--17560740443.8401.4127
Date: Sun, 24 Aug 2025 22:20:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248594

            Bug ID: 1248594
           Summary: AX201 driver failure after resume from standby
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Networking
          Assignee: kernel-bugs-at-suse.de
          Reporter: phoenix91140-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello. Driver very buggy (probably firmware, iwlwifi for Intel AX201 card).
Resulting in always failing connection stability and data package loss
Logs(truncated, there is a lot of that repeating):

Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x2A6E8352 | time=
 gp2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000001 | uCode
revision type
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000004D | uCode
version major
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x6EAF654B | uCode
version minor
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000351 | hw
version
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x40489001 | board
version
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0367001C | hcmd
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x80020000 | isr0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00400000 | isr1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x08F00002 | isr2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00C0000D | isr3
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | isr4
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x036D001C | last=
 cmd
Id
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000809A |
wait_event
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00004288 |
l2p_control
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00002020 |
l2p_duration
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 |
l2p_mhvalid
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x000000E7 |
l2p_addr_match
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000009 |
lmpm_pmg_sel
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 |
timestamp
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00008800 |
flow_handler
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Start IWL Error L=
og
Dump:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Transport status:
0x0000004A, valid: 7
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000066 |
NMI_INTERRUPT_HOST
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | umac
branchlink1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x804561F6 | umac
branchlink2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
interruptlink1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
interruptlink2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01000000 | umac
data1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
data2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | umac
data3
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000004D | umac
major
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x6EAF654B | umac
minor
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x2A6E8350 | frame
pointer
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0xC0886260 | stack
pointer
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00BF010C | last
host cmd
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | isr
status reg
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: IML/ROM dump:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000003 | IML/=
ROM
error/state
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00005797 | IML/=
ROM
data1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000080 | IML/=
ROM
WFPM_AUTH_KEY_0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Fseq Registers:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x60000000 |
FSEQ_ERROR_CODE
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x80290033 |
FSEQ_TOP_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00090006 |
FSEQ_CNVIO_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000A482 |
FSEQ_OTP_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000003 |
FSEQ_TOP_CONTENT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x4552414E |
FSEQ_ALIVE_TOKEN
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000302 |
FSEQ_CNVI_ID
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01300504 |
FSEQ_CNVR_ID
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000302 |
CNVI_AUX_MISC_CHIP
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01300504 |
CNVR_AUX_MISC_CHIP
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x05B0905B |
CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000025B |
CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00090006 |
FSEQ_PREV_CNVIO_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00290033 |
FSEQ_WIFI_FSEQ_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00290033 |
FSEQ_BT_FSEQ_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x000001A4 |
FSEQ_CLASS_TP_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: UMAC CURRENT PC:
0x8047329c
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: LMAC1 CURRENT PC:
0xd0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Device error - SW
reset
Aug 24 23:37:27 SapphirePro bluetoothd[3914]: src/profile.c:record_cb() Una=
ble
to get Hands-Free Voice gateway SDP record: Host is down
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17560740443.8401.4127
Date: Sun, 24 Aug 2025 22:20:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248594

          Summary
          AX201 driver failure after resume from standby

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Networking

          Assignee
          kernel-bugs@suse.de

          Reporter
          phoenix91140@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hello. Driver very buggy (probably firmware, iwlwifi for Int=
el AX201 card).
Resulting in always failing connection stability and data package loss
Logs(truncated, there is a lot of that repeating):

Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x2A6E8352 | time=
 gp2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000001 | uCode
revision type
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000004D | uCode
version major
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x6EAF654B | uCode
version minor
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000351 | hw
version
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x40489001 | board
version
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0367001C | hcmd
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x80020000 | isr0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00400000 | isr1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x08F00002 | isr2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00C0000D | isr3
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | isr4
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x036D001C | last=
 cmd
Id
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000809A |
wait_event
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00004288 |
l2p_control
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00002020 |
l2p_duration
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 |
l2p_mhvalid
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x000000E7 |
l2p_addr_match
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000009 |
lmpm_pmg_sel
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 |
timestamp
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00008800 |
flow_handler
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Start IWL Error L=
og
Dump:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Transport status:
0x0000004A, valid: 7
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000066 |
NMI_INTERRUPT_HOST
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | umac
branchlink1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x804561F6 | umac
branchlink2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
interruptlink1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
interruptlink2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01000000 | umac
data1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x8047378E | umac
data2
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | umac
data3
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000004D | umac
major
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x6EAF654B | umac
minor
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x2A6E8350 | frame
pointer
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0xC0886260 | stack
pointer
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00BF010C | last
host cmd
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000000 | isr
status reg
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: IML/ROM dump:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000003 | IML/=
ROM
error/state
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00005797 | IML/=
ROM
data1
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000080 | IML/=
ROM
WFPM_AUTH_KEY_0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Fseq Registers:
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x60000000 |
FSEQ_ERROR_CODE
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x80290033 |
FSEQ_TOP_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00090006 |
FSEQ_CNVIO_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000A482 |
FSEQ_OTP_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00000003 |
FSEQ_TOP_CONTENT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x4552414E |
FSEQ_ALIVE_TOKEN
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000302 |
FSEQ_CNVI_ID
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01300504 |
FSEQ_CNVR_ID
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x20000302 |
CNVI_AUX_MISC_CHIP
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x01300504 |
CNVR_AUX_MISC_CHIP
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x05B0905B |
CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x0000025B |
CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00090006 |
FSEQ_PREV_CNVIO_INIT_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00290033 |
FSEQ_WIFI_FSEQ_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x00290033 |
FSEQ_BT_FSEQ_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: 0x000001A4 |
FSEQ_CLASS_TP_VERSION
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: UMAC CURRENT PC:
0x8047329c
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: LMAC1 CURRENT PC:
0xd0
Aug 24 23:33:04 SapphirePro kernel: iwlwifi 0000:00:14.3: Device error - SW
reset
Aug 24 23:37:27 SapphirePro bluetoothd[3914]: src/profile.c:record_cb() Una=
ble
to get Hands-Free Voice gateway SDP record: Host is down

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17560740443.8401.4127--


--17561265313.f421A3B.5651
Date: Mon, 25 Aug 2025 12:55:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248678

            Bug ID: 1248678
           Summary: govulncheck: BuildRequires latest go1.x to be able to check Go applications using latest go1.x
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Use BuildRequires: golang(API) =3D 1.x with each new major Go release so th=
at the
govulncheck tool can check Go applications built using that new version of =
Go.
Fixes warnings/errors of the following form:

  $ govulncheck .
  govulncheck: Loading packages failed, possibly due to a mismatch between =
the
  Go version used to build govulncheck and the Go version on PATH. Consider
  rebuilding govulncheck with the current Go version.

