--1586849753.15b32Ea1.30260
Date: Tue, 14 Apr 2020 07:35:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169381

            Bug ID: 1169381
           Summary: VUL-0: CVE-2020-11722: crawl:  remote arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/256997/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: rpm-at-fthiessen.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-11722

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote
attackers
to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc
file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11722
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-11722.html
https://github.com/crawl/crawl/commit/fc522ff6eb1bbb85e3de60c60a45762571e48c28
https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11722
https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html


body:
--1586863130.daef5.2997
Date: Tue, 14 Apr 2020 11:18:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169408

            Bug ID: 1169408
           Summary: yakuake crashes ctrl+d
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: werwolf131313-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

yakuake crashes when you press ctrl+d

yakuake --version

                          werwolf-at-home.itrus.su 20-04-14 17:13:10
yakuake 3.0.5+

zypper info yakuake
Information for package yakuake:
--------------------------------
Repository     : KDE:Applications
Name           : yakuake
Version        : 20.03.90-1.2
Arch           : x86_64
Vendor         : obs://build.opensuse.org/KDE
Installed Size : 589.6 KiB
Installed      : Yes
Status         : up-to-date
Source package : yakuake-20.03.90-1.2.src
Summary        : Terminal for KDE
Description    :
    Yakuake is a retractable KDE Terminal Emulator.

Application: Yakuake (yakuake), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f08dc134800 (LWP 1865))]

Thread 3 (Thread 0x7f08d889b700 (LWP 1867)):
#0  0x00007ffc91bb8ae6 in clock_gettime ()
#1  0x00007f08ddd12cf1 in clock_gettime@GLIBC_2.2.5 () from /lib64/libc.so.6
#2  0x00007f08de2e94f1 in qt_clock_gettime (ts=0x7f08d889aad0, clock=1) at
kernel/qelapsedtimer_unix.cpp:175
#3  do_gettime (frac=<synthetic pointer>, sec=<synthetic pointer>) at
kernel/qelapsedtimer_unix.cpp:166
#4  qt_gettime () at kernel/qelapsedtimer_unix.cpp:175
#5  0x00007f08de2e7e09 in QTimerInfoList::updateCurrentTime
(this=this@entry=0x7f08cc004d50) at kernel/qtimerinfo_unix.cpp:91
#6  0x00007f08de2e83d5 in QTimerInfoList::timerWait (this=0x7f08cc004d50,
tm=...) at kernel/qtimerinfo_unix.cpp:388
#7  0x00007f08de2e994e in timerSourcePrepareHelper (timeout=0x7f08d889aba4,
src=<optimized out>) at kernel/qeventdispatcher_glib.cpp:162
#8  timerSourcePrepare (source=<optimized out>, timeout=0x7f08d889aba4) at
kernel/qeventdispatcher_glib.cpp:166
#9  0x00007f08dca118ca in g_main_context_prepare () from
/usr/lib64/libglib-2.0.so.0
#10 0x00007f08dca1226b in ?? () from /usr/lib64/libglib-2.0.so.0
#11 0x00007f08dca1245f in g_main_context_iteration () from
/usr/lib64/libglib-2.0.so.0
#12 0x00007f08de2e9beb in QEventDispatcherGlib::processEvents
(this=0x7f08cc000b60, flags=...) at kernel/qeventdispatcher_glib.cpp:425
#13 0x00007f08de291b7b in QEventLoop::exec (this=this@entry=0x7f08d889ad70,
flags=..., flags@entry=...) at
../../include/QtCore/../../src/corelib/global/qflags.h:136
#14 0x00007f08de0bc5ce in QThread::exec (this=<optimized out>) at
../../include/QtCore/../../src/corelib/global/qflags.h:118
#15 0x00007f08df2e5507 in ?? () from /usr/lib64/libQt5DBus.so.5
#16 0x00007f08de0bd698 in QThreadPrivate::start (arg=0x7f08df367da0) at
thread/qthread_unix.cpp:342
#17 0x00007f08dd3f7efa in start_thread () from /lib64/libpthread.so.0
#18 0x00007f08ddd4b3bf in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x7f08da086700 (LWP 1866)):
#0  0x00007f08ddd40acf in poll () from /lib64/libc.so.6
#1  0x00007f08dd914772 in ?? () from /usr/lib64/libxcb.so.1
#2  0x00007f08dd91543a in xcb_wait_for_event () from /usr/lib64/libxcb.so.1
#3  0x00007f08da26bab0 in ?? () from /usr/lib64/libQt5XcbQpa.so.5
#4  0x00007f08de0bd698 in QThreadPrivate::start (arg=0x560b1cb3fc50) at
thread/qthread_unix.cpp:342
#5  0x00007f08dd3f7efa in start_thread () from /lib64/libpthread.so.0
#6  0x00007f08ddd4b3bf in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7f08dc134800 (LWP 1865)):
[KCrash Handler]
#6  QListData::size (this=0x560b1d3888b8) at
../../include/QtCore/../../src/corelib/tools/qlist.h:115
#7  QtPrivate::indexOf<QAction*, QAction*> (from=0, u=@0x7ffc91b3b758:
0x560b1d0b30e0, list=...) at
../../include/QtCore/../../src/corelib/tools/qlist.h:1021
#8  QList<QAction*>::indexOf (from=0, t=@0x7ffc91b3b758: 0x560b1d0b30e0,
this=0x560b1d3888b8) at
../../include/QtCore/../../src/corelib/tools/qlist.h:1009
#9  QList<QAction*>::removeAll (this=0x560b1d3888b8, _t=@0x7ffc91b3b758:
0x560b1d0b30e0) at ../../include/QtCore/../../src/corelib/tools/qlist.h:919
#10 0x00007f08dedd41e7 in QWidget::removeAction (this=0x560b1cfc2450,
action=<optimized out>) at kernel/qwidget.cpp:3173
#11 0x00007f08df9c53b9 in KActionCollection::removeAssociatedWidget
(this=0x560b1d0a4fa0, widget=<optimized out>) at
/usr/src/debug/kxmlgui-5.69.0-219.1.x86_64/src/kactioncollection.cpp:830
#12 0x00007f08df983f5b in KXMLGUIClient::prepareXMLUnplug
(this=this@entry=0x560b1d2442b8, w=0x560b1cfc2450) at
/usr/src/debug/kxmlgui-5.69.0-219.1.x86_64/src/kxmlguiclient.cpp:796
#13 0x00007f08df9841af in KXMLGUIFactory::removeClient (this=0x560b1d0a6ce0,
client=<optimized out>, client@entry=0x560b1d2442b8) at
/usr/src/debug/kxmlgui-5.69.0-219.1.x86_64/src/kxmlguifactory.cpp:464
#14 0x00007f08cbb1661a in Konsole::SessionController::~SessionController
(this=<optimized out>, this=<optimized out>) at
/usr/src/debug/konsole-20.03.90-1.1.x86_64/src/SessionController.cpp:241
#15 0x00007f08cbb16939 in Konsole::SessionController::~SessionController
(this=<optimized out>, this=<optimized out>) at
/usr/src/debug/konsole-20.03.90-1.1.x86_64/src/SessionController.cpp:243
#16 0x00007f08de2bf78f in QObject::event (this=0x560b1d244290,
e=0x560b1d4047c0) at kernel/qobject.cpp:1326
#17 0x00007f08ded9acaf in QApplicationPrivate::notify_helper
(this=this@entry=0x560b1cb1d0e0, receiver=receiver@entry=0x560b1d244290,
e=e@entry=0x560b1d4047c0) at kernel/qapplication.cpp:3684
#18 0x00007f08deda3df0 in QApplication::notify (this=0x7ffc91b3bf30,
receiver=0x560b1d244290, e=0x560b1d4047c0) at kernel/qapplication.cpp:3430
#19 0x00007f08de292fe2 in QCoreApplication::notifyInternal2
(receiver=0x560b1d244290, event=0x560b1d4047c0) at
../../include/QtCore/../../src/corelib/kernel/qobject.h:153
#20 0x00007f08de295774 in QCoreApplicationPrivate::sendPostedEvents
(receiver=0x0, event_type=0, data=0x560b1cb1bd00) at
kernel/qcoreapplication.cpp:1832
#21 0x00007f08de2ea553 in postEventSourceDispatch (s=0x560b1cc4c470) at
kernel/qeventdispatcher_glib.cpp:277
#22 0x00007f08dca12048 in g_main_context_dispatch () from
/usr/lib64/libglib-2.0.so.0
#23 0x00007f08dca123d0 in ?? () from /usr/lib64/libglib-2.0.so.0
#24 0x00007f08dca1245f in g_main_context_iteration () from
/usr/lib64/libglib-2.0.so.0
#25 0x00007f08de2e9bce in QEventDispatcherGlib::processEvents
(this=0x560b1cc4a3e0, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#26 0x00007f08de291b7b in QEventLoop::exec (this=this@entry=0x7ffc91b3be30,
flags=..., flags@entry=...) at
../../include/QtCore/../../src/corelib/global/qflags.h:136
#27 0x00007f08de299952 in QCoreApplication::exec () at
../../include/QtCore/../../src/corelib/global/qflags.h:118
#28 0x0000560b1c95e40f in main (argc=<optimized out>, argv=<optimized out>) at
/usr/src/debug/yakuake-20.03.90-1.2.x86_64/app/main.cpp:87
[Inferior 1 (process 1865) detached]

summary: yakuake crashes ctrl+d


--1586871611.D78E2.27830
Date: Tue, 14 Apr 2020 13:40:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169424

