body:
--16926064200.3d2fE4e.14763
Date: Mon, 21 Aug 2023 08:27:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214428

            Bug ID: 1214428
           Summary: Cannot boot after snapshot 20230819
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: miso-at-hlavki.eu
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

after upgrading to snapshot 20230819 I can't boot. Workaround is to rollbac=
k to
previous snapshot with kernel 6.4.9.

Errors while installing kernel:
(105/199) Installing: cpupower-bash-completion-6.4.11-4.23.noarch
...........................................................................=
......................................................................[done]
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
dracut[I]: Executing: /usr/bin/dracut -f /boot/initrd-6.4.11-1-default
6.4.11-1-default
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'networkctl' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd-wait-online' could not be found!
dracut[I]: Module 'systemd-pcrphase' will not be installed, because command
'/usr/lib/systemd/systemd-pcrphase' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-repart' will not be installed, because command
'systemd-repart' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: Module 'tpm2-tss' will not be installed, because command 'tpm2'
could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: Module 'systemd-pcrphase' will not be installed, because command
'/usr/lib/systemd/systemd-pcrphase' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-repart' will not be installed, because command
'systemd-repart' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: Module 'tpm2-tss' will not be installed, because command 'tpm2'
could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: *** Including module: systemd ***
dracut[I]: *** Including module: systemd-initrd ***
dracut[I]: *** Including module: i18n ***
dracut[W]: Could not find FONT_MAP none!
dracut[I]: *** Including module: drm ***
dracut[I]: *** Including module: plymouth ***
dracut[I]: *** Including module: btrfs ***
dracut[I]: *** Including module: kernel-modules ***
dracut[I]: *** Including module: kernel-modules-extra ***
dracut[I]: *** Including module: resume ***
dracut[I]: *** Including module: rootfs-block ***
dracut[I]: *** Including module: suse-btrfs ***
dracut[I]: *** Including module: suse-xfs ***
dracut[I]: *** Including module: terminfo ***
dracut[I]: *** Including module: udev-rules ***
dracut[I]: *** Including module: biosdevname ***
dracut[I]: *** Including module: dracut-systemd ***
dracut[I]: *** Including module: haveged ***
dracut[I]: *** Including module: ostree ***
dracut[I]: *** Including module: usrmount ***
dracut[I]: *** Including module: base ***
dracut[I]: *** Including module: fs-lib ***
dracut[I]: *** Including module: shutdown ***
dracut[I]: *** Including module: suse ***
dracut[I]: *** Including module: suse-initrd ***
dracut[I]: *** Including modules done ***
dracut[I]: *** Installing kernel module dependencies ***
dracut[I]: *** Installing kernel module dependencies done ***
dracut[I]: *** Resolving executable dependencies ***
dracut[I]: *** Resolving executable dependencies done ***
dracut[I]: *** Hardlinking files ***
dracut[I]: *** Hardlinking files done ***
dracut[I]: *** Generating early-microcode cpio image ***
dracut[I]: *** Constructing GenuineIntel.bin ***
dracut[I]: *** Store current command line parameters ***
dracut[I]: Stored kernel commandline:
dracut[I]:  rd.driver.pre=3Dbtrfs
dracut[I]:  resume=3DUUID=3D8b7037f4-6854-4823-b18e-31b16640dc2c
dracut[I]:  root=3DUUID=3D77f9732f-d16e-42be-a171-20cc4d05f6b7 rootfstype=
=3Dbtrfs
rootflags=3Drw,relatime,ssd,discard=3Dasync,space_cache,subvolid=3D141038,s=
ubvol=3D/@/.snapshots/4756/snapshot,subvol=3D@/.snapshots/4756/snapshot
dracut[I]: *** Stripping files ***
dracut[I]: *** Stripping files done ***
dracut[I]: *** Creating image file '/boot/initrd-6.4.11-1-default' ***
dracut[I]: *** Creating initramfs image file '/boot/initrd-6.4.11-1-default'
done ***
Option --add-kernel not available for grub2-efi.
SKIP: /etc/uefi/certs/1F673297.crt is already in the enrollment request
(106/199) Installing: kernel-default-6.4.11-1.1.x86_64
...........................................................................=
...........................................................................=
......[done]
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16926064200.3d2fE4e.14763
Date: Mon, 21 Aug 2023 08:27:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1214428

          Summary
          Cannot boot after snapshot 20230819

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Critical

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          miso@hlavki.eu

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

after upgrading to snapshot 20230819 I can't boot. Workaround is to rollbac=
k to
previous snapshot with kernel 6.4.9.

Errors while installing kernel:
(105/199) Installing: cpupower-bash-completion-6.4.11-4.23.noarch
...........................................................................=
......................................................................[done]
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
depmod: ERROR: could not open directory
/var/tmp/weak-modules2.VLshY4/6.4.11-1-default/usr/lib/modules/6.4.11-1-def=
ault:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod exited with error 1
dracut[I]: Executing: /usr/bin/dracut -f /boot/initrd-6.4.11-1-default
6.4.11-1-default
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'networkctl' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd' could not be found!
dracut[I]: Module 'systemd-networkd' will not be installed, because command
'/usr/lib/systemd/systemd-networkd-wait-online' could not be found!
dracut[I]: Module 'systemd-pcrphase' will not be installed, because command
'/usr/lib/systemd/systemd-pcrphase' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-repart' will not be installed, because command
'systemd-repart' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: Module 'tpm2-tss' will not be installed, because command 'tpm2'
could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack=
 and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: Module 'systemd-pcrphase' will not be installed, because command
'/usr/lib/systemd/systemd-pcrphase' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'portablectl' could not be found!
dracut[I]: Module 'systemd-portabled' will not be installed, because command
'/usr/lib/systemd/systemd-portabled' could not be found!
dracut[I]: Module 'systemd-repart' will not be installed, because command
'systemd-repart' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'resolvectl' could not be found!
dracut[I]: Module 'systemd-resolved' will not be installed, because command
'/usr/lib/systemd/systemd-resolved' could not be found!
dracut[I]: Module 'dbus-broker' will not be installed, because command
'dbus-broker' could not be found!
dracut[I]: Module 'rngd' will not be installed, because command 'rngd' could
not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
d'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command 'connman=
ctl'
could not be found!
dracut[I]: Module 'connman' will not be installed, because command
'connmand-wait-online' could not be found!
dracut[I]: Module 'tpm2-tss' will not be installed, because command 'tpm2'
could not be found!
dracut[I]: Module 'memstrack' will not be installed, because command
'memstrack' could not be found!
dracut[I]: memstrack is not available
dracut[I]: If you need to use rd.memdebug>=3D4, please install memstrack=
 and
procps-ng
dracut[I]: Module 'squash' will not be installed, because command 'mksquash=
fs'
could not be found!
dracut[I]: Module 'squash' will not be installed, because command 'unsquash=
fs'
could not be found!
dracut[I]: *** Including module: systemd ***
dracut[I]: *** Including module: systemd-initrd ***
dracut[I]: *** Including module: i18n ***
dracut[W]: Could not find FONT_MAP none!
dracut[I]: *** Including module: drm ***
dracut[I]: *** Including module: plymouth ***
dracut[I]: *** Including module: btrfs ***
dracut[I]: *** Including module: kernel-modules ***
dracut[I]: *** Including module: kernel-modules-extra ***
dracut[I]: *** Including module: resume ***
dracut[I]: *** Including module: rootfs-block ***
dracut[I]: *** Including module: suse-btrfs ***
dracut[I]: *** Including module: suse-xfs ***
dracut[I]: *** Including module: terminfo ***
dracut[I]: *** Including module: udev-rules ***
dracut[I]: *** Including module: biosdevname ***
dracut[I]: *** Including module: dracut-systemd ***
dracut[I]: *** Including module: haveged ***
dracut[I]: *** Including module: ostree ***
dracut[I]: *** Including module: usrmount ***
dracut[I]: *** Including module: base ***
dracut[I]: *** Including module: fs-lib ***
dracut[I]: *** Including module: shutdown ***
dracut[I]: *** Including module: suse ***
dracut[I]: *** Including module: suse-initrd ***
dracut[I]: *** Including modules done ***
dracut[I]: *** Installing kernel module dependencies ***
dracut[I]: *** Installing kernel module dependencies done ***
dracut[I]: *** Resolving executable dependencies ***
dracut[I]: *** Resolving executable dependencies done ***
dracut[I]: *** Hardlinking files ***
dracut[I]: *** Hardlinking files done ***
dracut[I]: *** Generating early-microcode cpio image ***
dracut[I]: *** Constructing GenuineIntel.bin ***
dracut[I]: *** Store current command line parameters ***
dracut[I]: Stored kernel commandline:
dracut[I]:  rd.driver.pre=3Dbtrfs
dracut[I]:  resume=3DUUID=3D8b7037f4-6854-4823-b18e-31b16640dc2c
dracut[I]:  root=3DUUID=3D77f9732f-d16e-42be-a171-20cc4d05f6b7 rootfstype=
=3Dbtrfs
rootflags=3Drw,relatime,ssd,discard=3Dasync,space_cache,subvolid=3D141038,s=
ubvol=3D/@/.snapshots/4756/snapshot,subvol=3D@/.snapshots/4756/snap=
shot
dracut[I]: *** Stripping files ***
dracut[I]: *** Stripping files done ***
dracut[I]: *** Creating image file '/boot/initrd-6.4.11-1-default' ***
dracut[I]: *** Creating initramfs image file '/boot/initrd-6.4.11-1-default'
done ***
Option --add-kernel not available for grub2-efi.
SKIP: /etc/uefi/certs/1F673297.crt is already in the enrollment request
(106/199) Installing: kernel-default-6.4.11-1.1.x86_64
...........................................................................=
...........................................................................=
......[done]

