body:
--1667319979.b1F6AF71.22965
Date: Tue, 1 Nov 2022 16:26:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1204937

            Bug ID: 1204937
           Summary: "Stack smashing detected" in gnutls
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: ada.lovelace-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

gnutls can not be built on s390x at the moment.
The error message is:
[  145s] make[4]: Leaving directory
'/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib'
[  145s] make[4]: Entering directory
'/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib'
[  145s] ./fipshmac > .libs/.gnutls.hmac-t && mv .libs/.gnutls.hmac-t
.libs/.gnutls.hmac
[  145s] *** stack smashing detected ***: terminated
[  145s] /usr/bin/bash: line 1: 20445 Aborted                 ./fipshmac >
.libs/.gnutls.hmac-t
[  145s] make[4]: *** [Makefile:3433: .libs/.gnutls.hmac] Error 134
[  145s] make[4]: Leaving directory
'/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib'
[  145s] make[4]: *** Waiting for unfinished jobs....
[  145s] make[4]: Entering directory
'/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib'
[  145s] /usr/bin/bash ../libtool  --tag=CXX   --mode=link g++ -I./includes
-I./includes -O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2
-fstack-protector -funwind-tables -fasynchronous-unwind-tables -fPIE
-no-undefined -version-info 30:0:0 -pie -Wl,-z,now -Wl,-z,relro -o
libgnutlsxx.la -rpath /usr/lib64 libgnutlsxx_la-gnutlsxx.lo libgnutls.la
[  145s] libtool: link: g++  -fPIC -DPIC -shared -nostdlib
/usr/lib64/gcc/s390x-suse-linux/12/../../../../lib64/crti.o
/usr/lib64/gcc/s390x-suse-linux/12/crtbeginS.o  .libs/libgnutlsxx_la-gnutlsxx.o
  -Wl,-rpath -Wl,/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib/.libs
./.libs/libgnutls.so -L/usr/lib64 -ljitterentropy -lz -lp11-kit -lidn2
-lunistring -lpthread -ldl -ltasn1 -lnettle -lhogweed -lgmp
-L/usr/lib64/gcc/s390x-suse-linux/12
-L/usr/lib64/gcc/s390x-suse-linux/12/../../../../lib64 -L/lib/../lib64
-L/usr/lib/../lib64
-L/usr/lib64/gcc/s390x-suse-linux/12/../../../../s390x-suse-linux/lib
-L/usr/lib64/gcc/s390x-suse-linux/12/../../.. -lstdc++ -lm -lgcc_s -lc -lgcc_s
/usr/lib64/gcc/s390x-suse-linux/12/crtendS.o
/usr/lib64/gcc/s390x-suse-linux/12/../../../../lib64/crtn.o  -O2 -g -m64
-fstack-protector -Wl,-z -Wl,now -Wl,-z -Wl,relro   -Wl,-soname
-Wl,libgnutlsxx.so.30 -o .libs/libgnutlsxx.so.30.0.0
[  145s] libtool: link: (cd ".libs" && rm -f "libgnutlsxx.so.30" && ln -s
"libgnutlsxx.so.30.0.0" "libgnutlsxx.so.30")
[  145s] libtool: link: (cd ".libs" && rm -f "libgnutlsxx.so" && ln -s
"libgnutlsxx.so.30.0.0" "libgnutlsxx.so")
[  145s] libtool: link: ( cd ".libs" && rm -f "libgnutlsxx.la" && ln -s
"../libgnutlsxx.la" "libgnutlsxx.la" )
[  145s] make[4]: Leaving directory
'/home/abuild/rpmbuild/BUILD/gnutls-3.7.7/lib'
[  145s] make[3]: *** [Makefile:2903: all-recursive] Error 1
[  145s] make[2]: *** [Makefile:2507: all] Error 2
[  145s] make[1]: *** [Makefile:2258: all-recursive] Error 1
[  145s] make: *** [Makefile:2183: all] Error 2

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:zSystems/gnutls/standard/s390x

From my point of view, the hint " *** stack smashing detected ***: terminated"
is the problem. Therefore, we should have a buffer overflow.

summary: "Stack smashing detected" in gnutls


body:
Build Identifier:

I was trying to setup my printer on a new openSUSE MicroOS install through
Gnome Settings but the "Unlock to Change Settings" banner in printer menu does
not have the unlock button.

Reproducible: Always

Steps to Reproduce:
1.Open Gnome Settings
2.Go to Printer

Debugging:
1.Open Gnome Settings
2.Go to Printer
3.Close Gnome Settings
4.Open terminal
5.Enter "gnome-control-center"
Actual Results:
I wasn't able to add printer as there's no way to unlock the setting.

When using the terminal to launch Gnome Settings, it says "Your system does not
have the cups-pk-helper's policy "org.opensuse.cupspkhelper.mechanism.all-edit"
installed."

Expected Results:
There should be an unlock button to invoke password prompt and unlock the
printer setting.

summary: (MicroOS) Missing "cups-pk-helper" package causes printer setting in Gnome Settings to have no unlock button


--1667547130.ff5d0.18766
Date: Fri, 4 Nov 2022 07:32:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205020

            Bug ID: 1205020
           Summary: [Build 20221103] vagrant: fails to start due to missing deps
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2853234/modules/add_
                    box_libvirt/steps/11
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_vagrant@64bit fails in
[add_box_libvirt](https://openqa.opensuse.org/tests/2853234/modules/add_box_libvirt/steps/11)

## Test suite description
Maintainer: dancermak. Test vagrant, vagrant plugins and the vagrant boxes

## Reproducible

Fails since (at least) Build
[20211229](https://openqa.opensuse.org/tests/2112649)

## Expected result

Last good: [20211207](https://openqa.opensuse.org/tests/2077968) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=extra_tests_vagrant&version=Tumbleweed)


--1667551190.E1f64.28921
Date: Fri, 4 Nov 2022 08:39:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205034

            Bug ID: 1205034
           Summary: vim-plugin-salt errors in sls.vim (NERDCustomDelimiters)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: georg.pfuetzenreuter-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,

after installing `vim-plugin-salt`, opening .sls files in Vim presents the
following:

(1/1) Installing: vim-plugin-salt-20170630-51.1.noarch ...[done]
$ vim director.sls
Error detected while processing
/usr/share/vim/vim90/suse.vimrc[10]../usr/share/vim/vim90/syntax/syntax.vim[43]..BufRead
Autocommands for "*.sls"..function DetectSls[5]..FileType Autocommands for
"*"..Syntax Autocommands for "*"..function <SNR>3_SynSet[25]..script
/usr/share/vim/site/syntax/sls.vim:
line   67:
E723: Missing end of Dictionary '}':
line   68:
E10: \ should be followed by /, ? or &
line   69:
E10: \ should be followed by /, ? or &
Press ENTER or type command to continue

Opening non-.sls files still works.

I can work around the issue by editing /usr/share/vim/site/syntax/sls.vim and
commenting the following lines:

 67 " let g:NERDCustomDelimiters = {
 68 "   \ 'sls': { 'left': '#' },
 69 " \ }

However I don't actually know what this does.

Maybe someone here does? :-)


--1667564961.d5102B14.28010
Date: Fri, 4 Nov 2022 12:29:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205042

            Bug ID: 1205042
           Summary: [TRACKERBUG] Set openssl 3.0.7 as the default openssl in TW
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: pmonrealgonzalez-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This tracker-bug will be used for the switch from OpenSSL 1.1.1x to version
3.0.7 in TW and collects information about the main changes in version 3.0.x
and the list of packages that need to be adapted for the upgrade.

Major changes in 3.0.0:
  * OpenSSL 3.0 is a major release and consequently any application
    that currently uses an older version of OpenSSL will at the
    very least need to be recompiled in order to work with the new version.
  * The OpenSSL versioning scheme has changed with the 3.0 release to format:
    MAJOR.MINOR.PATCH
    The patch level is indicated by the third number instead of a letter
  * Providers and FIPS support
    Providers collect together and make available algorithm implementations.
  * Use of the low level APIs have been deprecated.
  * Some cryptographic algorithms that were available via the EVP APIs
    are now considered legacy and their use is strongly discouraged.
  * Engines and "METHOD" APIs are deprecated and shall be transformed to
providers.

