--1580894601.24CE7D0.7810
Date: Wed, 5 Feb 2020 09:23:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162775

            Bug ID: 1162775
           Summary: VUL-1: CVE-2019-15623: nextcloud: Exposure of Private Information causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252414/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15623

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to
send it's domain and user IDs to the Nextcloud Lookup Server without any
further
data when the Lookup server is disabled.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15623
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15623
https://nextcloud.com/security/advisory/?id=NC-SA-2019-016
https://hackerone.com/reports/508490


--1580894769.cdDA6BD0.12543
Date: Wed, 5 Feb 2020 09:26:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162776

            Bug ID: 1162776
           Summary: VUL-1: CVE-2019-15624: nextcloud: Improper Input Validation allows group admins to create users with IDs of system folders
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252415/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15624

Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to
create users with IDs of system folders.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15624
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15624
https://nextcloud.com/security/advisory/?id=NC-SA-2019-015
https://hackerone.com/reports/508493


--1580895523.e645D0.18365
Date: Wed, 5 Feb 2020 09:38:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162781

            Bug ID: 1162781
           Summary: VUL-1: CVE-2020-8119: nextcloud: Improper authorization causes leaking of previews and files when a file-drop share link is opened via the gallery app
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252433/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews
and
files when a file-drop share link is opened via the gallery app.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8119
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8119
https://hackerone.com/reports/719426
https://nextcloud.com/security/advisory/?id=NC-SA-2019-012


--1580895611.DBAe70.22119
Date: Wed, 5 Feb 2020 09:40:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162782

            Bug ID: 1162782
           Summary: VUL-1: CVE-2020-8118: nextcloud: An authenticated server-side request forgery allowed to detect local and remote services when adding a new subscription in the calendar application
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252432/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8118

An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed
to detect local and remote services when adding a new subscription in the
calendar application.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8118
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8118
https://nextcloud.com/security/advisory/?id=NC-SA-2019-014
https://hackerone.com/reports/427835


--1580895726.a7b2F0.23639
Date: Wed, 5 Feb 2020 09:42:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162784

            Bug ID: 1162784
           Summary: VUL-1: CVE-2019-15621: nextcloud: Improper permissions preservation causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252412/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15621

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to
be able to reshare with write permissions when sharing the mount point of a
share they received, as a public link.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15621
https://nextcloud.com/security/advisory/?id=NC-SA-2020-012
https://hackerone.com/reports/619484


--1580896667.a1bB0.2718
Date: Wed, 5 Feb 2020 09:57:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162794

            Bug ID: 1162794
           Summary: VUL-0: CVE-2019-10784: phpPgAdmin: improper source validation may lead to CSRF
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/252397/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-10784

phppgadmin through 7.12.1 allows sensitive actions to be performed without
validating that the request originated from the application. One such area,
"database.php" does not verify the source of an HTTP request. This can be
leveraged by a remote attacker to trick a logged-in administrator to visit a
malicious page with a CSRF exploit and execute arbitrary system commands on the
server.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10784
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10784
https://snyk.io/vuln/SNYK-PHP-PHPPGADMINPHPPGADMIN-543885


body:
--1580907032.FCC3D0.24376
Date: Wed, 5 Feb 2020 12:50:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1162833

