--1549300837.aF473.22455
Date: Mon, 4 Feb 2019 17:20:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124204

            Bug ID: 1124204
           Summary: qemu-kvm fails to run a linux guest os on core2 CPU
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 795931
  --> http://bugzilla.opensuse.org/attachment.cgi?id=795931&action=edit
v2-KVM-x86-fix-L1TF-s-MMIO-GFN-calculation patch for leap 15.0 kernel

On a PC with a Intel Core2 CPU, I cannot run a Linux guest OS with qemu-kvm.
On the same hardware everything worked with Leap 42.3.
It turns out that this is a known problem:
  https://bugzilla.redhat.com/show_bug.cgi?id=1633058
with a solution:
  https://patchwork.kernel.org/patch/10614795/
I build the 15.0 kernel with the patch and tested it and indeed qemu-kvm works
again on the Core2 CPU
Attached is the patch that apply against the current 15.0 kernel.
Please add it to the Leap 15.0/15.1 kernels.


body:
--1549365510.FBaE3d50.8507
Date: Tue, 5 Feb 2019 11:18:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1124308

            Bug ID: 1124308
           Summary: docker: update to 18.09.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Tracker bug for the 18.09.1 update.

pkgs: containerd docker docker-runc

summary: docker: update to 18.09.1


--1549371359.deaa70.30894
Date: Tue, 5 Feb 2019 12:55:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124322

            Bug ID: 1124322
           Summary: VUL-1: CVE-2019-1000021: python-slixmpp: incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/224195/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: sor.alexei-at-meowr.ru
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: mvetter-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains
an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent
Storage
of Private Data via PubSub) options profile, used for the configuration of
default access model that can result in all of the contacts of the victim can
see private data having been published to a PEP node. This attack appears to be
exploitable if the user of this library publishes any private data on PEP, the
node isn't configured to be private. This vulnerability appears to have been
fixed in commit 7cd73b594e8122dddf847953fcfc85ab4d316416 which is included in
slixmpp 1.4.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1000021
https://xmpp.org/extensions/xep-0223.html#howitworks
https://lab.louiz.org/poezio/slixmpp/commit/7cd73b594e8122dddf847953fcfc85ab4d316416


body:
--1549372747.d7cBf4E0.11476
Date: Tue, 5 Feb 2019 13:19:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124324

            Bug ID: 1124324
           Summary: meson: Bug in meson breaks building libmodulemd
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ngompa13-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I try to build libmodulemd on openSUSE Leap 15.1, it fails with the
following error:

[   13s] FAILED:
modulemd/v2/modulemd@v2@@modulemd@sha/meson-generated_.._modulemd-enums.c.o
[   13s] cc -Imodulemd/v2/modulemd@v2@@modulemd@sha -Imodulemd/v2
-I../modulemd/v2 -I../modulemd/v2/include/modulemd-2.0 -I/usr/include/glib-2.0
-I/usr/lib64/glib-2.0/include -fdiagnostics-color=always -pipe
-D_FILE_OFFSET_BITS=64 -std=c11 -Wpointer-arith -Werror=missing-declarations
-Wmissing-prototypes -Wstrict-prototypes -Wuninitialized
-Werror=format-security -Werror=format=2 -Werror=implicit -Werror=init-self
-Werror=main -Werror=missing-braces -Werror=return-type -Werror=array-bounds
-Werror=write-strings -DG_LOG_USE_STRUCTURED '-DG_LOG_DOMAIN="libmodulemd"'
-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2
-fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables
-fstack-clash-protection -fPIC  -MD -MQ
'modulemd/v2/modulemd@v2@@modulemd@sha/meson-generated_.._modulemd-enums.c.o'
-MF
'modulemd/v2/modulemd@v2@@modulemd@sha/meson-generated_.._modulemd-enums.c.o.d'
-o
'modulemd/v2/modulemd@v2@@modulemd@sha/meson-generated_.._modulemd-enums.c.o'
-c modulemd/v2/modulemd-enums.c
[   13s] modulemd/v2/modulemd-enums.c:5:10: fatal error:
modulemd/v2/include/modulemd-2.0/modulemd.h: No such file or directory
[   13s]  #include "modulemd/v2/include/modulemd-2.0/modulemd.h"
[   13s]           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[   13s] compilation terminated.

The error is caused due to lack of the following commit from upstream not being
backported to our Meson package:
https://github.com/mesonbuild/meson/commit/c5865c50c444912afd92c2feb94d8739874a62b2

This was fixed in upstream meson 0.47.0, but the commit is trivial to backport
to meson 0.46.0. Thus, the problem doesn't exist in openSUSE Tumbleweed (as of
right now), but does exist in Leap 15.

pkgs: dnf dnf-plugins-core libcomps libdnf libmodulemd librepo meson


--1549378287.F3Db8F1.22801
Date: Tue, 5 Feb 2019 14:51:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124340

            Bug ID: 1124340
           Summary: [Build 20190202] openQA test fails in yast2_dns_server with "Error: ATTENTION: /etc/named.d/forwarders.conf is not a link to /var/run/netconfig/bind-forwarders.conf"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.suse.de/tests/2430809/modules/yast2_dns
                    _server/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: anton.smorodskyi-at-suse.com
        QA Contact: jsrain-at-suse.com
                CC: anton.smorodskyi-at-suse.com, jeriveramoya-at-suse.com,
                    okurz-at-suse.com, riafarov-at-suse.com
        Depends on: 1123985
          Found By: ---
           Blocker: Yes

+++ This bug was initially created as a clone of Bug #1123985 +++

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-Build20190202-yast2_ncurses@64bit fails in
[yast2_dns_server](https://openqa.opensuse.org/tests/846144#step/yast2_dns_server/18)
with an error popup in the yast dialog to configure a DNS server (bind).
Detailed error message:

```
Error occurred while calling netconfig.
Error: ATTENTION: /etc/named.d/forwarders.conf is not a link to
/var/run/netconfig/bind-forwarders.conf
call "netconfig update -f" to adjust /etc/named.d/forwarders.conf
```

## Reproducible

Fails since Build [20190129](https://openqa.opensuse.org/tests/843883)

## Expected result

Last good: [20190126](https://openqa.opensuse.org/tests/841731)


--1549438927.2Cdc164.31149
Date: Wed, 6 Feb 2019 07:42:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124423

            Bug ID: 1124423
           Summary: Calamares installer fails with "Sudoers dir is not writable"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: opensuse.lietuviu.kalba-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 796084
  --> http://bugzilla.opensuse.org/attachment.cgi?id=796084&action=edit
screenshot

calamares-3.1.10 for openSUSE Leap 15.0 and calamares-3.1.11 for openSUSE
Tumbleweed fails at copying LiveCD content to new system.

Error: "Sudoers dir is not writable"

calamares RPM source contains 3.1.4-unpackfs.conf.patch that suggest copying
from
source: "/read-only". In latest medium (generated by KIWI-ng) there is no such
directory anymore. Seems that KIWI-ng generate LiveCD ISO images differently
than KIWI.


--1549447094.81ADA3f54.5344
Date: Wed, 6 Feb 2019 09:58:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124446

            Bug ID: 1124446
           Summary: PHP 7.3 preg_match(): JIT compilation failed: no more memory (need pcre.jit=0 by default in php.ini)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ilya-at-ilya.pp.ua
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://bugs.php.net/bug.php?id=77260
In PHP 7.3 using pcre2 and using by default JIT compilation (pcre.jit=1)
This leads to errors like:
Warning in ./libraries/classes/Config.php#201 preg_match(): JIT compilation
failed: no more memory
For everything that uses preg _ * ()
I get this error on the login screen in phpMyAdmin 4.8.5, while I have 128MB
RAM allocated for PHP!
Until this is dealt with in the upstream. I suggest set in php.ini pcre.jit=0


--1549449802.0D782D214.21422
Date: Wed, 6 Feb 2019 10:43:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124451

            Bug ID: 1124451
           Summary: Calamares: Boost.Python error in job "machineid"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: opensuse.lietuviu.kalba-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 796101
  --> http://bugzilla.opensuse.org/attachment.cgi?id=796101&action=edit
log

After fixing
https://bugzilla.opensuse.org/show_bug.cgi?id=1124423

new bug found:

12:37:37 [0]: Installation failed:
12:37:37 [0]: - message: "Boost.Python error in job \"machineid\"."
12:37:37 [0]: - details: "
<class
'subprocess.CalledProcessError'>

Command
'systemd-machine-id-setup' returned non-zero exit status
127.