OpenSSL 3.0.0 design:
  * https://www.openssl.org/docs/OpenSSL300Design.html

Migration guide:
  * https://www.openssl.org/docs/man3.0/man7/migration_guide.html

OpenSSL wiki:
  * https://wiki.openssl.org/index.php/OpenSSL_3.0


--1667674820.edec4FD0.12852
Date: Sat, 5 Nov 2022 19:00:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205102

            Bug ID: 1205102
           Summary: [Build 20221104] gimp not installable: missing luajit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2855901/modules/gimp
                    /steps/11
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

Luajit has been build excluded in the spec file in
https://build.opensuse.org/request/show/1032964

This results in gegl, and thus gimp, being uninstallable

openQA test in scenario opensuse-Tumbleweed-DVD-ppc64le-gnome@ppc64le fails in
[gimp](https://openqa.opensuse.org/tests/2855901/modules/gimp/steps/11)

## Test suite description
Revert schedule to working settings - dleuenberger, 20211117

## Reproducible

Fails since (at least) Build
[20221104](https://openqa.opensuse.org/tests/2855095)

## Expected result

Last good: [20221103](https://openqa.opensuse.org/tests/2853855) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=ppc64le&distri=opensuse&flavor=DVD&machine=ppc64le&test=gnome&version=Tumbleweed)


body:
--1667680509.CeE507e0.8441
Date: Sat, 5 Nov 2022 20:35:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205104

            Bug ID: 1205104
           Summary: No longer any SMB1 support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Samba
          Assignee: samba-maintainers@SuSE.de
          Reporter: bgthoreson-at-gmail.com
        QA Contact: samba-maintainers@SuSE.de
          Found By: ---
           Blocker: ---

Samba on Tumbleweed is now compiled not allowing SMB1 support. I understand the
security reasons why this is a good thing, but now there is no solution for
users who still need this support.  Could there be an added option to allow
SMB1 legacy support by installing a specific Samba package that allowed it?

summary: No longer any SMB1 support


body:
Build Identifier:

There are two programs installed by default on Gnome in Micro OS fresh install,
Gnome System Monitor and Gnome Usage Respectively.

Reproducible: Always

Steps to Reproduce:
1.Install Micro OS Desktop Gnome
2.Open App Menu
Actual Results:
Two system monitor program installed with almost the same functionality.

Expected Results:
Gnome System Monitor(GSM) should be the only installed program for system
monitoring as it is more feature rich and functional as compared to Gnome Usage
which seems to be the "lite" version of GSM

summary: Redundant program for system monitoring on Gnome


body:
--1667752886.6BB23C1.30303
Date: Sun, 6 Nov 2022 16:41:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205109

            Bug ID: 1205109
           Summary: emacs cannot reach XDG_RUNTIME_DIR
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: All
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: maintenance-at-opensuse.org
          Reporter: zimtsui-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# Description

Emacs checks whether environment variable `XDG_RUNTIME_DIR` exists to determine
where a certain socket file should be placed. If `XDG_RUNTIME_DIR` doesn't
exist, emacs will fallback to some other location. See
<https://git.savannah.gnu.org/cgit/emacs.git/tree/lib-src/emacsclient.c?h=emacs-27.2#n1393>

`sudo` defaults to unset all environment variables and set some certain ones.
So any program run by `sudo` should miss `XDG_RUNTIME_DIR` in its environment.

If I run `sudo emacs-nox`, everything goes expectedly. But if I run `sudo
emacs`, emacs prompts `Unable to set up transient service directory:
XDG_RUNTIME_DIR "/run/user/0" not available: No such file or directory`.

# Possible reason

The binary `/usr/bin/emacs` is not built from emacs source, but made by the
SUSE package maintainer. The binary checks whether it's run in terminal or X to
determine whether it should exec `emacs-nox` or `emacs-x11`.

The `/usr/bin/emacs` binary defines an environment variable `XDG_RUNTIME_DIR`
as `/run/user/<USER_ID>` arbitrarily. But `/run/user/0` doesn't exist because
it  should be created by `/etc/profile` in a login shell. And `sudo` doesn't
spawn a new login shell.

# Reproduction

1. Install `emacs` and `emcas-nox` from zypper, and don't install `emacs-x11`.
1. Restart your computer and don't login as root in any tty, but login as a
regular user.
1. `sudo emacs`
1. Quit emacs.
1. You will see the prompt.

# Versions

openSUSE Leap 15.4
Emacs 27.2
Sudo 1.9.9

summary: emacs cannot reach XDG_RUNTIME_DIR


body:
--1667802868.38a030.20673
Date: Mon, 7 Nov 2022 06:34:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205118

            Bug ID: 1205118
           Summary: Move sudo config files to /usr/etc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: banderson19com-at-san.rr.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Per Bug #1152770, default configuration files provided by packages are supposed
to be moved to /usr/etc and only admin managed files are to be placed in /etc.
The 'sudo' package still puts its config files in /etc.

summary: Move sudo config files to /usr/etc


--1667818420.A73068e0.24633
Date: Mon, 7 Nov 2022 10:53:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205132

            Bug ID: 1205132
           Summary: python3-paramiko fails with "iqmp not inverse of q"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: andrea.cervesato-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In kernel QA we are developing the new runltp runner for LTP tests in the
following repository: https://github.com/acerv/runltp-ng

The application fails with the following error:

Traceback (most recent call last):
  File "/home/acer/Projects/runltp-ng/ltp/ssh.py", line 297, in communicate
    timeout=timeout)
  File "/usr/lib/python3.6/site-packages/paramiko/client.py", line 437, in
connect
    passphrase,
  File "/usr/lib/python3.6/site-packages/paramiko/client.py", line 720, in
_auth
    filename, pkey_class, passphrase
  File "/usr/lib/python3.6/site-packages/paramiko/client.py", line 571, in
_key_from_filepath
    key = klass.from_private_key_file(key_path, password)
  File "/usr/lib/python3.6/site-packages/paramiko/pkey.py", line 217, in
from_private_key_file
    key = cls(filename=filename, password=password)
  File "/usr/lib/python3.6/site-packages/paramiko/rsakey.py", line 55, in
__init__
    self._from_private_key_file(filename, password)
  File "/usr/lib/python3.6/site-packages/paramiko/rsakey.py", line 176, in
_from_private_key_file
    self._decode_key(data)
  File "/usr/lib/python3.6/site-packages/paramiko/rsakey.py", line 205, in
_decode_key
    ).private_key(default_backend())
  File
"/usr/lib64/python3.6/site-packages/cryptography/hazmat/primitives/asymmetric/rsa.py",
line 317, in private_key
    return backend.load_rsa_private_numbers(self)
  File
"/usr/lib64/python3.6/site-packages/cryptography/hazmat/backends/openssl/backend.py",
line 629, in load_rsa_private_numbers
    return _RSAPrivateKey(self, rsa_cdata, evp_pkey)
  File
"/usr/lib64/python3.6/site-packages/cryptography/hazmat/backends/openssl/rsa.py",
line 361, in __init__
    raise ValueError("Invalid private key", errors)
ValueError: ('Invalid private key', [_OpenSSLErrorWithText(code=67764350,
lib=4, func=160, reason=126, reason_text=b'error:040A007E:rsa
routines:RSA_check_key_ex:iqmp not inverse of q')])

Which seems to be related with a bug fixed in paramiko 2.7.2:
https://github.com/paramiko/paramiko/commit/81064206bf3cec2ca4372257ff138481e1227b91

After applying the patch on the latest python3-paramiko package installation,
bug has gone and runltp-ng application works correctly.


body:
--1667827878.7cbcc0.14714
Date: Mon, 7 Nov 2022 13:31:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205139

            Bug ID: 1205139
           Summary: FTBFS: openSUSE:Factory/votca fails to build (killed after 90 minutes without output)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package votca fails to build in openSUSE:Factory. Earlier notifications by
email to the bugowner and Maintainer have remained without reaction / fix. If
the package is not being fixed within 2 weeks, it will be scheduled for removal
from Tumbleweed

The build does not 'fail' in a traditional way, but actually is being killed
for not having any output for > 90 minutes

???
[ 2874s] 154/247 Test #154: unit_test_triplelist
...............................   Passed    0.01 sec
[ 2874s]         Start 155: unit_iie.py
[ 2874s] 155/247 Test #155: unit_iie.py
........................................   Passed    0.32 sec
[ 2874s]         Start 156: template_serialHelp
[ 2874s] 156/247 Test #156: template_serialHelp
................................   Passed    0.01 sec
[ 2874s]         Start 157: template_threadedHelp
[ 2874s] 157/247 Test #157: template_threadedHelp
..............................   Passed    0.01 sec
[ 2874s]         Start 158: regression_spce_ibi_lammps
[ 8280s] qemu-kvm: terminating on signal 15 from pid 67420 (<unknown process>)
[ 8280s] ### VM INTERACTION END ###
[ 8280s] No buildstatus set, either the base system is broken
(kernel/initrd/udev/glibc/bash/perl)
[ 8280s] or the build host has a kernel or hardware problem...