            Bug ID: 1162833
           Summary: VUL-0: chromium: update to 80.0.3987.87
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This update includes 56 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.
[$5000][1034394] High CVE-2020-6381: Integer overflow in JavaScript. Reported
by The UK's National Cyber Security Centre (NCSC) on 2019-12-09
[$2000][1031909] High CVE-2020-6382: Type Confusion in JavaScript. Reported by
Soyeon Park and Wen Xu from SSLab, Gatech on 2019-12-08
[$500][1020745] High CVE-2019-18197: Multiple vulnerabilities in XML. Reported
by BlackBerry Security Incident Response Team on 2019-11-01
[$500][1042700] High CVE-2019-19926: Inappropriate implementation in SQLite.
Reported by Richard Lorenz, SAP on 2020-01-16
[$N/A][1035399] High CVE-2020-6385: Insufficient policy enforcement in storage.
Reported by Sergei Glazunov of Google Project Zero on 2019-12-18
[$N/A][1038863] High CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities
in SQLite. Reported by Richard Lorenz, SAP on 2020-01-03
[$N/A][1042535] High CVE-2020-6387: Out of bounds write in WebRTC. Reported by
Natalie Silvanovich of Google Project Zero on 2020-01-16
[$N/A][1042879] High CVE-2020-6388: Out of bounds memory access in WebAudio.
Reported by Sergei Glazunov of Google Project Zero on 2020-01-16
[$N/A][1042933] High CVE-2020-6389: Out of bounds write in WebRTC. Reported by
Natalie Silvanovich of Google Project Zero on 2020-01-16
[$N/A][1045874] High CVE-2020-6390: Out of bounds memory access in streams.
Reported by Sergei Glazunov of Google Project Zero on 2020-01-27
[$10000][1017871] Medium CVE-2020-6391: Insufficient validation of untrusted
input in Blink. Reported by Michał Bentkowski of Securitum on 2019-10-24
[$5000][1030411] Medium CVE-2020-6392: Insufficient policy enforcement in
extensions. Reported by Microsoft Edge Team on 2019-12-03
[$5000][1035058] Medium CVE-2020-6393: Insufficient policy enforcement in
Blink. Reported by Mark Amery on 2019-12-17
[$3000][1014371] Medium CVE-2020-6394: Insufficient policy enforcement in
Blink. Reported by Phil Freo on 2019-10-15
[$3000][1022855] Medium CVE-2020-6395: Out of bounds read in JavaScript.
Reported by Pierre Langlois from Arm on 2019-11-08
[$3000][1035271] Medium CVE-2020-6396: Inappropriate implementation in Skia.
Reported by William Luc Ritchie on 2019-12-18
[$2000][1027408] Medium CVE-2020-6397: Incorrect security UI in sharing.
Reported by Khalil Zhani on 2019-11-22
[$2000][1032090] Medium CVE-2020-6398: Uninitialized use in PDFium. Reported by
pdknsk on 2019-12-09
[$2000][1039869] Medium CVE-2020-6399: Insufficient policy enforcement in
AppCache. Reported by Luan Herrera (@lbherrera_) on 2020-01-07
[$1000][1038036] Medium CVE-2020-6400: Inappropriate implementation in CORS.
Reported by Takashi Yoneuchi (@y0n3uchy) on 2019-12-27
[$500][1017707] Medium CVE-2020-6401: Insufficient validation of untrusted
input in Omnibox. Reported by Tzachy Horesh on 2019-10-24
[$500][1029375] Medium CVE-2020-6402: Insufficient policy enforcement in
downloads. Reported by Vladimir Metnew (@vladimir_metnew) on 2019-11-28
[$TBD][1006012] Medium CVE-2020-6403: Incorrect security UI in Omnibox.
Reported by Khalil Zhani on 2019-09-19
[$N/A][1024256] Medium CVE-2020-6404: Inappropriate implementation in Blink.
Reported by kanchi on 2019-11-13
[$N/A][1042145] Medium CVE-2020-6405: Out of bounds read in SQLite. Reported by
Yongheng Chen(Ne0) & Rui Zhong(zr33) on 2020-01-15
[$N/A][1042254] Medium CVE-2020-6406: Use after free in audio. Reported by
Sergei Glazunov of Google Project Zero on 2020-01-15
[$N/A][1042578] Medium CVE-2019-19923: Out of bounds memory access in SQLite.
Reported by Richard Lorenz, SAP on 2020-01-16
[$1000][1026546] Low CVE-2020-6408: Insufficient policy enforcement in CORS.
Reported by Zhong Zhaochen of andsecurity.cn on 2019-11-20
[$1000][1037889] Low CVE-2020-6409: Inappropriate implementation in Omnibox.
Reported by Divagar S and Bharathi V from Karya Technologies on 2019-12-26
[$500][881675] Low CVE-2020-6410: Insufficient policy enforcement in
navigation. Reported by evi1m0 of Bilibili Security Team on 2018-09-07
[$500][929711] Low CVE-2020-6411: Insufficient validation of untrusted input in
Omnibox. Reported by Khalil Zhani on 2019-02-07
[$N/A][968505] Low CVE-2020-6412: Insufficient validation of untrusted input in
Omnibox. Reported by Zihan Zheng (@zzh1996) of University of Science and
Technology of China on 2019-05-30
[$N/A][1005713] Low CVE-2020-6413: Inappropriate implementation in Blink.
Reported by Michał Bentkowski of Securitum on 2019-09-19
[$N/A][1021855] Low CVE-2020-6414: Insufficient policy enforcement in Safe
Browsing. Reported by Lijo A.T on 2019-11-06
[$N/A][1029576] Low CVE-2020-6415: Inappropriate implementation in JavaScript.
Reported by Avihay Cohen @ SeraphicAlgorithms on 2019-11-30
[$N/A][1031895] Low CVE-2020-6416: Insufficient data validation in streams.
Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2019-12-08
[$N/A][1033824] Low CVE-2020-6417: Inappropriate implementation in installer.
Reported by Renato "Wrath" Moraes and Altieres "FallenHawk" Rohr on 2019-12-13
We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.As usual, our ongoing internal security work was responsible for a wide
range of fixes:

    [1048330] Various fixes from internal audits, fuzzing and other initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels?  Find out how here. If you find a new
issue, please let us know by filing a bug. The community help forum is also a
great place to reach out for help or learn about common issues.
Thank you,
Srinivas Sista

summary: VUL-0: chromium: update to 80.0.3987.87


--1580919699.Dc675Ef0.3571
Date: Wed, 5 Feb 2020 16:21:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162868

            Bug ID: 1162868
           Summary: Please Update perl-CGI to version 4.45 for Leap 15.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jweberhofer-at-weberhofer.at
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

n/a


--1580928464.Dc523.19253
Date: Wed, 5 Feb 2020 18:47:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162882

            Bug ID: 1162882
           Summary: Qt apps cannot handle non-ASCII filesystem path if LC_ALL present as empty string in env (libicu-uc blame)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: kossebau-at-kde.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

libicu-uc's ucnv_getDefaultName() returns "US-ASCII" if LC_ALL is set
explicitly to an empty string in the environment (compared to not being set at
all).