            Bug ID: 1169424
           Summary: [Staging] yast2-trans-allpacks unintsallable with latest yast2-trans submission
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Yast2-trans submission: https://build.opensuse.org/request/show/793463

This submit removess the package yast2-trans-en-US; this package though is a
current requirement by yast2-trans-allpacks, which in turn is a meta-package
used by installation-images

Relevant commits:

https://github.com/yast/yast-translations/commit/36a6ac23472657e67798e0c4cdd0a3a6a1246020

References https://bugzilla.suse.com/show_bug.cgi?id=1084015#c38


--1586875828.bf8F312.15026
Date: Tue, 14 Apr 2020 14:50:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169445

            Bug ID: 1169445
           Summary: [Ruby2.7] rubygem-yast-rake fails to build against ruby 2.7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

openSUSE Tumbleweed is in progress of moving to Ruby 2.7

rubygem-yast-rake is amongst the packages failing to build in Staging:L

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/rubygem-yast-rake/standard/x86_64


--1586875871.eEc4810.20100
Date: Tue, 14 Apr 2020 14:51:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169446

            Bug ID: 1169446
           Summary: [Ruby2.7] subversion fails to build against ruby 2.7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Tumbleweed is in progress of moving to Ruby 2.7

subversion is amongst the packages failing to build in Staging:L

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/subversion/standard/x86_64


body:
--1586914612.a25EDB0.16798
Date: Wed, 15 Apr 2020 01:36:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169494

            Bug ID: 1169494
           Summary: AUDIT-0: oddjob: review D-Bus and PAM
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: stasiek-at-michalski.cc
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/show/security:idm/oddjob
A new package for inclusion in Factory and Leap 15.2:

oddjob-mkhomedir.x86_64: W: suse-pam-unauthorized-module
pam_oddjob_mkhomedir.so
oddjob-mkhomedir.x86_64: E: suse-dbus-unauthorized-service (Badness: 10000)
/etc/dbus-1/system.d/oddjob-mkhomedir.conf
oddjob.x86_64: E: suse-dbus-unauthorized-service (Badness: 10000)
/etc/dbus-1/system.d/oddjob.conf

summary: AUDIT-0: oddjob: review D-Bus and PAM


body:
--1586921617.a40830.23406
Date: Wed, 15 Apr 2020 03:33:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169495

            Bug ID: 1169495
           Summary: gdb does not run under emacs gud mode
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hpcoder-at-hpcoders.com.au
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Emacs does not correctly fire up gdb when run using its gdb command. The error
message is "Error: you did not specify -i=mi on GDB’s command line!".

It turns out when running gdb with the option -i=mi, the following python
errors are output on standard error:
/usr/share/gdb/python/gdb/command/prompt.py:48: SyntaxWarning: "is not" with a
literal. Did you mean "!="?
  if self.value is not '':
/usr/share/gdb/python/gdb/command/prompt.py:60: SyntaxWarning: "is not" with a
literal. Did you mean "!="?
  if self.value is not '':
=thread-group-added,id="i1"

The workaround is to edit /usr/share/gdb/python/gdb/command/prompt.py and
replace the two instances of "is not" with "!=".

It is, I think a python 2 -> python 3 compatibility issue. != is the correct
operator to use in this circumstance, but apparently "is not" worked well
enough in python 2 the bug never surfaced before.

Perhaps a patch could be applied to OpenSUSE's gdb package to fix this error
until it is fixed upstream.

summary: gdb does not run under emacs gud mode


body:
--1586975622.e11e13AE1.1250
Date: Wed, 15 Apr 2020 18:33:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169582

            Bug ID: 1169582
           Summary: timezone: Morocco 2020 DST adjustment
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: mcalabkova-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

From https://www.mmsp.gov.ma/fr/actualites.aspx?id=1940 (translated)

The Morocco government decided that "[...] on the holy month of Ramadan, the
Kingdom of Morocco will return to legal time of the Kingdom (GMT) by delaying
the time by 60 minutes and this on Sunday April 19 at 03:00 in the morning In
accordance with article II of the decree n � 2.18.855 (October 26, 2018)
relating to the legal time of the Kingdom, and to the decision of the Head of
Government No. 3.25.20 (published on April 13, 2020) concerning the legal
time."

From
https://github.com/eggert/tz/commit/f9aacafa4f15be6e7ff4436164e14d8f08839ac7

>    Morocco springs forward on 2020-05-31, not 2020-05-24.
> [...]
>     Morocco's second spring-forward transition in 2020 will be May 31,
>     not May 24 as predicted earlier.
>     Adjust future-year predictions to use the first Sunday after the
>     day after Ramadan, not the first Sunday after Ramadan.

https://mm.icann.org/pipermail/tz/2020-April/028939.html

This will be reflected in an upcoming version of the time zone database.

summary: timezone: Morocco 2020 DST adjustment


body:
--1587020080.1303D0.26645
Date: Thu, 16 Apr 2020 06:54:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169614

            Bug ID: 1169614
           Summary: AUDIT-0: cockpit: setuid, dbus, pam
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: lnussel-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: kkaempf-at-suse.com
          Found By: ---
           Blocker: ---

For my package found in OBS in
https://build.opensuse.org/package/show/systemsmanagement:cockpit/cockpit I
would like a whitelisting for the following rpmlint error:

[  395s] cockpit-ws.x86_64: E: permissions-file-setuid-bit (Badness: 100)
/usr/lib/cockpit-session is packaged with setuid/setgid bits (04750)
[  395s] If the package is intended for inclusion in any SUSE product
[  395s] please open a bug report to request review of the program by the
[  395s] security team. Please refer to
[  395s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[  395s] more information.
[  395s]
[  395s] cockpit-bridge.x86_64: E: polkit-untracked-privilege (Badness: 100)
org.cockpit-project.cockpit.root-bridge (auth_admin:auth_admin:auth_admin)
[  395s] The privilege is not listed in /etc/polkit-default-privs.*
which
[  395s] makes it harder for admins to find. Furthermore polkit
[  395s] authorization checks can easily introduce security issues. If the
[  395s] package is intended for inclusion in any SUSE product please open
[  395s] a bug report to request review of the package by the security team.
[  395s] Please refer to
[  395s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[  395s] more information.
[  395s]
[  395s] cockpit-ws.x86_64: E: suse-pam-unauthorized-module (Badness: 10)
pam_cockpit_cert.so
[  395s] cockpit-ws.x86_64: E: suse-pam-unauthorized-module (Badness: 10)
pam_ssh_add.so
[  395s] The package installs a PAM module. If the package             is
intended for
[  395s] inclusion in any SUSE product please open a bug             report to
request
[  395s] review of the service by the security team.             Please refer
to
[  395s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs

summary: AUDIT-0: cockpit: setuid, dbus, pam


--1587026764.8c701c0.23918
Date: Thu, 16 Apr 2020 08:46:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1169628

            Bug ID: 1169628
           Summary: VUL-0: virtualbox: Oracle 2020 April CPU (update to 6.0.20 and 6.1.6)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: Larry.Finger-at-gmail.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2020-2741
CVE-2020-2742
CVE-2020-2743
CVE-2020-2748
CVE-2020-2758
CVE-2020-2894
CVE-2020-2902
CVE-2020-2905
CVE-2020-2907
CVE-2020-2908
CVE-2020-2909
CVE-2020-2910
CVE-2020-2911
CVE-2020-2913
CVE-2020-2914
CVE-2020-2929
CVE-2020-2951
CVE-2020-2958
CVE-2020-2959

Leap should be upgraded to 6.0.20 and Factory to 6.1.6
https://www.oracle.com/security-alerts/cpuapr2020.html


body:
--1587045537.Dd14D44.2783
Date: Thu, 16 Apr 2020 13:58:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169668

