body:
--1519059541.E48b50.30039
Date: Mon, 19 Feb 2018 16:59:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081631

            Bug ID: 1081631
           Summary: VUL-0: leptonica:  Unbound memory access
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200341/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: lazy.kent-at-opensuse.org
          Reporter: kbabioch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
        Depends on: 1081576
          Found By: Security Response Team
           Blocker: ---

prog/htmlviewer: Catch unbound memory access (CID 1386222)

rootname can have any size, so limit the amount of copied bytes.

References:
https://github.com/DanBloomberg/leptonica/commit/c1079bb8e77cdd426759e466729917ca37a3ed9f

summary: VUL-0: leptonica:  Unbound memory access


--1519107961.3F3d14aC3.4457
Date: Tue, 20 Feb 2018 06:26:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081673

            Bug ID: 1081673
           Summary: [HPC, pdsh]  Please each 'host list' module in a separate package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: hpc-maintainer-bugs-at-forge.provo.novell.com
          Found By: Development
           Blocker: ---

pdsh has multiple modules determining the 'host list' these have conflicting
options. Since there is no way of explicitly pick a module and 'fist one wins'
policy is not really transparent to the user (or even well defined), package
each one separately with proper 'Conflicts:'.


--1519116774.4bAf08C0.4274
Date: Tue, 20 Feb 2018 08:52:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081694

            Bug ID: 1081694
           Summary: VUL-1: CVE-2017-11546,CVE-2017-11547,CVE-2017-11549: timidity: Multiple vulnerabilities
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200410/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tiwai-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

http://seclists.org/fulldisclosure/2017/Jul/83

CVE-2017-11546: The insert_note_steps function in readmidi.c in TiMidity++
2.14.0 allows remote attackers to cause a denial of service (divide-by-zero
error and application crash) via a crafted mid file. NOTE: a crash might be
relevant when using the --background option.

CVE-2017-11547: The resample_gauss function in resample.c in TiMidity++ 2.14.0
allows remote attackers to cause a denial of service (heap-based buffer
over-read) via a crafted mid file. NOTE: a crash might be relevant when using
the --background option. NOTE: the TiMidity++ README.alsaseq documentation
suggests a setuid-root installation.

CVE-2017-11549: The play_midi function in playmidi.c in TiMidity++ 2.14.0
allows remote attackers to cause a denial of service (large loop and CPU
consumption) via a crafted mid file. NOTE: CPU consumption might be relevant
when using the --background option.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1480637
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11546
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11547
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11549
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-11546.html
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-11547.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11549


--1519120798.f8c6c31.23781
Date: Tue, 20 Feb 2018 09:59:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081707

            Bug ID: 1081707
           Summary: Dependency problem with python-virtualenv
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mbuil-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After installing python-virtualenv with zypper and trying to run it, I get the
following error:

http://susepaste.org/33532581

That error disappears when I 'zypper in python' and execute it again


body:
--1519133059.ebED14.20719
Date: Tue, 20 Feb 2018 13:24:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081750

            Bug ID: 1081750
           Summary: python tarfile uses random order
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tchvatal-at-suse.com
            Blocks: 1041090
          Found By: Development
           Blocker: ---

There are various Factory packages that use the obs_scm service
to generate source tarballs at build time.
However, https://github.com/python/cpython/pull/2263
is only accepted into python-3.7
so packages like obs-service-product_converter
still produce different build results every time.

IMHO we should do a backport of the patch.
Upstream python was afraid that users might rely on files being handled in
(unpredictable) filesystem order.

summary: python tarfile uses random order


body:
--1519135833.1DcE0.478
Date: Tue, 20 Feb 2018 14:10:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081760

            Bug ID: 1081760
           Summary: add lightdm to x11 pattern
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: lnussel-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the x11 pattern doesn't specify a displaymanager explicitly so due to
dependencies ends up with xdm which is rather basic. Let's pull in lightdm for
better user experience.

summary: add lightdm to x11 pattern


--1519152366.b4ab50.27057
Date: Tue, 20 Feb 2018 18:46:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1081856

            Bug ID: 1081856
           Summary: virtualbox-vnc should require libvncserver
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: mnowak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

VirtualBox fails to start VM configured with VNC extension pack if libvncserver
is not installed:

VBoxManage: error: Could not find the VirtualBox Remote Desktop Extension
library
VBoxManage: error: Details: code NS_ERROR_FAILURE (0x80004005), component
ConsoleWrap, interface IConsole

Installing libvncserver0 RPM package make the problem go away and VM starts
just fine.


--1519181129.f0603A01.22860
Date: Wed, 21 Feb 2018 02:45:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081899

            Bug ID: 1081899
           Summary: package hylafax should create user and group uucp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

After I perform a standard installation that includes also the package hylafax+
I found this warning message repeated several times in /var/log/zypp/history:

# 2018-02-20 18:18:50 hylafax+-5.5.9-lp150.1.12.x86_64.rpm installed ok
# Additional rpm output:
# warning: user uucp does not exist - using root
# warning: group uucp does not exist - using root
......
# warning: user uucp does not exist - using root
# warning: group uucp does not exist - using root
#
2018-02-20
18:18:50|install|hylafax+|5.5.9-lp150.1.12|x86_64|root@host1|repo|85f15d43939867359932d43fa0f658b5302b1ceac10955455405e653aa3b7288|

The postinstall scriptlet requires user/group uucp, but such user/group does
not exist.

A possible fix is to add the following lines in the spec file:

 Requires:       sharutils
 Requires:       tiff
+Requires(post): user(uucp)
+Requires(post): group(uucp)
 Conflicts:      hylafax < 30.0.0


body:
--1519204552.ED73F1E40.14384
Date: Wed, 21 Feb 2018 09:15:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1081947

            Bug ID: 1081947
           Summary: PAM module pam_keyinit is still not included in the PAM stack
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Bug #1045886 revealed the lack of the integration of the PAM module
"pam_keyinit".

The pam_keyinit PAM module ensures that the invoking process has a session
keyring other than the user default session keyring. The created session
keyring will be linked to the user keyring.

Even if it currently works without the integration of "pam_keyinit", in this
case the user session keyring is used as fallback, it's strongly recommended to
use a session-keyring instead especially for root user, see man
user-session-keyring(7).

That would also has the benefit to re-enable the keyring support in systemd
where each system service gets its own session keyring automatically not linked
with the user-keyring (the root one).

pam-config gained support for the configuration of pam_keyinit recently [1] but
it's still not used and therefore pam_keyinit is still not integrated in the
PAM stack.

[1] https://build.opensuse.org/request/show/565816

pkgs: systemd util-linux


--1519216562.Ee47bfc4.19834
Date: Wed, 21 Feb 2018 12:36:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082002

            Bug ID: 1082002
           Summary: uwsgi: service fails to start because hard-coded user wwwrun does not exist
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: nsinger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Scenario:

I want to run some python application behind a reverse proxy. For that I
install the following packages: nginx, uwsgi-python3, uwsgi

Problem:

If you try to start uwsgi by its service-file (systemctl start uwsgi) the
startup fails:

"Process: 4794 ExecStartPre=/usr/bin/install -d -o wwwrun -g www -m 0755
/run/uwsgi (code=exited, status=1/FAILURE)"

After trying to execute the install command on my own I get a message that the
user wwwrun does not exist - indeed, this user never got installed. Also the
group www does not exist.

The install command is hard-coded in /usr/lib/systemd/system/uwsgi.service as
ExecStartPre.
Starting uwsgi by using the "ExecStart" command works just fine.

Expected behavior:

uwsgi does not depend on apache (I guess that's where wwwrun:www comes from) at
all. The service should also be usable without these users available (nginx
provides e.g. nginx:nginx).


--1519220635.C18fBfF0.31341
Date: Wed, 21 Feb 2018 13:43:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082023

            Bug ID: 1082023
           Summary: git send-email fails to authenticate with SMTP server
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

With current Tumbleweed git send-email fails to authenticate with the SMTP
server. This used to work. since I rarly use git send-email I cant say when it
started. The username/password combination works with mutt.

