--17530952301.b7C0CCCe.1076
Date: Mon, 21 Jul 2025 10:53:50 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246806

            Bug ID: 1246806
           Summary: trackerbug: packages embed rebuild-counter
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: Development
           Blocker: ---

While working on reproducible builds for SLFO and openSUSE, I found that
many of our packages embed rebuild counters through the rpm %release macro
and that makes build-tree pruning ineffective, which is especially bad
for ring0 and ring1 packages.

As a solution, we can replace it with
%define rbrelease $(echo %{release} | sed 's/\.[0-9][0-9]*$//' )

The list I found is

    apptainer
    cloud-init
    containerized-data-importer
    datamash
    dracut
    gnutls
    google-osconfig-agent
    java-*-openjdk
    kernel
    kubevirt
    libgcrypt
    libica
    mdadm
    mozilla-nss
    NetworkManager-l2tp
    notary
    openssl-3
    pacemaker
    passt
    PrusaSlicer
    rook
    samba
    sbcl
    selinux-policy
    systemd
    w3c-markup-validator
    xen

and maybe toolchain effects from ocaml-rpm-macros.

On the positive side, validating existing binaries does work,
because we re-use the same old %release value there.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17530952301.b7C0CCCe.1076
Date: Mon, 21 Jul 2025 10:53:50 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246806

          Summary
          trackerbug: packages embed rebuild-counter

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

While working on reproducible builds for SLFO and openSUSE, =
I found that
many of our packages embed rebuild counters through the rpm %release macro
and that makes build-tree pruning ineffective, which is especially bad
for ring0 and ring1 packages.

As a solution, we can replace it with
%define rbrelease $(echo %{release} | sed 's/\.[0-9][0-9]*$//' )

The list I found is

    apptainer
    cloud-init
    containerized-data-importer
    datamash
    dracut
    gnutls
    google-osconfig-agent
    java-*-openjdk
    kernel
    kubevirt
    libgcrypt
    libica
    mdadm
    mozilla-nss
    NetworkManager-l2tp
    notary
    openssl-3
    pacemaker
    passt
    PrusaSlicer
    rook
    samba
    sbcl
    selinux-policy
    systemd
    w3c-markup-validator
    xen

and maybe toolchain effects from ocaml-rpm-macros.

On the positive side, validating existing binaries does work,
because we re-use the same old %release value there.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17530952301.b7C0CCCe.1076--


--17530971240.Fd03Aee74.1199
Date: Mon, 21 Jul 2025 11:25:24 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246812

            Bug ID: 1246812
           Summary: VUL-0: CVE-2025-7783: python-nbdime,python-ipympl,python-bqplot: form-data: unsafe Math.random() function is used to select a boundary value for multipart form-encoded data
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/464607/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-7783:8.7:(AV:N/AC:H/PR:N/UI:N/S
                    :C/C:H/I:H/A:N)
                    CVSSv4:SUSE:CVE-2025-7783:9.4:(AV:N/AC:L/AT:P/PR:N/UI:
                    N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N)
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: python-maintainers-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1246810
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Use of Insufficiently Random Values vulnerability in form-data allows HTTP
Parameter Pollution (HPP). This vulnerability is associated with program fi=
les
lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-7783
https://www.cve.org/CVERecord?id=3DCVE-2025-7783
https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd34=
5a21d8d0fd0
https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-7=
8g4
https://bugzilla.redhat.com/show_bug.cgi?id=3D2381959
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17530971240.Fd03Aee74.1199
Date: Mon, 21 Jul 2025 11:25:24 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246812

          Summary
          VUL-0: CVE-2025-7783: python-nbdime,python-ipympl,python-bqpl=
ot: form-data: unsafe Math.random() function is used to select a boundary v=
alue for multipart form-encoded data

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/464607/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-7783:8.7:(AV:N/AC:H/PR:N/UI:N/S:C/C:H/=
I:H/A:N) CVSSv4:SUSE:CVE-2025-7783:9.4:(AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/=
VA:N/SC:H/SI:H/SA:N)

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          python-maintainers@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1246810

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Use of Insufficiently Random Values vulnerability in form-da=
ta allows HTTP
Parameter Pollution (HPP). This vulnerability is associated with program fi=
les
lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-7783
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-7783
https://github.com/form-data/form-data/commit/3d172=
3080e6577a66f17f163ecd345a21d8d0fd0
https://github.com/form-data/form-data/security/advisories/=
GHSA-fjxv-7rqg-78g4
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2381959

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17530971240.Fd03Aee74.1199--


--17530971329.e35dDA.1199
Date: Mon, 21 Jul 2025 11:25:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246814

            Bug ID: 1246814
           Summary: VUL-0: CVE-2025-7783: python-jupyterlab-templates,python-jupyter-ydoc: form-data: unsafe Math.random() function is used to select a boundary value for multipart form-encoded data
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/464607/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-7783:8.7:(AV:N/AC:H/PR:N/UI:N/S
                    :C/C:H/I:H/A:N)
                    CVSSv4:SUSE:CVE-2025-7783:9.4:(AV:N/AC:L/AT:P/PR:N/UI:
                    N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N)
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: python-maintainers-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1246810
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Use of Insufficiently Random Values vulnerability in form-data allows HTTP
Parameter Pollution (HPP). This vulnerability is associated with program fi=
les
lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-7783
https://www.cve.org/CVERecord?id=3DCVE-2025-7783
https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd34=
5a21d8d0fd0
https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-7=
8g4
https://bugzilla.redhat.com/show_bug.cgi?id=3D2381959
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17530971329.e35dDA.1199
Date: Mon, 21 Jul 2025 11:25:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246814

          Summary
          VUL-0: CVE-2025-7783: python-jupyterlab-templates,python-jupy=
ter-ydoc: form-data: unsafe Math.random() function is used to select a boun=
dary value for multipart form-encoded data

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/464607/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-7783:8.7:(AV:N/AC:H/PR:N/UI:N/S:C/C:H/=
I:H/A:N) CVSSv4:SUSE:CVE-2025-7783:9.4:(AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/=
VA:N/SC:H/SI:H/SA:N)

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          python-maintainers@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1246810

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Use of Insufficiently Random Values vulnerability in form-da=
ta allows HTTP
Parameter Pollution (HPP). This vulnerability is associated with program fi=
les
lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-7783
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-7783
https://github.com/form-data/form-data/commit/3d172=
3080e6577a66f17f163ecd345a21d8d0fd0
https://github.com/form-data/form-data/security/advisories/=
GHSA-fjxv-7rqg-78g4
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2381959

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17530971329.e35dDA.1199--


body:
--17531070030.eaa5df.1781
Date: Mon, 21 Jul 2025 14:10:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246830

            Bug ID: 1246830
           Summary: readline update to 8.3 + bash 5.3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Updating readline to 8.3 (https://build.opensuse.org/request/show/1294140 )=
 and
bash 5.3 ( https://build.opensuse.org/request/show/1294133) is breaking at
least:

* libssh:test
* qemu
* util-linux:systemd

I'm adding maintainers and build log to see what can be done in each failur=
e.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17531070030.eaa5df.1781
Date: Mon, 21 Jul 2025 14:10:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246830

          Summary
          readline update to 8.3 + bash 5.3

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Updating readline to 8.3 (https://build.opensuse.org/request/show/1294140</=
a> ) and
bash 5.3 ( http=
s://build.opensuse.org/request/show/1294133) is breaking at
least:

* libssh:test
* qemu
* util-linux:systemd

I'm adding maintainers and build log to see what can be done in each failur=
e.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17531070030.eaa5df.1781--

pkgs: qemu uid_wrapper util-linux

summary: readline update to 8.3 + bash 5.3


--17531325001.bD75055f8.368
Date: Mon, 21 Jul 2025 21:15:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246850

            Bug ID: 1246850
           Summary: profanity: fails to build against gpgme >=3D 2.0.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: mvetter-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: qa-bugs-at-suse.de
            Blocks: 1244605
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1244605 +++

profanity fails with gpgme >=3D 2.0.0 due to removed API. From
https://build.opensuse.org/package/live_build_log/openSUSE:Factory/profanit=
y/standard/x86_64

[   19s] src/pgp/gpg.c: In function =E2=80=98p_gpg_decrypt=E2=80=99:
[   19s] src/pgp/gpg.c:659:36: error: implicit declaration of function
=E2=80=98gpgme_key_get_string_attr=E2=80=99 [-Wimplicit-function-declaratio=
n]
[   19s]   659 |                 const char* addr =3D
gpgme_key_get_string_attr(key, GPGME_ATTR_EMAIL, NULL, 0);
[   19s]       |                                    ^~~~~~~~~~~~~~~~~~~~~~~=
~~
[   19s] src/pgp/gpg.c:659:67: error: =E2=80=98GPGME_ATTR_EMAIL=E2=80=99 un=
declared (first use
in this function)
[   19s]   659 |                 const char* addr =3D
gpgme_key_get_string_attr(key, GPGME_ATTR_EMAIL, NULL, 0);
[   19s]       |=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
   ^~~~~~~~~~~~~~~~

From
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=3Dgpgme.git;a=3Dblob;f=3DNEWS;h=
=3Dcd0e093bf83fe47b6773fb478fced07d8409fbe0;hb=3Dgpgme-2.0.0#l46

> gpgme_key_get_string_attr               REMOVED.

