--17073982992.aCC6C9E.17427
Date: Thu, 8 Feb 2024 13:18:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219733

            Bug ID: 1219733
           Summary: qemu ipxe roms will stop compiling with binutils update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: matz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

We're preparing a binutils update to version 2.42 in openSUSE:Factory:Stagi=
ng:A
( https://build.opensuse.org/request/show/1144349 ), and qemu-ipxe assembly
sources hit a problem there:

[ 3712s] gcc -E -DARCH=3Dx86_64 -DPLATFORM=3Defi -DSECUREBOOT=3D0 -fstrengt=
h-reduce
-fomit-frame-pointer -falign-jumps=3D1 -falign-loops=3D1 -falign-functions=
=3D1 -m64
-mno-mmx -mno-sse -fshort-wchar -Ui386 -Ulinux -DNVALGRIND -fpie -mno-red-z=
one
-fstack-protector-strong  -mstack-protector-guard=3Dglobal -Iinclude -I.
-Iarch/x86/include -Iarch/x86_64/include -Iarch/x86_64/include/efi -Os -g
-ffreestanding -fcommon -Wall -W -Wformat-nonliteral -fno-dwarf2-cfi-asm
-fno-exceptions  -fno-unwind-tables -fno-asynchronous-unwind-tables
-Wno-address -Wno-stringop-truncation -Wno-address-of-packed-member
-Wno-array-bounds -Wno-dangling-pointer  -Werror -ffunction-sections  -incl=
ude
include/compiler.h -DASM_TCHAR=3D'@' -DASM_TCHAR_OPS=3D'@' -DCONFIG=3Dqemu
-DLOCAL_CONFIG=3Dqemu -DASSEMBLY  -DOBJECT=3Dstack arch/x86/core/stack.S | =
as --64
--divide  --fatal-warnings -o bin-x86_64-efi/stack.o
[ 3712s] arch/x86/core/stack.S: Assembler messages:
[ 3712s] arch/x86/core/stack.S:3: Warning: 64bit mode not supported on `i38=
6'
(consider swapping .arch and .code directives).
[ 3712s] {standard input}: Error: 1 warning, treating warnings as errors

The problem (see below) is newly diagnosed, from upstream it's an error.  I
made
binutils only emit a warning for this (as also other packages hit this), but
unfortunately qemu iPXE sources are built with --fatal-warnings, so the
demotion
to warnings doesn't help here.

The problem is the following.  Assembly files using the '.arch i386' direct=
ive
need to have their code-size set _beforehand_ to either 32bit or 16bit.  The
'--64' cmdline argument sets it to 64bit resulting in the error message.  Y=
ou
cannot get rid of this cmdline argument (or replace it with --32) because t=
hen
a different kind of ELF object file would be generated.

So, what needs to happen is for such code:

   .arch i386
   ... other directives ...
   .code16  # or .code32

to move (or add) the .codeXX directive in front of the .arch directive.

I will momentarily attach a patch to do that in all files from the roms/ipxe
subdir.  I've verified that this fixes the error message and lets qemu 8.2.0
build with the new binutils.  Tumbleweed (or at least the Staging:A) still
uses qemu 8.1.something, but as the iPXE repo gets virtually no changes at =
all
the patch should also apply to that tree as is.

(The build-test happens in home:matz2:branches:Virtualization/qemu/15.5 )

Can I convince someone from the qemu team to please integrate this patch in=
to
the qemu package for at least tumbleweed?
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17073982992.aCC6C9E.17427
Date: Thu, 8 Feb 2024 13:18:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219733

          Summary
          qemu ipxe roms will stop compiling with binutils update

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Tools

          Assignee
          virt-bugs@suse.de

          Reporter
          matz@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

We're preparing a binutils update to version 2.42 in openSUS=
E:Factory:Staging:A
( https://build=
.opensuse.org/request/show/1144349 ), and qemu-ipxe assembly
sources hit a problem there:

[ 3712s] gcc -E -DARCH=3Dx86_64 -DPLATFORM=3Defi -DSECUREBOOT=3D0 -fstrengt=
h-reduce
-fomit-frame-pointer -falign-jumps=3D1 -falign-loops=3D1 -falign-functions=
=3D1 -m64
-mno-mmx -mno-sse -fshort-wchar -Ui386 -Ulinux -DNVALGRIND -fpie -mno-red-z=
one
-fstack-protector-strong  -mstack-protector-guard=3Dglobal -Iinclude -I.
-Iarch/x86/include -Iarch/x86_64/include -Iarch/x86_64/include/efi -Os -g
-ffreestanding -fcommon -Wall -W -Wformat-nonliteral -fno-dwarf2-cfi-asm
-fno-exceptions  -fno-unwind-tables -fno-asynchronous-unwind-tables
-Wno-address -Wno-stringop-truncation -Wno-address-of-packed-member
-Wno-array-bounds -Wno-dangling-pointer  -Werror -ffunction-sections  -incl=
ude
include/compiler.h -DASM_TCHAR=3D'@' -DASM_TCHAR_OPS=3D'@' -DCONFIG=
=3Dqemu
-DLOCAL_CONFIG=3Dqemu -DASSEMBLY  -DOBJECT=3Dstack arch/x86/core/stack.S | =
as --64
--divide  --fatal-warnings -o bin-x86_64-efi/stack.o
[ 3712s] arch/x86/core/stack.S: Assembler messages:
[ 3712s] arch/x86/core/stack.S:3: Warning: 64bit mode not supported on `i38=
6'
(consider swapping .arch and .code directives).
[ 3712s] {standard input}: Error: 1 warning, treating warnings as errors

The problem (see below) is newly diagnosed, from upstream it's an error.  I
made
binutils only emit a warning for this (as also other packages hit this), but
unfortunately qemu iPXE sources are built with --fatal-warnings, so the
demotion
to warnings doesn't help here.

The problem is the following.  Assembly files using the '.arch i386' direct=
ive
need to have their code-size set _beforehand_ to either 32bit or 16bit.  The
'--64' cmdline argument sets it to 64bit resulting in the error message.  Y=
ou
cannot get rid of this cmdline argument (or replace it with --32) because t=
hen
a different kind of ELF object file would be generated.

So, what needs to happen is for such code:

   .arch i386
   ... other directives ...
   .code16  # or .code32

to move (or add) the .codeXX directive in front of the .arch directive.

I will momentarily attach a patch to do that in all files from the roms/ipxe
subdir.  I've verified that this fixes the error message and lets qemu 8.2.0
build with the new binutils.  Tumbleweed (or at least the Staging:A) still
uses qemu 8.1.something, but as the iPXE repo gets virtually no changes at =
all
the patch should also apply to that tree as is.

(The build-test happens in home:matz2:branches:Virtualization/qemu/15.5 )

Can I convince someone from the qemu team to please integrate this patch in=
to
the qemu package for at least tumbleweed?

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17073982992.aCC6C9E.17427--


--17074097768.FE79FB52.18023
Date: Thu, 8 Feb 2024 16:29:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219739

            Bug ID: 1219739
           Summary: Seamonkey requires python2(EOL) to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Seamonkey is amongst the few last ones holding on to python2 to build.

Please try to port this off of python2, so we can finally eliminate it
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17074097768.FE79FB52.18023
Date: Thu, 8 Feb 2024 16:29:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219739

          Summary
          Seamonkey requires python2(EOL) to build

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Seamonkey is amongst the few last ones holding on to python2=
 to build.

