--1610968774.F3ab40.22000
Date: Mon, 18 Jan 2021 11:19:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181054

            Bug ID: 1181054
           Summary: [Staging] Qemu fails test suite with bash 5.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Bash 5.1 has been released, packaged and submitted for inclusion into
openSUSE:Factory aka Tumbleweed.

The integration tests failed on qemu-testsuite, which is failing to pass:

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C/qemu:testsuite/standard/x86_64

I found at least one upstream commit explicitly targeting qemu testsuite in
combination with bash 5.1:
https://gitlab.com/qemu-project/qemu/-/commit/0e72078128229bf9efb542e396ab44bf91b91340


--1611052878.FDb2BeE1.13899
Date: Tue, 19 Jan 2021 10:41:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181104

            Bug ID: 1181104
           Summary: Unplugging TeVII DVB-S2 USB adapter crashes kernel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: seife-at-novell.slipkontur.de
        QA Contact: qa-bugs-at-suse.de
                CC: oneukum-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 845254
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845254&action=edit
dmesg after finally crashing at third unplug cycle

Recently I plugged a seldom-used TeVii S660 DVB-S2 Adapter into my laptop and
after undocking found a kernel oops.

I tracked this down to "Last working Kernel 4.17", even tried to bisect it but
was not successful (ended up in an obviously unrelated commit).
This is probably some kind of race condition, since reproducing in a KVM VM
(with usb passthroug) sometimes only crashes after a few tries. On real
hardware it crashes pretty reliably for me, this is why I prefer to test this
in a VM :-)

See attached dmesg of the oopsed kenrel.

I can try whatever you deem useful :-)


--1611057782.BB872CB0.13732
Date: Tue, 19 Jan 2021 12:03:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181111

            Bug ID: 1181111
           Summary: Dynamic Debugging (dyndbg) query at boot fails on module acpi_cpufreq
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: giovanni.gherdovich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 845262
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845262&action=edit
"acpi_cpufreq.dyndbg= file drivers/cpufreq/acpi-cpufreq.c +mpf" (dmesg | grep
dyndbg)

The following dyndbg query, added to the kernel command line (kernel version
v5.11-rc3) doesn't produce the expected debugging logs:

    "acpi_cpufreq.dyndbg= file drivers/cpufreq/acpi-cpufreq.c +mpf"

The following output shows that the query is partially understood, but it's
been noted that it should not say "acpi_cpufreq_exit =_", but rather
"acpi_cpufreq_exit =mpf"

    # cat /sys/kernel/debug/dynamic_debug/control | grep acpi-cpufreq

    drivers/cpufreq/acpi-cpufreq.c:980 [acpi_cpufreq]acpi_cpufreq_exit =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:959 [acpi_cpufreq]acpi_cpufreq_init =_ "CPB
unsupported, do not expose it\012"
    drivers/cpufreq/acpi-cpufreq.c:943 [acpi_cpufreq]acpi_cpufreq_init =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:906 [acpi_cpufreq]acpi_cpufreq_boost_init =_
"Boost capabilities not present in the processor\012"
    drivers/cpufreq/acpi-cpufreq.c:870 [acpi_cpufreq]acpi_cpufreq_resume =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:845 [acpi_cpufreq]acpi_cpufreq_cpu_exit =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:817 [acpi_cpufreq]acpi_cpufreq_cpu_init =_ "
    %cP%d: %d MHz, %d mW, %d uS\012"
    drivers/cpufreq/acpi-cpufreq.c:811 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"CPU%u - ACPI performance management activated.\012"
    drivers/cpufreq/acpi-cpufreq.c:748 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"Unknown addr space %d\012"
    drivers/cpufreq/acpi-cpufreq.c:731 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"HARDWARE addr space\012"
    drivers/cpufreq/acpi-cpufreq.c:725 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"SYSTEM IO addr space\012"
    drivers/cpufreq/acpi-cpufreq.c:721 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"AMD K8 systems must use native drivers.\012"
    drivers/cpufreq/acpi-cpufreq.c:707 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"No P-States\012"
    drivers/cpufreq/acpi-cpufreq.c:645 [acpi_cpufreq]acpi_cpufreq_cpu_init =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:565 [acpi_cpufreq]acpi_cpufreq_early_init =_
"Memory allocation error for acpi_perf_data.\012"
    drivers/cpufreq/acpi-cpufreq.c:561 [acpi_cpufreq]acpi_cpufreq_early_init =_
"%s\012"
    drivers/cpufreq/acpi-cpufreq.c:447 [acpi_cpufreq]acpi_cpufreq_target =_ "%s
(%d)\012"
    drivers/cpufreq/acpi-cpufreq.c:430 [acpi_cpufreq]acpi_cpufreq_target =_
"Already at target state (P%d)\012"
    drivers/cpufreq/acpi-cpufreq.c:426 [acpi_cpufreq]acpi_cpufreq_target =_
"Called after resume, resetting to P%d\012"
    drivers/cpufreq/acpi-cpufreq.c:387 [acpi_cpufreq]get_cur_freq_on_cpu =_
"cur freq = %u\012"
    drivers/cpufreq/acpi-cpufreq.c:367 [acpi_cpufreq]get_cur_freq_on_cpu =_ "%s
(%d)\012"
    drivers/cpufreq/acpi-cpufreq.c:355 [acpi_cpufreq]get_cur_val =_ "%s =
%u\012"
    drivers/cpufreq/acpi-cpufreq.c:134 [acpi_cpufreq]set_boost =_ "CPU %*pbl:
Core Boosting %sabled.\012"

A snippet of the boot log using dynamic_debug.verbose=2 is attached.


--1611069126.feEfA340.2101
Date: Tue, 19 Jan 2021 15:12:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181121

            Bug ID: 1181121
           Summary: [Build B.375.1] systemd-sysuser adding users do not become immediately available
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1593586/modules/http
                    _srv/steps/8
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Staging:B-Staging-DVD-x86_64-textmode@64bit
fails in
[http_srv](https://openqa.opensuse.org/tests/1593586/modules/http_srv/steps/8)

sysuser-tools change contains:
10+
11+- Use systemd-sysusers as default to create and update the user
12+  account. Fixes the problem that a modified sysusers config file
13+  get's ignored by useradd and adduser [bsc#1180549].
14+

This in turn results in the openQA failure reported here.

The issue seems to be systemd-sysusers not flushing the nscd cache, resulting
in nscd continuously reporting 'unknown user', despite systemd-sysusers just
having created said user.

## Test suite description
Maintainer: okurz

Installation in textmode and selecting the textmode "desktop" during
installation.

## Reproducible

Fails since (at least) Build
[B.374.2](https://openqa.opensuse.org/tests/1588974)

## Expected result

Last good: [B.374.1](https://openqa.opensuse.org/tests/1588316) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=Staging-DVD&machine=64bit&test=textmode&version=Staging%3AB)


--1611083216.eB5150.18157
Date: Tue, 19 Jan 2021 19:06:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181133

            Bug ID: 1181133
           Summary: Logitech QuickCam Zoom (pwc) no longer working on TW 20210115
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: javier-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Today I have upgraded a PC from TW 20201218 to TW 20210115.
Unfortunately, the Logitech QuickCam Zoom plugged to it is no longer working.
All I get is a black screen. Tested on Zoom and Firefox.

pwc: Failed to allocate urb buffer 0

It worked fine before. I assume it has something to do with the new kernel.

kernel-default-5.9.14-1.2.x86_64: OK
kernel-default-5.10.7-1.2.x86_64: NON-OK

Workaround: boot up with the previous kernel.

lsusb:
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 005: ID 13d3:3414 IMC Networks Bluetooth Radio
Bus 001 Device 003: ID 058f:6366 Alcor Micro Corp. Multi Flash Reader
Bus 001 Device 007: ID 046d:08b3 Logitech, Inc. QuickCam Zoom
Bus 001 Device 006: ID 1a81:1004 Holtek Semiconductor, Inc. Wireless Dongle 2.4
GHZ HT82D40REW
Bus 001 Device 004: ID 046d:c05a Logitech, Inc. M90/M100 Optical Mouse
Bus 001 Device 002: ID 05e3:0608 Genesys Logic, Inc. Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

hwinfo --cam
01: USB 00.2: 10f00 Camera
  [Created at usb.122]
  Unique ID: cOn9.AN_e7XL7ryA
  Parent ID: cLrx.d7FDLX76qXB
  SysFS ID: /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2.3/1-2.3:1.2
  SysFS BusID: 1-2.3:1.2
  Hardware Class: camera
  Model: "Logitech QuickCam Zoom"
  Hotplug: USB
  Vendor: usb 0x046d "Logitech, Inc."
  Device: usb 0x08b3 "QuickCam Zoom"
  Driver: "snd-usb-audio"
  Driver Modules: "snd_usb_audio"
  Speed: 12 Mbps
  Module Alias: "usb:v046Dp08B3d0000dc00dsc00dp00ic01isc02ip00in02"
  Driver Info #0:
    Driver Status: pwc is active
    Driver Activation Cmd: "modprobe pwc"
  Config Status: cfg=new, avail=yes, need=no, active=unknown
  Attached to: #3 (Hub)


body:
--1611091617.0a0bF0.32132
Date: Tue, 19 Jan 2021 21:26:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181137