I did not find a related upstream change. Created an upstream bug:
https://github.com/profanity-im/profanity/issues/2048
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17531325001.bD75055f8.368
Date: Mon, 21 Jul 2025 21:15:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246850

          Summary
          profanity: fails to build against gpgme >=3D 2.0.0

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Network

          Assignee
          mvetter@suse.com

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          qa-bugs@suse.de

          Blocks
          1244605

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1244605 +++

profanity fails with gpgme >=3D 2.0.0 due to removed API. From
https://build.opensuse.org/package/live_build=
_log/openSUSE:Factory/profanity/standard/x86_64

[   19s] src/pgp/gpg.c: In function =E2=80=98p_gpg_decrypt=E2=80=99:
[   19s] src/pgp/gpg.c:659:36: error: implicit declaration of function
=E2=80=98gpgme_key_get_string_attr=E2=80=99 [-Wimplicit-function-declaratio=
n]
[   19s]   659 |                 const char* addr =3D
gpgme_key_get_string_attr(key, GPGME_ATTR_EMAIL, NULL, 0);
[   19s]       |                                    ^~~~~~~~~~~~~~~~~~~~~~~=
~~
[   19s] src/pgp/gpg.c:659:67: error: =E2=80=98GPGME_ATTR_EMAIL=E2=80=99 un=
declared (first use
in this function)
[   19s]   659 |                 const char* addr =3D
gpgme_key_get_string_attr(key, GPGME_ATTR_EMAIL, NULL, 0);
[   19s]       |=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
   ^~~~~~~~~~~~~~~~

From
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=3Dgpgme.git;a=3Dblob;f=3DNEWS;h=
=3Dcd0e093bf83fe47b6773fb478fced07d8409fbe0;hb=3Dgpgme-2.0.0#l46

> gpgme_key_get_string_attr               REMOVED.=

I did not find a related upstream change. Created an upstream bug:
https://g=
ithub.com/profanity-im/profanity/issues/2048

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17531325001.bD75055f8.368--


body:
--17531337981.1f561985E.380
Date: Mon, 21 Jul 2025 21:36:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246851

            Bug ID: 1246851
           Summary: profanity: rebuilds in %install section
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: mvetter-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The openSUSE profanity package build the code twice. Specifically it builds=
 a
mini version in the %install stanza. That is not rpm-y. This is clearly a u=
se
case for multibuild flavors. Please convert accordingly.

>From profanity.spec, paraphrased and shortened:

%build
%configure=20
%make_build

%install
%make_install
[...]
mv %{buildroot}%{_bindir}/profanity %{buildroot}%{_bindir}/profanity.standa=
rd

make clean

%configure [...]
[...]
%make_install
[...]
mv %{buildroot}%{_bindir}/profanity %{buildroot}%{_bindir}/profanity.mini
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17531337981.1f561985E.380
Date: Mon, 21 Jul 2025 21:36:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246851

          Summary
          profanity: rebuilds in %install section

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Network

          Assignee
          mvetter@suse.com

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The openSUSE profanity package build the code twice. Specifi=
cally it builds a
mini version in the %install stanza. That is not rpm-y. This is clearly a u=
se
case for multibuild flavors. Please convert accordingly.

>From profanity.spec, paraphrased and shortened:

%build
%configure=20
%make_build

%install
%make_install
[...]
mv %{buildroot}%{_bindir}/profanity %{buildroot}%{_bindir}/profanity.standa=
rd

make clean

%configure [...]
[...]
%make_install
[...]
mv %{buildroot}%{_bindir}/profanity %{buildroot}%{_bindir}/profanity.mini</=
pre>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17531337981.1f561985E.380--

summary: profanity: rebuilds in %install section


body:
--17532198352.2EbD.44
Date: Tue, 22 Jul 2025 21:30:35 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246902

            Bug ID: 1246902
           Summary: VUL-0: chromium release 138.0.7204.168
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in Chromium 138.0.7204.168:

* CVE-2025-8010: Type Confusion in V8
* CVE-2025-8011: Type Confusion in V8
* Various fixes from internal audits, fuzzing and other initiatives

References:
https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-des=
ktop_22.html
https://issues.chromium.org/issues/430344952
https://issues.chromium.org/issues/430572435
https://issues.chromium.org/issues/433331098
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17532198352.2EbD.44
Date: Tue, 22 Jul 2025 21:30:35 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246902

          Summary
          VUL-0: chromium release 138.0.7204.168

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in Chromium 138.0.7204.168:

* CVE-2025-8010: Type Confusion in V8
* CVE-2025-8011: Type Confusion in V8
* Various fixes from internal audits, fuzzing and other initiatives

References:
https://chromereleases.googleblog.com/2025/07/stab=
le-channel-update-for-desktop_22.html
https://issues.chr=
omium.org/issues/430344952
https://issues.chr=
omium.org/issues/430572435
https://issues.chr=
omium.org/issues/433331098

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17532198352.2EbD.44--

summary: VUL-0: chromium release 138.0.7204.168


--17532508562.a7Fb.377
Date: Wed, 23 Jul 2025 06:07:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246909

            Bug ID: 1246909
           Summary: VUL-0: CVE-2025-54141: viewvc: directory traversal in standalone.py
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/465083/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: emanuele.cappello-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

ViewVC is a browser interface for CVS and Subversion version control
repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the
standalone.py script provided in the ViewVC distribution can expose the
contents of the host server's filesystem though a directory traversal-style
attack. This is fixed in versions 1.1.31 and  1.2.4.

References:
https://github.com/viewvc/viewvc/issues/211
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54141
https://www.cve.org/CVERecord?id=3DCVE-2025-54141
https://github.com/viewvc/viewvc/commit/1dd84542c39b39e4a3f434db84a8ba3441d=
6a1e7
https://github.com/viewvc/viewvc/commit/5d7c76be07b77dce4ff631e9b866056344f=
11e84
https://github.com/viewvc/viewvc/security/advisories/GHSA-rv3m-76rj-q397
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17532508562.a7Fb.377
Date: Wed, 23 Jul 2025 06:07:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246909

          Summary
          VUL-0: CVE-2025-54141: viewvc: directory traversal in standal=
one.py

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/465083/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          emanuele.cappello@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

ViewVC is a browser interface for CVS and Subversion version=
 control
repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the
standalone.py script provided in the ViewVC distribution can expose the
contents of the host server's filesystem though a directory traversal-style
attack. This is fixed in versions 1.1.31 and  1.2.4.

References:
https://github.com/=
viewvc/viewvc/issues/211
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54141
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-54141
https://github.com/viewvc/viewvc/commit/1dd84542c39b39e4a=
3f434db84a8ba3441d6a1e7
https://github.com/viewvc/viewvc/commit/5d7c76be07b77dce4=
ff631e9b866056344f11e84
https://github.com/viewvc/viewvc/security/advisories/GHSA-rv3m-76=
rj-q397

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17532508562.a7Fb.377--


--17532583876.ab48197F4.743
Date: Wed, 23 Jul 2025 08:13:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246916

            Bug ID: 1246916
           Summary: python-rencode: binary depends on build-machine CPU
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1062303, 1100677
  Target Milestone: ---
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our python-rencode 1.0.8 package builds with -march=3Dnative
which means that binaries will fail to work on older user machines.