            Bug ID: 1169668
           Summary: lshw SIGABRT on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com
          Found By: ---
           Blocker: ---

lshw SIGABRT on aarch64 with the following traces:
**********
terminate called after throwing an instance of 'std::logic_error'
  what():  basic_string::_M_construct null not valid
Aborted (core dumped)
**********

gdb gives:
**********
#0  0x0000fffff7c350a0 in raise () from /lib64/libc.so.6
#1  0x0000fffff7c21d68 in abort () from /lib64/libc.so.6
#2  0x0000fffff7e4df38 in __gnu_cxx::__verbose_terminate_handler () at
../../../../libstdc++-v3/libsupc++/vterminate.cc:95
#3  0x0000fffff7e4ba7c in __cxxabiv1::__terminate (handler=<optimized out>) at
../../../../libstdc++-v3/libsupc++/eh_terminate.cc:48
#4  0x0000fffff7e4bae0 in std::terminate () at
../../../../libstdc++-v3/libsupc++/eh_terminate.cc:58
#5  0x0000fffff7e4bdd4 in __cxxabiv1::__cxa_throw
(obj=obj@entry=0xaaaaaae13990, tinfo=0xfffff7f7cf28 <typeinfo for
std::logic_error>, dest=0xfffff7e600b0 <std::logic_error::~logic_error()>) at
../../../../libstdc++-v3/libsupc++/eh_throw.cc:95
#6  0x0000fffff7e4777c in std::__throw_logic_error
(__s=__s@entry=0xaaaaaab338b0 "basic_string::_M_construct null not valid") at
../../../../../libstdc++-v3/src/c++11/functexcept.cc:66
#7  0x0000aaaaaaaba6f8 in std::__cxx11::basic_string<char,
std::char_traits<char>, std::allocator<char> >::_M_construct<char const*>(char
const*, char const*, std::forward_iterator_tag) [clone .constprop.0]
(this=<optimized out>, __beg=0x0, __end=<optimized out>)
    at /usr/include/c++/9/bits/basic_string.tcc:212
#8  0x0000aaaaaaab9dac in main (argc=<optimized out>, argv=<optimized out>) at
/usr/include/c++/9/ext/new_allocator.h:80
**********

summary: lshw SIGABRT on aarch64


body:
--1587107555.AB4Ef38D0.15891
Date: Fri, 17 Apr 2020 07:12:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169728

            Bug ID: 1169728
           Summary: GCC 10: qemu build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/qemu/standard/x86_64

with:
[  150s] /home/abuild/rpmbuild/BUILD/qemu-4.2.0/scsi/qemu-pr-helper.c: In
function 'multipath_pr_out':
[  150s] /home/abuild/rpmbuild/BUILD/qemu-4.2.0/scsi/qemu-pr-helper.c:523:32:
error: array subscript <unknown> is outside array bounds of 'struct transportid
*[]' [-Werror=array-bounds]
[  150s]   523 |             paramp.trnptid_list[paramp.num_transportid++] =
id;
[  150s]       |             ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~
[  150s] In file included from
/home/abuild/rpmbuild/BUILD/qemu-4.2.0/scsi/qemu-pr-helper.c:36:
[  150s] /usr/include/mpath_persist.h:168:22: note: while referencing
'trnptid_list'
[  150s]   168 |  struct transportid *trnptid_list[];
[  150s]       |                      ^~~~~~~~~~~~
[  150s] /home/abuild/rpmbuild/BUILD/qemu-4.2.0/scsi/qemu-pr-helper.c:424:35:
note: defined here 'paramp'
[  150s]   424 |     struct prout_param_descriptor paramp;
[  150s]       |                                   ^~~~~~

I first thought that it's GCC bug. But it seems it's correct warning:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=92326

summary: GCC 10: qemu build fails


--1587107878.54AD2B0.13956
Date: Fri, 17 Apr 2020 07:17:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1169729

            Bug ID: 1169729
           Summary: VUL-0: CVE-2020-6457: chromium: Update to 81.0.4044.113
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This update includes 1 security fix.

[$TBD][1067851] Critical CVE-2020-6457: Use after free in speech recognizer.
Reported by Leecraso and Guang Gong of Alpha Lab, Qihoo 360 on 2020-04-04
We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Prudhvikumar Bommana Google Chrome
Share on Twitter Share on Facebook

https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html


--1587127726.d71c088E22.14628
Date: Fri, 17 Apr 2020 12:48:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169771

            Bug ID: 1169771
           Summary: Bug in install-brcmfmac.sh [pkg bcm43xx-firmware]
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: alessio.adamo-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi everybody,

I was trying to achieve Bluetooth activation on my cubox-i, and while
tinkering I realized a putative bug in the script
'install-brcmfmac.sh' used by the package 'bcm43xx-firmware'.
The script parses the file '/sys/firmware/devicetree/base/compatible'
looking for 'solidrun,cubox-i', however it is not successful, because
in my personal case it actually retrieves 'solidrun,cubox-i/q'.
Because of this, the symbolic link
'/lib/firmware/brcm/brcmfmac4330-sdio.txt' is not created and brcmfmac
fails with the following error messages:

  [   21.774391] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac4330-sdio
for chip BCM4330/4
  [   21.833131] brcmfmac mmc0:0001:1: Direct firmware load for
brcm/brcmfmac4330-sdio.solidrun,cubox-i/q.txt failed with error -2
  [   21.833205] brcmfmac mmc0:0001:1: Direct firmware load for
brcm/brcmfmac4330-sdio.txt failed with error -2

The content of '/sys/firmware/devicetree/base/compatible' is:

  solidrun,cubox-i/q^@fsl,imx6q^@

I think that's probably because it's a Cubox-i Pro Quad Core.
Changing the pattern for case statement into

  solidrun,cubox-i|solidrun,cubox-i/q)

fixes the issue.
The issue affects all Leap 15 versions.

Regards,

Alessio


--1587141669.4EeD3.9147
Date: Fri, 17 Apr 2020 16:41:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169791

            Bug ID: 1169791
           Summary: [HPC, scotch] ptscotch-parmetis-*mpi-devel should not conflict with metis-devel
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: All
                OS: SUSE Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

The MPI variants of scotch-metis packages conflict with the serial metis-devel
package. There is not reason for this.
This causes other package not being installable due to conflicting dependencies
of dependencies.


body:
--1587142996.C63A3.13755
Date: Fri, 17 Apr 2020 17:03:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169792

            Bug ID: 1169792
           Summary: [hypre] Enable non-HPC openmpi3 build
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: All
                OS: SUSE Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Enable non-HPC hypre openmpi3 build because other packages need it (petsc).

summary: [hypre] Enable non-HPC openmpi3 build


--1587143355.0ff43.14671
Date: Fri, 17 Apr 2020 17:09:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169793

            Bug ID: 1169793
           Summary: hdf5: baselibs .so for hdf5_fortran Libraries is incorrect
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: All
                OS: SUSE Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

The baslibs.conf generator is using the wrong macro for the hdf5_fortran
library. This way, dependencies are not found correctly.


--1587293331.41d70.28244
Date: Sun, 19 Apr 2020 10:48:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169832

            Bug ID: 1169832
           Summary: armv6hl: Go applications fails with "Illegal instruction (core dumped)"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hombit-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I use openSUSE Tumbleweed armv6hl (file
openSUSE-Tumbleweed-ARM-JeOS-raspberrypi.armv6l-2020.03.25-Snapshot20200414.raw.xz
downloaded from http://download.opensuse.org/ports/armv6hl/factory/images/) at
Raspberry Pi 1 B+.

I've tried to execute some Go applications installed via zypper but they all
are failed with the same message: "Illegal instruction (core dumped)". Packages
I tried: docker 19.03.5_ce-4.1, hub 2.14.2-1.2, and rclone 1.48.0-1.2


--1587294615.D82b0.18217
Date: Sun, 19 Apr 2020 11:10:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1169834

            Bug ID: 1169834
           Summary: dehydrated-lighttpd-0.6.5-lp152.1.2 comes with wrong config file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kristof.p-at-fce.vutbr.cz
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 836075
  --> http://bugzilla.suse.com/attachment.cgi?id=836075&action=edit
Fix module name and alias.url definition

Hello all.

There is working lighttpd-1.4.55-lp152.1.2 web server. After installing package
dehydrated-lighttpd-0.6.5-lp152.1.2 and including config file acme-challenge,
server web server fails to start.