Send this email? ([y]es|[n]o|[q]uit|[a]ll): y
Net::SMTP>>> Net::SMTP(3.10)
Net::SMTP>>>   Net::Cmd(3.10)
Net::SMTP>>>     Exporter(5.72)
Net::SMTP>>>   IO::Socket::IP(0.38)
Net::SMTP>>>     IO::Socket(1.38)
Net::SMTP>>>       IO::Handle(1.36)
Net::SMTP=GLOB(0x55b5df986d00)<<< 220 smtp.strato.de ESMTP RZmta (P7 -)
Net::SMTP=GLOB(0x55b5df986d00)>>> EHLO sender
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-smtp.strato.de greets
2001:a62:816:91ff:a572:884d:f51d:1a86
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-ENHANCEDSTATUSCODES
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-PIPELINING
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-8BITMIME
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-DELIVERBY
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-SIZE 104857600
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-STARTTLS
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-BURL imap
Net::SMTP=GLOB(0x55b5df986d00)<<< 250-CHUNKING
Net::SMTP=GLOB(0x55b5df986d00)<<< 250 HELP
Net::SMTP=GLOB(0x55b5df986d00)>>> STARTTLS
Net::SMTP=GLOB(0x55b5df986d00)<<< 220 Ready to start TLS
Net::SMTP::_SSL=GLOB(0x55b5df986d00)>>> EHLO sender
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-smtp.strato.de greets
2001:a62:816:91ff:a572:884d:f51d:1a86
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-ENHANCEDSTATUSCODES
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-PIPELINING
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-8BITMIME
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-DELIVERBY
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-SIZE 104857600
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN
PLAIN
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-BURL imap
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-CHUNKING
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250 HELP
Net::SMTP::_SSL=GLOB(0x55b5df986d00)>>> EHLO sender
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-smtp.strato.de greets
2001:a62:816:91ff:a572:884d:f51d:1a86
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-ENHANCEDSTATUSCODES
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-PIPELINING
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-8BITMIME
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-DELIVERBY
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-SIZE 104857600
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN
PLAIN
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-BURL imap
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250-CHUNKING
Net::SMTP::_SSL=GLOB(0x55b5df986d00)<<< 250 HELP
Net::SMTP::_SSL=GLOB(0x55b5df986d00)>>> AUTH DIGEST-MD5
...


body:
--1519223412.E06B26.12472
Date: Wed, 21 Feb 2018 14:30:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082033

            Bug ID: 1082033
           Summary: X11:XOrg/xdm firewall configuration changes
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

"We are currently in the process of switching the default firewall from
SuSEfirewall2 to firewalld for SLE-15 and Leap-15. firewalld ships a
bulk of predefined network services already. The xdmcp service is not
covered by this.

We could submit a xdmcp firewalld service file to upstream, but only for
the xdmcp port 177. The other ports starting from 6000 are actually
X-Server ports (one per display). The selection of 6000 - 6005 is
somewhat arbitrary. If we want to keep it that way it is better to add a
custom firewalld service file to the xdm package.

There are some instructions on how to do this here:

https://en.opensuse.org/Firewalld/RPM_Packaging

Port ranges can be defined in the XML like this:

<port protocol="tcp" port="138-139"/>

You can/should keep the SuSEfirewall2 service file in the package (for
Factory/Tumbleweed) to keep it working until we decide to completely
drop it."

pkgs: firewalld xdm


--1519232716.1e4c637D7.10890
Date: Wed, 21 Feb 2018 17:05:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082063

            Bug ID: 1082063
           Summary: start-ntpd passes invalid command line flag `-l' to modprobe(8)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: archie.cobbs-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

My system has:

ntp-4.2.8p10-30.1.x86_64
kmod-compat-17-13.1.x86_64

The ntp package contains /usr/sbin/start-ntpd which has this on line 63:

      if test -z "$(/sbin/modprobe -l rtc_cmos)" ; then

However, "-l" is not a valid flag for modprobe(8), so this results in an error:

systemctl status -l ntpd
● ntpd.service - NTP Server Daemon
   Loaded: loaded (/usr/lib/systemd/system/ntpd.service; enabled; vendor
preset: disabled)
  Drop-In: /run/systemd/generator/ntpd.service.d
           └─50-insserv.conf-$time.conf
   Active: active (running) since Wed 2018-02-21 09:39:20 CST; 1h 21min ago
     Docs: man:ntpd(1)
  Process: 25240 ExecStart=/usr/sbin/start-ntpd start (code=exited,
status=0/SUCCESS)
 Main PID: 25267 (ntpd)
    Tasks: 2 (limit: 512)
   CGroup: /system.slice/ntpd.service
           ├─25267 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -c
/etc/ntp.conf
           └─25268 ntpd: asynchronous dns resolver

Feb 21 09:39:20 demo start-ntpd[25240]: Time synchronized with time1.google.com
Feb 21 09:39:20 demo start-ntpd[25240]: /sbin/modprobe: invalid option


body:
--1519238024.6dc40.11690
Date: Wed, 21 Feb 2018 18:33:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082090

            Bug ID: 1082090
           Summary: bitlbee needs too many dependencies
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: nikola.pajkovsky-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

bitlbee installs too many packages as dependencies, which is wrong for daemon.
I definitely don't want to install NetworkManager-*, dnsmasq and others.

$ zypper in bitlbee

The following application is going to be installed:
  NetworkManager

The following 152 NEW packages are going to be installed:
  avahi-autoipd bitlbee cyrus-sasl cyrus-sasl-digestmd5 cyrus-sasl-plain dhcp
dhcp-client dnsmasq esound-daemon farstream-data fribidi gnome-keyring
  gnome-keyring-lang gnome-keyring-pam gnome-keyring-pam-32bit
gstreamer-libnice gstreamer-plugins-bad gstreamer-plugins-bad-lang
gstreamer-plugins-farstream
  gstreamer-plugins-good gstreamer-plugins-good-lang iso-codes iso-codes-lang
libappindicator3-1 libass5 libaudiofile1 libavcodec57 libavutil55 libbluetooth3
  libbs2b0 libcelt0-2 libdaemon0 libdbusmenu-glib4 libdbusmenu-gtk3-4 libdv4
libdvdnav4 libdvdread4 libesd0 libfarstream-0_2-5 libfftw3-3 libFLAC8
libfreebl3
  libgadu3 libgck-modules-gnome-keyring libgme0 libgsm1 libgssdp-1_0-3
libgstadaptivedemux-1_0-0 libgstallocators-1_0-0 libgstbadaudio-1_0-0
  libgstbadbase-1_0-0 libgstbadvideo-1_0-0 libgstbasecamerabinsrc-1_0-0
libgstcodecparsers-1_0-0 libgstgl-1_0-0 libgstmpegts-1_0-0
libgstphotography-1_0-0
  libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsturidownloader-1_0-0
libgstwayland-1_0-0 libgupnp-1_0-4 libgupnp-igd-1_0-4 libHalf11 libIex-2_1-11
  libIlmImf-Imf_2_1-21 libIlmThread-2_1-11 libindicator3-7 libjack0 libjson-c2
libkate1 liblrdf2 libmbim-glib4 libmjpegutils-2_0-0 libmm-glib0 libmms0
  libmodplug1 libmp3lame0 libndp0 libneon27 libnewt0_52 libnice10 libnm0
libnm-glib4 libnm-glib-vpn1 libnm-gtk0 libnm-util2 libofa0 libopenjpeg1 libotr5
  libpcap1 libprotobuf-c1 libproxy1-networkmanager libpulse0 libpurple
libpurple-branding-openSUSE libpurple-lang libpurple-tcl libqmi-glib1
libqmi-tools
  libquicktime0 libraptor2-0 libsamplerate0 libsbc1 libschroedinger-1_0-0
libSDL-1_2-0 libsilc-1_1-4 libsilcclient-1_1-4 libslang2 libsndfile1 libsocks0
  libsoftokn3 libSoundTouch0 libspandsp2 libspeex1 libswresample2 libswscale4
libtag1 libteamdctl0 libtwolame0 libv4l libv4l1-0 libv4l2-0 libv4lconvert0
  libva1 libva-drm1 libva-egl1 libva-glx1 libva-x11-1 libvdpau1 libwavpack1
libzbar0 libzvbi0 Mesa-libGLESv2-2 mobile-broadband-provider-info ModemManager
  mozilla-nss mozilla-nss-certs mpg123-esound NetworkManager
NetworkManager-appindicator NetworkManager-branding-openSUSE
NetworkManager-connection-editor
  NetworkManager-lang ppp rp-pppoe silc-toolkit usb_modeswitch
usb_modeswitch-data vaapi-dummy-driver xinetd