This was already dropped upstream in
https://github.com/aresch/rencode/commit/e7ec8ea718e73a8fee7dbc007c262e1584=
f7f94b

Besides that, I noticed other variations in the .so file.
My guess is that pyx .o files are linked in random order
- not from filesystem, but maybe from iteration over a dict or set.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17532583876.ab48197F4.743
Date: Wed, 23 Jul 2025 08:13:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246916

          Summary
          python-rencode: binary depends on build-machine CPU

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          Blocks
          1062303, 1100677

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

While working on reproducible builds for openSUSE, I found t=
hat
our python-rencode 1.0.8 package builds with -march=3Dnative
which means that binaries will fail to work on older user machines.

This was already dropped upstream in
https://github.com/aresch/rencode/commit/e7ec8ea718e73a8=
fee7dbc007c262e1584f7f94b

Besides that, I noticed other variations in the .so file.
My guess is that pyx .o files are linked in random order
- not from filesystem, but maybe from iteration over a dict or set.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17532583876.ab48197F4.743--


--17532631661.7B49.281
Date: Wed, 23 Jul 2025 09:32:46 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246924

            Bug ID: 1246924
           Summary: System freeze after updating Kernel to 6.16-rc6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: behzad.a_ir-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 884427
  --> https://bugzilla.suse.com/attachment.cgi?id=3D884427&action=3Dedit
SystemLog

Hello

After updating kernel from 6.14-rc2(Kernel Firmware 202502XX) to
6.16-rc6(Kernel Firmware 202506XX), I faced with random system freeze issue=
 and
some WiFi network stability problems.
Also this issues still exist in the Kernel 6.16-rc7.

Operating System: openSUSE Tumbleweed 20250718
KDE Plasma Version: 6.4.3
KDE Frameworks Version: 6.16.0
Qt Version: 6.9.1
Kernel Version: 6.16.0-rc7-1.g4672a9f-default (64-bit)
Graphics Platform: Wayland
Processors: 2 =C3=97 Intel=C2=AE Core=E2=84=A22 Duo CPU     T6670  @ 2.20GHz
Memory: 4 GiB of RAM (3.7 GiB usable)
Graphics Processor: llvmpipe
Manufacturer: Sony Corporation
Product Name: VGN-NS115N
System Version: C6U0GKLR

00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory
Controller Hub (rev 07)
00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset
Integrated Graphics Controller (rev 07)
00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset
Integrated Graphics Controller (rev 07)
00:1a.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #4 (rev 03)
00:1a.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #5 (rev 03)
00:1a.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #6 (rev 03)
00:1a.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI
Controller #2 (rev 03)
00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio
Controller (rev 03)
00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 1
(rev 03)
00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 2
(rev 03)
00:1c.2 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 3
(rev 03)
00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #1 (rev 03)
00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #2 (rev 03)
00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #3 (rev 03)
00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI
Controller #1 (rev 03)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
00:1f.0 ISA bridge: Intel Corporation ICH9M LPC Interface Controller (rev 0=
3)
00:1f.2 SATA controller: Intel Corporation 82801IBM/IEM (ICH9M/ICH9M-E) 4 p=
ort
SATA Controller [AHCI mode] (rev 03)
00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev=
 03)
01:00.0 Ethernet controller: Marvell Technology Group Ltd. 88E8055 PCI-E
Gigabit Ethernet Controller (rev 13)
04:00.0 Network controller: Intel Corporation WiFi Link 5100
05:03.0 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 IEEE 1394 Controller (rev=
 05)
05:03.1 SD Host controller: Ricoh Co Ltd R5C822 SD/SDIO/MMC/MS/MSPro Host
Adapter (rev 22)
05:03.2 System peripheral: Ricoh Co Ltd R5C592 Memory Stick Bus Host Adapter
(rev 12)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17532631661.7B49.281
Date: Wed, 23 Jul 2025 09:32:46 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246924

          Summary
          System freeze after updating Kernel to 6.16-rc6

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          behzad.a_ir@hotmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 884427 [det=
ails]
SystemLog

Hello

After updating kernel from 6.14-rc2(Kernel Firmware 202502XX) to
6.16-rc6(Kernel Firmware 202506XX), I faced with random system freeze issue=
 and
some WiFi network stability problems.
Also this issues still exist in the Kernel 6.16-rc7.

Operating System: openSUSE Tumbleweed 20250718
KDE Plasma Version: 6.4.3
KDE Frameworks Version: 6.16.0
Qt Version: 6.9.1
Kernel Version: 6.16.0-rc7-1.g4672a9f-default (64-bit)
Graphics Platform: Wayland
Processors: 2 =C3=97 Intel=C2=AE Core=E2=84=A22 Duo CPU     T6670  @ 2.=
20GHz
Memory: 4 GiB of RAM (3.7 GiB usable)
Graphics Processor: llvmpipe
Manufacturer: Sony Corporation
Product Name: VGN-NS115N
System Version: C6U0GKLR

00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory
Controller Hub (rev 07)
00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset
Integrated Graphics Controller (rev 07)
00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset
Integrated Graphics Controller (rev 07)
00:1a.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #4 (rev 03)
00:1a.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #5 (rev 03)
00:1a.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #6 (rev 03)
00:1a.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI
Controller #2 (rev 03)
00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio
Controller (rev 03)
00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 1
(rev 03)
00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 2
(rev 03)
00:1c.2 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port=
 3
(rev 03)
00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #1 (rev 03)
00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #2 (rev 03)
00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #3 (rev 03)
00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI
Controller #1 (rev 03)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
00:1f.0 ISA bridge: Intel Corporation ICH9M LPC Interface Controller (rev 0=
3)
00:1f.2 SATA controller: Intel Corporation 82801IBM/IEM (ICH9M/ICH9M-E) 4 p=
ort
SATA Controller [AHCI mode] (rev 03)
00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev=
 03)
01:00.0 Ethernet controller: Marvell Technology Group Ltd. 88E8055 PCI-E
Gigabit Ethernet Controller (rev 13)
04:00.0 Network controller: Intel Corporation WiFi Link 5100
05:03.0 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 IEEE 1394 Controller (rev=
 05)
05:03.1 SD Host controller: Ricoh Co Ltd R5C822 SD/SDIO/MMC/MS/MSPro Host
Adapter (rev 22)
05:03.2 System peripheral: Ricoh Co Ltd R5C592 Memory Stick Bus Host Adapter
(rev 12)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17532631661.7B49.281--


--17532736814.9C00F9a.689
Date: Wed, 23 Jul 2025 12:28:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246933

            Bug ID: 1246933
           Summary: sleef: please support for i586 or disable it
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

sleef stopped building on i586 since the update to version 3.7.
Please see if it's possible to fix the build for this architecture or disab=
le
it.

The failure seems to be due to changes from upstream, from the log:

[   49s] FAILED: [code=3D1]
src/libm-tester/CMakeFiles/mveclibtest-sse2.dir/mveclibtest.c.o
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17532736814.9C00F9a.689
Date: Wed, 23 Jul 2025 12:28:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246933

          Summary
          sleef: please support for i586 or disable it

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

sleef stopped building on i586 since the update to version 3.7.
Please see if it's possible to fix the build for this architecture or disab=
le
it.

The failure seems to be due to changes from upstream, from the log:

[   49s] FAILED: [code=3D1]
src/libm-tester/CMakeFiles/mveclibtest-sse2.dir/mveclibtest.c.o

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17532736814.9C00F9a.689--


--17533401872.AC22a.260
Date: Thu, 24 Jul 2025 06:56:27 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246954

            Bug ID: 1246954
           Summary: VUL-0: CVE-2025-53901: kwctl: wasmtime-wasi: corrupt state introduced in `fd_renumber` may lead to panic
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/464611/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de, serena.ferracci-at-suse.com,
                    smash_bz-at-suse.de
            Blocks: 1246951
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1246951 +++

