--17199286161.1fF9E.5520
Date: Tue, 2 Jul 2024 13:56:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227299

            Bug ID: 1227299
           Summary: "Storage" does not appear in left menu and URL doesn't work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Cockpit
          Assignee: Cockpit-bugs-at-suse.de
          Reporter: robert.simai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Tumbleweed all current, installed Cockpit including cockpit-storaged. But it
doesn't appear in the left menu (between Logs and Networking). For the desi=
red
URL https://IP-ADDRESS:9090/storage Cockpit responds with "Not found".

Not sure if it's related but I have another TW system that I used for coding
with the Starter Kit and there the storage module appears and is functional.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17199286161.1fF9E.5520
Date: Tue, 2 Jul 2024 13:56:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227299

          Summary
          "Storage" does not appear in left menu and URL does=
n't work

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Cockpit

          Assignee
          Cockpit-bugs@suse.de

          Reporter
          robert.simai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Tumbleweed all current, installed Cockpit including cockpit-=
storaged. But it
doesn't appear in the left menu (between Logs and Networking). For the desi=
red
URL https://IP-ADDRESS:9090/sto=
rage Cockpit responds with "Not found".

Not sure if it's related but I have another TW system that I used for coding
with the Starter Kit and there the storage module appears and is functional=
.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17199286161.1fF9E.5520--


--17199334321.E1fEB.70
Date: Tue, 2 Jul 2024 15:17:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227301

            Bug ID: 1227301
           Summary: Kernel boot crashes on Thinkpad P14s Gen 3 AMD
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xen
          Assignee: xen-bugs-at-suse.de
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 875832
  --> https://bugzilla.suse.com/attachment.cgi?id=3D875832&action=3Dedit
dmesg with crash of Leap 15.6 kernel

When I boot a recent kernel (openSUSE Leap 15.6 or TW 6.9.x kernel) with Xen
(Dom0) on the Company's standard laptop (Thinkpad P14s Gen 3 AMD), it crash=
es
with kernel oops and couldn't proceed the boot.

After skimming over the net, I found that it's crashing at loading ucsi_acpi
driver, and blacklisting it indeed made it booting further.  (As a result, =
it
lacks of the touchpad and some USB stuff, though.)

Below is a dmesg output after manually loading ucsi_acpi module.

I checked with 6.9.7 TW backport kernel, and it hits the same problem.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17199334321.E1fEB.70
Date: Tue, 2 Jul 2024 15:17:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227301

          Summary
          Kernel boot crashes on Thinkpad P14s Gen 3 AMD

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Xen

          Assignee
          xen-bugs@suse.de

          Reporter
          tiwai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created a=
ttachment 875832 [details]
dmesg with crash of Leap 15.6 kernel

When I boot a recent kernel (openSUSE Leap 15.6 or TW 6.9.x kernel) with Xen
(Dom0) on the Company's standard laptop (Thinkpad P14s Gen 3 AMD), it crash=
es
with kernel oops and couldn't proceed the boot.

After skimming over the net, I found that it's crashing at loading ucsi_acpi
driver, and blacklisting it indeed made it booting further.  (As a result, =
it
lacks of the touchpad and some USB stuff, though.)

Below is a dmesg output after manually loading ucsi_acpi module.

I checked with 6.9.7 TW backport kernel, and it hits the same problem.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17199334321.E1fEB.70--


--17199387432.69d9b1Bd.295
Date: Tue, 2 Jul 2024 16:45:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227305

            Bug ID: 1227305
           Summary: VUL-0: CVE-2024-38519: yt-dlp: improper file extension limitations lead to to arbitrary filenames being created in the download folder
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/412693/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

`yt-dlp` is a command-line audio/video downloader. Prior to version 2024.07=
.01,
`yt-dlp` does not limit the extensions of downloaded files, which could lea=
d to
aribitrary filenames being created in the download folder (and path travers=
al
on Windows). Since `yt-dlp` also reads config from the working directory (a=
nd
on Windows executables will be executed from the yt-dlp directory) this cou=
ld
lead to arbitrary code being executed. `yt-dlp` version 2024.07.01 fixes th=
is
issue by whitelisting the allowed extensions. This might mean some very
uncommon extensions might not get downloaded, however it will also limit the
possible exploitation surface. In addition to upgrading, have `.%(ext)s` at=
 the
end of the output template and make sure the user trusts the websites that =
they
are downloading from. Also, make sure to never download to a directory with=
in
PATH or other sensitive locations like one's user directory, `system32`, or
other binaries locations. For users who are not able to upgrade, keep the
default output template (`-o "%(title)s [%(id)s].%(ext)s`); make sure the
extension of the media to download is a common video/audio/sub/... one; try=
 to
avoid the generic extractor; and/or use `--ignore-config --config-location =
...`
to not load config from common locations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-38519
https://www.cve.org/CVERecord?id=3DCVE-2024-38519
https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090c=
ed03a
https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j
https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17199387432.69d9b1Bd.295
Date: Tue, 2 Jul 2024 16:45:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227305

          Summary
          VUL-0: CVE-2024-38519: yt-dlp: improper file extension limita=
tions lead to to arbitrary filenames being created in the download folder

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/412693/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jengelh@inai.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

`yt-dlp` is a command-line audio/video downloader. Prior to =
version 2024.07.01,
`yt-dlp` does not limit the extensions of downloaded files, which could lea=
d to
aribitrary filenames being created in the download folder (and path travers=
al
on Windows). Since `yt-dlp` also reads config from the working directory (a=
nd
on Windows executables will be executed from the yt-dlp directory) this cou=
ld
lead to arbitrary code being executed. `yt-dlp` version 2024.07.01 fixes th=
is
issue by whitelisting the allowed extensions. This might mean some very
uncommon extensions might not get downloaded, however it will also limit the
possible exploitation surface. In addition to upgrading, have `.%(ext)s` at=
 the
end of the output template and make sure the user trusts the websites that =
they
are downloading from. Also, make sure to never download to a directory with=
in
PATH or other sensitive locations like one's user directory, `system32`, or
other binaries locations. For users who are not able to upgrade, keep the
default output template (`-o "%(title)s [%(id)s].%(ext)s`); make sure =
the
extension of the media to download is a common video/audio/sub/... one; try=
 to
avoid the generic extractor; and/or use `--ignore-config --config-location =
...`
to not load config from common locations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-38519
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-38519
https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9=
c30c8c31f58330090ced03a
https:=
//github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh=
3h-8g4j
=
https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17199387432.69d9b1Bd.295--


--17199547390.02DF02a.733
Date: Tue, 2 Jul 2024 21:12:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227313

            Bug ID: 1227313
           Summary: /usr/etc/X11/xinit/xinitrc.common leaves behind zombie nvidia-settings process
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: X11 3rd Party Driver
          Assignee: gfx-bugs-at-suse.de
          Reporter: alanas.00-at-mail.ru
        QA Contact: sndirsch-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

this is very similar to #1218458 but not FIXED for me

here is copy+paste from htop (user threads hidden by pressing H):
S  CPU% MEM%   TIME+  Command