Traceback:

  File
"/usr/lib64/calamares/modules/machineid/main.py", line 57, in run\n
 check_target_env_call("systemd-machine-id-setup")\n\n  File
"<string>", line 2, in <module>\n

"


--1549470495.a78672.18795
Date: Wed, 6 Feb 2019 16:28:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1124508

            Bug ID: 1124508
           Summary: TW 20190205  Installer font much too small
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: shundhammer-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The font used during installation in Tumbleweed has become much (!) too small.
To me, it is barely legible.

IIRC it is even a legal requirement by now that such fonts need to be readable
also by users beyond 40 years of age with diminishing eyesight.

At the very least, it is unergonomic.

ISO used: openSUSE-Tumbleweed-DVD-x86_64-Snapshot20190205-Media.iso

(same with the previous ISO
openSUSE-Tumbleweed-DVD-x86_64-Snapshot20190121-Media.iso)


--1549522117.baD4B0.6514
Date: Thu, 7 Feb 2019 06:48:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124568

            Bug ID: 1124568
           Summary: missing dependency : ibus-hangul package needs python2-gobject package.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: steelblue.lee-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

ibus-hangul package need python2-gobject package. But it seems that there isn't
any dependency between two packages. So, I can't select a proper Korean
keyboard in Setting - Region & Language - Input methods.


body:
--1549526105.AC6EB340.19670
Date: Thu, 7 Feb 2019 07:55:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1124573

            Bug ID: 1124573
           Summary: kdelibs4 depends on upower
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Surely not everything that links with KDE libraries absolutely needs upower.

If you want to bring the package into KDE desktop there is surely more
appropriate package to add the dependency. Presumably there is a package that
includes a power management UI for KDE.

summary: kdelibs4 depends on upower


body:
--1549546294.dCdf70.18628
Date: Thu, 7 Feb 2019 13:31:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124638

            Bug ID: 1124638
           Summary: openSUSE:Leap:15.1/dnf update from system:packagemanager:dnf/dnf is required
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dcassany-at-suse.com
        QA Contact: qa-bugs-at-suse.de
        Depends on: 1124324
          Found By: ---
           Blocker: ---

Since Leap 15 the default rpmdb path changed the default location from
`/var/lib/rpm` to `/usr/lib/sysimage/rpm`.

This change is causing issues with the current DNF version in Leap if
bootstrapping a non SUSE distro (e.g. Fedora). DNF performs a RPM verification
after the installation of the packages and this fails as the expected location
of the rpmdb is not matched.

With current DNF versions this is already fixed and enables to bootstrap from a
host having defined an rpmdb A path to a guest having defined an rpmdb B path.

pkgs: dnf dnf-plugins-core libcomps libdnf libmodulemd librepo


body:
Build Identifier:

Latest fwbuilder in Leap 15.0 segfaults reproducibly when just adding a new
address object

-> watch fwbuilder segfault

[886808.208284] traps: fwbuilder[95254] general protection ip:55e8afd0df9a
sp:7fffaa18fee0 error:0 in fwbuilder[55e8afb65000+1026000]

runge@leapfrog:~/work/fw-cluster> rpm -qi fwbuilder
Name        : fwbuilder
Version     : 5.3.7
Release     : lp150.3.3
Architecture: x86_64
Install Date: Fri 11 Jan 2019 04:58:40 PM CET
Group       : Productivity/Networking/Security
Size        : 46821862
License     : GPL-2.0+
Signature   : RSA/SHA256, Sat 24 Mar 2018 06:13:02 AM CET, Key ID
b88b2fd43dbdc284
Source RPM  : fwbuilder-5.3.7-lp150.3.3.src.rpm
Build Date  : Wed 31 Jan 2018 01:00:00 PM CET
Build Host  : cloud104
Relocations : (not relocatable)
Packager    : https://bugs.opensuse.org
Vendor      : openSUSE
URL         : http://www.fwbuilder.org/
Summary     : Firewall Builder
Description :
Firewall Builder consists of a GUI and set of policy compilers for
various firewall platforms. It helps users maintain a database of
objects and allows policy editing using simple drag-and-drop
operations. The GUI generates a firewall description in the form of an XML
file, which compilers then interpret and generate platform-specific
code. Several algorithms are provided for automated network object
discovery and bulk import of data. The GUI and policy compilers are
independent of another.
Distribution: openSUSE Leap 15.0

Reproducible: Always

Steps to Reproduce:
1. start fwbuilder
2. load a configuration or start a new one from a template
3. click Object -> New Object -> New Address
BAM
Actual Results:

[887537.727902] traps: fwbuilder[95531] general protection ip:558c6a260f9a
sp:7ffc7e64f1f0 error:0 in fwbuilder[558c6a0b8000+1026000]

Expected Results:
no segfault

This started after upgrading Leap from 42.3 to 15.0 and fwbuilder from 5.0.x to
5.3.7

summary: fwbuilder segfaults when adding new address object from menu


--1549618678.55ae0.30156
Date: Fri, 8 Feb 2019 09:37:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1124762

            Bug ID: 1124762
           Summary: VUL-0: CVE-2019-7628: pagure: leaks API keys by e-mailing them to users
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/224413/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ngompa13-at-gmail.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-7628

Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers
validate TLS certificates, so it is easy for man-in-the-middle attackers to
read
these e-mails and gain access to Pagure on behalf of other users. This issue is
found in the API token expiration reminder cron job in
files/api_key_expire_mail.py; disabling that job is also a viable solution.
(E-mailing a substring of the API key was an attempted, but rejected,
solution.)

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7628
https://pagure.io/pagure/pull-request/4254
https://pagure.io/pagure/issue/4253
https://pagure.io/pagure/issue/4252
https://pagure.io/pagure/issue/4230
https://pagure.io/pagure/c/9905fb1e64341822366b6ab1d414d2baa230af0a


--1549723289.a3BD8E8E7.24237
Date: Sat, 9 Feb 2019 14:41:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1124865

            Bug ID: 1124865
           Summary: openssh-askpass-gnome recommended in non-gnome installation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: simonf.lees-at-suse.com
          Reporter: fabian@ritter-vogt.de
        QA Contact: qa-bugs-at-suse.de
                CC: lnussel-at-suse.com
          Found By: ---
           Blocker: ---

patterns-base-x11 recommends openssh-askpass-gnome, which is thus installed
even on LXQt and KDE desktops.


body:
--1549875178.52f0aa0.2174
Date: Mon, 11 Feb 2019 08:52:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1124936

            Bug ID: 1124936
           Summary: VUL-0: chromium: 72.0.3626.96 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2019-5784: Inappropriate implementation in V8

https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html

summary: VUL-0: chromium: 72.0.3626.96 update


--1549896691.8AFc0153.6088
Date: Mon, 11 Feb 2019 14:51:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125004

            Bug ID: 1125004
           Summary: Change default kconfig: CONFIG_PREEMPT_VOLUNTARY
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

As discussed on opensuse-kernel ML, there is a request to switch the kernel
default config for preemption to CONFIG_PREEMPT_VOLUNTARY from the current
CONFIG_PREEMPT on Tumbleweed:
  https://lists.opensuse.org/opensuse-kernel/2019-02/msg00005.html

Originally, this theme was raised from another bug 1112824, where it indicated
that CONFIG_PREEMPT_VOLUNTARY works around the GNOME performance problem.

Although switching the preemption behavior shouldn't be taken as the fix for
the problem above, we can consider it as a good chance to switch.
As found in the discussion thread above, other major distros (Fedora and
Ubuntu) use CONFIG_PREEMPT_VOLUNTARY as default.  So this should be good enough
for the interactivity we wanted to achieve with CONFIG_PREEMPT, while it must
be better in terms of the throughput.

Moreover, the current TW kernel config has very inconsistency; only a few
(x86_64/default, armv7hl/default and lpae, and i386/pae) take CONFIG_PREEMPT=y
while others take CONFIG_PREEMPT_NONE=y.  This inconsistency likely came from
the fact that SLE and Leap kernels take CONFIG_PREEMPT_NONE=y for all flavors.
So, we should change all to CONFIG_PREEMPT_VOLUNTARY=y for all flavors on TW
from consistency POV, too.