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16926064200.3d2fE4e.14763--

summary: Cannot boot after snapshot 20230819


--16926965360.07cB.16725
Date: Tue, 22 Aug 2023 09:28:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214460

            Bug ID: 1214460
           Summary: s390x crosscompiler does not seem functional, missing -lgcc, impeding upstream QEMU work (tcg tests)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: claudio.fontana-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello,

I am trying to run the QEMU gcc tests for s390x,

and these tests require a fully functional s390x crosscompiler in order to
build the test code.

Unfortunately, after installing the packages:

zypper install cross-s390x-gcc13 cross-s390x-binutils
cross-s390x-linux-glibc-devel

still the libgcc seems missing:

/usr/lib64/gcc/s390x-suse-linux/13/ld: cannot find -lgcc: No such file or
directory

This blocks the current QEMU work to fix QEMU emulation errors on S390x.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16926965360.07cB.16725
Date: Tue, 22 Aug 2023 09:28:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1214460

          Summary
          s390x crosscompiler does not seem functional, missing -lgcc, =
impeding upstream QEMU work (tcg tests)

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          claudio.fontana@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hello,

I am trying to run the QEMU gcc tests for s390x,

and these tests require a fully functional s390x crosscompiler in order to
build the test code.

Unfortunately, after installing the packages:

zypper install cross-s390x-gcc13 cross-s390x-binutils
cross-s390x-linux-glibc-devel

still the libgcc seems missing:

/usr/lib64/gcc/s390x-suse-linux/13/ld: cannot find -lgcc: No such file or
directory

This blocks the current QEMU work to fix QEMU emulation errors on S390x.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16926965360.07cB.16725--


--16930354104.F4D3e074.2340
Date: Sat, 26 Aug 2023 07:36:50 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214640

            Bug ID: 1214640
           Summary: Dependency issue with WebKit2GTK in patch:openSUSE-SLE-15.4-2023-3419-1.noarch
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: maintenance-at-opensuse.org
          Reporter: technik-at-expeedo.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since 2023-08-25, you fails on my machines by a dependency issue.

Output:

---------------------------------------------------------------------
running daily cronjob scripts

SCRIPT: opensuse.org-online_update exited with RETURNCODE =3D 4.
SCRIPT: output (stdout && stderr) follows

Problem: the installed WebKit2GTK-4.1-lang-2.38.6-150400.4.42.4.noarch requ=
ires
'WebKit2GTK-4.1 =3D 2.38.6', but this requirement cannot be provided
  not installable providers:
libwebkit2gtk-4_1-0-2.36.0-150400.2.13.x86_64[download.opensuse.org-oss]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.36.3-150400.4.3.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.36.4-150400.4.6.2.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.36.5-150400.4.9.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.36.7-150400.4.12.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.36.8-150400.4.15.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.38.2-150400.4.22.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.38.5-150400.4.34.2.x86_64[repo-sle-update]
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
libwebkit2gtk-4_1-0-2.38.6-150400.4.39.1.x86_64[repo-sle-update]
 Solution 1: Following actions will be done:
  deinstallation of WebKit2GTK-4.1-lang-2.38.6-150400.4.42.4.noarch
  deinstallation of WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noarch
 Solution 2: do not install patch:openSUSE-SLE-15.4-2023-3419-1.noarch
 Solution 3: break WebKit2GTK-4.1-lang-2.38.6-150400.4.42.4.noarch by ignor=
ing
some of its dependencies

Choose from above solutions by number or cancel [1/2/3/c/d/?] (c): c
SCRIPT: opensuse.org-online_update
-----


--16932698252.a81dA.5074
Date: Tue, 29 Aug 2023 00:43:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214714

            Bug ID: 1214714
           Summary: PIM : KGAPI2::People::ContactGroupFetchJob(0x55b9ecf35530) "Invalid authentication."
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 869068
  --> https://bugzilla.suse.com/attachment.cgi?id=3D869068&action=3Dedit
PIM : Error Log

pim-error.log has been added so far
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16932698252.a81dA.5074
Date: Tue, 29 Aug 2023 00:43:45 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1214714

          Summary
          PIM : KGAPI2::People::ContactGroupFetchJob(0x55b9ecf35530) &q=
uot;Invalid authentication."

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          jshand2013@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 869068 =
[details]
PIM : Error Log

pim-error.log has been added so far

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16932698252.a81dA.5074--


--16933314593.687FEE.1213
Date: Tue, 29 Aug 2023 17:50:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214758

            Bug ID: 1214758
           Summary: VUL-0: CVE-2023-4572: chromium,ungoogled-chromium: Use after free in MediaStream (116.0.5845.140)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-des=
ktop_29.html

* CVE-2023-4572: Use after free in MediaStream
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16933314593.687FEE.1213
Date: Tue, 29 Aug 2023 17:50:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1214758

          Summary
          VUL-0: CVE-2023-4572: chromium,ungoogled-chromium: Use after =
free in MediaStream (116.0.5845.140)

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://chromereleases.googleblog.c=
om/2023/08/stable-channel-update-for-desktop_29.html

* CVE-2023-4572: Use after free in MediaStream

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16933314593.687FEE.1213--


--16934937940.462B9F2D.4693
Date: Thu, 31 Aug 2023 14:56:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1214835

            Bug ID: 1214835
           Summary: 15.5 patch cant get handled automatically? - openSUSE-SLE-15.5-2023-3413-1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: x86-64
                OS: openSUSE Leap 15.5
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-suse.de
          Reporter: abittner-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

15.5, today, yet another undecidable unapplicable patch automatically?

also found at:
<https://ubuntuforums.org/showthread.php?t=3D2490356>

# zypper patch
Reading installed packages...
Patch 'openSUSE-SLE-15.5-2023-3413-1' is optional. Use 'zypper in
patch:openSUSE-SLE-15.5-2023-3413' to install it, or '--with-optional' to
include all optional patches.
Resolving package dependencies...