  There are errors with the provided package patterns:

  -: no Go files in /path/to/appname
  -: This application uses version go1.24 of the source-processing packages=
 but
runs=20
     version go1.25 of 'go list'. It may fail to process source files that =
rely
on=20
     newer language features. If so, rebuild the application using a newer
version of Go.

  For details on package patterns, see
https://pkg.go.dev/cmd/go#hdr-Package_lists_and_patterns.

Context:

govulncheck has its own minimum required Go version in its sources go.mod,
currently go1.24 as of this writing. When a new major version of Go is
released, Go applications will migrate to use it. For govulncheck to check
those applications, it needs to be built with that latest version of Go.

This is a tracking issue, reference when updating govulncheck Go version go=
ing
forward.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17561265313.f421A3B.5651
Date: Mon, 25 Aug 2025 12:55:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248678

          Summary
          govulncheck: BuildRequires latest go1.x to be able to check G=
o applications using latest go1.x

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Use BuildRequires: golang(API) =3D 1.x with each new major G=
o release so that the
govulncheck tool can check Go applications built using that new version of =
Go.
Fixes warnings/errors of the following form:

  $ govulncheck .
  govulncheck: Loading packages failed, possibly due to a mismatch between =
the
  Go version used to build govulncheck and the Go version on PATH. Consider
  rebuilding govulncheck with the current Go version.

  There are errors with the provided package patterns:

  -: no Go files in /path/to/appname
  -: This application uses version go1.24 of the source-processing packages=
 but
runs=20
     version go1.25 of 'go list'. It may fail to process source files that =
rely
on=20
     newer language features. If so, rebuild the application using a newer
version of Go.

  For details on package patterns, see
https:=
//pkg.go.dev/cmd/go#hdr-Package_lists_and_patterns.

Context:

govulncheck has its own minimum required Go version in its sources go.mod,
currently go1.24 as of this writing. When a new major version of Go is
released, Go applications will migrate to use it. For govulncheck to check
those applications, it needs to be built with that latest version of Go.

This is a tracking issue, reference when updating govulncheck Go version go=
ing
forward.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17561265313.f421A3B.5651--


body:
--17561312032.2Ba8FbF6.5918
Date: Mon, 25 Aug 2025 14:13:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248682

            Bug ID: 1248682
           Summary: AUDIT-0: snapd: review of new daemon running as root and related polkit privileges
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: maciek.borzecki-at-gmail.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

For my package found in OBS in system:snappy/snapd I would like a whitelist=
ing
for the following rpmlint errors:

napd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.login (auth_admin:auth_admin:auth_admin_keep)
snapd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.manage (auth_admin:auth_admin:auth_admin_keep)
snapd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.manage-interfaces (auth_admin:auth_admin:auth_admin_keep)

This was previously discussed in
https://bugzilla.suse.com/show_bug.cgi?id=3D1127366 which due to lack of re=
sponse
from the upstream was eventually closed as resolved/noresponse. However, a =
lot
of time, and so code changes, have been introduced since then, so I'm filin=
g a
new audit request bug.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17561312032.2Ba8FbF6.5918
Date: Mon, 25 Aug 2025 14:13:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248682

          Summary
          AUDIT-0: snapd: review of new daemon running as root and rela=
ted polkit privileges

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          maciek.borzecki@gmail.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

For my package found in OBS in system:snappy/snapd I would l=
ike a whitelisting
for the following rpmlint errors:

napd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.login (auth_admin:auth_admin:auth_admin_keep)
snapd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.manage (auth_admin:auth_admin:auth_admin_keep)
snapd.x86_64: E: polkit-untracked-privilege (Badness: 44)
io.snapcraft.snapd.manage-interfaces (auth_admin:auth_admin:auth_admin_keep)

This was previously discussed in
https://bugzilla.suse.com/show_bug.cg=
i?id=3D1127366 which due to lack of response
from the upstream was eventually closed as resolved/noresponse. However, a =
lot
of time, and so code changes, have been introduced since then, so I'm filin=
g a
new audit request bug.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17561312032.2Ba8FbF6.5918--

pkgs: polkit-default-privs rpmlint


body:
--17561975990.87905eDAe.7234
Date: Tue, 26 Aug 2025 08:39:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248739

            Bug ID: 1248739
           Summary: xf86-video-vmware faulty
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: jazz_fan-at-arcor.de
        QA Contact: gfx-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After updating today I couldn't start X anymore within a vmware session und=
er
Windows 11. It turns out that xf86-video-vmware-13.4.0-2.1 is probably the
culprit. Kernel said:
```
Aug 26 09:55:03 delli sddm[2583]: Running: /usr/bin/X -nolisten tcp -backgr=
ound
none -seat seat0 vt2 -auth /run/sddm/xa>
Aug 26 09:55:03 delli systemd[1]: Started CUPS Scheduler.
Aug 26 09:55:03 delli kernel: Command buffer header error.
Aug 26 09:55:03 delli kernel: WARNING: CPU: 2 PID: 2591 at
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:409 vmw_cmdbuf_ctx_pr>
Aug 26 09:55:03 delli kernel: Modules linked in: af_packet iscsi_ibft
iscsi_boot_sysfs qrtr rfkill snd_seq_midi snd_seq>
Aug 26 09:55:03 delli kernel: CPU: 2 UID: 0 PID: 2591 Comm: Xorg.bin Not
tainted 6.16.1-1-default #1 PREEMPT(voluntary)>
Aug 26 09:55:03 delli kernel: Hardware name: VMware, Inc. VMware Virtual
Platform/440BX Desktop Reference Platform, BIO>
Aug 26 09:55:03 delli kernel: RIP: 0010:vmw_cmdbuf_ctx_process+0x1eb/0x270
[vmwgfx]
Aug 26 09:55:03 delli kernel: Code: 67 4c 89 e7 e8 c6 fb ff ff e9 19 ff ff =
ff
80 3d 8e a0 22 00 00 75 ea 48 c7 c7 26 db>
Aug 26 09:55:03 delli kernel: RSP: 0018:ffffd1c9c30472e8 EFLAGS: 00010246
Aug 26 09:55:03 delli kernel: RAX: 0000000000000000 RBX: 0000000000000004 R=
CX:
0000000000000027
Aug 26 09:55:03 delli kernel: RDX: ffff8a07f3f1fec8 RSI: 0000000000000001 R=
DI:
ffff8a07f3f1fec0
Aug 26 09:55:03 delli kernel: RBP: ffff8a06c2b6f400 R08: 0000000000000000 R=
09:
00000000fffbffff
Aug 26 09:55:03 delli kernel: R10: ffffffffa7cc3820 R11: ffffd1c9c30470c8 R=
12:
ffff8a06f1270a00
Aug 26 09:55:03 delli kernel: R13: ffff8a06c2b6f480 R14: ffff8a06c2b6f488 R=
15:
ffff8a06f1270a18
Aug 26 09:55:03 delli kernel: FS:  00007ff0624499c0(0000)
GS:ffff8a084c2e0000(0000) knlGS:0000000000000000
Aug 26 09:55:03 delli kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005=
0033
```
Sorry, this is only the output from journalctl on a terminal so it is not
complete. (I don't have a persistent journal.) Anyway, after replacing
xf86-video-vmware-13.4.0-2.1 with the older xf86-video-vmware-13.4.0-1.7
everything works fine again. When I downloaded the old package from
https://download.opensuse.org/tumbleweed/repo/oss/x86_64/ by hand I noticed
that the new one only has 39.9 kB compared to the 85.5 of the old one. I gu=
ess
something went wrong when packaging.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17561975990.87905eDAe.7234
Date: Tue, 26 Aug 2025 08:39:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248739

