--1510252501.1fde71.19512
Date: Thu, 9 Nov 2017 18:35:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1067511

            Bug ID: 1067511
           Summary: packages ppp, rp-pppoe and mtr do not find required group dialout
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PC
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

After a standard installation, I found this error in /var/log/zypp/history:

# 2017-11-08 21:35:09 mtr-0.92-1.1.x86_64.rpm installed ok
# Additional rpm output:
# warning: group dialout does not exist - using root
# warning: group dialout does not exist - using root
# /usr/sbin/mtr: unknown group dialout
#
2017-11-08
21:35:09|install|mtr|0.92-1.1|x86_64||openSUSE-20171104-0|adb1c9140ea8a75f461fba39ee87d18fd5fa5ee1|

# 2017-11-08 21:41:24 ppp-2.4.7-8.3.x86_64.rpm installed ok
# Additional rpm output:
# warning: group dialout does not exist - using root
#
2017-11-08
21:41:24|install|ppp|2.4.7-8.3|x86_64||openSUSE-20171104-0|9f5d608a7710532ab5fb3aca29bc35298a37b136|

# 2017-11-09 08:48:22 rp-pppoe-3.12-3.1.x86_64.rpm installed ok
# Additional rpm output:
# warning: group dialout does not exist - using root
#
2017-11-09
08:48:22|install|rp-pppoe|3.12-3.1|x86_64||openSUSE-20171104-0|54baf31399deaac50acd30477b92a13e6043e8b7|

these 3 packages requires the existence of group dialout which does not exist
when they are installed.

The fix is to add the line:
  Requires:       group(dialout)
in their spec file.


--1510271355.b680b5A0.21495
Date: Thu, 9 Nov 2017 23:49:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1067547

            Bug ID: 1067547
           Summary: packages qupzilla should depend on libQt5Sql5-sqlite
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PC
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If you have a tumbleweed/leap 42.3 installation without plasma5 (gnome, xfce,
lxde, etc.) and you install the lxqt pattern, qupzilla get installed but not
libQt5Sql5-sqlite.
If you start qupzilla you get the error message:
  Qt SQLite database plugin is not available, please install it.
After installing libQt5Sql5-sqlite qupzilla works.

A possible solution is to add:
  Requires: libQt5Sql5-sqlite
to qupzilla's spec file.


--1510308112.7C0d3.13582
Date: Fri, 10 Nov 2017 10:01:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1067607

            Bug ID: 1067607
           Summary: Add NetworkManager-l2tp to Leap and PackageHub
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: doug-at-uq.edu.au, matthias.gerstner-at-suse.com
          Found By: ---
           Blocker: ---

A user requested NetworkManager-l2tp to be added to PackageHub.
Specifically, a version that works with NetworkManager 1.0.x. The version 1.2.8
in Factory does not work wit that. "NetworkManager-l2tp 1.0.8 came out the same
time as version 1.2.8 and could be considered a backport of 1.2.8 to some
degree."

D-Bus service audited in bug 846337.

Submissions into maintenance:
https://build.opensuse.org/request/show/537385
https://build.opensuse.org/request/show/537752

I will fix up a new submission to help the user. Can I ask the GNOME team to
review in good in good faith.


--1510586371.cAAD0FeE0.11365
Date: Mon, 13 Nov 2017 15:19:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1067890

            Bug ID: 1067890
           Summary: tumbleweed + xfce --> vi/vim does not support primary and secondary clipboard by default
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: jzelazkova-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Pasting/copying via middle button into/from vi/vim not working properly via
middle button, copy/paste via right click working neither. After creating
~/.vimrc, both primary and secondary clip boxes were enabled, no matter the
~/.vimrc was empty.


--1510589156.7A4236.26166
Date: Mon, 13 Nov 2017 16:05:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1067895

            Bug ID: 1067895
           Summary: stardict-tools fails to build with libmariadb
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kstreitova-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

since the new MariaDB update to 10.2 mariadb package won't provide
libmysqlclient library but we will use libmariadb from the mariadb-connector-c
package.

It seems that your package currently fails to build with this library. This
blocks integration of the mariadb-connector-c and mariadb packages to Factory.

You can check builds in my test project:
https://build.opensuse.org/project/monitor/home:kstreitova:libmariadb


--1510589719.c7FA3540.31262
Date: Mon, 13 Nov 2017 16:15:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1067904

            Bug ID: 1067904
           Summary: mysql-workbench fails to build with libmariadb
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kstreitova-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

since the new MariaDB update to 10.2 mariadb package won't provide
libmysqlclient library but we will use libmariadb from the mariadb-connector-c
package.

It seems that your package currently fails to build with this library. This
blocks integration of the mariadb-connector-c and mariadb packages to Factory.

You can check builds in my test repository:
https://build.opensuse.org/project/monitor/home:kstreitova:libmariadb


--1510658609.5ab813.27276
Date: Tue, 14 Nov 2017 11:23:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068028

            Bug ID: 1068028
           Summary: VUL-0: CVE-2017-16785: Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/194837/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: liedke-at-rz.uni-mannheim.de
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: aj-at-ajaissle.de, bitdealer-at-gmail.com,
                    joop.boonen-at-boonen.org, liedke-at-rz.uni-mannheim.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16785
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16785.html
http://www.cvedetails.com/cve/CVE-2017-16785/
https://github.com/Cacti/cacti/issues/1071


body:
--1510686159.224dc0dF5.3561
Date: Tue, 14 Nov 2017 19:02:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068097

            Bug ID: 1068097
           Summary: VUL-0: CVE-2017-15923: konversation

summary: VUL-0: CVE-2017-15923: konversation


--1510686205.D0e20.9728
Date: Tue, 14 Nov 2017 19:03:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068098

            Bug ID: 1068098
           Summary: security:netfilter/xtables-addons: Bug (build needed for 4.13.12 kmp)
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: BuildService
          Assignee: jengelh-at-inai.de
          Reporter: phazasoft-at-rambler.ru
        QA Contact: adrian-at-suse.com
          Found By: ---
           Blocker: ---

13.12-1/Makefile:942: *** "Cannot generate ORC metadata for
CONFIG_ORC_UNWINDER=y, please install libelf-dev, libelf-devel or
elfutils-libelf-devel".  Stop.


--1510859324.C42A3.10289
Date: Thu, 16 Nov 2017 19:08:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068546

            Bug ID: 1068546
           Summary: Missing support for Cherrytrail-based laptops (e.g. ASUS E200H)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A few patches are missing in SLE15 / openSUSE-15.0 branches where they've been
merged recently to the upstream kernel.


--1510875315.AaFA1.14614
Date: Thu, 16 Nov 2017 23:35:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068578

            Bug ID: 1068578
           Summary: yast2-bootloader: undefined method `split' for #<CFA::AugeasTreeValue
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: ahmad@a3f.at
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 749102
  --> http://bugzilla.opensuse.org/attachment.cgi?id=749102&action=edit
standard output/error of yast2

Happens when opening Bootloader. Logs and console output attached. Using newest
Tumbleweed.


--1510918857.DA1D21D54.15916
Date: Fri, 17 Nov 2017 11:40:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1068678

            Bug ID: 1068678
           Summary: Package rsyslog requires package system-user-news
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When installing rsyslog in Tumbleweed there are warning messages that the user
news is not present (chown: invalid user: 'news:news'). Unless rsyslog is
changed to not using news, the package should require the package
"system-user-news".


--1510934058.BCfd0.918
Date: Fri, 17 Nov 2017 15:54:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068720

            Bug ID: 1068720
           Summary: VUL-0: CVE-2017-1000229: optipng: Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows anattacker to remotely execute code or cause denial of service.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/195251/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: pgajdos-at-suse.com
          Reporter: vpereira-at-microfocus.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-1000229

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows
an
attacker to remotely execute code or cause denial of service.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000229
https://sourceforge.net/p/optipng/bugs/65/


body:
--1510961447.f4810.3533
Date: Fri, 17 Nov 2017 23:30:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1068778

            Bug ID: 1068778
           Summary: Service request 5400 broke firewalld
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: carlos-at-techbyte.ca
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

It seems that the default python version now determines whether firewalld will
start successfully or not. If the default version (/usr/bin/pyhton symlink) is
not pointed to 3.6 firewalld fails to start. I have tested installing firewalld
on docker and even trying to run "--help" fails, this due to the fact that it
is looking for the necessary site-packages in the 2.7 folder.

I proposed that we revert the changes from service request 5400 and file a bug
upstream until issues with python3 have been resolved. Or, you could patch the
shebang of each of the bin scripts.
https://build.opensuse.org/request/show/540000

summary: Service request 5400 broke firewalld


body:
--1511002915.4CEddE0.14509
Date: Sat, 18 Nov 2017 11:01:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1068792

            Bug ID: 1068792
           Summary: MLT framework: multicore issue
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kailed-at-kailed.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 749253
  --> http://bugzilla.novell.com/attachment.cgi?id=749253&action=edit
Video for testing

While rendering a video with kdenlive or shotcut on a quad core system (athlon
860k) only one core is used.
1 core at 100% and 3 doing nothing. Total cpu usage <30%

In kdelive, even changing Threads number in the render dialog or mlt threads in
Settings->Configure->Environment->Processing threads, the result is always the
same.