Also, it'd be a good timing to switch the Leap 15.1 config as well, so that we
can align the behavior with TW kernel.


--1549901509.CcBc344B0.17505
Date: Mon, 11 Feb 2019 16:11:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125019

            Bug ID: 1125019
           Summary: VUL-1: CVE-2018-12546: mosquitto: issue with revoked access to topic
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/224551/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mardnh-at-gmx.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-12546

- CVE-2018-12546. If a client publishes a retained message to a topic that
  they have access to, and then their access to that topic is revoked, the
  retained message will still be delivered to future subscribers. This
  behaviour may be undesirable in some applications, so a configuration option
  `check_retain_source` has been introduced to enforce checking of the
  retained message source on publish.

References:
https://mosquitto.org/files/cve/2018-12546/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12546


--1549901602.d2AE00.17520
Date: Mon, 11 Feb 2019 16:13:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125020

            Bug ID: 1125020
           Summary: VUL-1: CVE-2018-12551: mosquitto: malformed data in the password file treated as valid
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/224550/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mardnh-at-gmx.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-12551

- CVE-2018-12551: If Mosquitto is configured to use a password file for
  authentication, any malformed data in the password file will be treated as
  valid. This typically means that the malformed data becomes a username and no
  password. If this occurs, clients can circumvent authentication and get
access
  to the broker by using the malformed username. In particular, a blank line
  will be treated as a valid empty username. Other security measures are
  unaffected. Users who have only used the mosquitto_passwd utility to create
  and modify their password files are unaffected by this vulnerability.

Affects version 1.0 to 1.5.5 inclusive.

References:
https://mosquitto.org/files/cve/2018-12551/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12551


--1549901723.cf3F34BE0.20526
Date: Mon, 11 Feb 2019 16:15:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125021

            Bug ID: 1125021
           Summary: VUL-1: CVE-2018-12550: mosquitto: ACL file mistreated
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/224549/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: mardnh-at-gmx.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-12550

- CVE-2018-12550: If an ACL file is empty, or has only blank lines or
  comments, then mosquitto treats the ACL file as not being defined, which
  means that no topic access is denied. Although denying access to all topics
  is not a useful configuration, this behaviour is unexpected and could lead
  to access being incorrectly granted in some circumstances. This is now
fixed. Affects versions 1.0 to 1.5.5 inclusive.

References:
https://mosquitto.org/files/cve/2018-12550/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12550


--1549917457.2d4e1.8073
Date: Mon, 11 Feb 2019 20:37:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125038

            Bug ID: 1125038
           Summary: Firefox crashes with illegal instruction (core dumped)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: fkrueger-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Recent update to MozillaFirefox-65.0-lp150.3.1.x86_64.rpm from the Mozilla repo
https://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.0/ crashes
with dmesg output "traps: firefox[3249] trap invalid opcode ip:7f75dcbbd25b
sp:7fff92e23ab0 error:0 in libxul.so[7f75dcb27000+5a81000]". Starting Firefox
from the console crashes with "illegal instruction (core dumped)".

This issue might be due to the recent change:

Mon Feb 11 10:11:45 UTC 2019 - Martin Liška <mliska-at-suse.cz>
- Enable LTO for x86_64 (with increased memory constraints).

It works, however, with current Tumbleweed. Any idea?


--1549918252.8A30EeF51.12710
Date: Mon, 11 Feb 2019 20:50:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125040

            Bug ID: 1125040
           Summary: changing display manager in YaST sysconfig editor does not work
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: novell-at-howorth.org.uk
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

(1) YaST's sysconfig editor still offers the possibility to change the display
manager via its sysconfig editor. However changing it here makes no change on
the system and no warnings are given. It is necessary to use the
update-alternatives mechanism, either from the command line or using the YaST
module. The facility in the sysconfig editor should be removed or made to emit
a warning.

(2) Further, the YaST module is not installed by default so there is a
regression in the capabilities of its interface.

(3) Further, the notice of this change in
<https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.0/index.html#general>
uses confusing terminology, choosing the less common term login manager to
describe the display manager which is used elsewhere (e.g. in YaST). This
should be corrected.


--1549919795.c11e31.14780
Date: Mon, 11 Feb 2019 21:16:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125044

            Bug ID: 1125044
           Summary: Integer overflow for for huge package (4.4 GByte installed)?
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Everytime I update the kicad-packages3D package, zypper tells me:

---
The following package is going to be upgraded:
  kicad-packages3D

1 package to upgrade.
Overall download size: 339.8 MiB. Already cached: 0 B. After the operation, 4.3
GiB will be freed.
---

$> rpm -qi kicad-packages3D
Name        : kicad-packages3D
Version     : 5.0.0
Release     : 2.1
Architecture: noarch
Install Date: Sat Nov 10 23:10:38 2018
Group       : Productivity/Scientific/Electronics
Size        : 4631857093

---
Name        : kicad-packages3D
Version     : 5.0.2
Release     : 1.2
Architecture: noarch
Install Date: Mon Feb 11 22:01:28 2019
Group       : Productivity/Scientific/Electronics
Size        : 4959216695

Actually, it should be +300 MByte, not -4300 MByte.


--1549972925.Dc3eFde0.10961
Date: Tue, 12 Feb 2019 12:02:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125131

            Bug ID: 1125131
           Summary: neomutt out of step with mutt and neomutt factory
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: danielm-at-ecoscentric.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

neomutt in 15.1 is stuck at neomutt-20180323, with neomutt based on 20180716 in
factory/tumbleweed (which addressed a lot of bugs).


--1549983418.A677fe0.15360
Date: Tue, 12 Feb 2019 14:56:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125146

            Bug ID: 1125146
           Summary: X11:xfce/xfce4-terminal:  xfce4-terminal.desktop and xfce4-terminal-settings.desktop use the same NAME and COMMENT entries
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: maurizio.galli-at-gmail.com
          Reporter: maurizio.galli-at-gmail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: bnc-team-xfce-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Both xfce4-terminal.desktop and xfce4-terminal-settings.desktop use the same
NAME and COMMENT entries creating confusion in the application menu.

xfce4-terminal-settings.desktop:

[Desktop Entry]
Version=1.0
Name=Xfce Terminal
Comment=Terminal Emulator
GenericName=Terminal Emulator
Exec=xfce4-terminal
Icon=utilities-terminal
Terminal=false
Type=Application
Categories=GTK;System;TerminalEmulator;
StartupNotify=true

xfce4-terminal-settings.desktop:

[Desktop Entry]
Version=1.0
Name=Xfce Terminal
Comment=Terminal Emulator
GenericName=Terminal Emulator
Exec=xfce4-terminal --preferences
Icon=utilities-terminal
Terminal=false
Type=Application
Categories=XFCE;GTK;Settings;DesktopSettings;X-XFCE-SettingsDialog;X-XFCE-PersonalSettings;
StartupNotify=true


--1550041104.2AAa143.2936
Date: Wed, 13 Feb 2019 06:58:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125231

            Bug ID: 1125231
           Summary: Build cycle between systemtap and systemd
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: tonyj-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: lnussel-at-suse.com
          Found By: ---
           Blocker: ---

We found a build cycle between systemtap and systemd, systemtap should
BuildRequires pkgconfig(systemd) instead of systemd, then systemd-mini will be
used in the build time. This has been fixed in openSUSE Factory by [1], since
systemtap in Leap is from SLE, we need the same fix went through SLE15
Update(or SP1), could you please prepare this fix to SLE15 Update?

[1] https://build.opensuse.org/request/show/670898


--1550063780.EAdE0.11168
Date: Wed, 13 Feb 2019 13:16:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125307

            Bug ID: 1125307
           Summary: master-boot-code grew by 10311.753x - wrong use of objcopy
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: jsrain-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

master-boot-code in openSUSE:Factory is ~128MiB big after the latest rebuild
with an updated binutils.

This is due to an unnecessarily copied .note.gnu.property section in the ELF
file.

What is this package actually used for - maybe it can just be dropped?