Job seems to be stuck here, killed. (after 5400 seconds of inactivity)

Seems the timeout is simply stalling - for whatever ill reason (disk space?
memory? actual a real bug somewhere?)

pkgs: gromacs python-mpi4py python-pytest-mpi


--1667828129.7c46d0e0.16014
Date: Mon, 7 Nov 2022 13:35:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205140

            Bug ID: 1205140
           Summary: FTBFS: openSUSE:Factory/erlang-rebar-testsuite fails to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package erlang-rebar-testsuite fails to build in openSUSE:Factory. Earlier
notifications by email to the bugowner and Maintainer have remained without
reaction / fix. If the package is not being fixed within 2 weeks, it will be
scheduled for removal from Tumbleweed

[   45s] rebar_xref_eunit:19: -xref_test_/0-fun-23- (Undefined function
call)...*failed*
[   45s] in function rebar_xref_eunit:'-xref_test_/0-fun-23-'/1
(test/rebar_xref_eunit.erl, line 20)
[   45s] in call from eunit_test:run_testfun/1 (eunit_test.erl, line 71)
[   45s] in call from eunit_proc:run_test/1 (eunit_proc.erl, line 531)
[   45s] in call from eunit_proc:with_timeout/3 (eunit_proc.erl, line 356)
[   45s] in call from eunit_proc:handle_test/2 (eunit_proc.erl, line 514)
[   45s] in call from eunit_proc:tests_inorder/3 (eunit_proc.erl, line 456)
[   45s] in call from eunit_proc:with_timeout/3 (eunit_proc.erl, line 346)
[   45s] in call from eunit_proc:run_group/2 (eunit_proc.erl, line 570)
[   45s] **error:{assert,[{module,rebar_xref_eunit},
[   45s]          {line,20},
[   45s]          {expression,"string : str ( RebarOut ,
\"myapp_othermod:somefunc/0 calls undefined function
myapp_somemod:notavailable/1\" ) =/= 0"},
[   45s]          {expected,true},
[   45s]          {value,false}]}
[   45s]   output:<<"">>

Full build log at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory/erlang-rebar-testsuite/standard/x86_64


body:
--1667834266.8Ec50.23403
Date: Mon, 7 Nov 2022 15:17:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205149

            Bug ID: 1205149
           Summary: %kernel_module_package_buildreqs needs to require suse-kernel-rpm-scriptlets
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

kernel rpm scriptlets will be moved to a separate subpackage (see
https://github.com/openSUSE/suse-module-tools/pull/64). kmps do already
(pre)require suse-kernel-rpm-scriptlets just fine. However during build those
prerequires are not seen by the OBS schedule as they are hidden inside the
%suse_kernel_module_package macro. So the package install check after build
fails due to missing scriptlets.
Therefore %kernel_module_package_buildreqs needs to list
suse-kernel-rpm-scriptlets

pkgs: crash suse-module-tools vhba-kmp


body:
--1667848278.dC0C4b10.22304
Date: Mon, 7 Nov 2022 19:11:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205157

            Bug ID: 1205157
           Summary: nrpe: %pre needs usrmerge update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: lars.vogdt-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

nrpe.spec %pre does

# check if the port for nrpe is already defined in /etc/services
if grep -q %{nrpeport} %{_sysconfdir}/services ; then
    : OK - port already defined
else
    %{nnmmsg} "Adding port %{nrpeport} to %{_sysconfdir}/services"
    echo "nrpe            %{nrpeport}/tcp # Nagios nrpe" >> etc/services
fi

With usrmerge and /usr/etc/services, this means that installing nrpe will
create /etc/services with just one line:

    nrpe            5666/tcp # Nagios nrpe

Needless to say that you can find exactly this line in /usr/etc/services ;-)

Please adjust the %pre script to also check /usr/etc/services.

summary: nrpe: %pre needs usrmerge update


--1667859985.BaBC8c0.17693
Date: Mon, 7 Nov 2022 22:26:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205161

            Bug ID: 1205161
           Summary: brltty[15110]: cannot create directory: /run/brltty: Permission denied
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: ohering-at-suse.com
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When attaching a USB serial device brltty is started but fails with these
errors (repeated ad infinitum):

brltty[15110]: cannot create directory: /run/brltty: Permission denied
brltty[15110]: USB control transfer error 32: Broken pipe

That prevents the USB serial device nodes from being created.  The only way
forward is to deinstall brltty.


--1667860845.E21d210.7730
Date: Mon, 7 Nov 2022 22:40:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205162

            Bug ID: 1205162
           Summary: PHP mysqli not load from web after upgrade
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: novell-at-regproctor.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Everything is described here:

https://forums.opensuse.org/showthread.php/576937-mysqli-doesnt-work?highlight=mysqli

however in short:

Once having done a distribution upgrade from leap 15.3 to 15.4 the PHP MySQLi
module won't load when running from the web unless you add the line:

extension=mysqlnd

somewhere in a used php.ini.

However, when running PHP from the command line (CLI mode) the module loads
correctly which also means that when you add the line then from then on in CLI
mode you will get the warning:

PHP Warning:  Module 'mysqlnd' already loaded in Unknown on line 0

I guess you could avoid the warning by adding the line in:
/etc/php7/apache/php.ini

which I should add the fact into the above referenced forum post.


--1667891606.eECb3Ef5.23956
Date: Tue, 8 Nov 2022 07:13:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205167

            Bug ID: 1205167
           Summary: VUL-0: CVE-2021-34055: jhead: out of bounds write in ClearOrientation() due to unchecked error
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/347227/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: sbrabec-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2140225

jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.

https://github.com/Matthias-Wandel/jhead/issues/36

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2140225
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34055
https://www.cve.org/CVERecord?id=CVE-2021-34055
https://github.com/Matthias-Wandel/jhead/issues/36
http://www.cvedetails.com/cve/CVE-2021-34055/


body:
Build Identifier:

corrects: https://gitlab.xfce.org/xfce/tumbler/-/issues/65

[Vulnerability] SSRF when directory with malicious mp4 file is opened

Reproducible: Always

summary: update tumbler to 4.16.1 for security issue


--1667982426.0b2fb0.26704
Date: Wed, 9 Nov 2022 08:27:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205221

            Bug ID: 1205221
           Summary: VUL-0: chromium: multiple security issues fixed in 107.0.5304.110
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: Andreas.Stieger-at-gmx.de
          Found By: ---
           Blocker: ---

CVE-2022-3885: Use after free in V8. Reported by gzobqq@ on 2022-10-24
CVE-2022-3886: Use after free in Speech Recognition. Reported by anonymous on
2022-10-10
CVE-2022-3887: Use after free in Web Workers. Reported by anonymous on
2022-10-08
CVE-2022-3888: Use after free in WebCodecs. Reported by Peter Nemeth on
2022-10-16
CVE-2022-3889: Type Confusion in V8. Reported by anonymous on 2022-11-01
CVE-2022-3890: Heap buffer overflow in Crashpad. Reported by anonymous on
2022-11-01

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop.html


--1667997996.Fc5020.12471
Date: Wed, 9 Nov 2022 12:46:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205236

            Bug ID: 1205236
           Summary: [Staging] icu 72.1 breaks nodejs18/nodejs19
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

icu 72.1 has been submitted for inclusion into openSUSE Tumbleweed
  https://build.opensuse.org/request/show/1031330

During the staging process, we have identified nodejs1[89] failing to build
with it.