S   0.0  0.0  0:00.31 =E2=94=9C=E2=94=80 /usr/sbin/lightdm
S   0.7  0.3  0:23.78 =E2=94=82  =E2=94=9C=E2=94=80 /usr/bin/Xorg.bin :0 -s=
eat seat0 -auth
/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
S   0.0  0.0  0:00.03 =E2=94=82  =E2=94=94=E2=94=80 lightdm --session-child=
 13 20
S   0.0  0.1  0:00.05 =E2=94=82     =E2=94=94=E2=94=80 /usr/bin/startplasma=
-x11
Z   0.0  0.0  0:00.03 =E2=94=82        =E2=94=9C=E2=94=80 nvidia-settings
S   0.0  0.0  0:00.00 =E2=94=82        =E2=94=9C=E2=94=80 /usr/bin/ssh-agen=
t /usr/bin/gpg-agent --sh
--daemon --keep-display /usr/libexec/xinit/xinitrc
S   0.0  0.0  0:00.05 =E2=94=82        =E2=94=94=E2=94=80 /usr/bin/gpg-agen=
t --sh --daemon
--keep-display /usr/libexec/xinit/xinitrc

notice nvidia-settings line contains "Z", that means process is zombie (exi=
ted
but not waited)

nvidia-settings is started by bash script "/usr/etc/X11/xinit/xinitrc.commo=
n":
#
# Load nvidia settings
#
if test -r $HOME/.nvidia-settings-rc && type -p nvidia-settings > /dev/null=
 ;
then
    nvidia-settings --load-config-only > /dev/null 2>&1 &
fi

theory what happened:
1. bash started nvidia-settings
2. bash replaced itself with startplasma-x11
3. nvidia-settings exited
4. startplasma-x11 didn't wait nvidia-settings
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17199547390.02DF02a.733
Date: Tue, 2 Jul 2024 21:12:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227313

          Summary
          /usr/etc/X11/xinit/xinitrc.common leaves behind zombie nvidia=
-settings process

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          X11 3rd Party Driver

          Assignee
          gfx-bugs@suse.de

          Reporter
          alanas.00@mail.ru

          QA Contact
          sndirsch@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

this is very similar to #1218458 but not FIXED for me

here is copy+paste from htop (user threads hidden by pressing H):
S  CPU% MEM%   TIME+  Command

S   0.0  0.0  0:00.31 =E2=94=9C=E2=94=80 /usr/sbin/lightdm
S   0.7  0.3  0:23.78 =E2=94=82  =E2=94=9C=E2=94=80 /usr/bin/Xorg.bin :0 -s=
eat seat0 -auth
/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
S   0.0  0.0  0:00.03 =E2=94=82  =E2=94=94=E2=94=80 lightdm --session-child=
 13 20
S   0.0  0.1  0:00.05 =E2=94=82     =E2=94=94=E2=94=80 /usr/bin/startplasma=
-x11
Z   0.0  0.0  0:00.03 =E2=94=82        =E2=94=9C=E2=94=80 nvidia-settings
S   0.0  0.0  0:00.00 =E2=94=82        =E2=94=9C=E2=94=80 /usr/bin/ssh-agen=
t /usr/bin/gpg-agent --sh
--daemon --keep-display /usr/libexec/xinit/xinitrc
S   0.0  0.0  0:00.05 =E2=94=82        =E2=94=94=E2=94=80 /usr/bin/gpg-agen=
t --sh --daemon
--keep-display /usr/libexec/xinit/xinitrc

notice nvidia-settings line contains "Z", that means process is z=
ombie (exited
but not waited)

nvidia-settings is started by bash script "/usr/etc/X11/xinit/xinitrc.=
common":
#
# Load nvidia settings
#
if test -r $HOME/.nvidia-settings-rc && type -p nvidia-settings &gt=
; /dev/null ;
then
    nvidia-settings --load-config-only > /dev/null 2>&1 &
fi

theory what happened:
1. bash started nvidia-settings
2. bash replaced itself with startplasma-x11
3. nvidia-settings exited
4. startplasma-x11 didn't wait nvidia-settings

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17199547390.02DF02a.733--


body:
--17199968497.9CcccB.2083
Date: Wed, 3 Jul 2024 08:54:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227328

            Bug ID: 1227328
           Summary: toolbox image is based on SLEM 5.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: felix.niederwanger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

On Leap 15.6 the toolbox package pulls the now EOL toolbox image from
Leap-Micro 5.4.

> leap15-6:~ # toolbox
> Trying to pull registry.opensuse.org/opensuse/leap-micro/5.4/toolbox:late=
st...

I think it should at least use 5.5, better Leap-Micro 6.0 nowadays.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17199968497.9CcccB.2083
Date: Wed, 3 Jul 2024 08:54:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227328

          Summary
          toolbox image is based on SLEM 5.4

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Containers

          Assignee
          containers-bugowner@suse.de

          Reporter
          felix.niederwanger@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

On Leap 15.6 the toolbox package pulls the now EOL toolbox i=
mage from
Leap-Micro 5.4.

> leap15-6:~ # toolbox
> Trying to pull registry.opensuse.org/opensuse/leap-micro/5.4/toolbox:l=
atest...

I think it should at least use 5.5, better Leap-Micro 6.0 nowadays.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17199968497.9CcccB.2083--

summary: toolbox image is based on SLEM 5.4


body:
--17200655460.D03bB4dc.6645
Date: Thu, 4 Jul 2024 03:59:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227364

            Bug ID: 1227364
           Summary: trackerbug: packages build differently without %check
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bwiedemann-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1081754
  Target Milestone: ---
          Found By: Development
           Blocker: ---

The %check section in a .spec file runs scripts
that may modify the package output.

Some packages fail to build with osc build --nocheck
and some others produce different build results.
Both of these cases make reproducible-builds harder and are considered bugs.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17200655460.D03bB4dc.6645
Date: Thu, 4 Jul 2024 03:59:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227364

          Summary
          trackerbug: packages build differently without %check

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          bwiedemann@suse.com

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          Blocks
          1081754

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

The %check section in a .spec file runs scripts
that may modify the package output.