            Bug ID: 1181137
           Summary: VUL-0: chromium: Update to 88.0.4324.96
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: atoptsoglou-at-suse.com, meissner-at-suse.com,
                    security-team-at-suse.de
          Found By: ---
           Blocker: ---

[$30000][1137179] Critical CVE-2021-21117: Insufficient policy enforcement in
Cryptohome. Reported by Rory McNamara on 2020-10-10

[$16000][1161357] High CVE-2021-21118: Insufficient data validation in V8.
Reported by Tyler Nighswander (@tylerni7) of Theori on 2020-12-23

[$5000][1160534] High CVE-2021-21119: Use after free in Media. Reported by
Anonymous on 2020-12-20

[$5000][1160602] High CVE-2021-21120: Use after free in WebSQL. Reported by Nan
Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab on 2020-12-21

[$5000][1161143] High CVE-2021-21121: Use after free in Omnibox. Reported by
Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-22

[$5000][1162131] High CVE-2021-21122: Use after free in Blink. Reported by
Renata Hodovan on 2020-12-28

[$1000][1137247] High CVE-2021-21123: Insufficient data validation in File
System API. Reported by Maciej Pulikowski on 2020-10-11

[$N/A][1131346] High CVE-2021-21124: Potential user after free in Speech
Recognizer. Reported by Chaoyang Ding(@V4kst1z) from Codesafe Team of Legendsec
at Qi'anxin Group on 2020-09-23

[$N/A][1152327] High CVE-2021-21125: Insufficient policy enforcement in File
System API. Reported by Ron Masas (Imperva) on 2020-11-24

[$N/A][1163228] High CVE-2020-16044: Use after free in WebRTC. Reported by Ned
Williamson of Project Zero on 2021-01-05

[$3000][1108126] Medium CVE-2021-21126: Insufficient policy enforcement in
extensions. Reported by David Erceg on 2020-07-22

[$3000][1115590] Medium CVE-2021-21127: Insufficient policy enforcement in
extensions. Reported by Jasminder Pal Singh, Web Services Point WSP, Kotkapura
on 2020-08-12

[$2000][1138877] Medium CVE-2021-21128: Heap buffer overflow in Blink. Reported
by Liang Dong on 2020-10-15

[$1000][1140403] Medium CVE-2021-21129: Insufficient policy enforcement in File
System API. Reported by Maciej Pulikowski on 2020-10-20

[$1000][1140410] Medium CVE-2021-21130: Insufficient policy enforcement in File
System API. Reported by Maciej Pulikowski on 2020-10-20

[$1000][1140417] Medium CVE-2021-21131: Insufficient policy enforcement in File
System API. Reported by Maciej Pulikowski on 2020-10-20

[$TBD][1128206] Medium CVE-2021-21132: Inappropriate implementation in
DevTools. Reported by David Erceg on 2020-09-15

[$TBD][1157743] Medium CVE-2021-21133: Insufficient policy enforcement in
Downloads. Reported by wester0x01(https://twitter.com/wester0x01) on 2020-12-11

[$TBD][1157800] Medium CVE-2021-21134: Incorrect security UI in Page Info.
Reported by wester0x01(https://twitter.com/wester0x01) on 2020-12-11

[$TBD][1157818] Medium CVE-2021-21135: Inappropriate implementation in
Performance API. Reported by ndevtk on 2020-12-11

[$2000][1038002] Low CVE-2021-21136: Insufficient policy enforcement in
WebView. Reported by Shiv Sahni, Movnavinothan V and Imdad Mohammed on
2019-12-27

[$500][1093791] Low CVE-2021-21137: Inappropriate implementation in DevTools.
Reported by bobblybear on 2020-06-11

[$500][1122487] Low CVE-2021-21138: Use after free in DevTools. Reported by
Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on
2020-08-27

[$N/A][937131] Low CVE-2021-21139: Inappropriate implementation in iframe
sandbox. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on
2019-03-01

[$N/A][1136327] Low CVE-2021-21140: Uninitialized Use in USB. Reported by David
Manouchehri on 2020-10-08

[$N/A][1140435] Low CVE-2021-21141: Insufficient policy enforcement in File
System API. Reported by Maciej Pulikowski on 2020-10-20

summary: VUL-0: chromium: Update to 88.0.4324.96


--1611110976.11A7b1.26323
Date: Wed, 20 Jan 2021 02:49:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181145

            Bug ID: 1181145
           Summary: (CVE-2021-3114) VUL-0: CVE-2021-3114: go1.15,go1.14: go: crypto/elliptic: incorrect operations on the P-224 curve
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

crypto/elliptic: incorrect operations on the P-224 curve

The P224() Curve implementation can in rare circumstances generate incorrect
outputs, including returning invalid points from ScalarMult.

The crypto/x509 and golang.org/x/crypto/ocsp (but not crypto/tls) packages
support P-224 ECDSA keys, but they are not supported by publicly trusted
certificate authorities. No other standard library or golang.org/x/crypto
package supports or uses the P-224 curve.

The incorrect output was found by the elliptic-curve-differential-fuzzer
project running on OSS-Fuzz and reported by Philippe Antoine (Catena cyber).

This issue is CVE-2021-3114 and Go issue http://golang.org/issue/43786


--1611111082.60F4c5b81.26422
Date: Wed, 20 Jan 2021 02:51:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181146

            Bug ID: 1181146
           Summary: (CVE-2021-3115) VUL-0: CVE-2021-3115: go1.15,go1.14: go: cmd/go: packages using cgo can cause arbitrary code execution at build time
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

cmd/go: packages using cgo can cause arbitrary code execution at build time

The go command may execute arbitrary code at build time when cgo is in use on
Windows. This may occur when running ???go get???, or any other command that builds
code. Only users who build untrusted code (and don???t execute it) are affected.

In addition to Windows users, this can also affect Unix users who have ???.???
listed explicitly in their PATH and are running ???go get??? or build commands
outside of a module or with module mode disabled.

Thanks to RyotaK (https://twitter.com/ryotkak) for reporting this issue.

This issue is CVE-2021-3115 and Go issue http://golang.org/issue/43783.


--1611133483.57Be4F60.27042
Date: Wed, 20 Jan 2021 09:04:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181155

            Bug ID: 1181155
           Summary: [Build 20210118] openQA test fails in aa_notify
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/1593121/modules/aa_n
                    otify/steps/16
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-apparmor@aarch64 fails
in
[aa_notify](https://openqa.opensuse.org/tests/1593121/modules/aa_notify/steps/16)

Only aarch64 is affected.
'aa-notify -l' returns:
ERROR: Could not find last login

## Test suite description
Maintainer: wnereiz.

Test AppArmor tool with an existing disk image.

## Reproducible

Fails since (at least) Build
[20201126](https://openqa.opensuse.org/tests/1487834)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensuse&flavor=DVD&machine=aarch64&test=apparmor&version=Tumbleweed)


body:
Build Identifier:

mpv: pcm_plugin.c:570: snd_pcm_plugin_status: Assertion `status->appl_ptr ==
*pcm->appl.ptr' failed.
Aborted (core dumped)

Reproducible: Always

summary: sound not working in mpv /smplayer


--1611215325.8a1FC0.11098
Date: Thu, 21 Jan 2021 07:48:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181197

            Bug ID: 1181197
           Summary: VUL-0: CVE-2021-2074: virtualbox: core: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/275982/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2074

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.18.
Easily exploitable vulnerability allows high privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products. Successful attacks of this
vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base
Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2074
https://www.oracle.com/security-alerts/cpujan2021.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2074


--1611215365.5D7d4EF0.21702
Date: Thu, 21 Jan 2021 07:49:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181198

            Bug ID: 1181198
           Summary: VUL-0: CVE-2021-2129: virtualbox: core: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/276037/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: Larry.Finger-at-gmail.com
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2021-2129

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization
(component: Core). The supported version that is affected is Prior to 6.1.18.
Easily exploitable vulnerability allows high privileged attacker with logon to
the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM
VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may
significantly impact additional products. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Oracle VM VirtualBox accessible data as well as
unauthorized access to critical data or complete access to all Oracle VM
VirtualBox accessible data. CVSS 3.1 Base Score 7.9 (Confidentiality and
Integrity impacts). CVSS Vector:
(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-2129
https://www.oracle.com/security-alerts/cpujan2021.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2129


--1611239550.fe37D0.3168
Date: Thu, 21 Jan 2021 14:32:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181244

            Bug ID: 1181244
           Summary: Duplicate journal timestamp prefix for tor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i686
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: suseino-at-riseup.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 845400
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845400&action=edit
journal

After a recent update to TW 20210118 the journal lines related to tor are
double prefixed with date/time stamp:

Attaching journal.


