--1640878307.6eEeEE04.21441
Date: Thu, 30 Dec 2021 15:31:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194183

            Bug ID: 1194183
           Summary: GNOME Shell crashes when the gdm package is not installed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: simon.vogl-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 854881
  --> http://bugzilla.opensuse.org/attachment.cgi?id=854881&action=edit
GNOME Shell crash log

GNOME Shell crashes when the full "gdm" package is not installed as soon as you
try to log in.

Steps to reproduce:
1. Install the "gnome-shell" package
2. Remove the "gdm" package
3. Try to log into a GNOME session (Tested with "GNOME on XOrg" and "GNOME")
from an alternative login manage such as SDDM or LightDM

Observed result:
GNOME Shell crashes and instructs you to log out

Expected result:
GNOME Session & GNOME Shell are started successfully.

The error messages gathered from the command
"journalctl -xb /usr/bin/gnome-shell"
are attached as gnome-shell-errors.txt

Looking at the error message, it is apparent that GNOME Shell is missing the
file
org.gnome.login-screen.gschema.xml
Which is only part of the full "gdm" package, and also the reason why
gnome-shell works normally if the full "gdm" package is installed.

The first possible solutions I would think of:

1. Move org.gnome.login-screen.gschema.xml from the full "gdm" package to
"libgdm1" on which gnome-shell depends. This unfortunately causes chaos in case
a potential "libgdm2" package should ever exist due to file conflicts, so it
isn't really an option.

2. Make the "gnome-shell" package depend on the full "gdm" package.
Takes away the freedom to uninstall GDM from the system while GNOME Shell is
installed but would also fix the issue.

Are there possibly solutions with fewer drawbacks than the two mentioned above?


body:
--1640907451.AeEFE8E0.14048
Date: Thu, 30 Dec 2021 23:37:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194187

            Bug ID: 1194187
           Summary: openssl  broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dleuenberger-at-suse.com
          Found By: ---
           Blocker: ---

found this while debugging why my dehydrated job is erroring out.

up2date Tumbleweed

rpm -qa \*openssl\*
libopenssl1_0_0-1.0.2u-6.2.x86_64
libopenssl1_0_0-steam-1.0.2u-6.2.x86_64
libopenssl1_0_0-steam-32bit-1.0.2u-6.2.x86_64
libopenssl1_1-32bit-1.1.1l-4.1.x86_64
openssl-1_1-1.1.1l-4.1.x86_64
libopenssl1_1-1.1.1l-4.1.x86_64
openssl-1.1.1l-1.2.noarch

```
Error configuring OpenSSL modules
139707710848960:error:08064066:object identifier routines:OBJ_create:oid
exists:crypto/objects/obj_dat.c:698:
139707710848960:error:0D0AE0AB:asn1 encoding routines:oid_module_init:adding
object:crypto/asn1/asn_moid.c:38:
139707710848960:error:0E07606D:configuration file routines:module_run:module
initialization error:crypto/conf/conf_mod.c:177:module=oid_section,
value=new_oids, retcode=-1
```

summary: openssl  broken


--1641204776.1B1EB0.2440
Date: Mon, 3 Jan 2022 10:12:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194219

            Bug ID: 1194219
           Summary: [Staging] vim fails to build against Ruby 3.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Ruby 3.1 has been released in December 2021 and a Staging project is prepared
to test/perform the switch to Ruby 3.1

vim was identified as one of the few packages failing to build:

[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o: in function `vim_blob':
[  126s] /usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512: undefined
reference to `rb_debug_rstring_null_ptr'
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o: in function `vim_message':
[  126s] /usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512: undefined
reference to `rb_debug_rstring_null_ptr'
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o: in function `f_p':
[  126s] /usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512: undefined
reference to `rb_debug_rstring_null_ptr'
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o: in function `error_print':
[  126s] /usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512: undefined
reference to `rb_debug_rstring_null_ptr'
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512: undefined reference
to `rb_debug_rstring_null_ptr'
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o:/usr/include/ruby-3.1.0/ruby/internal/core/rstring.h:512:
more undefined references to `rb_debug_rstring_null_ptr' follow
[  126s]
/usr/lib64/gcc/x86_64-suse-linux/11/../../../../x86_64-suse-linux/bin/ld:
/tmp/cccWr3K5.ltrans61.ltrans.o: in function `window_set_cursor.cold':
[  126s] /usr/include/ruby-3.1.0/ruby/internal/value_type.h:446: undefined
reference to `rb_unexpected_type'
[  126s] collect2: error: ld returned 1 exit status
[  126s] link.sh: Linking failed

Full build log available at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/vim/standard/x86_64


--1641204876.C083a300.2950
Date: Mon, 3 Jan 2022 10:14:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194221

            Bug ID: 1194221
           Summary: [Staging] apparmor fails to build against Ruby 3.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Ruby 3.1 has been released in December 2021 and a Staging project is prepared
to test/perform the switch to Ruby 3.1

apparmor was identified as one of the few packages failing to build:

[   51s] creating Makefile
[   51s] extconf.rb:30:in `foreach': No such file or directory @ rb_sysopen -
Makefile.new (Errno::ENOENT)
[   51s]     from extconf.rb:30:in `block in <main>'
[   51s]     from extconf.rb:10:in `block in open'
[   51s]     from extconf.rb:10:in `open'
[   51s]     from extconf.rb:10:in `open'
[   51s]     from extconf.rb:29:in `<main>'
[   51s] make[2]: *** [Makefile:472: Makefile.ruby] Error 1
[   51s] make[2]: Leaving directory
'/home/abuild/rpmbuild/BUILD/apparmor-3.0.3/libraries/libapparmor/swig/ruby'
[   51s] make[1]: *** [Makefile:376: all-recursive] Error 1
[   51s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/apparmor-3.0.3/libraries/libapparmor/swig'
[   51s] make: *** [Makefile:408: all-recursive] Error 1

Full build log available at
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/apparmor/standard/x86_64


--1641296669.cAb5bDDB0.8714
Date: Tue, 4 Jan 2022 11:44:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194293

            Bug ID: 1194293
           Summary: sg3_utils: "rescan-scsi-bus.sh -r"  may delete all SCSI devices
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Upstream report: https://github.com/doug-gilbert/sg3_utils/pull/10

System was crashing when 'rescan-scsi-bus.sh -r' was run. This is because of
the changes in the output of sg_inq command. In it, "Device_type" has been
replaced with "PDT". So when Device_type is used in sed, it was passing
incorrect return value to dolunscan() and hence even the internal disk from
which system is booting was getting deleted. Mentioned fix takes care of both
the outputs of sg_inq command. Only in recent sg_inq we see "PDT". Earlier
sg_inq still shows "Device_type".

Fix is
https://github.com/doug-gilbert/sg3_utils/commit/fc72119f67614152d635452856ec9894474599e4


--1641372271.0Cf63fDF0.22221
Date: Wed, 5 Jan 2022 08:44:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194331

            Bug ID: 1194331
           Summary: VUL-0: chromium: multiple security issues fixed in 97.0.4692.71
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

The Chrome team is delighted to announce the promotion of Chrome 97 to the
stable channel for Windows, Mac and Linux.This will roll out over the coming
days/weeks.

Chrome 97.0.4692.71 contains a number of fixes and improvements


--1641455712.f2cF00.4030
Date: Thu, 6 Jan 2022 07:55:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194358

            Bug ID: 1194358
           Summary: VUL-1: CVE-2022-21653: jawn: DoS caused by a hash collision in org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/319692/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: pmonrealgonzalez-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the
`org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who
don't override `objectContext()` are vulnerable to a hash collision attack
which
may result in a denial of service. Most applications do not implement these
traits directly, but inherit from a library. `jawn-parser-1.3.1` fixes this
issue and users are advised to upgrade. For users unable to upgrade override
`objectContext()` to use a collision-safe collection.

Upstream patch:
https://github.com/typelevel/jawn/pull/390/files

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21653
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21653
https://github.com/typelevel/jawn/pull/390
https://github.com/typelevel/jawn/security/advisories/GHSA-vc89-hccf-rq55
http://www.cvedetails.com/cve/CVE-2022-21653/


body:
--1641476021.C7DbC8.30054
Date: Thu, 6 Jan 2022 13:33:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194367

            Bug ID: 1194367
           Summary: VUL-0: CVE-2021-23727: python-celery: stored command injection vulnerability may allow privileges escalation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/319272/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mmachova-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2037531

It by default trusts the messages and metadata stored in backends (result
stores). When reading task metadata from the backend, the data is deserialized.
Given that an attacker can gain access to, or somehow manipulate the metadata
within a celery backend, they could trigger a stored command injection
vulnerability and potentially gain further access to the system.