          Summary
          xf86-video-vmware faulty

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X.Org

          Assignee
          gfx-bugs@suse.de

          Reporter
          jazz_fan@arcor.de

          QA Contact
          gfx-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After updating today I couldn't start X anymore within a vmw=
are session under
Windows 11. It turns out that xf86-video-vmware-13.4.0-2.1 is probably the
culprit. Kernel said:
```
Aug 26 09:55:03 delli sddm[2583]: Running: /usr/bin/X -nolisten tcp -backgr=
ound
none -seat seat0 vt2 -auth /run/sddm/xa>
Aug 26 09:55:03 delli systemd[1]: Started CUPS Scheduler.
Aug 26 09:55:03 delli kernel: Command buffer header error.
Aug 26 09:55:03 delli kernel: WARNING: CPU: 2 PID: 2591 at
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:409 vmw_cmdbuf_ctx_pr>
Aug 26 09:55:03 delli kernel: Modules linked in: af_packet iscsi_ibft
iscsi_boot_sysfs qrtr rfkill snd_seq_midi snd_seq>
Aug 26 09:55:03 delli kernel: CPU: 2 UID: 0 PID: 2591 Comm: Xorg.bin Not
tainted 6.16.1-1-default #1 PREEMPT(voluntary)>
Aug 26 09:55:03 delli kernel: Hardware name: VMware, Inc. VMware Virtual
Platform/440BX Desktop Reference Platform, BIO>
Aug 26 09:55:03 delli kernel: RIP: 0010:vmw_cmdbuf_ctx_process+0x1eb/0x270
[vmwgfx]
Aug 26 09:55:03 delli kernel: Code: 67 4c 89 e7 e8 c6 fb ff ff e9 19 ff ff =
ff
80 3d 8e a0 22 00 00 75 ea 48 c7 c7 26 db>
Aug 26 09:55:03 delli kernel: RSP: 0018:ffffd1c9c30472e8 EFLAGS: 00010246
Aug 26 09:55:03 delli kernel: RAX: 0000000000000000 RBX: 0000000000000004 R=
CX:
0000000000000027
Aug 26 09:55:03 delli kernel: RDX: ffff8a07f3f1fec8 RSI: 0000000000000001 R=
DI:
ffff8a07f3f1fec0
Aug 26 09:55:03 delli kernel: RBP: ffff8a06c2b6f400 R08: 0000000000000000 R=
09:
00000000fffbffff
Aug 26 09:55:03 delli kernel: R10: ffffffffa7cc3820 R11: ffffd1c9c30470c8 R=
12:
ffff8a06f1270a00
Aug 26 09:55:03 delli kernel: R13: ffff8a06c2b6f480 R14: ffff8a06c2b6f488 R=
15:
ffff8a06f1270a18
Aug 26 09:55:03 delli kernel: FS:  00007ff0624499c0(0000)
GS:ffff8a084c2e0000(0000) knlGS:0000000000000000
Aug 26 09:55:03 delli kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005=
0033
```
Sorry, this is only the output from journalctl on a terminal so it is not
complete. (I don't have a persistent journal.) Anyway, after replacing
xf86-video-vmware-13.4.0-2.1 with the older xf86-video-vmware-13.4.0-1.7
everything works fine again. When I downloaded the old package from
https=
://download.opensuse.org/tumbleweed/repo/oss/x86_64/ by hand I noticed
that the new one only has 39.9 kB compared to the 85.5 of the old one. I gu=
ess
something went wrong when packaging.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17561975990.87905eDAe.7234--

summary: xf86-video-vmware faulty


--17562007741.cF53B0.7354
Date: Tue, 26 Aug 2025 09:32:54 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248740

            Bug ID: 1248740
           Summary: Build failures with GCC 15.2 (libjxl, highway)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The upload of GCC 15.2 (https://build.opensuse.org/request/show/1300985) ma=
kes
2 packages fail to build on x86_64:

* libjxl

[   34s] [ 33%] Linking CXX shared library libjxl_cms.so
[   34s] cd
/home/abuild/rpmbuild/BUILD/libjxl-0.11.1-build/libjxl-0.11.1/build/lib &&
/usr/bin/cmake -E cmake_link_script CMakeFiles/jxl_cms.dir/link.txt --verbo=
se=3D1
[   34s] /tmp/cc7srnUc.s: Assembler messages:
[   34s] /tmp/cc7srnUc.s:18338: Error: no such instruction: `vucomxss
%xmm0,%xmm1'
[   34s] /tmp/cc7srnUc.s:18490: Error: no such instruction: `vucomxss
%xmm0,%xmm2'
[   34s] make[3]: *** [/tmp/ccLQf65Z.mk:2: /tmp/cc5QjUiZ.ltrans0.ltrans.o]
Error 1
[   34s] lto-wrapper: fatal error: make returned 2 exit status

* highway

[   19s] [  9%] Linking CXX executable examples/hwy_benchmark
[   19s] /usr/bin/cmake -E cmake_link_script
CMakeFiles/hwy_benchmark.dir/link.txt --verbose=3D1
[   19s] /tmp/ccVeFR1S.s: Assembler messages:
[   19s] /tmp/ccVeFR1S.s:13780: Error: no such instruction: `vucomxss
.LC9(%rip),%xmm1'
[   19s] make[3]: *** [/tmp/ccXP6A8d.mk:2: /tmp/cczYv7Qq.ltrans0.ltrans.o]
Error 1

...and later...