There are mistakes:

1) Name of alias module is wrong, correct name is "mod_alias"
2) Final backslash in url rewrite is missing, causes target file is not find
3) Name of file acme-challenge should be acme-challenge.config as other confi
files has .config suffix

Thank you

-


--1587311114.1Aed4c9.14105
Date: Sun, 19 Apr 2020 15:45:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169838

            Bug ID: 1169838
           Summary: konqueror crashing when accessing bookmarks folder
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: bernhard.friedrichs-at-web.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a bookmarks toolbar
That contains bookmarks (single, works) and bookmark FOLDER like

progs
-


body:
--1587369038.e3c06600.22958
Date: Mon, 20 Apr 2020 07:50:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1169848

            Bug ID: 1169848
           Summary: dvdauthor aborts with spumux assertion
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After upgrade to Leap 15.2 from 15.1, the creation of DVD failed via DVDStyler,
showing the following error:
  spumux: subgen-image.c:900: imgfix: assertion `useimg' failed.

And this seems coming from dvdauthor.  Looking around web searches gave me an
instruction to rebuild dvdauthor package with ImageMagick instead of
GraphicsMagick, and it solved the problem indeed.
  https://bugzilla.redhat.com/show_bug.cgi?id=1711698

The latest ImageMagick requires a downstream fix patch.

https://git.archlinux.org/svntogit/community.git/tree/trunk/dvdauthor-0.7.2-imagemagick7.patch?h=packages/dvdauthor

summary: dvdauthor aborts with spumux assertion


--1587500361.0eDa44.17171
Date: Tue, 21 Apr 2020 20:19:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170107

            Bug ID: 1170107
           Summary: VUL-0: CVE-2020-6458,CVE-2020-6459,CVE-2020-6460: multiple security issues fixed in 81.0.4044.122
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_21.html

Fixed in chromium 81.0.4044.122: 8 security fixes

CVE-2020-6459: Use after free in payments
CVE-2020-6460: Insufficient data validation in URL formatting
CVE-2020-6458: Out of bounds read and write in PDFium


body:
--1587565658.F0fB5D4.9022
Date: Wed, 22 Apr 2020 14:27:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170232

            Bug ID: 1170232
           Summary: Kernel spec self obsoletes
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: dcermak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The kernel spec file contains a whole lot of self-obsoletes, which is pointed
out by rpmlint:

kernel-default.x86_64: W: self-obsoletion kernel-bigsmp <= 3.1 obsoletes
kernel-bigsmp = 3.1
kernel-default.x86_64: W: self-obsoletion kernel-bigsmp-base <= 3.1
obsoletes kernel-bigsmp-base = 3.1
kernel-default-devel.x86_64: W: self-obsoletion kernel-bigsmp-devel <= 3.1
obsoletes kernel-bigsmp-devel = 3.1
kernel-default.x86_64: W: self-obsoletion kernel-desktop <= 4.3 obsoletes
kernel-desktop = 4.3
kernel-default.x86_64: W: self-obsoletion kernel-desktop-base <= 4.3
obsoletes kernel-desktop-base = 4.3
kernel-default-devel.x86_64: W: self-obsoletion kernel-desktop-devel <= 4.3
obsoletes kernel-desktop-devel = 4.3
kernel-default.x86_64: W: self-obsoletion kernel-ec2 <= 4.4 obsoletes
kernel-ec2 = 4.4
kernel-default.x86_64: W: self-obsoletion kernel-ec2-base <= 4.4 obsoletes
kernel-ec2-base = 4.4
kernel-default-devel.x86_64: W: self-obsoletion kernel-ec2-devel <= 4.4
obsoletes kernel-ec2-devel = 4.4
kernel-default.x86_64: W: self-obsoletion kernel-smp <= 2.6.17 obsoletes
kernel-smp = 2.6.17
kernel-default.x86_64: W: self-obsoletion kernel-trace <= 3.13 obsoletes
kernel-trace = 3.13
kernel-default.x86_64: W: self-obsoletion kernel-trace-base <= 3.13
obsoletes kernel-trace-base = 3.13
kernel-default-devel.x86_64: W: self-obsoletion kernel-trace-devel <= 3.13
obsoletes kernel-trace-devel = 3.13
kernel-default.x86_64: W: self-obsoletion kernel-xen <= 4.4 obsoletes
kernel-xen = 4.4
kernel-default.x86_64: W: self-obsoletion kernel-xen-base <= 4.4 obsoletes
kernel-xen-base = 4.4
kernel-default-devel.x86_64: W: self-obsoletion kernel-xen-devel <= 4.4
obsoletes kernel-xen-devel = 4.4
The package obsoletes itself.  This is known to cause errors in various tools
and should thus be avoided, usually by using appropriately versioned Obsoletes
and/or Provides and avoiding unversioned ones.

Packages should not self-obsolete, as this breaks rpm and causes bugs like this
one: https://bugzilla.redhat.com/show_bug.cgi?id=1824102. Not sure why this
works with zypper, but it shouldn't.

summary: Kernel spec self obsoletes


--1587583680.EE7DA5310.28945
Date: Wed, 22 Apr 2020 19:28:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170259

            Bug ID: 1170259
           Summary: [HPC,pmix] Header and config files should be 'noarch'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: SLES 15
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: hpc-bugs-at-suse.de
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

The header and config file packages should be set to 'noarch'.


body:
--1587711666.23d4b5dE4.6176
Date: Fri, 24 Apr 2020 07:01:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1170404

            Bug ID: 1170404
           Summary: [trackerbug] lxd 4.0.1 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.0.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515

  * Tweaked and improved the resources API
  * Added lxd cluster remove-raft-node disaster recovery function
  * Implemented ceph rbd/fs disk devices can now be attached to virtual
machines
  * Fixed some data migration issues for users of < 3.0 upgrading to 4.0
directly
  * Fixed file descriptor leakage in exec

summary: [trackerbug] lxd 4.0.1 update


--1587739164.83Bf571.29324
Date: Fri, 24 Apr 2020 14:39:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170466

            Bug ID: 1170466
           Summary: [Build 20200417] openQA test fails in select_patterns Missing package grub2-powerpc-ieee1275 on NET install media
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1240973/modules/sele
                    ct_patterns/steps/8
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: slindomansilla-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Reproducible in scenario opensuse-Tumbleweed-NET-ppc64-install_minimalx@ppc64
https://openqa.opensuse.org/tests/1240973/modules/select_patterns/steps/8

Fails since Build 20200220

Always latest result in this scenario:
https://openqa.opensuse.org/tests/latest?arch=ppc64&distri=opensuse&flavor=NET&machine=ppc64&test=install_minimalx&version=Tumbleweed


--1587821452.1cFE6.13800
Date: Sat, 25 Apr 2020 13:30:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1170505

            Bug ID: 1170505
           Summary: freeradius-server: logratate config override global settings
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: amajer-at-suse.com
          Reporter: amajer-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: gleixner-at-lrz.de, michael-at-stroeder.com
          Found By: ---
           Blocker: ---

logrotate config for radius contains a global section, which overrides the
logrotate.conf defaults for all other logrotate configs sourced after radius
(sssd, samba, ....). This should be avoided. Especially the "su radiusd
radiusd" in this global section is the cause of failing logrotate with
"permission denied", because radiusd may not read the sssd logfiles ;-)


--1587841081.C5ceECad0.26630
Date: Sat, 25 Apr 2020 18:58:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170516

            Bug ID: 1170516
           Summary: compile scram-sha1 login method into msmtp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: spam.catcher@t-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The smtp client msmtp as it is compiled only supports the login methods

plain, external, login, and cram-md5.

Because scram-sha1 is more secure than these, please compile it into msmtp as
well.


body:
--1587914992.eEA67CD03.16345
Date: Sun, 26 Apr 2020 15:29:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170522

            Bug ID: 1170522
           Summary: Kernel Update breaks OSS PCM emulation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: duwe-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After an update from kernel

4.12.14 - lp151.28.44.1 dbf1aead5f7b6ff4d81142f6726b7 to
4.12.14 - lp151.28.48.1 18849d1e9b18ec94e8c8327d490de

programs using the kernel's OSS compatibility layer block hard
(uninterruptibly) after a few writes to /dev/dspX. The older kernel worked fine
in the same configuration, as do both kernels when the native ALSA ABI is used.

summary: Kernel Update breaks OSS PCM emulation


--1587928840.BECd643.29068
Date: Sun, 26 Apr 2020 19:20:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170523

            Bug ID: 1170523
           Summary: [HPC, trilinos] No longer builds with gmake 4.3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: hpc-bugs-at-suse.de
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Trilinos no longer builds with gmake 4.3: Makefile.kokkos and
Makefile.kokkos-kernels use make functions to create include files with c-stype
macros. The hash character '#' no longer needs to be escaped in these functions
to not be considered a comment. The escape characer '\' is now taken literary.
In order to fix this in a backward compatible way, a make variable can be used
instead which itself is set by: 'VAR = \#.