As effect e.g. all Qt-based code run where LC_ALL="" is part of the environment
variables is not able to handle non-ASCII path in the filesystem.

Example: run
    LC_ALL= kate
or okteta, kwrite, etc. and try to load or save a file with non-ascii chars,
like German umlauts ��� (ex: "�rger.txt").

Because Qt's QTextCodec::codecForLocale() used for decoding/encoding names from
the filesystem is an instance of QIcuCodec (on openSUSE & friends) which
queries the system default from libicu-uc by that very ucnv_getDefaultName().

That behaviour of libicu-uc is rather unexpected. And seems also not present on
all Linux flavours, e.g. with some versions of Debian & Ubuntu LC_ALL="" was
treated the same as not being set. All code I have seen elsewhere handling
LC_ALL does not make a difference between being not set or being an empty
string, but maps both to: not set.

POSIX.1-2017 take on this seems this:
"If the LC_ALL environment variable is defined and is not null, the value of
LC_ALL shall be used."
from https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap08.html

Some old commit to libicu once fixed things for Solaris only:
https://github.com/unicode-org/icu/commit/a8b1972f9263f481d0c50db709f93da3813de706

Not idea if that code patched there is the code responsible for what we see
here, but the pattern (check for a != 0 && *a != \0) would be the same.

To reproduce the issue, find a small sample program and build instructions in
this comment: https://bugs.documentfoundation.org/show_bug.cgi?id=130080#c18
(that bug is about the wrapper script for starting libreoffice actually
resulting in LC_ALL being set to an empty string, thus failing with the Qt/KF
platform plugin to handle non-ascii filesystem names).

Had no time to look into libicu myself, thus also no proposals what and how to
fix/patch here exactly.


--1580934425.6bfa7FBb0.4205
Date: Wed, 5 Feb 2020 20:27:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162891

            Bug ID: 1162891
           Summary: server:mail/postfix: cond_slp bug on TW after moving /etc/services to /usr/etc/services
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: varkoly-at-suse.com
          Reporter: munix9-at-googlemail.com
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

systemctl status postfix

cond_slp[8720]: sed: can't read /etc/services: No such file or directory

"/etc/services" is hard coded in /etc/postfix/system/cond_slp
After moving /etc/services to /usr/etc/services in TW this leads to the error
given above.

Possible patch (if I correctly understood the new mimic with /usr/etc/ and
/etc/, so look in /etc/services first if file and entry exists and optionally
look in /usr/etc/services as a fallback):

-


--1580973231.eB3A2.3412
Date: Thu, 6 Feb 2020 07:13:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1162916

            Bug ID: 1162916
           Summary: YaST removes usrfiles entries from /etc/nsswitch.conf
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

/etc/nsswitch.conf contains several entries like:
services:       files usrfiles

after using yast2 nis-client, it's changed to:
services:       files nis

YaST2 should not remove the usrfiles entry.


--1580984405.DCDE65.8789
Date: Thu, 6 Feb 2020 10:20:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1162951

            Bug ID: 1162951
           Summary: AUDIT-1: Xvnc: vnc user membership in shadow group
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: sndirsch-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: eich-at-suse.com, jsegitz-at-suse.com, malte.kraus-at-suse.com,
                    security-team-at-suse.de
          Found By: ---
           Blocker: ---

I recently noticed that the Xvnc package adds the vnc user to the shadow
group:

```
$ grep shadow /etc/group
shadow:x:15:vnc
```

This comes from the tigervnc spec file:

```
usermod -G shadow -a %{vncuser} || :
```

From the changelog I found that the reasoning behind that was in bug 980326.
This change is supposed to allow Xvnc to verify user passwords via PAM.

However, the pam_unix module is using /sbin/unix*chkpwd to verify passwords.
And these utilities are installed setuid-root (see also related bug 1162950).
So I don't actually see why the vnc user needs to be a member of the shadow
group.

I you don't know of a good reason to keep this membership, can you please
remove the according logic from the spec file?

Furthermore, do you happen to know why Xvnc is installed by default on e.g.
Tumbleweed? It seems that the installation-images does BuildRequire it. I can
understand that e.g. the installer media might need this package to allow
installation from the network. But why does it need to be installed on the
target machine?

Thank you.