Some packages fail to build with osc build --nocheck
and some others produce different build results.
Both of these cases make reproducible-builds harder and are considered bugs=
.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17200655460.D03bB4dc.6645--

pkgs: latex2html perl-XML-LibXML swtpm


--17200825344.c4a1D8a1.7134
Date: Thu, 4 Jul 2024 08:42:14 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227378

            Bug ID: 1227378
           Summary: /usr/bin/idle* don't have executable bits
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

tumbleweed-pkg~$ l /usr/bin/*idle*
-rw-r--r--. 1 root root 94 =C4=8Den 25 23:57 /usr/bin/idle3.11
-rw-r--r--. 1 root root 94 =C4=8Den 30 21:20 /usr/bin/idle3.13
tumbleweed-pkg~$
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17200825344.c4a1D8a1.7134
Date: Thu, 4 Jul 2024 08:42:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227378

          Summary
          /usr/bin/idle* don't have executable bits

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

tumbleweed-pkg~$ l /usr/bin/*idle*
-rw-r--r--. 1 root root 94 =C4=8Den 25 23:57 /usr/bin/idle3.11
-rw-r--r--. 1 root root 94 =C4=8Den 30 21:20 /usr/bin/idle3.13
tumbleweed-pkg~$

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17200825344.c4a1D8a1.7134--


--17201046942.E1F32A.8772
Date: Thu, 4 Jul 2024 14:51:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227402

            Bug ID: 1227402
           Summary: cockpit-kdump reports kexec-tools missing when it actually wants kdump
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Cockpit
          Assignee: Cockpit-bugs-at-suse.de
          Reporter: robert.simai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After installation cockpit-kdump (316) reports

-->--
Kdump service is not installed.
Install the kexec-tools package.
--<--

which is misleading as the package is installed as a dependency of
cockpit-kdump when you zypper it in. But it's missing the "kdump" package t=
o be
installed so the message is misleading.

Expected: maybe kdump can be pulled in automatically as a dependency, at le=
ast
the message should be correct. It could simply mention both packages.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17201046942.E1F32A.8772
Date: Thu, 4 Jul 2024 14:51:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227402

          Summary
          cockpit-kdump reports kexec-tools missing when it actually wa=
nts kdump

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Cockpit

          Assignee
          Cockpit-bugs@suse.de

          Reporter
          robert.simai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After installation cockpit-kdump (316) reports

-->--
Kdump service is not installed.
Install the kexec-tools package.
--<--

which is misleading as the package is installed as a dependency of
cockpit-kdump when you zypper it in. But it's missing the "kdump"=
 package to be
installed so the message is misleading.

Expected: maybe kdump can be pulled in automatically as a dependency, at le=
ast
the message should be correct. It could simply mention both packages.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17201046942.E1F32A.8772--


body:
--17201612372.01e1.119
Date: Fri, 5 Jul 2024 06:33:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227420

            Bug ID: 1227420
           Summary: openSUSE missing fi keymap
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jarkko.torvinen-at-iki.fi
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

On Tumbleweed installer, when selecting keyboard "Finnish", it results in
"fi-kotoistus" in /etc/vconsole.conf. Gnome is not aware of such layout,
resulting in non-working keymap in Gnome desktop, gnome-settings listing in=
put
source as "fi+kotoistus", and you need to change it to "Finnish" or "Finnish
(classic)" to have working keyboard.

On Aeon, keyboard selection is done with gnome initial setup. It has options
"Finnish" and "Finnish (classic)" (as above with TW gnome-settins).
1) "Finnish" results in "fi" in /etc/vconsole.conf, but fi.map.gz does not
exist in openSUSE, resulting in failing unit systemd-vconsole-setup
2) "Finnish (classic)" results in "fi-classic" in /etc/vconsole.conf, and
everything works fine

So both TW and Aeon are broken if you simply select obvious choices "Finnis=
h".
TW in GNOME, Aeon in form of failing unit during boot. On TW, selecting
"Finnish" does not alter /etc/vconsole.conf anymore, so it does not break i=
t,
only initial setup with Aeon.

Other distros (Debian,Arch for example) ship with "fi" map, and works as
should.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17201612372.01e1.119
Date: Fri, 5 Jul 2024 06:33:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227420

          Summary
          openSUSE missing fi keymap

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jarkko.torvinen@iki.fi

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

On Tumbleweed installer, when selecting keyboard "Finni=
sh", it results in
"fi-kotoistus" in /etc/vconsole.conf. Gnome is not aware of such =
layout,
resulting in non-working keymap in Gnome desktop, gnome-settings listing in=
put
source as "fi+kotoistus", and you need to change it to "Finn=
ish" or "Finnish
(classic)" to have working keyboard.

On Aeon, keyboard selection is done with gnome initial setup. It has options
"Finnish" and "Finnish (classic)" (as above with TW gno=
me-settins).
1) "Finnish" results in "fi" in /etc/vconsole.conf, but=
 fi.map.gz does not
exist in openSUSE, resulting in failing unit systemd-vconsole-setup
2) "Finnish (classic)" results in "fi-classic" in /etc/=
vconsole.conf, and
everything works fine

So both TW and Aeon are broken if you simply select obvious choices "F=
innish".
TW in GNOME, Aeon in form of failing unit during boot. On TW, selecting
"Finnish" does not alter /etc/vconsole.conf anymore, so it does n=
ot break it,
only initial setup with Aeon.

Other distros (Debian,Arch for example) ship with "fi" map, and w=
orks as
should.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17201612372.01e1.119--

summary: openSUSE missing fi keymap


body:
Gecko/20100101
Firefox/127.0
Build Identifier:=20

libSDL2_mixer-2_0-0-32bit is missing from default repos.=20
It was available in Leap 15.5, but went missing in Leap 15.6 (and in additi=
on,
Tumbleweed).

Reproducible: Always

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17203032970.ca26FB3.29--

summary: libSDL2_mixer-2_0-0-32bit missing


--17205340890.1baaB8.2091
Date: Tue, 9 Jul 2024 14:08:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227580

            Bug ID: 1227580
           Summary: yast2-services-manager fails to build with systemd v256
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

It seems that there's a regression in yast2-services-manager with the latest
version of systemd (v256 submitted via sr#1186155).

For more details please check the following link:=20
https://build.opensuse.org/package/show/openSUSE:Factory:Staging:K/yast2-se=
rvices-manager

Could you have a look ?

Thanks.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17205340890.1baaB8.2091
Date: Tue, 9 Jul 2024 14:08:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227580

          Summary
          yast2-services-manager fails to build with systemd v256

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          YaST2

          Assignee
          yast2-maintainers@suse.de

          Reporter
          fbui@suse.com

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

It seems that there's a regression in yast2-services-manager with the latest
version of systemd (v256 submitted via sr#1186155).

For more details please check the following link:=20
https://build.opensuse.org/package/show/openSUSE=
:Factory:Staging:K/yast2-services-manager

Could you have a look ?

Thanks.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17205340890.1baaB8.2091--


--17206132112.A44a065BC.1097
Date: Wed, 10 Jul 2024 12:06:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227625

            Bug ID: 1227625
           Summary: in %post  (core dumped) ZYPP_READONLY_HACK=3D1 zypper refresh-services
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 875993
  --> https://bugzilla.suse.com/attachment.cgi?id=3D875993&action=3Dedit
zypper.log from leap16

Using zypper refresh-services in %post crashes the post-script

See line 345 in
https://build.opensuse.org/projects/Base:System/packages/openSUSE-repos/fil=
es/openSUSE-repos.spec?expand=3D1

Using the add-service with READONLY_HACK and is  working, however not regen=
 of
repos that most people complain about (missing after initial install etc).