--1611278503.6B5c80.22606
Date: Fri, 22 Jan 2021 01:21:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181263

            Bug ID: 1181263
           Summary: xfce4-xkb-plugin and xfce4-keyboard-settings don't switch keyboard layouts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: CheeseEBoi-at-mailo.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I am able to add keyboard layouts to XFCE via the "layouts" page in
"xfce4-keyboard-settings." However, the keyboard shortcut I set does not seem
to change anything. Plus, manually switching the order of the layouts in the
menu and typing reveals that nothing has actually changed. The keyboard layouts
plugin does not seem to work either.

As a more straightforward and easily repeatable example, I added Spanish along
with English to my layouts section. When I use a keyboard shortcut to switch
from English to Spanish, the US flag on the panel plugin does not change to a
Spanish one. This also does not happen when clicking on the switcher.

I have tested this on a live CD of Tumbleweed as well as my installation of
Leap 15.2 with the X11:xfce repository enabled. Could this be a packaging
problem or maybe something to do with YaST?


--1611305480.a54c10.21101
Date: Fri, 22 Jan 2021 08:51:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181270

            Bug ID: 1181270
           Summary: python: 15 python packages fail to build in openSUSE:Backports
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello

following packages are failing to build in openSUSE:Backports:SLE-15-SP3

python-anymarkup
python-diskcache
python-jsonextended
python-ldap
python-markdown2
python-ncclient
python-oslo.messaging
python-oslotest
python-piexif
python-pulsectl
python-pycallgraph
python-sigal
python-sphinx-autodoc-typehints
python-tables

Could you please have a look? These should be ideally fixed in Leap 15.3 Beta
(checking deadline 12th Feb).

Thank you very much in advance


--1611312489.dEea0.23965
Date: Fri, 22 Jan 2021 10:48:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181279

            Bug ID: 1181279
           Summary: Failed to preset unit: Unit file tlp-sleep.service does not exist.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: marina.latini-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installing: tlp-1.3.1-3.1.noarch .......[done]
Additional rpm output:
Failed to preset unit: Unit file tlp-sleep.service does not exist.
systemd-sysv-convert: warning, /usr/lib/systemd/system/tlp-sleep.service not
found, skipping
Failed to try-restart tlp-sleep.service: Unit tlp-sleep.service not found.

Information for package tlp:
----------------------------
Repository     : Main Repository (OSS)
Name           : tlp
Version        : 1.3.1-3.1
Arch           : noarch
Vendor         : openSUSE
Installed Size : 314.7 KiB
Installed      : Yes
Status         : up-to-date
Source package : tlp-1.3.1-3.1.src
Summary        : Tools to save battery power on laptops
Description    :
    TLP implements advanced power management for Linux.
    TLP is a pure command line tool with automated background tasks.
    It does not contain a GUI.


--1611327293.65280.20891
Date: Fri, 22 Jan 2021 14:54:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181292

            Bug ID: 1181292
           Summary: no json in php8 although it should be built in
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: erik.martre-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Trying to open a local site fails with fatal uncaught error : undefined
function json_encode().
PHP version is 8.0.1-1.1 built on 2021-01-20.
After coming back to  PHP7 (7.4.14-2.1) the site opens and works as usually.

I tried first to install all PHP8 packages similar to those I have with PHP7,
but it didn't work and the site was unreachable because of connection reset,
though I had restarted apache2.


--1611420831.1cB5Fd0.8191
Date: Sat, 23 Jan 2021 16:53:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181324

            Bug ID: 1181324
           Summary: Python multiversion breaks python installation
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a clean TW installation from an older DVD, dup'ed to lastest version.
This leaves me with:

ocalhost:~ # dir /usr/bin/pyth*
lrwxrwxrwx 1 root root     9 Jan 16 08:49 /usr/bin/python -> python2.7
lrwxrwxrwx 1 root root    32 Jan 16 10:57 /usr/bin/python-barcode ->
/etc/alternatives/python-barcode
-rwxr-xr-x 1 root root   422 Jan 16 10:57 /usr/bin/python-barcode-3.8
lrwxrwxrwx 1 root root     9 Jan 16 08:49 /usr/bin/python2 -> python2.7
-rwxr-xr-x 1 root root 14488 Jan 16 08:49 /usr/bin/python2.7
lrwxrwxrwx 1 root root     9 Oct  8  2019 /usr/bin/python3 -> python3.7
-rwxr-xr-x 2 root root 14488 Oct  8  2019 /usr/bin/python3.7
-rwxr-xr-x 2 root root 14488 Oct  8  2019 /usr/bin/python3.7m
-rwxr-xr-x 1 root root 14488 Nov 29 12:51 /usr/bin/python3.8

As one can imagine, when installing a python application that pulls latest
python, this installation breaks.

As recommended in
https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/message/JSBEDHD7OKIU24UC2ASVLUDFJLQCIOFH/

localhost:~ # zypper in --force python38-base
Loading repository data...
Reading installed packages...
Forcing installation of 'python38-base-3.8.6-2.1.x86_64' from repository
'Haupt-Repository (OSS)'.
Resolving package dependencies...

The following package is going to be reinstalled:
  python38-base

1 package to reinstall.
Overall download size: 8.7 MiB. Already cached: 0 B. No additional space will
be used or freed after the operation.
Continue? [y/n/v/...? shows all options] (y):
Retrieving package python38-base-3.8.6-2.1.x86_64
          (1/1),   8.7 MiB ( 33.1 MiB unpacked)
Retrieving: python38-base-3.8.6-2.1.x86_64.rpm
..............................................................[done (3.9
MiB/s)]

Checking for file conflicts:
...........................................................................................[error]
Detected 3 file conflicts:

File /usr/bin/pydoc3
  from install of
     python38-base-3.8.6-2.1.x86_64 (Haupt-Repository (OSS))
  conflicts with file from package
     python3-base-3.7.3-1.4.x86_64 (@System)

File /usr/bin/python3
  from install of
     python38-base-3.8.6-2.1.x86_64 (Haupt-Repository (OSS))
  conflicts with file from package
     python3-base-3.7.3-1.4.x86_64 (@System)

File /usr/share/man/man1/python3.1.gz
  from install of
     python38-base-3.8.6-2.1.x86_64 (Haupt-Repository (OSS))
  conflicts with file from package
     python3-base-3.7.3-1.4.x86_64 (@System)

File conflicts happen when two packages attempt to install files with the same
name but different contents. If you continue, conflicting files will be
replaced losing the previous content.
Continue? [yes/no] (no):

-> Update to latest Python version not working unattended, this breaking python
installations


--1611543542.b80400.28596
Date: Mon, 25 Jan 2021 02:59:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181334

            Bug ID: 1181334
           Summary: wireguard-tools: support tunnel config reload
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bwiedemann-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mardnh-at-gmx.de
          Found By: Development
           Blocker: ---

The newer wireguard-tools version 1.0.20200827 allows to do
systemctl reload wg-quick@wg0.service

that simplifies operation of a wireguard server.


--1611564875.F8a020.32262
Date: Mon, 25 Jan 2021 08:54:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181344

            Bug ID: 1181344
           Summary: [Build 58.1] openQA test fails on signature validation 65276565: NOKEY
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1600146/modules/awai
                    t_install/steps/70
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

Created attachment 845472
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845472&action=edit
screenshot of integrity check fail

## Observation

All tests currently fail at verification of signature. Seems like all these
rpms are from the openSUSE:Backports project
(https://openqa.opensuse.org/tests/1600146/modules/await_install/steps/70)

See attached screenshot with extra details compared to openQA
## Test suite description

## Reproducible

Fails since (at least) Build [58.1](https://openqa.opensuse.org/tests/1600146)
(current job)

## Expected result

Last good: [46.1](https://openqa.opensuse.org/tests/1582546) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=RAID0_gpt&version=15.3)


body:
--1611574019.F8F43B3.23836
Date: Mon, 25 Jan 2021 11:26:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181350

            Bug ID: 1181350
           Summary: [Build 20210122] openQA test fails in virt_install
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/1600600/modules/virt
                    _install/steps/19
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, carnold-at-suse.com, dmueller-at-suse.com
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-aarch64-virtualization@aarch64
fails in
[virt_install](https://openqa.opensuse.org/tests/1600600/modules/virt_install/steps/19)

Since https://build.opensuse.org/request/show/863175 openQA test fails for
virt-install on aarch64 only.