The following 18 recommended packages were automatically selected:
  avahi-autoipd dnsmasq esound-daemon gnome-keyring-lang gnome-keyring-pam
gstreamer-plugins-bad-lang gstreamer-plugins-good-lang iso-codes-lang
  libpurple-lang libqmi-tools ModemManager NetworkManager
NetworkManager-appindicator NetworkManager-connection-editor
NetworkManager-lang rp-pppoe
  usb_modeswitch vaapi-dummy-driver

152 new packages to install.
Overall download size: 32.4 MiB. Already cached: 0 B. After the operation,
additional 118.0 MiB will be used.

summary: bitlbee needs too many dependencies


body:
--1519289407.c0fFa0.25769
Date: Thu, 22 Feb 2018 08:50:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082235

            Bug ID: 1082235
           Summary: mozilla-nss 3.35 causes pesign failures
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

mozilla-nss is in progress of being updated to version 3.35

In staging, with this update, all pesign based packages fail though, with an
error like:

[   69s] + certutil -N -d
/home/abuild/rpmbuild/BUILD/pesign-repackage-1.0/rsasigned/nss-db -f
/home/abuild/rpmbuild/BUILD/pesign-repackage-1.0/rsasigned/nss-db/passwd
[   69s] + certutil -A -d
/home/abuild/rpmbuild/BUILD/pesign-repackage-1.0/rsasigned/nss-db -n cert -t
CT,CT,CT -i cert.x509
[   69s] Error opening input terminal for read
[   69s] certutil: could not authenticate to token NSS Certificate DB.:
SEC_ERROR_BAD_PASSWORD: The security password entered is incorrect.
[   69s] error: Bad exit status from /var/tmp/rpm-tmp.8Ftdmv (%install)

summary: mozilla-nss 3.35 causes pesign failures


body:
--1519308302.1e333f7E0.20178
Date: Thu, 22 Feb 2018 14:05:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082297

            Bug ID: 1082297
           Summary: Mesa: get rid of n_Define-GLAPIVAR-separate-from-GLAPI.patch?
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

> - n_Define-GLAPIVAR-separate-from-GLAPI.patch:
>   Add separate definition GLAPIVAR as GLAPI
>   doesn't have the an 'extern' for some compiler
>   versions. This is needed for GLw (bsc#970725).
>
> https://build.opensuse.org/package/view_file/X11:XOrg/Mesa/n_Define-GLAPIVAR-separate-from-GLAPI.patch?expand=1
>  https://bugzilla.suse.com/show_bug.cgi?id=970725
>
>  I'm afraid we still need this for ancient 3rd party GLw programs. :-( Egbert?
>
Bug report is not publicly accessible.

There are zero instances of GLAPIVAR on my setup, plus the headers
with the Nvidia driver do not have it either.
Hence I would suggest adding the hack in the GLw header(s).

pkgs: Mesa libGLw


body:
--1519309429.Cfd88DfA0.23783
Date: Thu, 22 Feb 2018 14:23:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082303

            Bug ID: 1082303
           Summary: Mesa: push upstream
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- u_mesa-python3-only.patch
The shebang line should not be needed, looks fine otherwise.

--> send upstream

summary: Mesa: push upstream


body:
--1519309608.3e2cA2b0.26116
Date: Thu, 22 Feb 2018 14:26:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082305

            Bug ID: 1082305
           Summary: Mesa: misc Mesa 8.0 patches
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- misc Mesa 8.0 patches
Originally from Redhat/Fedora - yet they no longer carry them. Drop as
well or upstream?

summary: Mesa: misc Mesa 8.0 patches


--1519309990.531aafe12.27549
Date: Thu, 22 Feb 2018 14:33:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082307

            Bug ID: 1082307
           Summary: Mesa: push u_add_llvm_codegen_dependencies.patch upstream
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- u_add_llvm_codegen_dependencies.patch
Looks ok - need commit message+upstream


--1519310844.17104.31973
Date: Thu, 22 Feb 2018 14:47:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082311

            Bug ID: 1082311
           Summary: VUL-1: CVE-2017-11720: lame: Division-by-zero vulnerability caused by a malformedinput file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200655/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: idonmez-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Created attachment 761272
  --> http://bugzilla.opensuse.org/attachment.cgi?id=761272&action=edit
Reproducer

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed
input file.

lame poc2.wav

Doesn't trigger for me on Leap, but version should be affected

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11720
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11720


--1519310940.2c0C0.29751
Date: Thu, 22 Feb 2018 14:49:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082312

            Bug ID: 1082312
           Summary: Mesa: get rid of libudev, openssl, bison, flex BuildRequires
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- libudev - not required since Mesa 13.0.0
 - openssl - not required since Mesa 17.0.0
 - third party (bison, flex, python*) - same as above

(python still needed because of src/gallium/drivers/r600/egd_tables.h missing
in release tarball?)

> > python is required when building r600 from taballs with
> > 17.2/17.3/18.0 as src/gallium/drivers/r600/egd_tables.h is missing.
> >
> > https://bugs.freedesktop.org/show_bug.cgi?id=103911

(addressed upstream meanwhile)


--1519311464.bc75Ca6A0.1534
Date: Thu, 22 Feb 2018 14:57:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082315

            Bug ID: 1082315
           Summary: Mesa: get rid of ncurses-devel BuildRequires?
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- ncurses-devel - not used by Mesa, assuming LLVM thing - document

Thu Sep 25 13:00:23 UTC 2014 - dvaleev-at-suse.com

- Fix ppc64 build (bnc#893275 bnc#871128)
  u_be_assert_include.patch
  Add ncurses-devel as build dependency to build with -ltinfo


--1519311767.f2400.3702
Date: Thu, 22 Feb 2018 15:02:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082316

            Bug ID: 1082316
           Summary: Mesa: ldconfig run for backend (ICD) drivers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

- run ldconfig for backend (ICD) drivers is wrong - dri, nine, xvmc,
vdpau, va, omx, opencl, and vulkan
dri, nine and omx are fine, the remainder need fixing


--1519312131.c4AC6B6d0.5481
Date: Thu, 22 Feb 2018 15:08:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082317

            Bug ID: 1082317
           Summary: VUL-1: CVE-2017-15019: lame: NULL pointer dereference in the hip_decode_init function in libmp3lame/mpglib_interface.c via a malformed mpg file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200657/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: idonmez-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-15019

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function
within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an
incorrect calloc call.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15019
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15019


body:
--1519312181.BF21C10.5990
Date: Thu, 22 Feb 2018 15:09:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082318

            Bug ID: 1082318
           Summary: Packages must not mark license files as %doc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Certain licenses require that license files must be shipped together with the
binaries in all cases.

By using the %doc marker, this is no longer guaranteed (e.g. by enabling
excludedocs).