Problem: the installed WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noarch requ=
ires
'WebKit2GTK-4.0 =3D 2.38.6', but this requirement cannot be provided
  not installable providers:
libwebkit2gtk-4_0-37-2.38.6-150400.4.39.1.x86_64[https-download.opensuse.or=
g-788d01d4]
                   libwebkit2gtk-4_0-37-2.38.6-150400.4.39.1.x86_64[repo-os=
s]
 Solution 1: deinstallation of WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noa=
rch
 Solution 2: do not install patch:openSUSE-SLE-15.5-2023-3419-1.noarch
 Solution 3: break WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noarch by ignor=
ing
some of its dependencies

Choose from above solutions by number or cancel [1/2/3/c/d/?] (c): ^C
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16934937940.462B9F2D.4693
Date: Thu, 31 Aug 2023 14:56:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1214835

          Summary
          15.5 patch cant get handled automatically? -  openSUSE-SLE-15=
.5-2023-3413-1

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          x86-64

          OS
          openSUSE Leap 15.5

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          libzypp

          Assignee
          zypp-maintainers@suse.de

          Reporter
          abittner@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

15.5, today, yet another undecidable unapplicable patch auto=
matically?

also found at:
<https:/=
/ubuntuforums.org/showthread.php?t=3D2490356>

# zypper patch
Reading installed packages...
Patch 'openSUSE-SLE-15.5-2023-3413-1' is optional. Use 'zypper in
patch:openSUSE-SLE-15.5-2023-3413' to install it, or '--with-optional' to
include all optional patches.
Resolving package dependencies...

Problem: the installed WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noarch requ=
ires
'WebKit2GTK-4.0 =3D 2.38.6', but this requirement cannot be provided
  not installable providers:
libwebkit2gtk-4_0-37-2.38.6-150400.4.39.1.x86_64[https-download.opensuse.or=
g-788d01d4]
                   libwebkit2gtk-4_0-37-2.38.6-150400.4.39.1.x86_64[repo-os=
s]
 Solution 1: deinstallation of WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noa=
rch
 Solution 2: do not install patch:openSUSE-SLE-15.5-2023-3419-1.noarch
 Solution 3: break WebKit2GTK-4.0-lang-2.38.6-150400.4.42.4.noarch by ignor=
ing
some of its dependencies

Choose from above solutions by number or cancel [1/2/3/c/d/?] (c): ^C

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16934937940.462B9F2D.4693--


body:
Build Identifier:=20

I'm running leap 15.5 with additionnal kde repositories.
Skanpage fail to start when launching with krunner
Try in a shell and have a message showing something wrong happens and cause=
 the
failure.

Reported at https://bugs.kde.org/show_bug.cgi?id=3D473964

Nate Graham mark as resolved because:

" This means that one of two things is happening:
- The KQuickImageEditor package isn't installed=20
- The KQuickImageEditor package is too old

Both would be distro packaging issues; please report this to the openSUSE
folks. Thanks! "

Reproducible: Always

Steps to Reproduce:
1. plug scanner to usb port and power on
2. type "skanpage" in shell (zsh in yakuake)
3. hint enter
Actual Results:=20=20
[DS] Profile read from file (tesseract_opencl_profile_devices.dat).
[DS] Device[1] 0:(null) score is 0,204881
[DS] Selected Device[1]: "(null)" (Native)
which: no avahi-browse in
(/home/olivier/.zsh/zplug/repos/zplug/zplug/bin:/home/olivier/.zsh/zplug/bi=
n:/opt/texlive/2023/bin/x86_64-linux:/home/olivier/.local/bin:/usr/local/bi=
n:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin:/opt/:/opt/Grammalecte/:/ho=
me/olivier/.local/bin/:/home/olivier/.config/kate/lspclient/:/var/lib/flatp=
ak/exports/bin:)
QQmlApplicationEngine failed to load component
qrc:/qml/MainWindow.qml:331:26: Type ContentView unavailable
qrc:/qml/ContentView.qml:67:13: Type DocumentPage unavailable
qrc:/qml/DocumentPage.qml:198:13: KQuickImageEditor.CropBackground is not a
type

Expected Results:=20=20
skanpage successfully launch and scan my document.

https://bugs.kde.org/show_bug.cgi?id=3D473964

Nate Graham <nate-at-kde.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|-

summary: Skanpake fail to launch due kquickimageeditor outdated


body:
--16939768800.e589.11487
Date: Wed, 6 Sep 2023 05:08:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215023

            Bug ID: 1215023
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 116.0.5845.179
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: gmbr3-at-opensuse.org, m.szczepaniak.000-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in 116.0.5845.179

* CVE-2023-4761: Out of bounds memory access in FedCM
* CVE-2023-4762: Type Confusion in V8
* CVE-2023-4763: Use after free in Networks
* CVE-2023-4764: Incorrect security UI in BFCache

References:
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-des=
ktop.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16939768800.e589.11487
Date: Wed, 6 Sep 2023 05:08:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215023

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 116.0.5845.179

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          gmbr3@opensuse.org, m.szczepaniak.000@gmail.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in 116.0.5845.179

* CVE-2023-4761: Out of bounds memory access in FedCM
* CVE-2023-4762: Type Confusion in V8
* CVE-2023-4763: Use after free in Networks
* CVE-2023-4764: Incorrect security UI in BFCache

References:
https://chromereleases.googleblog.com/2023/09/stable-=
channel-update-for-desktop.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16939768800.e589.11487--

pkgs: chromium ungoogled-chromium


--16939803912.94d24.11538
Date: Wed, 6 Sep 2023 06:06:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215024

            Bug ID: 1215024
           Summary: VUL-0: cacti: multiple security issues fixed in 1.2.25
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

>From https://github.com/Cacti/cacti/blob/release/1.2.25/CHANGELOG

-security#GHSA-77rf-774j-6h3p: Protect against Insecure deserialization of
filter data
-security#GHSA-gx8c-xvjh-9qh4: Protect against Cross-Site Scripting
vulnerability when creating new graphs
-security#GHSA-6r43-q2fw-5wrg: Protect against Unauthenticated SQL Injection
when viewing graphs
-security#GHSA-6jhp-mgqg-fhqg: Protect against SQL Injection when saving da=
ta
with sql_save()
-security#GHSA-g6ff-58cj-x3cp: Protect against Authenticated command inject=
ion
when using SNMP options
-security#GHSA-q4wh-3f9w-836h: Protect against Authenticated SQL injection
vulnerability when managing graphs
-security#GHSA-gj95-7xr8-9p7g: Protect against Authenticated SQL injection
vulnerability when managing reports
-security#GHSA-v5w7-hww7-2f22: Protect against SQL Injection when using reg=
ular
expressions
-security#GHSA-4pjv-rmrp-r59x: Protect against Open redirect in change pass=
word
functionality
-security#GHSA-rwhh-xxm6-vcrv: Protect against Cross-Site Scripting
vulnerability with Device Name when managing Data Sources
-security#GHSA-24w4-4hp2-3j8h: Protect against Cross-Site Scripting
vulnerability with Device Name when administrating Reports
-security#GHSA-5hpr-4hhc-8q42: Protect against Cross-Site Scripting
vulnerability with Device Name when editing Graphs whilst managing Reports
-security#GHSA-vqcc-5v63-g9q7: Protect against Cross-Site Scripting
vulnerability with Device Name when managing Data Sources
-security#GHSA-9fj7-8f2j-2rw2: Protect against Cross-Site Scripting
vulnerability with Device Name when debugging data queries
-security#GHSA-6hrc-2cfc-8hm7: Protect against Cross-Site Scripting
vulnerability with Data Source Name when managing Graphs
-security#GHSA-hrg9-qqqx-wc4h: Protect against Cross-Site Scripting
vulnerability with Data Source Name when debugging Data Queries
-security#GHSA-r8qq-88g3-hmgv: Protect against Cross-Site Scripting
vulnerability with Data Source Information when managing Data Sources