--1587975045.853Ea2.29113
Date: Mon, 27 Apr 2020 08:10:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170553

            Bug ID: 1170553
           Summary: [Build 20200425] gnuhealth UI looks broken with GNOME 3.36
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1245677/modules/gnuh
                    ealth_client_preconfigure/steps/6
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-gnuhealth@64bit fails in
[gnuhealth_client_preconfigure](https://openqa.opensuse.org/tests/1245677/modules/gnuhealth_client_preconfigure/steps/6)

## Test suite description
Maintainer: okurz-at-suse.de
Test scenario for gnuhealth software stack

## Reproducible

Fails since (at least) Build
[20200423](https://openqa.opensuse.org/tests/1245318)

## Expected result

Last good: [20200422](https://openqa.opensuse.org/tests/1243312) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=gnuhealth&version=Tumbleweed)


--1587978928.E76fbE1f5.28725
Date: Mon, 27 Apr 2020 09:15:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170562

            Bug ID: 1170562
           Summary: [Build 20200425] PckageKit returns 'error' if 'nothing to be done'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1245759/modules/vlc/
                    steps/12
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-upgrade_Leap_42.3_kde@64bit fails in
[vlc](https://openqa.opensuse.org/tests/1245759/modules/vlc/steps/12)

pkcon exits with error 7 (transaction error) if a user requests to install a
package that is already there. 'Nothing to be done' is not a transaction error.
This could/should be handled the same way as zypper does and exit 0 (the
'request was fullfilled, the package is now installed; even though we did not
have to do anything for it)

## Test suite description

## Reproducible

Fails since (at least) Build
[20200425](https://openqa.opensuse.org/tests/1245759) (current job)

## Expected result

Last good: [20200423](https://openqa.opensuse.org/tests/1244952) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=upgrade_Leap_42.3_kde&version=Tumbleweed)


--1587991778.2Bf5DaA5.28914
Date: Mon, 27 Apr 2020 12:49:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170587

            Bug ID: 1170587
           Summary: [Build 20200425] Tracker fails to migrate DB from 1.8 to 2.3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1246695/modules/gnom
                    e_music/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-NET-x86_64-upgrade_Leap_42.1_gnome@64bit fails in
[gnome_music](https://openqa.opensuse.org/tests/1246695/modules/gnome_music/steps/18)

The journal contains:
Apr 27 05:50:22 linux-zcle tracker-store[2463]: Cannot initialize database: no
such table: nie:InformationElement_tracker:hasExternalReference

This seems like tracker tried to migrate the DB from the previous version 1.8.x
to current 2.3 format, but failed doing so

## Test suite description

## Reproducible

Fails since (at least) Build
[20200423](https://openqa.opensuse.org/tests/1244701)

## Expected result

Last good: [20200422](https://openqa.opensuse.org/tests/1243223) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=NET&machine=64bit&test=upgrade_Leap_42.1_gnome&version=Tumbleweed)


--1588083863.EbA47FbE0.6998
Date: Tue, 28 Apr 2020 14:24:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1170707

            Bug ID: 1170707
           Summary: VUL-0: CVE-2020-6461, CVE-2020-6462: chromium: update to 81.0.4044.129
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2020-6462: Use after free in task scheduling. Reported by Zhe Jin from
cdsrc of Qihoo 360 on 2020-03-26
CVE-2020-6461: Use after free in storage. Reported by Zhe Jin from cdsrc of
Qihoo 360 on 2020-04-21

Reference

https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html


body:
--1588094558.a213AfC8.12854
Date: Tue, 28 Apr 2020 17:22:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170740

            Bug ID: 1170740
           Summary: mkiss kernel module is missing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: marc-at-marcchamberlin.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

uname -r
4.12.14-lp151.28.48-default

modinfo mkiss
modinfo: ERROR: Module mkiss not found.

The kernel module for mkiss is missing in Leap 15.1. It has always been part of
the default kernel module. What happened to it and why was it removed?

summary: mkiss kernel module is missing


--1588096075.87412f0.20989
Date: Tue, 28 Apr 2020 17:47:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170743

            Bug ID: 1170743
           Summary: phpMyAdmin installation wipes it's sysconfig apache_server_flag entry
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: michaelof-at-rocketmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

phpMyAdmin 4.9.5-lp151.358.1 from server:php:applications.repo
on Apache

phpMyAdmin got's two updates recently. After install, phpMyAdmin website was
not available anymore.

My findings so far:

As i'm using phpMyAdmin only via ssh port forwarding from "localhost", only my
Apache vhost file for localhost contains the neccesary include:

Include /etc/apache2/conf.d/phpMyAdmin.conf

This included files starts with:

<IfDefine phpMyAdmin>
    <IfModule mod_alias.c>
        Alias /phpMyAdmin /usr/share/phpMyAdmin
    </IfModule>
</IfDefine>

And flag "phpMyAdmin" should be defined, afaik following our OpenSuse
standards, in /etc/sysconfig/apache2, value for "APACHE_SERVER_FLAGS". Did this
by yast.

--> Values is MISSING / wiped out after "zypper update", with the last two
updates, had to add again.


--1588135355.c62Aa3a70.21190
Date: Wed, 29 Apr 2020 04:42:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170764

            Bug ID: 1170764
           Summary: VUL-1: CVE-2020-1774: otrs: when the user downloads PGP or S/MIME keys/certificates, the exported file has same name for private and public keys, possibly leading to confusion
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/258732/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-1774

When the user downloads PGP or S/MIME keys/certificates, the exported file has
same name for private and public keys. Therefore it's possible to mix them and
to send private key to the third-party instead of public key. This issue
affects ((OTRS)) Community Edition: 5.0.42 and prior versions, 6.0.27 and prior
versions. OTRS: 7.0.16 and prior versions.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-1774
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1774
https://otrs.com/release-notes/otrs-security-advisory-2020-11/


--1588166126.Dc8D0.20299
Date: Wed, 29 Apr 2020 13:15:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170826

            Bug ID: 1170826
           Summary: Go packages miss binutils-gold dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On arm and aarch64, 'go' requires 'binutils-gold' dependency at runtime, but go
packages only require it as BuildRequires. So, binutils-gold must be installed
manually, which breaks some builds in OBS, such as rclone [0].

Without 'binutils-gold', we ge the following error:
[  138s] /usr/lib64/go/1.11/pkg/tool/linux_arm64/link: running gcc failed: exit
status 1
[  138s] collect2: fatal error: cannot find 'ld'

So, we need to add 'Requires: binutils-gold' to all go1.x packages.

[0]: https://build.opensuse.org/package/show/network/rclone


body:
--1588168822.a561E0.1103
Date: Wed, 29 Apr 2020 14:00:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170831

            Bug ID: 1170831
           Summary: GCC 10: netpbm build fails on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/netpbm/standard/i586

with:

[  123s] == pbm-misc-converters.test ==
[  123s] pbmtoibm23xx: opening 'testgrid.pbm'
[  123s] pbm-misc-converters.test: FAILURE

summary: GCC 10: netpbm build fails on i586


body:
--1588169049.0eFE0.2559
Date: Wed, 29 Apr 2020 14:04:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170834

            Bug ID: 1170834
           Summary: GCC 10: subversion build fails on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/subversion/standard/i586

fails with:
[ 8778s] FAIL:  fs-fs-pack-test 3: read from a packed FSFS filesystem

summary: GCC 10: subversion build fails on i586


--1588173889.1EFbBe644.6098
Date: Wed, 29 Apr 2020 15:24:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170849

            Bug ID: 1170849
           Summary: config.{guess,sub} are updated if aarch64/ppc64le/riscv64 supports are missing but it breaks on cargo/rust packaging
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com, fvogt-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 837103
  --> http://bugzilla.opensuse.org/attachment.cgi?id=837103&action=edit
Script proposal to handle '.cargo-checksum.json' files

To build packages in OBS, config.{guess,sub} are updated if
aarch64/ppc64le/riscv64 supports are missing in the file.
It works properly for most packages, but with packages using cargo/rust, it
breaks, because checksums are used to verify the files.
So, packages like bat, rav1e, and more are broken on aarch64 (and ppc64le and
riscv64).

So, we need to update the script that update config.{guess,sub} to handle
'.cargo-checksum.json' files.

In attachment, I added a script to handle '.cargo-checksum.json' files.


--1588179662.FCBf2.22954
Date: Wed, 29 Apr 2020 17:01:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1170856

            Bug ID: 1170856
           Summary: gnu-free-fonts fails to build with fontforge update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

gnu-free-fonts started fails to build after staged with fontforge update[1]
from SLE. Note that, gnu-free-fonts was from SLE also, the fix need submit to
SLE.