## Test suite description
Maintainer: okurz. Test virtualization stack using libvirt and virt-manager.

## Reproducible

Fails since (at least) Build
[20210121](https://openqa.opensuse.org/tests/1596422)

## Expected result

Last good: [20210118](https://openqa.opensuse.org/tests/1593423) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensuse&flavor=DVD&machine=aarch64&test=virtualization&version=Tumbleweed)

pkgs: qemu virt-manager


body:
--1611648420.AAdbf4.24782
Date: Tue, 26 Jan 2021 08:07:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181402

            Bug ID: 1181402
           Summary: dd_rescue fails on LZO test on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com, suse-at-garloff.de
          Found By: ---
           Blocker: ---

dd_rescue fails on LZO test on aarch64.
See:
https://build.opensuse.org/package/live_build_log/Base:System/dd_rescue/openSUSE_Factory_ARM/aarch64

Log:
[  121s] ./fuzz_lzo -C2 dd_rescue dd_rescue.lzo
[  121s] Blk 2: cadl(0) ^= deadbeef
[  121s] ./dd_rescue -tL ./libddr_lzo.so=nodiscard dd_rescue.lzo dd_rescue.cmp
[  121s] [0;1mdd_rescue: (info): [0;0mUsing softbs=128.0kiB, hardbs=4.0kiB
[  121s] [0;1mdd_rescue: (info): [0;0mexpect to copy 197.2kiB from
dd_rescue.lzo
[  121s] [0;1mdd_rescue: (info): [0;0mread dd_rescue.lzo (197.2kiB): EOF
[  121s] [0;1mdd_rescue: (info): [0;0mSummary for dd_rescue.lzo ->
dd_rescue.cmp
[  121s] dd_rescue: (info): ipos:       197.2k, opos:       419.0k, xferd:
 197.2k
[  121s]                    errs:      0, errxfer:         0.0k, succxfer:
 419.0k
[  121s]              +curr.rate:    [0;1m37[0;0m233kB/s, avg.rate:
[0;1m37[0;0m233kB/s, avg.load: 75.8%
[  121s]              >-.......................................-< 100%  TOT:
0:00:00
[  121s] [0;1mdd_rescue: (info): [0;0mlzo(0): lzo1x_1_decompr 196.7kiB (46.9%)
+ 483 -> 419.0kiB
[  121s] Unexpected exit value 0 (exp: 1-1)
[  121s] make[1]: *** [Makefile:630: check_lzo_fuzz] Error 2

summary: dd_rescue fails on LZO test on aarch64


--1611734584.eE0781e60.28237
Date: Wed, 27 Jan 2021 08:03:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181445

            Bug ID: 1181445
           Summary: VUL-0: CVE-2020-8293: nextcloud: input validation issue allows users to store unlimited data in workflow rules
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/276540/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8293

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11
allows users to store unlimited data in workflow rules causing load and
potential DDoS on later interactions and usage with those rules.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8293
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8293
https://nextcloud.com/security/advisory/?id=NC-SA-2021-001
https://hackerone.com/reports/1018146


--1611753878.cAaf870.14191
Date: Wed, 27 Jan 2021 13:24:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181458

            Bug ID: 1181458
           Summary: systemd: don't create /var/lib/systemd/random-seed in %post
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: systemd-maintainers-at-suse.de
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

systemd's %post creates /var/lib/systemd/random-seed. That means it gets
packaged into eg into kiwi images. So appliances would initialize with same
random seed.
Any harm done by not saving the random seed in %post?
yast already stores the state of the installation environment itself (bug
1174964).


--1611761044.cbdE0.10509
Date: Wed, 27 Jan 2021 15:24:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181468

            Bug ID: 1181468
           Summary: VUL-0: CVE-2020-10932: mbedtls: side channel attack possibly leading to information disclosure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/257363/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-10932

A side channel attack in conjuction with other methods possibly leading to
information disclosure.

Upstream Advisory:

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-04

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1838550
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-10932
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-10932.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10932
https://tls.mbed.org/tech-updates/security-advisories
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-04
https://lists.fedoraproject.org/archives/list/package-announce-at-lists.fedoraproject.org/message/FCWN5HIF4CJ2LZTOMEBJ7Q4IMMV7ZU2V/
https://lists.fedoraproject.org/archives/list/package-announce-at-lists.fedoraproject.org/message/ZNOS2IIBH5WNJXZUV546PY7666DE7Y3L/
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released


--1611820602.BdC6280.11554
Date: Thu, 28 Jan 2021 07:56:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181497

            Bug ID: 1181497
           Summary: [Build 20210127] openQA test fails in docker_compose
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1607222/modules/dock
                    er_compose/steps/43
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-jeos-containers@64bit_virtio
fails in
[docker_compose](https://openqa.opensuse.org/tests/1607222/modules/docker_compose/steps/43)

After python-docker-compose finally reuilt as python36 and python38 module, the
symbols 'docker-compose' is no longer provided, which makes installation
needlessly complicated (having to specify python<xz>-docker-compose for users
actually caring for the 'application docker-compose'

## Test suite description
JeOS as container host. Test container runtimes (podman and docker) and related
tools

## Reproducible

Fails since (at least) Build
[20210127](https://openqa.opensuse.org/tests/1606773)

## Expected result

Last good: [20210126](https://openqa.opensuse.org/tests/1605597) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=JeOS-for-kvm-and-xen&machine=64bit_virtio&test=jeos-containers&version=Tumbleweed)


body:
Build Identifier:

Clean 15.2 server install, with all updates.

install lxd with recommended packages

Can launch containers but cannot launch VMs.

lxc is complaining that it can't find /usr/share/OVMF/OVMF_VARS.ms.fd, which
doesn't exist.

The reply by St?phane Graber to this comment
https://discuss.linuxcontainers.org/t/trying-lxd-virtual-machines/6182/3
indicates it's caused by a missing /dev/kvm.  Installing the pattern lvm_tools
(and rebooting) did not change the outcome.

Reproducible: Always

Steps to Reproduce:
1. clean install opensuse Leap 15.2 server
2. zypper install --recommends lxd qemu
3. sudo lxc launch images:opensuse/15.2 fred --ephemeral --console # this works
4. sudo lxc launch images:opensuse/15.2 fred-vm -vm --ephemeral --console #
this fails
Actual Results:
# lxc --verbose launch --vm images:opensuse/15.2/cloud/amd64 oS-152-vm

Creating oS-152-vm
Starting oS-152-vm
Error: lstat /usr/share/OVMF/OVMF_VARS.ms.fd: no such file or directory
Try `lxc info --show-log local:oS-152-vm` for more info

# lxc info --show-log local:oS-152-vm

Name: oS-152-vm
Location: none
Remote: unix://
Architecture: x86_64
Created: 2021/01/24 21:18 UTC
Status: Stopped
Type: virtual-machine
Profiles: default
Error: open /var/log/lxd/oS-152-vm/qemu.log: no such file or directory

Expected Results:
VM starts (into the console).

Can I suggest that, once the issue has been traced, a new package (say, lxd-vm)
is created that requires all the necessary packages (e.g. qemu) and has
whatever configuration files / steps are needed.

This works properly out-of-the-box on ubuntu 20.04, as a reference for the
expected behaviour.

As an additional comment (separate defect), the man pages of the lxc commands
have been moved into a separate set of lxc-**** man pages (e.g. man
lxc-profile).  These aren't included in the opensuse lxc package so all the
detailed helps missing.

Discussion on forum (including my meandering and wrong paths) here:
https://forums.opensuse.org/showthread.php/549577-lxc-can-t-launch-opensuse-15-2-VM

summary: LXD won't start VMs


body:
Build Identifier:

After closing Musescore I went to restart my system, but a dialogue pops up
saying Musescore is still running in the background. I opened up System Monitor
to see mscore is still running despite me closing the app.

Reproducible: Always

Steps to Reproduce:
1. Open Musescore
2. Close Musescore
Actual Results:
The process "mscore" is still running in the background, as can be seen on the
System Monitor software.

Expected Results:
The process "mscore" should not be running in background after closing the
software.

summary: Musescore still running in background after closing it.


body:
--1612007619.ceE42.1935
Date: Sat, 30 Jan 2021 11:53:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181606

            Bug ID: 1181606
           Summary: Unable to Install from Krypton ISO
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: justin.zobel-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 845659
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845659&action=edit
y2log file

ISO 39efed9125c78b149636e98bc67ae580f61a75f8bd41eb7f8eeadc248ae240ed
Downloads/openSUSE_Krypton.x86_64-5.12.80-Build17.155.iso

Installer hangs early on.

Steps to Reproduce.