Please try to port this off of python2, so we can finally eliminate it

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17074097768.FE79FB52.18023--


body:
--17074098616.DBd4eF7DC.18059
Date: Thu, 8 Feb 2024 16:31:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219740

            Bug ID: 1219740
           Summary: julia requires python2(EOL) to build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

julia is amongst the few last ones holding on to python2 to build.

Please try to port this off of python2, so we can finally eliminate it
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17074098616.DBd4eF7DC.18059
Date: Thu, 8 Feb 2024 16:31:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219740

          Summary
          julia requires python2(EOL) to build

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

julia is amongst the few last ones holding on to python2 to =
build.

Please try to port this off of python2, so we can finally eliminate it

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17074098616.DBd4eF7DC.18059--

summary: julia requires python2(EOL) to build


body:
--17074763311.Eaf23.19850
Date: Fri, 9 Feb 2024 10:58:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219766

            Bug ID: 1219766
           Summary: USB passthrough fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: pinkernell@ph-heidelberg.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

This is on=20

OS: openSUSE Tumbleweed 20240207
Kernel: 6.7.4-1-default (64-bit)

with

Virtualbox 7.0.14-Virt.1699.733.2-x.86_64
Kernel module 7.0.14_k6.7.4_1-Virt.1699.733.2
Guest Windows 10, Guest Additions 7.0.14r161095
USB-3.0 xHCI Controller activated

VBox host software recognises USB device (ScanSnap Scanner) and allows sett=
ing
device filter. But guest does not find device. Hovering the mouse on USB ic=
on
of host software shows "No USB Devices connected". In the list of USB devic=
es
that opens after clicking on the icon, the Scanner is blanked out.

This seems new since upgrade to 6.7.2(?) kernel.

Which part of the log do you need? I am new here and happy to help.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17074763311.Eaf23.19850
Date: Fri, 9 Feb 2024 10:58:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219766

          Summary
          USB passthrough fails

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Other

          Assignee
          virt-bugs@suse.de

          Reporter
          pinkernell@ph-heidelberg.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

This is on=20

OS: openSUSE Tumbleweed 20240207
Kernel: 6.7.4-1-default (64-bit)

with

Virtualbox 7.0.14-Virt.1699.733.2-x.86_64
Kernel module 7.0.14_k6.7.4_1-Virt.1699.733.2
Guest Windows 10, Guest Additions 7.0.14r161095
USB-3.0 xHCI Controller activated

VBox host software recognises USB device (ScanSnap Scanner) and allows sett=
ing
device filter. But guest does not find device. Hovering the mouse on USB ic=
on
of host software shows "No USB Devices connected". In the list of=
 USB devices
that opens after clicking on the icon, the Scanner is blanked out.

This seems new since upgrade to 6.7.2(?) kernel.

Which part of the log do you need? I am new here and happy to help.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17074763311.Eaf23.19850--

summary: USB passthrough fails


--17074763771.FAcDFDE.19856
Date: Fri, 9 Feb 2024 10:59:37 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219767

            Bug ID: 1219767
           Summary: nullok option of pam_unix doesn't work as expected when logging in via a tty with an empty password
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

To allow a user to log in with an empty password, the option "nullok" of
pam_unix is added in /etc/pam.d/common-auth:

auth    required        pam_env.so=20=20=20=20=20=20
auth    optional        pam_gnome_keyring.so
auth    required        pam_unix.so     try_first_pass nullok
auth    required        pam_ecryptfs.so unwrap

But when trying to log in via tty1 with user "foo" who has an empty passwor=
d,
login still prompts for a password.

It appears that pam_gnome_keyring is interfering in the process of
authentication cancelling the effect of nullok. Indeed after commenting the
line with pam_gnome_keyring.so, the login process works as expect and there=
's
no more password prompt.

Please note that in this scenario gnome/gdm is not involved at all (the sys=
tem
was booted with multi-user.target target)so I don't really see why
pam_gnome_keyring interferes here.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17074763771.FAcDFDE.19856
Date: Fri, 9 Feb 2024 10:59:37 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219767

          Summary
          nullok option of pam_unix doesn't work as expected when loggi=
ng in via a tty with an empty password

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          fbui@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

To allow a user to log in with an empty password, the option=
 "nullok" of
pam_unix is added in /etc/pam.d/common-auth:

auth    required        pam_env.so=20=20=20=20=20=20
auth    optional        pam_gnome_keyring.so
auth    required        pam_unix.so     try_first_pass nullok
auth    required        pam_ecryptfs.so unwrap

But when trying to log in via tty1 with user "foo" who has an emp=
ty password,
login still prompts for a password.

It appears that pam_gnome_keyring is interfering in the process of
authentication cancelling the effect of nullok. Indeed after commenting the
line with pam_gnome_keyring.so, the login process works as expect and there=
's
no more password prompt.

Please note that in this scenario gnome/gdm is not involved at all (the sys=
tem
was booted with multi-user.target target)so I don't really see why
pam_gnome_keyring interferes here.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17074763771.FAcDFDE.19856--


--17076444700.53CCe.21607
Date: Sun, 11 Feb 2024 09:41:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219800

            Bug ID: 1219800
           Summary: Bugzilla 3.66.5 crashes when transferring file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: variablestarlight-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

openSUSE Tumbleweed updated FileZilla to version 3.66.5 today (2024-02-11. =
On
transferring files FileZilla crashes "Aborted (core dumped)". Running with =
gdb
not possible because requested "filezilla-debuginfo-3.66.5-1.1.x86_6" not
available. Deleting cache and older config files does not resolve the issue.

Messages when running from terminal:

> filezilla=20
Reading locale option from /home/user/.config/filezilla/filezilla.xml

** (filezilla:3918): WARNING **: 10:17:38.569: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.569: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.570: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.570: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.576: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.576: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.577: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.577: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.590: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.590: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.591: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.591: invalid source position for
vertical gradient
wxD-Bus: Signal from /org/freedesktop/DBus, member NameAcquired
wxD-Bus: Reply with serial 2
wxD-Bus: Signal: Error: The name org.gnome.SessionManager was not provided =
by
any .service files
wxD-Bus: CPowerManagementInhibitor: Requesting busy
wxD-Bus: Reply with serial 3
wxD-Bus: CPowerManagementInhibitor: Request successful, cookie is 33
wxD-Bus: CPowerManagementInhibitor: Requesting idle
wxD-Bus: Reply with serial 4
wxD-Bus: CPowerManagementInhibitor: Request successful

** (filezilla:3918): WARNING **: 10:17:51.484: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.485: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.486: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.486: invalid source position for
vertical gradient
wxD-Bus: CPowerManagementInhibitor: Requesting busy
wxD-Bus: Reply with serial 5
wxD-Bus: CPowerManagementInhibitor: Request successful, cookie is 31
Aborted (core dumped)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17076444700.53CCe.21607
Date: Sun, 11 Feb 2024 09:41:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219800

          Summary
          Bugzilla 3.66.5 crashes when transferring file

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          64bit

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          variablestarlight@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

openSUSE Tumbleweed updated FileZilla to version 3.66.5 toda=
y (2024-02-11. On
transferring files FileZilla crashes "Aborted (core dumped)". Run=
ning with gdb
not possible because requested "filezilla-debuginfo-3.66.5-1.1.x86_6&q=
uot; not
available. Deleting cache and older config files does not resolve the issue.