--1550072797.a43fc0.1282
Date: Wed, 13 Feb 2019 15:46:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125327

            Bug ID: 1125327
           Summary: /sbin/purge-kernels is in endless loop since last maintenance update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Bootloader
          Assignee: jsrain-at-suse.com
          Reporter: adrian-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

/sbin/purge-kernels

is permanent trying to purge my kernel since last maintainenace update.
However, it always fails since it is not taking into accoung that another
package may depend on it:

/sbin/purge-kernels:    virtualbox-host-kmp = 5.2.22 is needed by (installed)
virtualbox-5.2.22-lp150.4.23.1.x86_64


--1550087273.3dd0700.1762
Date: Wed, 13 Feb 2019 19:47:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125359

            Bug ID: 1125359
           Summary: server:monitoring/monitoring-plugins-zypper: Bug - config file missing and permissions for zypper not set correctly
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: lars.vogdt-at-suse.com
          Reporter: tbro-at-suse.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: lars.vogdt-at-suse.com
          Found By: ---
           Blocker: ---

Hi,

the package doesn't contain a configuration file neither it is explained in the
README that it needs one.

This file is missing and makes the check failing - after installing the rpm:

/etc/nrpe.d/check_zypper.cfg

after I created this file (found on another host we monitor) with the following
contents:

command[check_zypper]=/usr/lib/nagios/plugins/check_zypper -vrst 120 -ui
/etc/monitoring-plugins/check_zypper-ignores.txt

I finally got stuck and presented with the following error message:

Feb 13 20:35:10 widehat nrpe[747]: Running command:
/usr/lib/nagios/plugins/check_zypper -vrst 120 -ui
/etc/monitoring-plugins/check_zypper-ignores.txt
Feb 13 20:35:10 widehat nrpe[748]: WARNING: my_system() seteuid(0): Operation
not permitted
Feb 13 20:35:11 widehat sudo[752]: pam_unix(sudo:auth): conversation failed
Feb 13 20:35:11 widehat sudo[752]: pam_unix(sudo:auth): auth could not identify
password for [root]
Feb 13 20:35:11 widehat nrpe[747]: Command completed with return code 3 and
output: Updates UNKNOWN - system does not allow to execute zypper
Feb 13 20:35:11 widehat nrpe[747]: Return Code: 3, Output: Updates UNKNOWN -
system does not allow to execute zypper

Looks like the package requires zypper to work, but as I run this as a systemd
service (which is provided by the nrpe package) it's run as user nagios, which
is not allowed to run zypper and refresh the rpm database.

Either you need to set a flag on zypper or somehow else give nagios the right
to execute zypper while installing the rpm. OR AT LEAST warn the user in a
ReadMe that he needs to work on stuff, before this package can be used.

Seems that these rules are not applied on Leap 15.0:

https://build.opensuse.org/package/view_file/server:monitoring/monitoring-plugins-zypper/sudo-profile-check_zypper?expand=1

https://build.opensuse.org/package/show/openSUSE:Leap:15.0/monitoring-plugins-zypper

^^please backport as maintenance update - thanks =)

additional information:

 # cat /etc/os-release
NAME="openSUSE Leap"
VERSION="15.0"
ID="opensuse-leap"
ID_LIKE="suse opensuse"
VERSION_ID="15.0"
PRETTY_NAME="openSUSE Leap 15.0"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:opensuse:leap:15.0"
BUG_REPORT_URL="https://bugs.opensuse.org"
HOME_URL="https://www.opensuse.org/"

Information for package monitoring-plugins-zypper:
--------------------------------------------------
Repository     : Haupt-Repository (OSS)
Name           : monitoring-plugins-zypper
Version        : 1.95-lp150.1.1
Arch           : noarch
Vendor         : openSUSE
Installed Size : 45.7 KiB
Installed      : Yes
Status         : up-to-date
Source package : monitoring-plugins-zypper-1.95-lp150.1.1.src
Summary        : Check for software updates via zypper
Description    :

Information for package nrpe:
-----------------------------
Repository     : Haupt-Repository (OSS)
Name           : nrpe
Version        : 3.2.1-lp150.1.13
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 124.5 KiB
Installed      : Yes
Status         : up-to-date
Source package : nrpe-3.2.1-lp150.1.13.src
Summary        : Nagios Remote Plug-In Executor
Description    :

# rpm -ql monitoring-plugins-zypper
/etc/apparmor.d
/etc/apparmor.d/abstractions
/etc/apparmor.d/abstractions/rpm
/etc/apparmor.d/abstractions/ssl
/etc/apparmor.d/abstractions/zypp
/etc/apparmor.d/local
/etc/apparmor.d/local/usr.lib.nagios.plugins.check_zypper
/etc/apparmor.d/local/usr.lib.nagios.plugins.check_zypper.zypp_refresh
/etc/apparmor.d/usr.lib.nagios.plugins.check_zypper
/usr/lib/nagios
/usr/lib/nagios/plugins
/usr/lib/nagios/plugins/check_zypper


body:
--1550136951.065B0.19279
Date: Thu, 14 Feb 2019 09:35:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125415

            Bug ID: 1125415
           Summary: zypper: refresh disabled repos
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

It's useful for me to have repos for different distro versions on my system to
be able to query their solv files them when I need to. So I have them disabled
there. Unfortunately zypper ref has no way to refresh disabled repos. So I'd
like to ask for another option to zypper ref to make it also refresh disabled
repos, eg like "zypper ref -f -a" for all repos.

summary: zypper: refresh disabled repos


--1550138888.C72Feb0.14722
Date: Thu, 14 Feb 2019 10:08:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125420

            Bug ID: 1125420
           Summary: VUL-0: CVE-2019-8337: msmtp: certificate-verification results are not properly checked in tls_trust_file default configuration
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mrueckert-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2019-8337

In msmtp 1.8.2, when tls_trust_file has its default configuration,
certificate-verification results are not properly checked.

References:
https://nvd.nist.gov/vuln/detail/CVE-2019-8337
https://marlam.de/msmtp/news/


--1550140290.0f5cAB4.5728
Date: Thu, 14 Feb 2019 10:31:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125425

            Bug ID: 1125425
           Summary: bolt: removal of /usr/share/polkit-1/rules.d/org.freedesktop.bolt.rules
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: rfrohl-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

As described in bug 1125314 we want to remove polkit rules files that grant
members of the wheel group special privileges. bolt ships one such rules file
in /usr/share/polkit-1/rules.d/org.freedesktop.bolt.rules.

This file is currently not effective anyways, because the polkit-default-privs
take precendence over it. I suggest to move this file to /usr/share/doc/...
as an example for users that want to manually enable this rule on their system.


--1550143787.fe8FE4.28139
Date: Thu, 14 Feb 2019 11:29:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125438

            Bug ID: 1125438
           Summary: AUDIT-0: systemd: status of /usr/share/polkit-1/rules.d/systemd-networkd.rules
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: systemd-maintainers-at-suse.de
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

As explained in bug 1125314 we are currently reviewing all rules files
installed in /usr/share/polkit-1/rules.d. systemd installs the file
/usr/share/polkit-1/rules.d/systemd-networkd.rules.

This file allows the user 'systemd-network' to perform any of the following
polkit actions without password entry:

- org.freedesktop.hostname1.set-hostname
- org.freedesktop.timedate1.set-timezone

Since this file does not start with a suitable number prefix it is currently
ineffective, because our polkit-default-privs take precedence.

Can you tell in which context this systemd-network user requires these
actions? Which process is running as this user? I couldn't find any in my
running Tumbleweed installation.

It could be that some feature is broken due to this rules file not being
effective. We should review the security implications and either rename this
file to something like '20-systemd-networkd.rules' and then whitelist it. Or
if it is not strictly needed we should remove or move the file to
/usr/share/doc as an example file.


body:
--1550149066.fDBdEa6f1.31095
Date: Thu, 14 Feb 2019 12:57:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125450

            Bug ID: 1125450
           Summary: yast2-theme-oxygen package is unusable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: opensuse.lietuviu.kalba-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 796825
  --> http://bugzilla.opensuse.org/attachment.cgi?id=796825&action=edit
yast2-theme-oxygen corrected

At the end of 2018 YaST2 theme changed drastically.
Existing yast2-theme-oxygen package is not adequate now –
a lot of icons needs renaming.