Thus it is important that for such cases, %license is used instead of %doc.
The effect is that the file is always installed, stored in a different
directory (/usr/share/licenses/<pkg>/) and can be queried using rpm (e.g. "rpm
-qL kernel-firmware").

pkgs: apparmor autoconf-archive bash bash-completion blog cacti+cacti-spine cfitsio coreutils dnsmasq dracut elfutils findutils froxlor gawk glibc gmp gpm grep issue-generator libconfig libedit libee libfastjson libffi liblogging libnettle libnsl libnss_nis libnss_usrfiles libpsl libusb-1_0 libxml2 makedumpfile net-snmp nginx nodejs10 nodejs6 nodejs8 pam-config publicsuffix python-jsonschema rebootmgr rpcsvc-proto rsync rsyslog subversion supportutils sysconfig time transactional-update xtrabackup yp-tools ypserv zeromq zstd


--1519314827.c4728ca70.19819
Date: Thu, 22 Feb 2018 15:53:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082333

            Bug ID: 1082333
           Summary: VUL-1: CVE-2017-9410: lame: The fill_buffer_resample function in libmp3lame/util.c allows remote attackers to cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200661/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-9410

The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allows
remote attackers to cause a denial of service (heap-based buffer over-read and
application crash) via a crafted wav file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9410


--1519316219.7Ebf037b0.29948
Date: Thu, 22 Feb 2018 16:16:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082340

            Bug ID: 1082340
           Summary: VUL-1: CVE-2017-9412: lame: The unpack_read_samples function in frontend/get_audio.c allows remote attackers to cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200660/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-9412

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows
remote attackers to cause a denial of service (invalid memory read and
application crash) via a crafted wav file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9412


--1519316645.AfBfe5.32177
Date: Thu, 22 Feb 2018 16:24:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082345

            Bug ID: 1082345
           Summary: [NEEDS-REBASE] gnome-shell-extensions 3.27.91 patches need rebase
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Disable SLE-classic patches that need rebase:
  gse-sle-classic-ext.patch, gnome-shell-add-app-to-desktop.patch,
  gnome-shell-favorites-menu-at-end.patch and
  gnome-shell-extensions-window-list-app-icon-not-shown.patch.

Those patches do not apply on GNOME Shell exteions 3.27.91 (in GNOME:Next)


body:
--1519326732.FcA18215.31714
Date: Thu, 22 Feb 2018 19:12:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082387

            Bug ID: 1082387
           Summary: RDMA/rxe doesn't work over 802.1q VLAN
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 761320
  --> http://bugzilla.suse.com/attachment.cgi?id=761320&action=edit
Proposed patch I sent to linux-rdma mailing list

RDMA/RXE doesn't work over VLAN devices with 4.15

a) adding a VLAN device to RXE via rxe_net_add() creates a non-functional
   RDMA device. This is caused by the logic in enum_all_gids_of_dev_cb() /
   is_eth_port_of_netdev(), which only considers networks connected to "upper
   devices" of the configured network device, resulting in an empty set of
   gids for a VLAN interface that is an "upper device" itself. Later attempts
   to connect via this rdma device fail in cma_acuire_dev() because no gids
   can be resolved.

b) adding the master device of the VLAN device instead seems to work
   initially, target addresses via VLAN devices are resolved successfully.
   But the connection times out because no 802.1q VLAN headers are inserted
   in the ethernet packets, which are therefore never received. This happens
   because the RXE layer sends the packets via the master device rather than
   the VLAN device.

The problem could be solved by changing either a) or b). My thinking was that
the logic in a) was created deliberately, thus I decided to work on b). It
turns out that the information about the VLAN interface for the gid at hand
is available in the AV information. My patch converts the RXE code to use this
netdev instead of rxe->ndev. With this change, RXE over vlan works on my test
system.

summary: RDMA/rxe doesn't work over 802.1q VLAN


--1519330512.d64bc08.2588
Date: Thu, 22 Feb 2018 20:15:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082397

            Bug ID: 1082397
           Summary: VUL-0: CVE-2017-9411: The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allowsremote attackers to cause a denial of service (invalid memory read andapplication crash) via a crafted wav file.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/187285/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-9411

The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allows
remote attackers to cause a denial of service (invalid memory read and
application crash) via a crafted wav file.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1470199
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9411
http://seclists.org/oss-sec/2017/q3/358
http://seclists.org/oss-sec/2017/q4/121
http://seclists.org/oss-sec/2017/q2/625
http://seclists.org/oss-sec/2017/q3/365
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775959
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9411.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777159
http://www.cvedetails.com/cve/CVE-2017-9411/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9411
https://nvd.nist.gov/vuln/detail/CVE-2017-11720
http://www.securityfocus.com/bid/99279
https://nvd.nist.gov/vuln/detail/CVE-2017-13753
https://nvd.nist.gov/vuln/detail/CVE-2016-9396
https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
https://www.exploit-db.com/exploits/42389/
http://www.securityfocus.com/bid/100095
https://www.exploit-db.com/exploits/42390/


--1519333623.46a260.21753
Date: Thu, 22 Feb 2018 21:07:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1082409

            Bug ID: 1082409
           Summary: Major regression in usability of go package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dmacvicar-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

By accident I discovered that I could not compile software because my go was
pointing to go1.4

scanner_test.go:7:2: cannot find package "github.com/dmacvicar/someproject" in
any of:
        /usr/lib64/go1.4/src/github.com/dmacvicar/someproject (from $GOROOT)

I never installed go1.4

So I tried to remove it:
$ sudo zypper rm go go1.4 go1.6
[sudo] password for root:
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 9 packages are going to be REMOVED:
  go go1.4 go1.4-doc go1.4-race go1.6 go1.6-doc go1.6-race go-doc go-race

I try to install go again:

$ sudo zypper in go
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 11 NEW packages are going to be installed:
  go go1.4 go1.4-doc go1.4-race go1.6 go1.6-doc go1.6-race go1.9 go1.9-doc
go1.9-race go-race

The following recommended package was automatically selected:
  go1.9-doc

Again 1.4!

I imagined go required go1.4 or something like that, but I locked go1.4 and I
was still able to install go.

I think the problem lies in that both "go" and "go1.9" provide "go = 1.9", and
on top of that "go" requires "go1.9".

What is the point of the "go" package? It only confuses the solver. Every goX.X
package can still "provide go". That way only the latest will get installed.

Additionally, what is the point in having go1.4 there? Is it only to build the
whole chain?

Then there is a problem with GOROOT. Installing a newer go, updates the
alternatives but GOROOT is still pointing to the go1.4 go.


--1519378723.DbaF2AA3.24058
Date: Fri, 23 Feb 2018 09:38:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082504

            Bug ID: 1082504
           Summary: Patch file not found ar3k/AthrBT_0x00000200.dfu
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: ivan.levshin-at-microfocus.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm running Tumbleweed on MSI GS40 laptop and I'm in trouble with Blutetooth
here: it doesn't work at needed firmware file cannot be loaded. There are
messages from dmesg:

Bluetooth: Patch file not found ar3k/AthrBT_0x00000200.dfu
Bluetooth: Loading patch file failed

I tried to google for solution and it seems there was a problem with kernel
previous to 4.8 and I would like to say that with my previous laptop (MS GE62)
I had the same problem in the past but after some of system updates it was
solved.

GS40 uses almost the same hardware and I was surprised when found this problem
again.

I've checked /lib/firmware and there is nothing like
ar3k/AthrBT_0x00000200.dfu. At the same time I found that same problem existed
for many others distros like Ubuntu and Arch, in case of Arch one guy solved it
by patching the kernel:
https://bbs.archlinux.org/viewtopic.php?id=211659

Is it possible to implement patch like that in current version of TW kernel? I
think I'll be able to implement it on my machine but I'm affraid I'll have to
do that again and again with every new kernel (which changing quite often in
TW), so that will be just great if maintainers will put needed changes by
themselves into the code which we getting via normal update channels.