External Reference:

https://security.snyk.io/vuln/SNYK-PYTHON-CELERY-2314953

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2037531
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-23727
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23727
https://github.com/celery/celery/blob/master/Changelog.rst%23522
https://snyk.io/vuln/SNYK-PYTHON-CELERY-2314953

pkgs: python-celery python-moto


body:
--1641486291.Df6cc0.14669
Date: Thu, 6 Jan 2022 16:24:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194380

            Bug ID: 1194380
           Summary: openSUSE-welcome shows green screen
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

on a recent TW the openSUSE-welcome screen comes up and stays with a green
screen. I remember we had the issue before (on lxqt at that time), but cant
rememberwhat the solution was...)

Operating System: openSUSE Tumbleweed 20220102
KDE Plasma Version: 5.23.4
KDE Frameworks Version: 5.89.0
Qt Version: 5.15.2
Kernel Version: 5.15.12-1-default (64-bit)
Graphics Platform: X11
Processors: 4 ?? Intel?? Core??? i7-2640M CPU @ 2.80GHz
Memory: 7.6 GiB of RAM
Graphics Processor: Mesa DRI Intel?? HD Graphics 3000

summary: openSUSE-welcome shows green screen


--1641563232.EaB3808.3005
Date: Fri, 7 Jan 2022 13:47:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194402

            Bug ID: 1194402
           Summary: Add galera-4 to PackageHub for SLE-15-SP3
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-15-SP4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: danilo.spinella-at-suse.com
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---


--1641598344.d2cF6431.782
Date: Fri, 7 Jan 2022 23:32:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194414

            Bug ID: 1194414
           Summary: php7+8-fpm: session variables broken when running under user identities
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: dimstar-at-opensuse.org
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I found that my PHP-FPM installation recently started losing $_SESSION
variables across two requests. strace shows that the FPM process group has no
permissions writing to /var/lib/php8. We find this path in /etc:

# grep -r var/lib/php8 /etc/php8/
/etc/php8/fpm/php.ini:session.save_path = "/var/lib/php8"
/etc/php8/cli/php.ini:session.save_path = "/var/lib/php8"
/etc/php8/apache2/php.ini:session.save_path = "/var/lib/php8"
(Tumbleweed)

Comparison with Leap 15.3 with php7 (I also remember a time TW+PHP8 "worked"):

# grep -r save_path php*
php7/cli/php.ini:;     session.save_path = "N;/path"
php7/cli/php.ini:;     session.save_path = "N;MODE;/path"
php7/cli/php.ini:session.save_path = "/var/lib/php7"
php7/cli/php.ini:;       (see session.save_path above), then garbage collection
does *not*
php7/conf.d/memcached.ini:; of session.save_path after the execution of the
script ends.
php7/fpm/php-fpm.d/www.conf.default:;       (error_log, sessions.save_path,
...).

? osc blame openSUSE:Factory/php8/php8.spec

   1 (dimstar_suse 2021-01-20 17:26:36  1209) %if "%{flavor}" == "fpm"
   1 (dimstar_suse 2021-01-20 17:26:36  1210) make install-binaries
INSTALL_ROOT=%{buildroot}
   1 (dimstar_suse 2021-01-20 17:26:36  1211) install -dm 755
%{buildroot}%{php_sysconf}/fpm
  16 (dimstar_suse 2021-12-06 22:59:07  1212) sed
"s=@extdir@=%{extension_dir}=" php.ini-production >
%{buildroot}%{php_sysconf}/fpm/php.ini
   1 (dimstar_suse 2021-01-20 17:26:36  1213) #install fpm init script.

By the looks of it, you made all pool workers shift from /tmp (which was
writable) to /var/lib/php8 (writable only if the pool worker happened to be
wwwrun, which has an elevated chance not to be the case with FPM, quite unlike
Apache).


--1641659211.553aaC81.27747
Date: Sat, 8 Jan 2022 16:26:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194419

            Bug ID: 1194419
           Summary: X11:common:Factory/fltk: Passing '-pie' in LDFLAGS breaks any shared lib build using fltk-config
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: pgajdos-at-suse.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: screening-team-bugs-at-suse.de
                CC: dmueller-at-suse.com
          Found By: ---
           Blocker: ---

With fltk 1.3.8, the LDFLAGS used to build libfltk are pulled into the LDFLAGS
returned from `fltk-config --ldflags`.

This breaks build of any shared library linking with libfltk, as `gcc -shared
... -pie ...` negates the `-shared`, i.e. GCC tries to built an executable
instead.


body:
Build Identifier:

After a clean texlive install
  zypper delete texlive-*
  zypper install texlive-*
pdflatex fails with the following error
  mktexfmt [ERROR]: -user mode but path setup is -sys type, bailing out.

"fmtutil-sys --all" doesn't fix the problem.

Reproducible: Always

Steps to Reproduce:
1. Update to Tumbleweed 20220109.
2. Optional
  2.a. zypper delete texlive-*
  2.b. zypper install texlive-*
3. Run pdflatex.
Actual Results:
This is pdfTeX, Version 3.141592653-2.6-1.40.22 (TeX Live 2021/TeX Live for
SUSE Linux) (preloaded format=pdflatex)
 restricted \write18 enabled.

kpathsea: Running mktexfmt pdflatex.fmt
mktexfmt [ERROR]: -user mode but path setup is -sys type, bailing out.

Expected Results:
pdflatex compiles my document.

Counting this as critical, as it leaves pdflatex unusable.

pkgs: texlive-filesystem texlive-specs-a texlive-specs-b texlive-specs-c texlive-specs-d texlive-specs-e texlive-specs-f texlive-specs-g texlive-specs-h texlive-specs-i texlive-specs-j texlive-specs-k texlive-specs-l texlive-specs-m texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-q texlive-specs-r texlive-specs-s texlive-specs-t texlive-specs-u texlive-specs-v texlive-specs-w texlive-specs-x texlive-specs-y texlive-specs-z

summary: Texlive broken in Tumbleweed 20220109


--1641850655.0Cfb0.30431
Date: Mon, 10 Jan 2022 21:37:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194497

            Bug ID: 1194497
           Summary: rename python?-mailman to mailman or mailman3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: wolfgang-at-rosenauer.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm not able to find any reason why mailman should be named python?-mailman or
actually should use any multibuild for different python versions.

mailman is an application/service implemented in python but not any sort of
python library or plugin. This is highly misleading.

Please rename the package accordingly unless there is a valid argument I
missed.


--1641856296.423Ae0.6320
Date: Mon, 10 Jan 2022 23:11:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194501

            Bug ID: 1194501
           Summary: 5.15.12 BTF verification failed for all modules
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jengelh-at-inai.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

5.15.12 delivered by Tumbleweed produces an unbootable system.

Bad:
Name        : kernel-default
Version     : 5.15.12
Release     : 1.3
Architecture: x86_64
Install Date: Mon 10 Jan 2022 01:13:56 PM CET
Group       : System/Kernel
Size        : 244690915
License     : GPL-2.0-only
Signature   : RSA/SHA256, Fri 07 Jan 2022 09:38:39 PM CET, Key ID
b88b2fd43dbdc284
Source RPM  : kernel-default-5.15.12-1.3.nosrc.rpm
Build Date  : Fri 07 Jan 2022 09:31:48 PM CET
Source Timestamp: 2021-12-29 14:50:16 +0000
GIT Revision: 375fcb87638047c7e130d76112ab841fa890d814
GIT Branch: stable
Distribution: openSUSE Tumbleweed

Last known good:
Name        : kernel-default
Version     : 5.15.8
Release     : 1.1
Architecture: x86_64
Install Date: Mon 27 Dec 2021 02:12:13 PM CET
Group       : System/Kernel
Size        : 244991661
License     : GPL-2.0-only
Signature   : RSA/SHA256, Sat 18 Dec 2021 02:46:49 AM CET, Key ID
b88b2fd43dbdc284
Source RPM  : kernel-default-5.15.8-1.1.nosrc.rpm
Build Date  : Sat 18 Dec 2021 02:41:23 AM CET
Source Timestamp: 2021-12-15 08:12:54 +0000
GIT Revision: 0530e5c5395a3084d21ac5dc604220c134990e31
GIT Branch: stable
Distribution: openSUSE Tumbleweed


--1641917208.13dfDf23.25356
Date: Tue, 11 Jan 2022 16:06:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194557

            Bug ID: 1194557
           Summary: /var/run leftovers in wicked and/or netconfig
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: mt-at-suse.com
          Reporter: max-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

To reproduce bug 1194206, I replaced the /var/run -> run compatibility symlink
with a directory. After a few minutes (maybe at the next DHCP refresh) I found
that wicked/netconfig hat put some subdirectories and files there, such as
/var/run/netconfig/resolv.conf and /var/run/netconfig/yp.conf .