Messages when running from terminal:

> filezilla
Reading locale option from /home/user/.config/filezilla/filezilla.xml

** (filezilla:3918): WARNING **: 10:17:38.569: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.569: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.570: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.570: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.576: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.576: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.577: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.577: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.590: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.590: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.591: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:38.591: invalid source position for
vertical gradient
wxD-Bus: Signal from /org/freedesktop/DBus, member NameAcquired
wxD-Bus: Reply with serial 2
wxD-Bus: Signal: Error: The name org.gnome.SessionManager was not provided =
by
any .service files
wxD-Bus: CPowerManagementInhibitor: Requesting busy
wxD-Bus: Reply with serial 3
wxD-Bus: CPowerManagementInhibitor: Request successful, cookie is 33
wxD-Bus: CPowerManagementInhibitor: Requesting idle
wxD-Bus: Reply with serial 4
wxD-Bus: CPowerManagementInhibitor: Request successful

** (filezilla:3918): WARNING **: 10:17:51.484: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.485: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.486: invalid source position for
vertical gradient

** (filezilla:3918): WARNING **: 10:17:51.486: invalid source position for
vertical gradient
wxD-Bus: CPowerManagementInhibitor: Requesting busy
wxD-Bus: Reply with serial 5
wxD-Bus: CPowerManagementInhibitor: Request successful, cookie is 31
Aborted (core dumped)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17076444700.53CCe.21607--


--17076801990.Bb3CB.21786
Date: Sun, 11 Feb 2024 19:36:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219803

            Bug ID: 1219803
           Summary: Lenovo Yoga 14APH8 headphones jack requires bass speaker to be full volume
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: pinchon.guillaume-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Symptoms :
When connecting headphones to the laptop's jack it's required to set the Ba=
ss
Speaker to full volume through alsamixer otherwise we get no sound.

Either that or replacing in
/usr/share/alsa-card-profile/mixer/paths/analog-output-headphones.conf :
[Element Bass Speaker]
switch =3D off
volume =3D off
with :
[Element Bass Speaker]
switch =3D off
volume =3D merge

System info :
Operating System: openSUSE Tumbleweed 20240209
KDE Plasma Version: 5.27.10
KDE Frameworks Version: 5.114.0
Qt Version: 5.15.12
Kernel Version: 6.8.0-rc3-3.g7450939-default (64-bit)
Graphics Platform: X11
Processors: 16 =C3=97 AMD Ryzen 7 7840HS with Radeon 780M Graphics
Memory: 27.1=C2=A0Gio of RAM
Graphics Processor: AMD Radeon Graphics
Manufacturer: LENOVO
Product Name: 82Y8
System Version: Yoga Pro 7 14APH8

hwinfo --sound :
12: PCI 6300.1: 0403 Audio device=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
  [Created at pci.386]
  Unique ID: UGCg.OQPqPLYNCh0
  Parent ID: JZZT.maS73mB38XF
  SysFS ID: /devices/pci0000:00/0000:00:08.1/0000:63:00.1
  SysFS BusID: 0000:63:00.1
  Hardware Class: sound
  Model: "ATI Audio device"
  Vendor: pci 0x1002 "ATI Technologies Inc"
  Device: pci 0x1640=20
  SubVendor: pci 0x17aa "Lenovo"
  SubDevice: pci 0x3824=20
  Driver: "snd_hda_intel"
  Driver Modules: "snd_hda_intel"
  Memory Range: 0x785c8000-0x785cbfff (rw,non-prefetchable)
  IRQ: 90 (no events)
  Module Alias: "pci:v00001002d00001640sv000017AAsd00003824bc04sc03i00"
  Driver Info #0:
    Driver Status: snd_hda_intel is active
    Driver Activation Cmd: "modprobe snd_hda_intel"
  Config Status: cfg=3Dnew, avail=3Dyes, need=3Dno, active=3Dunknown
  Attached to: #27 (PCI bridge)

22: PCI 6300.6: 0403 Audio device
  [Created at pci.386]
  Unique ID: puer.m6xb4yIjnP9
  Parent ID: JZZT.maS73mB38XF
  SysFS ID: /devices/pci0000:00/0000:00:08.1/0000:63:00.6
  SysFS BusID: 0000:63:00.6
  Hardware Class: sound
  Model: "AMD Family 17h (Models 10h-1fh) HD Audio Controller"
  Vendor: pci 0x1022 "AMD"
  Device: pci 0x15e3 "Family 17h (Models 10h-1fh) HD Audio Controller"
  SubVendor: pci 0x17aa "Lenovo"
  SubDevice: pci 0x3882=20
  Driver: "snd_hda_intel"
  Driver Modules: "snd_hda_intel"
  Memory Range: 0x785c0000-0x785c7fff (rw,non-prefetchable)
  IRQ: 43 (327 events)
  Module Alias: "pci:v00001022d000015E3sv000017AAsd00003882bc04sc03i00"
  Driver Info #0:
    Driver Status: snd_hda_intel is active
    Driver Activation Cmd: "modprobe snd_hda_intel"
  Config Status: cfg=3Dnew, avail=3Dyes, need=3Dno, active=3Dunknown
  Attached to: #27 (PCI bridge)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17076801990.Bb3CB.21786
Date: Sun, 11 Feb 2024 19:36:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219803

          Summary
          Lenovo Yoga 14APH8 headphones jack requires bass speaker to b=
e full volume

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          pinchon.guillaume@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Symptoms :
When connecting headphones to the laptop's jack it's required to set the Ba=
ss
Speaker to full volume through alsamixer otherwise we get no sound.

Either that or replacing in
/usr/share/alsa-card-profile/mixer/paths/analog-output-headphones.conf :
[Element Bass Speaker]
switch =3D off
volume =3D off
with :
[Element Bass Speaker]
switch =3D off
volume =3D merge

System info :
Operating System: openSUSE Tumbleweed 20240209
KDE Plasma Version: 5.27.10
KDE Frameworks Version: 5.114.0
Qt Version: 5.15.12
Kernel Version: 6.8.0-rc3-3.g7450939-default (64-bit)
Graphics Platform: X11
Processors: 16 =C3=97 AMD Ryzen 7 7840HS with Radeon 780M Graphics
Memory: 27.1=C2=A0Gio of RAM
Graphics Processor: AMD Radeon Graphics
Manufacturer: LENOVO
Product Name: 82Y8
System Version: Yoga Pro 7 14APH8

hwinfo --sound :
12: PCI 6300.1: 0403 Audio device=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
  [Created at pci.386]
  Unique ID: UGCg.OQPqPLYNCh0
  Parent ID: JZZT.maS73mB38XF
  SysFS ID: /devices/pci0000:00/0000:00:08.1/0000:63:00.1
  SysFS BusID: 0000:63:00.1
  Hardware Class: sound
  Model: "ATI Audio device"
  Vendor: pci 0x1002 "ATI Technologies Inc"
  Device: pci 0x1640=20
  SubVendor: pci 0x17aa "Lenovo"
  SubDevice: pci 0x3824=20
  Driver: "snd_hda_intel"
  Driver Modules: "snd_hda_intel"
  Memory Range: 0x785c8000-0x785cbfff (rw,non-prefetchable)
  IRQ: 90 (no events)
  Module Alias: "pci:v00001002d00001640sv000017AAsd00003824bc04sc03i00=
"
  Driver Info #0:
    Driver Status: snd_hda_intel is active
    Driver Activation Cmd: "modprobe snd_hda_intel"
  Config Status: cfg=3Dnew, avail=3Dyes, need=3Dno, active=3Dunknown
  Attached to: #27 (PCI bridge)