In shotcut, option "Parallel Processing" also does nothing.

Steps to reproduce:
Make new full HD (1080p)project, load attached file, export at 1080p with h264
encoding.

pkgs: frei0r-plugins libmlt webcamoid

summary: MLT framework: multicore issue


body:
--1511103224.3ed51B0.9718
Date: Sun, 19 Nov 2017 14:53:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068818

            Bug ID: 1068818
           Summary: Missing dependency for meson
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: luca.emanuel.weiss-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running meson and needing the qt5 module, meson throws the error "Module
"qt5" does not exist".

When trying to import to module via the python interpreter, there's a more
verbose error message:

>>> from mesonbuild.modules import qt5
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.4/site-packages/mesonbuild/modules/qt5.py", line 21,
in <module>
    import xml.etree.ElementTree as ET
  File "/usr/lib64/python3.4/_import_failed/xml.py", line 17, in <module>
    to install it.""".format(__name__, package))
ImportError: Module 'xml' is not installed.
Use:
  sudo zypper install python3
to install it.

summary: Missing dependency for meson


body:
--1511145208.8a45dC830.20450
Date: Mon, 20 Nov 2017 02:33:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068840

            Bug ID: 1068840
           Summary: fish missing from /etc/shells
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: 3rd party software
          Assignee: lnussel-at-suse.com
          Reporter: simonf.lees-at-suse.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
                CC: ro-at-suse.com
          Found By: ---
           Blocker: ---

fish is missing from /etc/shells, which means that everytime aaa_base is
updated fish users can no longer log into any X11 desktop.

Fix is here: https://github.com/openSUSE/aaa_base/pull/50

summary: fish missing from /etc/shells


--1511186926.eAAcfBd6.23681
Date: Mon, 20 Nov 2017 14:08:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1068967

            Bug ID: 1068967
           Summary: internal cpp compiler error on Raspberry Pi 2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 749380
  --> http://bugzilla.opensuse.org/attachment.cgi?id=749380&action=edit
Source file which gives compile error

When using the command:
g++ -Wall -O2 -DUSE_SQLITE  -c CSVexport.cpp -o obj/Release_SQLite/CSVexport.o
I got the following message:
CSVexport.cpp: In function ‘char* FormatFloat(char*, float, int, int, char)’:
CSVexport.cpp:56:7: internal compiler error: Illegal instruction
 char *FormatFloat(char *str, float value, int width, int precision, char
decimalpoint)
       ^~~~~~~~~~~
Please submit a full bug report,
with preprocessed source if appropriate.
I will attach the source code.


body:
--1511197048.0D1e5Ad56.5206
Date: Mon, 20 Nov 2017 16:57:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1069030

            Bug ID: 1069030
           Summary: include gvfs-mtp EOF patch
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: duge@pre-sense.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 749449
  --> http://bugzilla.suse.com/attachment.cgi?id=749449&action=edit
upstream patch

GVfs (Gnome Virtual File System) completely hangs on post-EOF-reads via MTP.
E.g. with Android 7.1 devices.

See here for details: https://bugzilla.gnome.org/show_bug.cgi?id=784477

--

There's an upstream patch coming with future gvfs-1.36. (current gvfs is 1.35)

https://git.gnome.org/browse/gvfs/commit/?id=08612cd495fd3a10e83041dd2245385d05a24e07

https://bugzilla.gnome.org/show_bug.cgi?id=784477#c14

also attached as file: gvfs-mtp-eof.patch

--

Request: Please
- ship openSUSE-15.0 with gvfs-1.36 (should be released in December 2017 or
January 2018) or manually fix with the provided patch,
- patch gvfs-1.28 in openSUSE-42.3 (already tested here:
https://build.opensuse.org/package/show/home:duge_at_pre-sense_de:branches:openSUSE:Leap:42.3:Update/gvfs
) and
- patch gvfs-1.28 in openSUSE-42.2 (already tested here:
https://build.opensuse.org/package/show/home:duge_at_pre-sense_de:branches:openSUSE:Leap:42.2:Update/gvfs
)

summary: include gvfs-mtp EOF patch


--1511215106.8F1f10.25631
Date: Mon, 20 Nov 2017 21:58:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069067

            Bug ID: 1069067
           Summary: VUL-0: CVE-2017-2668 389-ds Remote crash via crafted LDAP messages
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/57452/
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: aj-at-ajaissle.de, mrueckert-at-suse.com
          Found By: Security Response Team
           Blocker: ---

https://pagure.io/389-ds-base/c/5e578de05ffb8e8604159711d908ae999d39a8d4
389-ds could be crashed via crafted LDAP messages

in our 1.3.4.x, this is:
https://pagure.io/389-ds-base/c/bdf75dc34bdc317358355e75fbc1647ff6aacb52

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1436575
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2668
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4566
https://rhn.redhat.com/errata/RHSA-2017-0920.html
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-2668.html
https://access.redhat.com/errata/RHSA-2017:0920
https://access.redhat.com/errata/RHSA-2017:0893
https://rhn.redhat.com/errata/RHSA-2017-0893.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2668
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4566
https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
http://secunia.com/advisories/26613
http://www.vupen.com/english/advisories/2007/2976
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
http://xforce.iss.net/xforce/xfdb/36272
http://www.securitytracker.com/id?1018612
http://www.securityfocus.com/bid/25460
http://www.securityfocus.com/archive/1/archive/1/477821/100/0/threaded
http://securityreason.com/securityalert/3061


--1511282599.4c4a1a80.14146
Date: Tue, 21 Nov 2017 16:43:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069262

            Bug ID: 1069262
           Summary: [Build 53.1] Migration from 13.2 to Leap 15 fails due to broken dependencies `python-sip(api) = 11.1`
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/537467/modules/zdup/s
                    teps/14
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: slindomansilla-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-15.0-DVD-x86_64-zdup_13.2_kde@64bit fails in
[zdup](http://openqa.opensuse.org/tests/537467/modules/zdup/steps/14)

## Reproducible

Fails since (at least) Build [27.1](http://openqa.opensuse.org/tests/504843)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?flavor=DVD&machine=64bit&test=zdup_13.2_kde&version=15.0&arch=x86_64&distri=opensuse)


body:
--1511343423.570d1.2494
Date: Wed, 22 Nov 2017 09:37:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1069393

            Bug ID: 1069393
           Summary: okular: unresolved symbol
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-12-SP3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

Fresh installation of SLES12 SP3 with Workstation Extension and Package Hub
added.
I'm not able to view any PDFs with okular:

okular: symbol lookup error:
/usr/lib64/qt5/plugins/okular/generators/okularGenerator_poppler.so: undefined
symbol: _ZNK7Poppler4Page11annotationsERK4QSetINS_10Annotation7SubTypeEE

Looks like okular needs a rebuild for SLE12 SP3.

summary: okular: unresolved symbol


body:
--1511343689.Cce27.1569
Date: Wed, 22 Nov 2017 09:41:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1069396

            Bug ID: 1069396
           Summary: sddm cannot be updated
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-12-SP3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

If you try to update to the latest sddm version:

Problem: nothing provides sddm-theme-openSUSE needed by
sddm-branding-openSUSE-0.14.0-2.1.x86_64
 Solution 1: deinstallation of sddm-branding-SLE-0.13.0-5.1.x86_64
 Solution 2: do not install sddm-0.14.0-2.1.x86_64
 Solution 3: break sddm-branding-openSUSE-0.14.0-2.1.x86_64 by ignoring some of
its dependencies

Reproduceable on SLES12 SP2 and SLES12 SP3.

summary: sddm cannot be updated


body:
--1511354843.b5bA0.31237
Date: Wed, 22 Nov 2017 12:47:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1069445

            Bug ID: 1069445
           Summary: The texlive packages use partly wrong update-script names
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: werner-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

texlive is heavily using /var/adm/update-scripts. Scripts in this directory
will only be executed after installation, if they are following a special
naming scheme. The names for texlive are not always correct (alrady the third
entry in texlive-specs-a (texlive-Asana-Math-fonts is wrong).

Please convert this to use %posttrans, the update-scripts workaround isn't
needed since years anymore and will be disabled soon.

pkgs: texlive texlive-filesystem texlive-specs-a texlive-specs-b texlive-specs-c texlive-specs-d texlive-specs-e texlive-specs-f texlive-specs-g texlive-specs-h texlive-specs-i texlive-specs-j texlive-specs-k texlive-specs-l texlive-specs-m texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-q texlive-specs-r texlive-specs-s texlive-specs-t texlive-specs-u texlive-specs-v texlive-specs-w texlive-specs-x texlive-specs-y texlive-specs-z


body:
--1511363890.e5bDD0.4338
Date: Wed, 22 Nov 2017 15:18:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069468

            Bug ID: 1069468
           Summary: Packages should no longer use /var/adm/fillup-templates
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: CONFIRMED
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: rbrown-at-suse.com
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 749776
  --> http://bugzilla.opensuse.org/attachment.cgi?id=749776&action=edit
fillup-templates list

As discussed on the opensuse-packaging list there are significant problems with
fillup-templates being located in /var/adm

https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html

At time of writing, rpm in Tumbleweed now has support for a new rpm macro
(%_fillupdir) which should be used instead to relocate the fillup templates to
the new location of /usr/share/fillup-templates

https://en.opensuse.org/index.php?title=openSUSE:Packaging_Conventions_RPM_Macros#.25_fillupdir#

Any unchanged packages should be okay, as the rpm package's other macros that
consume fillup-templates support both the old and new path.