[   38s] + make -j4 ttf
[   38s] make[1]: Entering directory
'/home/abuild/rpmbuild/BUILD/freefont-20120503/sfd'
[   38s] FontForge program is required to build FreeFont
[   38s] make[1]: *** [Makefile:26: FreeMonoBold.ttf] Error 1
[   38s] make[1]: *** Waiting for unfinished jobs....
[   38s] FontForge program is required to build FreeFont
[   38s] make[1]: *** [Makefile:26: FreeMonoOblique.ttf] Error 1
[   38s] FontForge program is required to build FreeFont
[   38s] make[1]: *** [Makefile:26: FreeMonoBoldOblique.ttf] Error 1
[   38s] FontForge program is required to build FreeFont
[   38s] make[1]: *** [Makefile:26: FreeMono.ttf] Error 1
[   38s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/freefont-20120503/sfd'
[   38s] make: *** [Makefile:23: ttf] Error 2
[   38s] error: Bad exit status from /var/tmp/rpm-tmp.uWAPeK (%build)

[1] https://build.opensuse.org/request/show/796680


--1588228620.75c01.19520
Date: Thu, 30 Apr 2020 06:37:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1170886

            Bug ID: 1170886
           Summary: YaST XML serializer does not work reliably
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: jreidinger-at-suse.com
          Reporter: jreidinger-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

In general issue is that YaST uses its own serializer of data to XML and back.
It is used for autoyast and product profiles. Issue is that for some corner
cases it does not work reliably and loose data. Example is empty xml element,
nil values or non string keys.

We discussed solutions and decision is that object that goes to XML and back
should be always same or exception is raises if data is invalid. This needs to
adapt XML serializer and also some skelcds and system roles that uses invalid
elements which was in past silently ignored.


--1588276525.7d3D08.2760
Date: Thu, 30 Apr 2020 19:55:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170956

            Bug ID: 1170956
           Summary: package build set wrong value for macro %suse_version
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package build currently set the value of macro %suse_version to 1321
(as defined in /usr/lib/build/configs/sl15.5.conf).
This causes problems when building locally some packages which have in their
spec file something like:

  # Enable for tumbleweed only for now
  %if 0%{?suse_version} >= 1550

%suse_version in /usr/lib/build/configs/sl15.5.conf should be 1550 or higher
value (whatever is appropriate).


body:
--1588317322.530bEeEa0.1690
Date: Fri, 1 May 2020 07:15:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1170968

            Bug ID: 1170968
           Summary: GCC 10: xen build fails on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/xen/standard/i586

with:

[  118s] xenpmd.c: In function 'get_next_battery_file':
[  118s] xenpmd.c:92:37: error: '%s' directive output may be truncated writing
between 4 and 2147483645 bytes into a region of size 271
[-Werror=format-truncation=]
[  118s]    92 |     #define BATTERY_STATE_FILE_PATH "/tmp/battery/%s/state"
[  118s]       |                                     ^~~~~~~~~~~~~~~~~~~~~~~
[  118s] xenpmd.c:117:52: note: in expansion of macro 'BATTERY_STATE_FILE_PATH'
[  118s]   117 |             snprintf(file_name, sizeof(file_name),
BATTERY_STATE_FILE_PATH,
[  118s]       |
^~~~~~~~~~~~~~~~~~~~~~~
[  118s] xenpmd.c:92:51: note: format string is defined here
[  118s]    92 |     #define BATTERY_STATE_FILE_PATH "/tmp/battery/%s/state"
[  118s]       |                                                   ^~
[  118s] In file included from /usr/include/stdio.h:867,
[  118s]                  from xenpmd.c:35:
[  118s] /usr/include/bits/stdio2.h:67:10: note: '__builtin___snprintf_chk'
output between 24 and 2147483665 bytes into a destination of size 284
[  118s]    67 |   return __builtin___snprintf_chk (__s, __n,
__USE_FORTIFY_LEVEL - 1,
[  118s]       |
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[  118s]    68 |        __bos (__s), __fmt, __va_arg_pack ());
[  118s]       |        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[  118s] xenpmd.c:91:36: error: '%s' directive output may be truncated writing
between 4 and 2147483645 bytes into a region of size 271
[-Werror=format-truncation=]
[  118s]    91 |     #define BATTERY_INFO_FILE_PATH "/tmp/battery/%s/info"
[  118s]       |                                    ^~~~~~~~~~~~~~~~~~~~~~
[  118s] xenpmd.c:114:52: note: in expansion of macro 'BATTERY_INFO_FILE_PATH'
[  118s]   114 |             snprintf(file_name, sizeof(file_name),
BATTERY_INFO_FILE_PATH,
[  118s]       |
^~~~~~~~~~~~~~~~~~~~~~
[  118s] xenpmd.c:91:50: note: format string is defined here
[  118s]    91 |     #define BATTERY_INFO_FILE_PATH "/tmp/battery/%s/info"
[  118s]       |                                                  ^~
[  118s] In file included from /usr/include/stdio.h:867,
[  118s]                  from xenpmd.c:35:
[  118s] /usr/include/bits/stdio2.h:67:10: note: '__builtin___snprintf_chk'
output between 23 and 2147483664 bytes into a destination of size 284
[  118s]    67 |   return __builtin___snprintf_chk (__s, __n,
__USE_FORTIFY_LEVEL - 1,
[  118s]       |
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[  118s]    68 |        __bos (__s), __fmt, __va_arg_pack ());
[  118s]       |        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

summary: GCC 10: xen build fails on i586


--1588509314.dfc4B5.16750
Date: Sun, 3 May 2020 12:35:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171016

            Bug ID: 1171016
           Summary: openQA test fails in pam_sh on modify group access test on 'wheel' group
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/1252681/modules/pam_
                    sh/steps/20
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    josef.moellers-at-suse.com
          Found By: ---
           Blocker: ---

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-AArch64-aarch64-jeos-extra@aarch64-HD24G fails in
[pam_sh](https://openqa.opensuse.org/tests/1252681/modules/pam_sh/steps/20)

whereas it passes properly in extra_tests_in_textmode@aarch64:
https://openqa.opensuse.org/tests/1252841#step/pam_sh/20

The only test in error is on modify group access test on 'wheel' group.

So, pam package is probably missing an explicit dependency? Maybe on
system-group-wheel package?


--1588581391.dCce8eC3.7011
Date: Mon, 4 May 2020 08:36:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1171041

            Bug ID: 1171041
           Summary: VUL-1: CVE-2020-12050: Packaging vulnerability in sqliteODBC exposing to local privilege escalation to root
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mpluskal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has
a race condition leading to root privilege escalation because any user can
replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an
arbitrary library.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1825762
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12050
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-12050.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12050
http://www.ch-werner.de/sqliteodbc/
https://sysdream.com/news/lab/


body:
--1588588969.1A74160.3087
Date: Mon, 4 May 2020 10:42:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171061

            Bug ID: 1171061
           Summary: Update paraview to version 5.6.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: badshah400-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'd like to push an update for paraview on openSUSE:Leap:15.1 to the last
upstream patch version in the series version 5.6.3. No new features are
introduced, but version 5.6.1 (which is included as part of this update) has
quite a number of important bug fixes:
https://blog.kitware.com/paraview-5-6-1-release-notes/

Maintenance,
Please advise whether I can go ahead.

summary: Update paraview to version 5.6.2


--1588611808.f0aC0.572
Date: Mon, 4 May 2020 17:03:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171113

            Bug ID: 1171113
           Summary: Virtualization/libvirt: Bug virsh fails to connect with xen:///system, when host uses module daemons; upstream FIX
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
               URL: https://www.redhat.com/archives/libvirt-users/2020-May
                    /msg00000.html
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: jfehlig-at-suse.com
          Reporter: pgnet.dev-at-gmail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

current virsh fails to connect with xen:///system, when host uses module
daemons.

reported here

 virsh connect to xen:///system fails: "error: internal error: Unexpected
driver type 'Xen' opened" ?
  https://www.redhat.com/archives/libvirt-users/2020-May/msg00000.html

id'd as a bug.

upstream patch provided here

 [libvirt PATCH] remote: fix driver name check for libxl driver
  https://www.redhat.com/archives/libvir-list/2020-May/msg00066.html


body:
--1588616549.32B50.18278
Date: Mon, 4 May 2020 18:22:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171123

            Bug ID: 1171123
           Summary: GCC 10: qemu build fails on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/qemu/standard/i586

with:
[  861s] drivers/net/intelvf.c: In function 'intelvf_mbox_poll':
[  861s] drivers/net/intelvf.c:80:13: error: array subscript i is outside array
bounds of 'uint32_t[0]' {aka 'unsigned int[]'} [-Werror=array-bounds]
[  861s]    80 |   msg->dword[i] = readl ( intel->regs + intel->mbox.mem +
[  861s]       |   ~~~~~~~~~~^~~
[  861s] In file included from drivers/net/intelvf.c:32:
[  861s] drivers/net/intelvf.h:135:11: note: while referencing 'dword'
[  861s]   135 |  uint32_t dword[0];
[  861s]       |           ^~~~~
[  861s] drivers/net/intelvf.c:98:20: note: defined here 'msg'
[  861s]    98 |  union intelvf_msg msg;
[  861s]       |                    ^~~