22: PCI 6300.6: 0403 Audio device
  [Created at pci.386]
  Unique ID: puer.m6xb4yIjnP9
  Parent ID: JZZT.maS73mB38XF
  SysFS ID: /devices/pci0000:00/0000:00:08.1/0000:63:00.6
  SysFS BusID: 0000:63:00.6
  Hardware Class: sound
  Model: "AMD Family 17h (Models 10h-1fh) HD Audio Controller"
  Vendor: pci 0x1022 "AMD"
  Device: pci 0x15e3 "Family 17h (Models 10h-1fh) HD Audio Controller&=
quot;
  SubVendor: pci 0x17aa "Lenovo"
  SubDevice: pci 0x3882=20
  Driver: "snd_hda_intel"
  Driver Modules: "snd_hda_intel"
  Memory Range: 0x785c0000-0x785c7fff (rw,non-prefetchable)
  IRQ: 43 (327 events)
  Module Alias: "pci:v00001022d000015E3sv000017AAsd00003882bc04sc03i00=
"
  Driver Info #0:
    Driver Status: snd_hda_intel is active
    Driver Activation Cmd: "modprobe snd_hda_intel"
  Config Status: cfg=3Dnew, avail=3Dyes, need=3Dno, active=3Dunknown
  Attached to: #27 (PCI bridge)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17076801990.Bb3CB.21786--


--17077309931.6D302E9F.22254
Date: Mon, 12 Feb 2024 09:43:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219819

            Bug ID: 1219819
           Summary: VUL-0: CVE-2024-25442: hugin: heap buffer overflow in HuginBase::PanoramaMemento::loadPTScript
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/393579/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: thomas.leroy-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin
v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a
crafted image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25442
https://www.cve.org/CVERecord?id=3DCVE-2024-25442
https://bugs.launchpad.net/hugin/+bug/2025032
https://bugzilla.redhat.com/show_bug.cgi?id=3D2263555
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17077309931.6D302E9F.22254
Date: Mon, 12 Feb 2024 09:43:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219819

          Summary
          VUL-0: CVE-2024-25442: hugin: heap buffer overflow in HuginBa=
se::PanoramaMemento::loadPTScript

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/393579/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          pgajdos@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          thomas.leroy@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

An issue in the HuginBase::PanoramaMemento::loadPTScript fun=
ction of Hugin
v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a
crafted image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25442
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-25442
https://bugs.laun=
chpad.net/hugin/+bug/2025032
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2263555

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17077309931.6D302E9F.22254--


--17077311043.c54336.22263
Date: Mon, 12 Feb 2024 09:45:04 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219820

            Bug ID: 1219820
           Summary: VUL-0: CVE-2024-25443: hugin: use-after-free via HuginBase::ImageVariable<double>::linkWith
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/393580/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: thomas.leroy-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

An issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin
v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a cra=
fted
image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25443
https://www.cve.org/CVERecord?id=3DCVE-2024-25443
https://bugs.launchpad.net/hugin/+bug/2025035
https://bugzilla.redhat.com/show_bug.cgi?id=3D2263555
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17077311043.c54336.22263
Date: Mon, 12 Feb 2024 09:45:04 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219820

          Summary
          VUL-0: CVE-2024-25443: hugin: use-after-free via HuginBase::I=
mageVariable<double>::linkWith

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/393580/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          pgajdos@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          thomas.leroy@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

An issue in the HuginBase::ImageVariable<double>::link=
With function of Hugin
v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a cra=
fted
image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25443
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-25443
https://bugs.laun=
chpad.net/hugin/+bug/2025035
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2263555

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17077311043.c54336.22263--


--17077311600.DFd9.22266
Date: Mon, 12 Feb 2024 09:46:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219821

            Bug ID: 1219821
           Summary: VUL-0: CVE-2024-25445: hugin: assertion failure in HuginBase::PTools::Transform::transform
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/393581/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: thomas.leroy-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Improper handling of values in HuginBase::PTools::Transform::transform of H=
ugin
2022.0.0 leads to an assertion failure.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25445
https://bugs.launchpad.net/hugin/+bug/2025038
https://www.cve.org/CVERecord?id=3DCVE-2024-25445
https://bugzilla.redhat.com/show_bug.cgi?id=3D2263555
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17077311600.DFd9.22266
Date: Mon, 12 Feb 2024 09:46:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219821

          Summary
          VUL-0: CVE-2024-25445: hugin: assertion failure in HuginBase:=
:PTools::Transform::transform

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/393581/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          pgajdos@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          thomas.leroy@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Improper handling of values in HuginBase::PTools::Transform:=
:transform of Hugin
2022.0.0 leads to an assertion failure.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25445
https://bugs.laun=
chpad.net/hugin/+bug/2025038
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-25445
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2263555

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17077311600.DFd9.22266--


--17077312302.f1c07.22269
Date: Mon, 12 Feb 2024 09:47:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219822

            Bug ID: 1219822
           Summary: VUL-0: CVE-2024-25446: hugin: heap buffer overflow in HuginBase::PTools::setDestImage
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/393582/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: thomas.leroy-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0
allows attackers to cause a heap buffer overflow via parsing a crafted imag=
e.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25446
https://www.cve.org/CVERecord?id=3DCVE-2024-25446
https://bugs.launchpad.net/hugin/+bug/2025037
https://bugzilla.redhat.com/show_bug.cgi?id=3D2263555
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17077312302.f1c07.22269
Date: Mon, 12 Feb 2024 09:47:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219822

          Summary
          VUL-0: CVE-2024-25446: hugin: heap buffer overflow in  HuginB=
ase::PTools::setDestImage

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/393582/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          pgajdos@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          thomas.leroy@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

An issue in the HuginBase::PTools::setDestImage function of =
Hugin v2022.0.0
allows attackers to cause a heap buffer overflow via parsing a crafted imag=
e.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25446
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-25446
https://bugs.laun=
chpad.net/hugin/+bug/2025037
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2263555

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17077312302.f1c07.22269--


body:
--17077512593.Fba15F.23756
Date: Mon, 12 Feb 2024 15:20:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219842

            Bug ID: 1219842
           Summary: [python-nss] FTBFS with Python 3.12
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/openSUSE:Factory/python-n=
ss/standard/x86_64

[   28s] + /usr/bin/python3.12 setup.py build '--executable=3D/usr/bin/pyth=
on3.12
-s'
[   28s] /home/abuild/rpmbuild/BUILD/python-nss-1.0.1/setup.py:45:
SyntaxWarning: invalid escape sequence '\s'
[   28s]   version_re =3D re.compile("^\s*__version__\s*=3D\s*['\"]([^'\"]*=
)['\"]")
[   28s] /home/abuild/rpmbuild/BUILD/python-nss-1.0.1/setup.py:188:
SyntaxWarning: invalid escape sequence '\.'
[   28s]   """
[   28s] src/py_nspr_error.c: In function =E2=80=98set_nspr_error=E2=80=99:
[   28s] src/py_nspr_error.c:189:23: error: macro "va_start" requires 2
arguments, but only 1 given
[   28s]   189 |         va_start(vargs);
[   28s]       |                       ^
[   28s] In file included from /usr/include/python3.12/bytesobject.h:10,
[   28s]                  from /usr/include/python3.12/Python.h:50,
[   28s]                  from src/py_nspr_error.c:6:
[   28s] /usr/lib64/gcc/x86_64-suse-linux/13/include/stdarg.h:50: note: mac=
ro
"va_start" defined here
[   28s]    50 | #define va_start(v,l)   __builtin_va_start(v,l)
[   28s]       |=20
[   28s] src/py_nspr_error.c:189:9: error: =E2=80=98va_start=E2=80=99 undec=
lared (first use in
this function)
[   28s]   189 |         va_start(vargs);
[   28s]       |         ^~~~~~~~
[   28s] src/py_nspr_error.c:189:9: note: each undeclared identifier is
reported only once for each function it appears in
[   28s] src/py_nspr_error.c: In function =E2=80=98set_cert_verify_error=E2=
=80=99:
[   28s] src/py_nspr_error.c:225:23: error: macro "va_start" requires 2
arguments, but only 1 given
[   28s]   225 |         va_start(vargs);
[   28s]       |                       ^
[   28s] /usr/lib64/gcc/x86_64-suse-linux/13/include/stdarg.h:50: note: mac=
ro
"va_start" defined here
[   28s]    50 | #define va_start(v,l)   __builtin_va_start(v,l)
[   28s]       |=20
[   28s] src/py_nspr_error.c:225:9: error: =E2=80=98va_start=E2=80=99 undec=
lared (first use in
this function)
[   28s]   225 |         va_start(vargs);
[   28s]       |         ^~~~~~~~
[   28s] error: command '/usr/bin/gcc' failed with exit code 1
[   28s] error: Bad exit status from /var/tmp/rpm-tmp.s7LpL0 (%build)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17077512593.Fba15F.23756
Date: Mon, 12 Feb 2024 15:20:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219842