--1581019051.F34ecc0.17754
Date: Thu, 6 Feb 2020 19:57:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163043

            Bug ID: 1163043
           Summary: devel:languages:python/python-tox: Requires unsatisfied importlib-metadata (<1,>=0.12)
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: tchvatal-at-suse.com
          Reporter: sebix+novell.com-at-sebix.at
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Tox in TW cannot be properly used:

/usr/lib/python3.7/site-packages/tox-3.14.0.dist-info/METADATA:Requires-Dist:
importlib-metadata (<1,>=0.12) ; python_version < "3.8"

> zypper se -s python3-importlib-metadata
Loading repository data...
Reading installed packages...

S | Name                       | Type    | Version   | Arch   | Repository
--+----------------------------+---------+-----------+--------+------------------------
i | python3-importlib-metadata | package | 1.4.0-1.1 | noarch |
openSUSE-Tumbleweed-Oss


--1581064536.E3Bdb7E1.3526
Date: Fri, 7 Feb 2020 08:35:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1163093

            Bug ID: 1163093
           Summary: Bad video-streaming experience after recent Mesa update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: lubos.kocman-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Hello,

we've recently published new Leap 15.2 snapshot containing GNOME and Mesa
update and since then I started to experience various video performance issues.

Video-streaming (netflix/hbo go) experience is really bad, the video is not
fully smooth (google-chrome). I'm not sure if it's related but I had a 10
seconds lag on screen refresh in a recorded gotomeeting (chromium) session,
while everybody else (Typically SLE/Tumbleweed/Mac) had no such issues.

I'm afraid that these all might be related to recent Mesa update.

My laptop is Dell Precision 5530 running the latest Leap 15.2 to date.

lkocman@deadrat:~> /sbin/lspci -nn | grep -i vga
00:02.0 VGA compatible controller [0300]: Intel Corporation UHD Graphics 630
(Mobile) [8086:3e9b]

lkocman@deadrat:~> rpm -qa | egrep -i "xorg|xf86|mesa"
xorg-x11-Xvnc-module-1.9.0-lp152.5.2.x86_64
xorg-x11-essentials-7.6_1-lp152.3.2.noarch
xf86-video-vesa-2.4.0-lp152.3.3.x86_64
Mesa-libglapi0-19.2.6-lp152.26.1.x86_64
xorg-x11-server-1.20.3-lp152.5.1.x86_64
xorg-x11-libX11-ccache-7.6-lp152.3.2.noarch
xf86-input-libinput-0.28.1-lp152.2.2.x86_64
Mesa-gallium-19.2.6-lp152.26.1.x86_64
xf86-input-evdev-2.10.6-lp152.2.2.x86_64
libXxf86dga1-1.1.4-lp152.3.3.x86_64
xorg-x11-server-wayland-1.20.3-lp152.5.1.x86_64
libXxf86misc1-1.0.3-lp152.3.3.x86_64
xorg-x11-fonts-core-7.6-lp152.4.2.noarch
xf86-input-joystick-1.6.3-lp152.3.3.x86_64
xorg-x11-driver-video-7.6_1-lp152.4.2.x86_64
Mesa-dri-nouveau-19.2.6-lp152.26.1.x86_64
xf86-video-nouveau-1.0.15-lp152.5.4.x86_64
xf86-input-void-1.4.1-lp152.3.2.x86_64
xf86-input-wacom-0.34.2-lp152.4.4.x86_64
Mesa-libEGL1-19.2.6-lp152.26.1.x86_64
Mesa-libva-19.2.6-lp152.26.1.x86_64
xorg-x11-Xvnc-1.9.0-lp152.5.2.x86_64
xf86-input-mouse-1.9.2-lp152.4.2.x86_64
Mesa-19.2.6-lp152.26.1.x86_64
xorg-x11-server-extra-1.20.3-lp152.5.1.x86_64
xorg-x11-fonts-7.6-lp152.4.2.noarch
xf86-input-vmmouse-13.1.0-lp152.3.3.x86_64
xorg-scripts-1.0.1-lp152.3.2.noarch
xf86-input-keyboard-1.9.0-lp152.3.2.x86_64
libXxf86vm1-1.1.4-lp152.3.2.x86_64
xorg-x11-7.6_1-lp152.3.2.noarch
Mesa-dri-19.2.6-lp152.26.1.x86_64
Mesa-libGL1-19.2.6-lp152.26.1.x86_64
xf86-video-fbdev-0.5.0-lp152.2.2.x86_64
xf86dga-1.0.3-lp152.3.3.x86_64


body:
--1581076223.fdCBC1AC5.12974
Date: Fri, 7 Feb 2020 11:50:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163136

            Bug ID: 1163136
           Summary: python-oslo.messaging test gets stuck
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: cloud-bugs-at-suse.de
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tbechtold-at-suse.com
          Found By: ---
           Blocker: ---

From
https://build.opensuse.org/package/show/Cloud:OpenStack:Factory/python-oslo.messaging

It seems the tests are stuck repeating forever

[431072s] ERROR [oslo_messaging._drivers.amqp1_driver.controller] Socket
failure: [Errno 111] Connection refused [431103s] ERROR
[oslo_messaging._drivers.amqp1_driver.controller] Socket failure: [Errno 111]
Connection refused

and failures start there:

[ 180s] {0}
oslo_messaging.tests.test_utils.VersionIsCompatibleTestCase.test_version_is_compatible_major_difference1
[0.002105s] ... ok [ 180s] {0}
oslo_messaging.tests.test_utils.VersionIsCompatibleTestCase.test_version_is_compatible_newer_minor
[0.001850s] ... ok [ 187s] ERROR
[oslo_messaging._drivers.amqp1_driver.controller] Socket failure: [Errno 111]
Connection refused [ 187s] ERROR
[oslo_messaging._drivers.amqp1_driver.controller] Socket failure: [Errno 111]
Connection refused

summary: python-oslo.messaging test gets stuck


--1581155401.c4Bbe33E0.10391
Date: Sat, 8 Feb 2020 09:50:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163190

            Bug ID: 1163190
           Summary: pkg-config  --exists doesn't recognize 1.43.0 as greater than 1.6.0
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: davejplater-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This a strange bug specific to Leap:15.2's pkg-config.
pkg-config  --exists "pangoft2 >= 1.6.0" works on Leap:15.1's pangoft2-1.40.13
and Factory's pangoft2-1.44.7 but fails with Leap:15.2's pangoft2-1.43.0.

I've inserted the lines:
pkg-config  --modversion "pangoft2"
if pkg-config  --exists "pangoft2 >= 1.40.13" ;then echo ${?}; else echo ${?}
true; fi
in home:plater:lilypond/lilypond/lilypond.spec in the %prep section to
demonstrate the bug. I haven't got a 15.2 installation.
I'm going to work around the bug with a patch so long.


--1581255922.7bbEF3.19741
Date: Sun, 9 Feb 2020 13:45:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163206

            Bug ID: 1163206
           Summary: hwmon/k10temp: Add support for AMD family 17h, model 70h CPUs
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: SUSE Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: obs.be41ba3ff3da@21er.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A single line is missing in hwmin/k10temp.c which prevents the system from
being able to read temperatures of ryzen 3000 family cpus. The patch already
exists, see https://patchwork.kernel.org/patch/11053207/

Would be nice for Leap 15.1 kernel (4.12.14) too but there, a lot more work
would be necessary...


--1581402850.fFaF2B631.25492
Date: Tue, 11 Feb 2020 06:34:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1163328

            Bug ID: 1163328
           Summary: Kubic Installer System Role should not disable ip_forward by default
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: zzhou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

My first time to play with Kubic. At the first impression, looks like, by
default, Installer System Role (eg. kubeadm) disable ip_forward in Network
Configuration.

After installation,

      grep -r ip_forward /etc/sysctl.d
      /etc/sysctl.d/70-yast.conf:net.ipv4.ip_forward = 0

which overrides /usr/lib/sysctl.d/50-kubeadm.conf basically,

      cat /usr/lib/sysctl.d/50-kubeadm.conf
      net.ipv4.ip_forward = 1

As workaround, I have to manually delete 70-yast.conf, or enable ip_forward in
Installer. [1]

Otherwise, kubeadm init will suffer

[ERROR FileContent--proc-sys-net-ipv4-ip_forward]

[1] https://github.com/kubernetes/kubeadm/issues/1062


body:
--1581409015.0Dc071F14.22382
Date: Tue, 11 Feb 2020 08:16:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163333

            Bug ID: 1163333
           Summary: LTO: binutils build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm working on binutils 2.34 package update and I noticed quite suspicious
thing.
We build the package with LTO (and -ffat-lto-objects due to some .a libs), and
the built package crashes. More precisely, one needs to built binutils with
already
built version 2.34. Doing that I end up with:

$ LD_LIBRARY_PATH=../bfd/.libs/ .libs/ar r /tmp/x.a /tmp/y
Segmentation fault (core dumped)

(gdb) bt
#0  0x0000000000000000 in ?? ()
#1  0x00007ffff7afe7dd in make_relative_prefix_1 (progname=0x7fffffffeb09
"/home/abuild/rpmbuild/BUILD/binutils-2.34/build-dir/binutils/.libs/ar",
bin_prefix=0x7ffff7ce326b "/usr/bin", prefix=0x7ffff7ce3254
"/usr/lib64/bfd-plugins", resolve_links=1)
    at ../../libiberty/make-relative-prefix.c:317
#2  0x00007ffff7b1026e in load_plugin (abfd=0x5555555667e0) at
../../bfd/plugin.c:397
#3  bfd_plugin_object_p (abfd=0x5555555667e0) at ../../bfd/plugin.c:451
#4  0x00007ffff7cda4c6 in bfd_check_format_matches
(abfd=abfd@entry=0x5555555667e0, format=format@entry=bfd_object,
matching=matching@entry=0x0) at ../../bfd/format.c:261
#5  0x00007ffff7cda917 in bfd_check_format (abfd=abfd@entry=0x5555555667e0,
format=format@entry=bfd_object) at ../../bfd/format.c:94
#6  0x00007ffff7cdb248 in _bfd_write_archive_contents (arch=0x555555573a90) at
../../bfd/archive.c:2127
#7  0x00007ffff7cd2c4a in bfd_close (abfd=0x555555573a90) at
../../bfd/opncls.c:755
#8  0x000055555555a718 in write_archive (iarch=0x5555555640c0) at
../../binutils/ar.c:1240
#9  0x000055555555a9ea in replace_members (arch=0x5555555640c0,
files_to_move=0x555555564080, quick=0) at ../../binutils/ar.c:1482
#10 0x000055555555842e in main (argc=<optimized out>, argv=<optimized out>) at
../../binutils/ar.c:887