%post /var/tmp/rpm-tmp.4eukQ3: line 25:  8351 Aborted                 (core
dumped) ZYPP_READONLY_HACK=3D1 zypper refresh-services
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17206132112.A44a065BC.1097
Date: Wed, 10 Jul 2024 12:06:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227625

          Summary
          in %post  (core dumped) ZYPP_READONLY_HACK=3D1 zypper refresh=
-services

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          libzypp

          Assignee
          zypp-maintainers@suse.de

          Reporter
          lubos.kocman@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 8759=
93 [details]
zypper.log from leap16

Using zypper refresh-services in %post crashes the post-script

See line 345 in
https://build.opensuse.org/pr=
ojects/Base:System/packages/openSUSE-repos/files/openSUSE-repos.spec?expand=
=3D1

Using the add-service with READONLY_HACK and is  working, however not regen=
 of
repos that most people complain about (missing after initial install etc).

%post /var/tmp/rpm-tmp.4eukQ3: line 25:  8351 Aborted                 (core
dumped) ZYPP_READONLY_HACK=3D1 zypper refresh-services

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17206132112.A44a065BC.1097--


--17208113642.E57Ef1.1746
Date: Fri, 12 Jul 2024 19:09:24 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227731

            Bug ID: 1227731
           Summary: mutt fails with "no authenticators available"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: David@WalkerStreet.info
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

On a recent Tumbleweed install (20240705), mutt fails with "no authenticato=
rs
available" when sending a message. (Much) older Tumbleweed installs (though
dup'd to recent snapshots) don't have this issue.

A little exploring found
https://groups.google.com/g/qubes-users/c/hL_UGJo1B9s?pli=3D1, which sugges=
ted
installing cyrus-sasl-plain. I tried it, and it worked. (It also pulled in
cyrus-sasl.)

It looks like the mutt package should require cyrus-sasl-plain and cyrus-sa=
sl.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17208113642.E57Ef1.1746
Date: Fri, 12 Jul 2024 19:09:24 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227731

          Summary
          mutt fails with "no authenticators available"

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          David@WalkerStreet.info

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

On a recent Tumbleweed install (20240705), mutt fails with &=
quot;no authenticators
available" when sending a message. (Much) older Tumbleweed installs (t=
hough
dup'd to recent snapshots) don't have this issue.

A little exploring found
h=
ttps://groups.google.com/g/qubes-users/c/hL_UGJo1B9s?pli=3D1, which sug=
gested
installing cyrus-sasl-plain. I tried it, and it worked. (It also pulled in
cyrus-sasl.)

It looks like the mutt package should require cyrus-sasl-plain and cyrus-sa=
sl.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17208113642.E57Ef1.1746--


body:
--17208388823.d7B6.41
Date: Sat, 13 Jul 2024 02:48:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227737

            Bug ID: 1227737
           Summary: Emacs bring some unneeded packages
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dev.dorrejo-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Today installing emacs, found that it brings system-user-games

zypper install emacs
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: 1: the to be installed emacs-29.4-3.1.x86_64 requires 'group(games=
)',
but this requirement cannot be provided
not installable providers: system-user-games-20170617-25.4.noarch[repo-oss]

 Solution 1: do not install emacs-29.4-3.1.x86_64
 Solution 2: remove lock to allow installation of
system-user-games-20170617-25.4.noarch[repo-oss]
 Solution 3: break emacs-29.4-3.1.x86_64 by ignoring some of its dependenci=
es

Choose from above solutions by number or cancel [1/2/3/c/d/?] (c): 3
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17208388823.d7B6.41
Date: Sat, 13 Jul 2024 02:48:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227737

          Summary
          Emacs bring some unneeded packages

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dev.dorrejo@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Today installing emacs, found that it brings system-user-gam=
es

zypper install emacs
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: 1: the to be installed emacs-29.4-3.1.x86_64 requires 'group(games=
)',
but this requirement cannot be provided
not installable providers: system-user-games-20170617-25.4.noarch[repo-oss]

 Solution 1: do not install emacs-29.4-3.1.x86_64
 Solution 2: remove lock to allow installation of
system-user-games-20170617-25.4.noarch[repo-oss]
 Solution 3: break emacs-29.4-3.1.x86_64 by ignoring some of its dependenci=
es

Choose from above solutions by number or cancel [1/2/3/c/d/?] (c): 3

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17208388823.d7B6.41--

summary: Emacs bring some unneeded packages


body:
--17210737131.3084B518E.2164
Date: Mon, 15 Jul 2024 20:01:53 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227871

            Bug ID: 1227871
           Summary: Autorotate is not working in KDE
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: chrisvte-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I am using a 2-in-1 laptop (HP Envy x360) and the autorotation of the screen
was working fine. In some update it stopped working, I didn't notice at fir=
st.

iio-proxy-sensor-proxy package is installed and monitor-sensor detects the
current orientation of my laptop without issues but the only reaction I get=
 is
the increase of size of the title bar of the windows (because of the Touch
Mode) but nothing more.

The same behavior happens using a live image of Tumbleweed
(KDE-Live-x86_64-Snapshot20240714) with Wayland.

I tried KDE Neon (KDE Plasma 6.1.2) and it just works fine.

There is more people with similar issues like
https://bugs.kde.org/show_bug.cgi?id=3D465318 and
https://forums.opensuse.org/t/autorotate-display-on-2-in-1/175496
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17210737131.3084B518E.2164
Date: Mon, 15 Jul 2024 20:01:53 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227871

          Summary
          Autorotate is not working in KDE

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          chrisvte@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I am using a 2-in-1 laptop (HP Envy x360) and the autorotati=
on of the screen
was working fine. In some update it stopped working, I didn't notice at fir=
st.

iio-proxy-sensor-proxy package is installed and monitor-sensor detects the
current orientation of my laptop without issues but the only reaction I get=
 is
the increase of size of the title bar of the windows (because of the Touch
Mode) but nothing more.

The same behavior happens using a live image of Tumbleweed
(KDE-Live-x86_64-Snapshot20240714) with Wayland.

I tried KDE Neon (KDE Plasma 6.1.2) and it just works fine.

There is more people with similar issues like
https://bugs.kde.=
org/show_bug.cgi?id=3D465318 and
https://forums.opensuse.org/t/autorotate-display-on-2-in-1/175496

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17210737131.3084B518E.2164--

summary: Autorotate is not working in KDE


--17212004762.1102F4E6.2671
Date: Wed, 17 Jul 2024 07:14:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227979

            Bug ID: 1227979
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 126.0.6478.182
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: Andreas.Stieger-at-gmx.de, m.szczepaniak.000-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Stable channel has been updated to 126.0.6478.182/183 for Windows, Mac =
and
126.0.6478.182 for Linux which will roll out over the coming days/weeks. A =
full
list of changes in this build is available in the Log.