* NodeJS 18
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/nodejs18/standard/x86_64
* NodeJS 19
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/nodejs19/standard/x86_64


--1668002662.2c731.7451
Date: Wed, 9 Nov 2022 14:04:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205242

            Bug ID: 1205242
           Summary: VUL-0: CVE-2022-45060: varnish: HTTP request forgery via character injection through HTTP/2 pseudo-headers
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/347487/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-45060

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x
before
6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce
characters through HTTP/2 pseudo-headers that are invalid in the context of an
HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1
requests to the backend. This could, in turn, be used to exploit
vulnerabilities
in a server behind the Varnish server. Note: the 6.0.x LTS series (before
6.0.11) is affected.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45060
https://www.cve.org/CVERecord?id=CVE-2022-45060
https://docs.varnish-software.com/security/VSV00011
https://varnish-cache.org/security/VSV00011.html


--1668002840.57EF1.7974
Date: Wed, 9 Nov 2022 14:07:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205243

            Bug ID: 1205243
           Summary: VUL-0: CVE-2022-45059: varnish: HTTP request smuggling via hop-by-hop headers
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/347488/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: mrueckert-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2022-45059

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before
7.2.1. A request smuggling attack can be performed on Varnish Cache servers by
requesting that certain headers are made hop-by-hop, preventing the Varnish
Cache servers from forwarding critical headers to the backend.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45059
https://www.cve.org/CVERecord?id=CVE-2022-45059
https://varnish-cache.org/security/VSV00010.html


--1668107554.6BeF7Ef1.31560
Date: Thu, 10 Nov 2022 19:12:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205307

            Bug ID: 1205307
           Summary: VUL-1: tor: 0.4.7.11 additional defenses against a network wide DoS (TROVE-2021-009)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: bwiedemann-at-suse.com
          Found By: ---
           Blocker: ---

https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.7/ReleaseNotes

fixed in tor 0.4.7.11
[...]
  This version contains several major fixes aimed at helping defend against
  network denial of service.
[...]
  We strongly recommend to upgrade to this version especially for Exit relays
  in order to help the network defend against this ongoing DDoS.
[...]

  o Major bugfixes (relay):
    - Improve security of our DNS cache by randomly clipping the TTL
      value. TROVE-2021-009.


--1668113654.5c7ecBD0.2284
Date: Thu, 10 Nov 2022 20:54:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205308

            Bug ID: 1205308
           Summary: irqbalance: Failed to initialize thermal events.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: opensuse-at-mike.franken.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

For a while now (after https://bugzilla.suse.com/show_bug.cgi?id=1204607 had
been solved, I get

systemd[1]: Started irqbalance daemon.
/usr/sbin/irqbalance[1222]: thermal: socket bind failed, thermald may not be
running.
/usr/sbin/irqbalance[1222]: Failed to initialize thermal events.
systemd[1]: irqbalance.service: Deactivated successfully.

on every boot. This even happens with the latest irqbalance-1.9.2-1.1.x86_64.

Systeminfo:

Operating System: openSUSE Tumbleweed 20221109
KDE Plasma Version: 5.26.2
KDE Frameworks Version: 5.99.0
Qt Version: 5.15.7
Kernel Version: 6.0.7-1-default (64-bit)
Graphics Platform: X11
Processors: 8 × 11th Gen Intel® Core™ i7-1165G7 @ 2.80GHz
Memory: 15,0 GiB of RAM
Graphics Processor: Mesa Intel® Xe Graphics
Manufacturer: Dell Inc.
Product Name: XPS 13 9310 2-in-1


body:
--1668175934.fAeAFe01.17033
Date: Fri, 11 Nov 2022 14:12:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205344

            Bug ID: 1205344
           Summary: debugedit dependency on gdb-add-index
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: lnussel-at-suse.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mls-at-suse.com
          Found By: ---
           Blocker: ---

I tried to build a container in the OBS with

```
#!BuildTag: opensuse-empty
FROM opensuse/tumbleweed:latest
RUN zypper install -y shadow
RUN groupadd -g 399 abuild
RUN useradd -u 399 -g abuild -s /bin/bash -r -c autobuild -d /home/abuild
abuild
RUN install -d -o 399 -g 399 -m 0755 /home/abuild /home/abuild/rpmbuild
/home/abuild/rpmbuild/{BUILD,BUILDROOT,OTHER,RPMS,SOURCES,SPECS,SRPMS}
RUN ln -sf home/abuild/rpmbuild .build.packages
RUN ln -sf ../../.build.data/.rpmrc ../../.build.data/.rpmmacros home/abuild/
RUN zypper in -y rpm-build brp-check-suse post-build-checks rpmlint
```

That fails with:

```
Problem: nothing provides '/usr/bin/gdb-add-index' needed by the to be
installed debugedit-5.0-4.1.x86_64
```

we tried to add a fileprovides but that caused other issues.

from the code in /usr/lib/rpm/find-debuginfo it looks like that gdb-add-index
is only used optionally. can we reduce that requires to a Recommends?

summary: debugedit dependency on gdb-add-index


body:
--1668519381.B18E4B0.32605
Date: Tue, 15 Nov 2022 13:36:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205447

            Bug ID: 1205447
           Summary: machine keyring is not enabled
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

machine keyring is the upstream solution for making MOK available to the
kernel.

summary: machine keyring is not enabled


--1668569953.cFCbAc45.4026
Date: Wed, 16 Nov 2022 03:39:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205460

            Bug ID: 1205460
           Summary: zypper ref -s doesn't seem to respect user defined variables in service files
    Classification: openSUSE
           Product: openSUSE Leap Micro
           Version: 5.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Base
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Service file:
https://github.com/openSUSE/openSUSE-repos/blob/da3133a74ddd660b1daef2d166495bd547c86737/opensuse-leap-micro-repoindex.xml

transactional update # uname -a
Linux localhost.localdomain 5.14.21-150400.24.28-default #1 SMP PREEMPT_DYNAMIC
Mon Oct 10 15:21:12 UTC 2022 (f82da2c) x86_64 x86_64 x86_64 GNU/Linux
transactional update # zypper lr
Repository priorities are without effect. All enabled repositories share the
same priority.

# | Alias           | Name                        | Enabled | GPG Check |
Refresh
--+-----------------+-----------------------------+---------+-----------+--------
1 | repo-main       | Leap Micro Main Repository  | Yes     | (r ) Yes  | Yes
2 | repo-sle-update | SLE Micro Update Repository | Yes     | (r ) Yes  | Yes

transactional update # zypper ref -s
Refreshing service 'openSUSE'.
Problem retrieving the repository index file for service 'openSUSE':
[|] Invalid path name component
'/distribution/leap-micro/${releasever}/product/repo/Leap-Micro-${releasever}-%{DIST_ARCH}-Media1'
History:
 - Invalid path name component
'/distribution/leap-micro/${releasever}/product/repo/Leap-Micro-${releasever}-%{DIST_ARCH}-Media1'

Warning: Skipping service 'openSUSE' because of the above error.
All services have been refreshed.
Repository 'Leap Micro Main Repository' is up to date.
Repository 'SLE Micro Update Repository' is up to date.
All repositories have been refreshed.

transactional update # ls -la /etc/zypp/vars.d/DIST_ARCH
-rw-r--r--. 1 root root 7 Nov 14 19:44 /etc/zypp/vars.d/DIST_ARCH

transactional update # cat /etc/zypp/vars.d/DIST_ARCH
x86_64

# substitution worked
transactional update # sed -i "s/%{DIST_ARCH}/x86_64/g"
/usr/share/zypp/local/service/openSUSE/repo/opensuse-leap-micro-repoindex.xml
transactional update # zypper ref -s
Refreshing service 'openSUSE'.
Adding repository 'repo-main (5.3)'
...................................................................................................................................[done]
Adding repository 'repo-debug (5.3)'
..................................................................................................................................[done]
Adding repository 'repo-source (5.3)'
.................................................................................................................................[done]
Adding repository 'repo-sle-update (5.3)'
.............................................................................................................................[done]
All services have been refreshed.
Retrieving repository 'repo-debug (5.3)' metadata
.....................................................................................................................[done]
Building repository 'repo-debug (5.3)' cache
..........................................................................................................................[done]
Retrieving repository 'repo-main (5.3)' metadata
......................................................................................................................[done]
Building repository 'repo-main (5.3)' cache
...........................................................................................................................[done]
Retrieving repository 'repo-sle-update (5.3)' metadata
................................................................................................................[done]
Building repository 'repo-sle-update (5.3)' cache
.....................................................................................................................[done]
Retrieving repository 'repo-source (5.3)' metadata
....................................................................................................................[done]
Building repository 'repo-source (5.3)' cache
.........................................................................................................................[done]
Repository 'Leap Micro Main Repository' is up to date.
Repository 'SLE Micro Update Repository' is up to date.
All repositories have been refreshed.