--1641921507.0cADEb2.32489
Date: Tue, 11 Jan 2022 17:18:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194559

            Bug ID: 1194559
           Summary: VUL-0: CVE-2022-0156: vim: vim is vulnerable to Use After Free
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/319929/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mimi.vx-at-gmail.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: zbalogh-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2022-0156

vim is vulnerable to Use After Free

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0156
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0156
https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f
https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36


--1641978405.FCa7d70f0.26493
Date: Wed, 12 Jan 2022 09:06:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194573

            Bug ID: 1194573
           Summary: AUDIT-0: samba: pam-file-unauthorized after reworking samba packaging
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: scabrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi security team,

the request for factory [1] has been declined due to this rpmlint error:

> samba-winbind-libs.i586: E: pam-file-unauthorized (Badness: 10000) /usr/lib/security/pam_winbind.so
> ...
> --------------


body:
Build Identifier:

The first problem is that the trilinos-devel package does not depend on
libtrilons package, even though it should.  This is a minor inconvenience.

A more major issue is that the CMake files are broken, resulting in an
incorrect value for the Trilinos_INCLUDE_DIRS.  The current value is
/include/trilinos but it should of course be /usr/include/trilinos.

Reproducible: Always

Steps to Reproduce:
1. Install trilinos-devel without libtrilinos
2. Create a CMake project with the line FindPackage(Trilinos)
3. configure the project with cmake
4. Install libtrilinos and look at the variable Trilinos_INCLUDE_DIRS in the
cmake project
Actual Results:
Step 2 throws an error because a file is missing
Step 4 gives /include/trilinos

Expected Results:
Step 2: libtrilinos should be installed when trilinos-devel is installed
Step 4 should give /usr/include/trilinos

summary: Trilinos development package is faulty


--1642093583.445680.17833
Date: Thu, 13 Jan 2022 17:06:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194658

            Bug ID: 1194658
           Summary: Xephyr (xorg-x11-server-extra-21.1.3-1.2) broken in Tumbleweed (20220110) => no mouse/keyboard focus
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: martin.huber37-at-gmx.de
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Dear all,

Xephyr (xorg-x11-server-extra-21.1.3-1.2.x86_64)
in current Tumbleweed (20220110) is broken.

*** How to reproduce?

Xephyr -br -ac -noreset -screen 800x600 :2

# => Lot's of error messages like
# unrecognised device identifier: /dev/input/event11
# unrecognised device identifier: /dev/input/event3
# (...)
# Pointer option key (major) of value (13) not assigned!
# Pointer option key (minor) of value (69) not assigned!
# (...)
# Pointer option key (config_info) of value
(udev:/sys/devices/pci0000:00/0000:00:14.0/...) not assigned!
# Kbd option key (config_info) of value
(udev:/sys/devices/pci0000:00/0000:00:14.0/...) not assigned!
# (...)

DISPLAY=:2 xterm

# => There is no way to get focus to xterm running in Xephry.

*** Similar reports:

https://gitlab.freedesktop.org/xorg/xserver/-/issues/1289
https://forum.endeavouros.com/t/psa-xephyr-broken-after-latest-update/22292/1

*** How to solve (workaround)?

Earlier versions of Xephr (21.1.1) work without problem (and no error
messages).

After installing the old RPM (seems to be possible in current Tumbleweed
20220110, no
obvious dependency problems), Xephyr works well again:

zypper install --oldpackage
https://download.opensuse.org/history/20211220/tumbleweed/repo/oss/x86_64/xorg-x11-server-extra-21.1.1-3.1.x86_64.rpm

If possible please fix Xephyr (maybe even by switching back
to the old version? - a broken one does not help much).

Many thanks for maintaining openSUSE


body:
--1642412729.ffe77df20.5653
Date: Mon, 17 Jan 2022 09:45:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194739

            Bug ID: 1194739
           Summary: Mesa-drivers fails to build on ppc64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/show/openSUSE:Factory:PowerPC/Mesa-drivers

Mesa-drivers fails to build for ppc64, which results in the DVD being invalid
(Mesa-dri is mandatory on the DVD)

The error is:

[ 1097s] [ 1080.009272][ T8930] Out of memory: Killed process 8602 (cc1plus)
total-vm:803648kB, anon-rss:442752kB, file-rss:64kB, shmem-rss:0kB, UID:399
pgtables:144kB oom_score_adj:0

(probably random / frequent rebuilds will catch it on a worker that might
possibly work)

summary: Mesa-drivers fails to build on ppc64


--1642475325.fdEe0.27840
Date: Tue, 18 Jan 2022 03:08:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194805

            Bug ID: 1194805
           Summary: pkg-config --libs ncursesw injects risky linker flags downstream
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: werner-at-suse.com
          Reporter: crrodriguez-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

pkg-config --libs ncursesw returns

Wl,-O2 -Wl,-Bsymbolic-functions -Wl,--as-needed -lncursesw -ltinfo

-Bsymbolic-functions will affect symbol resolution when creating downstream
shared libraries, it should not be passed to other packages..

the rest of the line will also be source of trouble.

correct -output do to what you really mean is:

-Wl,--push-state,--as-needed -lncursesw -ltinfo -Wl,--pop-state

no other --libs should be pased to down to other packages.

Cheers.


--1642494829.737Ea120.27622
Date: Tue, 18 Jan 2022 08:33:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194810

            Bug ID: 1194810
           Summary: ProtectHome=true prevents exim from delivering mail
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: 7eggert-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Exim needs to access ~/.forward, ~/.procmailrc; the procmail scripts need to
access the home dir. Being blocked prevents any local mail from being
delivered.


--1642582348.db3548b0.8229
Date: Wed, 19 Jan 2022 08:52:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194865

            Bug ID: 1194865
           Summary: After upgrading to KDE Frameworks 5.90 a lot of libKF5*-lang packages are marked as unneeded.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: hans-at-schwimmbeck.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After upgrading Tumbleweed by "zypper dup" i ran "zypper pa --unneeded".

The result was that the following KDE Frameworks 5.90 packages
-------------------
libKF5Bookmarks5-lang
libKF5Codecs5-lang
libKF5Completion5-lang
libKF5ConfigCore5-lang
libKF5DBusAddons5-lang
libKF5DNSSD5-lang
libKF5GlobalAccel5-lang
libKF5Holidays5-lang
libKF5ItemViews5-lang
libKF5JobWidgets5-lang
libKF5Notifications5-lang
libKF5Solid5-lang
libKF5SonnetCore5-lang
libKF5SyntaxHighlighting5-lang
libKF5WidgetsAddons5-lang
libKF5WindowSystem5-lang
-------------------
are now marked as unneeded.
I think they should be supplements to their non-lang counterparts and installed
as dependencies.

"zypper locale" prints de_DE as requested language.