[   71s] [ 21%] Linking CXX shared library libhwy_contrib.so
[   71s] /usr/bin/cmake -E cmake_link_script
CMakeFiles/hwy_contrib.dir/link.txt --verbose=3D1
[   71s] /tmp/cclju3uN.s: Assembler messages:
[   71s] /tmp/cclju3uN.s:85136: Error: no such instruction: `vucomxsh
62(%r14),%xmm0'
[   71s] /tmp/cclju3uN.s:85159: Error: no such instruction: `vucomxsh
(%r14,%rax,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85163: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85178: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85401: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] /tmp/cclju3uN.s:86235: Error: no such instruction: `vucomxsh
62(%r15),%xmm0'
[   71s] /tmp/cclju3uN.s:86258: Error: no such instruction: `vucomxsh
(%r15,%rax,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86262: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86277: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86461: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] make[3]: *** [/tmp/ccqXkzmO.mk:20: /tmp/cczlioZv.ltrans9.ltrans.o]
Error 1
[   71s] make[3]: *** Waiting for unfinished jobs....
[   71s] /tmp/cch0O70o.s: Assembler messages:
[   71s] /tmp/cch0O70o.s:25191: Error: no such instruction: `vucomxsh
62(%r14),%xmm0'
[   71s] /tmp/cch0O70o.s:25214: Error: no such instruction: `vucomxsh
(%r14,%rax,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25218: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25233: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25456: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] /tmp/cch0O70o.s:26258: Error: no such instruction: `vucomxsh
62(%r15),%xmm0'
[   71s] /tmp/cch0O70o.s:26281: Error: no such instruction: `vucomxsh
(%r15,%rax,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26285: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26300: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26484: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] make[3]: *** [/tmp/ccqXkzmO.mk:18: /tmp/cczlioZv.ltrans8.ltrans.o]
Error 1

...
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17562007741.cF53B0.7354
Date: Tue, 26 Aug 2025 09:32:54 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248740

          Summary
          Build failures with GCC 15.2 (libjxl, highway)

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The upload of GCC 15.2 (https://build.opensuse.org/request/show/1300985=
) makes
2 packages fail to build on x86_64:

* libjxl

[   34s] [ 33%] Linking CXX shared library libjxl_cms.so
[   34s] cd
/home/abuild/rpmbuild/BUILD/libjxl-0.11.1-build/libjxl-0.11.1/build/lib &am=
p;&
/usr/bin/cmake -E cmake_link_script CMakeFiles/jxl_cms.dir/link.txt --verbo=
se=3D1
[   34s] /tmp/cc7srnUc.s: Assembler messages:
[   34s] /tmp/cc7srnUc.s:18338: Error: no such instruction: `vucomxss
%xmm0,%xmm1'
[   34s] /tmp/cc7srnUc.s:18490: Error: no such instruction: `vucomxss
%xmm0,%xmm2'
[   34s] make[3]: *** [/tmp/ccLQf65Z.mk:2: /tmp/cc5QjUiZ.ltrans0.ltrans.o]
Error 1
[   34s] lto-wrapper: fatal error: make returned 2 exit status

* highway

[   19s] [  9%] Linking CXX executable examples/hwy_benchmark
[   19s] /usr/bin/cmake -E cmake_link_script
CMakeFiles/hwy_benchmark.dir/link.txt --verbose=3D1
[   19s] /tmp/ccVeFR1S.s: Assembler messages:
[   19s] /tmp/ccVeFR1S.s:13780: Error: no such instruction: `vucomxss
.LC9(%rip),%xmm1'
[   19s] make[3]: *** [/tmp/ccXP6A8d.mk:2: /tmp/cczYv7Qq.ltrans0.ltrans.o]
Error 1

...and later...

[   71s] [ 21%] Linking CXX shared library libhwy_contrib.so
[   71s] /usr/bin/cmake -E cmake_link_script
CMakeFiles/hwy_contrib.dir/link.txt --verbose=3D1
[   71s] /tmp/cclju3uN.s: Assembler messages:
[   71s] /tmp/cclju3uN.s:85136: Error: no such instruction: `vucomxsh
62(%r14),%xmm0'
[   71s] /tmp/cclju3uN.s:85159: Error: no such instruction: `vucomxsh
(%r14,%rax,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85163: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85178: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:85401: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] /tmp/cclju3uN.s:86235: Error: no such instruction: `vucomxsh
62(%r15),%xmm0'
[   71s] /tmp/cclju3uN.s:86258: Error: no such instruction: `vucomxsh
(%r15,%rax,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86262: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86277: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cclju3uN.s:86461: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] make[3]: *** [/tmp/ccqXkzmO.mk:20: /tmp/cczlioZv.ltrans9.ltrans.o]
Error 1
[   71s] make[3]: *** Waiting for unfinished jobs....
[   71s] /tmp/cch0O70o.s: Assembler messages:
[   71s] /tmp/cch0O70o.s:25191: Error: no such instruction: `vucomxsh
62(%r14),%xmm0'
[   71s] /tmp/cch0O70o.s:25214: Error: no such instruction: `vucomxsh
(%r14,%rax,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25218: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25233: Error: no such instruction: `vucomxsh
(%r14,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:25456: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] /tmp/cch0O70o.s:26258: Error: no such instruction: `vucomxsh
62(%r15),%xmm0'
[   71s] /tmp/cch0O70o.s:26281: Error: no such instruction: `vucomxsh
(%r15,%rax,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26285: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26300: Error: no such instruction: `vucomxsh
(%r15,%rdx,2),%xmm0'
[   71s] /tmp/cch0O70o.s:26484: Error: no such instruction: `vucomxsh
%xmm0,%xmm0'
[   71s] make[3]: *** [/tmp/ccqXkzmO.mk:18: /tmp/cczlioZv.ltrans8.ltrans.o]
Error 1

...

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17562007741.cF53B0.7354--


--17562354004.3feAa.9339
Date: Tue, 26 Aug 2025 19:10:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248769

            Bug ID: 1248769
           Summary: VUL-0: CVE-2025-9478: chromium: Use after free in ANGLE fixed in 139.0.7258.154
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in 139.0.7258.154

CVE-2025-9478: Use after free in ANGLE

https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-des=
ktop_26.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17562354004.3feAa.9339
Date: Tue, 26 Aug 2025 19:10:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248769

          Summary
          VUL-0: CVE-2025-9478: chromium: Use after free in ANGLE fixed=
 in 139.0.7258.154

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in 139.0.7258.154

CVE-2025-9478: Use after free in ANGLE

https://chromereleases.googleblog.com/2025/08/stab=
le-channel-update-for-desktop_26.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17562354004.3feAa.9339--


--17562985381.fddB92ad1.10530
Date: Wed, 27 Aug 2025 12:42:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248800

            Bug ID: 1248800
           Summary: [Build DimStar77/os-autoinst-distri-opensuse#poo187206] openQA test fails in bootloader_s390 based on missing suse.ins file for s390x
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: S/390-64
               URL: https://openqa.opensuse.org/tests/5271282/modules/boot
                    loader_s390/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: ada.lovelace-at-gmx.de
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation
DimStar has fixed the agama tests with switching the bootloader test suite =
to
bootloader_s390 tests. Thanks!
Now we have got the problem, that no suse.ins file exists in the special
directory for openSUSE Leap 16. Therefore, no suse.ins file can be found.
openQA test in scenario
opensuse-16.0-offline-installer-s390x-gnome-agama@DimStar77/os-autoinst-dis=
tri-opensuse#poo187206@s390x-zVM-vswitch-l2
fails in
[bootloader_s390](https://openqa.opensuse.org/tests/5271282/modules/bootloa=
der_s390/steps/18)

## Test suite description
Agama based GNOME installation for Leap 16, lkocman 20240730

## Reproducible

Fails since (at least) Build
[DimStar77/os-autoinst-distri-opensuse#poo187206](https://openqa.opensuse.o=
rg/tests/5271282)
(current job)

## Expected result

Last good: suse.ins file can be found, that the tests can be run also for
openSUSE Leap 16.0 on s390x.