https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6h3p
https://github.com/Cacti/cacti/security/advisories/GHSA-gx8c-xvjh-9qh4
https://github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5wrg
https://github.com/Cacti/cacti/security/advisories/GHSA-6jhp-mgqg-fhqg
https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp
https://github.com/Cacti/cacti/security/advisories/GHSA-q4wh-3f9w-836h
https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9p7g
https://github.com/Cacti/cacti/security/advisories/GHSA-v5w7-hww7-2f22
https://github.com/Cacti/cacti/security/advisories/GHSA-4pjv-rmrp-r59x
https://github.com/Cacti/cacti/security/advisories/GHSA-rwhh-xxm6-vcrv
https://github.com/Cacti/cacti/security/advisories/GHSA-24w4-4hp2-3j8h
https://github.com/Cacti/cacti/security/advisories/GHSA-5hpr-4hhc-8q42
https://github.com/Cacti/cacti/security/advisories/GHSA-vqcc-5v63-g9q7
https://github.com/Cacti/cacti/security/advisories/GHSA-9fj7-8f2j-2rw2
https://github.com/Cacti/cacti/security/advisories/GHSA-6hrc-2cfc-8hm7
https://github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-wc4h
https://github.com/Cacti/cacti/security/advisories/GHSA-r8qq-88g3-hmgv

Does not seem to include bug 1214170 / CVE-2023-3754
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16939803912.94d24.11538
Date: Wed, 6 Sep 2023 06:06:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215024

          Summary
          VUL-0: cacti: multiple security issues fixed in 1.2.25

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

From https://github.com/Cacti/cacti/blob/release/1.2.25/CHANGE=
LOG

-security#GHSA-77rf-774j-6h3p: Protect against Insecure deserialization of
filter data
-security#GHSA-gx8c-xvjh-9qh4: Protect against Cross-Site Scripting
vulnerability when creating new graphs
-security#GHSA-6r43-q2fw-5wrg: Protect against Unauthenticated SQL Injection
when viewing graphs
-security#GHSA-6jhp-mgqg-fhqg: Protect against SQL Injection when saving da=
ta
with sql_save()
-security#GHSA-g6ff-58cj-x3cp: Protect against Authenticated command inject=
ion
when using SNMP options
-security#GHSA-q4wh-3f9w-836h: Protect against Authenticated SQL injection
vulnerability when managing graphs
-security#GHSA-gj95-7xr8-9p7g: Protect against Authenticated SQL injection
vulnerability when managing reports
-security#GHSA-v5w7-hww7-2f22: Protect against SQL Injection when using reg=
ular
expressions
-security#GHSA-4pjv-rmrp-r59x: Protect against Open redirect in change pass=
word
functionality
-security#GHSA-rwhh-xxm6-vcrv: Protect against Cross-Site Scripting
vulnerability with Device Name when managing Data Sources
-security#GHSA-24w4-4hp2-3j8h: Protect against Cross-Site Scripting
vulnerability with Device Name when administrating Reports
-security#GHSA-5hpr-4hhc-8q42: Protect against Cross-Site Scripting
vulnerability with Device Name when editing Graphs whilst managing Reports
-security#GHSA-vqcc-5v63-g9q7: Protect against Cross-Site Scripting
vulnerability with Device Name when managing Data Sources
-security#GHSA-9fj7-8f2j-2rw2: Protect against Cross-Site Scripting
vulnerability with Device Name when debugging data queries
-security#GHSA-6hrc-2cfc-8hm7: Protect against Cross-Site Scripting
vulnerability with Data Source Name when managing Graphs
-security#GHSA-hrg9-qqqx-wc4h: Protect against Cross-Site Scripting
vulnerability with Data Source Name when debugging Data Queries
-security#GHSA-r8qq-88g3-hmgv: Protect against Cross-Site Scripting
vulnerability with Data Source Information when managing Data Sources

https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6=
h3p
https://github.com/Cacti/cacti/security/advisories/GHSA-gx8c-xvjh-9=
qh4
https://github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5=
wrg
https://github.com/Cacti/cacti/security/advisories/GHSA-6jhp-mgqg-f=
hqg
https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x=
3cp
https://github.com/Cacti/cacti/security/advisories/GHSA-q4wh-3f9w-8=
36h
https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9=
p7g
https://github.com/Cacti/cacti/security/advisories/GHSA-v5w7-hww7-2=
f22
https://github.com/Cacti/cacti/security/advisories/GHSA-4pjv-rmrp-r=
59x
https://github.com/Cacti/cacti/security/advisories/GHSA-rwhh-xxm6-v=
crv
https://github.com/Cacti/cacti/security/advisories/GHSA-24w4-4hp2-3=
j8h
https://github.com/Cacti/cacti/security/advisories/GHSA-5hpr-4hhc-8=
q42
https://github.com/Cacti/cacti/security/advisories/GHSA-vqcc-5v63-g=
9q7
https://github.com/Cacti/cacti/security/advisories/GHSA-9fj7-8f2j-2=
rw2
https://github.com/Cacti/cacti/security/advisories/GHSA-6hrc-2cfc-8=
hm7
https://github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-w=
c4h
https://github.com/Cacti/cacti/security/advisories/GHSA-r8qq-88g3-h=
mgv

Does not seem to include bug 1214170 / CVE-2023-3754

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16939803912.94d24.11538--


--16940324104.A9CACa1.13352
Date: Wed, 6 Sep 2023 20:33:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215081

            Bug ID: 1215081
           Summary: VUL-0: CVE-2023-39511: cacti:  Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1215024
  Target Milestone: ---
          Found By: ---
           Blocker: ---

A Stored Cross-Site-Scripting Vulnerability allows an authenticated user to
poison data stored in the cacti's database. These data will be viewed by
administrative cacti accounts and execute JavaScript code in the victim's
browser at view-time.

https://github.com/Cacti/cacti/security/advisories/GHSA-5hpr-4hhc-8q42
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16940324104.A9CACa1.13352
Date: Wed, 6 Sep 2023 20:33:30 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215081

          Summary
          VUL-0: CVE-2023-39511: cacti:  Cross-Site Scripting vulnerabi=
lity with Device Name when editing Graphs whilst managing Reports

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          Blocks
          1215024

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

A Stored Cross-Site-Scripting Vulnerability allows an authen=
ticated user to
poison data stored in the cacti's database. These data will be viewed by
administrative cacti accounts and execute JavaScript code in the victim's
browser at view-time.