Reproducible: always
How to reproduce: you need Atheros AR3004 Bluetooth adapter, if you have it
under your hands, you easily will be able to reproduce.


body:
Build Identifier:

since mpv updated to version 0.27.2-13.5.1 it can no longer play files over
smb.
Trying to play video files on my NAS drive (using smplayer) reports:
"Playing: smb://ls-chl/share/files/file.mp4
No protocol handler found to open URL smb://ls-chl/share/files/file.mp4
The protocol is either unsupported, or was disabled at compile-time.
Exiting... (Errors when loading file)"

NAS also supports ftp - no trouble playing using this protocol.
Rolling mpv back to version 0.25.0-12.17 and playing over smb works as expected

Reproducible: Always

summary: MPV can't play files over smb protocol


body:
--1519385630.5B228E0.26154
Date: Fri, 23 Feb 2018 11:33:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082527

            Bug ID: 1082527
           Summary: caasp-container-manifests uninstallable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package caasp-container-manifests in openSUSE Tumbleweed is currently not
installable, due to missing dependencies

Problem: nothing provides kubic-pause-image >= 2.0.0 needed by
caasp-container-manifests-3.0.0+git_r242_40d3c00-1.1.noarch

caasp-container-manifests could not be checked by the bots and thus was
accepted into openSUSE:Factory 'on good faith' (the bot can't handle it yet due
to the way the container rpms are being built and injected into the
distribution; the bot is yet to learn about this setup).

Looking into openSUSE:Factory:Containers, there is indeed no kubic-pause-image
available.

There are two solutions:

a) Provide the container/image with that specific name
b) Remove the invalid dependency from caasp-container-manifests

As this is a dependency to patterns-caasp-Stack, this means that the entire
Kubic stack is now not installable

summary: caasp-container-manifests uninstallable


body:
--1519386649.CfcB3.1715
Date: Fri, 23 Feb 2018 11:50:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082532

            Bug ID: 1082532
           Summary: record PostgreSQL lifecycle data
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Development
          Assignee: astieger-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: lnussel-at-suse.com, max-at-suse.com
          Found By: ---
           Blocker: ---

PostgreSQL EOL times should be noted in lifecycle data
Based on https://www.postgresql.org/support/versioning/

postgresql93,*,2018-09-30
postgresql93-contrib,*,2018-09-30
postgresql93-docs,*,2018-09-30
postgresql93-plperl,*,2018-09-30
postgresql93-plpython,*,2018-09-30
postgresql93-pltcl,*,2018-09-30
postgresql93-server,*,2018-09-30
postgresql93-test,*,2018-09-30
postgresql94,*,2019-12-31
postgresql94-contrib,*,2018-09-20
postgresql94-docs,*,2018-09-20
postgresql94-plperl,*,2018-09-20
postgresql94-plpython,*,2018-09-20
postgresql94-pltcl,*,2018-09-20
postgresql94-server,*,2018-09-20
postgresql94-test,*,2018-09-20
postgresql95,*,2021-01-31
postgresql95-contrib,*,2021-01-31
postgresql95-docs,*,2021-01-31
postgresql95-plperl,*,2021-01-31
postgresql95-plpython,*,2021-01-31
postgresql95-pltcl,*,2021-01-31
postgresql95-server,*,2021-01-31
postgresql95-test,*,2021-01-31
postgresql96,*,2021-09-30
postgresql96-contrib,*,2021-09-30
postgresql96-docs,*,2021-09-30
postgresql96-plperl,*,2021-09-30
postgresql96-plpython,*,2021-09-30
postgresql96-pltcl,*,2021-09-30
postgresql96-server,*,2021-09-30
postgresql96-test,*,2021-09-30

summary: record PostgreSQL lifecycle data


--1519635908.D3553bd00.31644
Date: Mon, 26 Feb 2018 09:05:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082774

            Bug ID: 1082774
           Summary: VUL-1: freexl: heap-buffer-overflow in freexl.c:3912 read_mini_biff_next_record of FreeXL 1.0.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200787/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tzotsos-at-gmail.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1547892

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer
over-read in the function read_mini_biff_next_record.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1547892
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7439
http://www.cvedetails.com/cve/CVE-2018-7439/


--1519635957.B84aF0.31690
Date: Mon, 26 Feb 2018 09:05:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082775

            Bug ID: 1082775
           Summary: VUL-1: freexl: heap-buffer-overflow in freexl.c:383 parse_unicode_string of FreeXL 1.0.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200786/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tzotsos-at-gmail.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1547889

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer
over-read in the parse_unicode_string function.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1547889
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7438
http://www.cvedetails.com/cve/CVE-2018-7438/


--1519635970.Ef7480.31654
Date: Mon, 26 Feb 2018 09:06:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082776

            Bug ID: 1082776
           Summary: VUL-1: freexl: heap-buffer-overflow in freexl.c:1866 parse_SST of FreeXL 1.0.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200785/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tzotsos-at-gmail.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1547885

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer
over-read in a memcpy call of the parse_SST function.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1547885
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7437
http://www.cvedetails.com/cve/CVE-2018-7437/


--1519635985.cdAEFC2F4.31690
Date: Mon, 26 Feb 2018 09:06:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082777

            Bug ID: 1082777
           Summary: VUL-1: freexl: heap-buffer-overflow in freexl.c:1805 parse_SST parse_SST
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200784/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tzotsos-at-gmail.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1547883

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer
over-read in a pointer dereference of the parse_SST function.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1547883
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7436
http://www.cvedetails.com/cve/CVE-2018-7436/


--1519636009.CD466a0.31485
Date: Mon, 26 Feb 2018 09:06:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082778

            Bug ID: 1082778
           Summary: VUL-0: freexl: heap-buffer-overflow in freexl::destroy_cell of FreeXL 1.0.4
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200783/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: tzotsos-at-gmail.com
          Reporter: kbabioch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1547879

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer
over-read in the freexl::destroy_cell function.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1547879
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7435
http://www.cvedetails.com/cve/CVE-2018-7435/
https://groups.google.com/forum/#%21topic/spatialite-users/b-d9iB5TDPE


body:
--1519668983.0F4f0.9874
Date: Mon, 26 Feb 2018 18:16:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082890

            Bug ID: 1082890
           Summary: xdm defines wrong firewalld service
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: luizluca@tre-sc.jus.br
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

With xdm-1.1.11-33.1.x86_64, I'm getting this error:

$ sudo firewall-offline-cmd --list-all
ERROR: Failed to load service file '/usr/lib/firewalld/services/x11.xml':
INVALID_SERVICE: not a valid service file: junk after document element: line 2,
column 0
public
...

The /usr/lib/firewalld/services/x11.xml seems to be wrong. It shows:

<port protocol="tcp" port="6000-6063"/>
<port protocol="udp" port="6000-6063"/>

While it is expected something like:

<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>SSH</short>
  <description>Secure Shell (SSH) is a protocol for logging into and executing
commands on remote machines. It provides secure encrypted communications. If
you plan on accessing your machine remotely via SSH over a firewalled
interface, enable this option. You need the openssh-server package installed
for this option to be useful.</description>
  <port protocol="tcp" port="22"/>
</service>

summary: xdm defines wrong firewalld service


--1519671323.beA26Ae51.19186
Date: Mon, 26 Feb 2018 18:55:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082896

            Bug ID: 1082896
           Summary: Ghostscript package contains lots of duplicated resources
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Printing
          Assignee: jsmeix-at-suse.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: jsmeix-at-suse.com
          Found By: ---
           Blocker: ---

The ghostscript package is much heavier than necessary, due to a number of
reasons:

1) it is compiled with COMPILE-INITS/--enable-compile-inits (default), so all
resources are compiled into the binaries
2) the resources contain an (old) version of the Droid Sans Fallback font,
which is also provided by the google-droid-fonts package
3) the resources contain the standard Postscript fonts by URW, but the
ghostscript package Requires the ghostscript-std-fonts package
4) the compiled resources are included *twice*, as the "gs" binary links to the
ghostscript library statically.

For 4), it should be possible to use/symlink the (already included) gsc binary,
which is a wrapper around libgs.so, and accepts the same parameters.