I attach re-organized Oxygen icons to reflect recent changes.

summary: yast2-theme-oxygen package is unusable


body:
--1550164634.4Ad77A4.8710
Date: Thu, 14 Feb 2019 17:17:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125487

            Bug ID: 1125487
           Summary: Confusing terminology in release notes
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Release Notes
          Assignee: sknorr-at-suse.com
          Reporter: novell-at-howorth.org.uk
        QA Contact: lnussel-at-suse.com
          Found By: ---
           Blocker: ---

IN the release notes, section 5.2 describes a modified method of choosing the
display manager. Ref
<https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.0/index.html#general>
Unfortunately the notice of this change uses confusing terminology, choosing
the less common term login manager to describe the display manager which is
used elsewhere (e.g. in YaST). This should be corrected or at least explicitly
noted as being an equivalent term.

See https://bugzilla.suse.com/show_bug.cgi?id=1125040 for some discussion of
this and related issues.

summary: Confusing terminology in release notes


--1550239306.7bAdB70.10876
Date: Fri, 15 Feb 2019 14:01:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125605

            Bug ID: 1125605
           Summary: Bug in libpsm2-2 11.2.23 Causes 15s Delay Starting Programs Linked With libpsm2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ron163264-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A known issue in libpsm2 11.2.23 (Intel IFS-10.8.0.0.204) causes a 15s delay
starting programs when there are no hfi1 devices present on the system.
See https://github.com/intel/opa-psm2/issues/33. This issue is present in
Tumbleweed, as I see delay when I try to start MPI programs with Open MPI
mpiexec(1) or mpirun(1).

Looking at https://github.com/intel/opa-psm2/releases it appears release
IFS-10.9.0.0.21 corresponding to PSM2 11.2.77 addresses the issue.
I can only confirm that it's resolved on my systems with the current 11.2.78
builds on Debian Sid and Fedora Rawhide.

The issue causes a 15s delay when mpiexec(1)/mpirun(1) start an MPI program.
It also affects other programs linked to libpsm2. In my case, my MPI programs
run normally, so it's just a nuisance, not a show-stopper.


--1550245247.84BF52D0.15472
Date: Fri, 15 Feb 2019 15:40:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125616

            Bug ID: 1125616
           Summary: [stagnig] syslinux fails to build (objcopy) with binutils 2.32
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Binutils 2.32 has been staged and is making good progress.

One package failing to build in this setup is syslinux (on i586)

The build log ends with:

>[  132s] objdump -h ldlinux.elf > ldlinux.sec
>[  132s] perl lstadjust.pl ldlinux.lsr ldlinux.sec ldlinux.lst
>[  132s] objcopy -O binary ldlinux.elf ldlinux.raw
>[  132s] ../lzo/prepcore ldlinux.raw ldlinux.bin
>[  132s] ../lzo/prepcore: ldlinux.raw: internal error - lzo_init() failed!
>[  132s] make[1]: *** [Makefile:86: ldlinux.bin] Error 1
>[  132s] rm ldlinux.o
>[  132s] make[1]: Leaving directory '/home/abuild/rpmbuild/BUILD/syslinux-4.04/core'
>[  132s] make: *** [Makefile:88: all] Error 2
>[  132s] error: Bad exit status from /var/tmp/rpm-tmp.k5I91R (%build)


body:
--1550255767.e084Ab1.2679
Date: Fri, 15 Feb 2019 18:36:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125624

            Bug ID: 1125624
           Summary: Wrong path for xorg-session.log
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: luca_bi-at-yahoo.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Starting from Tumbleweed snapshot 20190209 the file xorg-session.log appears in
folder like:

~/?`?��U/.local/share/sddm/xorg-session.log

instead of the usual:
~/.local/share/sddm/xorg-session.log

i.e.: a new folder is created under $HOME with a garbled name.

summary: Wrong path for xorg-session.log


--1550406428.B2B34.23373
Date: Sun, 17 Feb 2019 12:27:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125687

            Bug ID: 1125687
           Summary: scp does not accept brace expantion breaking High Availability "crm cluster join"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: vcizek-at-suse.com
          Reporter: arvidjaar-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
                CC: pmonrealgonzalez-at-suse.com
          Found By: ---
           Blocker: ---

I tried to setup pacemaker on current Tumbleweed using "crm cluster init", "crm
cluster join" - it failed with

+ scp root@192.168.1.1:'/etc/csync2/{csync2.cfg,key_hagroup}' /etc/csync2
error: unexpected filename: csync2.cfg
ERROR: Can't retrieve csync2 config from 192.168.1.1

The most likely reason is patch openssh-7.9p1-scp-name-validator.patch, more
precisely:

+                       rc = glob(sinkdata->pattern,
GLOB_ALTDIRFUNC|GLOB_NOSORT, NULL, &gl);
+                       globfree(&gl);
+                       if (rc != 0) {
+                               if (rc == GLOB_NOMATCH)
+                                       run_err("error: unexpected filename:
%s", cp);

While it could be extended with GLOB_BRACE, I wonder what other legitimate
usage patterns are broken (what about GLOB_TILDE)?


body:
--1550427477.F42Ab70.6824
Date: Sun, 17 Feb 2019 18:17:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1125689

            Bug ID: 1125689
           Summary: nghttp2 mistake in spec file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: holgerbruenjes-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

in spec file from nghttp2-1.36.0-1.2.src.rpm and before

the devel package require not the libnghttp2-asio

correct require was libnghttp2

see pkgconfig file

Libs: -L${libdir} -lnghttp2

%package -n %{soname}-devel
Summary:        Development files for nghttp2
Group:          Development/Languages/C and C++
-   Requires:       %{soname_asio}%{sover_asio} = %{version}
+   Requires:       %{soname}%{sover} = %{version}
Provides:       %{name}-devel

summary: nghttp2 mistake in spec file


--1550485924.f261Bb10.21892
Date: Mon, 18 Feb 2019 10:32:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125751

            Bug ID: 1125751
           Summary: VUL-0: CVE-2019-8358: hiawatha: a remote attacker is able to do directory traversal if AllowDotFiles is enabled
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/224892/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: detlef@die-mafia.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: fisiu-at-opensuse.org
          Found By: Security Response Team
           Blocker: ---

CVE-2019-8358

In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal
if AllowDotFiles is enabled.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-8358
https://www.hiawatha-webserver.org/changelog


body:
--1550492759.253B4.30731
Date: Mon, 18 Feb 2019 12:25:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125772

            Bug ID: 1125772
           Summary: GCC 9: autogen build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Using GCC 9 one can see:

$ /bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..
-I.. -I../autoopts  -DPKGDATADIR='"/usr/local/share/autogen"' -g -O2
-Wno-format-contains-nul -fno-strict-aliasing -Wall -Werror -Wcast-align
-Wmissing-prototypes -Wpointer-arith -Wshadow -Wstrict-prototypes
-Wwrite-strings -Wstrict-aliasing=3 -Wextra -Wno-cast-qual -g -O2
-Wno-format-contains-nul -fno-strict-aliasing -c -o libopts_la-libopts.lo `test
-f 'libopts.c' || echo './'`libopts.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I.. -I../autoopts
-DPKGDATADIR=\"/usr/local/share/autogen\" -g -O2 -Wno-format-contains-nul
-fno-strict-aliasing -Wall -Werror -Wcast-align -Wmissing-prototypes
-Wpointer-arith -Wshadow -Wstrict-prototypes -Wwrite-strings
-Wstrict-aliasing=3 -Wextra -Wno-cast-qual -g -O2 -Wno-format-contains-nul
-fno-strict-aliasing -c libopts.c  -fPIC -DPIC -o .libs/libopts_la-libopts.o
In file included from autoopts.c:42,
                 from libopts.c:22:
In function ‘canonicalize_pathname’,
    inlined from ‘option_pathfind.constprop’ at ../compat/pathfind.c:88:32:
../compat/pathfind.c:214:17: error: ‘strcpy’ accessing 1 byte at offsets [0,
9223372036854775807] and [0, 9223372036854775807] may overlap 1 byte at offset
0 [-Werror=restrict]
  214 |                 strcpy( result + start + 1, result + i + 2 );
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

It's analyzed here:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88973

and it looks it's a real issue.

summary: GCC 9: autogen build fails


--1550498853.db8b400.24367
Date: Mon, 18 Feb 2019 14:07:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125785

            Bug ID: 1125785
           Summary: [Build 20190217] openQA test fails in machinery, no machinery-helper available for the remote system architecture aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/857314/modules/machi
                    nery/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-aarch64-extra_tests_in_textmode@aarch64 fails in
[machinery](https://openqa.opensuse.org/tests/857314/modules/machinery/steps/18)

## Test suite description
Maintainer: okurz-at-suse.de

Mainly console extratest.