However to enable us to tidy up the /var subvolumes in all *SUSE distributions
we to change all the packages to use the new path

There are over 200 packages in Factory that currently use the old convention
(List attached)

I am working initially on the packages needed by CaaSP/Kubic, with my intention
being to either do the rest soon after or ask the community to help with the
rest.

This bug is therefore a reference for all of these efforts

pkgs: 389-ds PackageKit SuSEfirewall2 aaa_base atftp avahi bind branding-openSUSE cdemu-daemon cryptctl cyrus-sasl dmraid erlang exim fail2ban fedfs-utils firewalld gpsd hawk2 icecream icinga issue-generator kdebase4-workspace kopano libdlm libica libinfinity lsyncd mailman mcelog mdadm munge openscap openssh otrs pacemaker patch2mail permissions plasma5-workspace polkit-default-privs quassel robinhood sbd sshguard sysconfig syslog-ng texlive-filesystem varnish virtualbox wicked xdm xdmsc


--1511365071.CCdA34.15482
Date: Wed, 22 Nov 2017 15:37:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069470

            Bug ID: 1069470
           Summary: Dovecot fails to start after upgrade to Tumbleweed 20171120
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

dovecot fails to start with the following error messages:
nov 22 14:43:40 eiktum auth[11418]: pam_kwallet5: Couldn't create directory:
/home/freek/.local/share because: 13-Permission denied
nov 22 14:43:40 eiktum auth[11418]: pam_kwallet5: Couldn't open file:
/home/freek/.local/share/kwalletd/kdewallet.salt because: 13-Permission denied
nov 22 14:43:40 eiktum auth[11418]: pam_kwallet5-kwalletd: Couldn't create or
read the salt file
nov 22 14:43:40 eiktum auth[11418]: pam_kwallet5(dovecot:auth): pam_kwallet5:
Fail into creating the hash

> ls -ld /home/freek/.local/share
drwxr-xr-x 68 freek users 4096 16 nov 16:44 /home/freek/.local/share
> ls -l /home/freek/.local/share/kwalletd/kdewallet.salt
-rw-----


--1511384270.66d06C0.31630
Date: Wed, 22 Nov 2017 20:57:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1069498

            Bug ID: 1069498
           Summary: Black screen after autologin into a plasma-session
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: robby.engelmann@igfs-ev.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since snapshot 20171121 I only get a black screen (kwin started but no plasma)
when using autologin. Disabling autologin and login via sddm works fine.


--1511446980.dFc5c70.1271
Date: Thu, 23 Nov 2017 14:23:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069635

            Bug ID: 1069635
           Summary: cloud-init packages differ for each build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: rjschwei-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1062303
          Found By: Development
           Blocker: ---

diff is

---
old//usr/lib/python3.6/site-packages/cloud_init-17.1-py3.6.egg-info/SOURCES.txt
    2017-11-19 12:00:00.000000000 +0000
+++
new//usr/lib/python3.6/site-packages/cloud_init-17.1-py3.6.egg-info/SOURCES.txt
    2017-11-19 12:00:00.000000000 +0000
@@ -657,11 +657,11 @@
 tests/unittests/test_runs/__init__.py
 tests/unittests/test_runs/test_merge_run.py
 tests/unittests/test_runs/test_simple_run.py
-tmp0qa7q_ru/cloud-init-local.service
-tmp7_q4_j0w/cloud-final.service
-tmp9we1qxxe/cloud.cfg
-tmpfltocxxh/cloud-init.service
-tmpm6h347yw/cloud-config.service
+tmp8iddprdw/cloud-init.service
+tmpagyz5yb5/cloud-config.service
+tmpizcs8bju/cloud-init-local.service
+tmpmsrv5u0_/cloud-final.service
+tmptyhg0gwx/cloud.cfg
 tools/21-cloudinit.conf
 tools/Z99-cloud-locale-test.sh

I think this comes from setup.py using
tmpd = tempfile.mkdtemp(dir=topdir)
to render each .service file from a template


--1511531953.b246B30.15332
Date: Fri, 24 Nov 2017 13:59:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069774

            Bug ID: 1069774
           Summary: VUL-0: CVE-2017-16938: optipng: A global buffer overflow allows attackers to cause DoS via a maliciously crafted GIF file
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/195641/
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: pgajdos-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Created attachment 750049
  --> http://bugzilla.opensuse.org/attachment.cgi?id=750049&action=edit
Reproducer

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a
denial-of-service attack or other unspecified impact with a maliciously crafted
GIF format file, related to an uncontrolled loop in the LZWReadByte function of
the gifread.c file.

Couldn't trigger with the reproducer, but we have the code.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16938
https://sourceforge.net/p/optipng/bugs/69/


--1511531996.BeED0.13364
Date: Fri, 24 Nov 2017 13:59:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069775

            Bug ID: 1069775
           Summary: libkipi-data needs to conflict/obsolete libKF5Kipi
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/540685/modules/zdup/s
                    teps/194
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-15.0-DVD-x86_64-zdup-Leap-42.1-kde@64bit fails
in
[zdup](http://openqa.opensuse.org/tests/540685/modules/zdup/steps/194)

libkipi-data needs to conflict/obsolete libKF5Kipi

## Reproducible

Fails since (at least) Build [31.3](http://openqa.opensuse.org/tests/506614)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?distri=opensuse&arch=x86_64&version=15.0&flavor=DVD&machine=64bit&test=zdup-Leap-42.1-kde)


--1511532714.c5510.14543
Date: Fri, 24 Nov 2017 14:11:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069777

            Bug ID: 1069777
           Summary: Crash after switching activities (QSortFilterProxyModelPrivate::updateChildrenMapping)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: giecrilj@stegny.2a.pl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Plasma crashed when I killed Firefox.