For 3), remove the URW fonts from the bundled resources and use the fonts from
https://github.com/ArtifexSoftware/urw-base35-fonts instead (see 1074266 and
1074267).

For 2), symlink DroidSansFullFallback to
Resource/CIDFSubst/DroidSansFallback.ttf. This also requires compiling with
--disable-compile-inits, as otherwise the fallback font is only looked up in
the %rom% resource.

The total size reduction would be about:
- 27 MByte /usr/bin/gs
-  4 MByte URW fonts from /usr/lib*/libgs.so*
-  4 MByte fallback front from /usr/lib*/ligs.so*


--1519714782.CcbAD474.29837
Date: Tue, 27 Feb 2018 06:59:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1082956

            Bug ID: 1082956
           Summary: less on rpm packages does no longer show anything
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: tbechtold-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When using less (487-3.2 from TW) on an rpm binary package, the output is:

=============================== Information
====================================

================================= Changelog (head)
=============================

================================= Content
======================================

So this broke recently.


body:
--1519784411.5eFb15.25760
Date: Wed, 28 Feb 2018 02:20:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083212

            Bug ID: 1083212
           Summary: Please drop mkfontscale/mkfontdir usage from texlive font packages
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently, the various texlive font packages create fonts.dir/fonts.scale using
mkfontdir/mkfontscale.

This is quite pointless:

- the font packages go into /usr/share/fonts/texlive-<package>/, but this is
outside the X server font path, which is (see /var/log/Xorg.0.log)
 [191632.294] (==) FontPath set to:
        /usr/share/fonts/misc:unscaled,
        /usr/share/fonts/Type1/,
        /usr/share/fonts/100dpi:unscaled,
        /usr/share/fonts/75dpi:unscaled,
        /usr/share/fonts/ghostscript/,
        /usr/share/fonts/cyrillic:unscaled,
        /usr/share/fonts/truetype/,
i.e. to use any of this fonts, the user had to additionally use xset +fp ...
for each package

- this is for the vast majority of programs unnecessary, as it is only needed
for server side font rendering, current programs use client side rendering.

pkgs: texlive-specs-a texlive-specs-b texlive-specs-c texlive-specs-d texlive-specs-e texlive-specs-f texlive-specs-g texlive-specs-h texlive-specs-i texlive-specs-j texlive-specs-k texlive-specs-l texlive-specs-m texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-q texlive-specs-r texlive-specs-s texlive-specs-t texlive-specs-u texlive-specs-v texlive-specs-w texlive-specs-x texlive-specs-y texlive-specs-z


--1519785378.41811.29347
Date: Wed, 28 Feb 2018 02:36:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083213

            Bug ID: 1083213
           Summary: Please drop unnecessary xorg-x11-fonts requires
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LibreOffice
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- it adds dozens of bitmap only fonts to the font selections
- it uses plenty of space on the disk
- it uses plenty of space on the install medium

The changelog claim it is necessary:

Wed Jan 24 14:02:23 UTC 2018 - tchvatal-at-suse.com
- Require xorg-x11-fonts otherwise nothing is shown

but this is obviously wrong. I have removed xorg-x11-fonts and
xorg-x11-fonts-core from my system, and libreoffice works as before.

The actually needed Requires may be "fonts-config", which is required via
xorg-x11-fonts -> xorg-x11-fonts-core -> fonts-config.


body:
--1519821894.5dFFa8C3.18778
Date: Wed, 28 Feb 2018 12:44:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1083290

            Bug ID: 1083290
           Summary: gcc7: chromium fails to build
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: matz-at-suse.com
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

As per $SUBJ current gcc7 in update channels from SLE12 fails to compile
chromium-beta (that will soon be actual chromium release with security fixes).

We already have fix in the current gcc7 develproject and we should release the
current state as an update to toolchain module.

summary: gcc7: chromium fails to build


--1519886853.800B0.14543
Date: Thu, 1 Mar 2018 06:47:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083413

            Bug ID: 1083413
           Summary: VUL-0: CVE-2017-18197: jgraphx: XML External Entity (XXE) not prevented
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/200806/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pmonrealgonzalez-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1550353

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory
instance in convert() is missing flags to prevent XML External Entity (XXE)
attacks, as demonstrated by /ServerView.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1550353
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-18197
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-18197.html
https://github.com/jgraph/mxgraph/issues/124


--1519899803.dC5e40.6519
Date: Thu, 1 Mar 2018 10:23:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083473

            Bug ID: 1083473
           Summary: Use systemd user socket for starting / enabling PulseAudio
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The PA upstream dev recommended to user the systemd user socket activation
rather than the old way using the auto-spawn with XDG autostart script.

For that, we'd just need to enable the system default user/pulseaudio.socket,
not user/pulseaudio.service.

And, user/pulseaudio.service needs to check
/etc/sysconfig/sound:PULSEAUDIO_ENABLE variable as well, so that the old-school
user with PA disabled won't hit it.


--1519983119.5FED3.23504
Date: Fri, 2 Mar 2018 09:31:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083654

            Bug ID: 1083654
           Summary: linphone crashes when trying to open Preferences
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: haas273-at-googlemail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Linphone crashes when trying to open the preferences screen

Ouput:

[10:29:01:147][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:106:
"Use locale: en"
[10:29:01:165][0x55ec5de4a780][Info]:0: "Running app..."
[10:29:01:165][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:170:
"Library paths:" ("/usr/lib64/qt5/plugins", "/usr/bin")
[10:29:01:165][0x55ec5df56330][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreManager.cpp:200:
"Launch async linphone core creation."
[10:29:01:167][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:181:
"Activated selectors:" ("custom", "de_DE", "unix", "linux", "opensuse")
[10:29:01:167][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:355:
"Registering types..."
[10:29:01:167][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:389:
"Registering shared types..."
[10:29:01:167][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:401:
"Registering tool types..."
[10:29:01:167][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:409:
"Registering shared tool types..."
[10:29:01:217][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:134:
"Open splash screen..."
[10:29:01:246][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:213:
"Loading main view..."
[10:29:01:326][0x55ec5df56330][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreManager.cpp:170:
"Set `Friends` path: `/home/stefan/.local/share/linphone/friends.db`"
[10:29:01:327][0x55ec5df56330][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreManager.cpp:171:
"Set `CallLogs` path: `/home/stefan/.local/share/linphone/call-history.db`"
[10:29:01:327][0x55ec5df56330][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreManager.cpp:172:
"Set `Chat` path: `/home/stefan/.local/share/linphone/message-history.db`"
[10:29:01:334][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreManager.cpp:49:
"Core created. Enable iterate."
[10:29:01:334][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/CoreHandlers.cpp:73:
"Core started."
[10:29:01:334][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/components/core/MessagesCountNotifier.cpp:64:
"Notify unread messages count: 0."
[10:29:01:525][0x55ec5de4a780][Info]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:506:
"Open linphone app."
[10:29:04:151][0x55ec5de4a780][Warning]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:120:
(qrc:/ui/views/App/Settings/SettingsWindow.qml:50:9: Type TabButton
unavailable, qrc:///ui/modules/Common/Form/Tab/TabButton.qml:15:3: Cannot
override FINAL property)

Installed version of linphone: 4.1.1-2.4

Running on openSUSE Tumbleweed snapshot 20180227


body:
--1520071109.DEcaD0.759
Date: Sat, 3 Mar 2018 09:58:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083830

            Bug ID: 1083830
           Summary: Scons isn't ready for python3 yet
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: davejplater-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I've been working with the ffado developer to try to fix the scons with python3
issues and already in ffado-2.4.0 there are three scons functions that fail
with python3. With the upcoming 2.4.1 release ffado no longer builds due to
more failed python3 scons functions.
Fedora has already reverted to python2.
I've attempted to build scons git which contains many python 3 fixes but
failed.

summary: Scons isn't ready for python3 yet


--1520074828.81DBE26.7396
Date: Sat, 3 Mar 2018 11:00:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083831