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Ds390x&distri=3Dope=
nsuse&flavor=3Doffline-installer&machine=3Ds390x-zVM-vswitch-l2&test=3Dgnom=
e-agama%40DimStar77%2Fos-autoinst-distri-opensuse%23poo187206&version=3D16.=
0)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17562985381.fddB92ad1.10530
Date: Wed, 27 Aug 2025 12:42:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248800

          Summary
          [Build DimStar77/os-autoinst-distri-opensuse#poo187206] openQ=
A test fails in bootloader_s390 based on missing suse.ins file for s390x

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          S/390-64

          URL
          https://openqa.opensuse.org/tests/5271282/modules/bootloader_=
s390/steps/18

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Installation

          Assignee
          yast2-maintainers@suse.de

          Reporter
          ada.lovelace@gmx.de

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation
DimStar has fixed the agama tests with switching the bootloader test suite =
to
bootloader_s390 tests. Thanks!
Now we have got the problem, that no suse.ins file exists in the special
directory for openSUSE Leap 16. Therefore, no suse.ins file can be found.
openQA test in scenario
opensuse-16.0-offline-installer-s390x-gnome-agama@DimStar77/os-autoinst=
-distri-opensuse#poo187206@s390x-zVM-vswitch-l2
fails in
[bootloader_s390](https://openqa.opensuse.org/tests/5271282/mod=
ules/bootloader_s390/steps/18)

## Test suite description
Agama based GNOME installation for Leap 16, lkocman 20240730

## Reproducible

Fails since (at least) Build
[DimStar77/os-autoinst-distri-opensuse#poo187206](https://openqa.opensuse.org/tests/5271282)
(current job)

## Expected result

Last good: suse.ins file can be found, that the tests can be run also for
openSUSE Leap 16.0 on s390x.

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?=
arch=3Ds390x&distri=3Dopensuse&flavor=3Doffline-installer&machi=
ne=3Ds390x-zVM-vswitch-l2&test=3Dgnome-agama%40DimStar77%2Fos-autoinst-=
distri-opensuse%23poo187206&version=3D16.0)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17562985381.fddB92ad1.10530--


--17562996442.993bFE6.10599
Date: Wed, 27 Aug 2025 13:00:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248802

            Bug ID: 1248802
           Summary: Add more default key bindings for XFCE Wayland with labwc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The default config for labwc on XFCE Wayland doesn't contain a few essential
bindings like the display switch and print screen.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17562996442.993bFE6.10599
Date: Wed, 27 Aug 2025 13:00:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248802

          Summary
          Add more default key bindings for XFCE Wayland with labwc

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Xfce

          Assignee
          bnc-team-xfce@forge.provo.novell.com

          Reporter
          tiwai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The default config for labwc on XFCE Wayland doesn't contain=
 a few essential
bindings like the display switch and print screen.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17562996442.993bFE6.10599--


body:
--17563751613.7B4cEDCf.12635
Date: Thu, 28 Aug 2025 09:59:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248830

            Bug ID: 1248830
           Summary: pdfxmltex has missing formats
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mkoutny-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

$ xmlto pdf tutorial.xml
Making portrait pages on letter paper (215.9mmx279.4mm)

kpathsea: Running mktexfmt pdfxmltex.fmt
mktexfmt [ERROR]: -user mode but path setup is -sys type, bailing out.
This is pdfTeX, Version 3.141592653-2.6-1.40.27 (TeX Live 2025/TeX Live for
SUSE Linux) (preloaded format=3Dpdfxmltex)
 restricted \write18 enabled.
I can't find the format file `pdfxmltex.fmt'!

When I try to rebulit the format manually (command copied from `fmtutil --a=
ll`
I run into:
$ pdftex -ini   -jobname=3Dxmltex -progname=3Dxmltex -translate-file=3Dcp22=
7.tcx
*xmltex.ini
...
! TeX capacity exceeded, sorry [pool size=3D463299].
\UTFviii@two@octets ... u8:#1\string #2\endcsname=20

l.67 ...eUnicodeCharacter{00BA}{\textordmasculine}

No pages of output.
Transcript written on xmltex.log.

My versions:
texlive-2025.20250308-108.2.x86_64
texlive-scripts-bin-2025.20250308.svn64356-108.2.x86_64
texlive-xmltex-2025.218.0.0.8svn71362-56.3.noarch
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17563751613.7B4cEDCf.12635
Date: Thu, 28 Aug 2025 09:59:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248830

          Summary
          pdfxmltex has missing formats

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mkoutny@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

$ xmlto pdf tutorial.xml
Making portrait pages on letter paper (215.9mmx279.4mm)

kpathsea: Running mktexfmt pdfxmltex.fmt
mktexfmt [ERROR]: -user mode but path setup is -sys type, bailing out.
This is pdfTeX, Version 3.141592653-2.6-1.40.27 (TeX Live 2025/TeX Live for
SUSE Linux) (preloaded format=3Dpdfxmltex)
 restricted \write18 enabled.
I can't find the format file `pdfxmltex.fmt'!

When I try to rebulit the format manually (command copied from `fmtutil --a=
ll`
I run into:
$ pdftex -ini   -jobname=3Dxmltex -progname=3Dxmltex -translate-file=3Dcp22=
7.tcx
*xmltex.ini
...
! TeX capacity exceeded, sorry [pool size=3D463299].
\UTFviii@two@octets ... u8:#1\string #2\endcsname=20

l.67 ...eUnicodeCharacter{00BA}{\textordmasculine}

No pages of output.
Transcript written on xmltex.log.