- High CVE-2024-6772: Inappropriate implementation in V8. Reported by
5fceb6172bbf7e2c5a948183b53565b9 on 2024-06-12
- High CVE-2024-6773: Type Confusion in V8. Reported by 2ourc3 | Salim Larg=
o on
2024-06-17
- High CVE-2024-6774: Use after free in Screen Capture. Reported by
lime(@limeSec_) and fmyy(@binary_fmyy) From TIANGONG Team of Legendsec at
QI-ANXIN Group on 2024-06-13
- High CVE-2024-6775: Use after free in Media Stream. Reported by Anonymous=
 on
2024-06-15
- High CVE-2024-6776: Use after free in Audio. Reported by lime(@limeSec_) =
and
fmyy(@binary_fmyy) From TIANGONG Team of Legendsec at QI-ANXIN Group on
2024-06-12
- High CVE-2024-6777: Use after free in Navigation. Reported by Sven Dysthe
(@svn-dys) on 2024-06-07
- High CVE-2024-6778: Race in DevTools. Reported by Allen Ding on 2024-05-16
- High CVE-2024-6779: Out of bounds memory access in V8. Reported by Seungh=
yun
Lee (@0x10n) on 2024-07-06

https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-des=
ktop.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17212004762.1102F4E6.2671
Date: Wed, 17 Jul 2024 07:14:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227979

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 126.0.6478.182

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          rfrohl@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          Andreas.Stieger@gmx.de, m.szczepaniak.000@gmail.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The Stable channel has been updated to 126.0.6478.182/183 fo=
r Windows, Mac and
126.0.6478.182 for Linux which will roll out over the coming days/weeks. A =
full
list of changes in this build is available in the Log.

- High CVE-2024-6772: Inappropriate implementation in V8. Reported by
5fceb6172bbf7e2c5a948183b53565b9 on 2024-06-12
- High CVE-2024-6773: Type Confusion in V8. Reported by 2ourc3 | Salim Larg=
o on
2024-06-17
- High CVE-2024-6774: Use after free in Screen Capture. Reported by
lime(@limeSec_) and fmyy(@binary_fmyy) From TIANGONG Team of Legend=
sec at
QI-ANXIN Group on 2024-06-13
- High CVE-2024-6775: Use after free in Media Stream. Reported by Anonymous=
 on
2024-06-15
- High CVE-2024-6776: Use after free in Audio. Reported by lime(@limeSe=
c_) and
fmyy(@binary_fmyy) From TIANGONG Team of Legendsec at QI-ANXIN Group on
2024-06-12
- High CVE-2024-6777: Use after free in Navigation. Reported by Sven Dysthe
(@svn-dys) on 2024-06-07
- High CVE-2024-6778: Race in DevTools. Reported by Allen Ding on 2024-05-16
- High CVE-2024-6779: Out of bounds memory access in V8. Reported by Seungh=
yun
Lee (@0x10n) on 2024-07-06

https://chromereleases.googleblog.com/2024/07/stable-=
channel-update-for-desktop.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17212004762.1102F4E6.2671--


body:
--17212027263.c6AD9.2833
Date: Wed, 17 Jul 2024 07:52:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1227999

            Bug ID: 1227999
           Summary: python reproducible builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: Development
           Blocker: ---

our python311 (and other versions) interpreter suffer from several issues t=
hat
prevent reproducing the binary rpms:

1.
PGO =3D profile guided optimization causes non-deterministic machine code,
because the training run is not 100% deterministic.
This should honor the %do_profiling macro instead of/in addition to its own
profileopt.

2. python311:doc have 3 issues:
2.1: merged: https://github.com/python/cpython/pull/121872 date
2.2: https://github.com/python/cpython/pull/121883 parallelism/race
2.3: https://github.com/sphinx-doc/sphinxcontrib-devhelp/pull/13 gzip mtime

I'd like to see variations of these backported to all our Factory python
interpreter versions.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17212027263.c6AD9.2833
Date: Wed, 17 Jul 2024 07:52:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1227999

          Summary
          python reproducible builds

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

our python311 (and other versions) interpreter suffer from s=
everal issues that
prevent reproducing the binary rpms:

1.
PGO =3D profile guided optimization causes non-deterministic machine code,
because the training run is not 100% deterministic.
This should honor the %do_profiling macro instead of/in addition to its own
profileopt.

2. python311:doc have 3 issues:
2.1: merged: http=
s://github.com/python/cpython/pull/121872 date
2.2: https://gith=
ub.com/python/cpython/pull/121883 parallelism/race
2.3: https://github.com/sphinx-doc/sphinxcontrib-devhelp/pull/13 gzip mtime

I'd like to see variations of these backported to all our Factory python
interpreter versions.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17212027263.c6AD9.2833--

summary: python reproducible builds


--17212197431.877A08D.26
Date: Wed, 17 Jul 2024 12:35:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228058

            Bug ID: 1228058
           Summary: AUDIT-0:  emacs-games: allow shared score files and setgid with group "games" helper program
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Please allow emacs to use a setgid (group "games") helper executable

  /usr/libexec/emacs/%{version}/%{_target_cpu}-suse-linux/update-game-score

to modify score files below

  ll -d /var/games/emacs/
  drwxrwxr-x 2 games games 47 Feb  5 05:07 /var/games/emacs/

Current emacs in project editors now has a new package emacs-games which
shows

-rwxr-sr-x 1 games games 18552 Jul 17 14:29
/usr/libexec/emacs/29.4/x86_64-suse-linux/update-game-score
drwxr-xr-x 2 root  root      0 Jul 17 14:29
/usr/share/permissions/permissions.d
-rw-r--r


--17212352890.2FA51Dfe.814
Date: Wed, 17 Jul 2024 16:54:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228081

            Bug ID: 1228081
           Summary: "systemd-cryptsetup-generator[2606]: Assertion 'i->idx > 0' failed at src/basic/hashmap.c" messages spewed on tty when systemd is updated
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876103
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876103&action=3Dedit
selectively trimmed zypper up typescript session plus dmesg tail

Initial summary:
"systemd-cryptsetup-generator[2606]: Assertion 'i->idx > 0' failed at
src/basic/hashmap.c" messages spewed on tty when systemd is updated

The summary messages have occurred on the tty running zypper up on each rec=
ent
zypper up of each of my 15.6 installations that included updates to systemd*
packages. They are logged in dmesg tail attached, following typescript log =
of
login/zypper up session. Running kernel for the attachment generation was
6.4.0-150600.21.3.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17212352890.2FA51Dfe.814
Date: Wed, 17 Jul 2024 16:54:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228081

          Summary
          "systemd-cryptsetup-generator[2606]: Assertion 'i->id=
x > 0' failed at src/basic/hashmap.c" messages spewed on tty when s=
ystemd is updated

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mrmazda@earthlink.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 876103 [details]
selectively trimmed zypper up typescript session plus dmesg tail

Initial summary:
"systemd-cryptsetup-generator[2606]: Assertion 'i->idx > 0' fail=
ed at
src/basic/hashmap.c" messages spewed on tty when systemd is updated

The summary messages have occurred on the tty running zypper up on each rec=
ent
zypper up of each of my 15.6 installations that included updates to systemd*
packages. They are logged in dmesg tail attached, following typescript log =
of
login/zypper up session. Running kernel for the attachment generation was
6.4.0-150600.21.3.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17212352890.2FA51Dfe.814--