https://github.com/Cacti/cacti/security/advisories/GHSA-5hpr-4hhc-8=
q42

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16940324104.A9CACa1.13352--


--16940325171.813424FF.13358
Date: Wed, 6 Sep 2023 20:35:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215082

            Bug ID: 1215082
           Summary: VUL-0: CVE-2023-30534 : cacti:  Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: qa-bugs-at-suse.de
            Blocks: 1215024
  Target Milestone: ---
          Found By: ---
           Blocker: ---

There are two instances of insecure deserialization in Cacti version 1.2.24.
While a viable gadget chain exists in Cacti=E2=80=99s vendor directory (php=
seclib), the
necessary gadgets are not included, making them inaccessible and the insecu=
re
deserializations not exploitable.

https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6h3p
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16940325171.813424FF.13358
Date: Wed, 6 Sep 2023 20:35:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215082

          Summary
          VUL-0: CVE-2023-30534 : cacti:  Cross-Site Scripting vulnerab=
ility with Device Name when editing Graphs whilst managing Reports

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          qa-bugs@suse.de

          Blocks
          1215024

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

There are two instances of insecure deserialization in Cacti=
 version 1.2.24.
While a viable gadget chain exists in Cacti=E2=80=99s vendor directory (php=
seclib), the
necessary gadgets are not included, making them inaccessible and the insecu=
re
deserializations not exploitable.

https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6=
h3p

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16940325171.813424FF.13358--


--16940628410.9036.13826
Date: Thu, 7 Sep 2023 05:00:40 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215090

            Bug ID: 1215090
           Summary: go1.20,go1.21: Go toolchain packages missing src/cmd/vendor/github.com/google/pprof/internal/driver /html/
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Include the missing directory
src/cmd/vendor/github.com/google/pprof/internal/driver/html/ in our go1.1x
toolchain packages. This will fix failing builds with applications that
directly import runtime/pprof e.g. kubeconform which failed to build with t=
he
following error:

/usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driv
er/webhtml.go:26:12: pattern html: no matching files found

Upstream Go sources vendor certain tools including the pprof profiler [1].
pprof has an asset directory pprof/internal/driver/html containing only html
templates used by the pprof viewer and no Go source code. Our go packaging
tries to be conservative in what we include in the RPM, and with our find/g=
lob
patterns this directory has never been included in the packaging.

The issue was first reported with go1.21. However, the last vendoring update
was for go1.20, so we will include the fix in go1.20 packaging as well:

bb917bd 2022-11-22 09:39 cmd/vendor: update vendored github.com/google/pprof
for Go 1.20 release

[1] https://github.com/google/pprof
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16940628410.9036.13826
Date: Thu, 7 Sep 2023 05:00:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215090

          Summary
          go1.20,go1.21: Go toolchain packages missing src/cmd/vendor/g=
ithub.com/google/pprof/internal/driver/html/

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Include the missing directory
src/cmd/vendor/github.com/google/pprof/internal/driver/html/ in our go1.1x
toolchain packages. This will fix failing builds with applications that
directly import runtime/pprof e.g. kubeconform which failed to build with t=
he
following error:

/usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driv
er/webhtml.go:26:12: pattern html: no matching files found

Upstream Go sources vendor certain tools including the pprof profiler [1].
pprof has an asset directory pprof/internal/driver/html containing only html
templates used by the pprof viewer and no Go source code. Our go packaging
tries to be conservative in what we include in the RPM, and with our find/g=
lob
patterns this directory has never been included in the packaging.

The issue was first reported with go1.21. However, the last vendoring update
was for go1.20, so we will include the fix in go1.20 packaging as well:

bb917bd 2022-11-22 09:39 cmd/vendor: update vendored github.com/google/pprof
for Go 1.20 release

[1] https://github.com/google/p=
prof

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16940628410.9036.13826--


--16941808891.eAc5A.2870
Date: Fri, 8 Sep 2023 13:48:09 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215172

            Bug ID: 1215172
           Summary: VUL-0: croc: multiple security issues in croc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jsmithfpv-at-gmail.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I have reviewed the Croc codebase during the past month and have found a
series of security issues, mostly in the area of a receiver of files which =
can
be harmed by a malicious sender.

There are now public GitHub issues about the most pressing issues:

- possible creation of files in dangerous path location:
https://github.com/schollz/croc/issues/593
- Interactive File Overwrite Prompt can be Circumvented by Sending ZIP file:
https://github.com/schollz/croc/issues/594
- Escape Sequences in Filenames are not Filtered:
https://github.com/schollz/croc/issues/595
- Use of Parts of the Shared Secret as Room Name:
https://github.com/schollz/croc/issues/596
- Unencrypted "ips?" Message Leaks Information from the Sender Side:
https://github.com/schollz/croc/issues/597
- Shared Secret Passed on Command Line Possibly Leaks to other Local Users:
https://github.com/schollz/croc/issues/598

Nothing of this is currently fixed and it sounds like they also won't be fi=
xed
for a longer time, because the upstream author is lacking time to take care=
 of
this.

As maintainers of croc you may be able to help out upstream to fix these
issues or you may consider dropping this package from openSUSE until it
becomes better.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16941808891.eAc5A.2870
Date: Fri, 8 Sep 2023 13:48:09 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215172

          Summary
          VUL-0: croc: multiple security issues in croc

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jsmithfpv@gmail.com

          Reporter
          matthias.gerstner@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I have reviewed the Croc codebase during the past month and =
have found a
series of security issues, mostly in the area of a receiver of files which =
can
be harmed by a malicious sender.

There are now public GitHub issues about the most pressing issues:

- possible creation of files in dangerous path location:
https://github.com/s=
chollz/croc/issues/593
- Interactive File Overwrite Prompt can be Circumvented by Sending ZIP file:
https://github.com/s=
chollz/croc/issues/594
- Escape Sequences in Filenames are not Filtered:
https://github.com/s=
chollz/croc/issues/595
- Use of Parts of the Shared Secret as Room Name:
https://github.com/s=
chollz/croc/issues/596
- Unencrypted "ips?" Message Leaks Information from the Sender Si=
de:
https://github.com/s=
chollz/croc/issues/597
- Shared Secret Passed on Command Line Possibly Leaks to other Local Users:
https://github.com/s=
chollz/croc/issues/598

Nothing of this is currently fixed and it sounds like they also won't be fi=
xed
for a longer time, because the upstream author is lacking time to take care=
 of
this.

As maintainers of croc you may be able to help out upstream to fix these
issues or you may consider dropping this package from openSUSE until it
becomes better.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16941808891.eAc5A.2870--


body:
--16943542594.efE24cb.4114
Date: Sun, 10 Sep 2023 13:57:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215185

            Bug ID: 1215185
           Summary: Conflict: bitmap <-> Mesa-demo
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: gfx-bugs-at-suse.de
          Reporter: schwab@linux-m68k.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Both bitmap and Mesa-demo contain /usr/bin/bitmap.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16943542594.efE24cb.4114
Date: Sun, 10 Sep 2023 13:57:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215185

          Summary
          Conflict: bitmap <-> Mesa-demo

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          gfx-bugs@suse.de

          Reporter
          schwab@linux-m68k.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Both bitmap and Mesa-demo contain /usr/bin/bitmap.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16943542594.efE24cb.4114--

summary: Conflict: bitmap <-> Mesa-demo


--16944653292.0aeA9fE01.6113
Date: Mon, 11 Sep 2023 20:48:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215227

            Bug ID: 1215227
           Summary: Clementine/Strawberry crash on startup due to updated protobuf version
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: zrenfire-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