# let's try it again
transactional update # sed -i "s/x86_64/%{DIST_ARCH}/g"
/usr/share/zypp/local/service/openSUSE/repo/opensuse-leap-micro-repoindex.xml
transactional update # zypper ref -s
Refreshing service 'openSUSE'.
Removing repository 'repo-debug (5.3)'
................................................................................................................................[done]
Removing repository 'repo-main (5.3)'
.................................................................................................................................[done]
Removing repository 'repo-sle-update (5.3)'
...........................................................................................................................[done]
Removing repository 'repo-source (5.3)'
...............................................................................................................................[done]
Problem retrieving the repository index file for service 'openSUSE':
[|] Invalid path name component
'/distribution/leap-micro/${releasever}/product/repo/Leap-Micro-${releasever}-%{DIST_ARCH}-Media1'
History:
 - Invalid path name component
'/distribution/leap-micro/${releasever}/product/repo/Leap-Micro-${releasever}-%{DIST_ARCH}-Media1'

Warning: Skipping service 'openSUSE' because of the above error.
All services have been refreshed.
Repository 'Leap Micro Main Repository' is up to date.
Repository 'SLE Micro Update Repository' is up to date.
All repositories have been refreshed.


body:
--1668556380.AB8a1.22805
Date: Tue, 15 Nov 2022 23:53:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205459

            Bug ID: 1205459
           Summary: AUDIT-0: pam_saslauthd - security audit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: william.brown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi there,

In the near future I intend to submit
https://build.opensuse.org/package/show/home:firstyear:branches:network:idm/pam_saslauthd
to factory and SLE (pending other administration tasks).

Per https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs
this is a request for audit of the content of this pam module and it's source
code.

This code is extremely similar to the previously audited pam_kanidm module (
https://bugzilla.opensuse.org/show_bug.cgi?id=1173387 ), being based on many of
the same components.

The module is a "veneer", as it only performs RPC via the localhost unix sock
to saslauthd. Additionally, being written in Rust, it also avoids many of the
traps of C based modules.

Thanks!

summary: AUDIT-0: pam_saslauthd - security audit


--1668583994.E3a7C1D2.31266
Date: Wed, 16 Nov 2022 07:33:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205463

            Bug ID: 1205463
           Summary: VUL-0: CVE-2022-45047: apache-sshd: Java unsafe deserialization vulnerability
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/347958/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-45047

Posted by Thomas Wolf on Nov 15Severity: important

Description:

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in
Apache MINA SSHD <= 2.9.1 uses Java
deserialization to load a serialized java.security.PrivateKey. The class is one
of several implementations that an
implementor using Apache MINA SSHD can choose for loading the host keys of an
SSH server.

Mitigation:

For Apache MINA SSHD <= 2.9.1, do not use
org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider to generate
and later load your server's host key. Use separately generated host key files,
for instance in OpenSSH format, and load them via a
org.apache.sshd.common.keyprovider.FileKeyPairProvider instead. Or use a custom
implementation instead of SimpleGeneratorHostKeyProvider that uses the OpenSSH
format for storing and loading the host key (via classes
OpenSSHKeyPairResourceWriter and OpenSSHKeyPairResourceParser).

The issue was fixed in Apache MINA SSHD 2.9.2.

Credit:

The Apache MINA SSHD team would like to thank Zhang Zewei, NOFOCUS, for
reporting this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45047
https://seclists.org/oss-sec/2022/q4/148


--1668596020.adbbB500.7357
Date: Wed, 16 Nov 2022 10:53:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205478

            Bug ID: 1205478
           Summary: python3-pip: Upgrade needed to fix pip installations using pyproject.toml
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dheidler-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running "python3 setup.py install" there is a deprecation warning as using
setup.py seems to get deprecated in favor of using "pyproject.toml" using pip.

The new way is running "sudo pip install ." in the git root where the
pyproject.toml is.

This however doesn't work because it is broken in the currently newest packaged
version of python3-pip (22.0.4) - the issue doesn't happen eg. in an archlinux
container with pip 22.3.1:

sudo pip install .
[sudo] Passwort f�r root:
Processing /home/dheidler/devel/wifi_autologin
  Installing build dependencies ... done
  Getting requirements to build wheel ... done
  Preparing metadata (pyproject.toml) ... done
Requirement already satisfied: requests in /usr/lib/python3.10/site-packages
(from wifi-autologin==0.0.1) (2.28.1)
Requirement already satisfied: certifi>=2017.4.17 in
/usr/lib/python3.10/site-packages (from requests->wifi-autologin==0.0.1)
(2021.10.8)
Requirement already satisfied: charset_normalizer<4,>=2 in
/usr/lib/python3.10/site-packages (from requests->wifi-autologin==0.0.1)
(3.0.0)
Requirement already satisfied: idna<4,>=2.5 in
/usr/lib/python3.10/site-packages (from requests->wifi-autologin==0.0.1) (3.4)
Requirement already satisfied: urllib3<1.27,>=1.21.1 in
/usr/lib/python3.10/site-packages (from requests->wifi-autologin==0.0.1)
(1.26.12)
Building wheels for collected packages: wifi-autologin
  Building wheel for wifi-autologin (pyproject.toml) ... done
  Created wheel for wifi-autologin:
filename=wifi_autologin-0.0.1-py3-none-any.whl size=4716
sha256=38217b300bc9ddeb58123ed664d1201d41929cd06541d3d052214e706c467f96
  Stored in directory:
/tmp/pip-ephem-wheel-cache-re2g65ip/wheels/21/87/aa/8ac76967d4592fa6501e37cc745792eb7a5bdb6f5d21ac7aeb
Successfully built wifi-autologin
Installing collected packages: wifi-autologin
  Attempting uninstall: wifi-autologin
    Found existing installation: wifi-autologin 0.0.1
ERROR: Exception:
Traceback (most recent call last):
  File "/usr/lib/python3.10/site-packages/pip/_internal/cli/base_command.py",
line 167, in exc_logging_wrapper
    status = run_func(*args)
  File "/usr/lib/python3.10/site-packages/pip/_internal/cli/req_command.py",
line 205, in wrapper
    return func(self, options, args)
  File "/usr/lib/python3.10/site-packages/pip/_internal/commands/install.py",
line 405, in run
    installed = install_given_reqs(
  File "/usr/lib/python3.10/site-packages/pip/_internal/req/__init__.py", line
68, in install_given_reqs
    uninstalled_pathset = requirement.uninstall(auto_confirm=True)
  File "/usr/lib/python3.10/site-packages/pip/_internal/req/req_install.py",
line 637, in uninstall
    uninstalled_pathset = UninstallPathSet.from_dist(dist)
  File "/usr/lib/python3.10/site-packages/pip/_internal/req/req_uninstall.py",
line 554, in from_dist
    for script in dist.iterdir("scripts"):
  File
"/usr/lib/python3.10/site-packages/pip/_internal/metadata/pkg_resources.py",
line 156, in iterdir
    if not self._dist.isdir(name):
  File
"/usr/lib/python3.10/site-packages/pip/_vendor/pkg_resources/__init__.py", line
2816, in __getattr__
    return getattr(self._provider, attr)
AttributeError: 'PathMetadata' object has no attribute 'isdir'


--1668714625.535718E5.29815
Date: Thu, 17 Nov 2022 19:50:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205540

            Bug ID: 1205540
           Summary: [Build 20221116] test fails in mediacheck on rescue media
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2884341/modules/medi
                    acheck/steps/16
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Live Medium
          Assignee: dimstar-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

Sure to dodge constraints, yast had to be removed from the rescue disk - this
seems to also have destroyed the media check feature

openQA test in scenario opensuse-Tumbleweed-Rescue-CD-x86_64-mediacheck@64bit
fails in
[mediacheck](https://openqa.opensuse.org/tests/2884341/modules/mediacheck/steps/16)

## Test suite description

## Reproducible

Fails since (at least) Build
[20221116](https://openqa.opensuse.org/tests/2883592)

## Expected result

Last good: [20221115](https://openqa.opensuse.org/tests/2879679) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=Rescue-CD&machine=64bit&test=mediacheck&version=Tumbleweed)


--1668767251.FFc21.26007
Date: Fri, 18 Nov 2022 10:27:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205560

            Bug ID: 1205560
           Summary: [Build 20221117] journal_check: Failed to adjust quota for subvolume "/var/lib/machines": Bad file descriptor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2885705/modules/jour
                    nal_check/steps/21
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

Since the upgrade to systemd 252.1 in Tumbleweed we see this error in the
micros journals:

Nov 18 10:13:10.658308 localhost systemd-tmpfiles[637]: Failed to adjust quota
for subvolume "/var/lib/machines": Bad file descriptor

openQA test in scenario microos-Tumbleweed-MicroOS-Image-x86_64-microos@64bit
fails in
[journal_check](https://openqa.opensuse.org/tests/2885705/modules/journal_check/steps/21)

## Test suite description

## Reproducible

Fails since (at least) Build
[20221117](https://openqa.opensuse.org/tests/2885705) (current job)

## Expected result

Last good: [20221116](https://openqa.opensuse.org/tests/2883624) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image&machine=64bit&test=microos&version=Tumbleweed)


body:
--1669065324.6aE60.31712
Date: Mon, 21 Nov 2022 21:15:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205612

            Bug ID: 1205612
           Summary: many lua packages use lua macros but do not depend on them
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/devel:languages:lua/lua-luarocks:lua51/SLE_12_SP5/x86_64

[   18s] + exec rpmbuild -ba --define '_srcdefattr (-,root,root)' --nosignature
--define '_build_create_debug 1' --define 'disturl
obs://build.opensuse.org/devel:languages:lua/SLE_12_SP5/50ecbd3f689500400734160393692d24-lua-luarocks:lua51'
/home/abuild/rpmbuild/SOURCES/lua-luarocks.spec
[   18s] error: line 47: Unknown tag: %lua_provides
[   18s] ### VM INTERACTION START ###

pkgs: lua-BitOp lua-argparse lua-busted lua-cassowary lua-cldr lua-cliargs lua-cyrussasl lua-dkjson lua-ldoc lua-lgi lua-linenoise lua-loadkit lua-lpeg lua-luaepnf lua-luaevent lua-luaexpat lua-luarocks lua-luasocket lua-luassert lua-luasystem lua-luaterm lua-luautf8 lua-markdown lua-mediator_lua lua-messagepack lua-moonscript lua-mpack lua-penlight lua-readline lua-say lua-slaxml lua-testmore lua-toluapp lua-vstruct lua-zlib


body:
--1669099087.75aa5Ee0.8402
Date: Tue, 22 Nov 2022 06:38:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205623

            Bug ID: 1205623
           Summary: [trackerbug] lxd 5.8 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686

  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date

summary: [trackerbug] lxd 5.8 update


body:
--1669110716.D7A6FeC4.27543
Date: Tue, 22 Nov 2022 09:51:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205632

            Bug ID: 1205632
           Summary: iprout2 requires python
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

iproute2 contains routel, which used to be a shell script.
It became a python script at some point.
As a result a very minimal OS disk image will needlessly contain some python
interpreter.

I suggest to revert or remove routel.

summary: iprout2 requires python


--1669143269.C06EbBAB0.32623
Date: Tue, 22 Nov 2022 18:54:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205659

            Bug ID: 1205659
           Summary: Precompiled profile cache causes hard to debug problems on Tumbleweed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The AppArmor profile cache is generated and validated (check if it needs to be
updated) purely based on the file timestamps on the involved files. If the
cache file is newer than all involved files in /etc/apparmor.d, the cache file
will be used (and not updated).

This causes problems in Tumbleweed if
- the user has modified an included file (for example local/*) long ago so
  that it's older than the precompiled cache in apparmor-profiles
- a new kernel with a new cache hash gets released (so the probably valid
  /var/cache/apparmor/$oldhash/$cachefile will no longer be used)

In these cases, the precompiled cache will be loaded, and the modified local/*
file gets ignored. Obviously this also means that the additional permissions
granted in the local/* file will _not_ be allowed.

See the discussion around
https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/message/3XOMZCBAN54ZCGYOCCLGAVYTKQSUZZIP/
for the long version.

The long-term solution is to include a checksum of the text profiles in the
cache file, which is on the TODO list upstream.

Until then, I'll stop shipping the precompiled cache in Tumbleweed.
This might result in a few seconds additional boot time after updates of the
apparmor-profiles package or major kernel updates (with a new AppArmor features
hash), but that's better than loading outdated profile caches into the kernel.

The risk for hitting this problem on Leap is much smaller, because Leap updates
don't include new major kernel versions.


--1669195642.ACc2fdB0.25290
Date: Wed, 23 Nov 2022 09:27:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205675

            Bug ID: 1205675
           Summary: [Build 20221122] virt-install: Specifying --boot no longer implies no_install=yes
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2896959/modules/virt
                    _install/steps/19
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

This was filed upstream when it arose and was quickly fixed, which is why it
never was added to bugzilla. It was believed the fix would trickle down rather
quickly (which was just a wrong assumption)

The upstream issue reported is
https://github.com/virt-manager/virt-manager/issues/426

fix is committed as
https://github.com/virt-manager/virt-manager/commit/e94786c066696781a821f5a4bcef3c377e4bc5e5

We;d appreciated this being backported into our package

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-virtualization@64bit
fails in
[virt_install](https://openqa.opensuse.org/tests/2896959/modules/virt_install/steps/19)

## Test suite description
Maintainer: QE Virtualization. Test virtualization stack using libvirt and
virt-manager.

## Reproducible

Fails since (at least) Build
[20220808](https://openqa.opensuse.org/tests/2504818)

## Expected result

Last good: [20210910](https://openqa.opensuse.org/tests/1911956) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=virtualization&version=Tumbleweed)


body:
--1669284633.f0F62f4.673
Date: Thu, 24 Nov 2022 10:10:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205714

            Bug ID: 1205714
           Summary: GNOME terminal freezes when maximized
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Highly annoying issue, first seen since updating TW to GNOME/mutter 43.1

Upstream issue: https://gitlab.gnome.org/GNOME/mutter/-/issues/2527

summary: GNOME terminal freezes when maximized


--1669322565.bFefdE4F1.13298
Date: Thu, 24 Nov 2022 20:42:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205736

            Bug ID: 1205736
           Summary: VUL-0: CVE-2022-4135: chromium: Heap buffer overflow in GPU
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: gmbr3-at-opensuse.org
          Found By: ---
           Blocker: ---

fixed in chromium 107.0.5304.121:

* CVE-2022-4135: Heap buffer overflow in GPU
...An exploit for CVE-2022-4135 exists in the wild.

References:
https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html
https://crbug.com/1392715


--1669779548.bE734f730.31081
Date: Wed, 30 Nov 2022 03:39:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205868

            Bug ID: 1205868
           Summary: VirtualBox 7.0.4 crashes when machine log is requested from GUI
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: Larry.Finger-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When Show Log is selected under the Machine tab in the VirtualBox GUI, the GUI
crashes. The Oracle builds do not have this problem, thus it is something
introduced in the oS builds.


--1669792162.FF4d31.8185
Date: Wed, 30 Nov 2022 07:09:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205871

            Bug ID: 1205871
           Summary: VUL-0: chromium: multiple security issues fixed in 108.0.5359.71
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html

- High CVE-2022-4174: Type Confusion in V8.
- High CVE-2022-4175: Use after free in Camera Capture.
- High CVE-2022-4176: Out of bounds write in Lacros Graphics.
- High CVE-2022-4177: Use after free in Extensions.
- High CVE-2022-4178: Use after free in Mojo.
- High CVE-2022-4179: Use after free in Audio.
- High CVE-2022-4180: Use after free in Mojo.
- High CVE-2022-4181: Use after free in Forms.
- Medium CVE-2022-4182: Inappropriate implementation in Fenced Frames.
- Medium CVE-2022-4183: Insufficient policy enforcement in Popup Blocker.
- Medium CVE-2022-4184: Insufficient policy enforcement in Autofill.
- Medium CVE-2022-4185: Inappropriate implementation in Navigation.
- Medium CVE-2022-4186: Insufficient validation of untrusted input in
Downloads.
- Medium CVE-2022-4187: Insufficient policy enforcement in DevTools.
- Medium CVE-2022-4188: Insufficient validation of untrusted input in CORS.
- Medium CVE-2022-4189: Insufficient policy enforcement in DevTools.
- Medium CVE-2022-4190: Insufficient data validation in Directory.
- Medium CVE-2022-4191: Use after free in Sign-In.
- Medium CVE-2022-4192: Use after free in Live Caption.
- Medium CVE-2022-4193: Insufficient policy enforcement in File System API.
- Medium CVE-2022-4194: Use after free in Accessibility.
- Medium CVE-2022-4195: Insufficient policy enforcement in Safe Browsing.