Connect to WiFi (Internet needed for installer)
Run Installer

summary: Unable to Install from Krypton ISO


--1612095291.3B2dAECC0.30131
Date: Sun, 31 Jan 2021 12:14:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181618

            Bug ID: 1181618
           Summary: gcc ICE on building webkit2gtk3 for Leap 15.3
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We had this with Leap 15.2 already, and it is still unfixed, breaking the
bootstrap of a leap 15.3 for armv7hl:

[  252s] ../Source/WTF/wtf/MediaTime.cpp: In static member function 'static
WTF::MediaTime WTF::MediaTime::createWithFloat(float)':
[  252s] ../Source/WTF/wtf/MediaTime.cpp:87:61:   in constexpr expansion of
'value.WTF::MediaTime::MediaTime(0, 10000000, ((uint8_t)(1 | 32)))'
[  252s] ../Source/WTF/wtf/MediaTime.cpp:87:61: internal compiler error: in
cxx_eval_constant_expression, at cp/constexpr.c:4644
[  252s]      MediaTime value(0, DefaultTimeScale, Valid | DoubleValue);
[  252s]                                                              ^
[  252s] Please submit a full bug report,
[  252s] with preprocessed source if appropriate.
[  252s] See <https://bugs.opensuse.org/> for instructions.

the assert location smells like
https://gcc.gnu.org/git/?p=gcc.git;a=commit;f=gcc/cp/constexpr.c;h=d49318d9bc3e63251aada27b322e7756eab19884

would fix it.


--1612132456.70acAf60.30045
Date: Sun, 31 Jan 2021 22:34:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181621

            Bug ID: 1181621
           Summary: All llvm packages fail to build on ppc64le
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PowerPC-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aaronpuchert@alice-dsl.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

All llvm packages fail to build on ppc64le since mid-November. They all get
stuck in the configuration of stage 2 like this:


--1612179336.072020.12821
Date: Mon, 1 Feb 2021 11:35:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181641

            Bug ID: 1181641
           Summary: After updating docker-runc, command runc not available
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: honyczek-at-centrum.cz
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I've updated my system today to new docker-runc package from Virtualization
repository (version 1.0.0rc92+gitr4514_ff819c7e9184-lp152.78.1). After computer
restart my docker containers have not started. There had been an error in the
docker-compose logs:

  Cannot start service cassandra: OCI runtime create failed: unable to retrieve
OCI runtime error (open
/var/run/docker/containerd/daemon/io.containerd.runtime.v2.task/moby/fc07e27967c34368f441a0053a60c6f0b64e92a422747c69f092eb448957494e/log.json:
no such file or directory): exec: "runc": executable file not found in $PATH:
unknown

So I've created symlink to docker-runc:

  ln -s /usr/sbin/docker-runc /usr/sbin/runc

And now containers run.


body:
--1612181956.f8e13.28221
Date: Mon, 1 Feb 2021 12:19:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181643

            Bug ID: 1181643
           Summary: Rust 1.47 fails to build on armv7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com,
                    william.brown-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 845681
  --> http://bugzilla.opensuse.org/attachment.cgi?id=845681&action=edit
armv7 build log

Rust 1.47 fails to build on armv7.

BUild log in attachment.
Latest build log available at:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:ARM/rust/standard/armv7l

summary: Rust 1.47 fails to build on armv7


--1612189941.fBd5CB410.12172
Date: Mon, 1 Feb 2021 14:32:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181650

            Bug ID: 1181650
           Summary: VUL-0:  privoxy: two DoS issues fixed in Privoxy 3.0.31 stable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mseben-at-gmail.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

through oss

--------------------------------------------------------------------
ChangeLog for Privoxy 3.0.31
--------------------------------------------------------------------

- Security/Reliability:
  - Prevent an assertion from getting triggered by a crafted CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001.
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001.
[...]
-----------------------------------------------------------------
About Privoxy:
-----------------------------------------------------------------

Privoxy is a non-caching web proxy with advanced filtering capabilities for
enhancing privacy, modifying web page data and HTTP headers, controlling
access, and removing ads and other obnoxious Internet junk. Privoxy has a
flexible configuration and can be customized to suit individual needs and
tastes. It has application for both stand-alone systems and multi-user
networks.

Privoxy is Free Software and licensed under the GNU GPLv2.

[...]

Home Page:
https://www.privoxy.org/

ChangeLog:
https://www.privoxy.org/3.0.31/user-manual/whatsnew.html


--1612191049.075622.29627
Date: Mon, 1 Feb 2021 14:50:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181653

            Bug ID: 1181653
           Summary: libyui CMake Build System barely Maintainable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: shundhammer-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Currently, the YaST libyui packages use a CMake-based build system that is a
convoluted, hard to understand mess of centralized .cmake include files and a
toplevel CMakeList.txt that is symlinked to the central one somewhere in a
system directory. In each project repo, information is scattered among a dozen
file snippets that are magically included from somewhere.

Nobody understands the control flow of that, so everybody avoids touching that,
so even obvious problems are never cleaned up.

We urgently need to fix this so that build environment becomes maintainable
again.

More details here:

https://gist.github.com/shundhammer/d96a63a1cab8245d20c2e3556238a114


body:
--1612244524.C2ed75E0.14627
Date: Tue, 2 Feb 2021 05:42:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181677

            Bug ID: 1181677
           Summary: remove docker-runc and docker-proxy packages plus unneeded -kubic flavours
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

docker-runc is no longer necessary (and is causing issues such as bug 1181641)
now that upstream follows the upstream runc versioning (which we maintain in
the normal runc package).

golang-github-docker-libnetwork has always been a strange package and because
the libnetwork project is so unstable when it comes to versioning (Docker has
never pinned an actual version, always a git commit) it seems far more
reasonable to just make it part of the same package

pkgs: containerd docker runc


body:
--1612260797.5Bdb4Dd2.32645
Date: Tue, 2 Feb 2021 10:13:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181691

            Bug ID: 1181691
           Summary: texlive-sourcecodepro installs wrong files
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: lw-at-weberhofer.at
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

When I run PDFBox I get

Could not load font file:
/usr/share/fonts/texlive-sourcecodepro/SourceCodePro-SemiboldIt.pfb
java.io.IOException: Found Token[kind=LITERAL, text=UnderlinePosition] but
expected NAME

The file size of this installed font is 177730.

When I download the same font from
https://www.ctan.org/tex-archive/fonts/sourcecodepro/fonts the file size is
177645.

After replacing the installed font with downloaded one the error vanish.

It seems like that all fonts from this folder with *.pfb have a different size,
e.g.

installed SourceCodePro-MediumIt.pfb = 176608
downloaded SourceCodePro-MediumIt.pfb = 176527

pkgs: texlive-specs-n texlive-specs-v


--1612283758.eF6F0a0.11327
Date: Tue, 2 Feb 2021 16:35:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181710

            Bug ID: 1181710
           Summary: CIFS_MOUNT_USE_PREFIX_PATH seems disabled since Linux-5.3.18-lp152.60 patch
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Samba
          Assignee: samba-maintainers@SuSE.de
          Reporter: duge@pre-sense.de
        QA Contact: samba-maintainers@SuSE.de
          Found By: ---
           Blocker: ---

Since the Linux-5.3.18-lp152.60 patch (2021-01-15) I can't access CIFS shares
where the parent folder has no read permissions.

Example:
mount -t cifs \\server\users_share\alice /mnt
Alice has no permissions for the folder "users_share", so she can't see other
usernames.
But Alice has permissions for the folder "alice".

Until 5.3.18-lp152.57 such a mount worked fine.
I just got this message with 5.3.18-lp152.57:
| cannot query dirs between root and final path, enabling
CIFS_MOUNT_USE_PREFIX_PATH
But the mount was fine.

I believe this patch might be the cause for this problem:
kernel-default.15528/patches.suse.tar.bz2/cifs-ensure-correct-super-block-for-DFS-reconnect.patch:158
https://build.opensuse.org/package/show/openSUSE:Leap:15.2:Update/kernel-default.15528

Note:
This is about the Linux kernel on the client.
The server is a NetApp device based on FreeBSD and Samba:
https://en.wikipedia.org/wiki/NetApp
I'm currently trying to reproduce this with different servers.


--1612359268.7cdDCcdE0.3091
Date: Wed, 3 Feb 2021 13:34:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181746

            Bug ID: 1181746
           Summary: linphone crashes on start if ~/.local/share/linphone/linphone.db exists
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: eike@sf-mail.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

linphone-4.2.1-2.2.x86_64

Looks like this:

[07:47:27:955][0x55e1bd3e47c0][Info]"Running app..."
[07:47:27:957][0x55e1bd3e47c0][Info]"Activated selectors:" ("custom", "de_DE",
"unix", "linux", "opensuse-tumbleweed")
[07:47:27:957][0x55e1bd3e47c0][Info]"Registering types..."
[07:47:27:957][0x55e1bd3e47c0][Info]"Registering shared types..."
[07:47:27:957][0x55e1bd3e47c0][Info]"Registering tool types..."
[07:47:27:957][0x55e1bd3e47c0][Info]"Registering shared tool types..."
[07:47:27:994][0x55e1bd3e47c0][Info]"Loading main view..."
[07:47:28:031][0x55e1bd3e47c0][Info]"Launch async core creation."
Abgebrochen (Speicherabzug geschrieben)

Removing that file fixes it. This happens every once in a while when this file
gets recreated by something, afterwards I wipe it to get things working again
without any negative effect I can see.