--1642582638.Ac400.12332
Date: Wed, 19 Jan 2022 08:57:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194866

            Bug ID: 1194866
           Summary: VUL-0: python-onionshare: multiple CVEs fixed with 2.5
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: axel.braun-at-gmx.de
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2022-21688:

Out-of-bounds Read: The desktop application was found to be vulnerable to
denial of service via an undisclosed vulnerability in the QT image parsing

https://github.com/onionshare/onionshare/security/advisories/GHSA-x7wr-283h-5h2v

CVE-2022-21690

Improper Input Sanitation: The path parameter of the requested URL is not
sanitized before being passed to the QT frontend

https://github.com/onionshare/onionshare/security/advisories/GHSA-ch22-x2v3-v6vq

CVE-2022-21689

Denial of Service: The receive mode limits concurrent uploads to 100 per second
and blocks other uploads in the same second, which can be triggered by a simple
script

https://github.com/onionshare/onionshare/security/advisories/GHSA-jh82-c5jw-pxpc

CVE-2022-21691

Improper Access Control: Chat participants can spoof their channel leave
message, tricking others into assuming they left the chatroom

https://github.com/onionshare/onionshare/security/advisories/GHSA-w9m4-7w72-r766

CVE-2022-21692

Improper Access Control: Anyone with access to the chat environment can write
messages disguised as another chat participant

https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v

CVE-2022-21693

Improper Hardening: The filesystem restriction could be hardened and should
only allow for pre-defined subfolders

https://github.com/onionshare/onionshare/security/advisories/GHSA-jgm9-xpfj-4fq6

CVE-2022-21695

Improper Access Control: Authenticated users (or unauthenticated in public
mode) can send messages without being visible in the list of chat participants

https://github.com/onionshare/onionshare/security/advisories/GHSA-99p8-9p2c-49j4

CVE-2022-21694

Broken Website Hardening Control: The CSP can be turned on or off but not
configured for the specific needs of the website

https://github.com/onionshare/onionshare/security/advisories/GHSA-h29c-wcm8-883h

CVE-2022-21696

Improper Input Sanitation: It is possible to change the username to that of
another chat participant with an additional space character at the end of the
name string

https://github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f


--1642586534.1E3ebF470.23356
Date: Wed, 19 Jan 2022 10:02:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194871

            Bug ID: 1194871
           Summary: rpm-repos-openSUSE fails to build after openSUSE-build-key got a update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: ngompa13-at-gmail.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

rpm-repos-openSUSE fails to build in Leap 15.4[1] after openSUSE-build-key got
a update in Leap 15.4[2].

[   36s] ERROR: link target doesn't exist (neither in build root nor in
installed system):
[   36s]   /etc/pki/rpm-gpg/RPM-GPG-KEY-openSUSE-Backports ->
/usr/lib/rpm/gnupg/keys/gpg-pubkey-65176565-59787af5.asc

[1]
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.4/rpm-repos-openSUSE/standard/x86_64

[2]
https://build.opensuse.org/package/show/openSUSE:Leap:15.4/openSUSE-build-key


--1642587554.58cC70.25890
Date: Wed, 19 Jan 2022 10:19:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194876

            Bug ID: 1194876
           Summary: GCC 12: transactional-update package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/transactional-update/standard/x86_64

due to:
[   46s] Overlay.cpp: In member function 'void
TransactionalUpdate::Overlay::create(std::string, std::string,
std::filesystem::__cxx11::path)':
[   46s] Overlay.cpp:197:88: error: 'strerror' was not declared in this scope;
did you mean 'stderr'?
[   46s]   197 |             throw std::runtime_error{"applying selinux context
failed: " + std::string(strerror(errno))};
[   46s]       |
                        ^~~~~~~~
[   46s]       |
                        stderr
[   46s] Overlay.cpp:197:104: error: no matching function for call to
'std::runtime_error::runtime_error(<brace-enclosed initializer list>)'
[   46s]   197 |             throw std::runtime_error{"applying selinux context
failed: " + std::string(strerror(errno))};
[   46s]       |
                                        ^


--1642660110.d7a140.9379
Date: Thu, 20 Jan 2022 06:28:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1194919

            Bug ID: 1194919
           Summary: VUL-0: chromium: multiple security issues fixed in 97.0.4692.99
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: meissner-at-suse.com, security-team-at-suse.de
            Blocks: 1194331
          Found By: ---
           Blocker: ---

This update includes 26 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$NA][1284367] Critical CVE-2022-0289: Use after free in Safe browsing.
Reported by Sergei Glazunov of Google Project Zero on 2022-01-05

[$20000],[NA][1260134][1260007] High CVE-2022-0290: Use after free in Site
isolation. Reported by Brendon Tiszka and Sergei Glazunov of Google Project
Zero on 2021-10-15

[$20000][1281084] High CVE-2022-0291: Inappropriate implementation in Storage.
Reported by Anonymous on 2021-12-19

[$17000][1270358] High CVE-2022-0292: Inappropriate implementation in Fenced
Frames. Reported by Brendon Tiszka  on 2021-11-16

[$15000][1283371] High CVE-2022-0293: Use after free in Web packaging. Reported
by Rong Jian and Guang Gong of 360 Alpha Lab on 2021-12-30

[$10000][1273017] High CVE-2022-0294: Inappropriate implementation in Push
messaging. Reported by Rong Jian and Guang Gong of 360 Alpha Lab on 2021-11-23

[$10000][1278180] High CVE-2022-0295: Use after free in Omnibox. Reported by
Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute
on 2021-12-09

[$7000][1283375] High CVE-2022-0296: Use after free in Printing. Reported by
koocola(@alo_cook) and Guang Gong of 360 Vulnerability Research Institute on
2021-12-30

[$5000][1274316] High CVE-2022-0297: Use after free in Vulkan. Reported by
Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on
2021-11-28

[$TBD][1212957] High CVE-2022-0298: Use after free in Scheduling. Reported by
Yangkang (@dnpushme) of 360 ATA on 2021-05-25

[$TBD][1275438] High CVE-2022-0300: Use after free in Text Input Method Editor.
Reported by Rong Jian and Guang Gong of 360 Alpha Lab on 2021-12-01

[$NA][1276331] High CVE-2022-0301: Heap buffer overflow in DevTools. Reported
by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on
2021-12-03

[$TBD][1278613] High CVE-2022-0302: Use after free in Omnibox. Reported by
Weipeng Jiang (@Krace) and Guang Gong of 360 Vulnerability Research Institute
on 2021-12-10

[$TBD][1281979] High CVE-2022-0303: Race in GPU Watchdog. Reported by Yi??it Can
YILMAZ (@yilmazcanyigit) on 2021-12-22

[$TBD][1282118] High CVE-2022-0304: Use after free in Bookmarks. Reported by
Rong Jian and Guang Gong of 360 Alpha Lab on 2021-12-22

[$TBD][1282354] High CVE-2022-0305: Inappropriate implementation in Service
Worker API. Reported by @uwu7586 on 2021-12-23

[$NA][1283198] High CVE-2022-0306: Heap buffer overflow in PDFium. Reported by
Sergei Glazunov of Google Project Zero on 2021-12-29

[$2000][1281881] Medium CVE-2022-0307: Use after free in Optimization Guide.
Reported by Samet Bekmezci @sametbekmezci on 2021-12-21

[$2000][1282480] Medium CVE-2022-0308: Use after free in Data Transfer.
Reported by @ginggilBesel on 2021-12-24

[$TBD][1240472] Medium CVE-2022-0309: Inappropriate implementation in Autofill.
Reported by Alesandro Ortiz on 2021-08-17

[$TBD][1283805] Medium CVE-2022-0310: Heap buffer overflow in Task Manager.
Reported by Samet Bekmezci @sametbekmezci on 2022-01-03

[$TBD][1283807] Medium CVE-2022-0311: Heap buffer overflow in Task Manager.
Reported by Samet Bekmezci @sametbekmezci on 2022-01-03

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.As usual, our ongoing internal security work was responsible for a wide
range of fixes:

    [1288933] Various fixes from internal audits, fuzzing and other initiatives


--1642671417.065af58B0.5282
Date: Thu, 20 Jan 2022 09:36:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194924

            Bug ID: 1194924
           Summary: VUL-0: CVE-2022-21394: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  The supported version that is affected is Prior to 6.1.32.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/321173/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Larry.Finger-at-gmail.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21394

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.32.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products. Successful attacks of this
vulnerability can result in unauthorized access to critical data or complete
access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.5
(Confidentiality impacts). CVSS Vector:
(CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21394
https://www.oracle.com/security-alerts/cpujan2022.html#CVE-2022-21394
https://www.oracle.com/security-alerts/cpujan2022.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21394


--1642672809.FFfEF0.8623
Date: Thu, 20 Jan 2022 10:00:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1194936

            Bug ID: 1194936
           Summary: VUL-0: CVE-2022-21699: python-ipython: local arbitrary code execution via temporary files
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/321200/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: code-at-bnavigator.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-21699

IPython (Interactive Python) is a command shell for interactive computing in
multiple programming languages, originally developed for the Python programming
language. Affected versions are subject to an arbitrary code execution
vulnerability achieved by not properly managing cross user temporary files.
This
vulnerability allows one user to run code as another on the same machine. All
users are advised to upgrade.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21699
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21699
https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x
https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668
https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699