Thread 1 (Thread 0x7f790bf22900 (LWP 2883)):
[KCrash Handler]
#6  QSortFilterProxyModelPrivate::updateChildrenMapping
(this=this@entry=0x45d4200, source_parent=...,
parent_mapping=parent_mapping@entry=0x6380240, start=start@entry=0,
end=end@entry=0, delta_item_count=delta_item_count@entry=1,
remove=remove@entry=true, orient=Qt::Vertical) at
itemmodels/qsortfilterproxymodel.cpp:969
#7  0x00007f7905c990af in QSortFilterProxyModelPrivate::source_items_removed
(orient=Qt::Vertical, end=<optimized out>, start=0, source_parent=...,
this=0x45d4200) at itemmodels/qsortfilterproxymodel.cpp:911
#8  QSortFilterProxyModelPrivate::_q_sourceRowsRemoved (this=0x45d4200,
source_parent=..., start=0, end=<optimized out>) at
itemmodels/qsortfilterproxymodel.cpp:1418
#9  0x00007f7905c9ff19 in QSortFilterProxyModel::qt_static_metacall
(_o=<optimized out>, _c=<optimized out>, _id=<optimized out>, _a=<optimized
out>) at .moc/moc_qsortfilterproxymodel.cpp:211
#10 0x00007f7905cf77d1 in QMetaObject::activate (sender=sender@entry=0x45e0f10,
signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=12,
argv=argv@entry=0x7fff932bf0c0) at kernel/qobject.cpp:3730
#11 0x00007f7905cf83d7 in QMetaObject::activate (sender=sender@entry=0x45e0f10,
m=m@entry=0x7f7906113ca0 <QAbstractItemModel::staticMetaObject>,
local_signal_index=local_signal_index@entry=12, argv=argv@entry=0x7fff932bf0c0)
at kernel/qobject.cpp:3595
#12 0x00007f7905d6e334 in QAbstractItemModel::rowsRemoved
(this=this@entry=0x45e0f10, _t1=..., _t2=0, _t3=0) at
.moc/moc_qabstractitemmodel.cpp:615
#13 0x00007f7905c7c751 in QAbstractItemModel::endRemoveRows (this=0x45e0f10) at
itemmodels/qabstractitemmodel.cpp:2678
#14 0x00007f784b6df55f in
TaskManager::TaskGroupingProxyModel::Private::sourceRowsAboutToBeRemoved
(this=0x45d4360, parent=..., first=<optimized out>, last=5) at
/usr/src/debug/plasma-workspace-5.8.7/libtaskmanager/taskgroupingproxymodel.cpp:197
#15 0x00007f784b6e2119 in
TaskManager::TaskGroupingProxyModel::qt_static_metacall (_o=<optimized out>,
_c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at
/usr/src/debug/plasma-workspace-5.8.7/build/libtaskmanager/moc_taskgroupingproxymodel.cpp:152
#16 0x00007f7905cf77d1 in QMetaObject::activate (sender=sender@entry=0x45e0ee0,
signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=11,
argv=argv@entry=0x7fff932bf3f0) at kernel/qobject.cpp:3730
#17 0x00007f7905cf83d7 in QMetaObject::activate (sender=sender@entry=0x45e0ee0,
m=m@entry=0x7f7906113ca0 <QAbstractItemModel::staticMetaObject>,
local_signal_index=local_signal_index@entry=11, argv=argv@entry=0x7fff932bf3f0)
at kernel/qobject.cpp:3595
#18 0x00007f7905d6e2e4 in QAbstractItemModel::rowsAboutToBeRemoved
(this=this@entry=0x45e0ee0, _t1=..., _t2=_t2@entry=5, _t3=_t3@entry=5) at
.moc/moc_qabstractitemmodel.cpp:608
#19 0x00007f7905c7bed4 in QAbstractItemModel::beginRemoveRows (this=0x45e0ee0,
parent=..., first=5, last=5) at itemmodels/qabstractitemmodel.cpp:2661
#20 0x00007f7905c9aa0d in QSortFilterProxyModelPrivate::remove_proxy_interval
(emit_signal=true, orient=Qt::Vertical, proxy_parent=..., proxy_end=5,
proxy_start=5, proxy_to_source=..., source_to_proxy=..., this=0x45e1bd0) at
itemmodels/qsortfilterproxymodel.cpp:577
#21 QSortFilterProxyModelPrivate::remove_source_items
(this=this@entry=0x45e1bd0, source_to_proxy=..., proxy_to_source=...,
source_items=..., source_parent=..., orient=orient@entry=Qt::Vertical,
emit_signal=emit_signal@entry=true) at itemmodels/qsortfilterproxymodel.cpp:559
#22 0x00007f7905c9abbd in
QSortFilterProxyModelPrivate::source_items_about_to_be_removed (this=0x45e1bd0,
source_parent=..., start=5, end=5, orient=orient@entry=Qt::Vertical) at
itemmodels/qsortfilterproxymodel.cpp:860
#23 0x00007f7905c9fef8 in
QSortFilterProxyModelPrivate::_q_sourceRowsAboutToBeRemoved (end=<optimized
out>, start=<optimized out>, source_parent=..., this=<optimized out>) at
itemmodels/qsortfilterproxymodel.cpp:1411
#24 QSortFilterProxyModel::qt_static_metacall (_o=<optimized out>,
_c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at
.moc/moc_qsortfilterproxymodel.cpp:210
#25 0x00007f7905cf77d1 in QMetaObject::activate (sender=sender@entry=0x45d5d90,
signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=11,
argv=argv@entry=0x7fff932bf740) at kernel/qobject.cpp:3730
#26 0x00007f7905cf83d7 in QMetaObject::activate (sender=sender@entry=0x45d5d90,
m=m@entry=0x7f7906113ca0 <QAbstractItemModel::staticMetaObject>,
local_signal_index=local_signal_index@entry=11, argv=argv@entry=0x7fff932bf740)
at kernel/qobject.cpp:3595
#27 0x00007f7905d6e2e4 in QAbstractItemModel::rowsAboutToBeRemoved
(this=this@entry=0x45d5d90, _t1=..., _t2=_t2@entry=5, _t3=_t3@entry=5) at
.moc/moc_qabstractitemmodel.cpp:608
#28 0x00007f7905c7bed4 in QAbstractItemModel::beginRemoveRows (this=0x45d5d90,
parent=..., first=5, last=5) at itemmodels/qabstractitemmodel.cpp:2661
#29 0x00007f785172aed5 in
KConcatenateRowsProxyModelPrivate::slotRowsAboutToBeRemoved (this=0x45d4640,
start=5, end=5) at
/usr/src/debug/kitemmodels-5.32.0/src/kconcatenaterowsproxymodel.cpp:241
#30 0x00007f785172bd21 in KConcatenateRowsProxyModel::qt_static_metacall
(_o=<optimized out>, _c=<optimized out>, _id=<optimized out>, _a=<optimized
out>) at
/usr/src/debug/kitemmodels-5.32.0/build/src/moc_kconcatenaterowsproxymodel.cpp:144
#31 0x00007f7905cf77d1 in QMetaObject::activate (sender=sender@entry=0x45d4c80,
signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=11,
argv=argv@entry=0x7fff932bf9c0) at kernel/qobject.cpp:3730
#32 0x00007f7905cf83d7 in QMetaObject::activate (sender=sender@entry=0x45d4c80,
m=m@entry=0x7f7906113ca0 <QAbstractItemModel::staticMetaObject>,
local_signal_index=local_signal_index@entry=11, argv=argv@entry=0x7fff932bf9c0)
at kernel/qobject.cpp:3595
#33 0x00007f7905d6e2e4 in QAbstractItemModel::rowsAboutToBeRemoved
(this=this@entry=0x45d4c80, _t1=..., _t2=_t2@entry=5, _t3=_t3@entry=5) at
.moc/moc_qabstractitemmodel.cpp:608
#34 0x00007f7905c7bed4 in QAbstractItemModel::beginRemoveRows
(this=this@entry=0x45d4c80, parent=..., first=first@entry=5, last=last@entry=5)
at itemmodels/qabstractitemmodel.cpp:2661
#35 0x00007f7905c93ecf in
QIdentityProxyModelPrivate::_q_sourceRowsAboutToBeRemoved (end=5, start=5,
parent=..., this=<optimized out>) at itemmodels/qidentityproxymodel.cpp:573
#36 QIdentityProxyModel::qt_static_metacall (_o=<optimized out>, _c=<optimized
out>, _id=<optimized out>, _a=<optimized out>) at
.moc/moc_qidentityproxymodel.cpp:150
#37 0x00007f7905cf77d1 in QMetaObject::activate (sender=sender@entry=0x4569c00,
signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=11,
argv=argv@entry=0x7fff932bfc30) at kernel/qobject.cpp:3730
#38 0x00007f7905cf83d7 in QMetaObject::activate (sender=sender@entry=0x4569c00,
m=m@entry=0x7f7906113ca0 <QAbstractItemModel::staticMetaObject>,
local_signal_index=local_signal_index@entry=11, argv=argv@entry=0x7fff932bfc30)
at kernel/qobject.cpp:3595
#39 0x00007f7905d6e2e4 in QAbstractItemModel::rowsAboutToBeRemoved
(this=this@entry=0x4569c00, _t1=..., _t2=_t2@entry=5, _t3=_t3@entry=5) at
.moc/moc_qabstractitemmodel.cpp:608
#40 0x00007f7905c7bed4 in QAbstractItemModel::beginRemoveRows (this=0x4569c00,
parent=..., first=first@entry=5, last=last@entry=5) at
itemmodels/qabstractitemmodel.cpp:2661
#41 0x00007f784b6f97d5 in TaskManager::XWindowTasksModel::Private::removeWindow
(this=0x456aea0, window=12590579) at
/usr/src/debug/plasma-workspace-5.8.7/libtaskmanager/xwindowtasksmodel.cpp:250


--1511536519.E3DAcC6.25453
Date: Fri, 24 Nov 2017 15:15:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1069789

            Bug ID: 1069789
           Summary: easyTAG 2.4.3 irreversibly corrupts ogg containers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: psychonaut-at-nothingisreal.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

easyTAG 2.4.3 has a critical bug that will result in major data loss for many
users.  In particular, it irreversibly corrupts ogg containers (commonly used
to store Vorbis and Opus audio) whenever it writes a tag.

The problem was reported to the developers nearly a year ago but so far there
has been no action to solve the problem.  See upstream report:
<https://bugzilla.gnome.org/show_bug.cgi?id=776110>

It may be better for Tumbleweed to stop distributing this version of easyTAG
and instead revert to easyTAG 2.4.2, which is not affected.

Leap 42.3 is not affected as it still distributes 2.4.2.


body:
--1511545733.55D8Ff0.24353
Date: Fri, 24 Nov 2017 17:48:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069803

            Bug ID: 1069803
           Summary: git-daemon: broken init script
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: tiwai-at-suse.com
          Reporter: sbrabec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

/etc/init.d/git-daemon start
redirecting to systemctl start git-daemon.service
Failed to start git-daemon.service: Unit git-daemon.service failed to load: No
such file or directory.

rcgit-daemon start
redirecting to systemctl start git-daemon.service
Failed to start git-daemon.service: Unit git-daemon.service failed to load: No
such file or directory.

This happens because the git-daemon is still sysvinit-only script, but keeping
sysvinit support requires SYSTEMD_NO_WRAP environment variable being set (see
/etc/rc.status).