## Reproducible

Fails since (at least) Build
[20181018](https://openqa.opensuse.org/tests/778961)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?test=extra_tests_in_textmode&arch=aarch64&version=Tumbleweed&flavor=DVD&distri=opensuse&machine=aarch64)


body:
--1550508078.efd41.27914
Date: Mon, 18 Feb 2019 16:41:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125819

            Bug ID: 1125819
           Summary: YaST2 fonts - Internal error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 797090
  --> http://bugzilla.opensuse.org/attachment.cgi?id=797090&action=edit
y2log

openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-yast2_gui@aarch64 fails
in
[yast2_control_center](https://openqa.opensuse.org/tests/857564/modules/yast2_control_center/steps/68)

y2log attached. Relevant part is probably:

YCP_UI.cc(SetApplicationTitle):1722 Setting application title to '"YaST2 -
fonts @ susetest"'
2019-02-18 09:25:25 <1> susetest(16018) [Interpreter] bin/y2start:62 Calling
YaST client fonts
2019-02-18 09:25:25 <1> susetest(16018) [Ruby] yast/wfm.rb:308 Call client
/usr/share/YaST2/clients/fonts.rb
2019-02-18 09:25:25 <2> susetest(16018) [Ruby] yast/builtins.rb:586 tostring
builtin called on wrong type Class
2019-02-18 09:25:25 <3> susetest(16018) [Ruby] yast/wfm.rb:253 Client
/usr/share/YaST2/clients/fonts.rb failed with 'cannot load such file --
yast/fontconfig_setting' (LoadError).
Backtrace:
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/share/YaST2/lib/fonts/fpl-add-dialog.rb:4:in `<top (required)>'
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/share/YaST2/lib/fonts/fonts-dialog.rb:10:in `<top (required)>'
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/lib64/ruby/2.6.0/rubygems/core_ext/kernel_require.rb:54:in `require'
/usr/share/YaST2/clients/fonts.rb:4:in `<top (required)>'
/usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:313:in `eval'
/usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:313:in `run_client'
/usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:206:in `call_builtin'
/usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:206:in `call_builtin_wrapper'
/usr/lib64/ruby/vendor_ruby/2.6.0/yast/wfm.rb:195:in `CallFunction'
/usr/lib/YaST2/bin/y2start:62:in `<main>'
2019-02-18 09:25:25 <3> susetest(16018) [Ruby] yast/wfm.rb:276 Internal error.
Please report a bug report with logs

summary: YaST2 fonts - Internal error


body:
Build Identifier:

Setting
security_driver = "apparmor"
in /etc/libvirt/qemu.conf or enabling apparmor individually per domain leads to
error with libvirt 5:
Security driver apparmor not enabled

Reproducible: Always

Steps to Reproduce:
1. Set apparmor as security driver in /etc/libvirt/qemu.conf .
2. Use libvirt to start QEMU domain.
Actual Results:
Error:
Security driver apparmor not enabled
Failed to initialize security drivers
Initialization of QEMU state driver failed: internal error: Failed to
initialize security drivers

Expected Results:
Domain would start and be confined by AppArmor as it used to be before libvirt
5.

summary: AppArmor security driver not enabled for QEMU in libvirt


body:
--1550584216.4e304.24749
Date: Tue, 19 Feb 2019 13:50:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1125949

            Bug ID: 1125949
           Summary: Drop from install media, tidy up pattern+system-role names and descriptions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We don't use docker heavily on Kubic, but currently we carry complex patterns
with complex dependencies to support swappable container runtimes, which we
dont test

Also, podman/cri-o don't currently work well together. Even when upstream fix
the various issues needed there, podman/cri-o will always have the risk of
clashing with their CNI configuration unless a kubernetes user has a podman
compatible CNI installation

As CNI is not currently in scope of what we setup in Kubic, this means the
current kubeadm system role actually can install a broken configuration by
default. So podman/cri-o should not be installed together by default

So, time to simplify

Things to change

* alt-container-runtime pattern should be removed
* container-runtime pattern should include podman and its cni config only
* container-runtime-kubernetes should be created with cri-o and it's kubeadm
CRI config only
* microos system role should use container-runtime
* kubeadm system role should use container-runtime-kubernetes
* system role descriptions should be corrected accordingly
* images should be corrected to match the above
* Users will be able to install docker in parallel/alternative to either using
transactional-update pkg rm/in. This needs to be documented

pkgs: openSUSE-MicroOS patterns-caasp


--1550630897.2fFb4.13476
Date: Wed, 20 Feb 2019 02:48:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126011

            Bug ID: 1126011
           Summary: M17N/ibus: Remove Supplements: libreoffice
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: ftake-at-geeko.jp
          Reporter: maurizio.galli-at-gmail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
                CC: i-at-marguerite.su
          Found By: ---
           Blocker: ---

Please consider removing Supplements: libreoffice.

ibus is already installed by default with Japanese, Chinese and Korean
languages, thus libreoffice reverse dependency becomes redundant.

Having libreoffice as reverse dependency has the consequence of being installed
on every system installing Libreoffice, and in many cases it is not a required
tool.

I would consider it an option for such users to install themselves, if they
need an input method.


--1550680900.0cbDCb860.29497
Date: Wed, 20 Feb 2019 16:41:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1126131

            Bug ID: 1126131
           Summary: Reduce click noise on Dell Precision 5820
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The headphone output on Dell Precision 5820 desktop gives a loud click noise at
each time the stream is resumed.

The noise can be reduced by suppressing the pin widget clearance procedure at
suspending, as recently submitted to the upstream.


body:
--1550749530.A52663cb0.10187
Date: Thu, 21 Feb 2019 11:45:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1126269

            Bug ID: 1126269
           Summary: qutebrowser: missing PyQtWebEngine
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: yellowhat46-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,
with the recent update of PyQt to 5.12, in order, for qutebrowser, to use the
QtWebEngine the package PyQtWebEngine is required.

This is the reference issuee raised on qutebrowser:
https://github.com/qutebrowser/qutebrowser/issues/4601

Thanks

summary: qutebrowser: missing PyQtWebEngine


body:
--1550784160.1Eca677b0.595
Date: Thu, 21 Feb 2019 21:22:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1126363

            Bug ID: 1126363
           Summary: luajit not supported on ppc64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I noticed that luajit is not built for ppc64 and there are patches that fix it.

What is luajit used for, exactly?

As in is there any value in trying to make it work?

summary: luajit not supported on ppc64


--1550790847.BC182250.30517
Date: Thu, 21 Feb 2019 23:14:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126377

            Bug ID: 1126377
           Summary: Samba AppArmor sniplet no longer updated - script needs a patch
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Samba
          Assignee: samba-maintainers@SuSE.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: samba-maintainers@SuSE.de
          Found By: ---
           Blocker: ---

Created attachment 797536
  --> http://bugzilla.opensuse.org/attachment.cgi?id=797536&action=edit
patch for update-apparmor-samba-profile

I got a question/report from the Debian Samba maintainer that the
update-apparmor-samba-profile script no longer works, see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896080

This is caused by the switch to named AppArmor profiles (see the Debian
bugreport for technical details), and needs an update for the script.

Please apply the attached patch to update-apparmor-samba-profile script in
Tumbleweed and Leap 15.x. The patch is backwards-compatible so that the script
works with the old and the new AppArmor profile naming.

If the script is maintained upstream, please also push my patch upstream.


body:
--1550829720.57240.21904
Date: Fri, 22 Feb 2019 10:02:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126449

            Bug ID: 1126449
           Summary: php7: wrong time displayed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: suse+build@de-korte.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I run a Horde installation on a openSUSE Tumbleweed. Up to and including
php-7.3.1 time was displayed properly in the calendar application (Kronolith)
that comes with Horde. After the upgrade to php-7.3.2, existing events are
shown with a 2 hour offset. After some experimentation I have come to the
conclusion that this is caused by an openSUSE modification with the
'php7-systzdata-v17.patch'. With the patch applied the displayed time is wrong,
without it the time is correct.