body:
--1669906492.CDE81cb1.9677
Date: Thu, 1 Dec 2022 14:54:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205939

            Bug ID: 1205939
           Summary: AUDIT-WHITELIST: lightdm: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Already in devel prj - but no-one has filed for completion
https://build.opensuse.org/package/show/X11:Utilities/lightdm

Move /etc/dbus-1/system.d/org.freedesktop.DisplayManager.conf to
/usr/share/dbus-1/system.d/org.freedesktop.DisplayManager.conf

pkgs: lightdm rpmlint


--1669983592.F7D5D0.23035
Date: Fri, 2 Dec 2022 12:19:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1205978

            Bug ID: 1205978
           Summary: Got Page-Fault exception when VM is booting with edk2-stable202211 ovmf
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: jlee-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Got Page-Fault exception when VM is booting with edk2-stable202211 ovmf :

linux-691t:~ # virsh start opensuseTW; virsh console opensuseTW
Domain 'opensuseTW' started

Connected to domain 'opensuseTW'
Escape character is ^] (Ctrl + ])
!!!! X64 Exception Type - 0E(#PF - Page-Fault)  CPU Apic ID - 00000000 !!!!
ExceptionData - 000000000000000B  I:0 R:1 U:0 W:1 P:1 PK:0 SS:0 SGX:0
RIP  - 000000007F2D44FB, CS  - 0000000000000038, RFLAGS - 0000000000010246
RAX  - 0000000000000000, RCX - 0000000000000001, RDX - 0000000000000000
RBX  - 0000038280000014, RSP - 000000007FF05750, RBP - 000000007FF05948
RSI  - 0000000000000000, RDI - 0000000000000000
R8   - 000000007FF05948, R9  - 0000000000000001, R10 - 0000000000000001
R11  - 0000000000000000, R12 - 0000000000000001, R13 - 000000007FF05948
R14  - 000000007F2D52FC, R15 - 0000000000000001
DS   - 0000000000000030, ES  - 0000000000000030, FS  - 0000000000000030
GS   - 0000000000000030, SS  - 0000000000000030
CR0  - 0000000080010033, CR2 - 0000038280000014, CR3 - 000000007FC01000
CR4  - 0000000000000668, CR8 - 0000000000000000
DR0  - 0000000000000000, DR1 - 0000000000000000, DR2 - 0000000000000000
DR3  - 0000000000000000, DR6 - 00000000FFFF0FF0, DR7 - 0000000000000400
GDTR - 000000007F9DC000 0000000000000047, LDTR - 0000000000000000
IDTR - 000000007F2DE018 0000000000000FFF,   TR - 0000000000000000
FXSAVE_STATE - 000000007FF053B0
!!!! Find image based on IP(0x7F2D44FB)
/mnt/working/source_code-git/edk2/Build/OvmfX64/DEBUG_GCC5/X64/UefiCpuPkg/CpuIo2Dxe/CpuIo2Dxe/DEBUG/CpuIo2Dxe.dll
(ImageBase=000000007F2D3000, EntryPoint=000000007F2D4CFD) !!!!


--1670060329.2D1861.11623
Date: Sat, 3 Dec 2022 09:38:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1205999

            Bug ID: 1205999
           Summary: VUL-0: CVE-2022-4262: chromium: Type Confusion in V8
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: gmbr3-at-opensuse.org
          Found By: ---
           Blocker: ---

Fixed in Chromium 108.0.5359.94:

CVE-2022-4262: Type Confusion in V8
Google is aware that an exploit for CVE-2022-4262 exists in the wild.

References:
https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html
https://crbug.com/1394403


--1670152397.456Fd0.7621
Date: Sun, 4 Dec 2022 11:13:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206001

            Bug ID: 1206001
           Summary: Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple M1 with Parallels virtualisation
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: michael-at-bleistein.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Update 20221128-0 to 20221202 breaks cursor display in Wayland/GNOME on Apple
M1 Macbook Pro with Parallels 18.1.0 virtualisation. After installing and
reboot the cursor is not visible in the main GNOME desktop area. Resize handles
on windows are not displayed/working.

This behavior is unaffected by the installation status of Parallels Tools.

Booting with the 20221128-0 kernel  is not affecting the problem.

Changing from Wayland to X makes the system usable again.


--1670309946.Fe6083D1.21076
Date: Tue, 6 Dec 2022 06:59:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206069

            Bug ID: 1206069
           Summary: VUL-0: CVE-2022-4170: rxvt-unicode: code execution via background OSC
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/349770/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mrueckert-at-suse.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-4170

Posted by David Leadbeater on Dec 05I've discovered rxvt-unicode 9.25 and 9.26
are vulnerable to remote
code execution, in the Perl background extension, when an attacker can
control the data written to the user's terminal and certain options
are set.

The "background" extension is automatically loaded if certain X
resources are set such as 'transparent' (see the full list at the top
of src/perl/background[1]). So it is possible to be using this...

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4170
https://seclists.org/oss-sec/2022/q4/168


--1670314451.cebB1.25161
Date: Tue, 6 Dec 2022 08:14:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206079

            Bug ID: 1206079
           Summary: VUL-0: CVE-2022-40704: phoronix-test-suite: XSS in phoromatic_r_add_test_details.php
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/349763/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: martin.liska-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2150776

An XSS vulnerability was found in phoromatic_r_add_test_details.php.

References:
https://github.com/phoronix-test-suite/phoronix-test-suite/issues/650

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2150776
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-40704


--1670369498.7A0327E0.5000
Date: Tue, 6 Dec 2022 23:31:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206127

            Bug ID: 1206127
           Summary: kdenlive complains about missing MLT package and then crashes.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: cd-at-okunah.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 863371
  --> http://bugzilla.opensuse.org/attachment.cgi?id=863371&action=edit
Dialog about the missing module

I've installed kdenlive 22.08.3-1.1-x86_64 from main tumbleweed repository. The
libmlt is version 7.12.0-162.2-x86_64 from the multimedia libs repository.

Whenever I start kdenlive I get a dialog, that says "Missing MLT module:
glaxnimate required to load Lottie animations". Then I click "OK" in that
dialog box and kdenlive crashes.

Here's what I see in the terminal, when I start kdenlive from the command line:

> $ kdenlive
> Could not detect package type, probably default? App dir is "/usr/bin"
>  = = = =
> GOT Deleted file:  "/home/christof/.config/kdenliverc"
> QPaintDevice: Cannot destroy paint device that is being painted
> $


--1670400337.A1d21.29088
Date: Wed, 7 Dec 2022 08:05:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206141

            Bug ID: 1206141
           Summary: VUL-0: CVE-2022-44900: python-py7zr: directory traversal vulnerability in the SevenZipFile.extractall()
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/349934/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: code-at-bnavigator.de
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall() function
of
the python library py7zr v0.20.0 and earlier allows attackers to write
arbitrary
files via extracting a crafted 7z file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-44900
https://www.cve.org/CVERecord?id=CVE-2022-44900
https://github.com/miurahr/py7zr/commit/1bb43f17515c7f69673a1c88ab9cc72a7bbef406


--1670400631.fD1e2.29322
Date: Wed, 7 Dec 2022 08:10:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206142

            Bug ID: 1206142
           Summary: VUL-0: CVE-2022-41325: vlc: security update 3.0.18
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/349957/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dimstar-at-opensuse.org
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through
3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist
or
connecting to a rogue VNC server, to crash VLC or execute code under some
conditions.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-41325
https://security-tracker.debian.org/tracker/DSA-5297-1
https://www.cve.org/CVERecord?id=CVE-2022-41325
https://www.videolan.org/security/sb-vlc3018.html
https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf
https://twitter.com/0xMitsurugi


--1670434357.761DbDC11.16241
Date: Wed, 7 Dec 2022 17:32:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206185

            Bug ID: 1206185
           Summary: VUL-0: CVE-2022-46169: cacti: Unauthenticated Command Injection
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

A command injection vulnerability allows an unauthenticated user to execute
arbitrary code on a server running Cacti, if a specific data source was
selected for any monitored device.

The vulnerability resides in the remote_agent.php file. This file can be
accessed without authentication.

Affects v1.2.22, fixed in 1.2.23, 1.3.0

For instances of 1.2.x running under PHP < 7.0, a further change a8d59e8 is
also required.