--1642842884.Aab29.11022
Date: Sat, 22 Jan 2022 09:14:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195019

            Bug ID: 1195019
           Summary: config.postfix can't handle symlink'd /etc/resolv.conf
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: p.heinlein@heinlein-support.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

For some reasons I have old installations where /etc/resolv.conf is a symlink
to /var/run/netconfig/resolv.conf.

config.postfix uses "cp -af" to copifnewer /etc/resolv.conf to
/var/spool/postfix/etc


--1642942696.72c3f5A40.8484
Date: Sun, 23 Jan 2022 12:58:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195036

            Bug ID: 1195036
           Summary: Dvdisaster causes a segmentation fault in g_strdup_printf
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: davejplater-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

See https://build.opensuse.org/package/show/openSUSE:Factory/dvdisaster for
reporter's comment.
dvdisaster immediately crashes on startup due to a value passed to
g_strdup_printf()
Fixed with dvdisaster-g_strdup_printf.patch


body:
--1642970681.7cE10.32750
Date: Sun, 23 Jan 2022 20:44:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195040

            Bug ID: 1195040
           Summary: Request: Enable SSLKEYLOGFILE
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: c_eric-at-sbcglobal.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hey,
  It looks like Firefox has changed to no longer allow SSLKEYLOGFILE by
default. I'd like to request that either it be added or have a separate
package.

  It looks like NSS_ALLOW_SSLKEYLOGFILE=1 needs to be set during compile time.

  I'm currently running 96.0.1 and having that set as an environmental variable
just produces an empty file.

More information can be found here:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format

summary: Request: Enable SSLKEYLOGFILE


--1643129927.4e8c27510.4992
Date: Tue, 25 Jan 2022 16:58:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195105

            Bug ID: 1195105
           Summary: VUL-0: CVE-2021-45341: A buffer overflow vulnerability in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/321655/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-45341

A buffer overflow vulnerability in CDataMoji of the jwwlib component of
LibreCAD
2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a
crafted JWW document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-45341
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45341
https://github.com/LibreCAD/LibreCAD/issues/1462


--1643187781.01Fe5F0.4427
Date: Wed, 26 Jan 2022 09:03:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195122

            Bug ID: 1195122
           Summary: VUL-0: CVE-2021-45342: A buffer overflow vulnerability in jwwlib in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/321689/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-45342

A buffer overflow vulnerability in CDataList of the jwwlib component of
LibreCAD
2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a
crafted JWW document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-45342
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45342
https://github.com/LibreCAD/LibreCAD/issues/1464


--1643213115.c76c030.13635
Date: Wed, 26 Jan 2022 16:05:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195153

            Bug ID: 1195153
           Summary: resolved: /etc/resolve.conf will never be created
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We have a patch for systemd-resolved, which never made it upstream:
0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch

The problem is: this patch disables creating /etc/resolv.conf from tmpfiles.d,
instead systemd-resolved itself should create the symlink. But the symlink is
only created if systemd-resolved runs as root, but this does never happen, as
systemd-resolved is run as it's own user.

So we can drop this patch in every case as since it cannot work.
Question is, how else we can create the symlink without getting a conflict with
netconfig.


--1643275357.CBf4E0.10618
Date: Thu, 27 Jan 2022 09:22:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195188

            Bug ID: 1195188
           Summary: VUL-0: CVE-2022-23959: varnish: request smuggling can occur for HTTP/1 connections
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/321744/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-23959

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS
before
6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x
before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-23959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23959
http://www.cvedetails.com/cve/CVE-2022-23959/
https://varnish-cache.org/security/VSV00008.html
https://docs.varnish-software.com/security/VSV00008/


body:
--1643283738.77BA00.557
Date: Thu, 27 Jan 2022 11:42:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195206

            Bug ID: 1195206
           Summary: opi does not find any packages
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

trying to install software via opi, no packages are found:

localhost:/home/test # opi codecs
Do you want to install codecs from Packman repository? (Y/n) Y
Unexpected exception.
Url scheme is a required component
Please file a bug report about this.
See http://en.opensuse.org/Zypper/Troubleshooting for instructions.

summary: opi does not find any packages


--1643301048.712BC0.28523
Date: Thu, 27 Jan 2022 16:30:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195230

            Bug ID: 1195230
           Summary: Firefox 96.0.3 and Firefox-esr 91.5.1 released (new version)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
               URL: https://www.mozilla.org/en-US/firefox/96.0.3/releaseno
                    tes/
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: jayjayjazz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

Firefox 96.0.3 and Firefox-esr 91.5.1 are released today.

There is one bug fixed for both versions of Firefox:
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1752317

Details:
Fixed an issue that allowed unexpected data to be submitted in some of our
search telemetry

[2] https://www.mozilla.org/en-US/firefox/96.0.3/releasenotes/
[3] https://www.mozilla.org/en-US/firefox/91.5.1/releasenotes/
[4] http://ftp.mozilla.org/pub/firefox/releases/96.0.3/
[5] http://ftp.mozilla.org/pub/firefox/releases/91.5.1esr/

Release Changeset:
[6] https://hg.mozilla.org/releases/mozilla-esr91/rev/FIREFOX_91_5_1esr_RELEASE
[7] https://hg.mozilla.org/releases/mozilla-release/rev/FIREFOX_96_0_3_RELEASE

Please update.


--1643392112.E4430.23346
Date: Fri, 28 Jan 2022 17:48:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195288

            Bug ID: 1195288
           Summary: CUPS complains about "Read-only file system" although it is writable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Printing
          Assignee: jsmeix-at-suse.com
          Reporter: SchwarzerA@messe-duesseldorf.de
        QA Contact: jsmeix-at-suse.com
          Found By: ---
           Blocker: ---

In /usr/lib/systemd/system/cups.service is sandboxing enabled due to
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort .

The line "ProtectSystem=full" mounts /etc read-only for the service but here we
have CUPS_SERVERROOT=/etc/cups and cupsd needs to write exactly here. Setting
"ProtectSystem=true" is sufficient and restores the functionality of service
cups.


--1643561566.f870ce1C0.8260
Date: Sun, 30 Jan 2022 16:52:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195312

            Bug ID: 1195312
           Summary: NetworkManager unable to connect to wifi code=40
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: vortex@z-ray.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello there after the latest snapshot 20220128 I am no longer able to use wifi
using NetworkManager.

Wicked works fine.

The errors I get:

[   80.990670] wlp3s0: authenticated
[   80.992845] wlp3s0: associate with dc:15:c8:d0:a1:9e (try 1/3)
[   80.999524] wlp3s0: RX AssocResp from dc:15:c8:d0:a1:9e (capab=0x1431
status=40 aid=0)
[   80.999549] wlp3s0: dc:15:c8:d0:a1:9e denied association (code=40)
[   91.977639] wlp3s0: authenticate with dc:15:c8:d0:a1:9e
[   91.979376] wlp3s0: send auth to dc:15:c8:d0:a1:9e (try 1/3)
[   91.987063] wlp3s0: authenticated

From reading
https://community.cisco.com/t5/wireless-mobility-documents/802-11-association-status-802-11-deauth-reason-codes/ta-p/3148055

I found that code=40 means:

"Invalid information element, i.e., an information element defined in this
standard for
which the content does not meet the specifications in Clause 7"

Which seems to apply as Wicked works just fine and NM did as well before.

My Wifi card: Intel Centrino Wireless-N 135
NetworkManager version: 1.32.12-1.2

Kind regards,
V.


--1643616143.3720dDb0.15939
Date: Mon, 31 Jan 2022 08:02:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195318

            Bug ID: 1195318
           Summary: [Build 20220129] rmt-server fails to build against Ruby 3.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2166005/modules/yast
                    2_rmt/steps/14
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_ncurses@64bit
fails in
[yast2_rmt](https://openqa.opensuse.org/tests/2166005/modules/yast2_rmt/steps/14)

openSUSE:Factory has moved from Ruby 2.7 plus 3.0 to Ruby 3.1.
rmt-server fails to build in this setup

## Test suite description
Maintainer: qsf-y Test for yast2 UI, ncurses only. Running on created gnome
images which provides both text console for ncurses UI tests as well as the
gnome environment for the GUI tests.
riafarov set TIMEOUT_SCALE to improve stability of the test.