--17212780752.AB8A5fD.122
Date: Thu, 18 Jul 2024 04:47:55 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228091

            Bug ID: 1228091
           Summary: pesign-obs-integration drops systemd post script
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jlee-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: adrian.schroeter-at-suse.com, fbui-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

While working on reproducible builds for openSUSE, I found that our
systemd package produced different results when built locally
compared to the official Factory build on OBS.

https://rb.zq1.de/other/systemd/rpm-qp-scripts-diff.txt

This might be due to pesign-obs-integration re-packaging it.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17212780752.AB8A5fD.122
Date: Thu, 18 Jul 2024 04:47:55 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228091

          Summary
          pesign-obs-integration drops systemd post script

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          jlee@suse.com

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          adrian.schroeter@suse.com, fbui@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

While working on reproducible builds for openSUSE, I found t=
hat our
systemd package produced different results when built locally
compared to the official Factory build on OBS.

https:/=
/rb.zq1.de/other/systemd/rpm-qp-scripts-diff.txt

This might be due to pesign-obs-integration re-packaging it.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17212780752.AB8A5fD.122--


--17212843933.C10A.179
Date: Thu, 18 Jul 2024 06:33:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228093

            Bug ID: 1228093
           Summary: Secondary monitor does not come up with 6.10
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I bisected the issue to:
commit 8b2cb32cf0c613fd937ebb49a331798985f50826
Author: Hersen Wu <hersenxs.wu-at-amd.com>
Date:   Mon Mar 11 18:18:34 2024 -0400

    drm/amd/display: FEC overhead should be checked once for mst slot nums

Now going to revert in stable temporarily and report to upstream.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17212843933.C10A.179
Date: Thu, 18 Jul 2024 06:33:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228093

          Summary
          Secondary monitor does not come up with 6.10

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          jslaby@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I bisected the issue to:
commit 8b2cb32cf0c613fd937ebb49a331798985f50826
Author: Hersen Wu <hersenxs.w=
u@amd.com>
Date:   Mon Mar 11 18:18:34 2024 -0400

    drm/amd/display: FEC overhead should be checked once for mst slot nums

Now going to revert in stable temporarily and report to upstream.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17212843933.C10A.179--


--17213293633.eF46AFD12.1834
Date: Thu, 18 Jul 2024 19:02:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228128

            Bug ID: 1228128
           Summary: VUL-0: CVE-2024-40647: python-sentry-sdk: environment variables exposed to subprocesses despite the `env=3D{}` argument being set
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/414560/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: python-maintainers-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Pyth=
on
SDK < 2.8.0 allows the environment variables to be passed to subprocesses
despite the `env=3D{}` setting. In Python's `subprocess` calls, all environ=
ment
variables are passed to subprocesses by default. However, if you specifical=
ly
do not want them to be passed to subprocesses, you may use `env` argument in
`subprocess` calls. Due to the bug in Sentry SDK, with the Stdlib integrati=
on
enabled (which is enabled by default), this expectation is not fulfilled, a=
nd
all environment variables are being passed to subprocesses instead. The iss=
ue
has been patched in pull request #3251 and is included in sentry-sdk=3D=3D2=
.8.0. We
strongly recommend upgrading to the latest SDK version. However, if it's not
possible, and if passing environment variables to child processes poses a
security risk for you, you can disable all default integrations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-40647
https://www.cve.org/CVERecord?id=3DCVE-2024-40647
https://docs.python.org/3/library/subprocess.html
https://docs.sentry.io/platforms/python/integrations/default-integrations
https://docs.sentry.io/platforms/python/integrations/default-integrations/#=
stdlib
https://github.com/getsentry/sentry-python/commit/763e40aa4cb57ecced467f48f=
78f335c87e9bdff
https://github.com/getsentry/sentry-python/pull/3251
https://github.com/getsentry/sentry-python/releases/tag/2.8.0
https://github.com/getsentry/sentry-python/security/advisories/GHSA-g92j-qh=
mh-64v2
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17213293633.eF46AFD12.1834
Date: Thu, 18 Jul 2024 19:02:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2024-40647: python-sentry-sdk: environment var=
iables exposed to subprocesses despite the `env=3D{}` argument being set"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1228128">1228128

          Summary
          VUL-0: CVE-2024-40647: python-sentry-sdk: environment variabl=
es exposed to subprocesses despite the `env=3D{}` argument being set

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/414560/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          python-maintainers@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

sentry-sdk is the official Python SDK for Sentry.io. A bug i=
n Sentry's Python
SDK < 2.8.0 allows the environment variables to be passed to subprocesses
despite the `env=3D{}` setting. In Python's `subprocess` calls, all environ=
ment
variables are passed to subprocesses by default. However, if you specifical=
ly
do not want them to be passed to subprocesses, you may use `env` argument in
`subprocess` calls. Due to the bug in Sentry SDK, with the Stdlib integrati=
on
enabled (which is enabled by default), this expectation is not fulfilled, a=
nd
all environment variables are being passed to subprocesses instead. The iss=
ue
has been patched in pull request #3251 and is included in sentry-sdk=3D=3D2=
.8.0. We
strongly recommend upgrading to the latest SDK version. However, if it's not
possible, and if passing environment variables to child processes poses a
security risk for you, you can disable all default integrations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-40647
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-40647
https://docs.=
python.org/3/library/subprocess.html
https://docs.sentry.io/platforms/python/integrations/default-int=
egrations
https://docs.sentry.io/platforms/python/integrations/def=
ault-integrations/#stdlib
https://github.com/getsentry/sentry-python/comm=
it/763e40aa4cb57ecced467f48f78f335c87e9bdff
https://gi=
thub.com/getsentry/sentry-python/pull/3251
h=
ttps://github.com/getsentry/sentry-python/releases/tag/2.8.0
https://github.com/getsentry/sentry-python/security/adv=
isories/GHSA-g92j-qhmh-64v2

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17213293633.eF46AFD12.1834--


--17215083472.7bABD905.596
Date: Sat, 20 Jul 2024 20:45:47 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228165

            Bug ID: 1228165
           Summary: Position of SUSE Python interpreters on Externally managed environments
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dmueller-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://packaging.python.org/en/latest/specifications/externally-managed-en=
vironments/#externally-managed-environments

This linked specification presents the use case rather well. Unlimited
installation of Python packages can cause a serious damage, when the system
component imports incompatible version of Python package instead of the
intended one. (A parallel thought: are there any initiatives to port low-le=
vel
components like firewalld to compiled languages? I know about firewalld-rec=
ode
[1], but it seems to be quite dead).

This specification tries to alleviate the problem by making it more difficu=
lt
and painfully obvious that installing packages outside of the using system
package manager is a wrong idea. That might be a good idea for normal users,
but it seems like quite a bother for people who create containers, where the
designers of such systems usually know what they are doing and who can check
and test that nothing has been broken.