Possibly related, with the patch applied I see frequent segfaults (several
times per hour) in php-fpm like the following:

[21-Feb-2019 23:02:04] WARNING: [pool www] child 33612 exited on signal 11
(SIGSEGV) after 4218.979829 seconds from start

This is with timezone (in php.ini) set to 'Europe/Amsterdam' with a load of
just a handful of users. Without the patch, no segfaults, which leads me to
believe there might be a relation. There were no problems with php-7.3.1 (time
was displayed correctly and no segfaults).

summary: php7: wrong time displayed


--1550835404.FDc8fF3.15978
Date: Fri, 22 Feb 2019 11:36:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126480

            Bug ID: 1126480
           Summary: nouveau crashes and locks up system (on laptop with optimus)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: josua.m@t-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I just tried Leap 15.1 Build 416.2 on my laptop and found and have seriosu
issues with reliability.

After an undetermined time, the system will lock up completely, finally even
unable to move mouse pointer around.

dmesg shows plenty of call traces from nouveau, please see attached log file.

1. The issue appears to go away when passing nouveau.modeset=0 to cmdline - but
also renders the nvidia gpu unusable at runtime. Well, at least the system is
stable then ...
2. DRI_PRIME=1 glxinfo hangs up

This issue appears related to #1123900 which has been closed recently.

If there is something I can do to resolve this, please let me know.


--1550839384.7dd20.24805
Date: Fri, 22 Feb 2019 12:43:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126496

            Bug ID: 1126496
           Summary: [doc] Syntax about packages modifying /var or /srv
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Release Notes
          Assignee: sknorr-at-suse.com
          Reporter: santiago.zarate-at-suse.com
        QA Contact: lnussel-at-suse.com
          Found By: ---
           Blocker: ---

1.1  Using Atomic Updates With the System Role Transactional Server

https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.1/#sec.install.transactional-server-role

Message reads:

> Note: Incompatible Packages
>
>Some packages modify the contents of /var or /srv in their RPM %post scripts.
> These packages are incompatible. If you happen upon such package, file a bug report.

However "If you happen upon such package" seems a bit odd, I suggest that part
being changed to: "If you happen to find packages doing this..." or something
similar.


--1550842847.42C8c0.14730
Date: Fri, 22 Feb 2019 13:40:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126499

            Bug ID: 1126499
           Summary: Use the same spec and changes files for libxml2 and python-libxml2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: pmonrealgonzalez-at-suse.com
          Reporter: jdelvare-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently we maintain separate spec and changes files for the python-libxml2
package, although it is built from the same sources as, and shares the source
package of, libxml2. There are several reasons why having a single spec file
would be beneficial:

* It avoids unpacking, patching, configuring and building the same source tree
twice, which is bad for the Build Service performance.
* It avoids the risk of incompatible configure options between the packages.
* It avoids the risk that some of the patches are accidentally not applied to
either package while they would have been needed.

Additionally, having a single changes file would avoid customer concerns about
which security bugs (CVE) are fixed or not. See bug #1123919. While not listing
CVEs in a package not affected by them does make sense from a technical
perspective, doing so does not integrate well with our tools. If our web site
says that a package is affected by a CVE then that CVE should be listed in the
changes file of that package once the bug has been fixed.


--1551133178.1cBaA0.28171
Date: Mon, 25 Feb 2019 22:19:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1126907

            Bug ID: 1126907
           Summary: LLVM requires patching to prevent a rustc crash when building Firefox
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jones_ld-at-protonmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

LLVM 7 has a bug in the discriminator code which causes a crash in rustc when
building Firefox (and many other projects).

The patches required are here, along with the discussion:
https://github.com/rust-lang/rust/issues/57762#issuecomment-456155466


--1551196389.aD7466470.4445
Date: Tue, 26 Feb 2019 15:53:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127043

            Bug ID: 1127043
           Summary: [Build 20190225] LXQt fails to pick a WM
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/863145/modules/reboo
                    t_icewm/steps/8
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LXDE
          Assignee: andrea-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_lxqt@64bit fails
in
[reboot_icewm](https://openqa.opensuse.org/tests/863145/modules/reboot_icewm/steps/8)

## Test suite description

## Reproducible

Fails since (at least) Build
[20190225](https://openqa.opensuse.org/tests/863145) (current job)

## Expected result

Last good: [20190224](https://openqa.opensuse.org/tests/862200) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?test=otherDE_lxqt&arch=x86_64&version=Tumbleweed&flavor=NET&distri=opensuse&machine=64bit)

This bug already existed in the past, see bug#1099800 for reference


--1551211090.823a3.16396
Date: Tue, 26 Feb 2019 19:58:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127073

            Bug ID: 1127073
           Summary: /usr/{bin,sbin}/dnsmasq profile name alternation breaks libvirt
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
                CC: jfehlig-at-suse.com, rgoldwyn-at-suse.com
          Found By: ---
           Blocker: ---

Got this report by mail:

The /usr/{bin,sbin}/dnsmasq profile name alternation that was added in the
latest AppArmor releases breaks libvirt:

type=AVC msg=audit(1551204355.326:125): apparmor="DENIED" operation="signal"
profile="libvirtd" pid=3951 comm="libvirtd" requested_mask="send"
denied_mask="send" signal=kill peer="/usr/{bin,sbin}/dnsmasq"

type=AVC msg=audit(1551204355.326:126): apparmor="DENIED" operation="signal"
profile="/usr/{bin,sbin}/dnsmasq" pid=3951 comm="libvirtd"
requested_mask="receive" denied_mask="receive" signal=kill peer="libvirtd"

The libvirtd profile allows   peer=/usr/sbin/dnsmasq   and everybody thought
that this will also allow the "correct half" of the alternation - but sadly in
practise it doesn't work.

I'll submit updated packages to Tumbleweed and ask Goldwyn to apply the needed
patch to the SLE/Leap 15 package.


--1551301136.c38C160C1.24177
Date: Wed, 27 Feb 2019 20:58:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127260

            Bug ID: 1127260
           Summary: Internal compiler error when trying to build VTK 8.2.0
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 798338
  --> http://bugzilla.opensuse.org/attachment.cgi?id=798338&action=edit
Preprocessed code

G++ fails with the following message:
---
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Filters/Extraction/vtkValueSelector.cxx:
In instantiation of 'void
{anonymous}::ArrayValueMatchFunctor::operator()(InputArrayType*,
SelectionListArrayType*) [with InputArrayType = vtkAOSDataArrayTemplate<char>;
SelectionListArrayType = vtkAOSDataArrayTemplate<char>]':
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Common/Core/vtkArrayDispatch.txx:160:13:
 required from 'static bool
vtkArrayDispatch::impl::Dispatch2Trampoline<Array1T, vtkTypeList::TypeList<U,
Tail> >::Execute(Array1T*, vtkDataArray*, Worker&) [with Worker =
{anonymous}::ArrayValueMatchFunctor; Array1T = vtkAOSDataArrayTemplate<char>;
Array2Head = vtkAOSDataArrayTemplate<char>; Array2Tail =
vtkTypeList::NullType]'
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Common/Core/vtkArrayDispatch.txx:215:33:
 required from 'static bool
vtkArrayDispatch::impl::Dispatch2Same<vtkTypeList::TypeList<T, Tail>,
ArrayList2>::Execute(vtkDataArray*, vtkDataArray*, Worker&) [with Worker =
{anonymous}::ArrayValueMatchFunctor; ArrayHead = vtkAOSDataArrayTemplate<char>;
ArrayTail = vtkTypeList::TypeList<vtkAOSDataArrayTemplate<double>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<float>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long long int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<short int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<signed char>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<unsigned char>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long long unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<short unsigned int>,
vtkTypeList::NullType> > > > > > > > > > > >; ArrayList2 =
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<char>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<double>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<float>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long long int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<short int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<signed char>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<unsigned char>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<long long unsigned int>,
vtkTypeList::TypeList<vtkAOSDataArrayTemplate<short unsigned int>,
vtkTypeList::NullType> > > > > > > > > > > > >]'
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Common/Core/vtkArrayDispatch.txx:640:31:
 required from 'static bool
vtkArrayDispatch::Dispatch2BySameValueType<ValueTypeList>::Execute(vtkDataArray*,
vtkDataArray*, Worker&) [with Worker = {anonymous}::ArrayValueMatchFunctor;
ValueTypeList = vtkTypeList::TypeList<double, vtkTypeList::TypeList<float,
vtkTypeList::TypeList<char, vtkTypeList::TypeList<int,
vtkTypeList::TypeList<long int, vtkTypeList::TypeList<long long int,
vtkTypeList::TypeList<short int, vtkTypeList::TypeList<signed char,
vtkTypeList::TypeList<unsigned char, vtkTypeList::TypeList<unsigned int,
vtkTypeList::TypeList<long unsigned int, vtkTypeList::TypeList<long long
unsigned int, vtkTypeList::TypeList<short unsigned int, vtkTypeList::NullType>
> > > > > > > > > > > >]'
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Filters/Extraction/vtkValueSelector.cxx:362:76:
  required from here
/home/abuild/rpmbuild/BUILD/VTK-8.2.0/Filters/Extraction/vtkValueSelector.cxx:123:50:
internal compiler error: in lookup_template_class_1, at cp/pt.c:9459
---