## Reproducible

Fails since (at least) Build
[20220129](https://openqa.opensuse.org/tests/2166005) (current job)

## Expected result

Last good: [20220128](https://openqa.opensuse.org/tests/2164281) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=yast2_ncurses&version=Tumbleweed)


--1643622404.17E01.2975
Date: Mon, 31 Jan 2022 09:46:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195323

            Bug ID: 1195323
           Summary: VUL-0: CVE-2021-20323: keycloak: POST based reflected Cross Site Scripting vulnerability
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/321943/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fstrba-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2013577

A POST based reflected Cross Site Scripting vulnerability on Keycloak version
15.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2013577
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20323


--1643627800.4fE1C0.20006
Date: Mon, 31 Jan 2022 11:16:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195336

            Bug ID: 1195336
           Summary: VUL-0: CVE-2022-0393: vim: Out-of-bounds Read in vim prior to 8.2.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322084/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mimi.vx-at-gmail.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: zbalogh-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2022-0393

Out-of-bounds Read in Conda vim prior to 8.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0393
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0393
https://github.com/vim/vim/commit/a4bc2dd7cccf5a4a9f78b58b6f35a45d17164323
https://huntr.dev/bounties/ecc8f488-01a0-477f-848f-e30b8e524bba


--1643702900.2Ed0b80.4232
Date: Tue, 1 Feb 2022 08:08:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195368

            Bug ID: 1195368
           Summary: qt6's qmake fails with: Project ERROR: Library 'libatomic' is not defined.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: christophe-at-krop.fr
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

It's network/datovka in OBS. I have:
%if 0%{qt_version} == 6
# private-devel is only temporary to fix "Library 'libatomic' is not defined."
#BuildRequires:  qt6-base-private-devel
BuildRequires:  qt6-tools-linguist
%else
BuildRequires:  libqt5-linguist
%endif
BuildRequires:  openssl-devel
BuildRequires:  pkgconfig
BuildRequires:  cmake(Qt%{qt_version}Core) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}Gui) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}Network) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}PrintSupport) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}Sql) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}Svg) >= %{qt_version_full}
BuildRequires:  cmake(Qt%{qt_version}Widgets) >= %{qt_version_full}
BuildRequires:  pkgconfig(libdatovka) >= 0.1.2

And the build fails with:
> [    4s] + /usr/lib64/qt6/bin/qmake 'QMAKE_CXXFLAGS=-std=c++17 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto' 'QMAKE_CFLAGS=-O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto' 'QMAKE_LFLAGS= -Wl,--as-needed -Wl,--no-undefined' PREFIX=/usr DISABLE_VERSION_CHECK_BY_DEFAULT=1
> [    4s] Info: creating stash file /home/abuild/rpmbuild/BUILD/datovka-4.19.0/.qmake.stash
> [    4s] Project WARNING: Disabling version check by default.
> [    4s] Project ERROR: Library 'libatomic' is not defined.

I have to uncomment the first require to fix this: qt6-base-private-devel

Then, these additional packages are installed:
> cups-config-2.3.3op2-8.1
> cups-devel-2.3.3op2-8.1
> cups-rpm-helper-2.0.1-1.8
> fontconfig-devel-2.13.1-3.1
> freetype2-devel-2.11.1-1.2
> libavahi-client3-0.8-12.1
> libavahi-common3-0.8-12.1
> libbrotli-devel-1.0.9-1.6
> libbrotlienc1-1.0.9-1.6
> libbz2-devel-1.0.8-3.4
> libcupsimage2-2.3.3op2-8.1
> libcups2-2.3.3op2-8.1
> libexpat-devel-2.4.3-1.1
> libgnutls30-3.7.3-1.1
> libhogweed6-3.7.3-2.1
> libinput-devel-1.19.3-2.1
> libnettle8-3.7.3-2.1
> libp11-kit0-0.23.22-4.1
> libtasn1-6-4.18.0-1.2
> libudev-devel-249.9-1.1
> libuuid-devel-2.37.3-1.1
> libxkbcommon-x11-devel-1.3.1-1.4
> mtdev-devel-1.1.6-1.6
> python38-pycups-2.0.1-1.8
> qt6-base-private-devel-6.2.2-2.2
> qt6-core-private-devel-6.2.2-2.2
> qt6-dbus-private-devel-6.2.2-2.2
> qt6-gui-private-devel-6.2.2-2.2
> qt6-kmssupport-devel-static-6.2.2-2.2
> qt6-kmssupport-private-devel-6.2.2-2.2
> qt6-network-private-devel-6.2.2-2.2
> qt6-opengl-private-devel-6.2.2-2.2
> qt6-platformsupport-devel-static-6.2.2-2.2
> qt6-platformsupport-private-devel-6.2.2-2.2
> qt6-printsupport-private-devel-6.2.2-2.2
> qt6-sql-private-devel-6.2.2-2.2
> qt6-test-private-devel-6.2.2-2.2
> qt6-widgets-private-devel-6.2.2-2.2
> qt6-xml-private-devel-6.2.2-2.2
> system-user-lp-20170617-24.3
> tslib-devel-1.22-1.6
> tslib-plugins-1.22-1.6
> tslib-1.22-1.6

And the build proceeds fine. It's likely some dependency missing in some devel
package.

This is only a qt6 problem, qt5 does not exhibit it.


--1643714804.B802D50.19778
Date: Tue, 1 Feb 2022 11:26:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195386

            Bug ID: 1195386
           Summary: VUL-0: CVE-2022-23853: ktexteditor,kate: Missing validation of binaries executed via QProcess
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322226/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: fabian@ritter-vogt.de
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: lbeltrame-at-kde.org
          Found By: Security Response Team
           Blocker: ---

rh#2048633

KTextEditor and Kate execute binaries without user interaction in a few cases.

References:

https://kde.org/info/security/advisory-20220131-1.txt

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2048633
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-23853


body:
--1643717537.F071d5c60.24346
Date: Tue, 1 Feb 2022 12:12:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195390

            Bug ID: 1195390
           Summary: switch default build environment from glibc-locale to glibc-locale-base
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Some time ago I noticed that Fedora is building all their packages
with very minimal locales installed quite successfully. In fedora, if
there is the occasional packaging testsuite that requires a specific
locale being installed, Fedora just uses "BuildRequires:
glibc-langpack-$lang".

openSUSE currently doesn't have this granularity. we have
glibc-locale-base, which covers C and en_US locale and we have
glibc-locale which covers everything else.

The vast majority of packages are building and testing fine in the
default C.utf8/en_US.utf8 call. By switching to glibc-locale-base,
we're saving about 227 MB of data to pull and install on every build.
That's like 2TB of data less written for a full distro build.

Yes I'm aware a few packages will fail to
build. I've done a full rebuild of :Ring:0-Bootstrap/1-Minimalx and
had about 10 build failures, and submitted already fixes for all of
them.

I submitted this to rpm maintainer for review, and he's fine if the
opensuse tumbleweed distro team accepts the challenge. I'm happy to
help with the fallout, the simplest fix is an additional
"Buildrequires: glibc-locale". In some other cases it just requires to
change the locale that is exported to a locale that is provided by
glibc-locale-base

pkgs: grep libgudev rpm


body:
--1643719590.b2c4f0D70.23684
Date: Tue, 1 Feb 2022 12:46:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195391

            Bug ID: 1195391
           Summary: identify and declare bash dependencies explicitly
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There is a lot of fear that the openSUSE and SUSE distributions are, due to
historic reason alone always assuming that /bin/sh is a symlink to bash, so
that scripts executed with /bin/sh are actually only executable with bash.

in order to explore that dependency, we need to figure out how many scripts
actually use bash specifics when being invoked for /bin/sh and then fix these
to declare the bash dependency if they have it.

this bug is a tracker issue for fixes related to that.

pkgs: fuse-exfat gdk-pixbuf go1.9 gobject-introspection gtk2 gtk3 ncurses python-pytz rpm suse-module-tools


--1643789773.1Ff16080.23910
Date: Wed, 2 Feb 2022 08:16:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195415

            Bug ID: 1195415
           Summary: libguestfs: consider dropping build requirement on systemd-sysvinit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,

libguestfs.spec has:

  %package -n libguestfs-appliance
  [...]
  BuildRequires:  systemd-sysvinit

This dependency looks suspicious because systemd-sysvinit doesn't provide
anything useful for building a package in a chroot environment: it was
historically used to switch from sysvinit to systemd.

Removing this dep didn't impact the build of libguestfs packages.