> strawberry: symbol lookup error: strawberry: undefined symbol: _ZN6google=
8protobuf8internal17AssignDescriptorsEPFPKNS1_15DescriptorTableEvEPN4absl12=
lts_202301259once_flagERKNS0_8MetadataE

Also affects another user who's also tried Clementine.
https://old.reddit.com/r/openSUSE/comments/16fr3wr/lookup_error/

I noticed that libprotobuf recently updated.=20

> Sep 11 13:47:17 Client-57 plasmashell[1531]: plasma-pk-updates: Got updat=
e package: "libprotobuf-lite23_4_0;23.4-6.3;x86_64;repo-oss" , summary: "Pr=
otocol Buffers - Google's data interchange format" , type: "enhancement"
> Sep 11 13:47:17 Client-57 plasmashell[1531]: plasma-pk-updates: Got updat=
e package: "libprotobuf23_4_0;23.4-6.3;x86_64;repo-oss" , summary: "Protoco=
l Buffers - Google's data interchange format" , type: "enhancement"

And I noticed that both players have not updated in two months.

https://build.opensuse.org/package/show/openSUSE:Factory/clementine
https://build.opensuse.org/package/show/openSUSE:Factory/strawberry

I assume all these packages need is a rebuild.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16944653292.0aeA9fE01.6113
Date: Mon, 11 Sep 2023 20:48:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215227

          Summary
          Clementine/Strawberry crash on startup due to updated protobu=
f version

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          zrenfire@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

> strawberry: symbol lookup error: =
strawberry: undefined symbol: _ZN6google8protobuf8internal17AssignDescripto=
rsEPFPKNS1_15DescriptorTableEvEPN4absl12lts_202301259once_flagERKNS0_8Metad=
ataE

Also affects another user who's also tried Clementine.
https://old.reddit.com/r/openSUSE/comments/16fr3wr/lookup_error/

I noticed that libprotobuf recently updated.=20

> Sep 11 13:47:17 Client-57 plasmashell[1531]: pla=
sma-pk-updates: Got update package: "libprotobuf-lite23_4_0;23.4-6.3;x=
86_64;repo-oss" , summary: "Protocol Buffers - Google's data inte=
rchange format" , type: "enhancement"
> Sep 11 13:47:17 Client-57 plasmashell[1531]: plasma-pk-updates: Got up=
date package: "libprotobuf23_4_0;23.4-6.3;x86_64;repo-oss" , summ=
ary: "Protocol Buffers - Google's data interchange format" , type=
: "enhancement"

And I noticed that both players have not updated in two months.

https://build.opensuse.org/package/show/openSUSE:Factory/clementine
https://build.opensuse.org/package/show/openSUSE:Factory/strawberry

I assume all these packages need is a rebuild.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16944653292.0aeA9fE01.6113--


--16945008191.43Ad7cE.6449
Date: Tue, 12 Sep 2023 06:40:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215233

            Bug ID: 1215233
           Summary: VUL-0: CVE-2023-39070: cppcheck: heap use-after-free in removeContradiction()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/377919/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: carlos.lopez-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

CVE-2023-39070

An issue in Cppcheck 2.12 dev leads to heap use-after-free in the
removeContradiction() function in token.cpp when checking a specially craft=
ed
input.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2023-39070
https://bugzilla.redhat.com/show_bug.cgi?id=3D2238464
https://www.cve.org/CVERecord?id=3DCVE-2023-39070
https://sourceforge.net/p/cppcheck/discussion/general/thread/fa43fb8ab1/
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16945008191.43Ad7cE.6449
Date: Tue, 12 Sep 2023 06:40:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215233

          Summary
          VUL-0: CVE-2023-39070: cppcheck: heap use-after-free in remov=
eContradiction()

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.4

          Hardware
          Other

          URL
          https://smash.suse.de/issue/377919/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          carlos.lopez@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

CVE-2023-39070

An issue in Cppcheck 2.12 dev leads to heap use-after-free in the
removeContradiction() function in token.cpp when checking a specially craft=
ed
input.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2023-39070
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2238464
https://www.c=
ve.org/CVERecord?id=3DCVE-2023-39070
https://sourceforge.net/p/cppcheck/discussion/general/thread/fa43=
fb8ab1/

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16945008191.43Ad7cE.6449--


--16945883112.8Ce4e.8335
Date: Wed, 13 Sep 2023 06:58:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215276

            Bug ID: 1215276
           Summary: AUDIT-0: gnome-branding-Aeon: review of sudo and polkit configuration for openSUSE Aeon
    Classification: openSUSE
           Product: openSUSE Aeon
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Base
          Assignee: security-team-at-suse.de
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi security team,

Aeon has the explicit goal of being a more user friendly, straight of the b=
ox,
less maintenance required desktop-only OS

As a result, the current builds use gnome-initial-setup for creating the fi=
rst
user account, not YaST.

We're also working hard on distributing Aeon as images that don't have/use a
root account (https://bugzilla.opensuse.org/show_bug.cgi?id=3D1213159)

In order to facilitate that, we're aiming for a configuration that does the
following:

- sudo configured to allow the wheel group to do privileged actions, requir=
ing
the password of that user (not targetpw)

- polkit configured to allow the wheel group to do privileged actions,
requiring the password of that user

The account made by gnome-initial-setup is already in the wheel group

The changes for the above sudo and polkit are on the way to Factory but got
rightly stuck because I didn't file this audit till now:

https://build.opensuse.org/request/show/1109759

Please audit and whitelist so I can get things moving :)

If there is concern regarding SUSE products - Aeon is separate from both
MicroOS and Tumbleweed, this branding package is called Aeon and it's as me=
an
as possible to conflict with everything so it shouldn't be possible to
accidentally slip into any SUSE product.

There are no plans AFAIK for SUSE to do any product based on what I'm doing=
 in
Aeon
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16945883112.8Ce4e.8335
Date: Wed, 13 Sep 2023 06:58:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215276

          Summary
          AUDIT-0: gnome-branding-Aeon: review of sudo and polkit confi=
guration for openSUSE Aeon

          Classification
          openSUSE

          Product
          openSUSE Aeon

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Base

          Assignee
          security-team@suse.de

          Reporter
          rbrown@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi security team,

Aeon has the explicit goal of being a more user friendly, straight of the b=
ox,
less maintenance required desktop-only OS

As a result, the current builds use gnome-initial-setup for creating the fi=
rst
user account, not YaST.

We're also working hard on distributing Aeon as images that don't have/use a
root account (https://bugzilla.opensuse.org/show_bug.cgi?id=3D1213159)

In order to facilitate that, we're aiming for a configuration that does the
following:

- sudo configured to allow the wheel group to do privileged actions, requir=
ing
the password of that user (not targetpw)

- polkit configured to allow the wheel group to do privileged actions,
requiring the password of that user

The account made by gnome-initial-setup is already in the wheel group

The changes for the above sudo and polkit are on the way to Factory but got
rightly stuck because I didn't file this audit till now:

https://build.o=
pensuse.org/request/show/1109759

Please audit and whitelist so I can get things moving :)

If there is concern regarding SUSE products - Aeon is separate from both
MicroOS and Tumbleweed, this branding package is called Aeon and it's as me=
an
as possible to conflict with everything so it shouldn't be possible to
accidentally slip into any SUSE product.