This works:
SYSTEMD_NO_WRAP=1 /etc/init.d/git-daemon start
Starting git-daemon

summary: git-daemon: broken init script


--1511643627.2dbf7d14.11918
Date: Sat, 25 Nov 2017 21:00:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069831

            Bug ID: 1069831
           Summary: Running sa-update from spamassin gives warning about deprecated regex
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running sa-update gives the following warning:
Unescaped left brace in regex is deprecated here (and will be fatal in Perl
5.30), passed through in regex; marked by <


--1511764029.bfBF385A0.31811
Date: Mon, 27 Nov 2017 06:27:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069857

            Bug ID: 1069857
           Summary: VUL-0: CVE-2017-16943: exim: The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89allows remote attackers to execute arbitrary code or cause a denial of service(use-after-free) via vectors involving BDAT commands.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/195652/
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Other
          Assignee: poeml-at-cmdline.net
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-16943

The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89
allows remote attackers to execute arbitrary code or cause a denial of service
(use-after-free) via vectors involving BDAT commands.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16943
http://seclists.org/oss-sec/2017/q4/326
http://www.cvedetails.com/cve/CVE-2017-16943/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16943
https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4
https://bugs.exim.org/show_bug.cgi?id=2199
https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html


--1511780640.244C6cb85.18117
Date: Mon, 27 Nov 2017 11:04:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1069906

            Bug ID: 1069906
           Summary: Race: systemd remounts filesystems while apparmor loads profiles
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kubic-bugs-at-opensuse.org, systemd-maintainers-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 750174
  --> http://bugzilla.suse.com/attachment.cgi?id=750174&action=edit
output of journalctl

From time to time I still see on openSUSE Kubic/SUSE CaaS Plattform:
Nov 27 10:11:02 localhost apparmor.systemd[449]: Loading AppArmor profiles
Nov 27 10:11:02 localhost apparmor.systemd[449]: mkstemp: Read-only file system
Nov 27 10:11:02 localhost apparmor.systemd[449]: Error:
/etc/apparmor.d/bin.ping failed to load

The problem is, that the filesystem is mounted in initrd, but after that,
systemd remounts all filesystems. And apparmor is running in this time, where
the filesystem is not completly mounted.

This may work if apparmor would not try to write to disk during this time.


--1511796447.d6a2E2Cf1.5486
Date: Mon, 27 Nov 2017 15:27:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1069962

            Bug ID: 1069962
           Summary: Tumbleweed: OpenSuse's Firefox version crashes when "cancel" pressed in "File Upload" dialogue, e.g. TYPO3, BUGZILLA
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: michaelof-at-rocketmail.com
        QA Contact: qa-bugs-at-suse.de
        Depends on: 1069961
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1069961 +++

Resolved Fixed in Leap 42.2. Fine in stable Firefox 52.5, as of yesterday.

Reintroduction of Bug 1015998 for
- Firefox 57.0 from repo mozilla/openSUSE_Leap_42.3

I've chatted about this in #SUSE, it's confirmed that this bug is also existing
for Tumbleweed and repo mozilla:Factory

(Current issue cloned for Tumbleweed)


body:
Build Identifier:

The sendmail-8.15.2-6.1.x86_64 package does not support elliptic curve ciphers
as MTA.
The FFR Defines lack the "_FFR_TLS_EC".
Incoming TLS connections cannot make use of the EC* ciphers.
Outgoing TLS connections are not affected.

Reproducible: Always

Steps to Reproduce:
1. sendmail -d0.14 -bt < /dev/null

Actual Results:
FFR Defines is empty.

Expected Results:
FFR Defines displays _FFR_TLS_EC
Incoming TLS connections using ciphers like ECDHE_RSA_* should work.

Sendmail M4 config includes:
O
CipherList=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3
+SSL_OP_CIPHER_SERVER_PREFERENCE

summary: sendmail-8.15.2-6.1.x86_64 MTA does not support elliptic curve ciphers


--1511863032.b52224c5.16963
Date: Tue, 28 Nov 2017 09:57:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1070090

            Bug ID: 1070090
           Summary: Icons on the upper left corner are missing for applications under SLE-Classic
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: xwang-at-suse.com
          Reporter: gwang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 750355
  --> http://bugzilla.suse.com/attachment.cgi?id=750355&action=edit
qkzhu-at-suse.com, yfjiang-at-suse.com, mawerner-at-suse.com, fcrozat-at-suse.com

Env: openSUSE Tumbleweed 20171125

Steps:
1. Install gnome-shell-classic
2. Reboot and login with SLE-classic
3. Launch an application. e.g. Terminal

Actual Result:
The icon on the upper left corner is missing.
Please refer to the attachment for details.


body:
--1511897210.3861EaC0.17673
Date: Tue, 28 Nov 2017 19:26:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070195

            Bug ID: 1070195
           Summary: Memory leak in pasystray
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: petr-at-cervinka.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 750456
  --> http://bugzilla.opensuse.org/attachment.cgi?id=750456&action=edit
patch for memory leak

There is memory leak in syatray.c while using function
gtk_container_get_children(). This cause memory leak after frequency device add
and remove:
https://github.com/christophgysin/pasystray/issues/94

Upstream patch is provided.

summary: Memory leak in pasystray


--1511951533.aBB460.30279
Date: Wed, 29 Nov 2017 10:32:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070310

            Bug ID: 1070310
           Summary: [Build 743.14] firewalld: missing module dbus
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/544938/modules/yast2_
                    lan/steps/13
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dleuenberger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-Staging:E-Staging-DVD-x86_64-cryptlvm@64bit
fails in
[yast2_lan](http://openqa.opensuse.org/tests/544938/modules/yast2_lan/steps/13)

## Reproducible

Fails since (at least) Build [733.5](http://openqa.opensuse.org/tests/528031)

## Expected result

Last good: [545.29](http://openqa.opensuse.org/tests/416196) (or more recent)

## Further details

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?test=cryptlvm&flavor=Staging-DVD&machine=64bit&distri=opensuse&arch=x86_64&version=Staging%3AE)

Yast tries to start firewall-offline-cmd, which results in an error:

> [Ruby] lib/cheetah.rb:158 Executing "firewall-offline-cmd --list-all-zones".
> [Ruby] lib/cheetah.rb:206 Error output: Traceback (most recent call last):
> [Ruby] lib/cheetah.rb:206 Error output:   File "/usr/bin/firewall-offline-cmd", line 31, in <module>
> [Ruby] lib/cheetah.rb:206 Error output:     from firewall.client import FirewallClientIPSetSettings, \
> [Ruby] lib/cheetah.rb:206 Error output:   File "/usr/lib/python3.6/site-packages/firewall/client.py", line 28, in <module>
> [Ruby] lib/cheetah.rb:206 Error output:     import dbus.mainloop.glib
> [Ruby] lib/cheetah.rb:206 Error output: ModuleNotFoundError: No module named 'dbus'


--1511992679.f73B420.6641
Date: Wed, 29 Nov 2017 21:57:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070450

            Bug ID: 1070450
           Summary: GNU screen occasionally crashes with SIGABRT on re-attaching
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mjambor-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In the recent months, GNU screen in Tumbleweed occasionally crashes
after getting SIGABRT when I re-attach to it.  It always dumps core,
the backtraces are always different but usually in memory allocation
routines.  A few examples are below.  My TERM is rxvt-unicode

The backtraces:

Program terminated with signal SIGABRT, Aborted.
#0  0x00007fde3ede10d0 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007fde3ede10d0 in raise () from /lib64/libc.so.6
#1  0x00007fde3ede26b1 in abort () from /lib64/libc.so.6
#2  0x00007fde3ee24427 in __libc_message () from /lib64/libc.so.6
#3  0x00007fde3ee2ab83 in malloc_printerr () from /lib64/libc.so.6
#4  0x00007fde3ee2aff2 in malloc_consolidate () from /lib64/libc.so.6
#5  0x00007fde3ee2cc20 in _int_free () from /lib64/libc.so.6
#6  0x00005561cf173281 in freetty () at display.c:3075
#7  0x00005561cf179748 in FreeDisplay () at display.c:343
#8  0x00005561cf13bc0a in Detach (mode=mode@entry=0) at screen.c:1999
#9  0x00005561cf165b53 in DoAction (act=0x5561cf3aa720 <ktab+3200>,
    key=<optimized out>) at process.c:1372
#10 0x00005561cf170cb7 in ProcessInput2 (ibuf=<optimized out>, ilen=1)
    at process.c:943
#11 0x00005561cf1794c3 in disp_readev_fn (ev=<optimized out>,
    data=<optimized out>) at display.c:3531
#12 0x00005561cf181115 in sched () at sched.c:237
#13 0x00005561cf139fca in main (ac=0, av=0x7fffbbb66810) at screen.c:1466