My versions:
texlive-2025.20250308-108.2.x86_64
texlive-scripts-bin-2025.20250308.svn64356-108.2.x86_64
texlive-xmltex-2025.218.0.0.8svn71362-56.3.noarch

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17563751613.7B4cEDCf.12635--

pkgs: texlive texlive-specs-m

summary: pdfxmltex has missing formats


body:
--17563860440.De2e198Ca.13220
Date: Thu, 28 Aug 2025 13:00:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248851

            Bug ID: 1248851
           Summary: mutter 49 brings new polkit rule
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

mutter.x86_64: E: polkit-user-privilege (Badness: 10000)
org.gnome.mutter.backlight-helper (no:no:yes)
The package allows unprivileged users to carry out privileged operations
without root authentication. This could cause security problems if not done
carefully. If the package is intended for inclusion in any SUSE product ple=
ase
open a bug report to request review of the package by the security team.
Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
more information.

Introduced with=20
https://gitlab.gnome.org/GNOME/mutter/-/commit/b5430f81abc5390ed9ff0142fcde=
04a3304bb560

This is from gnome-settings-daemon, but reformatted to the code style
of mutter.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17563860440.De2e198Ca.13220
Date: Thu, 28 Aug 2025 13:00:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248851

          Summary
          mutter 49 brings new polkit rule

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

mutter.x86_64: E: polkit-user-privilege (Badness: 10000)
org.gnome.mutter.backlight-helper (no:no:yes)
The package allows unprivileged users to carry out privileged operations
without root authentication. This could cause security problems if not done
carefully. If the package is intended for inclusion in any SUSE product ple=
ase
open a bug report to request review of the package by the security team.
Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit=
_bugs for
more information.

Introduced with=20
https://gitlab.gnome.org/GNOME/mutter/-/commit/b54=
30f81abc5390ed9ff0142fcde04a3304bb560

This is from gnome-settings-daemon, but reformatted to the code style
of mutter.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17563860440.De2e198Ca.13220--

summary: mutter 49 brings new polkit rule


--17563938832.bfE9.13519
Date: Thu, 28 Aug 2025 15:11:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248855

            Bug ID: 1248855
           Summary: [Build 20250827] upgrading using LiveCD/KDE to TW 0827+ error with u! users
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5274099/modules/awai
                    t_install/steps/1
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

This is caused by the recent change to have all system users created as ful=
ly
locked users (u!)

In this specific case, we happen to install system-users-lp before systemd =
is
updated, resulting in a mismatch

at that time, we are still running systemd-sysusers version 234, which does=
 not
cope with "u!"

openQA test in scenario
opensuse-Tumbleweed-KDE-Live-x86_64-kde_live_upgrade_leap_15.2@uefi fails in
[await_install](https://openqa.opensuse.org/tests/5274099/modules/await_ins=
tall/steps/1)

## Test suite description
Uses the live installer on the kde live media for upgrading the system.

jpupava: RAM increased to 3072 firefox needs half run time and general
performance is much better, defined in medium types
VNC_STALL_THRESHOLD=3D100 to solve grub_test failures where grub is missed
because screen is not updated

## Reproducible

Fails since (at least) Build
[20250827](https://openqa.opensuse.org/tests/5273484)

## Expected result

Last good: [20250826](https://openqa.opensuse.org/tests/5269753) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DKDE-Live&machine=3Duefi&test=3Dkde_live_upgrade_leap_15.2&v=
ersion=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17563938832.bfE9.13519
Date: Thu, 28 Aug 2025 15:11:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248855

          Summary
          [Build 20250827] upgrading using LiveCD/KDE to TW 0827+ error=
 with u! users

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5274099/modules/await_insta=
ll/steps/1

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Upgrade Problems

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

This is caused by the recent change to have all system users created as ful=
ly
locked users (u!)

In this specific case, we happen to install system-users-lp before systemd =
is
updated, resulting in a mismatch

at that time, we are still running systemd-sysusers version 234, which does=
 not
cope with "u!"

openQA test in scenario
opensuse-Tumbleweed-KDE-Live-x86_64-kde_live_upgrade_leap_15.2@uefi fai=
ls in
[await_install](https://openqa.opensuse.org/tests/5274099/modules/=
await_install/steps/1)

## Test suite description
Uses the live installer on the kde live media for upgrading the system.

jpupava: RAM increased to 3072 firefox needs half run time and general
performance is much better, defined in medium types
VNC_STALL_THRESHOLD=3D100 to solve grub_test failures where grub is missed
because screen is not updated

## Reproducible

Fails since (at least) Build
[20250827](https://op=
enqa.opensuse.org/tests/5273484)

## Expected result

Last good: [20250826](https://openqa.opensuse.org/tests/5269753) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse=
.org/tests/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DKDE-Live=
&machine=3Duefi&test=3Dkde_live_upgrade_leap_15.2&version=3DTum=
bleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17563938832.bfE9.13519--


--17564531210.Eb7101D.14513
Date: Fri, 29 Aug 2025 07:38:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248881

            Bug ID: 1248881
           Summary: polkit-file-digest-mismatch for GDM 49.beta
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

gdm.x86_64: E: polkit-file-digest-mismatch (Badness: 10000)
/usr/share/polkit-1/rules.d/20-gdm.rules expected
sha256:c752f8f6c304404e256fbd3f4bbb04d0ec42408f311454268b667597cb1c8265,
has:38aaac33cd24fca2db1bdf35389b0d52bc17741ae55f0de4ea35d16d5817cd24
A polkit rule file changed in content. Packaging polkit rules requires a
review and whitelisting by the SUSE security team. If the package is intend=
ed
for inclusion in any SUSE product please open a bug report to request review
of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
more information.

GDM 49.beta is being packaged up in GNOME:Next for testing

The diff in the polkit rule are the two latest commits on
https://gitlab.gnome.org/GNOME/gdm/-/commits/main/data/polkit-gdm.rules.in?=
ref_type=3Dheads
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17564531210.Eb7101D.14513
Date: Fri, 29 Aug 2025 07:38:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248881

          Summary
          polkit-file-digest-mismatch for GDM 49.beta

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

gdm.x86_64: E: polkit-file-digest-mismatch (Badness: 10000)
/usr/share/polkit-1/rules.d/20-gdm.rules expected
sha256:c752f8f6c304404e256fbd3f4bbb04d0ec42408f311454268b667597cb1c8265,
has:38aaac33cd24fca2db1bdf35389b0d52bc17741ae55f0de4ea35d16d5817cd24
A polkit rule file changed in content. Packaging polkit rules requires a
review and whitelisting by the SUSE security team. If the package is intend=
ed
for inclusion in any SUSE product please open a bug report to request review
of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit=
_bugs for
more information.