--1612365304.E5b3E0.7666
Date: Wed, 3 Feb 2021 15:15:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181749

            Bug ID: 1181749
           Summary: Cannot update containerd due to incorrect runc dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: wb_jerry-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I try to update containerd from the Virtualization:containers repo, I get
the following error:

nothing provides runc%{name_suffix} needed by containerd-1.4.3-112.1.x86_64

It seems that in a [recent
revision](https://build.opensuse.org/package/rdiff/Virtualization:containers/containerd?linkrev=base&rev=111),
the definition of `name_suffix` is removed but still referenced for the runc
dependency.


--1612427204.D5B5aB0.29859
Date: Thu, 4 Feb 2021 08:26:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181772

            Bug ID: 1181772
           Summary: VUL-0: CVE-2021-21142,CVE-2021-21143,CVE-2021-21144,CVE-2021- 21145,CVE-2021-21146,CVE-2021-21147: chromium: Update to 88.0.4324.146
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

CVE-2021-21142: Use after free in Payments
CVE-2021-21143: Heap buffer overflow in Extensions
CVE-2021-21144: Heap buffer overflow in Tab Groups.
CVE-2021-21145: Use after free in Fonts
CVE-2021-21146: Use after free in Navigation.
CVE-2021-21147: Inappropriate implementation in Skia

Reference

https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html


body:
--1612428525.e6dBe880.2292
Date: Thu, 4 Feb 2021 08:48:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181775

            Bug ID: 1181775
           Summary: [binutils2.36] qemu build failure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Qemu build fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:C/qemu/standard/x86_64

with:

[ 1017s] Version: rel-1.14.0-0-g155821a-prebuilt.qemu.org
[ 1017s] ld: section .note.gnu.property LMA [0000000000000000,0000000000000027]
overlaps section .text LMA [0000000000000000,0000000000006e87]
[ 1017s] make[1]: *** [Makefile:242:
/home/abuild/rpmbuild/BUILD/qemu-5.2.0/roms/seabios/builds/vga-bochs-display/vgarom.o]
Error 1

It's pretty much the same problem as:
https://bugzilla.opensuse.org/show_bug.cgi?id=1181741

summary: [binutils2.36] qemu build failure


body:
--1612429565.F4e4Ca10.7120
Date: Thu, 4 Feb 2021 09:06:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181778

            Bug ID: 1181778
           Summary: [glibc2.33] lightdm build failure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/lightdm/standard/x86_64

with:

[   39s] libsystem.c:333:1: error: no previous prototype for '__xstat'
[-Werror=missing-prototypes]
[   39s]   333 | __xstat (int version, const char *path, struct stat *buf)
[   39s]       | ^~~~~~~
[   39s] libsystem.c:342:1: error: no previous prototype for '__xstat64'
[-Werror=missing-prototypes]
[   39s]   342 | __xstat64 (int version, const char *path, struct stat64 *buf)
[   39s]       | ^~~~~~~~~
[   39s] libsystem.c:351:1: error: no previous prototype for '__fxstatat'
[-Werror=missing-prototypes]
[   39s]   351 | __fxstatat(int ver, int dirfd, const char *pathname, struct
stat *buf, int flags)
[   39s]       | ^~~~~~~~~~
[   39s] libsystem.c:360:1: error: no previous prototype for '__fxstatat64'
[-Werror=missing-prototypes]
[   39s]   360 | __fxstatat64(int ver, int dirfd, const char *pathname, struct
stat64 *buf, int flags)
[   39s]       | ^~~~~~~~~~~~

Fails because glibc does not define __xstat64 function. So it's likely that
dlsym will fail as well.

summary: [glibc2.33] lightdm build failure


--1612449294.BEa026Da0.24254
Date: Thu, 4 Feb 2021 14:34:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181803

            Bug ID: 1181803
           Summary: VUL-1: CVE-2020-8294: nextcloud: A missing link validation
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/277108/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8294

A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11
allows execution of a stored XSS attack using Internet Explorer when saving a
'javascript:' URL in markdown format.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8294
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8294
https://hackerone.com/reports/1023787
https://nextcloud.com/security/advisory/?id=NC-SA-2021-002


--1612449477.7764F0aA0.25445
Date: Thu, 4 Feb 2021 14:37:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181804

            Bug ID: 1181804
           Summary: VUL-0: CVE-2020-8295: nextcloud: Denial of service attack when resetting the password for a user
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/276541/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8295

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of
service attack when resetting the password for a user.

https://hackerone.com/reports/812754
https://nextcloud.com/security/advisory/?id=NC-SA-2021-003

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1921309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8295
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8295
https://hackerone.com/reports/812754
https://nextcloud.com/security/advisory/?id=NC-SA-2021-003


body:
--1612511016.4a54ab0.5900
Date: Fri, 5 Feb 2021 07:43:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181825

            Bug ID: 1181825
           Summary: [trackerbug] lxd 4.11 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.11. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-11-has-been-released/10135

  + Bulk instance state change API
  + GVRP support for dynamic vlan configuration
  + Server-side instance storage pool migration
  + Volume usage API

  + VM: SR-IOV GPU Support
  + VM: PCI Device Type
  + VM: ISO images now exposed as cdrom

summary: [trackerbug] lxd 4.11 update


body:
--1612530784.6575a00d0.25249
Date: Fri, 5 Feb 2021 13:13:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181837

            Bug ID: 1181837
           Summary: Support for /.autorelabel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

selinux(8) says:

# The best way to relabel the file system is to create the flag file
/.autorelabel and reboot.

The idea is that relabelling of all disks is a bit chicken & egg problem: it is
hard to do relabelling with mislabelled system in the enforcing mode. Other
systems supporting SELinux have somewhere in the boot-up sequence a systemd
service which checks for the existence of /.autorelabel file and if it finds
it, blocks whole boot-up and relabels all files on all attached drives.

I don???t think it is necessary for us to support this mechanism (but we
shouldn???t mention it in the manpage), but for some unexplainable reasons this
file happens to exist on my drive (without me creating it), and after reboot it
is not removed and relabelling doesn???t seem to happen.

summary: Support for /.autorelabel


body:
--1612608849.CdECAbD0.20838
Date: Sat, 6 Feb 2021 10:54:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1181861

            Bug ID: 1181861
           Summary: GCC 11: Qt package failures
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Some of the Qt packages fail with GCC 11 due to:
https://bugreports.qt.io/browse/QTBUG-90395

List of affected packages:

kio.log .:[  155s] /usr/include/qt5/QtCore/qfloat16.h:300:7: error:
'numeric_limits' is not a class template
kitinerary.log .:[   71s] /usr/include/qt5/QtCore/qfloat16.h:300:7: error:
'numeric_limits' is not a class template
libqt5-qtbase.log .:[  103s]
../include/QtCore/../../src/corelib/global/qfloat16.h:300:7: error:
'numeric_limits' is not a class template
libqt5-qtconnectivity.log .:[   69s] /usr/include/qt5/QtCore/qfloat16.h:300:7:
error: 'numeric_limits' is not a class template
libqt5-qtmultimedia.log .:[  258s] /usr/include/qt5/QtCore/qfloat16.h:300:7:
error: 'numeric_limits' is not a class template
libqt5-qtwebsockets.log .:[   34s] /usr/include/qt5/QtCore/qfloat16.h:300:7:
error: 'numeric_limits' is not a class template

summary: GCC 11: Qt package failures


body:
--1612609030.B5CC80.21644
Date: Sat, 6 Feb 2021 10:57:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181862

            Bug ID: 1181862
           Summary: GCC 11: kernel-default package failures
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package fails with GCC 11:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/kernel-default/standard/x86_64

due to:

[   71s] * KCSAN: dynamic data race detector
[   71s] *
[   71s] KCSAN: dynamic data race detector (KCSAN) [N/y/?] (NEW)
[   71s] Error in reading or end of file.
[   71s]

KCSAN is a new feature and we likely miss it in our default config.

summary: GCC 11: kernel-default package failures


body:
--1612609298.1754FE0.15623
Date: Sat, 6 Feb 2021 11:01:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181864

            Bug ID: 1181864
           Summary: GCC 11: bazel3.4 package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/bazel3.4/standard/x86_64

with:
[1A[KIn file included from third_party/ijar/zlib_client.cc:20:
[  242s] ./third_party/ijar/zlib_client.h:64:46: error: 'numeric_limits' is not
a member of 'std'
[  242s]    64 |   static const size_t MAX_BUFFER_SIZE =
std::numeric_limits<int32_t>::max();
[  242s]       |                                              ^~~~~~~~~~~~~~
[  242s] ./third_party/ijar/zlib_client.h:64:68: error: expected
primary-expression before '>' token
[  242s]    64 |   static const size_t MAX_BUFFER_SIZE =
std::numeric_limits<int32_t>::max();
[  242s]       |
    ^
[  242s] ./third_party/ijar/zlib_client.h:64:71: error: '::max' has not been
declared; did you mean 'std::max'?
[  242s]    64 |   static const size_t MAX_BUFFER_SIZE =
std::numeric_limits<int32_t>::max();
[  242s]       |
       ^~~
[  242s]       |
       std::max

summary: GCC 11: bazel3.4 package fails


body:
--1612609411.aAe0C5ee0.23300
Date: Sat, 6 Feb 2021 11:03:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181866