Affected: TW/Factory, x86_64, aarch64
https://build.opensuse.org/project/monitor/home:StefanBruens:branches:science?utf8=%E2%9C%93&commit=Filter%3A&unresolvable=0&pkgname=vtk&defaults=1

gcc version 8.2.1 20190204 [gcc-8-branch revision 268513] (SUSE Linux)

Preprocessed output (attached) fails to build, e.g. g++ -o /tmp/o.o -c
vtkValueSelector.cxx


--1551349879.C86f70.19685
Date: Thu, 28 Feb 2019 10:31:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127328

            Bug ID: 1127328
           Summary: python2-virtualenv missing setuptools dependency
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: comurphy-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The python2-virtualenv package is broken on the Leap 15.1 beta:

http://paste.opensuse.org/view/95342135

Using it fails with "ImportError: No module named pkg_resources". Installing
python-setuptools fixes it.


--1551352242.566BC1A5.7837
Date: Thu, 28 Feb 2019 11:10:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127341

            Bug ID: 1127341
           Summary: VUL-1: CVE-2019-9215: malformed headers lead to invalid memory access in the parseAuthorizationHeader function
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/225442/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: Mathias.Homann-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: crrodriguez-at-opensuse.org, davejplater-at-gmail.com,
                    jjolly-at-suse.com, mseben-at-gmail.com, ohering-at-suse.com,
                    pascal.bleser-at-opensuse.org, plinnell-at-opensuse.org,
                    prusnak-at-opensuse.org, pth-at-suse.com, sbrabec-at-suse.com,
                    seife-at-novell.slipkontur.de, sreeves-at-suse.com,
                    tchvatal-at-suse.com, tiwai-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9215

In Live555 before 2019.02.27, malformed headers lead to invalid memory access
in
the parseAuthorizationHeader function.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9215
http://www.live555.com/liveMedia/public/changelog.txt


--1551352914.ffFc350.16812
Date: Thu, 28 Feb 2019 11:21:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127343

            Bug ID: 1127343
           Summary: VUL-1: CVE-2019-9211: reachable assertion in write_long_string_missing_values() in data/sys-file-writer.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/225439/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: opensuse.lietuviu.kalba-at-gmail.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: blp-at-cs.stanford.edu
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9211

There is a reachable assertion abort in the function
write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in
GNU
PSPP 1.2.0 that will lead to denial of service.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1683499
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9211


--1551365806.Ae6B4.23517
Date: Thu, 28 Feb 2019 14:56:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127387

            Bug ID: 1127387
           Summary: systemd-tmpfiles need updating from /var/run/* to /run/*
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: studio-at-anchev.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

STR:

# journalctl -b | grep "var/run" | grep -i "please update"

The output of the command suggests that multiple services need update of the
path. One example (of many):

[/usr/lib/tmpfiles.d/mariadb.conf:1] Line references path below legacy
directory /var/run/, updating /var/run/mysql → /run/mysql; please update the
tmpfiles.d/ drop-in file accordingly


--1551530126.e58EdE0.11572
Date: Sat, 2 Mar 2019 12:35:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127602

            Bug ID: 1127602
           Summary: VUL-0: CVE-2019-5786: chromium: Use-after-free in FileReader
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html

Fixed in Chromium 72.0.3626.121:
CVE-2019-5786: Use-after-free in FileReader

https://crbug.com/936448
https://chromium.googlesource.com/chromium/src/+/150407e8d3610ff25a45c7c46877333c4425f062
https://chromium.googlesource.com/chromium/src/+/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449


body:
--1551618538.D5dE73.3302
Date: Sun, 3 Mar 2019 13:08:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127613

            Bug ID: 1127613
           Summary: no wifi on raspberry 3B+
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: per-at-computer.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have installed TW on a raspberry 3B+ using the KDE appliance.  It came up
without a wlan interface - I ran a zypper dup, still no wlan. I found the
following in in dmesg:

[   19.191508] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio
for chip BCM4345/6
[   19.192794] usbcore: registered new interface driver brcmfmac
[   19.233451] brcmfmac mmc1:0001:1: Direct firmware load for
brcm/brcmfmac43455-sdio.txt failed with error -2

bcm43xx-firmware is installed, but :

# l /lib/firmware/brcm/brcmfmac43455-sdio*
-rw-r--r

summary: no wifi on raspberry 3B+


--1551629085.14F7f3.15862
Date: Sun, 3 Mar 2019 16:04:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1127616

            Bug ID: 1127616
           Summary: Realtek RTS522A / rtsx_pci SD card reader does not work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: v-at-robolab.it
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I'm using openSUSE Leap 15 distribution but the latest stable kernel from
Tumbleweed repository - version 4.20.10-1-default.
The computer is Lenovo Thinkpad X260, and the cards tested are Sandisk SDXC
"Extreme Pro" 64 GB and Kingston SDHC class 4, 8 GB.

The required kernel module is loaded:

> # lsmod|grep rts
> rtsx_pci_sdmmc         32768  0
> rtsx_pci_ms            24576  0
> rtsx_pci               77824  2 rtsx_pci_sdmmc,rtsx_pci_ms
> memstick               20480  1 rtsx_pci_ms
> mmc_core              172032  1 rtsx_pci_sdmmc

but the SD card (Sandisk) does not mount:

> # dmesg -C
> ## inserted SD card
> # dmesg
> [12653.006313] mmc0: cannot verify signal voltage switch
> [12653.134624] mmc0: new ultra high speed SDR104 SDXC card at address e624

and that's it - no partitions detected and no more output, except when I remove
the SD card one more line appears in dmesg: "mmc0: card e624 removed".

The Kingston card creates a bit different output:

> [12779.245891] mmc0: new high speed SDHC card at address 0007

- nothing about the voltage.

The driver "rtsx_pci" was loaded automatically during boot:

> # lspci -nnk |grep -A3 522
> 02:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. RTS522A PCI Express Card Reader [10ec:522a] (rev 01)
>         Subsystem: Lenovo Device [17aa:504a]
>         Kernel driver in use: rtsx_pci
>         Kernel modules: rtsx_pci

I have tried the latest Leap 15 kernel version 4.12.14-lp150.12.48-default and
SD card reader does not work there too.

Also I saw in another bug report
(https://bugzilla.opensuse.org/show_bug.cgi?id=927749) that it could work if I
boot the computer with the SD card inserted, I have tried it with both kernels
and it still does not work:

4.12.14-lp150.12.48-default
> # dmesg|grep mmc
> [    5.518009] mmc0: cannot verify signal voltage switch
> [    5.652845] mmc0: new ultra high speed SDR104 SDXC card at address e624

4.20.10-1-default
> # dmesg|grep mmc
> [    6.105310] mmc0: cannot verify signal voltage switch
> [    6.239035] mmc0: new ultra high speed SDR104 SDXC card at address e624

[BTW note that 4.20.10-1-default is half a second slower to boot :) ]