GDM 49.beta is being packaged up in GNOME:Next for testing

The diff in the polkit rule are the two latest commits on
https://gitlab.gnome.org/GNOME/gdm/-/commits/m=
ain/data/polkit-gdm.rules.in?ref_type=3Dheads

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17564531210.Eb7101D.14513--


--175647096412.e56f7E3B.15428
Date: Fri, 29 Aug 2025 12:36:04 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248920

            Bug ID: 1248920
           Summary: VUL-0: CVE-2025-58058: tailscale: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/470091/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: rrahl0-at-opensuse.org
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248889
  Target Milestone: ---
          Found By: ---
           Blocker: ---

xz is a pure golang package for reading and writing xz-compressed files. Pr=
ior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://bugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.cve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d=
2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--175647096412.e56f7E3B.15428
Date: Fri, 29 Aug 2025 12:36:04 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248920

          Summary
          VUL-0: CVE-2025-58058: tailscale: github.com/ulikunitz/xz: gi=
thub.com/ulikunitz/xz leaks memory

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/470091/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          rrahl0@opensuse.org

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248889

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

xz is a pure golang package for reading and writing xz-compr=
essed files. Prior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65=
de034f48960b2760d2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686=
-c4v9

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--175647096412.e56f7E3B.15428--


body:
--17564709738.Ed4fB.15428
Date: Fri, 29 Aug 2025 12:36:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248937

            Bug ID: 1248937
           Summary: VUL-0: CVE-2025-58058: hauler: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/470091/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248889
  Target Milestone: ---
          Found By: ---
           Blocker: ---

xz is a pure golang package for reading and writing xz-compressed files. Pr=
ior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://bugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.cve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d=
2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17564709738.Ed4fB.15428
Date: Fri, 29 Aug 2025 12:36:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248937

          Summary
          VUL-0: CVE-2025-58058: hauler: github.com/ulikunitz/xz: githu=
b.com/ulikunitz/xz leaks memory

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/470091/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248889

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

xz is a pure golang package for reading and writing xz-compr=
essed files. Prior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65=
de034f48960b2760d2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686=
-c4v9

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17564709738.Ed4fB.15428--

pkgs: hauler trivy


--17564709830.88b5ABB.15428
Date: Fri, 29 Aug 2025 12:36:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248949

            Bug ID: 1248949
           Summary: VUL-0: CVE-2025-58058: sbctl: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/470091/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jubalh-at-iodoru.org
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248889
  Target Milestone: ---
          Found By: ---
           Blocker: ---

xz is a pure golang package for reading and writing xz-compressed files. Pr=
ior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://bugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.cve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d=
2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17564709830.88b5ABB.15428
Date: Fri, 29 Aug 2025 12:36:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248949

          Summary
          VUL-0: CVE-2025-58058: sbctl: github.com/ulikunitz/xz: github=
.com/ulikunitz/xz leaks memory

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/470091/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58058:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jubalh@iodoru.org

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248889

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

xz is a pure golang package for reading and writing xz-compr=
essed files. Prior
to version 0.5.14, it is possible to put data in front of an LZMA-encoded b=
yte
stream without detecting the situation while reading the header. This can l=
ead
to increased memory consumption because the current implementation allocates
the full decoding buffer directly after reading the header. The LZMA header
doesn't include a magic number or has a checksum to detect such an issue
according to the specification. Note that the code recognizes the issue lat=
er
while reading the stream, but at this time the memory allocation has already
been done. This issue has been patched in version 0.5.14.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58058
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2391585
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-58058
https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65=
de034f48960b2760d2ae2
https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686=
-c4v9

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17564709830.88b5ABB.15428--


--17565559190.AaCE286b.16627
Date: Sat, 30 Aug 2025 12:11:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248979

            Bug ID: 1248979
           Summary: AUDIT-0: polkit-file-digest-mismatch for gnome-remote-desktop 49
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

While preparing updates for GNOME 49 (release candidate drops this weekend)=
 I
stumbled over a polkit-file-digest error in gnome-remote-desktop

gnome-remote-desktop.x86_64: E: polkit-file-digest-mismatch (Badness: 10000)
/usr/share/polkit-1/rules.d/20-gnome-remote-desktop.rules expected
sha256:559f983aa50bbea8f4927fa96dc06a4e0f781617495339155b2bd4d077ec4607,
has:4cbe3c8b9fac5eb9d5eb7a32b7f0e57bdbcf460fde7bc1994d3746ad46a8a446
A polkit rule file changed in content. Packaging polkit rules requires a
review and whitelisting by the SUSE security team. If the package is intend=
ed
for inclusion in any SUSE product please open a bug report to request review
of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
more information.

The package can be found in GNOME:Next/gnome-remote-desktop

relevant upstream commit
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/commit/e7513dd86a67c5=
dd133d6a45d45d1bc2766800a3
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17565559190.AaCE286b.16627
Date: Sat, 30 Aug 2025 12:11:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248979

          Summary
          AUDIT-0: polkit-file-digest-mismatch for gnome-remote-desktop=
 49

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

While preparing updates for GNOME 49 (release candidate drop=
s this weekend) I
stumbled over a polkit-file-digest error in gnome-remote-desktop

gnome-remote-desktop.x86_64: E: polkit-file-digest-mismatch (Badness: 10000)
/usr/share/polkit-1/rules.d/20-gnome-remote-desktop.rules expected
sha256:559f983aa50bbea8f4927fa96dc06a4e0f781617495339155b2bd4d077ec4607,
has:4cbe3c8b9fac5eb9d5eb7a32b7f0e57bdbcf460fde7bc1994d3746ad46a8a446
A polkit rule file changed in content. Packaging polkit rules requires a
review and whitelisting by the SUSE security team. If the package is intend=
ed
for inclusion in any SUSE product please open a bug report to request review
of the package by the security team. Please refer to
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit=
_bugs for
more information.

The package can be found in GNOME:Next/gnome-remote-desktop

relevant upstream commit
https://gitlab.gnome.org/GNOME/gnome=
-remote-desktop/-/commit/e7513dd86a67c5dd133d6a45d45d1bc2766800a3

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17565559190.AaCE286b.16627--


--17566384812.Ff46eEf97.16962
Date: Sun, 31 Aug 2025 11:08:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248987

            Bug ID: 1248987
           Summary: "PyO3 modules do not yet support subinterpreters"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: jfunk-at-funktronics.ca
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://bugzilla.redhat.com/show_bug.cgi?id=3D2298403
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17566384812.Ff46eEf97.16962
Date: Sun, 31 Aug 2025 11:08:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248987

          Summary
          "PyO3 modules do not yet support subinterpreters"

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          jfunk@funktronics.ca

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://bugzilla.redhat.com/show_bug.cgi?id=3D2298403

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17566384812.Ff46eEf97.16962--


body:
--17566608920.BAe707.17057
Date: Sun, 31 Aug 2025 17:21:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248990

            Bug ID: 1248990
           Summary: TuxGuitar does not launch any more
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: guiv42-at-tuta.io
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since a recent update of tumbleweed, TuxGuitar does not work any more.
It fails to load a java class from Eclipse SWT:
java.lang.NoClassDefFoundError: org/eclipse/swt/widgets/Display