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and
34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import
functions can lead to a WebAssembly guest inducing a panic in the host
(embedder). The specific bug is triggered by calling `path_open` after call=
ing
`fd_renumber` with either two equal argument values or a second argument be=
ing
equal to a previously-closed file descriptor number value. The corrupt state
introduced in `fd_renumber` will lead to the subsequent opening of a file
descriptor to panic. This panic cannot introduce memory unsafety or allow
WebAssembly to break outside of its sandbox, however. There is no possible =
heap
corruption or memory unsafety from this panic. This bug is in the
implementation of Wasmtime's `wasmtime-wasi` crate which provides an
implementation of WASIp1. The bug requires a specially crafted call to
`fd_renumber` in addition to the ability to open a subsequent file descript=
or.
Opening a second file descriptor is only possible when a preopened directory
was provided to the guest, and this is common amongst embeddings. A panic in
the host is considered a denial-of-service vector for WebAssembly embedders=
 and
is thus a security issue in Wasmtime. This bug does not affect WASIp2 and
embedders using components. In accordance with Wasmtime's release process,
patch releases are available as 24.0.4, 33.0.2, and 34.0.2. Users of other
release of Wasmtime are recommended to move to a supported release of Wasmt=
ime.
Embedders who are using components or are not providing guest access to cre=
ate
more file descriptors (e.g. via a preopened filesystem directory) are not
affected by this issue. Otherwise, there is no workaround at this time, and
affected embeddings are recommended to update to a patched version which wi=
ll
not cause a panic in the host.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-53901
https://bugzilla.redhat.com/show_bug.cgi?id=3D2381970
https://www.cve.org/CVERecord?id=3DCVE-2025-53901
https://docs.wasmtime.dev/security-what-is-considered-a-security-vulnerabil=
ity.html
https://docs.wasmtime.dev/stability-release.html
https://github.com/WebAssembly/WASI/blob/e1aa1cae4dda4c1f70f23fe11e922aae92=
f240a8/legacy/preview1/witx/wasi_snapshot_preview1.witx#L245-L260
https://github.com/bytecodealliance/wasmtime/blob/037a6edadbc225decbea00a55=
1aabf04203717d9/crates/wasi/src/preview1.rs#L1824-L1836
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-=
3f68-h2fc
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/53xxx/CVE-2025=
-53901.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17533401872.AC22a.260
Date: Thu, 24 Jul 2025 06:56:27 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-53901: kwctl: wasmtime-wasi: corrupt stat=
e introduced in `fd_renumber` may lead to panic"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1246954">1246954

          Summary
          VUL-0: CVE-2025-53901: kwctl: wasmtime-wasi: corrupt state in=
troduced in `fd_renumber` may lead to panic

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/464611/

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de, serena.ferracci@suse.com, smas=
h_bz@suse.de

          Blocks
          1246951

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

+++ This bug was initially created as a clone of <a class=3D=
"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-53901: TRACKERBUG: wasmtime-wasi: corrupt=
 state introduced in `fd_renumber` may lead to panic"
   href=3D"show_bug.cgi?id=3D1246951">Bug #1246951 +++

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and
34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import
functions can lead to a WebAssembly guest inducing a panic in the host
(embedder). The specific bug is triggered by calling `path_open` after call=
ing
`fd_renumber` with either two equal argument values or a second argument be=
ing
equal to a previously-closed file descriptor number value. The corrupt state
introduced in `fd_renumber` will lead to the subsequent opening of a file
descriptor to panic. This panic cannot introduce memory unsafety or allow
WebAssembly to break outside of its sandbox, however. There is no possible =
heap
corruption or memory unsafety from this panic. This bug is in the
implementation of Wasmtime's `wasmtime-wasi` crate which provides an
implementation of WASIp1. The bug requires a specially crafted call to
`fd_renumber` in addition to the ability to open a subsequent file descript=
or.
Opening a second file descriptor is only possible when a preopened directory
was provided to the guest, and this is common amongst embeddings. A panic in
the host is considered a denial-of-service vector for WebAssembly embedders=
 and
is thus a security issue in Wasmtime. This bug does not affect WASIp2 and
embedders using components. In accordance with Wasmtime's release process,
patch releases are available as 24.0.4, 33.0.2, and 34.0.2. Users of other
release of Wasmtime are recommended to move to a supported release of Wasmt=
ime.
Embedders who are using components or are not providing guest access to cre=
ate
more file descriptors (e.g. via a preopened filesystem directory) are not
affected by this issue. Otherwise, there is no workaround at this time, and
affected embeddings are recommended to update to a patched version which wi=
ll
not cause a panic in the host.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-53901
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2381970
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-53901
https://docs.wasmtime.dev/security-what-is-considered-=
a-security-vulnerability.html
https://docs.w=
asmtime.dev/stability-release.html
https://github.com/WebAssembly/WASI/blob/e1aa1cae4dda4c1f70f23fe11e922aa=
e92f240a8/legacy/preview1/witx/wasi_snapshot_preview1.witx#L245-L260
https:/=
/github.com/bytecodealliance/wasmtime/blob/037a6edadbc225decbea00a551aabf04=
203717d9/crates/wasi/src/preview1.rs#L1824-L1836
https://github.com/bytecodealliance/wasmtime/security=
/advisories/GHSA-fm79-3f68-h2fc
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/53xxx/CVE-2025-53901.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17533401872.AC22a.260--


--17533512089.6CECD1B.173
Date: Thu, 24 Jul 2025 10:00:08 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246966

            Bug ID: 1246966
           Summary: python-django: needs to be update to work with gettext-runtime 0.24 and later
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

python-django fails to build against gettext-runtime 0.24 and later:

...
[  212s] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
[  212s] FAIL: test_msgfmt_error_including_non_ascii
(i18n.test_compilation.CompilationErrorHandling.test_msgfmt_error_including=
_non_ascii)
[  212s] ------------------------------------------------------------------=
----
[  212s] Traceback (most recent call last):
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 57, in
testPartExecutor
[  212s]     yield
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 623, in run
[  212s]     self._callTestMethod(testMethod)
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 579, in
_callTestMethod
[  212s]     if method() is not None:
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File
"/home/abuild/rpmbuild/BUILD/python-Django-5.2.4-build/django-5.2.4/tests/i=
18n/test_compilation.py",
line 281, in test_msgfmt_error_including_non_ascii
[  212s]     self.assertIn("' cannot start a field name", stderr.getvalue())
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 1140, in
assertIn
[  212s]     self.fail(self._formatMessage(msg, standardMsg))
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 703, in fail
[  212s]     raise self.failureException(msg)
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s] AssertionError: "' cannot start a field name" not found in "Execut=
ion
of msgfmt failed:
/tmp/django_txg2yp3t/i18n_r6okrd2q/commands/locale/ko/LC_MESSAGES/django.po=
:24:
'msgstr' is not a valid Python brace format string, unlike 'msgid'. Reason:=
 In
the directive number 0, a field name starts with a character that is not
alphanumerical or underscore.\nmsgfmt: found 1 fatal error\n"
[  212s]=20
[  212s] ------------------------------------------------------------------=
----
[  212s] Ran 18088 tests in 166.658s
[  212s]=20
[  212s] FAILED (failures=3D1, skipped=3D1382, expected failures=3D5)
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  213s] error: Bad exit status from /var/tmp/rpm-tmp.Kc6i0s (%check)
[  213s]=20
...

python-django expects a certain error message from 'msgfmt', but that error
message was changed in gettext 0.24.

This is not urgent because the update of gettext-runtime in Factory won't
happen before end of August, but it would be good if this can be reported to
upstream in the meantime.

Thank you
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17533512089.6CECD1B.173
Date: Thu, 24 Jul 2025 10:00:08 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246966

          Summary
          python-django: needs to be update to work with gettext-runtim=
e 0.24 and later

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

python-django fails to build against gettext-runtime 0.24 an=
d later:

...
[  212s] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
[  212s] FAIL: test_msgfmt_error_including_non_ascii
(i18n.test_compilation.CompilationErrorHandling.test_msgfmt_error_including=
_non_ascii)
[  212s] ------------------------------------------------------------------=
----
[  212s] Traceback (most recent call last):
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 57=
, in
testPartExecutor
[  212s]     yield
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 62=
3, in run
[  212s]     self._callTestMethod(testMethod)
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 57=
9, in
_callTestMethod
[  212s]     if method() is not None:
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File
"/home/abuild/rpmbuild/BUILD/python-Django-5.2.4-build/django-5.2.4/te=
sts/i18n/test_compilation.py",
line 281, in test_msgfmt_error_including_non_ascii
[  212s]     self.assertIn("' cannot start a field name", stderr.=
getvalue())
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 11=
40, in
assertIn
[  212s]     self.fail(self._formatMessage(msg, standardMsg))
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s]   File "/usr/lib64/python3.11/unittest/case.py", line 70=
3, in fail
[  212s]     raise self.failureException(msg)
[  212s]     ^^^^^^^^^^^^^^^^^
[  212s] AssertionError: "' cannot start a field name" not found =
in "Execution
of msgfmt failed:
/tmp/django_txg2yp3t/i18n_r6okrd2q/commands/locale/ko/LC_MESSAGES/django.po=
:24:
'msgstr' is not a valid Python brace format string, unlike 'msgid'. Reason:=
 In
the directive number 0, a field name starts with a character that is not
alphanumerical or underscore.\nmsgfmt: found 1 fatal error\n"
[  212s]=20
[  212s] ------------------------------------------------------------------=
----
[  212s] Ran 18088 tests in 166.658s
[  212s]=20
[  212s] FAILED (failures=3D1, skipped=3D1382, expected failures=3D5)
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'default'
('file:memorydb_default?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  212s] Destroying test database for alias 'other'
('file:memorydb_other?mode=3Dmemory&cache=3Dshared')...
[  213s] error: Bad exit status from /var/tmp/rpm-tmp.Kc6i0s (%check)
[  213s]=20
...

python-django expects a certain error message from 'msgfmt', but that error
message was changed in gettext 0.24.