Dump of assembler code for function make_relative_prefix_1:
   0x00007ffff7afe620 <+0>:    push   %rbp
   0x00007ffff7afe621 <+1>:    mov    %rsp,%rbp
   0x00007ffff7afe624 <+4>:    push   %r15
   0x00007ffff7afe626 <+6>:    push   %r14
...
   0x00007ffff7afe7d8 <+440>:    callq  0x7ffff7af6990 <lrealpath@plt>
=> 0x00007ffff7afe7dd <+445>:    mov    %rax,%r15

So it crashes in call to lrealpath (via plt entry). What's maybe problematic is
that the link command line:

gcc -W -Wall -Wstrict-prototypes -Wmissing-prototypes -Wshadow
-Wstack-usage=262144 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection
-Werror=return-type -flto=auto -g -Wno-error -ffat-lto-objects -o .libs/ar
arparse.o arlex.o ar.o not-ranlib.o arsup.o rename.o binemul.o emul_vanilla.o
bucomm.o version.o filemode.o  ../bfd/.libs/libbfd.so
-L/home/abuild/rpmbuild/BUILD/binutils-2.34/build-dir/bfd/../libiberty/pic
-liberty -lz ../libiberty/libiberty.a -lfl -ldl -Wl,-rpath -Wl,/usr/lib64

contains:
$ nm ../bfd/.libs/libbfd.so | grep lrealpath
00000000000fc510 T lrealpath

and LTO resolution file looks like:

/home/abuild/rpmbuild/BUILD/binutils-2.34/build-dir/bfd/../libiberty/pic/libiberty.a@0x20eab2
7
...
269 5c0e5e41e2575a62 RESOLVED_IR lrealpath
/home/abuild/rpmbuild/BUILD/binutils-2.34/build-dir/bfd/../libiberty/pic/libiberty.a@0x26afce
2
212 69eadc5b8b30099f PREVAILING_DEF_IRONLY lrealpath
...

and the symbol is seen by GCC in LTO as:

lrealpath/2736 (lrealpath) @0x7ffff77639d8
  Type: function definition analyzed
  Visibility: externally_visible prevailing_def_ironly public
  References:
  Referring:
  Read from file:
/home/abuild/rpmbuild/BUILD/binutils-2.34/build-dir/bfd/../libiberty/pic/libiberty.a
  Availability: available
  Function flags: count:1073741824 (estimated locally)
  Called by: canonical_filename_eq/2611 (1073741824 (estimated locally),1.00
per call) canonical_filename_eq/2611 (1073741824 (estimated locally),1.00 per
call)
  Calls: strdup/2737 (1073741824 (estimated locally),1.00 per call)
__realpath_chk/2740 (1073741824 (estimated locally),1.00 per call)

But I can't see the symbol being emitted in final executable (nor .s file):

$ nm .libs/ar | grep lrealpath
0000000000047e87 W lrealpath.c.60931cf1

Note that adding -fno-lto to the command line helps and the ar is not crashing.

The issue seems to me similar to what I've already seen few time for e.g.
Inkscape:
https://gitlab.com/inkscape/inkscape/issues/235

So it's basically about linking against x.a file and y.so (where y.so contains
x.a).

summary: LTO: binutils build fails


body:
--1581500057.cF3Df4.10775
Date: Wed, 12 Feb 2020 09:34:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163453

            Bug ID: 1163453
           Summary: Introduce MicroOS Desktop
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This is the tracker bug for introducing the MicroOS Desktop into
Factory/Tumbleweed

https://hackweek.suse.com/projects/microos-desktop

Current Steps In Progress at Time of Writing:

* Submit new skelcd-control-MicroOS to YaST>Factory
* Submit new microos-patterns to Factory
* Ensure product builds media with new patterns-microos-[gnome|kde]-desktop
patterns

At this point MicroOS ISO's should have both a KDE and GNOME system role in
'Alpha' status

Steps that must be accomplished to reach 'Beta'

* Some openQA testing
* Basic working functionality like logging in, application installation, etc

Steps to remove the ugly 'Alpha' or 'Beta' flag from the installation

* openQA testing for boot, login, application installation and some apps
running
* No unexpected reboots/sensible rebootmgr configuration
* Notification to the user when a reboot is required