          Summary
          [python-nss] FTBFS with Python 3.12

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://build.opensuse.org/pa=
ckage/live_build_log/openSUSE:Factory/python-nss/standard/x86_64

[   28s] + /usr/bin/python3.12 setup.py build '--executable=3D/usr/bin/pyth=
on3.12
-s'
[   28s] /home/abuild/rpmbuild/BUILD/python-nss-1.0.1/setup.py:45:
SyntaxWarning: invalid escape sequence '\s'
[   28s]   version_re =3D re.compile("^\s*__version__\s*=3D\s*['\&quot=
;]([^'\"]*)['\"]")
[   28s] /home/abuild/rpmbuild/BUILD/python-nss-1.0.1/setup.py:188:
SyntaxWarning: invalid escape sequence '\.'
[   28s]   """
[   28s] src/py_nspr_error.c: In function =E2=80=98set_nspr_error=E2=80=99:
[   28s] src/py_nspr_error.c:189:23: error: macro "va_start" requ=
ires 2
arguments, but only 1 given
[   28s]   189 |         va_start(vargs);
[   28s]       |                       ^
[   28s] In file included from /usr/include/python3.12/bytesobject.h:10,
[   28s]                  from /usr/include/python3.12/Python.h:50,
[   28s]                  from src/py_nspr_error.c:6:
[   28s] /usr/lib64/gcc/x86_64-suse-linux/13/include/stdarg.h:50: note: mac=
ro
"va_start" defined here
[   28s]    50 | #define va_start(v,l)   __builtin_va_start(v,l)
[   28s]       |=20
[   28s] src/py_nspr_error.c:189:9: error: =E2=80=98va_start=E2=80=99 undec=
lared (first use in
this function)
[   28s]   189 |         va_start(vargs);
[   28s]       |         ^~~~~~~~
[   28s] src/py_nspr_error.c:189:9: note: each undeclared identifier is
reported only once for each function it appears in
[   28s] src/py_nspr_error.c: In function =E2=80=98set_cert_verify_error=E2=
=80=99:
[   28s] src/py_nspr_error.c:225:23: error: macro "va_start" requ=
ires 2
arguments, but only 1 given
[   28s]   225 |         va_start(vargs);
[   28s]       |                       ^
[   28s] /usr/lib64/gcc/x86_64-suse-linux/13/include/stdarg.h:50: note: mac=
ro
"va_start" defined here
[   28s]    50 | #define va_start(v,l)   __builtin_va_start(v,l)
[   28s]       |=20
[   28s] src/py_nspr_error.c:225:9: error: =E2=80=98va_start=E2=80=99 undec=
lared (first use in
this function)
[   28s]   225 |         va_start(vargs);
[   28s]       |         ^~~~~~~~
[   28s] error: command '/usr/bin/gcc' failed with exit code 1
[   28s] error: Bad exit status from /var/tmp/rpm-tmp.s7LpL0 (%build)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17077512593.Fba15F.23756--

summary: [python-nss] FTBFS with Python 3.12


body:
--17078339083.dCAa.26045
Date: Tue, 13 Feb 2024 14:18:28 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219884

            Bug ID: 1219884
           Summary: Adapt package libzrtpcpp to build with OpenSSL 3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: otto.hollmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Package libzrtpcpp requires openssl 1.0.0 that is EOL and we would like to
remove it from Factory.
> BuildRequires:  libopenssl-1_0_0-devel

Please check tracker bug 1219879 for more details.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17078339083.dCAa.26045
Date: Tue, 13 Feb 2024 14:18:28 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219884

          Summary
          Adapt package libzrtpcpp to build with OpenSSL 3

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          otto.hollmann@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Package libzrtpcpp requires openssl 1.0.0 that is EOL and we=
 would like to
remove it from Factory.
> BuildRequires:  libopenssl-1_0_0-devel

Please check tracker bug 1219879 for more details.</pr=
e>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17078339083.dCAa.26045--

pkgs: libzrtpcpp twinkle


--17078509190.2AD77e90.26834
Date: Tue, 13 Feb 2024 19:01:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219892

            Bug ID: 1219892
           Summary: Try to generate xorg-x11-server-sdk package from xwayland sources
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: sndirsch-at-suse.com
        QA Contact: gfx-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

For the future I expect much more version updates for xwayland than for
xorg-x11-server, since the former is still actively used and released, while
for the latter only security fixes are released.=20

Therefore we should figure out if it wouldn't be possible to extract the
generic xserver sources (currently xorg-x11-server-sdk subpackage of
xorg-x11-server) out of xwayland sources instead of xorg-x11-server sources.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17078509190.2AD77e90.26834
Date: Tue, 13 Feb 2024 19:01:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219892

          Summary
          Try to generate xorg-x11-server-sdk package from xwayland sou=
rces

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          All

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Enhancement

          Priority
          P5 - None

          Component
          X.Org

          Assignee
          gfx-bugs@suse.de

          Reporter
          sndirsch@suse.com

          QA Contact
          gfx-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

For the future I expect much more version updates for xwayla=
nd than for
xorg-x11-server, since the former is still actively used and released, while
for the latter only security fixes are released.=20

Therefore we should figure out if it wouldn't be possible to extract the
generic xserver sources (currently xorg-x11-server-sdk subpackage of
xorg-x11-server) out of xwayland sources instead of xorg-x11-server sources=
.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17078509190.2AD77e90.26834--


--17080161100.b40e4d46D.31149
Date: Thu, 15 Feb 2024 16:55:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219977

            Bug ID: 1219977
           Summary: VM's on my Tumbleweed desktop stopped booting after a recent update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: All
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: sam-at-azertech.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 872773
  --> https://bugzilla.suse.com/attachment.cgi?id=3D872773&action=3Dedit
Package names and version numbers via RPM -QA

udevd in a KVM/QEMU VM no longer displaying VirtIO storage device (backed by
QCOW2 file)

* Was running a few VM's on my desktop Tumbleweed system - no problems
* Installed some QEMU / KVM updates one night (a few nights ago)

* Next morning all VM's unusable - nothing boots anymore.

* Microsoft VM tries to boot but goes immediately into the blue screen with=
 a
memory error
* Linux VM's (CentOS, Leap 15.5) crash quickly on boot

The same VM's run fine after being copied to a computer running LEAP 15.5.