This is not urgent because the update of gettext-runtime in Factory won't
happen before end of August, but it would be good if this can be reported to
upstream in the meantime.

Thank you

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17533512089.6CECD1B.173--


body:
--17533901813.0F8bE.125
Date: Thu, 24 Jul 2025 20:49:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1246979

            Bug ID: 1246979
           Summary: Segfault in snd_soc_cs35l56_spi module
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Drivers
          Assignee: kernel-bugs-at-suse.de
          Reporter: mail-at-marcusvandam.nl
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 884469
  --> https://bugzilla.suse.com/attachment.cgi?id=3D884469&action=3Dedit
kernel logs of 4 attempts to load the module across 3 kernel versions, with=
 one
randome success

The snd_soc_cs35l56_spi audio driver module causes a kernel panic approxima=
tely
90% of the time when loaded on a Dell Pro 14 Premium PA14250 laptop. The is=
sue
manifests across multiple kernel versions (6.15.6, 6.16.0-rc7) and affects
system stability, causing hangs during shutdown.

System Information
------------------

Hardware: Dell Inc. Dell Pro 14 Premium PA14250/0NGT53
BIOS: 2.4.2 (06/20/2025)
CPU: Intel(R) Core(TM) Ultra 7 268V (Lunarlake)

Tested Kernel Versions
----------------------

6.15.6-1-default
6.16.0-rc7-2.g0e188e6-default
6.16.0-rc7-2.g0e188e6-vanilla

All versions seems to behave the same. Loading the module triggers a segfau=
lt
in most cases. And sometimes you get lucky and it loads, resulting in worki=
ng
sound.

Reproduction Steps
------------------

1) Blacklist the `snd_soc_cs35l56_spi` module during boot
2) Boot the system normally
3) Manually load the module with modprobe `snd_soc_cs35l56_spi`
4) Observe kernel panic in ~90% of attempts

Blacklisting is optional, but allows for more controlled testing.

Crash Logs
----------

Output of `journalctl -k` directly after `modprobe snd_soc_cs35l56_spi`:

cs35l56 spi-cs35l56-left: supply VDD_P not found, using dummy regulator
cs35l56 spi-cs35l56-left: supply VDD_IO not found, using dummy regulator
cs35l56 spi-cs35l56-left: supply VDD_A not found, using dummy regulator
cs35l56 spi-cs35l56-left: Cirrus Logic CS35L56 Rev B0 OTP3 fw:3.4.4 (patche=
d=3D0)
cs35l56 spi-cs35l56-right: supply VDD_P not found, using dummy regulator
cs35l56 spi-cs35l56-right: supply VDD_IO not found, using dummy regulator
cs35l56 spi-cs35l56-right: supply VDD_A not found, using dummy regulator
BUG: unable to handle page fault for address: 00000a8800000358
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0=20
Oops: Oops: 0000 [#1] SMP NOPTI
CPU: 4 UID: 0 PID: 1659 Comm: modprobe Not tainted 6.15.6-1-default #1
PREEMPT(voluntary) openSUSE Tumbleweed=20
c0e5d493f7947c7ab85d7a64fd8f073f0a974a3b
Hardware name: Dell Inc. Dell Pro 14 Premium PA14250/0NGT53, BIOS 2.4.2
06/20/2025
RIP: 0010:strcmp+0x2c/0x50
Code: 1e fa 31 c0 eb 20 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 =
00
00 00 00 00 66 90 48 83 c0 01 84 d2 74 13 0f b6 14 07 <3a> 14 06 74 ef 19 c=
0 83
c8 01 c3 cc cc cc cc 31 c0 c3 cc cc cc cc
RSP: 0018:ffffd3e640b77590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
RDX: 0000000000000072 RSI: 00000a8800000358 RDI: ffffd3e640b776b8
RBP: 0000000000000002 R08: 0000000000000000 R09: ffffd3e640b77628
R10: 0000000000000000 R11: 0000000000000004 R12: ffffd3e640b776b8
R13: ffffd3e640b77628 R14: 0000000000000000 R15: ffff8d9ac5916828
FS:  00007fd1b5aa8b80(0000) GS:ffff8da277ff4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000a8800000358 CR3: 000000011a034004 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 software_node_get_reference_args+0x95/0x270
 fwnode_property_get_reference_args+0x53/0x100
 swnode_find_gpio+0x95/0x2d0
 ? device_is_dependent+0xbc/0x120
 ? device_link_add+0x382/0x7b0
 gpiod_find_and_request+0x17b/0x440
 gpiod_get_index+0x5c/0x80
 devm_gpiod_get_index+0x26/0xd0
 devm_gpiod_get_optional+0x12/0x30
 cs35l56_common_probe+0xc2/0x755 [snd_soc_cs35l56
d2d83b6deab822a15b11d97d7b305a6126c03a0a]
 cs35l56_spi_probe+0x8b/0x100 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 spi_probe+0x60/0x100
 really_probe+0xdb/0x340
 ? pm_runtime_barrier+0x55/0x90
 __driver_probe_device+0x78/0x140
 driver_probe_device+0x1f/0xa0
 ? __pfx___driver_attach+0x10/0x10
 __driver_attach+0xcb/0x1e0
 bus_for_each_dev+0x71/0xc0
 bus_add_driver+0x12f/0x210
 ? __pfx_cs35l56_spi_driver_init+0x10/0x10 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 driver_register+0x75/0xe0
 ? __pfx_cs35l56_spi_driver_init+0x10/0x10 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 do_one_initcall+0x43/0x2f0
 do_init_module+0x84/0x260
 init_module_from_file+0x8a/0xe0
 idempotent_init_module+0x100/0x2f0
 __x64_sys_finit_module+0x67/0xc0
 do_syscall_64+0x7b/0x820
 ? do_init_module+0x1af/0x260
 ? do_filp_open+0xc7/0x170
 ? kmem_cache_alloc_noprof+0x2ea/0x450
 ? __rseq_handle_notify_resume+0x9f/0x4b0
 ? kmem_cache_alloc_noprof+0x2ea/0x450
 ? do_sys_openat2+0x88/0xc0
 ? syscall_exit_to_user_mode+0x37/0x1c0
 ? do_syscall_64+0x87/0x820
 ? task_tick_fair+0x1da/0x310
 ? sched_balance_trigger+0x2c9/0x360
 ? perf_event_task_tick+0x4f/0xb0
 ? update_process_times+0x9c/0xc0
 ? tick_nohz_handler+0xb1/0x140
 ? timerqueue_add+0xae/0xd0
 ? __hrtimer_run_queues+0x164/0x2a0
 ? ktime_get+0x38/0xd0
 ? lapic_next_deadline+0x2c/0x40
 ? clockevents_program_event+0x9f/0x120
 ? hrtimer_interrupt+0x125/0x230
 ? __sysvec_apic_timer_interrupt+0x55/0x100
 ? irqentry_exit_to_user_mode+0x2c/0x1c0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fd1b511c94d
Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 90 48 89 f8 48 89 f7 =
48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 7=
3 01
c3 48 8b 0d 7b 84 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd8b584978 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
RAX: ffffffffffffffda RBX: 000055a492e07300 RCX: 00007fd1b511c94d
RDX: 0000000000000004 RSI: 000055a46d5b796e RDI: 0000000000000009
RBP: 000055a46d5b796e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000040000
R13: 000055a492e07410 R14: 000055a492e06c20 R15: 0000000000000000
 </TASK>
Modules linked in: snd_soc_cs35l56_spi(+) snd_soc_cs35l56 snd_soc_wm_adsp
snd_soc_cs35l56_shared snd_soc_cs_amp_lib cs_dsp regmap_spi cmac ccm af_pac=
ket
nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ip=
v4
nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle
ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ip=
v6
nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip6table_filter
ip6_tables nf_tables iptable_filter msr snd_soc_sof_sdw
snd_soc_intel_hda_dsp_common snd_soc_sdw_utils snd_sof_probes spi_cs42l43
pinctrl_cs42l43 cs42l43_sdw regmap_sdw cs42l43 snd_soc_dmic
snd_sof_pci_intel_lnl snd_sof_pci_intel_mtl snd_sof_intel_hda_generic
soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common
snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hd=
mi
soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils
snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks
 soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_sdca
snd_soc_core intel_uncore_frequency snd_compress intel_uncore_frequency_com=
mon
iwlmld snd_pcm_dmaengine crc8 x86_pkg_temp_thermal intel_powerclamp dell_pc
snd_ctl_led coretemp platform_profile snd_hda_intel snd_intel_dspcfg
snd_intel_sdw_acpi mac80211 snd_hda_codec kvm_intel spi_nor snd_hda_core
dell_laptop libarc4 mtd mei_wdt mei_gsc_proxy intel_rapl_msr dell_wmi kvm
snd_hwdep dell_wmi_ddv dell_smm_hwmon irqbypass dell_smbios dell_wmi_sysman
snd_pcm pcspkr iwlwifi dcdbas btintel_pcie snd_timer btintel snd
processor_thermal_device_pci firmware_attributes_class processor_thermal_de=
vice
tiny_power_button spi_intel_pci dell_wmi_descriptor wmi_bmof soundcore
bluetooth spi_intel cfg80211 processor_thermal_wt_hint mei_me
processor_thermal_rfim processor_thermal_rapl intel_rapl_common mei
processor_thermal_wt_req crc16 rfkill thunderbolt processor_thermal_power_f=
loor
ov08x40 v4l2_fwnode processor_thermal_mbox int3403_thermal button v4l2_async
 int340x_thermal_zone intel_skl_int3472_tps68470 videodev tps68470_regulator
int3400_thermal intel_hid mc acpi_thermal_rel sparse_keymap intel_pmc_core
intel_skl_int3472_discrete pmt_telemetry intel_skl_int3472_common pmt_class
acpi_pad acpi_tad joydev ac fuse nvme_fabrics loop efi_pstore configfs
nfnetlink ip_tables x_tables dm_crypt essiv authenc trusted asn1_encoder tee
nls_iso8859_1 nls_cp437 vfat fat hid_multitouch hid_generic xe polyval_clmu=
lni
polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 drm_ttm_helper
nvme sha1_ssse3 ttm aesni_intel i2c_algo_bit crypto_simd drm_suballoc_helper
ucsi_acpi drm_buddy cryptd nvme_core typec_ucsi video roles nvme_keyring
nvme_auth typec battery i2c_hid_acpi i2c_hid gpu_sched xhci_pci xhci_hcd
drm_gpuvm wmi drm_exec drm_gpusvm intel_ish_ipc drm_display_helper intel_is=
htp
pinctrl_intel_platform usbcore intel_vpu cec intel_lpss_pci intel_lpss rc_c=
ore
intel_vsec idma64 serio_raw btrfs blake2b_generic xor raid6_pq dm_mod efiva=
rfs
dmi_sysfs
CR2: 00000a8800000358
---[ end trace 0000000000000000 ]---
RIP: 0010:strcmp+0x2c/0x50
Code: 1e fa 31 c0 eb 20 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 =
00
00 00 00 00 66 90 48 83 c0 01 84 d2 74 13 0f b6 14 07 <3a> 14 06 74 ef 19 c=
0 83
c8 01 c3 cc cc cc cc 31 c0 c3 cc cc cc cc
RSP: 0018:ffffd3e640b77590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
RDX: 0000000000000072 RSI: 00000a8800000358 RDI: ffffd3e640b776b8
RBP: 0000000000000002 R08: 0000000000000000 R09: ffffd3e640b77628
R10: 0000000000000000 R11: 0000000000000004 R12: ffffd3e640b776b8
R13: ffffd3e640b77628 R14: 0000000000000000 R15: ffff8d9ac5916828
FS:  00007fd1b5aa8b80(0000) GS:ffff8da277ff4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000a8800000358 CR3: 000000011a034004 CR4: 0000000000f72ef0
PKRU: 55555554
note: modprobe[1659] exited with irqs disabled