Program terminated with signal SIGABRT, Aborted.
#0  0x00007f7a6fd930d0 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007f7a6fd930d0 in raise () from /lib64/libc.so.6
#1  0x00007f7a6fd946b1 in abort () from /lib64/libc.so.6
#2  0x0000562a1a6ea9df in CoreDump (sigsig=<optimized out>) at screen.c:1678
#3  <signal handler called>
#4  0x00007f7a6fddfc7b in _int_malloc () from /lib64/libc.so.6
#5  0x00007f7a6fde251a in calloc () from /lib64/libc.so.6
#6  0x0000562a1a72917d in GrowBitfield (bfp=bfp@entry=0x562a1b594550,
len=len@entry=0, delta=<optimized out>, defaultbit=defaultbit@entry=0) at
acls.c:109
#7  0x0000562a1a729699 in NewWindowAcl (w=w@entry=0x562a1b591ee0,
u=0x562a1b39d590) at acls.c:623
#8  0x0000562a1a704e07 in MakeWindow (newwin=newwin@entry=0x7ffc9eaa1530) at
window.c:667
#9  0x0000562a1a7135c8 in DoScreen (fn=fn@entry=0x562a1a73d7f1 "key",
av=<optimized out>, av@entry=0x562a1b3ad190) at process.c:6204
#10 0x0000562a1a716866 in DoAction (act=0x562a1a959700 <ktab+3168>,
key=<optimized out>) at process.c:2128
#11 0x0000562a1a71fcb7 in ProcessInput2 (ibuf=<optimized out>, ilen=1) at
process.c:943
#12 0x0000562a1a7284c3 in disp_readev_fn (ev=<optimized out>, data=<optimized
out>) at display.c:3531
#13 0x0000562a1a730115 in sched () at sched.c:237
#14 0x0000562a1a6e8fca in main (ac=0, av=0x7ffc9eaa6c40) at screen.c:1466

Program terminated with signal SIGABRT, Aborted.
#0  0x00007f3afb6690d0 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007f3afb6690d0 in raise () from /lib64/libc.so.6
#1  0x00007f3afb66a6b1 in abort () from /lib64/libc.so.6
#2  0x00007f3afb6ac427 in __libc_message () from /lib64/libc.so.6
#3  0x00007f3afb6b2b83 in malloc_printerr () from /lib64/libc.so.6
#4  0x00007f3afb6b61fb in _int_malloc () from /lib64/libc.so.6
#5  0x00007f3afb6b851a in calloc () from /lib64/libc.so.6
#6  0x000055b217bf617d in GrowBitfield (bfp=bfp@entry=0x55b2191c7330,
len=len@entry=0, delta=<optimized out>, defaultbit=defaultbit@entry=0) at
acls.c:109
#7  0x000055b217bf6699 in NewWindowAcl (w=w@entry=0x55b2191c4cc0,
u=0x55b219021590) at acls.c:623
#8  0x000055b217bd1e07 in MakeWindow (newwin=newwin@entry=0x7ffd136e58a0) at
window.c:667
#9  0x000055b217be05c8 in DoScreen (fn=fn@entry=0x55b217c0a7f1 "key",
av=<optimized out>, av@entry=0x55b219031170) at process.c:6204
#10 0x000055b217be3866 in DoAction (act=0x55b217e26700 <ktab+3168>,
key=<optimized out>) at process.c:2128
#11 0x000055b217beccb7 in ProcessInput2 (ibuf=<optimized out>, ilen=1) at
process.c:943
#12 0x000055b217bf54c3 in disp_readev_fn (ev=<optimized out>, data=<optimized
out>) at display.c:3531
#13 0x000055b217bfd115 in sched () at sched.c:237
#14 0x000055b217bb5fca in main (ac=0, av=0x7ffd136eafb0) at screen.c:1466

#0  0x00007f02b0f940d0 in raise () from /lib64/libc.so.6
#1  0x00007f02b0f956b1 in abort () from /lib64/libc.so.6
#2  0x000055a6ecf2c9df in CoreDump (sigsig=<optimized out>) at screen.c:1678
#3  <signal handler called>
#4  0x00007f02b0fde5a2 in tcache_get () from /lib64/libc.so.6
#5  0x00007f02b0fe610a in strdup () from /lib64/libc.so.6
#6  0x00007f02b197ae11 in _nc_trim_sgr0 () from /lib64/libtinfo.so.6
#7  0x00007f02b1973f8b in tgetent_sp () from /lib64/libtinfo.so.6
#8  0x000055a6ecf4b69d in e_tgetent (bp=bp@entry=0x7ffc69cc5930 "",
name=0x55a6ee9740cc "rxvt-unicode") at termcap.c:1341
#9  0x000055a6ecf4d4e4 in InitTermcap (wi=0, he=0) at termcap.c:120
#10 0x000055a6ecf41934 in FinishAttach (m=m@entry=0x55a6ed192860 <m>) at
socket.c:1459
#11 0x000055a6ecf4242c in ReceiveMsg () at socket.c:1235
#12 0x000055a6ecf72115 in sched () at sched.c:237
#13 0x000055a6ecf2afca in main (ac=0, av=0x7ffc69cc7e30) at screen.c:1466

At one point, running attached screen was not able to create new
screens within it and when I detached and attempted to re-attach, it
crashed.

Unfortunately, it looks like memory corruption to me.  If I can help
with any other information, please let me know.


body:
Build Identifier:

Hello i am trying to create a RAC lab, with KVM/QEMU using libvirt and when i
add the disk to both VMs and put the option shareable the app send the next
alert when i run both VMs:

rror starting domain: internal error: process exited while connecting to
monitor: 2017-11-30T05:23:44.088281Z qemu-system-x86_64: -chardev
pty,id=charserial0: char device redirected to /dev/pts/3 (label charserial0)
2017-11-30T05:23:44.160652Z qemu-system-x86_64: -device
scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0:
Failed to get "write" lock
Is another process using the image?

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 89, in
cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 125, in tmpcb
    callback(*args, **kwargs)
  File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 82, in
newfn
    ret = fn(self, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/domain.py", line 1505, in startup
    self._backend.create()
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1069, in create
    if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: internal error: process exited while connecting to monitor:
2017-11-30T05:23:44.088281Z qemu-system-x86_64: -chardev pty,id=charserial0:
char device redirected to /dev/pts/3 (label charserial0)
2017-11-30T05:23:44.160652Z qemu-system-x86_64: -device
scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0:
Failed to get "write" lock
Is another process using the image?

I try with SCSI and VirtIO but only appear that alert when i try run, first
turn on one, and when i try turn on the other one that message appear.

Reproducible: Always

Steps to Reproduce:
1.Create 2 VMs
2.Create a Raw image
3.add new disk on both VMs using the Raw image and putting the flag shareable.
Actual Results:
appear the next alert:

Error starting domain: internal error: process exited while connecting to
monitor: 2017-11-30T05:23:44.088281Z qemu-system-x86_64: -chardev
pty,id=charserial0: char device redirected to /dev/pts/3 (label charserial0)
2017-11-30T05:23:44.160652Z qemu-system-x86_64: -device
scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0:
Failed to get "write" lock
Is another process using the image?

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 89, in
cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 125, in tmpcb
    callback(*args, **kwargs)
  File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 82, in
newfn
    ret = fn(self, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/domain.py", line 1505, in startup
    self._backend.create()
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1069, in create
    if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: internal error: process exited while connecting to monitor:
2017-11-30T05:23:44.088281Z qemu-system-x86_64: -chardev pty,id=charserial0:
char device redirected to /dev/pts/3 (label charserial0)
2017-11-30T05:23:44.160652Z qemu-system-x86_64: -device
scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0:
Failed to get "write" lock
Is another process using the image?

Expected Results:
Both machine boot up and can see the disks IO on live.

Opensuse TW last snapshot 20171125 last kernel 4.14.1.1.

summary: Virtualization with virt-manager shareable disks are imposible


--1512119463.2Be8C574.5272
Date: Fri, 1 Dec 2017 09:11:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070737

            Bug ID: 1070737
           Summary: salt unable to highstate in snapshot 20171129
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the openSSL upgrade seems to have totally broken salt

    The minion function caused an exception: AttributeError: cffi library
'_openssl' has no function, constant or global variable named '__loader__'

    The above exception was the direct cause of the following exception:

    Traceback (most recent call last):
      File "/usr/lib/python3.6/site-packages/salt/minion.py", line 1480, in
_thread_return
        return_data = executor.execute()
      File "/usr/lib/python3.6/site-packages/salt/executors/direct_call.py",
line 28, in execute
        return self.func(*self.args, **self.kwargs)
      File "/usr/lib/python3.6/site-packages/salt/modules/state.py", line 892,
in highstate
        orchestration_jid=orchestration_jid)
      File "/usr/lib/python3.6/site-packages/salt/state.py", line 3661, in
call_highstate
        self.load_dynamic(matches)
      File "/usr/lib/python3.6/site-packages/salt/state.py", line 3181, in
load_dynamic
        self.state.module_refresh()
      File "/usr/lib/python3.6/site-packages/salt/state.py", line 918, in
module_refresh
        reload_module(site)
      File "/usr/lib64/python3.6/importlib/__init__.py", line 166, in reload
        _bootstrap._exec(spec, module)
      File "<frozen importlib._bootstrap>", line 618, in _exec
      File "<frozen importlib._bootstrap_external>", line 678, in exec_module
      File "<frozen importlib._bootstrap>", line 219, in
_call_with_frames_removed
      File "/usr/lib64/python3.6/site.py", line 550, in <module>
        main()
      File "/usr/lib64/python3.6/site.py", line 531, in main
        abs_paths()
      File "/usr/lib64/python3.6/site.py", line 102, in abs_paths
        if (getattr(getattr(m, '__loader__', None), '__module__', None) not in
    SystemError: <built-in function getattr> returned a result with an error
set