* Booting System Rescue CD off the CD-ROM device for any VM, I noticed that=
 the
main storage device, usually /dev/vda, is no longer available (it's the def=
ault
storage device: a QCOW2 file using the VirtIO driver.)

* The System Rescue CD takes a long time to boot (seems like some software =
is
crashing during boot.) When I try to shutdown the VM, the last message
appearing on the screen is talking about a number of SystemD-Udevd tasks th=
at
are taking a long time to stop. The system hangs at that point.

* At the moment the above behavior is absolutely repeatable.

Thanks again for all your most excellent efforts.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17080161100.b40e4d46D.31149
Date: Thu, 15 Feb 2024 16:55:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219977

          Summary
          VM's on my Tumbleweed desktop stopped booting after a recent =
update

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          All

          Status
          NEW

          Severity
          Critical

          Priority
          P5 - None

          Component
          KVM

          Assignee
          kvm-bugs@suse.de

          Reporter
          sam@azertech.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 872773 [detail=
s]
Package names and version numbers via RPM -QA

udevd in a KVM/QEMU VM no longer displaying VirtIO storage device (backed by
QCOW2 file)

* Was running a few VM's on my desktop Tumbleweed system - no problems
* Installed some QEMU / KVM updates one night (a few nights ago)

* Next morning all VM's unusable - nothing boots anymore.

* Microsoft VM tries to boot but goes immediately into the blue screen with=
 a
memory error
* Linux VM's (CentOS, Leap 15.5) crash quickly on boot

The same VM's run fine after being copied to a computer running LEAP 15.5.

* Booting System Rescue CD off the CD-ROM device for any VM, I noticed that=
 the
main storage device, usually /dev/vda, is no longer available (it's the def=
ault
storage device: a QCOW2 file using the VirtIO driver.)

* The System Rescue CD takes a long time to boot (seems like some software =
is
crashing during boot.) When I try to shutdown the VM, the last message
appearing on the screen is talking about a number of SystemD-Udevd tasks th=
at
are taking a long time to stop. The system hangs at that point.

* At the moment the above behavior is absolutely repeatable.

Thanks again for all your most excellent efforts.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17080161100.b40e4d46D.31149--


--17080323970.FAc4d7121.31491
Date: Thu, 15 Feb 2024 21:26:37 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219986

            Bug ID: 1219986
           Summary: virsh iface-list hangs when running as normal user
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: tm@dev-zero.ch
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 872787
  --> https://bugzilla.suse.com/attachment.cgi?id=3D872787&action=3Dedit
compressed log output of virtinterfaced

Running

  ~> virsh iface-list

as normal user hangs forever, while other commands like `virsh list` work.

This is with the non-monolithic setup of libvirt, i.e. with `virtinterfaced=
`.
The output of `virtinterfaced` started manually with `-v` is attached.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17080323970.FAc4d7121.31491
Date: Thu, 15 Feb 2024 21:26:37 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219986

          Summary
          virsh iface-list hangs when running as normal user

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Tools

          Assignee
          virt-bugs@suse.de

          Reporter
          tm@dev-zero.ch

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 872787 [details]
compressed log output of virtinterfaced

Running

  ~> virsh iface-list

as normal user hangs forever, while other commands like `virsh list` work.

This is with the non-monolithic setup of libvirt, i.e. with `virtinterfaced=
`.
The output of `virtinterfaced` started manually with `-v` is attached.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17080323970.FAc4d7121.31491--


--17080385071.8c1ab62f.31605
Date: Thu, 15 Feb 2024 23:08:27 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219988

            Bug ID: 1219988
           Summary: go1.20,go1.21,go1.22: ensure VERSION file is present in go1.x toolchain GOROOT
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

go1.x tool 'go tool dist' and 'go tool distpack' require the source file
VERSION to be present in GOROOT. Current go1.x packaging is missing this fi=
le,
ensure it is present.

Example:=20

$ go version go1.22.0 linux/amd64

$ go tool dist list
go tool dist: FAILED: not a Git repo; must put a VERSION file in $GOROOT

$ go tool distpack
distpack: open /usr/lib64/go/1.22/VERSION: no such file or directory
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17080385071.8c1ab62f.31605
Date: Thu, 15 Feb 2024 23:08:27 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219988

          Summary
          go1.20,go1.21,go1.22: ensure VERSION file is present in go1.x=
 toolchain GOROOT

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

go1.x tool 'go tool dist' and 'go tool distpack' require the=
 source file
VERSION to be present in GOROOT. Current go1.x packaging is missing this fi=
le,
ensure it is present.

Example:=20

$ go version go1.22.0 linux/amd64

$ go tool dist list
go tool dist: FAILED: not a Git repo; must put a VERSION file in $GOROOT

$ go tool distpack
distpack: open /usr/lib64/go/1.22/VERSION: no such file or directory

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17080385071.8c1ab62f.31605--


--17080742762.bDC6933.31977
Date: Fri, 16 Feb 2024 09:04:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220000

            Bug ID: 1220000
           Summary: [Build 20240215] lastlog 1.3: Unknown error reading database /var/lib/lastlog/lastlog2.db
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3942907/modules/jour
                    nal_check/steps/21
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

Since the update to lastlog 1.3.0, we see new failures in the journal:

Unknown error reading database /var/lib/lastlog/lastlog2.db

openQA test in scenario microos-Tumbleweed-DVD-x86_64-microos-sdboot@uefi f=
ails
in
[journal_check](https://openqa.opensuse.org/tests/3942907/modules/journal_c=
heck/steps/21)

## Test suite description
MicroOS, but use systemd-boot as bootloader. Needs UEFI.

## Reproducible

Fails since (at least) Build
[20240215](https://openqa.opensuse.org/tests/3942790)

## Expected result

Last good: [20240214](https://openqa.opensuse.org/tests/3940776) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dmi=
croos&flavor=3DDVD&machine=3Duefi&test=3Dmicroos-sdboot&version=3DTumblewee=
d)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17080742762.bDC6933.31977
Date: Fri, 16 Feb 2024 09:04:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220000

          Summary
          [Build 20240215] lastlog 1.3: Unknown error reading database =
/var/lib/lastlog/lastlog2.db

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/3942907/modules/journal_che=
ck/steps/21

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

Since the update to lastlog 1.3.0, we see new failures in the journal:

Unknown error reading database /var/lib/lastlog/lastlog2.db

openQA test in scenario microos-Tumbleweed-DVD-x86_64-microos-sdboot@ue=
fi fails
in
[journal_check](https://openqa.opensuse.org/tests/3942907/modules=
/journal_check/steps/21)

## Test suite description
MicroOS, but use systemd-boot as bootloader. Needs UEFI.

## Reproducible

Fails since (at least) Build
[20240215](https://op=
enqa.opensuse.org/tests/3942790)

## Expected result

Last good: [20240214](https://openqa.opensuse.org/tests/3940776) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?=
arch=3Dx86_64&distri=3Dmicroos&flavor=3DDVD&machine=3Duefi&=
test=3Dmicroos-sdboot&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17080742762.bDC6933.31977--


--17081273481.b5680.1065
Date: Fri, 16 Feb 2024 23:49:08 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220024