Workaround
----------

Currently, no reliable workaround exists. Repeatedly attempting to load the
module may eventually succeed, but this is not practical for production use.

Additional Notes
----------------

Ive attached the logs for all 3 kernel versions, as well as 1 time it loaded
successfully to this ticket.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17533901813.0F8bE.125
Date: Thu, 24 Jul 2025 20:49:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1246979

          Summary
          Segfault in snd_soc_cs35l56_spi module

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          64bit

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Drivers

          Assignee
          kernel-bugs@suse.de

          Reporter
          mail@marcusvandam.nl

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 884469=
 [details]
kernel logs of 4 attempts to load the module across 3 kernel versions, with=
 one
randome success

The snd_soc_cs35l56_spi audio driver module causes a kernel panic approxima=
tely
90% of the time when loaded on a Dell Pro 14 Premium PA14250 laptop. The is=
sue
manifests across multiple kernel versions (6.15.6, 6.16.0-rc7) and affects
system stability, causing hangs during shutdown.

System Information
------------------

Hardware: Dell Inc. Dell Pro 14 Premium PA14250/0NGT53
BIOS: 2.4.2 (06/20/2025)
CPU: Intel(R) Core(TM) Ultra 7 268V (Lunarlake)

Tested Kernel Versions
----------------------

6.15.6-1-default
6.16.0-rc7-2.g0e188e6-default
6.16.0-rc7-2.g0e188e6-vanilla

All versions seems to behave the same. Loading the module triggers a segfau=
lt
in most cases. And sometimes you get lucky and it loads, resulting in worki=
ng
sound.

Reproduction Steps
------------------

1) Blacklist the `snd_soc_cs35l56_spi` module during boot
2) Boot the system normally
3) Manually load the module with modprobe `snd_soc_cs35l56_spi`
4) Observe kernel panic in ~90% of attempts

Blacklisting is optional, but allows for more controlled testing.

Crash Logs
----------

Output of `journalctl -k` directly after `modprobe snd_soc_cs35l56_spi`:

cs35l56 spi-cs35l56-left: supply VDD_P not found, using dummy regulator
cs35l56 spi-cs35l56-left: supply VDD_IO not found, using dummy regulator
cs35l56 spi-cs35l56-left: supply VDD_A not found, using dummy regulator
cs35l56 spi-cs35l56-left: Cirrus Logic CS35L56 Rev B0 OTP3 fw:3.4.4 (patche=
d=3D0)
cs35l56 spi-cs35l56-right: supply VDD_P not found, using dummy regulator
cs35l56 spi-cs35l56-right: supply VDD_IO not found, using dummy regulator
cs35l56 spi-cs35l56-right: supply VDD_A not found, using dummy regulator
BUG: unable to handle page fault for address: 00000a8800000358
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0=20
Oops: Oops: 0000 [#1] SMP NOPTI
CPU: 4 UID: 0 PID: 1659 Comm: modprobe Not tainted 6.15.6-1-default #1
PREEMPT(voluntary) openSUSE Tumbleweed=20
c0e5d493f7947c7ab85d7a64fd8f073f0a974a3b
Hardware name: Dell Inc. Dell Pro 14 Premium PA14250/0NGT53, BIOS 2.4.2
06/20/2025
RIP: 0010:strcmp+0x2c/0x50
Code: 1e fa 31 c0 eb 20 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 =
00
00 00 00 00 66 90 48 83 c0 01 84 d2 74 13 0f b6 14 07 <3a> 14 06 74 e=
f 19 c0 83
c8 01 c3 cc cc cc cc 31 c0 c3 cc cc cc cc
RSP: 0018:ffffd3e640b77590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
RDX: 0000000000000072 RSI: 00000a8800000358 RDI: ffffd3e640b776b8
RBP: 0000000000000002 R08: 0000000000000000 R09: ffffd3e640b77628
R10: 0000000000000000 R11: 0000000000000004 R12: ffffd3e640b776b8
R13: ffffd3e640b77628 R14: 0000000000000000 R15: ffff8d9ac5916828
FS:  00007fd1b5aa8b80(0000) GS:ffff8da277ff4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000a8800000358 CR3: 000000011a034004 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 software_node_get_reference_args+0x95/0x270
 fwnode_property_get_reference_args+0x53/0x100
 swnode_find_gpio+0x95/0x2d0
 ? device_is_dependent+0xbc/0x120
 ? device_link_add+0x382/0x7b0
 gpiod_find_and_request+0x17b/0x440
 gpiod_get_index+0x5c/0x80
 devm_gpiod_get_index+0x26/0xd0
 devm_gpiod_get_optional+0x12/0x30
 cs35l56_common_probe+0xc2/0x755 [snd_soc_cs35l56
d2d83b6deab822a15b11d97d7b305a6126c03a0a]
 cs35l56_spi_probe+0x8b/0x100 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 spi_probe+0x60/0x100
 really_probe+0xdb/0x340
 ? pm_runtime_barrier+0x55/0x90
 __driver_probe_device+0x78/0x140
 driver_probe_device+0x1f/0xa0
 ? __pfx___driver_attach+0x10/0x10
 __driver_attach+0xcb/0x1e0
 bus_for_each_dev+0x71/0xc0
 bus_add_driver+0x12f/0x210
 ? __pfx_cs35l56_spi_driver_init+0x10/0x10 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 driver_register+0x75/0xe0
 ? __pfx_cs35l56_spi_driver_init+0x10/0x10 [snd_soc_cs35l56_spi
41179412ea0deba08724c44440d0933ca4ef9622]
 do_one_initcall+0x43/0x2f0
 do_init_module+0x84/0x260
 init_module_from_file+0x8a/0xe0
 idempotent_init_module+0x100/0x2f0
 __x64_sys_finit_module+0x67/0xc0
 do_syscall_64+0x7b/0x820
 ? do_init_module+0x1af/0x260
 ? do_filp_open+0xc7/0x170
 ? kmem_cache_alloc_noprof+0x2ea/0x450
 ? __rseq_handle_notify_resume+0x9f/0x4b0
 ? kmem_cache_alloc_noprof+0x2ea/0x450
 ? do_sys_openat2+0x88/0xc0
 ? syscall_exit_to_user_mode+0x37/0x1c0
 ? do_syscall_64+0x87/0x820
 ? task_tick_fair+0x1da/0x310
 ? sched_balance_trigger+0x2c9/0x360
 ? perf_event_task_tick+0x4f/0xb0
 ? update_process_times+0x9c/0xc0
 ? tick_nohz_handler+0xb1/0x140
 ? timerqueue_add+0xae/0xd0
 ? __hrtimer_run_queues+0x164/0x2a0
 ? ktime_get+0x38/0xd0
 ? lapic_next_deadline+0x2c/0x40
 ? clockevents_program_event+0x9f/0x120
 ? hrtimer_interrupt+0x125/0x230
 ? __sysvec_apic_timer_interrupt+0x55/0x100
 ? irqentry_exit_to_user_mode+0x2c/0x1c0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fd1b511c94d
Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 90 48 89 f8 48 89 f7 =
48
89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 f=
f ff 73 01
c3 48 8b 0d 7b 84 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd8b584978 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
RAX: ffffffffffffffda RBX: 000055a492e07300 RCX: 00007fd1b511c94d
RDX: 0000000000000004 RSI: 000055a46d5b796e RDI: 0000000000000009
RBP: 000055a46d5b796e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000040000
R13: 000055a492e07410 R14: 000055a492e06c20 R15: 0000000000000000
 </TASK>
Modules linked in: snd_soc_cs35l56_spi(+) snd_soc_cs35l56 snd_soc_wm_adsp
snd_soc_cs35l56_shared snd_soc_cs_amp_lib cs_dsp regmap_spi cmac ccm af_pac=
ket
nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ip=
v4
nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle
ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ip=
v6
nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip6table_filter
ip6_tables nf_tables iptable_filter msr snd_soc_sof_sdw
snd_soc_intel_hda_dsp_common snd_soc_sdw_utils snd_sof_probes spi_cs42l43
pinctrl_cs42l43 cs42l43_sdw regmap_sdw cs42l43 snd_soc_dmic
snd_sof_pci_intel_lnl snd_sof_pci_intel_mtl snd_sof_intel_hda_generic
soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common
snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hd=
mi
soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils
snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks
 soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_sdca
snd_soc_core intel_uncore_frequency snd_compress intel_uncore_frequency_com=
mon
iwlmld snd_pcm_dmaengine crc8 x86_pkg_temp_thermal intel_powerclamp dell_pc
snd_ctl_led coretemp platform_profile snd_hda_intel snd_intel_dspcfg
snd_intel_sdw_acpi mac80211 snd_hda_codec kvm_intel spi_nor snd_hda_core
dell_laptop libarc4 mtd mei_wdt mei_gsc_proxy intel_rapl_msr dell_wmi kvm
snd_hwdep dell_wmi_ddv dell_smm_hwmon irqbypass dell_smbios dell_wmi_sysman
snd_pcm pcspkr iwlwifi dcdbas btintel_pcie snd_timer btintel snd
processor_thermal_device_pci firmware_attributes_class processor_thermal_de=
vice
tiny_power_button spi_intel_pci dell_wmi_descriptor wmi_bmof soundcore
bluetooth spi_intel cfg80211 processor_thermal_wt_hint mei_me
processor_thermal_rfim processor_thermal_rapl intel_rapl_common mei
processor_thermal_wt_req crc16 rfkill thunderbolt processor_thermal_power_f=
loor
ov08x40 v4l2_fwnode processor_thermal_mbox int3403_thermal button v4l2_async
 int340x_thermal_zone intel_skl_int3472_tps68470 videodev tps68470_regulator
int3400_thermal intel_hid mc acpi_thermal_rel sparse_keymap intel_pmc_core
intel_skl_int3472_discrete pmt_telemetry intel_skl_int3472_common pmt_class
acpi_pad acpi_tad joydev ac fuse nvme_fabrics loop efi_pstore configfs
nfnetlink ip_tables x_tables dm_crypt essiv authenc trusted asn1_encoder tee
nls_iso8859_1 nls_cp437 vfat fat hid_multitouch hid_generic xe polyval_clmu=
lni
polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 drm_ttm_helper
nvme sha1_ssse3 ttm aesni_intel i2c_algo_bit crypto_simd drm_suballoc_helper
ucsi_acpi drm_buddy cryptd nvme_core typec_ucsi video roles nvme_keyring
nvme_auth typec battery i2c_hid_acpi i2c_hid gpu_sched xhci_pci xhci_hcd
drm_gpuvm wmi drm_exec drm_gpusvm intel_ish_ipc drm_display_helper intel_is=
htp
pinctrl_intel_platform usbcore intel_vpu cec intel_lpss_pci intel_lpss rc_c=
ore
intel_vsec idma64 serio_raw btrfs blake2b_generic xor raid6_pq dm_mod efiva=
rfs
dmi_sysfs
CR2: 00000a8800000358
---[ end trace 0000000000000000 ]---
RIP: 0010:strcmp+0x2c/0x50
Code: 1e fa 31 c0 eb 20 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 =
00
00 00 00 00 66 90 48 83 c0 01 84 d2 74 13 0f b6 14 07 <3a> 14 06 74 e=
f 19 c0 83
c8 01 c3 cc cc cc cc 31 c0 c3 cc cc cc cc
RSP: 0018:ffffd3e640b77590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
RDX: 0000000000000072 RSI: 00000a8800000358 RDI: ffffd3e640b776b8
RBP: 0000000000000002 R08: 0000000000000000 R09: ffffd3e640b77628
R10: 0000000000000000 R11: 0000000000000004 R12: ffffd3e640b776b8
R13: ffffd3e640b77628 R14: 0000000000000000 R15: ffff8d9ac5916828
FS:  00007fd1b5aa8b80(0000) GS:ffff8da277ff4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000a8800000358 CR3: 000000011a034004 CR4: 0000000000f72ef0
PKRU: 55555554
note: modprobe[1659] exited with irqs disabled

Workaround
----------

Currently, no reliable workaround exists. Repeatedly attempting to load the
module may eventually succeed, but this is not practical for production use.