The above steps can be added to in comments here and/or will be tracked on the
linked Hackweek Page

summary: Introduce MicroOS Desktop


--1581509159.270Ae6fF4.30744
Date: Wed, 12 Feb 2020 12:05:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1163484

            Bug ID: 1163484
           Summary: VUL-0: chromium: update to 80.0.3987.100
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

New stable release [1]

No security issues are included in this release

[1]
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_11.html


body:
Build Identifier:

dvdstyler crashes after selecting a menu template during the startup process

Reproducible: Always

Steps to Reproduce:
1. Start dvdstyler
2. Select 'Create a new project' and hit OK
3. Select the first template (other templates have caused the problem but
haven't tried every one) and hit OK
4. wait a few seconds
Actual Results:
Application crashes with a segmentation error.

Expected Results:
Application doesn't crash with a segmentation error.

I don't use dvdstyler very often but I first noticed the problem in a
Tumbleweed version from November and it is still present in 20200209. I don't
remember when I last used it successfully but it was probably 6 months ago.

Also, compiling from source and running with gdb yields:
Thread 1 "dvdstyler" received signal SIGSEGV, Segmentation fault.
0x00007ffff5b0df4c in RecurseElementId(wxSVGElement*, wxString const&) ()
   from /usr/lib64/libwxsvg.so.3

summary: dvdstyler crashes on startup


body:
--1581602234.5e635e84.2755
Date: Thu, 13 Feb 2020 13:57:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1163588

            Bug ID: 1163588
           Summary: AUDIT-FIND: chromium: chrome_sandbox shouldn't be packaged any more
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: ---
           Blocker: ---

I just noticed that on openSUSE we're shipping the chromium browser still with
the setuid-root sandbox in /usr/lib/chrome_sandbox.

This should NOT be necessary any more, since chromium uses Linux namespaces
these days for sandboxing. The chome_sandbox binary should not need to be
built and shipped at all.

Upstream worked for years on making this possible:

https://bugs.chromium.org/p/chromium/issues/detail?id=312380

By now it is possible for a longer time already to run without this
setuid-root binary.

Since openSUSE kernels should all support namespaces there should be no
compelling reason to keep this setuid program around.

Please adjust the packaging accordingly. Afterwards the security team can
remove the entry from the permissions package. Thank you.

pkgs: chromium permissions


--1581603735.Bceaf3.14385
Date: Thu, 13 Feb 2020 14:22:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163592

            Bug ID: 1163592
           Summary: kernel packaging problem: RPM group = %group
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: sbrabec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Checking the invalid entry in the translation project yast-rpm-groups, I found
that:

rpm -qip x86_64/drbd-kmp-default.rpm | grep Group
Group       : %group

It should be fixed.


body:
--1581665411.2bdE5aDF4.18625
Date: Fri, 14 Feb 2020 07:30:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163651

            Bug ID: 1163651
           Summary: [trackerbug] lxd 3.21 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 3.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-21-has-been-released/6802
  + New way to attach to LXD managed networks
  + Clustering: Configurable number of active and standby database members
  * Ceph ported to new storage driver infrastructure
  * VM: CPU pinning and topology
  * VM: Network and storage optimizations
  * VM: Agent-less reporting of IPv6 addresses

summary: [trackerbug] lxd 3.21 update


--1581758071.4aB1E20.14866
Date: Sat, 15 Feb 2020 09:14:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163744

            Bug ID: 1163744
           Summary: QtWebEngine video playback doesn't start (after update to Qt 5.14.1)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: w01dnick-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Falkon and other QtWebEngine clients can't play video. Any video on youtube or
peertube (e.g. at https://kde.org/announcements/plasma-5.18.0.php ) or HTML5
video test pages.

Buffer is filling and network shows video file is loaded but it doesn't start
to actually play. YouTube shows previews on timeline, but not the first frame.
Video without poster has no shown content.

I've noticed this after update to Qt 5.14.1, though maybe this was present
earlier with 5.14, I'm not sure.

Noticed at least with snapshot 20200201 and present till current 20200213.

Can't see anything related in logs of Falkon or when run QtWebEngine from my
app in Qt Creator.


--1581792579.C71Ee1.23781
Date: Sat, 15 Feb 2020 18:49:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163749

            Bug ID: 1163749
           Summary: VUL-0: CVE-2020-7106: cacti: Lack of escaping on some pages can lead to XSS exposure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: aj-at-ajaissle.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: aj-at-ajaissle.de, liedke-at-rz.uni-mannheim.de
          Found By: ---
           Blocker: ---

Fixed in cacti 1.2.9:
 security#3191: Lack of escaping on some pages can lead to XSS exposure
(CVE-2020-7106)


--1581886884.DDBCBf5.4532
Date: Sun, 16 Feb 2020 21:01:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163766

            Bug ID: 1163766
           Summary: [Build 20200215] openQA test fails in first_boot with the opensuse-welcome splash screen showing only a big geeko
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i586
               URL: https://openqa.opensuse.org/tests/1176158/modules/firs
                    t_boot/steps/2
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: okurz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dimstar-at-opensuse.org
          Found By: ---
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-NET-i586-install_only@32bit fails
in
[first_boot](https://openqa.opensuse.org/tests/1176158/modules/first_boot/steps/2)
with the opensuse-welcome splash screen showing only a big geeko. This seems to
happen in the 32bit version of the build only but reproducible.