There are no plans AFAIK for SUSE to do any product based on what I'm doing=
 in
Aeon

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16945883112.8Ce4e.8335--


--16945903616.C734.8464
Date: Wed, 13 Sep 2023 07:32:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215279

            Bug ID: 1215279
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 117.0.5938.62
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: m.szczepaniak.000-at-gmail.com, security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

[$NA][1479274] Critical CVE-2023-4863: Heap buffer overflow in WebP. Report=
ed
by Apple Security Engineering and Architecture (SEAR) and The Citizen Lab at
The University of Toronto=CA=BCs Munk School on 2023-09-06

[$3000][1430867] Medium CVE-2023-4900: Inappropriate implementation in Cust=
om
Tabs. Reported by Levit Nudi from Kenya on 2023-04-06

[$3000][1459281] Medium CVE-2023-4901: Inappropriate implementation in Prom=
pts.
Reported by Kang Ali on 2023-06-29

[$2000][1454515] Medium CVE-2023-4902: Inappropriate implementation in Inpu=
t.
Reported by Axel Chong on 2023-06-14

[$1000][1446709] Medium CVE-2023-4903: Inappropriate implementation in Cust=
om
Mobile Tabs. Reported by Ahmed ElMasry on 2023-05-18

[$1000][1453501] Medium CVE-2023-4904: Insufficient policy enforcement in
Downloads. Reported by Tudor Enache @tudorhacks on 2023-06-09

[$500][1441228] Medium CVE-2023-4905: Inappropriate implementation in Promp=
ts.
Reported by Hafiizh on 2023-04-29

[$6000][1449874] Low CVE-2023-4906: Insufficient policy enforcement in
Autofill. Reported by Ahmed ElMasry on 2023-05-30

[$2000][1462104] Low CVE-2023-4907: Inappropriate implementation in Intents.
Reported by Mohit Raj (shadow2639)  on 2023-07-04

[$TBD][1451543] Low CVE-2023-4908: Inappropriate implementation in Picture =
in
Picture. Reported by Axel Chong on 2023-06-06

[$TBD][1463293] Low CVE-2023-4909: Inappropriate implementation in
Interstitials. Reported by Axel Chong on 2023-07-09

We would also like to thank all security researchers that worked with us du=
ring
the development cycle to prevent security bugs from ever reaching the stable
channel.

Google is aware that an exploit for CVE-2023-4863 exists in the wild.

As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:

    [1481336] Various fixes from internal audits, fuzzing and other initiat=
ives
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16945903616.C734.8464
Date: Wed, 13 Sep 2023 07:32:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215279

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 117.0.5938.62

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          gianluca.gabrielli@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          m.szczepaniak.000@gmail.com, security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

[$NA][1479274] Critical CVE-2023-4863: Heap buffer overflow =
in WebP. Reported
by Apple Security Engineering and Architecture (SEAR) and The Citizen Lab at
The University of Toronto=CA=BCs Munk School on 2023-09-06

[$3000][1430867] Medium CVE-2023-4900: Inappropriate implementation in Cust=
om
Tabs. Reported by Levit Nudi from Kenya on 2023-04-06

[$3000][1459281] Medium CVE-2023-4901: Inappropriate implementation in Prom=
pts.
Reported by Kang Ali on 2023-06-29

[$2000][1454515] Medium CVE-2023-4902: Inappropriate implementation in Inpu=
t.
Reported by Axel Chong on 2023-06-14

[$1000][1446709] Medium CVE-2023-4903: Inappropriate implementation in Cust=
om
Mobile Tabs. Reported by Ahmed ElMasry on 2023-05-18

[$1000][1453501] Medium CVE-2023-4904: Insufficient policy enforcement in
Downloads. Reported by Tudor Enache @tudorhacks on 2023-06-09

[$500][1441228] Medium CVE-2023-4905: Inappropriate implementation in Promp=
ts.
Reported by Hafiizh on 2023-04-29

[$6000][1449874] Low CVE-2023-4906: Insufficient policy enforcement in
Autofill. Reported by Ahmed ElMasry on 2023-05-30

[$2000][1462104] Low CVE-2023-4907: Inappropriate implementation in Intents.
Reported by Mohit Raj (shadow2639)  on 2023-07-04

[$TBD][1451543] Low CVE-2023-4908: Inappropriate implementation in Picture =
in
Picture. Reported by Axel Chong on 2023-06-06

[$TBD][1463293] Low CVE-2023-4909: Inappropriate implementation in
Interstitials. Reported by Axel Chong on 2023-07-09

We would also like to thank all security researchers that worked with us du=
ring
the development cycle to prevent security bugs from ever reaching the stable
channel.

Google is aware that an exploit for CVE-2023-4863 exists in the wild.

As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:

    [1481336] Various fixes from internal audits, fuzzing and other initiat=
ives

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16945903616.C734.8464--


--16945912175.Ec3489.8542
Date: Wed, 13 Sep 2023 07:46:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215282

            Bug ID: 1215282
           Summary: consoletest_setup fails on gnome scenario
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/3568610/modules/cons
                    oletest_setup/steps/52
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: dmueller-at-suse.com, fvogt-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-aarch64-system_performance@aarch64 fails in
[consoletest_setup](https://openqa.opensuse.org/tests/3568610/modules/conso=
letest_setup/steps/52)

consoletest_setup fails on gnome scenario since aarch64 Tumbleweed snapshot
20230911.

The problem is we have broken fonts:
https://openqa.opensuse.org/tests/3568601#step/consoletest_setup/54

So, '/usr/lib/systemd/systemd-vconsole-setup' is called (and returns 0), but
prints some errors:
https://openqa.opensuse.org/tests/3568601#step/consoletest_setup/55
**********
Sep 12 02:25:59.709634 localhost systemd-vconsole-setup[376]: KD_FONT_OP_GET
failed while trying to get the font metadata: Invalid argument
Sep 12 02:25:59.709640 localhost systemd-vconsole-setup[376]: Fonts will no=
t be
copied to remaining consoles
**********

And does not display new fonts as expected by openQA:
https://github.com/os-autoinst/os-autoinst-distri-opensuse/blob/master/lib/=
utils.pm#L436

## Test suite description
Maintainer: QE Core

An explicit system performance test.

https://progress.opensuse.org/issues/36100

## Reproducible

Fails since (at least) Build
[20230911](https://openqa.opensuse.org/tests/3568153)

## Expected result

Last good: [20230910](https://openqa.opensuse.org/tests/3565572) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Daarch64&distri=3Do=
pensuse&flavor=3DDVD&machine=3Daarch64&test=3Dsystem_performance&version=3D=
Tumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16945912175.Ec3489.8542
Date: Wed, 13 Sep 2023 07:46:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215282

          Summary
          consoletest_setup fails on gnome scenario

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          aarch64

          URL
          https://openqa.opensuse.org/tests/3568610/modules/consoletest=
_setup/steps/52

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          guillaume.gardet@arm.com

          QA Contact
          qa-bugs@suse.de

          CC
          dmueller@suse.com, fvogt@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-aarch64-system_performance@aarch64 fails in
[consoletest_setup](https://openqa.opensuse.org/tests/3568610=
/modules/consoletest_setup/steps/52)

consoletest_setup fails on gnome scenario since aarch64 Tumbleweed snapshot
20230911.