Can you consider dropping this build requirement as we're in the process of
getting rid of systemd-sysvinit ?

Thanks.


--1643791961.f3D8Bd00.32097
Date: Wed, 2 Feb 2022 08:52:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195420

            Bug ID: 1195420
           Summary: VUL-0: chromium: multiple security issues fixed in 98.0.4758.80
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

[$20000][1284584] High CVE-2022-0452: Use after free in Safe Browsing. Reported
by avaue at S.S.L. on 2022-01-05

[$20000][1284916] High CVE-2022-0453: Use after free in Reader Mode. Reported
by Rong Jian of VRI on 2022-01-06

[$12000][1287962] High CVE-2022-0454: Heap buffer overflow in ANGLE. Reported
by Seong-Hwan Park (SeHwa) of SecunologyLab on 2022-01-17

[$7500][1270593] High CVE-2022-0455: Inappropriate implementation in Full
Screen Mode. Reported by Irvan Kurniawan (sourc7) on 2021-11-16

[$7000][1289523] High CVE-2022-0456: Use after free in Web Search. Reported by
Zhihua Yao of KunLun Lab on 2022-01-21

[$5000][1274445] High CVE-2022-0457: Type Confusion in V8. Reported by rax of
the Group0x58 on 2021-11-29

[$1000][1267060] High CVE-2022-0458: Use after free in Thumbnail Tab Strip.
Reported by Anonymous on 2021-11-05

[$TBD][1244205] High CVE-2022-0459: Use after free in Screen Capture. Reported
by raven (@raid_akame) on 2021-08-28

[$7500][1250227] Medium CVE-2022-0460: Use after free in Window Dialog.
Reported by 0x74960 on 2021-09-16

[$3000][1256823] Medium CVE-2022-0461: Policy bypass in COOP. Reported by
NDevTK on 2021-10-05

[$2000][1270470] Medium CVE-2022-0462: Inappropriate implementation in Scroll.
Reported by Youssef Sammouda on 2021-11-16

[$1000][1268240] Medium CVE-2022-0463: Use after free in Accessibility.
Reported by Zhihua Yao of KunLun Lab on 2021-11-09

[$1000][1270095] Medium CVE-2022-0464: Use after free in Accessibility.
Reported by Zhihua Yao of KunLun Lab on 2021-11-14

[$1000][1281941] Medium CVE-2022-0465: Use after free in Extensions. Reported
by Samet Bekmezci @sametbekmezci on 2021-12-22

[$TBD][1115460] Medium CVE-2022-0466: Inappropriate implementation in
Extensions Platform. Reported by David Erceg on 2020-08-12

[$TBD][1239496] Medium CVE-2022-0467: Inappropriate implementation in Pointer
Lock. Reported by Alesandro Ortiz on 2021-08-13

[$TBD][1252716] Medium CVE-2022-0468: Use after free in Payments. Reported by
Krace on 2021-09-24

[$TBD][1279531] Medium CVE-2022-0469: Use after free in Cast. Reported by
Thomas Orlita on 2021-12-14

[$TBD][1269225] Low CVE-2022-0470: Out of bounds memory access in V8. Reported
by Looben Yang on 2021-11-11

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.As usual, our ongoing internal security work was responsible for a wide
range of fixes:

    [1293087] Various fixes from internal audits, fuzzing and other initiatives


--1643802808.A327ed0.28700
Date: Wed, 2 Feb 2022 11:53:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195432

            Bug ID: 1195432
           Summary: VUL-1: CVE-2022-23607: python-treq: treq's request methods and `treq.client.HTTPClient` constructor do not bind cookies to a domain
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322342/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-23607

treq is an HTTP library inspired by requests but written on top of Twisted's
Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and
`treq.client.HTTPClient` constructor accept cookies as a dictionary. Such
cookies are not bound to a single domain, and are therefore sent to *every*
domain ("supercookies"). This can potentially cause sensitive information to
leak upon an HTTP redirect to a different domain., e.g. should
`https://example.com` redirect to `http://cloudstorageprovider.com` the latter
will receive the cookie `session`. Treq 2021.1.0 and later bind cookies given
to
request methods (`treq.request`, `treq.get`, `HTTPClient.request`,
`HTTPClient.get`, etc.) to the origin of the *url* parameter. Users are advised
to upgrade. For users unable to upgrade Instead of passing a dictionary as the
*cookies* argument, pass a `http.cookiejar.CookieJar` instance with properly
domain- and scheme-scoped cookies in it.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-23607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23607
https://github.com/twisted/treq/security/advisories/GHSA-fhpf-pp6p-55qc


--1643828638.E75D1e17.6289
Date: Wed, 2 Feb 2022 19:03:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195463

            Bug ID: 1195463
           Summary: smb not starting after patch openSUSE-SLE-15.3-2022-283=1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: ralf.koelmel-at-kit.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 855811
  --> http://bugzilla.opensuse.org/attachment.cgi?id=855811&action=edit
smb systemd service output and apparmor extract

smb service is not starting after applying recent samba patch
openSUSE-SLE-15.3-2022-283=1 .
It seems that the changes causes the apparmor "permission" problems.


--1643834050.d6ECB7f80.27103
Date: Wed, 2 Feb 2022 20:34:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195465

            Bug ID: 1195465
           Summary: update to lighttpd-1.4.64-bp153.2.3.1.x86_64 breaks userdir public_html
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: d_werner-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After todays maintenance Update to
lighttpd-1.4.64-bp153.2.3.1.x86_64.rpm
userdirs (public_html) are no longer accessible via lighttpd.

Urls in the style
http://localhost/~user/
now result in an error message (404).

The problem seems to be caused by the hardening settings in the new
/usr/lib/systemd/system/lighttpd.service
file.

It now contains additionally:

# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions

Creating a
/etc/systemd/system/lighttpd.service
without these settings - this means to fall back to the old services file -
 and disable/enable the service in order to update the links and restart it
restores the functionality.

With just disabling
ProtectHome=true
and keep the other hardening settings active the
http://localhost/~user/
access also works.

So ProtectHome=true seems to be the culprit in this case.


--1643883885.F45EB0.24031
Date: Thu, 3 Feb 2022 10:24:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195493

            Bug ID: 1195493
           Summary: VUL-0: CVE-2020-26208: jhead: heap-buffer-overflow in ReadJpegSections
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/322410/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: sbrabec-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of
EXIF
header data embedded in Jpeg images from digital cameras. In affected versions
there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections.
Crafted jpeg images can be provided to the user resulting in a program crash or
potentially incorrect exif information retrieval. Users are advised to upgrade.
There is no known workaround for this issue.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-26208
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26208
https://github.com/Matthias-Wandel/jhead/issues/7
http://www.cvedetails.com/cve/CVE-2020-26208/
https://github.com/F-ZhaoYang/jhead/commit/5186ddcf9e35a7aa0ff0539489a930434a1325f4
https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-7pr6-xq4f-qhgc
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900821


--1643887728.146c0.6265
Date: Thu, 3 Feb 2022 11:28:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195499

            Bug ID: 1195499
           Summary: VUL-0: CVE-2022-0417: vim: Heap-based Buffer Overflow in vim prior to 8.2.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322303/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mimi.vx-at-gmail.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: zbalogh-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2022-0417

Heap-based Buffer Overflow in Conda vim prior to 8.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0417
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0417
https://github.com/vim/vim/commit/652dee448618589de5528a9e9a36995803f5557a
https://huntr.dev/bounties/fc86bc8d-c866-4ade-8b7f-e49cec306d1a


--1643892026.eF27Eee0.14912
Date: Thu, 3 Feb 2022 12:40:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195508

            Bug ID: 1195508
           Summary: [RPi 4] Error during boot regarding systemd-vconsole-setup.service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dheidler-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: guillaume.gardet-at-opensuse.org
          Found By: ---
           Blocker: ---

Created attachment 855846
  --> https://bugzilla.suse.com/attachment.cgi?id=855846&action=edit
boot error

# systemctl status systemd-vconsole-setup.service
??? systemd-vconsole-setup.service - Setup Virtual Console
     Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service;
static)
     Active: failed (Result: exit-code) since Thu 2022-01-06 12:00:00 UTC; 4
weeks 0 days ago
       Docs: man:systemd-vconsole-setup.service(8)
             man:vconsole.conf(5)
   Main PID: 154 (code=exited, status=1/FAILURE)

Jan 06 12:00:01 localhost systemd-vconsole-setup[156]: cannot open file
us.map.gz
Notice: journal has been rotated since unit was started, output may be
incomplete.


