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1221528

          Summary
          VUL-0: CVE-2018-25099: perl-CryptX: gcm_decrypt_verify() and =
chacha20poly1305_decrypt_verify() do not verify the tag

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/397975/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          lars.vogdt@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          abergmann@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

In the CryptX module before 0.062 for Perl, gcm_decrypt_veri=
fy() and
chacha20poly1305_decrypt_verify() do not verify the tag.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2018-25099
https://www.c=
ve.org/CVERecord?id=3DCVE-2018-25099
https://github.co=
m/DCIT/perl-CryptX/issues/47
https://github.c=
om/libtom/libtomcrypt/pull/451
https://metacpan.org/d=
ist/CryptX/changes

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17107426511.BbB316Ad.23831--