The problem is we have broken fonts:
https://openqa.opensuse.org/tests/3568601#step/consoletest_setup/54

So, '/usr/lib/systemd/systemd-vconsole-setup' is called (and returns 0), but
prints some errors:
https://openqa.opensuse.org/tests/3568601#step/consoletest_setup/55
**********
Sep 12 02:25:59.709634 localhost systemd-vconsole-setup[376]: KD_FONT_OP_GET
failed while trying to get the font metadata: Invalid argument
Sep 12 02:25:59.709640 localhost systemd-vconsole-setup[376]: Fonts will no=
t be
copied to remaining consoles
**********

And does not display new fonts as expected by openQA:
https://github.com/os-autoinst/os-autoinst-distri=
-opensuse/blob/master/lib/utils.pm#L436

## Test suite description
Maintainer: QE Core

An explicit system performance test.

https://progress.ope=
nsuse.org/issues/36100

## Reproducible

Fails since (at least) Build
[20230911](https://op=
enqa.opensuse.org/tests/3568153)

## Expected result

Last good: [20230910](https://openqa.opensuse.org/tests/3565572) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/test=
s/latest?arch=3Daarch64&distri=3Dopensuse&flavor=3DDVD&machine=
=3Daarch64&test=3Dsystem_performance&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16945912175.Ec3489.8542--


--16946066140.Ff0f0.9115
Date: Wed, 13 Sep 2023 12:03:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215305

            Bug ID: 1215305
           Summary: packaging bug: libArcus3 ships lib files with wrong versions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

libArcus3 ships these files:

> rpm -ql libArcus3
/usr/lib64/libArcus.so.1.1.0
/usr/lib64/libArcus.so.3
/usr/share/doc/packages/libArcus3
/usr/share/doc/packages/libArcus3/README.md
/usr/share/licenses/libArcus3
/usr/share/licenses/libArcus3/LICENSE

> readelf -a /usr/lib64/libArcus.so.1.1.0 | grep SONAME
 0x000000000000000e (SONAME)             Library soname: [libArcus.so.3]

very obviously, that file name seems most invalid for the content it has.

Additionally, it causes a file conflict with the to be introduced > readelf=
 -a
/usr/lib64/libArcus.so.1.1.0 | grep SONAME
 0x000000000000000e (SONAME)             Library soname: [libArcus.so.3]
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16946066140.Ff0f0.9115
Date: Wed, 13 Sep 2023 12:03:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215305

          Summary
          packaging bug: libArcus3 ships lib files with wrong versions

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

libArcus3 ships these files:

> rpm -ql libArcus3
/usr/lib64/libArcus.so.1.1.0
/usr/lib64/libArcus.so.3
/usr/share/doc/packages/libArcus3
/usr/share/doc/packages/libArcus3/README.md
/usr/share/licenses/libArcus3
/usr/share/licenses/libArcus3/LICENSE

> readelf -a /usr/lib64/libArcus.so.1.1.0 | grep S=
ONAME
 0x000000000000000e (SONAME)             Library soname: [libArcus.so.3]

very obviously, that file name seems most invalid for the content it has.

Additionally, it causes a file conflict with the to be introduced > read=
elf -a
/usr/lib64/libArcus.so.1.1.0 | grep SONAME
 0x000000000000000e (SONAME)             Library soname: [libArcus.so.3]

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16946066140.Ff0f0.9115--


body:
--16946561950.f96F03C96.9957
Date: Thu, 14 Sep 2023 01:49:55 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215323

            Bug ID: 1215323
           Summary: [trackerbug] docker 24.0.6-ce update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

- Update to Docker 24.0.6-ce. See upstream changelong online at
  <https://docs.docker.com/engine/release-notes/24.0/#2406>.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16946561950.f96F03C96.9957
Date: Thu, 14 Sep 2023 01:49:55 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215323

          Summary
          [trackerbug] docker 24.0.6-ce update

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Containers

          Assignee
          containers-bugowner@suse.de

          Reporter
          asarai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

- Update to Docker 24.0.6-ce. See upstream changelong online=
 at
  <h=
ttps://docs.docker.com/engine/release-notes/24.0/#2406>.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16946561950.f96F03C96.9957--

pkgs: containerd docker

summary: [trackerbug] docker 24.0.6-ce update


body:
--16946880984.a3549AD.10608
Date: Thu, 14 Sep 2023 10:41:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1215337

            Bug ID: 1215337
           Summary: python-onnx does not build s390x
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: azouhr-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: ada.lovelace-at-gmx.de, ihno-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

python-onnx does not build on openSUSE:Factory:zSystems for quite some time:

osc buildhistory openSUSE:Factory:zSystems python-onnx standard s390x
TIME                SRCMD5                           VER-REL.BUILD# REV
DURATION
2019-11-26 15:59:51 c7251471230f79907f69762d42f620a6 1.6.0-1.1      1   414
2019-12-24 10:29:50 c7251471230f79907f69762d42f620a6 1.6.0-1.2      1   821
2020-01-07 20:22:00 c7251471230f79907f69762d42f620a6 1.6.0-1.3      1   138
2020-01-08 17:02:51 0147179dbf202fdba63d0887ccf75400 1.6.0-2.1      2   192
2020-01-11 08:08:49 0147179dbf202fdba63d0887ccf75400 1.6.0-2.2      2   137
2020-01-21 18:59:45 0147179dbf202fdba63d0887ccf75400 1.6.0-2.3      2   135
2020-02-05 07:12:05 0147179dbf202fdba63d0887ccf75400 1.6.0-2.4      2   668
2020-02-07 20:58:34 0147179dbf202fdba63d0887ccf75400 1.6.0-2.5      2   178
2020-02-16 16:40:23 0147179dbf202fdba63d0887ccf75400 1.6.0-2.6      2   280
2020-02-18 13:51:04 0147179dbf202fdba63d0887ccf75400 1.6.0-2.7      2   227
2020-02-19 17:01:33 0147179dbf202fdba63d0887ccf75400 1.6.0-2.8      2   264

This package is needed in order to prepare a container for onnx-mlir which =
is
the platform that also supports IBM Telum processors on Mainframe.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--16946880984.a3549AD.10608
Date: Thu, 14 Sep 2023 10:41:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1215337

          Summary
          python-onnx does not build s390x

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          S/390-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          azouhr@opensuse.org

          QA Contact
          qa-bugs@suse.de

          CC
          ada.lovelace@gmx.de, ihno@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

python-onnx does not build on openSUSE:Factory:zSystems for =
quite some time:

osc buildhistory openSUSE:Factory:zSystems python-onnx standard s390x
TIME                SRCMD5                           VER-REL.BUILD# REV
DURATION
2019-11-26 15:59:51 c7251471230f79907f69762d42f620a6 1.6.0-1.1      1   414
2019-12-24 10:29:50 c7251471230f79907f69762d42f620a6 1.6.0-1.2      1   821
2020-01-07 20:22:00 c7251471230f79907f69762d42f620a6 1.6.0-1.3      1   138
2020-01-08 17:02:51 0147179dbf202fdba63d0887ccf75400 1.6.0-2.1      2   192
2020-01-11 08:08:49 0147179dbf202fdba63d0887ccf75400 1.6.0-2.2      2   137
2020-01-21 18:59:45 0147179dbf202fdba63d0887ccf75400 1.6.0-2.3      2   135
2020-02-05 07:12:05 0147179dbf202fdba63d0887ccf75400 1.6.0-2.4      2   668
2020-02-07 20:58:34 0147179dbf202fdba63d0887ccf75400 1.6.0-2.5      2   178
2020-02-16 16:40:23 0147179dbf202fdba63d0887ccf75400 1.6.0-2.6      2   280
2020-02-18 13:51:04 0147179dbf202fdba63d0887ccf75400 1.6.0-2.7      2   227
2020-02-19 17:01:33 0147179dbf202fdba63d0887ccf75400 1.6.0-2.8      2   264

This package is needed in order to prepare a container for onnx-mlir which =
is
the platform that also supports IBM Telum processors on Mainframe.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--16946880984.a3549AD.10608--

summary: python-onnx does not build s390x