--1512125065.Ff64f0.30987
Date: Fri, 1 Dec 2017 10:44:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070762

            Bug ID: 1070762
           Summary: VUL-0: CVE-2017-17081: ffmpeg: The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 3.4 does notproperly validate widths and heights, which allows remote attackers to cause adenial of service (integer signedness error and out-of-array
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/196004/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: jengelh-at-inai.de
          Reporter: vpereira-at-microfocus.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-17081

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 3.4 does not
properly validate widths and heights, which allows remote attackers to cause a
denial of service (integer signedness error and out-of-array read) via a
crafted
MPEG file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-17081
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17081.html
http://www.cvedetails.com/cve/CVE-2017-17081/
https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-November/219748.html
https://github.com/FFmpeg/FFmpeg/commit/58cf31cee7a456057f337b3102a03206d833d5e8
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3516#c1


--1512169303.B2C4B0.25212
Date: Fri, 1 Dec 2017 23:01:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070871

            Bug ID: 1070871
           Summary: "/etc/zypp/zypp.conf:rpm.install.excludedocs = yes" breaks dovecot post scriptlet -> no working dovecot in containers
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

```
rpm -q --scripts dovecot
preinstall scriptlet (using /bin/sh):
/usr/sbin/groupadd -r dovecot >/dev/null 2>&1 || :
/usr/sbin/useradd -g dovecot -s /bin/false -r -c "User for Dovecot imapd" -d
/var/run/dovecot dovecot >/dev/null 2>&1 || :
/usr/sbin/useradd -g dovecot -s /bin/false -r -c "User for Dovecot login" -d
/var/run/dovecot dovenull >/dev/null 2>&1 || :
# try to copy the default configuration.
#
# we fail silently if the dovecot-implementation package is not
# installed yet. This allows us to break a little build loop between
# dovecot and dovecotXY.
if [ ! -e /etc/dovecot/dovecot.conf -a -e
/usr/share/doc/packages/dovecot/example-config/dovecot.conf ] ; then
  # install default config
  echo "Did not find a /etc/dovecot/dovecot.conf. copying default
configuration"
  cp -na /usr/share/doc/packages/dovecot/example-config/* /etc/dovecot/
  # the chmod breaks the lda. lets use the more open permissions
  #chmod -Rv o= /etc/dovecot/
fi

```

so yeah ... no config if installed without docs


body:
--1512169602.D645DED13.11862
Date: Fri, 1 Dec 2017 23:06:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070872

            Bug ID: 1070872
           Summary: Raspberry Pi 3 SD Card errors
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: andale963-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi
Using image
[openSUSE-Tumbleweed-ARM-JeOS-raspberrypi3.aarch64-2017.06.10-Build2.7.raw.xz]
and upgrading to last snapshot 20171122 via [zypper dup], at the next reboot I
got these issues on the main console:

nov 27 14:27:42 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:42 archive kernel: mmcblk0: error -22 transferring data, sector
3368922, nr 966, cmd response 0x900, card status 0x0
nov 27 14:27:42 archive kernel: mmcblk0: retrying using single block read
nov 27 14:27:42 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:42 archive kernel: mmcblk0: error -22 transferring data, sector
3370912, nr 1024, cmd response 0x900, card status 0x0
nov 27 14:27:42 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:43 archive kernel: mmcblk0: error -22 transferring data, sector
3370912, nr 1024, cmd response 0x900, card status 0x0
nov 27 14:27:43 archive kernel: mmcblk0: retrying using single block read
nov 27 14:27:43 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:43 archive kernel: mmcblk0: error -22 transferring data, sector
3371936, nr 1024, cmd response 0x900, card status 0x0
nov 27 14:27:43 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:43 archive kernel: mmcblk0: error -22 transferring data, sector
3371936, nr 1024, cmd response 0x900, card status 0x0
nov 27 14:27:43 archive kernel: mmcblk0: retrying using single block read
nov 27 14:27:43 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:43 archive kernel: mmcblk0: error -22 transferring data, sector
3372960, nr 1024, cmd response 0x900, card status 0x0
nov 27 14:27:43 archive kernel: mmcblk0: error -110 sending stop command,
original cmd response 0x900, card status 0x400900
nov 27 14:27:43 archive kernel: mmcblk0: error -22 transferring data, sector
3372960, nr 1024, cmd response 0x900, card status 0x0

Using kernel 4.11 or 4.14 doesn't make any difference.
Micro SD used is a Kingstone HC 4 GB Class 4; using a Sandisk SDHC 16 GB Class
10 (brand new) doesn't solve.

Steps to reproduce:
1. Download image
[openSUSE-Tumbleweed-ARM-JeOS-raspberrypi3.aarch64-2017.06.10-Build2.7.raw.xz]
and check.
2. xzcat
openSUSE-Tumbleweed-ARM-JeOS-raspberrypi3.aarch64-2017.06.10-Build1.13.raw.xz |
dd bs=4M of=/dev/sdb iflag=fullblock oflag=direct; sync
3. Login as root and execute [zypper dup]
4. Reboot
5. Wait for error

Expected result:
System fully working without the above issues during and after the boot
process.

summary: Raspberry Pi 3 SD Card errors


--1512310947.Ac7DcD0.18980
Date: Sun, 3 Dec 2017 14:22:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070912

            Bug ID: 1070912
           Summary: libetpan17 no longer links libopenssl libraries
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jazz_fan-at-arcor.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Symptom: No connections possible to imap servers using SSL or TSL with
claws-mail.

The culprit seems to be libetpan17-1.6-1.11. After the update it no longer uses
libopenssl1_1_0:

with the older version libetpan17-1.6-1.10 doing "ldd
/usr/lib64/libetpan.so.17.1.0" I get

        linux-vdso.so.1 (0x00007ffec33d4000)
        libdb-4.8.so => /usr/lib64/libdb-4.8.so (0x00007f56f1e85000)
        libsasl2.so.3 => /usr/lib64/libsasl2.so.3 (0x00007f56f1c68000)
*      libssl.so.1.0.0 => /usr/lib64/libssl.so.1.0.0 (0x00007f56f19f9000)
*      libcrypto.so.1.0.0 => /usr/lib64/libcrypto.so.1.0.0 (0x00007f56f158e000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f56f1377000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f56f0fbd000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f56f0d9f000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f56f0b9b000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f56f24d3000)

With the new version it's:

        linux-vdso.so.1 (0x00007ffd78dd3000)
        libdb-4.8.so => /usr/lib64/libdb-4.8.so (0x00007f3a9c0dd000)
        libsasl2.so.3 => /usr/lib64/libsasl2.so.3 (0x00007f3a9bec0000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f3a9bca9000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f3a9b8ef000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f3a9b6d1000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f3a9b4cd000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f3a9c729000)

Note the to missing libraries marked with an asterisk in the older version.

Fix:

For downgrading to the old version fixes the problem.


--1512323254.dbdCdB0.29627
Date: Sun, 3 Dec 2017 17:47:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070916

            Bug ID: 1070916
           Summary: virt-aa-helper: AppArmor denial with non-default disk image paths
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE 42.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: jfehlig-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: Beta-Customer
           Blocker: ---

After enabling security_default_confined in /etc/libvirt/qemu.conf, I see this
AppArmor denial:

type=AVC msg=audit(1512320837.992:6275): apparmor="DENIED" operation="open"
profile="virt-aa-helper" name="/filespace/images/salt-test/wiki.raw" pid=15636
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Interestingly the VM boots and works, so I wonder if virt-aa-helper really
needs read access to the disk images.

If you think that access should be granted:
I know I use a non-default path for my disk images, but it could still be
solved:
a) perfect solution: automatically update the profile based on the VM config
   (see samba for an example - /usr/share/samba/update-apparmor-samba-profile
   gets called by smb.service before every samba (re)start)
b) by adding a tunables/libvirt that sets a @{VM_DISK_PATH} variable
   (has to be edited by the user if using non-default paths)
c) by adding a local/ include, as already done by lots of profiles
d) by telling me that *.raw isn't a perfect filename and that I should
   rename my disks to *.img ;-)

Ideally you should implement a), but b) would also be ok.

You might want to additionally implement c) because that allows profile
adjustments without "risking" *.rpmnew files.