References:
https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf
https://github.com/Cacti/cacti/commit/7f0e16312dd5ce20f93744ef8b9c3b0f1ece2216
https://github.com/Cacti/cacti/commit/b43f13ae7f1e6bfe4e8e56a80a7cd867cf2db52b


--1670503685.adD5D0.29802
Date: Thu, 8 Dec 2022 12:48:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206225

            Bug ID: 1206225
           Summary: [Build 20221207] python-resolvelib breaks ansible
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2935879/modules/ansi
                    ble/steps/25
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

The upgrade of python-resolvelib to 0.9 breaks ansible

Problem: nothing provides 'python3-resolvelib < 0.9.0' needed by the to be
installed ansible-core-2.14.0-3.1.noarch

openQA test in scenario microos-Tumbleweed-MicroOS-Image-x86_64-microos@64bit
fails in
[ansible](https://openqa.opensuse.org/tests/2935879/modules/ansible/steps/25)

## Test suite description

## Reproducible

Fails since (at least) Build
[20221207](https://openqa.opensuse.org/tests/2935879) (current job)

## Expected result

Last good: [20221206](https://openqa.opensuse.org/tests/2933865) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image&machine=64bit&test=microos&version=Tumbleweed)


body:
--1670584430.Cedf0.28356
Date: Fri, 9 Dec 2022 11:13:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206264

            Bug ID: 1206264
           Summary: drop simpledrm workarounds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: tzimmermann-at-suse.com
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mkubecek-at-suse.com
          Found By: ---
           Blocker: ---

Now that simpledrm is running rather smoothly, can we remove these suse-only
patches (temporary workarounds):
  patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch
  patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch
  patches.suse/0001-bsc-1204315-Disable-sysfb-before-creating-simple-fra.patch
from master yet?

summary: drop simpledrm workarounds


body:
--1670818430.2beDFD1D0.7512
Date: Mon, 12 Dec 2022 04:13:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206296

            Bug ID: 1206296
           Summary: [trackerbug] lxd 5.9 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907

 + Network zones project feature

summary: [trackerbug] lxd 5.9 update


body:
--1670857393.04E3EA8d28.20822
Date: Mon, 12 Dec 2022 15:03:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206334

            Bug ID: 1206334
           Summary: [netcdf*] Packages missing Dependencies
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: hpc-bugs-at-suse.de
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

To make sure, dependency chains are rebuilt properly, the explicit package
version needs to be specified in 'Requires:' statements. To auto-generate
these, the macros %{requires_eq} was used (see boo#1179521).
This however only works when the dependent package is available on the build
system. If it isn't, the dependency gets dropped altogether. This has been the
case for netcdf-cxx4 and netcdf.

By adding the HPC master packages explicitly whose versions are to be used the
issue will be remedied.

Going forward, it would be useful of %requires_eq() would actually issue an
error message. With the following maco this would be the case:

%requires_eq() \
%global __val %(t=$(echo '%*' | LC_ALL=C xargs -r rpm -q --qf 'Requires:
%%{name} = %%{epoch}:%%{version}' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep
-v "is not"); test -n "$t" || echo "%%{error: %%%%{requires_eq %*} does not
resolve}" && echo $t) \
%{__val} \
%undefine __val

NOTE: these are just 4 lines - separated by '\' - no matter what line breaks
are added by bugzilla.

summary: [netcdf*] Packages missing Dependencies


body:
--1670866747.1bdFeE1.16212
Date: Mon, 12 Dec 2022 17:39:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206342

            Bug ID: 1206342
           Summary: python-maturin reproducible builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mia@0x0.st
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: william.brown-at-suse.com
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our python-maturin varies from 8 random bytes
introduced in
/usr/bin/maturin-3.8 _ZN5ahash12random_state4SEED17ha63d635427cbc526E
probably from vendor/ahash-0.3.8/src/random_state.rs
that gets pulled in by

chumsky/Cargo.lock-[[package]]
chumsky/Cargo.lock-name = "ahash"
chumsky/Cargo.lock:version = "0.3.8"

rfc2047-decoder/Cargo.lock-[[package]]
rfc2047-decoder/Cargo.lock-name = "ahash"
rfc2047-decoder/Cargo.lock:version = "0.3.8"

When I read https://github.com/tkaitchuck/aHash/blob/master/src/random_state.rs
correctly, the current version should not have this problem.

I think, this could be solved by updating the vendor.tar.xz to only use the
newer ahash version.

summary: python-maturin reproducible builds


body:
--1670882835.ADBBc80.5672
Date: Mon, 12 Dec 2022 22:07:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206346

            Bug ID: 1206346
           Summary: go1.20 release tracking
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

go1.20 (expected February 2023) is a major release of Go.
Minor releases of go1.20.x will be provided through February 2024.
This issue tracks go1.20.x releases packaged and submitted initially
to openSUSE:Factory and can be referenced in submissions to
additional repositories.

Go Release Cycle
https://github.com/golang/go/wiki/Go-Release-Cycle

Go Release history
https://golang.org/doc/devel/release.html

summary: go1.20 release tracking


--1670883370.c647030.5961
Date: Mon, 12 Dec 2022 22:16:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206347

            Bug ID: 1206347
           Summary: util-linux and util-linux-systemd both contain /usr/bin/findmnt causing conflicts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rgoldwyn-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This was revealed while compiling s390-tools:

[    6s] [265/265] cumulate glib2-devel-2.74.3-1.1
[    6s] now installing cumulated packages
[    6s] Preparing...
########################################
[    6s]     file /usr/bin/findmnt conflicts between attempted installs of
util-linux-2.38.1-482.4.s390x and util-linux-systemd-2.38.1-482.1.s390x
[    6s] exit ...


--1670886216.AFdD1.7840
Date: Mon, 12 Dec 2022 23:03:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206348

            Bug ID: 1206348
           Summary: AUDIT-WHITELIST: sddm: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: fabian@ritter-vogt.de
          Found By: ---
           Blocker: ---

Move /etc/dbus-1/system.d/sddm_org.freedesktop.DisplayManager.conf to
/usr/share/dbus-1/system.d/sddm_org.freedesktop.DisplayManager.conf


body:
--1670891043.6D8f0.12944
Date: Tue, 13 Dec 2022 00:24:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206349

            Bug ID: 1206349
           Summary: guake no longer works in 15.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: batpul-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After fresh install of 15.4 the guake program no longer works:

$ /usr/bin/guake
Guake not running, starting it
Loading Gnome schema from: /usr/share/glib-2.0/schemas
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 177, in
activate_name_owner
    return self.get_name_owner(bus_name)
  File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 363, in
get_name_owner
    's', (bus_name,), **keywords)
  File "/usr/lib/python3.6/site-packages/dbus/connection.py", line 653, in
call_blocking
    message, timeout)
dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NameHasNoOwner: Could
not get owner of name 'org.guake3.RemoteControl': no such name

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/guake/main.py", line 451, in main
    remote_object = bus.get_object(DBUS_NAME, DBUS_PATH)
  File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 243, in get_object
    follow_name_owner_changes=follow_name_owner_changes)
  File "/usr/lib/python3.6/site-packages/dbus/proxies.py", line 250, in
__init__
    self._named_service = conn.activate_name_owner(bus_name)
  File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 182, in
activate_name_owner
    self.start_service_by_name(bus_name)
  File "/usr/lib/python3.6/site-packages/dbus/bus.py", line 280, in
start_service_by_name
    'su', (bus_name, flags)))
  File "/usr/lib/python3.6/site-packages/dbus/connection.py", line 653, in
call_blocking
    message, timeout)
dbus.exceptions.DBusException: org.freedesktop.DBus.Error.ServiceUnknown: The
name org.guake3.RemoteControl was not provided by any .service files

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/guake/__init__.py", line 28, in
guake_version
    import importlib.metadata as importlib_metadata
ModuleNotFoundError: No module named 'importlib.metadata'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/bin/guake", line 10, in <module>
    sys.exit(exec_main())
  File "/usr/lib/python3.6/site-packages/guake/main.py", line 616, in exec_main
    if not main():
  File "/usr/lib/python3.6/site-packages/guake/main.py", line 467, in main
    instance = Guake()
  File "/usr/lib/python3.6/site-packages/guake/guake_app.py", line 123, in
__init__
    or self.settings.general.get_string("schema-version") != guake_version()
  File "/usr/lib/python3.6/site-packages/guake/__init__.py", line 30, in
guake_version
    import importlib_metadata
ModuleNotFoundError: No module named 'importlib_metadata'

summary: guake no longer works in 15.4