            Bug ID: 1220024
           Summary: rpm2docserv fails to handle freeradius when not running as root
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

```
Feb 16 23:14:24 pontifex rpm2docserv[4919]: 2024/02/16 23:14:24 main.go:111:
Gathered all packages, total 55506 packages
Feb 16 23:22:08 pontifex rpm2docserv[4919]: 2024/02/16 23:22:08 main.go:265:
extracing manual pages: Error waiting for cpio
(freeradius-server-3.2.3-3.1.x86_64.rpm): exit status 2, stderr: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql/queries.conf: Cannot
open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql/schema.sql: Cannot
open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql/queries.conf:
Cannot open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql/schema.sql: Ca=
nnot
open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite/queries.conf: Cann=
ot
open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: cpio:
./etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite/schema.sql: Cannot
open: Permission denied
Feb 16 23:22:08 pontifex rpm2docserv[4919]: 7381 blocks
Feb 16 23:22:08 pontifex systemd[1]: rpm2docserv.service: Main process exit=
ed,
code=3Dexited, status=3D1/FAILURE
Feb 16 23:22:08 pontifex systemd[1]: rpm2docserv.service: Failed with result
'exit-code'.
Feb 16 23:22:08 pontifex systemd[1]: Failed to start rpm2docserv.
```

FWIW: bsdtar xf handles the unpacking just fine at least.