            Bug ID: 1181866
           Summary: GCC 11: cilium-proxy package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/cilium-proxy/standard/x86_64

with:
[  179s] Use --sandbox_debug to see verbose messages from the sandbox
[  179s] external/boringssl/src/third_party/fiat/curve25519.c:511:57: error:
argument 2 of type 'const uint8_t[32]' {aka 'const unsigned char[32]'} with
mismatched bound [-Werror=array-parameter=]
[  179s]   511 | int x25519_ge_frombytes_vartime(ge_p3 *h, const uint8_t s[32])
{
[  179s]       |                                           ~~~~~~~~~~~~~~^~~~~
[  179s] In file included from
external/boringssl/src/third_party/fiat/curve25519.c:41:
[  179s] external/boringssl/src/third_party/fiat/internal.h:117:58: note:
previously declared as 'const uint8_t *' {aka 'const unsigned char *'}
[  179s]   117 | int x25519_ge_frombytes_vartime(ge_p3 *h, const uint8_t *s);
[  179s]       |                                           ~~~~~~~~~~~~~~~^
[  179s] external/boringssl/src/third_party/fiat/curve25519.c:831:57: error:
argument 2 of type 'const uint8_t *' {aka 'const unsigned char *'} declared as
a pointer [-Werror=array-parameter=]
[  179s]   831 | void x25519_ge_scalarmult_base(ge_p3 *h, const uint8_t *a) {
[  179s]       |                                          ~~~~~~~~~~~~~~~^
[  179s] In file included from
external/boringssl/src/third_party/fiat/curve25519.c:41:
[  179s] external/boringssl/src/third_party/fiat/internal.h:125:56: note:
previously declared as an array 'const uint8_t[32]' {aka 'const unsigned
char[32]'}
[  179s]   125 | void x25519_ge_scalarmult_base(ge_p3 *h, const uint8_t a[32]);
[  179s]       |                                          ~~~~~~~~~~~~~~^~~~~

summary: GCC 11: cilium-proxy package fails


body:
--1612609466.a2F763060.23572
Date: Sat, 6 Feb 2021 11:04:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181867

            Bug ID: 1181867
           Summary: GCC 11: dpkg package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/dpkg/standard/x86_64

due to:
[  184s] /usr/include/c++/11/bits/algorithmfwd.h:229:55: error: macro "clamp"
passed 4 arguments, but takes just 3
[  184s]   229 |     clamp(const _Tp&, const _Tp&, const _Tp&, _Compare);
[  184s]       |                                                       ^
[  184s] In file included from ../lib/dpkg/i18n.h:24,
[  184s]                  from basecmds.cc:28:
[  184s] ../lib/dpkg/macros.h:127: note: macro "clamp" defined here
[  184s]   127 | #define clamp(v, l, h) ((v) > (h) ? (h) : ((v) < (l) ? (l) :
(v)))
[  184s]       |
[  184s] In file included from /usr/include/c++/11/bits/stl_algo.h:60,
[  184s]                  from /usr/include/c++/11/algorithm:62,
[  184s]                  from dselect.h:27,
[  184s]                  from basetop.cc:26:
[  184s] /usr/include/c++/11/bits/algorithmfwd.h:229:55: error: macro "clamp"
passed 4 arguments, but takes just 3
[  184s]   229 |     clamp(const _Tp&, const _Tp&, const _Tp&, _Compare);

summary: GCC 11: dpkg package fails


body:
--1612609917.00C20.25822
Date: Sat, 6 Feb 2021 11:11:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181871

            Bug ID: 1181871
           Summary: GCC 11: libmfx package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/libmfx/standard/x86_64

with:
[   34s] [ 47%] Building CXX object
_studio/mfx_lib/vpp/CMakeFiles/vpp_hw.dir/src/mfx_vpp_main.cpp.o
[   34s]
/home/abuild/rpmbuild/BUILD/MediaSDK-intel-mediasdk-20.3.0/_studio/mfx_lib/mctf_package/mctf/src/mctf_common.cpp:
In function 'mfxU16 CalcNoiseStrength(double, double)':
[   34s]
/home/abuild/rpmbuild/BUILD/MediaSDK-intel-mediasdk-20.3.0/_studio/mfx_lib/mctf_package/mctf/src/mctf_common.cpp:2302:37:
error: 'numeric_limits' is not a member of 'std'
[   34s]  2302 |     if (std::fabs(NSC) <= 10 *
std::numeric_limits<double>::epsilon()) return 0;
[   34s]       |                                     ^~~~~~~~~~~~~~
[   34s]
/home/abuild/rpmbuild/BUILD/MediaSDK-intel-mediasdk-20.3.0/_studio/mfx_lib/mctf_package/mctf/src/mctf_common.cpp:2302:52:
error: expected primary-expression before 'double'
[   34s]  2302 |     if (std::fabs(NSC) <= 10 *
std::numeric_limits<double>::epsilon()) return 0;
[   34s]       |                                                    ^~~~~~
[   34s]
/home/abuild/rpmbuild/BUILD/MediaSDK-intel-mediasdk-20.3.0/_studio/mfx_lib/mctf_package/mctf/src/mctf_common.cpp:2302:52:
error: expected ')' before 'double'
[   34s]  2302 |     if (std::fabs(NSC) <= 10 *
std::numeric_limits<double>::epsilon()) return 0;
[   34s]       |        ~                                           ^~~~~~
[   34s]       |                                                    )

summary: GCC 11: libmfx package fails


body:
--1612610181.4B3d0.19861
Date: Sat, 6 Feb 2021 11:16:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181875

            Bug ID: 1181875
           Summary: GCC 11: llvm11 package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/llvm11/standard/x86_64

with:
[ 5434s] /home/abuild/rpmbuild/BUILD/llvm-11.0.1.src/stage1/bin/clang++
-DHAVE_POSIX_REGEX -DHAVE_STD_REGEX -DHAVE_STEADY_CLOCK -D_GNU_SOURCE
-D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS
-Iutils/benchmark/src -I../utils/benchmark/src -I/usr/include/libxml2 -Iinclude
-I../include -I../utils/benchmark/include -I../utils/benchmark/src/../include
-O2 -Wall -D_FORTIFY_SOURCE=0 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type
-DNDEBUG -fPIC -fvisibility-inlines-hidden -Wall -Wextra -Wno-unused-parameter
-Wwrite-strings -Wcast-qual -Wmissing-field-initializers -pedantic
-Wno-long-long -Wimplicit-fallthrough -Wno-noexcept-type -Wnon-virtual-dtor
-Wdelete-non-virtual-dtor -Wstring-conversion -fdiagnostics-color
-ffunction-sections -fdata-sections -flto=thin  -std=c++11  -Wall  -Wextra
-Wshadow  -pedantic  -pedantic-errors  -Wshorten-64-to-32  -Wfloat-equal
-fstrict-aliasing  -fno-exceptions  -Wstrict-aliasing  -Wthread-safety -O2 -g
-DNDEBUG -std=c++14 -MD -MT
utils/benchmark/src/CMakeFiles/benchmark.dir/benchmark_register.cc.o -MF
utils/benchmark/src/CMakeFiles/benchmark.dir/benchmark_register.cc.o.d -o
utils/benchmark/src/CMakeFiles/benchmark.dir/benchmark_register.cc.o -c
../utils/benchmark/src/benchmark_register.cc
[ 5434s] In file included from ../utils/benchmark/src/benchmark_register.cc:15:
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:30: error: no member
named 'numeric_limits' in namespace 'std'
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                         ~~~~~^
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:45: error: 'T' does not
refer to a value
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                                             ^
[ 5434s] ../utils/benchmark/src/benchmark_register.h:8:20: note: declared here
[ 5434s] template <typename T>
[ 5434s]                    ^
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:47: error: no member
named 'max' in the global namespace; did you mean 'kmax'?
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                                               ^~~~~
[ 5434s]                                               kmax
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:18: note: 'kmax'
declared here
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                  ^
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:18: error: default
initialization of an object of const type 'const long'
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                  ^
[ 5434s]                       = 0
[ 5434s] ../utils/benchmark/src/benchmark_register.cc:270:3: note: in
instantiation of function template specialization 'AddRange<long>' requested
here
[ 5434s]   AddRange(&arglist, start, limit, range_multiplier_);
[ 5434s]   ^
[ 5434s] In file included from ../utils/benchmark/src/benchmark_register.cc:15:
[ 5434s] ../utils/benchmark/src/benchmark_register.h:17:18: error: default
initialization of an object of const type 'const int'
[ 5434s]   static const T kmax = std::numeric_limits<T>::max();
[ 5434s]                  ^

summary: GCC 11: llvm11 package fails


body:
--1612610225.6eBBaAe40.27151
Date: Sat, 6 Feb 2021 11:17:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181876