It's analyzed in GCC bugzilla:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=94940#c4

summary: GCC 10: qemu build fails on i586


--1588647537.Dc0aF4E11.15095
Date: Tue, 5 May 2020 02:58:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1171139

            Bug ID: 1171139
           Summary: gcc10 causes enum related compilation failure for ipxe component of qemu
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: brogers-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In exploring gcc10 issues for qemu, I discovered this error compiling the ipxe
firmware:

drivers/infiniband/flexboot_nodnic.c: In function ‘flexboot_nodnic_create_qp’:
drivers/infiniband/flexboot_nodnic.c:368:53: error: implicit conversion from
‘enum ib_queue_pair_type’ to ‘nodnic_queue_pair_type’ [-Werror=enum-conversion]
  368 |  status = nodnic_port_create_qp(&port->port_priv, qp->type,
      |                                                   ~~^~~~~~
drivers/infiniband/flexboot_nodnic.c: In function ‘flexboot_nodnic_destroy_qp’:
drivers/infiniband/flexboot_nodnic.c:409:45: error: implicit conversion from
‘enum ib_queue_pair_type’ to ‘nodnic_queue_pair_type’ [-Werror=enum-conversion]
  409 |  nodnic_port_destroy_qp(&port->port_priv, qp->type,
      |                                           ~~^~~~~~
cc1: all warnings being treated as errors

These two enums are tracking basically the same states (using the same order
and starting point), and so casting one to the other, which addresses this
issue, should be acceptable.

I will see about getting this submitted upstream.


--1588648190.Fa5e3.18738
Date: Tue, 5 May 2020 03:09:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1171140

            Bug ID: 1171140
           Summary: gcc10 causes link error for ipxe component of qemu
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: brogers-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In exploring gcc10 issues for building qemu, I get the following linker error
linking the ipxe firmware:

ld: bin/blib.a(dmfe.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld: bin/blib.a(epic100.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld:
bin/blib.a(pxe_preboot.o):/home/brogers/osr/git/ipxe/src/include/ipxe/isapnp.h:237:
multiple definition of `isapnp_read_port'; bin/blib.a(isapnp.o):(.bss+0x0):
first defined here
ld: bin/blib.a(sis900.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld: bin/blib.a(sundance.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld: bin/blib.a(tlan.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld: bin/blib.a(tulip.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
ld: bin/blib.a(w89c840.o):(.bss+0x0): multiple definition of `_shared_bss';
bin/blib.a(davicom.o):(.bss+0x0): first defined here
make: *** [Makefile.housekeeping:1192: bin/ipxe.dsk.tmp] Error 1
This can be tracked to the change in the gcc10 default from previous versions
from an implicit -fcommon to -fno-common.

The fix I believe will be acceptable to upstream is to simply be explicit about
the need for -fcommon, since the above is intended. See the following git grep
__shared in the git repo:
src/drivers/net/davicom.c:} davicom_bufs __shared;
src/drivers/net/dmfe.c:} dmfe_bufs __shared;
src/drivers/net/epic100.c:} epic100_bufs __shared;
src/drivers/net/sis900.c:} sis900_bufs __shared;
src/drivers/net/sundance.c:} rx_tx_buf __shared;
src/drivers/net/tlan.c:} tlan_buffers __shared;
src/drivers/net/tulip.c:} tulip_bss __shared __attribute__ ((aligned(4)));
src/drivers/net/w89c840.c:} w89c840_buf __shared;
src/include/compiler.h: *   } my_static_data __shared;
src/include/compiler.h:#define __shared __asm__ ( "_shared_bss" ) __aligned


--1588665415.6D03b1.32720
Date: Tue, 5 May 2020 07:56:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171146

            Bug ID: 1171146
           Summary: missing patterns for ppc64le microos and kubic isos
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PowerPC
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: normand-at-linux.vnet.ibm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 837390
  --> http://bugzilla.opensuse.org/attachment.cgi?id=837390&action=edit
y2log_microos_ppc64le_missing_patterns.log.gz

missing patterns for ppc64le microos and kubic isos

I am testing for the first time the microos/kubic isos for TW ppc64le (1)
and both failed at install time with missing pattern error in y2log.

=== extract of attached y2log_microos_ppc64le_missing_patterns.log.gz
2020-05-04 15:32:42 <3> install(2939) [Ruby] modules/Packages.rb:1866 Mandatory
pattern microos_base does not exist
2020-05-04 15:32:42 <3> install(2939) [Ruby] modules/Packages.rb:1866 Mandatory
pattern microos_defaults does not exist
2020-05-04 15:32:42 <3> install(2939) [Ruby] modules/Packages.rb:1866 Mandatory
pattern microos_hardware does not exist
2020-05-04 15:32:42 <3> install(2939) [Ruby] modules/Packages.rb:1866 Mandatory
pattern microos_apparmor does not exist
2020-05-04 15:32:42 <3> install(2939) [Ruby] modules/Packages.rb:1866 Mandatory
pattern container_runtime does not exist
===

I did not found references of patterns in related kiwi files (2)
But related pattern packages seem to be properly built (3)

I assume there is something missing, but do not know what/where.

(1)
https://build.opensuse.org/package/show/openSUSE:Factory:PowerPC/000product:openSUSE-MicroOS-dvd5-dvd-ppc64le

(2)
https://build.opensuse.org/package/view_file/openSUSE:Factory:PowerPC/000product/openSUSE-MicroOS-dvd5-kubic-dvd-ppc64le.kiwi?expand=1

https://build.opensuse.org/package/view_file/openSUSE:Factory:PowerPC/000product/openSUSE-MicroOS-dvd5-dvd-ppc64le.kiwi?expand=1

(3)
https://build.opensuse.org/package/show/openSUSE:Factory:PowerPC/patterns-microos

https://build.opensuse.org/package/show/openSUSE:Factory:PowerPC/patterns-containers


body:
--1588674087.CBF10.31364
Date: Tue, 5 May 2020 10:21:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171164

            Bug ID: 1171164
           Summary: permission handling: %_libexecdir changes from /usr/lib to /usr/libexec
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In accordance to FHS-3.0, libexecdir is being changed from /usr/lib to
/usr/libexec.

The permission definitiions lists files in /usr/lib, which are now moving, e.g:

the dbus-1 package now fails with:

[  277s] dbus-1.x86_64: E: permissions-file-setuid-bit (Badness: 10000)
/usr/libexec/dbus-1/dbus-daemon-launch-helper is packaged with setuid/setgid
bits (04750)
[  277s] If the package is intended for inclusion in any SUSE product
[  277s] please open a bug report to request review of the program by the
[  277s] security team. Please refer to
[  277s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[  277s] more information.

The file used to be /usr/lib/dbus-1/dbus-daemon-launch-helper (on 32bit and 64
bit systems)

We need to list those /usr/lib/* things also as /usr/libexec (for a migration
time probably in parallel, to not dead-lock future changes)

pkgs: mgetty permissions sendmail squid


--1588693718.a4eAC0.4150
Date: Tue, 5 May 2020 15:48:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1171213

            Bug ID: 1171213
           Summary: python-psycopg2 fails to build in Leap 15.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

python-psycopg2 fails to build Leap 15.2[1], the build fail is caused by
updated postgresql stack, since python-psycopg2 was SLE package, we need to fix
it in SLE first. The relevant SR in Leap is [2]

[1] https://build.opensuse.org/package/show/openSUSE:Leap:15.2/python-psycopg2

[2] https://build.opensuse.org/request/show/794393


--1588729386.27B63C0.27562
Date: Wed, 6 May 2020 01:43:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171234

            Bug ID: 1171234
           Summary: WICKED, Teamed interface ,  for active-backup cannot set hwaddr-policy
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: psarnack-at-yahoo.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

cannot set hwaddr_policy for active-backup teamed interface .

example:
STARTMODE=auto
BOOTPROTO=static
IPADDR="192.168.0.20"
TEAM_RUNNER=activebackup
TEAM_AB_HWADDR_POLICY="by_active"

TEAM_PORT_DEVICE_0="eth0"
TEAM_PORT_DEVICE_1="eth1"

TEAM_LW_NAME=ethtool
TEAM_LW_ETHTOOL_DELAY_UP="10"
TEAM_LW_ETHTOOL_DELAY_DOWN="10"

event if hwaddrpolicy is set to "by_active" in config file , interface is set
to default "allsame" and and all teamed network interfaces share same mac
address.

also following message appear in  the /var/log/messages:
"wickedd-nanny[710]: ni_dbus_serialize_xml_dict: ignoring unknown dict element
"hwaddr_policy"

problem/solution:

update /usr/share/wicked/schema/team.xml

old: <hwaddr-policy     type="builtin-team-ab-hwaddr-policy" />
new: <hwaddr_policy     type="builtin-team-ab-hwaddr-policy" />

*note "hwaddr-policy" vs "hwaddr_policy"

after above changes works correctly.


body:
--1588749896.1Ce5B0.8802
Date: Wed, 6 May 2020 07:24:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171246

            Bug ID: 1171246
           Summary: Internal sound card not working on Bay Trail chip set (sound card chtmax98090)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: gtettamanzi-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 837439
  --> http://bugzilla.opensuse.org/attachment.cgi?id=837439&action=edit
Alsa info default kernele no ucm folder added

Good day.