but it leads to a follow up error
```
total 0
drwxr-x-


--17081274596.667caA04.1068
Date: Fri, 16 Feb 2024 23:50:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220025

            Bug ID: 1220025
           Summary: freeradius-server: broken permissions for some config directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1220024
  Target Milestone: ---
          Found By: ---
           Blocker: ---

bsdtar xf
/var/cache/zypp/packages/repo-oss/x86_64/freeradius-server-3.2.3-3.1.x86_64=
.rpm
; find -type d -not -executable=20
./etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql
./etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql
./etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17081274596.667caA04.1068
Date: Fri, 16 Feb 2024 23:50:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220025

          Summary
          freeradius-server: broken permissions for some config directo=
ry

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mrueckert@suse.com

          QA Contact
          qa-bugs@suse.de

          Blocks
          1220024

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

bsdtar xf
/var/cache/zypp/packages/repo-oss/x86_64/freeradius-server-3.2.3-3.1.x86_64=
.rpm
; find -type d -not -executable=20
./etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql
./etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql
./etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17081274596.667caA04.1068--


--17082129661.cF8B8b.1440
Date: Sat, 17 Feb 2024 23:36:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220032

            Bug ID: 1220032
           Summary: After update it's not possible to access over samba
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Samba
          Assignee: samba-maintainers@SuSE.de
          Reporter: os-tw@r-unger.de
        QA Contact: samba-maintainers@SuSE.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

After an update of a bunch of packages last week, it wasn't possible to log=
 in
to / access samba from windows or via smbclient. In log I found:=20=20=20

smbd[3096]: pam_unix(samba:account): helper binary execve failed: Keine
Berechtigung
nscd[836]: Pr=C3=BCfe auf =C3=BCberwachte Datei =C2=BB/etc/nsswitch.conf=C2=
=AB: Datei oder
Verzeichnis nicht gefunden
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17082129661.cF8B8b.1440
Date: Sat, 17 Feb 2024 23:36:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220032

          Summary
          After update it's not possible to access over samba

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          64bit

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Samba

          Assignee
          samba-maintainers@SuSE.de

          Reporter
          os-tw@r-unger.de

          QA Contact
          samba-maintainers@SuSE.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

After an update of a bunch of packages last week, it wasn't possible to log=
 in
to / access samba from windows or via smbclient. In log I found:=20=20=20

smbd[3096]: pam_unix(samba:account): helper binary execve failed: Keine
Berechtigung
nscd[836]: Pr=C3=BCfe auf =C3=BCberwachte Datei =C2=BB/etc/nsswitch.conf=C2=
=AB: Datei oder
Verzeichnis nicht gefunden

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17082129661.cF8B8b.1440--


body:
--17085038835.76E6C0.6540
Date: Wed, 21 Feb 2024 08:24:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220131

            Bug ID: 1220131
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 122.0.6261.57
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: Andreas.Stieger-at-gmx.de, m.szczepaniak.000-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Chrome team is delighted to announce the promotion of Chrome 122 to the
stable channel for Windows, Mac and Linux. This will roll out over the comi=
ng
days/weeks.

Chrome 122.0.6261.57 (Linux and Mac), 122.0.6261.57/.58( Windows) contains a
number of fixes and improvements

pkgs: chromium ungoogled-chromium


body:
--17085136240.5972928b5.7125
Date: Wed, 21 Feb 2024 11:07:04 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220149

            Bug ID: 1220149
           Summary: Remmina RDP plugin is not recognised
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: x86-64
                OS: openSUSE Leap 15.5
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: balping314-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

This bug is present in Remmina 1.4.33

When launching Remmina with the RDP plugin installed, it can't load the plu=
gin:

Load modules from /usr/lib64/remmina/plugins
Remmina plugin glibsecret (type=3DSecret) has been registered, but is not y=
et
initialized/activated. The initialization order is 2000.
Failed to load plugin: /usr/lib64/remmina/plugins/remmina-plugin-rdp.so.
Error: /usr/lib64/remmina/plugins/remmina-plugin-rdp.so: undefined symbol:
WINPR_ASSERT

The bug has been resolved upstream and a fix has already been released:

https://gitlab.com/Remmina/Remmina/-/issues/3064

https://gitlab.com/Remmina/Remmina/-/releases/v1.4.34
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17085136240.5972928b5.7125
Date: Wed, 21 Feb 2024 11:07:04 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220149

          Summary
          Remmina RDP plugin is not recognised

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          x86-64

          OS
          openSUSE Leap 15.5

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          screening-team-bugs@suse.de

          Reporter
          balping314@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

This bug is present in Remmina 1.4.33

When launching Remmina with the RDP plugin installed, it can't load the plu=
gin:

Load modules from /usr/lib64/remmina/plugins
Remmina plugin glibsecret (type=3DSecret) has been registered, but is not y=
et
initialized/activated. The initialization order is 2000.
Failed to load plugin: /usr/lib64/remmina/plugins/remmina-plugin-rdp.so.
Error: /usr/lib64/remmina/plugins/remmina-plugin-rdp.so: undefined symbol:
WINPR_ASSERT

The bug has been resolved upstream and a fix has already been released:

https://gitlab=
.com/Remmina/Remmina/-/issues/3064

https://g=
itlab.com/Remmina/Remmina/-/releases/v1.4.34

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17085136240.5972928b5.7125--

summary: Remmina RDP plugin is not recognised


--17085280110.31FF5.7701
Date: Wed, 21 Feb 2024 15:06:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220157

            Bug ID: 1220157
           Summary: VUL-0: CVE-2024-25711: diffoscope: information disclosure vulnerability when diffing GPG artifacts
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/394486/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: sebix+novell.com-at-sebix.at
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: andrea.mattiazzo-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Use a determistic name when extracting content from GPG
  artifacts instead of trusting the value of gpg's --use-embedded-filenames.

  This prevents a potential information disclosure vulnerability that could
  have been exploited by providing a specially-crafted GPG file with an
  embedded filename of, say, "../../.ssh/id_rsa".

  Many thanks to Daniel Kahn Gillmor <dkg-at-debian.org> for reporting this
  issue and providing feedback.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25711
https://bugzilla.redhat.com/show_bug.cgi?id=3D2264735
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/361

Patch:
https://salsa.debian.org/reproducible-builds/diffoscope/-/commit/458f7f04bc=
053a0066aa7d2fd3251747d4899476
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17085280110.31FF5.7701
Date: Wed, 21 Feb 2024 15:06:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220157

          Summary
          VUL-0: CVE-2024-25711: diffoscope: information disclosure vul=
nerability when diffing GPG artifacts

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/394486/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          sebix+novell.com@sebix.at

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          andrea.mattiazzo@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Use a determistic name when extracting content from GPG
  artifacts instead of trusting the value of gpg's --use-embedded-filenames.

  This prevents a potential information disclosure vulnerability that could
  have been exploited by providing a specially-crafted GPG file with an
  embedded filename of, say, "../../.ssh/id_rsa".

  Many thanks to Daniel Kahn Gillmor <dkg@debian.org> for reporting this
  issue and providing feedback.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-25711
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2264735
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/361<=
/a>

Patch:
https://salsa.debian.org/reprodu=
cible-builds/diffoscope/-/commit/458f7f04bc053a0066aa7d2fd3251747d4899476</=
a>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17085280110.31FF5.7701--


--17085311880.D978A14d6.7877
Date: Wed, 21 Feb 2024 15:59:47 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220163

            Bug ID: 1220163
           Summary: [SciPy, OpenBLAS] python-scipy no longer builds with OpenBLAS 0.3.26
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: mcepl-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: ana.guerrero-at-suse.com, rguenther-at-suse.com
  Target Milestone: ---
          Found By: Development
           Blocker: ---

Created attachment 872907
  --> https://bugzilla.suse.com/attachment.cgi?id=3D872907&action=3Dedit
Patch

SciPy tests fail with the latest version of OpenBLAS (0.3.26). This prevent=
s us
from updating OpenBLAS in Factory.
Background:=20
A recent patch to Netlib's LAPACK has lessened restrictions on input variab=
les
to some LAPACK functions to handle some corner cases:
https://github.com/Reference-LAPACK/lapack/pull/942
This would change the API in a backward compatible way, except that Scipy
creates 'signatures' of LaPACK functions to 'wrap' these in order to verify=
 the
input values before passing these on. Since the tested conditions no longer
match the conditions of the underlying interface errors are produced even
though the values are correct.
OpenBLAS has picked up these changes from LAPACK although LAPACK itself has=
 not
provided a release which include these changes.
This has led to failures in the SpiPy test suite which have also proliferat=
ed
to=20
python-networkx and python-scikit-learn:
https://build.opensuse.org/request/show/1140298

A patch is available by the SciPy project:
https://github.com/scipy/scipy/pull/19909/commits/8c96a1f742335bca283aae418=
763aaba62c03378
This patch has been merged but has not been released, yet.
The patch is backward compatible to older version of OpenBLAS in the sense =
that
it will not trigger issues - this has been verified with version 0.3.25.=20
It may flag some input variable as valid which may not be valid for that
version.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17085311880.D978A14d6.7877
Date: Wed, 21 Feb 2024 15:59:48 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220163

          Summary
          [SciPy, OpenBLAS] python-scipy no longer builds with OpenBLAS=
 0.3.26

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          All

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          mcepl@suse.com

          Reporter
          eich@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          ana.guerrero@suse.com, rguenther@suse.com

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

Created attachment 872=
907 [details]
Patch

SciPy tests fail with the latest version of OpenBLAS (0.3.26). This prevent=
s us
from updating OpenBLAS in Factory.
Background:=20
A recent patch to Netlib's LAPACK has lessened restrictions on input variab=
les
to some LAPACK functions to handle some corner cases:
https://git=
hub.com/Reference-LAPACK/lapack/pull/942
This would change the API in a backward compatible way, except that Scipy
creates 'signatures' of LaPACK functions to 'wrap' these in order to verify=
 the
input values before passing these on. Since the tested conditions no longer
match the conditions of the underlying interface errors are produced even
though the values are correct.
OpenBLAS has picked up these changes from LAPACK although LAPACK itself has=
 not
provided a release which include these changes.
This has led to failures in the SpiPy test suite which have also proliferat=
ed
to=20
python-networkx and python-scikit-learn:
https://build.o=
pensuse.org/request/show/1140298

A patch is available by the SciPy project:
https://github.com/scipy/scipy/pull/19909/commi=
ts/8c96a1f742335bca283aae418763aaba62c03378
This patch has been merged but has not been released, yet.
The patch is backward compatible to older version of OpenBLAS in the sense =
that
it will not trigger issues - this has been verified with version 0.3.25.=20
It may flag some input variable as valid which may not be valid for that
version.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17085311880.D978A14d6.7877--


body:
--17085958180.ba45dc.9023
Date: Thu, 22 Feb 2024 09:56:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1220190

            Bug ID: 1220190
           Summary: AUDIT: drkonqi6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

drkonqi is the crash handler for KDE applications.

drkonqi6 will coexist in openSUSE for a while and needs to be reviewed:

[   93s] drkonqi6.x86_64: E: dbus-file-unauthorized (Badness: 10000)
/usr/share/dbus-1/system.d/org.kde.drkonqi.conf (sha256 file digest default
filter:233b3b98de2fc6b780c1eb9c3ab9b9f99b1949dfab951cababd7c5a717b8ee16 she=
ll
filter:233b3b98de2fc6b780c1eb9c3ab9b9f99b1949dfab951cababd7c5a717b8ee16 xml
filter:3326c5271c6321c5b3a703d187443eef260d54aa7347bc8f05d9090a153a04bd)
[   93s] drkonqi6.x86_64: E: dbus-file-unauthorized (Badness: 10000)
/usr/share/dbus-1/system-services/org.kde.drkonqi.service (sha256 file dige=
st
default filter:b99a6dc5943df0e641616dc4be3122fdd1d1b1c418df298c56008b50c5fb=
2b08
shell filter:b6f2a505903e2d8874d7da96a197944ab4a11f351f3db80ffeeec86d9eefd7=
9a
xml filter:<failed-to-calculate>)

Package sources:
https://build.opensuse.org/package/show/KDE:Frameworks/drkonqi6
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17085958180.ba45dc.9023
Date: Thu, 22 Feb 2024 09:56:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1220190

          Summary
          AUDIT: drkonqi6

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          christophe@krop.fr

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

drkonqi is the crash handler for KDE applications.

drkonqi6 will coexist in openSUSE for a while and needs to be reviewed:

[   93s] drkonqi6.x86_64: E: dbus-file-unauthorized (Badness: 10000)
/usr/share/dbus-1/system.d/org.kde.drkonqi.conf (sha256 file digest default
filter:233b3b98de2fc6b780c1eb9c3ab9b9f99b1949dfab951cababd7c5a717b8ee16 she=
ll
filter:233b3b98de2fc6b780c1eb9c3ab9b9f99b1949dfab951cababd7c5a717b8ee16 xml
filter:3326c5271c6321c5b3a703d187443eef260d54aa7347bc8f05d9090a153a04bd)
[   93s] drkonqi6.x86_64: E: dbus-file-unauthorized (Badness: 10000)
/usr/share/dbus-1/system-services/org.kde.drkonqi.service (sha256 file dige=
st
default filter:b99a6dc5943df0e641616dc4be3122fdd1d1b1c418df298c56008b50c5fb=
2b08
shell filter:b6f2a505903e2d8874d7da96a197944ab4a11f351f3db80ffeeec86d9eefd7=
9a
xml filter:<failed-to-calculate>)

Package sources:
https://build.opensuse.org/package/show/KDE:Frameworks/drkonqi6

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17085958180.ba45dc.9023--

pkgs: polkit-default-privs rpmlint

summary: AUDIT: drkonqi6