After that, you could even remove some of the broad rules in this profile, like
the rules for /**.img and /{media,mnt,opt,srv}/**


--1512315754.CE3E6.1973
Date: Sun, 3 Dec 2017 15:42:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1070913

            Bug ID: 1070913
           Summary: [aarch64][20171202][Test 549227] vlc dependency error for libva-drm.so.1()(64bit)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: afaerber-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: agraf-at-suse.com, dmueller-at-suse.com, schwab-at-suse.com,
                    stefan.bruens@rwth-aachen.de
          Found By: ---
           Blocker: ---

openQA's vlc test started failing in snapshot 20171202, possibly due to this
error on the preceding screen:

Fatal error: nothing provides libva-drm.so.1()(64bit) needed by
vlc-noX-2.2.6-3.1.aarch64

https://openqa.opensuse.org/tests/549227#step/vlc/11

vlc is currently in state unresolvable:
https://build.opensuse.org/package/show/openSUSE:Factory:ARM/vlc

Cause is projectM-qt5 failing to build:
https://build.opensuse.org/package/show/openSUSE:Factory:ARM/projectM-qt5

This is blocking Tumbleweed from publishing on aarch64.


--1512399029.8BfAf2C10.11366
Date: Mon, 4 Dec 2017 14:50:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1071076

            Bug ID: 1071076
           Summary: usbguard should provide sample rules.conf file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the file is referenced in the default config and not present which breaks even
normal startup


--1512401715.00883.16549
Date: Mon, 4 Dec 2017 15:35:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1071085

            Bug ID: 1071085
           Summary: btrfs-convert fails with undefined symbol error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jeffm-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

vm-16:/home/jeffm # btrfs-convert /dev/vdh
create btrfs filesystem:
    blocksize: 4096
    nodesize:  16384
    features:  extref, skinny-metadata (default)
creating reiserfs image file
creating btrfs metadata
btrfs-convert: symbol lookup error: btrfs-convert: undefined symbol:
reiserfs_iterate_dir

The package needs to depend on libreiserfscore0-3.6.27 or newer.


--1512564385.5d8205.4122
Date: Wed, 6 Dec 2017 12:46:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1071521

            Bug ID: 1071521
           Summary: [Build 20171205] openQA test fails in force_cron_run: PackageKit background job can sleep up to 1h
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/552148/modules/force_
                    cron_run/steps/10
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-update_Leap_42.1_gnome@64bit fails in
[force_cron_run](http://openqa.opensuse.org/tests/552148/modules/force_cron_run/steps/10)

## Reproducible

Fails since (at least) Build
[20171205](http://openqa.opensuse.org/tests/551940)

## Expected result

Last good: [20171204](http://openqa.opensuse.org/tests/550866) (or more recent)

## Further details

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?distri=opensuse&arch=x86_64&machine=64bit&version=Tumbleweed&flavor=DVD&test=update_Leap_42.1_gnome)

## There is no clear answer yet, but the PackageKit service is a reasonable
candidate to be causing this block (does not explain why we did not see this
ever until now)

PK does this in the cron script:

# wait a random amount of time to avoid hammering the servers
[ -z "$SLEEP_MAX" ] && SLEEP_MAX=$RANDOM
sleep $(( $RANDOM % $SLEEP_MAX + 1 ))

With MAX_SLEEP being set to 3600 in the default configuration

This sleep is not nescessary on openSUSE, since our cron.daily tasks are not
scheduled for 0:00, but '24 hours after last exectuion', which depends largely
on the sytem itself


body:
--1512575560.Cbc31740.10791
Date: Wed, 6 Dec 2017 15:52:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1071561

            Bug ID: 1071561
           Summary: Update to spec-cleaner-1.0.1
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: tchvatal-at-suse.com
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Various fixes on top of 1.0.0 release now recognising new options from new rpm
like triggerin.

summary: Update to spec-cleaner-1.0.1


--1512577897.3Ba036.24316
Date: Wed, 6 Dec 2017 16:31:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1071571

            Bug ID: 1071571
           Summary: Gajim plugins "Available" dialog is empty (IOError: [Errno 2] No such file ...)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: duge@pre-sense.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If you run Gajim on openSUSE-42.3, but didn't run Gajim on your system before
you won't be able to install plugins via the integrated Gajim plugin manager.

Steps:

1. Move or clear the folders: ~/.cache/gajim/ ~/config/gajim/,
~/.local/share/gajim/

2. Start Gajim from shell, so you get STDOUT and STDERR output.

3. When Gajim asks to set up an account just click "Cancel".

4. Edit -> Plugins -> Available

There will be no available plugins shown (should be more than 20) and on the
shell you'll read:
12/06/17 17:28:47 (E) gajim.plugin_system Error fetching plugin list
Traceback (most recent call last):
  File "/usr/share/gajim/plugins/plugin_installer/plugin_installer.py", line
662, in run
    callback=_process_images)
  File "/usr/share/gajim/plugins/plugin_installer/plugin_installer.py", line
149, in retrieve_path
    cafile=self.local_file_path('DST_Root_CA_X3.pem'))
  File "/usr/lib64/python2.7/ssl.py", line 450, in create_default_context
    context.load_verify_locations(cafile, capath, cadata)
IOError: [Errno 2] No such file or directory

If you used Gajim before upgrading to openSUSE-42.3 and the folders
~/.cache/gajim/ ~/config/gajim/ and ~/.local/share/gajim/ exist, the
"Available" dialog will work normally and you'll be shown a lot (more than 20)
plugins to install.


--1512639121.DC850.18702
Date: Thu, 7 Dec 2017 09:32:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1071691

            Bug ID: 1071691
           Summary: VUL-0: Chromium release 63.0.3239.84 fixing many vulnerabilities
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

Critical CVE-2017-15407: Out of bounds write in QUIC.
High CVE-2017-15408: Heap buffer overflow in PDFium.
High CVE-2017-15409: Out of bounds write in Skia.
High CVE-2017-15410: Use after free in PDFium.
High CVE-2017-15411: Use after free in PDFium.
High CVE-2017-15412: Use after free in libXML.
High CVE-2017-15413: Type confusion in WebAssembly.
Medium CVE-2017-15415: Pointer information disclosure in IPC call.
Medium CVE-2017-15416: Out of bounds read in Blink.
Medium CVE-2017-15417: Cross origin information disclosure in Skia.
Medium CVE-2017-15418: Use of uninitialized value in Skia.
Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
Medium CVE-2017-15420: URL spoofing in Omnibox.
Medium CVE-2017-15422: Integer overflow in ICU.
Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
Low CVE-2017-15424: URL Spoof in Omnibox.
Low CVE-2017-15425: URL Spoof in Omnibox.
Low CVE-2017-15426: URL Spoof in Omnibox.
Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.


--1512643853.b5aA4D0.10836
Date: Thu, 7 Dec 2017 10:50:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1071709

            Bug ID: 1071709
           Summary: VUL-0: fossil: client-side code execution via specially crafted ssh:// URL (ProxyCommand)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: max-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

From https://www.fossil-scm.org/xfer/doc/trunk/www/changes.wiki

> Fix the "ssh://" protocol to prevent an attack whereby the attacker
> convinces a victim to run a "clone" with a dodgy URL and thereby gains
> access to their system.

From https://www.fossil-scm.org/xfer/info/1f63db591c77108c

> Fix the SSH sync protocol to avoid "ssh" command-line option injection
> attacks such as those fixed in Git 2.14.1, Mercurial 4.2.3, and Subversion 1.9.7.
> As "ssh://" URLs cannot be buried out of sight in Fossil, the vulnerability does
> not appear to be as severe as in those other systems

Fixed in 2.4

git: bug 1052481 CVE-2017-1000117
svn: bug 1051362 CVE-2017-9800


--1512663438.C37Fb50.20516
Date: Thu, 7 Dec 2017 16:17:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1071797

            Bug ID: 1071797
           Summary: VUL-0: CVE-2017-16921: otrs: Remote code execution for authenticated users (OSA-2017-09)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/196328/
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-16921

An attacker who is logged into OTRS as an agent can manipulate form parameters
and execute arbitrary shell commands with the permissions of the OTRS or web
server user.

https://www.otrs.com/security-advisory-2017-09-security-update-otrs-framework/

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16921
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16921.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16921


--1512663600.f4De260.21056
Date: Thu, 7 Dec 2017 16:19:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1071799

            Bug ID: 1071799
           Summary: VUL-0: CVE-2017-16854: otrs: Information disclosure for authenticated users (OSA-2017-08)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/196327/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: jsegitz-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-16854

https://www.otrs.com/security-advisory-2017-08-security-update-otrs-framework/

An attacker who is logged into OTRS as a customer can use the ticket search
form to disclose internal article information of their customer tickets.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16854
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16854.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16854


--1512680732.Af76fcaF0.15514
Date: Thu, 7 Dec 2017 21:05:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1071825

            Bug ID: 1071825
           Summary: AttributeError: 'NoneType' object has no attribute 'change_run_text'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 751986
  --> http://bugzilla.suse.com/attachment.cgi?id=751986&action=edit
virt-manager log file

The above error occurs when I try to open the details view for a VM through the
virt-manager overview UI for the second time (i.e. open details view, close it
again, and open again). It doesn't seem to matter whether or not the VM is
stopped in the meantime.

The attached log file shows several occurences of this problem.