            Bug ID: 1181876
           Summary: GCC 11: mbedtls package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/mbedtls/standard/x86_64

with:
[   39s] : && /usr/bin/cc -fPIC -O2 -Wall -D_FORTIFY_SOURCE=2
-fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables
-fstack-clash-protection -Werror=return-type -flto=auto -g -DNDEBUG -Wall
-Wextra -Wwrite-strings -Wvla -Wlogical-op -Wshadow -Wformat-signedness -Werror
-Wmissing-declarations -Wmissing-prototypes -O2 -g -DNDEBUG  -flto=auto
-Wl,--as-needed -Wl,--no-undefined -Wl,-z,now -shared
-Wl,-soname,libmbedtls.so.13 -o library/libmbedtls.so.2.25.0
library/CMakeFiles/mbedtls.dir/debug.c.o
library/CMakeFiles/mbedtls.dir/net_sockets.c.o
library/CMakeFiles/mbedtls.dir/ssl_cache.c.o
library/CMakeFiles/mbedtls.dir/ssl_ciphersuites.c.o
library/CMakeFiles/mbedtls.dir/ssl_cli.c.o
library/CMakeFiles/mbedtls.dir/ssl_cookie.c.o
library/CMakeFiles/mbedtls.dir/ssl_msg.c.o
library/CMakeFiles/mbedtls.dir/ssl_srv.c.o
library/CMakeFiles/mbedtls.dir/ssl_ticket.c.o
library/CMakeFiles/mbedtls.dir/ssl_tls.c.o
library/CMakeFiles/mbedtls.dir/ssl_tls13_keys.c.o
-Wl,-rpath,/home/abuild/rpmbuild/BUILD/mbedtls-2.25.0/build/library:
-lpkcs11-helper  -lz  -lpthread  library/libmbedx509.so.2.25.0
library/libmbedcrypto.so.2.25.0  -lpkcs11-helper  -lz  -lpthread && :
[   39s] ../library/ssl_tls.c: In function 'ssl_calc_finished_tls_sha384':
[   39s] ../library/ssl_tls.c:3267:5: error: 'mbedtls_sha512_finish_ret'
accessing 64 bytes in a region of size 48 [-Werror=stringop-overflow=]
[   39s]  3267 |     finish( &sha512, padbuf );
[   39s]       |     ^
[   39s] ../library/ssl_tls.c:3267:5: note: referencing argument 2 of type
'unsigned char *'
[   39s] ../include/mbedtls/sha512.h:144:5: note: in a call to function
'mbedtls_sha512_finish_ret'
[   39s]   144 | int mbedtls_sha512_finish_ret( mbedtls_sha512_context *ctx,
[   39s]       |     ^
[   39s] lto1: all warnings being treated as errors
[   39s] make: *** [/tmp/ccuSrJrI.mk:5: /tmp/ccmiJn6H.ltrans1.ltrans.o] Error 1
[   39s] make: *** Waiting for unfinished jobs....

summary: GCC 11: mbedtls package fails


body:
--1612610294.D4A5Ea0.27499
Date: Sat, 6 Feb 2021 11:18:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181877

            Bug ID: 1181877
           Summary: GCC 11: multipath-tools package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/multipath-tools/standard/x86_64

with:
[   43s] cc --std=gnu99  -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection
-Werror=return-type  -g -Werror -Wall -Wextra -Wformat=2 -Werror=implicit-int
-Werror=implicit-function-declaration -Werror=format-security -Wno-clobbered
-Wno-error=clobbered -Werror=cast-qual -Werror=discarded-qualifiers -pipe
-DBIN_DIR=\"/sbin\" -DLIB_STRING=\"lib64\" -DRUN_DIR=\"run\" -MMD -MP -fPIE
-DPIE -I../libmultipath -I../libmpathcmd -Wno-unused-parameter   -c -o
test-lib.o test-lib.c
[   43s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/multipath-tools-0.8.5+12+suse.3b0e9ca/tests'
[   43s] make[1]: Entering directory
'/home/abuild/rpmbuild/BUILD/multipath-tools-0.8.5+12+suse.3b0e9ca/tests'
[   43s] In file included from /usr/include/urcu/urcu-memb.h:35,
[   43s]                  from /usr/include/urcu/urcu.h:39,
[   43s]                  from /usr/include/urcu.h:2,
[   43s]                  from ../libmultipath/config.h:6,
[   43s]                  from ../libmultipath/structs_vec.h:5,
[   43s]                  from dmevents.c:30:
[   43s] ../multipathd/dmevents.c: In function 'dmevent_loop':
[   43s] ../multipathd/dmevents.c:355:17: error: '__sigsetjmp' accessing 200
bytes in a region of size 72 [-Werror=stringop-overflow=]
[   43s]   355 |                 pthread_cleanup_push(cleanup_lock,
&waiter->vecs->lock);
[   43s]       |                 ^~~~~~~~~~~~~~~~~~~~
[   43s] ../multipathd/dmevents.c:355:17: note: referencing argument 1 of type
'struct __jmp_buf_tag *'
[   43s] /usr/include/pthread.h:734:12: note: in a call to function
'__sigsetjmp'
[   43s]   734 | extern int __sigsetjmp (struct __jmp_buf_tag *__env, int
__savemask) __THROWNL;
[   43s]       |            ^~~~~~~~~~~
[   43s] ../multipathd/dmevents.c: In function 'wait_dmevents':
[   43s] ../multipathd/dmevents.c:390:9: error: '__sigsetjmp' accessing 200
bytes in a region of size 72 [-Werror=stringop-overflow=]
[   43s]   390 |         pthread_cleanup_push(rcu_unregister, NULL);
[   43s]       |         ^~~~~~~~~~~~~~~~~~~~
[   43s] ../multipathd/dmevents.c:390:9: note: referencing argument 1 of type
'struct __jmp_buf_tag *'
[   43s] /usr/include/pthread.h:734:12: note: in a call to function
'__sigsetjmp'
[   43s]   734 | extern int __sigsetjmp (struct __jmp_buf_tag *__env, int
__savemask) __THROWNL;
[   43s]       |            ^~~~~~~~~~~
[   43s] cc1: all warnings being treated as errors
[   43s] make[1]: *** [Makefile:63: dmevents.o] Error 1
[   43s] make[1]: Leaving directory
'/home/abuild/rpmbuild/BUILD/multipath-tools-0.8.5+12+suse.3b0e9ca/tests'
[   43s] make[1]: *** Waiting for unfinished jobs....
[   43s] rm test-lib.o.wrap parser.o.wrap dmevents.o.wrap hwtable.o.wrap
uevent.o.wrap util.o.wrap
[   43s] make: *** [Makefile:53: test] Error 2
[   43s] error: Bad exit status from /var/tmp/rpm-tmp.ra5XCt (%check)

summary: GCC 11: multipath-tools package fails


body:
--1612610542.b6Ba0.21682
Date: Sat, 6 Feb 2021 11:22:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181881

            Bug ID: 1181881
           Summary: GCC 11: presage package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/presage/standard/x86_64

due to:
[   73s] /bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H
-I. -I../..  -I../../src/lib/tinyxml   -O2 -Wall -D_FORTIFY_SOURCE=2
-fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables
-fstack-clash-protection -Werror=return-type -flto=auto -g
-I/usr/include/python3.8 -I/usr/include/python3.8 -c -o
libpresage_la-presage.lo `test -f 'presage.cpp' || echo './'`presage.cpp
[   73s] libtool: compile:  g++ -DHAVE_CONFIG_H -I. -I../..
-I../../src/lib/tinyxml -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection
-Werror=return-type -flto=auto -g -I/usr/include/python3.8
-I/usr/include/python3.8 -c presage.cpp  -fPIC -DPIC -o
.libs/libpresage_la-presage.o
[   74s] In file included from presage.cpp:25:
[   74s] presage.h:115:40: error: ISO C++17 does not allow dynamic exception
specifications
[   74s]   115 |     Presage(PresageCallback* callback) throw
(PresageException);
[   74s]       |                                        ^~~~~
[   74s] presage.h:125:66: error: ISO C++17 does not allow dynamic exception
specifications
[   74s]   125 |     Presage(PresageCallback* callback, const std::string
config) throw (PresageException);
[   74s]       |
  ^~~~~
[   74s] presage.h:141:40: error: ISO C++17 does not allow dynamic exception
specifications
[   74s]   141 |     std::vector<std::string> predict() throw
(PresageException);
[   74s]       |                                        ^~~~~
[   74s] presage.h:156:81: error: ISO C++17 does not allow dynamic exception
specifications
[   74s]   156 |     std::multimap<double, std::string>
predict(std::vector<std::string> filter) throw (PresageException);
[   74s]       |
                 ^~~~~

summary: GCC 11: presage package fails