I'm running 15.2 Plasma on a re purposed Chromebook Asus C300, Bay Trail hwid
QUAWKS, sound cards chtmax98090 and HDA Intel PCH.

The latter, hdmi sound device, is detected and it is working.

Out of the box, the chtmax98090 is not presented in pulseaudio devices and
therefore is not available.

I added the /usr/share/alsa/ucm/chtmax98090/ which is available from GitHub
(https://github.com/plbossart/UCM) - I patched the HiFi.conf (see attachments)
to make intenal mics working.

After reboot, the chtmax98090 is listed in pulseaudio devices but when selected
is not playing any sound.

I installed the vanilla kernel 5.7 from Kernel:vanilla and rebooted: success,
the chtmax98090 is working.

pkgs: alsa kernel-source


--1588756603.08ffcE886.10739
Date: Wed, 6 May 2020 09:16:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1171255

            Bug ID: 1171255
           Summary: leiningen does not work: ClassNotFoundException
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mvetter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

An user wrote me an email regarding that leiningen does not work anymore.

> lein repl                                                                                > Error: Could not find or load main class clojure.main                                                                                > Caused by: java.lang.ClassNotFoundException: clojure.main


--1588765419.abc060.11576
Date: Wed, 6 May 2020 11:43:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171271

            Bug ID: 1171271
           Summary: VUL-1: CVE-2020-12672: GraphicsMagick: heap-based buffer overflow in ReadMNGImage in coders/png.c.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/259094/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-12672

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage
in coders/png.c.

References:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19025
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12672
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12672


--1588775819.Ef1A33.6727
Date: Wed, 6 May 2020 14:36:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171293

            Bug ID: 1171293
           Summary: WebRTC apps manipulating mic gain to 100%
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: sb56637-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi there, recently I've been running into major problems with Electron apps for
the Linux desktop (Microsoft Teams and Riot.im) modifying my mic input levels.
Also Chromium/Chrome do the same thing during WebRTC calls, they raise my mic
level to 100%, thus completely saturating the audio and making it unusable. I
drop it back down manually, but within a few seconds it creeps back up to 100%
again. In my case it tries to max out the mic gain, but I've read lots of other
user reports where it tries to lower the user's mic gain to an unusable level.

Sometimes this is the result of a "smart" VoIP program like Skype that has an
option to allow the program to adjust the audio device levels. But my problem
is that all my VoIP apps use WebRTC, which appears to include its own
implementation of AGC as part of the protocol, and it's obviously buggy in
anything based on Chromium (Chrome, electron apps, etc.), and there's no way to
disable it. There have been bug reports to Chrome(ium) for years about this and
they obviously don't care. Firefox doesn't exhibit this behavior, but
unfortunately a lot of WebRTC apps are either Electron (based on Chromium) or
else they don't support Firefox very well. Ultimately, I think this behavior
should be controllable via PulseAudio, since we can't assume that all apps with
have sane behavior.

In Windows there's an option to not allow programs to control a specific
device. It appears this should be possible in
`/usr/share/pulseaudio/alsa-mixer/paths/analog-input-internal-mic.conf` by
changing `volume = merge` to `volume = off` or `volume = XX` according to what
I've read. But since the profiles are under `/usr/share/` they're obviously not
meant to be user configurable. Is there any way that these profiles could be
moved to `/etc/pulse` and/or `~/.config/pulse/`? Or is there any other
workaround?

This is a major issue that is making it almost impossible for me to work from
home.... Thanks, I appreciate the help.


--1588799669.fF3dE1.23276
Date: Wed, 6 May 2020 21:14:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171315

            Bug ID: 1171315
           Summary: YaST2 apparmor profile creation: "View profile" does nothing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
                CC: yast2-maintainers-at-suse.de
          Found By: ---
           Blocker: ---

When creating a new AppArmor profile in YaST (for example for vsftpd), there's
the option to choose an existing inactive local profile.

In that dialog, the "View Profile" button does nothing - while it is expected
to show the inactive local profile.

The problem is that aa-genprof uses 'less' to display that profile, even in
JSON mode.

@YaST team: Since this affects YaST, I'm CC'ing you FYI.
You don't need to do anything - I can / have to fix this on the AppArmor side.
The fix can even use the existing JSON layout, so no changes are needed on the
YaST side (tested with the already-fixed aa-genprof).

This bug affects all AppArmor versions, including those in Leap.


--1588812074.0fbE0.15041
Date: Thu, 7 May 2020 00:41:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171321

            Bug ID: 1171321
           Summary: nftables crashes when trying to add rule to nonexistant chain
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: jengelh-at-inai.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Core was generated by `nft add rule inet traffic-filter input tcp dport { 22,
80, 443 } accept'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  erec_print (octx=octx@entry=0x55776a4222c0, erec=erec@entry=0x55776a425780,
debug_mask=debug_mask@entry=0) at ../../src/erec.c:95
95        switch (indesc->type) {
(gdb) bt
#0  erec_print (octx=octx@entry=0x55776a4222c0, erec=erec@entry=0x55776a425780,
debug_mask=debug_mask@entry=0) at ../../src/erec.c:95
#1  0x00007f0eadab847a in erec_print_list (octx=octx@entry=0x55776a4222c0,
list=list@entry=0x7ffd930c3ff0, debug_mask=0) at ../../src/erec.c:190
#2  0x00007f0eadac2915 in nft_run_cmd_from_buffer (nft=0x55776a4222a0,
buf=<optimized out>) at ../../src/libnftables.c:459
#3  0x0000557769ea68a3 in main (argc=14, argv=<optimized out>) at
../../src/main.c:453
(gdb) l
90        char *pbuf = NULL;
91        unsigned int i, end;
92        FILE *f;
93        int l;
94
95        switch (indesc->type) {
96        case INDESC_BUFFER:
97        case INDESC_CLI:
98            line = indesc->data;
99            *strchrnul(line, '\n') = '\0';
(gdb) p indesc
$1 = (const struct input_descriptor *) 0x0
(gdb) quit


--1588840655.c0FB40.24285
Date: Thu, 7 May 2020 08:37:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171341

            Bug ID: 1171341
           Summary: texlive-kpathsea-bin rpm output with wrong permissions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: marina.latini-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,
this is the additional rpm output while installing the package update:

-----------------
Installing: texlive-kpathsea-bin-2019.20190407.svn50281-68.4.x86_64
..........................................................................................................................................................................[done]
Additional rpm output:
setting /usr/lib/mktex/public to root:mktex 2755. (wrong permissions 0755)
-----------------

Information for package texlive-kpathsea-bin:
---------------------------------------------
Repository     : Main Repository (OSS)
Name           : texlive-kpathsea-bin
Version        : 2019.20190407.svn50281-68.4
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 112.5 KiB
Installed      : Yes
Status         : up-to-date
Source package : texlive-2019.20190407-68.4.src
Summary        : Binary files of kpathsea
Description    :
    Binary files of kpathsea

System info:
------------
NAME="openSUSE Tumbleweed"
VERSION_ID="20200501"
------------


--1588855257.f82150.12756
Date: Thu, 7 May 2020 12:40:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1171368

            Bug ID: 1171368
           Summary: [Build 20200506] openQA ppc64 test fails with new ruby 2.7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1258904/modules/welc
                    ome/steps/7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Ruby
          Assignee: ruby-devel-at-suse.de
          Reporter: normand-at-linux.vnet.ibm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[Build 20200506] openQA ppc64 test fails with new ruby 2.7

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-ppc64-gpt@ppc64 fails in
[welcome](https://openqa.opensuse.org/tests/1258904/modules/welcome/steps/7)

This is the first openQA tests for TW PowerPC since new ruby 2.7

reported message:
===
YaST2
...
internal error
Caller:
/mounts/mp_0001/usr/lib64/ruby/2.7.0/rubygems/core_ext/kernel_requires.rb:92:in
`require'
Details: cannot load such file