The purpose of this bug is to discuss, whether we could produce some better
solution to the problem, which wouldn=E2=80=99t be that obnoxious to our cu=
stomers.

One possible improvement would be to change our default hashbang to include
`-s` parameter to calling our Python interpreters, so that modules in `$HOM=
E`
are not considered.

Any possible improvements?

[1]
https://web.archive.org/web/20160318144103/https://fedorahosted.org/firewal=
ld-recode/
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17215083472.7bABD905.596
Date: Sat, 20 Jul 2024 20:45:47 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228165

          Summary
          Position of SUSE Python interpreters on Externally managed en=
vironments

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          dmueller@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

http=
s://packaging.python.org/en/latest/specifications/externally-managed-enviro=
nments/#externally-managed-environments

This linked specification presents the use case rather well. Unlimited
installation of Python packages can cause a serious damage, when the system
component imports incompatible version of Python package instead of the
intended one. (A parallel thought: are there any initiatives to port low-le=
vel
components like firewalld to compiled languages? I know about firewalld-rec=
ode
[1], but it seems to be quite dead).

This specification tries to alleviate the problem by making it more difficu=
lt
and painfully obvious that installing packages outside of the using system
package manager is a wrong idea. That might be a good idea for normal users,
but it seems like quite a bother for people who create containers, where the
designers of such systems usually know what they are doing and who can check
and test that nothing has been broken.

The purpose of this bug is to discuss, whether we could produce some better
solution to the problem, which wouldn=E2=80=99t be that obnoxious to our cu=
stomers.

One possible improvement would be to change our default hashbang to include
`-s` parameter to calling our Python interpreters, so that modules in `$HOM=
E`
are not considered.

Any possible improvements?

[1]
https://web.archive.org/web/20160318144103/https://f=
edorahosted.org/firewalld-recode/

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17215083472.7bABD905.596--


body:
Gecko/20100101
Firefox/127.0
Build Identifier:=20

since qemu 9.0.0, many people (me included) reported an issue preventing VMs
with a passed through GPU to run, in my case, the following error occurs :

$ virsh start VFIO=20
error: Failed to start domain 'VFIO'
error: internal error: QEMU unexpectedly closed the monitor (vm=3D'VFIO'):
2024-07-21T09:07:17.106732Z qemu-system-x86_64: warning: Deprecated CPU
topology (considered invalid): Unsupported clusters parameter mustn't be
specified as 1
2024-07-21T09:07:24.398072Z qemu-system-x86_64: GLib: ../glib/gmem.c:177:
failed to allocate 18446744056538181676 bytes

the "Deprecated CPU topology" error happens because a new string =
called
"clusters=3D'1'" is now added in the VM XML, trying to remove it =
will only result
in said setting being added again on the next attempt to boot the VM, meani=
ng
that VMs with such configuration are simply unusable.

a recent fix was found on the qemu gitlab, however the fix hasn't been roll=
ed
out yet and it should be released when the next qemu version comes out
https://gitl=
ab.com/qemu-project/qemu/-/issues/2420

some users reported that rolling back to a previous snapshot pre-qemu 9 sol=
ves
the issue.

Reproducible: Always

Steps to Reproduce:
1. create a VM with a passed through GPU
2. try to start the VM with virsh or virt manager
3. error occurs
Actual Results:=20=20
issue was reproduced

Expected Results:=20=20
the vm should've started

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17215533373.75e29.659--

summary: VM with passed through GPU no longer boots ("Deprecated CPU topology")


--17216256762.EA65Ef9.104
Date: Mon, 22 Jul 2024 05:21:16 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228177

            Bug ID: 1228177
           Summary: openblas: records build machine CPU type
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE,
(sponsored by the NLnet NGI0 fund), I found that
our openblas binaries record the build machine CPU type in openblas.pc:

-


--17216695162.a85034f72.1897
Date: Mon, 22 Jul 2024 17:31:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228223

            Bug ID: 1228223
           Summary: The systemd-devel-32bit package is missing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: fgouget-at-codeweavers.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The systemd-devel-32bit package is missing on openSUSE Leap 15.6:

# zypper install systemd-devel-32bit
Loading repository data...
Reading installed packages...
Package 'systemd-devel-32bit' not found.
Resolving package dependencies...
Nothing to do.

More specifically Wine uses the libudev library to provide plug and play
support to 32-bit Windows applications:
https://gitlab.winehq.org/wine/wine/-/blob/master/configure.ac?ref_type=3Dh=
eads#L1684

The libudev.so library used to be provided by the libudev-devel* package but
nowadays its 64-bit version is provided by the systemd-devel package.
Unfortunately there is no corresponding 32-bit package hence this issue.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17216695162.a85034f72.1897
Date: Mon, 22 Jul 2024 17:31:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228223

          Summary
          The systemd-devel-32bit package is missing

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          fgouget@codeweavers.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The systemd-devel-32bit package is missing on openSUSE Leap =
15.6:

# zypper install systemd-devel-32bit
Loading repository data...
Reading installed packages...
Package 'systemd-devel-32bit' not found.
Resolving package dependencies...
Nothing to do.

More specifically Wine uses the libudev library to provide plug and play
support to 32-bit Windows applications:
https://gitlab.winehq.org/wine/wine/-/blob/master/co=
nfigure.ac?ref_type=3Dheads#L1684

The libudev.so library used to be provided by the libudev-devel* package but
nowadays its 64-bit version is provided by the systemd-devel package.
Unfortunately there is no corresponding 32-bit package hence this issue.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17216695162.a85034f72.1897--


--17217282393.e4b2Da36B.3034
Date: Tue, 23 Jul 2024 09:50:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228245

            Bug ID: 1228245
           Summary: Tumbleweed: rng-tools.service start fails with unrecognized option '--fill-watermark=3D3700'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: alexander.hass-at-sap.com
        QA Contact: qa-bugs-at-suse.de
                CC: santiago.zarate-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

# rpm -q rng-tools
rng-tools-6.17-1.1.x86_64

# systemctl status rng-tools.service
=C3=97 rng-tools.service - Start the rngd daemon
     Loaded: loaded (/usr/lib/systemd/system/rng-tools.service; enabled;
preset: disabled)
     Active: failed (Result: exit-code) since Tue 2024-07-23 11:43:10 CEST;
2min 36s ago
   Duration: 107ms
   Main PID: 890 (code=3Dexited, status=3D64)
        CPU: 71ms

Jul 23 11:43:10 tumbleweed systemd[1]: Started Start the rngd daemon.
Jul 23 11:43:10 tumbleweed rngd[890]: Usage: rngd [OPTION...]
Jul 23 11:43:10 tumbleweed rngd[890]: Try `rngd --help' or `rngd --usage' f=
or
more information.
Jul 23 11:43:10 tumbleweed systemd[1]: rng-tools.service: Main process exit=
ed,
code=3Dexited, status=3D64/USAGE
Jul 23 11:43:10 tumbleweed systemd[1]: rng-tools.service: Failed with result
'exit-code'.