            Bug ID: 1083831
           Summary: NetworkManager nfs displatcher script broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: seife-at-novell.slipkontur.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Mar 03 11:31:50 strolchi nm-dispatcher[961]:
/etc/NetworkManager/dispatcher.d/nfs: line 40: reaches: bad array subscript
Mar 03 11:31:50 strolchi nm-dispatcher[961]:
/etc/NetworkManager/dispatcher.d/nfs: line 42: reaches: bad array subscript
Mar 03 11:31:50 strolchi nm-dispatcher[961]: ping: : Name or service not known
Mar 03 11:31:50 strolchi nm-dispatcher[961]: ping: : Name or service not known
Mar 03 11:31:50 strolchi nm-dispatcher[961]: ping: : Name or service not known
Mar 03 11:31:50 strolchi nm-dispatcher[961]: ping: : Name or service not known
Mar 03 11:31:50 strolchi nm-dispatcher[961]:
/etc/NetworkManager/dispatcher.d/nfs: line 49: reaches[$1]: bad array subscript

I have no NFS mounts in fstab.


body:
--1520081741.B72dc10.21249
Date: Sat, 3 Mar 2018 12:55:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1083834

            Bug ID: 1083834
           Summary: unar: unrar wrapper breaks Ark
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: kstreitova-at-suse.com
          Reporter: fabian@ritter-vogt.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The wrapper for unrar provided by the unar package breaks Ark.
Ark supports unar directly, but prefers unrar if it's available:

ark.main: Trying to open QUrl("file:///tmp/test.rar")
ark.part: Attempting to open archive "/tmp/test.rar"
ark.kerfuffle: Going to create archive "/tmp/test.rar"
ark.kerfuffle: Checking plugin "kerfuffle_clirar"
ark.kerfuffle: Created read-only interface for "/tmp/test.rar"
ark.kerfuffle: Created read-write interface for "/tmp/test.rar"
ark.clirar: Loaded cli_rar plugin
ark.clirar: Setting up parameters...
ark.kerfuffle: Successfully loaded plugin "kerfuffle_clirar"
ark.kerfuffle: Created archive instance
ark.kerfuffle: LoadJob created
Using the 'xdg-shell-v6' shell integration
ark.main: Entering application loop
ark.kerfuffle: Executing "/usr/bin/unrar" ("vt", "-v", "/tmp/test.rar") within
directory "/tmp"
ark.clirar: Failed to detect UNRAR output.

summary: unar: unrar wrapper breaks Ark


body:
--1520085062.ab7Adc219.27455
Date: Sat, 3 Mar 2018 13:51:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083835

            Bug ID: 1083835
           Summary: clusterssh doc generation is racy
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jengelh-at-inai.de
          Found By: Development
           Blocker: ---

Sometimes (~30% of cases) when building clusterssh packages with -j4
it incorrectly generates the doc that goes into scripts

See http://rb.zq1.de/compare.factory-20180228/clusterssh-compare.out
for an example diff.

This happens because every output file is generated 6 times - in parallel.

In addition to generating incorrect packages,
it also makes the package build unreproducible as described in
https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/race

summary: clusterssh doc generation is racy


--1520102191.da51f1F0.5189
Date: Sat, 3 Mar 2018 18:36:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083845

            Bug ID: 1083845
           Summary: VUL-0: CVE-2018-0490: tor: null-pointer crash in directory authority protocol list code (TROVE-2018-001)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/201158/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: astieger-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

The subprotocol implementation in 0.2.9.4-alpha had a bug where an incorrectly
formatted relay descriptor could cause directory servers to crash when they
tried to vote about it. This does not affect relays or clients, since they do
not try to vote.

From https://lists.torproject.org/pipermail/tor-announce/2018-March/000152.html

TROVE-2018-001 only affects directory authorities.  It is a bug that
an attacker can use to cause a remote directory authority to crash.
All directory authorities should upgrade to one of the versions
released today.  It does not affect relays or clients.

    - Fix a protocol-list handling bug that could be used to remotely crash
      directory authorities with a null-pointer exception. Fixes bug 25074;
      bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001 and
      CVE-2018-0490.

Fixed in 0.2.9.15, 0.3.1.10, 0.3.2.10, 0.3.3.3-alpha

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0490
https://trac.torproject.org/projects/tor/ticket/25074


--1520102192.F21220.5437
Date: Sat, 3 Mar 2018 18:36:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083846

            Bug ID: 1083846
           Summary: VUL-0: CVE-2018-0491: tor: use-after-free in KIST scheduler remote relay DoS
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/201159/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: astieger-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

From https://lists.torproject.org/pipermail/tor-announce/2018-March/000152.html

TROVE-2018-002 affects relays running all 0.3.2.x, versions, as well
as 0.3.3.1-alpha. (Because we have found that it can be remotely
triggered, we are backporting it and upgrading its severity.)  It is a
use-after-free bug in the KIST scheduler code, which an attacker can
use to cause a relay to crash.  Use-after-free bugs can sometimes be
turned into worse attacks: we strongly recommend that all relays
running 0.3.2.x (or 0.3.3.1-alpha) should upgrade to one of the
versions released today.  This issue does not affect other versions,
and does not affect clients.

  Relays running 0.3.2.x SHOULD upgrade to one of the versions released
  today, for the fix to TROVE-2018-002.

  o Major bugfixes (scheduler, KIST, denial-of-service, backport from
0.3.3.2-alpha):
    - Avoid adding the same channel twice in the KIST scheduler pending
      list, which could lead to remote denial-of-service use-after-free
      attacks against relays. Fixes bug 24700; bugfix on 0.3.2.1-alpha.

References:
https://trac.torproject.org/projects/tor/ticket/24700
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0491


--1520186993.C4a81.23837
Date: Sun, 4 Mar 2018 18:09:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1083873

            Bug ID: 1083873
           Summary: Larger font sizes and menus for useability on new 4K UHD laptop displays
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: terje@nordland-teknikk.no
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Current experience and struggling to install and setup Leap 15 in dual-boot on
a XPS 13 with 13.3" 4K UHD display, tells there is a great need to get some
larger, readable fontsizes and menues, this in direct comparision with the
pre-installed Ubuntu. As now it is neccessary to use +2X or larger glasses
(lupe) to be able to read or interprete the following Leap 15 installation
fonts:

On the installation menus
On the grub edit menu
On the console texts
On the SDDM login menu itself, password field and submenus
On the YaST2 controlcenter

Further, with i.e the Gnome desktop and applications, it is possible to upscale
and setup larger font sizes as wanted. A first general step here might be to
select "Large text" on the Universal access (Accessibility) launcher, which
also is accessible for the pure GDM login menu, but not for the SDDM.


body:
--1520197284.e53B0.29806
Date: Sun, 4 Mar 2018 21:01:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083875

            Bug ID: 1083875
           Summary: The packaging of The Hessling Editor and Regina prevents use of oorexx
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: SUSE Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: smetz3-at-gmu.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The RPM files for Regina and OOREXX install files with the same name, e.g.,
rexx, rxapi, into the same directory. The Hessling Editor (THE) has Regina as a
prerequisite. The result is that although THE is coded to select from among
multiple Rexx implementations, it is impossible to install THE concurrently
with OOREXX. This problem exists in both the 32-bit and 64-bit versions.

#### YaST2 conflicts list - generated 2018-02-27 20:25:13 ####

Regina-REXX-3.9.1-2.4.i586 conflicts with ooRexx provided by
ooRexx-4.2.0-12.1.i586

    [ ] Following actions will be done:
deinstallation of ooRexx-4.2.0-12.1.i586
deinstallation of ooRexx-devel-4.2.0-12.1.i586
    [ ] do not install Regina-REXX-3.9.1-2.4.i586

#### YaST2 conflicts list END ###

Suggested solution: put OOREXX and Regina in separate directories and add soft
links in, e.g., /usr/bin, to the default Rexx.

pkgs: Regina-REXX ooRexx


--1520254270.BF57fbf70.3535
Date: Mon, 5 Mar 2018 12:51:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083948

            Bug ID: 1083948
           Summary: VUL-0: CVE-2018-7667: adminer: SSRF via the server parameter
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/201188/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jimmy-at-boombatower.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter.