--1643892248.c2DE73b0.19447
Date: Thu, 3 Feb 2022 12:44:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195509

            Bug ID: 1195509
           Summary: VUL-1: CVE-2022-0443: vim: Use After Free in vim prior to 8.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322483/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mimi.vx-at-gmail.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: zbalogh-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2022-0443

Use After Free in Conda vim prior to 8.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0443
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0443
https://github.com/vim/vim/commit/9b4a80a66544f2782040b641498754bcb5b8d461
http://www.cvedetails.com/cve/CVE-2022-0443/
https://huntr.dev/bounties/b987c8cb-bbbe-4601-8a6c-54ff907c6b51


--1643966422.0cc6Ac24.31665
Date: Fri, 4 Feb 2022 09:20:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195545

            Bug ID: 1195545
           Summary: VUL-0: tensorflow2: update to version 2.8.0, multiple CVEs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: cgoll-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: code-at-bnavigator.de
          Found By: ---
           Blocker: ---

Security updates with this version:

Fixes a floating point division by 0 when executing convolution operators
(CVE-2022-21725)
Fixes a heap OOB read in shape inference for ReverseSequence (CVE-2022-21728)
Fixes a heap OOB access in Dequantize (CVE-2022-21726)
Fixes an integer overflow in shape inference for Dequantize (CVE-2022-21727)
Fixes a heap OOB access in FractionalAvgPoolGrad (CVE-2022-21730)
Fixes an overflow and divide by zero in UnravelIndex (CVE-2022-21729)
Fixes a type confusion in shape inference for ConcatV2 (CVE-2022-21731)
Fixes an OOM in ThreadPoolHandle (CVE-2022-21732)
Fixes an OOM due to integer overflow in StringNGrams (CVE-2022-21733)
Fixes more issues caused by incomplete validation in boosted trees code
(CVE-2021-41208)
Fixes an integer overflows in most sparse component-wise ops (CVE-2022-23567)
Fixes an integer overflows in AddManySparseToTensorsMap (CVE-2022-23568)
Fixes a number of CHECK-failures in MapStage (CVE-2022-21734)
Fixes a division by zero in FractionalMaxPool (CVE-2022-21735)
Fixes a number of CHECK-fails when building invalid/overflowing tensor shapes
(CVE-2022-23569)
Fixes an undefined behavior in SparseTensorSliceDataset (CVE-2022-21736)
Fixes an assertion failure based denial of service via faulty bin count
operations (CVE-2022-21737)
Fixes a reference binding to null pointer in QuantizedMaxPool (CVE-2022-21739)
Fixes an integer overflow leading to crash in SparseCountSparseOutput
(CVE-2022-21738)
Fixes a heap overflow in SparseCountSparseOutput (CVE-2022-21740)
Fixes an FPE in BiasAndClamp in TFLite (CVE-2022-23557)
Fixes an FPE in depthwise convolutions in TFLite (CVE-2022-21741)
Fixes an integer overflow in TFLite array creation (CVE-2022-23558)
Fixes an integer overflow in TFLite (CVE-2022-23559)
Fixes a dangerous OOB write in TFLite (CVE-2022-23561)
Fixes a vulnerability leading to read and write outside of bounds in TFLite
(CVE-2022-23560)
Fixes a set of vulnerabilities caused by using insecure temporary files
(CVE-2022-23563)
Fixes an integer overflow in Range resulting in undefined behavior and OOM
(CVE-2022-23562)
Fixes a vulnerability where missing validation causes tf.sparse.split to crash
when axis is a tuple (CVE-2021-41206)
Fixes a CHECK-fail when decoding resource handles from proto (CVE-2022-23564)
Fixes a CHECK-fail with repeated AttrDef (CVE-2022-23565)
Fixes a heap OOB write in Grappler (CVE-2022-23566)
Fixes a CHECK-fail when decoding invalid tensors from proto (CVE-2022-23571)
Fixes a null-dereference when specializing tensor type (CVE-2022-23570)
Fixes a crash when type cannot be specialized (CVE-2022-23572)
Fixes a heap OOB read/write in SpecializeType (CVE-2022-23574)
Fixes an unitialized variable access in AssignOp (CVE-2022-23573)
Fixes an integer overflow in OpLevelCostEstimator::CalculateTensorSize
(CVE-2022-23575)
Fixes an integer overflow in OpLevelCostEstimator::CalculateOutputSize
(CVE-2022-23576)
Fixes a null dereference in GetInitOp (CVE-2022-23577)
Fixes a memory leak when a graph node is invalid (CVE-2022-23578)
Fixes an abort caused by allocating a vector that is too large (CVE-2022-23580)
Fixes multiple CHECK-failures during Grappler's IsSimplifiableReshape
(CVE-2022-23581)
Fixes multiple CHECK-failures during Grappler's SafeToRemoveIdentity
(CVE-2022-23579)
Fixes multiple CHECK-failures in TensorByteSize (CVE-2022-23582)
Fixes multiple CHECK-failures in binary ops due to type confusion
(CVE-2022-23583)
Fixes a use after free in DecodePng kernel (CVE-2022-23584)
Fixes a memory leak in decoding PNG images (CVE-2022-23585)
Fixes multiple CHECK-fails in function.cc (CVE-2022-23586)
Fixes multiple CHECK-fails due to attempting to build a reference tensor
(CVE-2022-23588)
Fixes an integer overflow in Grappler cost estimation of crop and resize
operation (CVE-2022-23587)
Fixes a null pointer dereference in Grappler's IsConstant (CVE-2022-23589)
Fixes a CHECK failure in constant folding (CVE-2021-41197)
Fixes a stack overflow due to self-recursive function in GraphDef
(CVE-2022-23591)
Fixes a heap OOB access in RunForwardTypeInference (CVE-2022-23592)
Fixes a crash due to erroneous StatusOr (CVE-2022-23590)
Fixes multiple crashes and heap OOB accesses in TFG dialect (MLIR)
(CVE-2022-23594)
Fixes a segfault in simplifyBroadcast (MLIR) (CVE-2022-23593)
Fixes a null pointer dereference in BuildXlaCompilationCache (XLA)
(CVE-2022-23595)
Updates icu to 69.1.


--1643990025.CED00.2112
Date: Fri, 4 Feb 2022 15:53:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195567

            Bug ID: 1195567
           Summary: VUL-0: CVE-2022-0497: openscad: Out-of-bounds memory access in comment parser
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322711/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: smar-at-smar.fi
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2050699

A .scad file with no trailing newline may cause an out-of-bounds read during
parsing of annotations.

References:

https://github.com/openscad/openscad/issues/4043
https://github.com/openscad/openscad/pull/4044

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2050699
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0497


--1643990457.AD6abCfE0.30893
Date: Fri, 4 Feb 2022 16:00:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195568

            Bug ID: 1195568
           Summary: VUL-0: CVE-2022-0496: openscad: Out-of-bounds memory access in DXF loader
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/322710/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: smar-at-smar.fi
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2050695

A DXF-format drawing with particular (not necessarily malformed!) properties
may cause an out-of-bounds memory access when imported using import().

References:
https://github.com/openscad/openscad/issues/4037

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2050695
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0496


body:
--1644243319.EED647E713.28705
Date: Mon, 7 Feb 2022 14:15:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195634

            Bug ID: 1195634
           Summary: Base Report does not work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LibreOffice
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hd-at-swiateck.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 855943
  --> http://bugzilla.opensuse.org/attachment.cgi?id=855943&action=edit
Error after open

to start a report the error message appears
 See attachment

summary: Base Report does not work


body:
--1644263670.FA1BdA0.20229
Date: Mon, 7 Feb 2022 19:54:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1195650

            Bug ID: 1195650
           Summary: audacity: No longer can export audio in m4a format since update from Leap 15.2 to Leap 15.3
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: sndirsch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Audacity no longer can export audio in m4a format after updating Leap 15.2. to
Leap 15.3. I'm attaching a few screenshots with the error messages.

pkgs: audacity sord sratom


body:
--1644313827.0ef020.25579
Date: Tue, 8 Feb 2022 09:50:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1195664

            Bug ID: 1195664
           Summary: xdmbgrd needs light refresh for openSUSE
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

in tumbleweed xdmbgrd contains this patch:

-

pkgs: xdm xdmbgrd