/usr/lib/systemd/system/rng-tools.service
ExecStart=3D/usr/sbin/rngd --foreground --fill-watermark=3D3700

# rngd --help
[..]
  -W, --fill-watermark=3Dn     Do not stop feeding entropy to random-device=
 until
                             at least n bits of entropy are available in the
                             pool (default: 3/4 of poolsize), 0 <=3D n <=3D=
 256
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17217282393.e4b2Da36B.3034
Date: Tue, 23 Jul 2024 09:50:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228245

          Summary
          Tumbleweed: rng-tools.service start fails with unrecognized o=
ption '--fill-watermark=3D3700'

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          alexander.hass@sap.com

          QA Contact
          qa-bugs@suse.de

          CC
          santiago.zarate@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

# rpm -q rng-tools
rng-tools-6.17-1.1.x86_64

# systemctl status rng-tools.service
=C3=97 rng-tools.service - Start the rngd daemon
     Loaded: loaded (/usr/lib/systemd/system/rng-tools.service; enabled;
preset: disabled)
     Active: failed (Result: exit-code) since Tue 2024-07-23 11:43:10 CEST;
2min 36s ago
   Duration: 107ms
   Main PID: 890 (code=3Dexited, status=3D64)
        CPU: 71ms

Jul 23 11:43:10 tumbleweed systemd[1]: Started Start the rngd daemon.
Jul 23 11:43:10 tumbleweed rngd[890]: Usage: rngd [OPTION...]
Jul 23 11:43:10 tumbleweed rngd[890]: Try `rngd --help' or `rngd --usage' f=
or
more information.
Jul 23 11:43:10 tumbleweed systemd[1]: rng-tools.service: Main process exit=
ed,
code=3Dexited, status=3D64/USAGE
Jul 23 11:43:10 tumbleweed systemd[1]: rng-tools.service: Failed with result
'exit-code'.

/usr/lib/systemd/system/rng-tools.service
ExecStart=3D/usr/sbin/rngd --foreground --fill-watermark=3D3700

# rngd --help
[..]
  -W, --fill-watermark=3Dn     Do not stop feeding entropy to random-device=
 until
                             at least n bits of entropy are available in the
                             pool (default: 3/4 of poolsize), 0 <=3D n &=
lt;=3D 256

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17217282393.e4b2Da36B.3034--


--17218166490.452A9be2.884
Date: Wed, 24 Jul 2024 10:24:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228273

            Bug ID: 1228273
           Summary: kde-apps/kdenlive-24+ missing dependency on kf6-qqc2-desktop-style
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: S48GS-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Same as https://bugs.gentoo.org/931924

kdenlive 24.05.2

In openSUSE - kdenlive wont start and crash with error:

qrc:/qml/kdenliveclipmonitor.qml: module "org.kde.desktop" is not installed
KCrash: Application 'kdenlive' crashing... crashRecursionCounter =3D 2

After installing kf6-qqc2-desktop-style - kdenlive work.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17218166490.452A9be2.884
Date: Wed, 24 Jul 2024 10:24:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228273

          Summary
          kde-apps/kdenlive-24+ missing dependency on kf6-qqc2-desktop-=
style

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          S48GS@hotmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Same as https://b=
ugs.gentoo.org/931924

kdenlive 24.05.2

In openSUSE - kdenlive wont start and crash with error:

qrc:/qml/kdenliveclipmonitor.qml: module "org.kde.desktop" is not=
 installed
KCrash: Application 'kdenlive' crashing... crashRecursionCounter =3D 2

After installing kf6-qqc2-desktop-style - kdenlive work.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17218166490.452A9be2.884--


--17219347631.df91aff03.1963
Date: Thu, 25 Jul 2024 19:12:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228342

            Bug ID: 1228342
           Summary: Package texlive does not build with gcc 14 on i586 because of use of incompatible pointer types
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mjambor-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: werner-at-suse.com
            Blocks: 1220571
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Package texlive fails to build with GCC 14 on i586 (and probably othr 32bit
architectures too) because of various C99 violations which previously just
generated warning s but which cause errors with GCC 14 by default (see meta
bug#1220571).

The (first) problem stopping the build is:

pdftexini.c: In function 'loadfmtfile':
pdftexini.c:4016:25: error: assignment to 'boolean *' {aka 'int *'} from
incompatible pointer type 'internalfontnumber  ' {aka 'long int *'}
[-Wincompatible-pointer-types]
 4016 |     pdffonthasspacechar =3D xmallocarray ( internalfontnumber , fon=
tmax )
;
      |                         ^
pdftexini.c: In function 'mainbody':
pdftexini.c:5569:27: error: assignment to 'boolean *' {aka 'int *'} from
incompatible pointer type 'internalfontnumber  ' {aka 'long int *'}
[-Wincompatible-pointer-types]
 5569 |       pdffonthasspacechar =3D xmallocarray ( internalfontnumber , f=
ontmax
) ;
      |                           ^

so IIUC double the necessary size is allocated rater than just half but it
looks like a genuine type issue.  We can work-around the issue by building =
with
-Wno-error=3Dincompatible-pointer-types (on 32 bit architectures) but it is
always better to fix these issues.

I admit that so far I am super puzzled where the file texk/web2c/pdftexini.c
comes from (or rather how it is generated?) so I'd be grateful if someone w=
ho
knows the package better looked at this.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17219347631.df91aff03.1963
Date: Thu, 25 Jul 2024 19:12:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228342

          Summary
          Package texlive does not build with gcc 14 on i586 because of=
 use of incompatible pointer types

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mjambor@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          werner@suse.com

          Blocks
          1220571

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Package texlive fails to build with GCC 14 on i586 (and prob=
ably othr 32bit
architectures too) because of various C99 violations which previously just
generated warning s but which cause errors with GCC 14 by default (see meta
bug#1220571).

The (first) problem stopping the build is:

pdftexini.c: In function 'loadfmtfile':
pdftexini.c:4016:25: error: assignment to 'boolean *' {aka 'int *'} from
incompatible pointer type 'internalfontnumber  ' {aka 'long int *'}
[-Wincompatible-pointer-types]
 4016 |     pdffonthasspacechar =3D xmallocarray ( internalfontnumber , fon=
tmax )
;
      |                         ^
pdftexini.c: In function 'mainbody':
pdftexini.c:5569:27: error: assignment to 'boolean *' {aka 'int *'} from
incompatible pointer type 'internalfontnumber  ' {aka 'long int *'}
[-Wincompatible-pointer-types]
 5569 |       pdffonthasspacechar =3D xmallocarray ( internalfontnumber , f=
ontmax
) ;
      |                           ^

so IIUC double the necessary size is allocated rater than just half but it
looks like a genuine type issue.  We can work-around the issue by building =
with
-Wno-error=3Dincompatible-pointer-types (on 32 bit architectures) but it is
always better to fix these issues.

I admit that so far I am super puzzled where the file texk/web2c/pdftexini.c
comes from (or rather how it is generated?) so I'd be grateful if someone w=
ho
knows the package better looked at this.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17219347631.df91aff03.1963--