Additional Notes
----------------

Ive attached the logs for all 3 kernel versions, as well as 1 time it loaded
successfully to this ticket.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17533901813.0F8bE.125--

summary: Segfault in snd_soc_cs35l56_spi module


--17536061712.EeaCcce07.140
Date: Sun, 27 Jul 2025 08:49:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247050

            Bug ID: 1247050
           Summary: upgrade of xkeyboard-config fails in container
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: stephan.kunz-at-kabelbw.de
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

In a older tumbleweed distrobox container on Aeon=20
sudo zypper dup fails with:

( 47/168) Installieren: xkeyboard-config-2.45-2.1.noarch
...........................................................................=
........................................................................[Fe=
hler]
Installation von xkeyboard-config-2.45-2.1.noarch fehlgeschlagen:
Fehler: Subprocess failed. Error: RPM fehlgeschlagen: Kommando mit Status 1
beendet.

tested with several distroboxes on several machines
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17536061712.EeaCcce07.140
Date: Sun, 27 Jul 2025 08:49:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247050

          Summary
          upgrade of xkeyboard-config fails in container

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Upgrade Problems

          Assignee
          screening-team-bugs@suse.de

          Reporter
          stephan.kunz@kabelbw.de

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

In a older tumbleweed distrobox container on Aeon=20
sudo zypper dup fails with:

( 47/168) Installieren: xkeyboard-config-2.45-2.1.noarch
...........................................................................=
........................................................................[Fe=
hler]
Installation von xkeyboard-config-2.45-2.1.noarch fehlgeschlagen:
Fehler: Subprocess failed. Error: RPM fehlgeschlagen: Kommando mit Status 1
beendet.

tested with several distroboxes on several machines

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17536061712.EeaCcce07.140--


body:
--17536257691.12BF.263
Date: Sun, 27 Jul 2025 14:16:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247053

            Bug ID: 1247053
           Summary: [Build 20250726] installation fails to start using libnvme 1.15 / nvme-cli 2.15
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5201167/modules/inst
                    allation_mode/steps/3
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

After the most recent update of libnvme / nvme-cli, the nvme specific QA te=
st
fails to start yast/installation

So far, unfortunately, openQA does not publish any useful log traces

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-nvme@uefi fails in
[installation_mode](https://openqa.opensuse.org/tests/5201167/modules/insta=
llation_mode/steps/3)

## Test suite description
Maintainer: rbrown-at-suse.de; Basic installation test to confirm that install=
ing
and booting to an nvme as your root disk works

## Reproducible

Fails since (at least) Build
[20250726](https://openqa.opensuse.org/tests/5200057)

## Expected result

Last good: [20250725](https://openqa.opensuse.org/tests/5197843) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi&test=3Dnvme&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17536257691.12BF.263
Date: Sun, 27 Jul 2025 14:16:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247053

          Summary
          [Build 20250726] installation fails to start using libnvme 1.=
15 / nvme-cli 2.15

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5201167/modules/installatio=
n_mode/steps/3

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Installation

          Assignee
          yast2-maintainers@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

After the most recent update of libnvme / nvme-cli, the nvme specific QA te=
st
fails to start yast/installation

So far, unfortunately, openQA does not publish any useful log traces

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-nvme@uefi fails =
in
[installation_mode](https://openqa.opensuse.org/tests/5201167/=
modules/installation_mode/steps/3)

## Test suite description
Maintainer: rbrown@suse.de; B=
asic installation test to confirm that installing
and booting to an nvme as your root disk works

## Reproducible

Fails since (at least) Build
[20250726](https://op=
enqa.opensuse.org/tests/5200057)

## Expected result

Last good: [20250725](https://openqa.opensuse.org/tests/5197843) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx8=
6_64&distri=3Dopensuse&flavor=3DDVD&machine=3Duefi&test=3Dn=
vme&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17536257691.12BF.263--

pkgs: libnvme nvme-cli


--17536892312.F6Fc14.461
Date: Mon, 28 Jul 2025 07:53:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247074

            Bug ID: 1247074
           Summary: fixlet-systemd-post.sh can break /etc/locale.conf syntax
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

No idea if there is an easy fix.
Some utilities doing first boot provisioning create a /etc/locale.conf file
with
"LANG=3Den_US.UTF-8" without newline at the end.

The /usr/lib/systemd/rpm/fixlet-systemd-post.sh scripts makes
"LANG=3Den_US.UTF-8LC_CTYPE=3Den_US.UTF-8" out of it, which breaks setlocal=
e,
locale, bash and many more.

No idea if there is a simple solution for this.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17536892312.F6Fc14.461
Date: Mon, 28 Jul 2025 07:53:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247074

          Summary
          fixlet-systemd-post.sh can break /etc/locale.conf syntax

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          kukuk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

No idea if there is an easy fix.
Some utilities doing first boot provisioning create a /etc/locale.conf file
with
"LANG=3Den_US.UTF-8" without newline at the end.

The /usr/lib/systemd/rpm/fixlet-systemd-post.sh scripts makes
"LANG=3Den_US.UTF-8LC_CTYPE=3Den_US.UTF-8" out of it, which break=
s setlocale,
locale, bash and many more.

No idea if there is a simple solution for this.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17536892312.F6Fc14.461--


--17537088314.Bd6b.14
Date: Mon, 28 Jul 2025 13:20:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247142

            Bug ID: 1247142
           Summary: tbb-2022.2.0.tar.gz differ: byte 12, line 1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello

it seems that the uploaded archive is different from referenced sources.
Please fix it.

=F0=9F=93=A6[lkocman@osc obs]$ git clone https://src.opensuse.org/clibs/tbb=
.git
Cloning into 'tbb'...
remote: Enumerating objects: 368, done.
remote: Counting objects: 100% (10/10), done.
remote: Compressing objects: 100% (10/10), done.
remote: Total 368 (delta 3), reused 0 (delta 0), pack-reused 358 (from 1)
Receiving objects: 100% (368/368), 161.84 KiB | 7.36 MiB/s, done.
Resolving deltas: 100% (184/184), done.

=F0=9F=93=A6[lkocman@osc tbb]$ osc service runall
WARNING: Using EXPERIMENTAL support for git scm. The functionality may chan=
ge
or disappear without a prior notice!
Running source_service 'download_files' ...
tbb-2022.2.0.tar.gz /home/lkocman/Workspace/obs/tbb/tbb-2022.2.0.tar.gz dif=
fer:
byte 12, line 1
Running source_service 'format_spec_file' ...
Running source_service 'download_files' ...
Running source_service 'source_validator' ...
- package has tbb-rpmlintrc: (new or modified)
--------------------------------------------------------------
# loaded with ctypes by python package
addFilter("explicit-lib-dependency
libirml1")--------------------------------------------------------------
###ASK /home/lkocman/Workspace/obs/tbb/tbb-rpmlintrc
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17537088314.Bd6b.14
Date: Mon, 28 Jul 2025 13:20:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247142

          Summary
          tbb-2022.2.0.tar.gz differ: byte 12, line 1

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          lubos.kocman@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hello

it seems that the uploaded archive is different from referenced sources.
Please fix it.

=F0=9F=93=A6[lkocman@osc obs]$ git clone https://src.opensuse.org/clibs/tbb.git
Cloning into 'tbb'...
remote: Enumerating objects: 368, done.
remote: Counting objects: 100% (10/10), done.
remote: Compressing objects: 100% (10/10), done.
remote: Total 368 (delta 3), reused 0 (delta 0), pack-reused 358 (from 1)
Receiving objects: 100% (368/368), 161.84 KiB | 7.36 MiB/s, done.
Resolving deltas: 100% (184/184), done.

=F0=9F=93=A6[lkocman@osc tbb]$ osc service runall
WARNING: Using EXPERIMENTAL support for git scm. The functionality may chan=
ge
or disappear without a prior notice!
Running source_service 'download_files' ...
tbb-2022.2.0.tar.gz /home/lkocman/Workspace/obs/tbb/tbb-2022.2.0.tar.gz dif=
fer:
byte 12, line 1
Running source_service 'format_spec_file' ...
Running source_service 'download_files' ...
Running source_service 'source_validator' ...
- package has tbb-rpmlintrc: (new or modified)
--------------------------------------------------------------
# loaded with ctypes by python package
addFilter("explicit-lib-dependency
libirml1")------------------------------------------------------------=
--
###ASK /home/lkocman/Workspace/obs/tbb/tbb-rpmlintrc

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17537088314.Bd6b.14--