No maintainer, would you be willing to take this one?

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7667
http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt


body:
--1520270816.a3770.23708
Date: Mon, 5 Mar 2018 17:26:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083992

            Bug ID: 1083992
           Summary: libmpg123 segfaults with crafted file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: aloisio-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

libmpg123 segfaults on damaged (fuzzed) files with part2_3_length == 0

summary: libmpg123 segfaults with crafted file


--1520271338.d1C570.25700
Date: Mon, 5 Mar 2018 17:35:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1083993

            Bug ID: 1083993
           Summary: The "libreoffice-gtk3" package should be installed with MATE by default
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: LibreOffice
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: nsleasy-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

LibreOffice (6.0) will not perform I/O over GVFS without "libreoffice-gtk3".
This package can be installed by the user after a MATE install, but should
probably be installed with the desktop environment by default.  LibreOffice was
installed with MATE, but lacked this component.

In testing Leap 15.0 Beta, I was unable to open files over GVFS within MATE.
It worked fine after installing libreoffice-gtk3.

I was surprise to see such a bleeding edge release of LibreOffice in even a
beta version of Leap.


--1520282771.dDCd5262.30446
Date: Mon, 5 Mar 2018 20:46:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1084015

            Bug ID: 1084015
           Summary: Include fixes from en_US "translation" to sources
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: sbrabec-at-suse.com
        QA Contact: jsrain-at-suse.com
                CC: locilka-at-suse.com, padraig.dillon-at-microfocus.com
          Found By: ---
           Blocker: ---

Created attachment 762751
  --> http://bugzilla.opensuse.org/attachment.cgi?id=762751&action=edit
problems in en_US

In past, strings were fixed in RC phase by introduction of and en_US
translation.

It was expected, that it will be incorporated back to the code after release.

Years passed, and it did not happen. Some of these hotfixes are 16 years old.

Now we have a bunch of strange en_US "translations" that needs to be reviewed
and included.

It consist of:

1. English typo and stylistic fixes. These should be included, and existing
translations to other languages updated to keep them.

Example:
https://github.com/yast/yast-autoinstallation/blob/f93f318b744c21557201c278ffba801452814481/src/include/autoinstall/general_dialogs.rb#L275
en_US changed "Frametitle" to "Frame Title". All existing translations are
probably OK. To keep existing translations, it requires coordinated merge of
these changes and translation updates.

2. Formatting fixes. The good: English is OK. The bad: All translators
translated the source string, not the fixed en_US string. With a bit of luck,
it is possible to mass fix translations.

Example:
https://github.com/yast/yast-add-on/blob/0c44e966702b0aefc2439eb0da384260a42c897e/src/clients/add-on_auto.rb#L70
en_US removed the trailing "\n"
All translations have incorrect formatting.

3. Formatting fixes that change meaning of the string. The good: English is OK.
The bad: All translators translated the source string with the incorrect
meaning, not the fixed en_US string.

Example:
https://github.com/yast/yast-apparmor/blob/afd62f82724f750d7af850f60f6d52a281cfa0e6/src/include/apparmor/profile_dialogs.rb#L1484
en_US made a question from the sentence. All translators translated the source
string, not the fixed en_US string. Impact on the translation meaning is
unknown.

4. Hot fixes of apparent nonsense. All translators translated the source
string, not the fixed en_US string. With a bit of luck, it is possible to mass
fix translations.

Example:
https://github.com/yast/yast-apparmor/blob/afd62f82724f750d7af850f60f6d52a281cfa0e6/src/include/apparmor/profile_dialogs.rb#L1488
en_US removed the nonsense "? " at the beginning. Translators were not aware
that "? " is a mistake, and used it in the translations.

And finally, en_GB mixes all the above plus:

5. Changes for British English.

As nobody actively maintains en_GB, it causes very strange result: I an few
strings, AppArmor is called AppArmour, in all other "untranslated" strings,
AppArmor is the name.


--1520358163.D18AA650.5261
Date: Tue, 6 Mar 2018 17:42:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1084177

            Bug ID: 1084177
           Summary: SuSEfirewall2 and firewalld conflicting each other
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mcepl-at-cepl.eu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have installed LEAP 42.3 in my VM and then I have upgraded to Tumbleweed
using https://en.opensuse.org/openSUSE:Tumbleweed_upgrade steps. The result was
that I had both SuSEfirewall2 and firewalld installed, and they seem to fight
each other. When I enabled and started firewalld (using either systemctl or
Yast2, it did not make any difference) I ended up on the next reboot with
firewalld enabled but dead. Only when I removed SuSEfirewall2, firewalld
started to boot up properly (and so I can connect to VM via ssh ;)).

Now I have firewalld-0.5.1-1.1.noarch, and I have removed
SuSEfirewall2-3.6.378-1.1.

I guess firewalld should somehow conflict other firewalls, shouldn't it?


--1520423761.0D8BbeE0.7232
Date: Wed, 7 Mar 2018 11:56:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1084297

            Bug ID: 1084297
           Summary: VUL-1: CVE-2017-14449: SDL2_image: double-Free in the XCF image rendering
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/201300/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

A flaw was found in Simple DirectMedia Layer. A double-Free vulnerability
exists in the XCF image rendering functionality of SDL2_image-2.0.2. A
specially crafted XCF image can cause a Double-Free situation to occur. An
attacker can display a specially crafted image to trigger this vulnerability.

openSUSE only

References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498
https://bugzilla.redhat.com/show_bug.cgi?id=1552181
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14449
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14449.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14449


--1520431879.b1aa8.6627
Date: Wed, 7 Mar 2018 14:11:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1084320

            Bug ID: 1084320
           Summary: Nextcloud rpm requires mod_php_any which is missing.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: hcderaad-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Same issue as mentioned in:
https://bugzilla.opensuse.org/show_bug.cgi?id=1057661

But then for the Nextcloud RPM:
https://build.opensuse.org/package/view_file/openSUSE:Factory/nextcloud/nextcloud.spec?expand=1

Please consider to drop the dependency on mod_php_any as the package is
currently uninstallable on Tumbleweed.


--1520541377.dfbd63.6735
Date: Thu, 8 Mar 2018 20:36:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1084571

            Bug ID: 1084571
           Summary: [HPC, conman] In specfile assume group 'dialout' for ttyS* devices
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: hpc-maintainer-bugs-at-forge.provo.novell.com
          Found By: Development
           Blocker: ---

Add the conman user to group 'dialout' instead of trying to determine the group
from the devices.
The system where this failed was a serial device on an openQA test VM which was
used by openQA. The test needs to be fixed to use another serial device
instead.


--1520581316.dbD7e1.4425
Date: Fri, 9 Mar 2018 07:41:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1084603

            Bug ID: 1084603
           Summary: Thunderbird doesn't save settings about remote content in mails
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: steiner-reg-at-bio.ifi.lmu.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The bug occurs with the MozillaThunderbird-52.6-56.2 on opensuse leap 42.3 (and
all variants of 52.6 for SLE, Tumbleweed etc.).

Start thunderbird with a fresh profile. You don't need to create any account,
just open the preferences, go to Preferences -> Privacy. "Allow remote content
in messages" should be unchecked. Click on "Exceptions" and enter some domain,
press on "Allow", so that it appears in the list of sites, and "save Changes".
Close Thunderbird and restart, go to the same dialog again. The entry is gone.

This does work with the vanilla 52.6 downloaded from mozilla.org, so it must be
sth. that happens during the configure/build phase of the SuSE rpm.

Comparing strace logs one can see that the vanilla version writes and reads
permissions.sqlite for those settings, while the SuSE binary doesn't even try
to access this file (there is no occurrence in the whole strace log). See also
the report on mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=1436947

cu,
Frank