It seems related to the launcher script, since removing the following line =
in
"swt_guess_()" function solves the issue:
file -L "$f" >/dev/null 2>&1 || f=3D""
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17566608920.BAe707.17057
Date: Sun, 31 Aug 2025 17:21:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248990

          Summary
          TuxGuitar does not launch any more

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          guiv42@tuta.io

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Since a recent update of tumbleweed, TuxGuitar does not work=
 any more.
It fails to load a java class from Eclipse SWT:
java.lang.NoClassDefFoundError: org/eclipse/swt/widgets/Display

It seems related to the launcher script, since removing the following line =
in
"swt_guess_()" function solves the issue:
file -L "$f" >/dev/null 2>&1 || f=3D""

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17566608920.BAe707.17057--

summary: TuxGuitar does not launch any more


body:
Gecko/20100101
Firefox/141.0
Build Identifier:=20

I'm trying to install Aeon Desktop. I deleted all previous secure boot and =
tpm
keys, but when the step "writing to bootloader" comes, the instal=
l fails and
the error says this:
Command /usr/bin/chroot var/lib/tik/encrypt/mnt sdbootutil -vv --esp- path
/boot/efi --no- variables install FAILED

When I hide TPM and deactivate secure boot, the install succeeds.

Reproducible: Always

Steps to Reproduce:
Activate TPM and secureboot
delete all the keys=20
start installation
Actual Results:=20=20
install fails

Expected Results:=20=20
install succeeds

The device is a HP Spectre X360 16"

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17566739452.F7D3183A3.17108--

pkgs: patterns-aeon patterns-tik

summary: Install fails when trying to install with TPM and secure boot


--17567034830.F95208.17315
Date: Mon, 1 Sep 2025 05:11:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248995

            Bug ID: 1248995
           Summary: VUL-0: CVE-2025-9732: dcmtk: A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/470322/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: christophe-at-krop.fr
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown
function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the
component dcm2img. Such manipulation leads to memory corruption. Local acce=
ss
is required to approach this attack. The name of the patch is 7ad81d69b. It=
 is
best practice to apply a patch to resolve this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-9732
https://www.cve.org/CVERecord?id=3DCVE-2025-9732
https://github.com/DCMTK/dcmtk/commit/7ad81d69b
https://vuldb.com/?ctiid.322023
https://vuldb.com/?id.322023
https://vuldb.com/?submit.639772
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17567034830.F95208.17315
Date: Mon, 1 Sep 2025 05:11:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248995

          Summary
          VUL-0: CVE-2025-9732: dcmtk: A vulnerability was identified i=
n DCMTK up to 3.6.9. This affects an unknown function in the library dcmima=
ge/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipul=
ation leads to memory corruption.

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/470322/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          christophe@krop.fr

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

A vulnerability was identified in DCMTK up to 3.6.9. This af=
fects an unknown
function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the
component dcm2img. Such manipulation leads to memory corruption. Local acce=
ss
is required to approach this attack. The name of the patch is 7ad81d69b. It=
 is
best practice to apply a patch to resolve this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-9732
https://www.cv=
e.org/CVERecord?id=3DCVE-2025-9732
https://github.=
com/DCMTK/dcmtk/commit/7ad81d69b
https://vuldb.com/?ctiid.322023=

https://vuldb.com/?id.322023
https://vuldb.com/?submit.6397=
72

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17567034830.F95208.17315--


--17567455503.F8fcb.18883
Date: Mon, 1 Sep 2025 16:52:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249034

            Bug ID: 1249034
           Summary: drop unmaintained downstream net-tools ether-wake in favor of busybox
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: sbrabec-at-suse.com
          Reporter: sbrabec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: ihno-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

There is a downstream addition to net-tools: ether-wake utility. Surprising=
ly,
net-tools were partially deprecated in 2014, but this utility was added in
2017, without any rationale. And it was added to a non-deprecated part. I am
curious, because we have wol utility, and the upstream does not like the id=
ea
of adding new tools to a deprecated project.

ether-wake is a downstream addition to net-tools added there eight years ag=
o.
New upstream refuses new binaries added to net-tools, as it is in the
maintenance mode and deprecated, and no new features and tools should appea=
r.

I consider dropping of ether-wake from net-tools as a good idea. Users who
don't want to migrate to wol should migrate to busybox-ether-wake.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17567455503.F8fcb.18883
Date: Mon, 1 Sep 2025 16:52:30 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249034

          Summary
          drop unmaintained downstream net-tools ether-wake in favor of=
 busybox

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          sbrabec@suse.com

          Reporter
          sbrabec@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          ihno@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

There is a downstream addition to net-tools: ether-wake util=
ity. Surprisingly,
net-tools were partially deprecated in 2014, but this utility was added in
2017, without any rationale. And it was added to a non-deprecated part. I am
curious, because we have wol utility, and the upstream does not like the id=
ea
of adding new tools to a deprecated project.

ether-wake is a downstream addition to net-tools added there eight years ag=
o.
New upstream refuses new binaries added to net-tools, as it is in the
maintenance mode and deprecated, and no new features and tools should appea=
r.

I consider dropping of ether-wake from net-tools as a good idea. Users who
don't want to migrate to wol should migrate to busybox-ether-wake.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17567455503.F8fcb.18883--


--17568064532.5E1d.19831
Date: Tue, 2 Sep 2025 09:47:33 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249045

            Bug ID: 1249045
           Summary: [TRACKER] Switching to ffmpeg-8 by default
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

We're looking into switching to ffmpeg-8 in Factory. A initial build got the
following list of failures and a bunch of unresolvable packages that could =
fail
later.

* chromaprint(fixed)
* opencv - fixed in upcoming version 4.13.0, see
https://github.com/opencv/opencv/pull/27691=20
* gegl - https://gitlab.gnome.org/GNOME/gegl/-/issues/428
* kpipewire6
* libplacebo5
* libqt5-qtwebengine
* qt6-webengine
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17568064532.5E1d.19831
Date: Tue, 2 Sep 2025 09:47:33 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249045

          Summary
          [TRACKER] Switching to ffmpeg-8 by default

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

We're looking into switching to ffmpeg-8 in Factory. A initi=
al build got the
following list of failures and a bunch of unresolvable packages that could =
fail
later.

* chromaprint(fixed)
* opencv - fixed in upcoming version 4.13.0, see
https://github.com/=
opencv/opencv/pull/27691=20
* gegl - https=
://gitlab.gnome.org/GNOME/gegl/-/issues/428
* kpipewire6
* libplacebo5
* libqt5-qtwebengine
* qt6-webengine

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17568064532.5E1d.19831--