## Reproducible

Fails since this Build [20200215](https://openqa.opensuse.org/tests/1176158)
(current job). Also visible in the live-medium tests
https://openqa.opensuse.org/tests/1176133 and
https://openqa.opensuse.org/tests/1176132

## Expected result

Last good: [20200214](https://openqa.opensuse.org/tests/1175152), previous
build.

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=i586&distri=opensuse&flavor=NET&machine=32bit&test=install_only&version=Tumbleweed)


--1581942246.e221d0.1874
Date: Mon, 17 Feb 2020 12:24:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1163889

            Bug ID: 1163889
           Summary: VUL-0: CVE-2020-8955: weechat: denial of service in irc_mode_channel_update in plugins/irc/irc-mode.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/253020/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1803064

A vulnerability was found in irc_mode_channel_update in plugins/irc/irc-mode.c
in WeeChat through 2.7 allows remote attackers to cause a denial of service
(buffer overflow and application crash) or possibly have unspecified other
impact via a malformed IRC message 324 (channel mode).

Reference:

https://github.com/weechat/weechat/commit/6f4f147d8e86adf9ad34a8ffd7e7f1f23a7e74da
https://weechat.org/doc/security/

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1803064
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8955
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-8955.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8955
https://github.com/weechat/weechat/commit/6f4f147d8e86adf9ad34a8ffd7e7f1f23a7e74da
https://weechat.org/doc/security/


--1582017693.5Af754.23100
Date: Tue, 18 Feb 2020 09:21:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164072

            Bug ID: 1164072
           Summary: Calamares can't format disk if started with gnomesu
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: opensuse.lietuviu.kalba-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Calamares use xdg-su BASH script to autoselect either gnomesu, kdesu, etc.
Calamares can't format disk if started with gnomesu:
https://github.com/calamares/calamares/issues/980
Thus it must be started with kdesu intentionally.


--1582017957.ef7bBFF0.19979
Date: Tue, 18 Feb 2020 09:25:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164075

            Bug ID: 1164075
           Summary: [Build 20200215] sssd: 'testuser1 group membership is incomplete'
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1176619/modules/sssd
                    /steps/39
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_in_textmode@64bit fails in
[sssd](https://openqa.opensuse.org/tests/1176619/modules/sssd/steps/39)

This started happening recently in openQA (with 0214) - this snapshot recevied
an upgrade of glibc to version 2.31 (which can be related)

## Test suite description
Maintainer: okurz-at-suse.de

Mainly console extratest.

## Reproducible

Fails since (at least) Build
[20190716](https://openqa.opensuse.org/tests/984307)

## Expected result

Last good: [20190713](https://openqa.opensuse.org/tests/983791) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=extra_tests_in_textmode&version=Tumbleweed)


body:
--1582103945.a55dd0.23191
Date: Wed, 19 Feb 2020 09:19:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164274

            Bug ID: 1164274
           Summary: pam-login_defs-check.sh does not work
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: sbrabec-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the pam-login_defs-check.sh does not work, the sed command is not compatible
with the pam_modutil_search_key() function arguments and the result is always
an empty file (and the hash always the one of an empty file).

pkgs: pam shadow

summary: pam-login_defs-check.sh does not work


--1582104733.1C6fC64.28545
Date: Wed, 19 Feb 2020 09:32:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164275

            Bug ID: 1164275
           Summary: logrotate.service fails to start (in relation to tor.service)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: suseino-at-riseup.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On cold boot I almost always see a message about logrotate.service failing to
start. (I don't know why on cold boot mainly)

The journal says:

[   15.021729] systemd[1]: Started Backup /etc/sysconfig directory.
[   15.105099] systemd[1]: tor.service: Unit cannot be reloaded because it is
inactive.
[   15.105452] logrotate[1782]: tor.service is not active, cannot reload.
[   15.106047] logrotate[1782]: error: error running shared postrotate script
for '/var/log/tor/*log '
[   15.245389] systemd[1]: logrotate.service: Main process exited, code=exited,
status=1/FAILURE
[   15.245574] systemd[1]: Failed to start Rotate log files.
[   15.245681] systemd[1]: logrotate.service: Unit entered failed state.
[   15.245777] systemd[1]: logrotate.service: Failed with result 'exit-code'.


--1582119132.ad68c0c80.9019
Date: Wed, 19 Feb 2020 13:32:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164310

            Bug ID: 1164310
           Summary: [Build 20200213] wrong order: /boot/grub2/arm64-efi specified before /boot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1174670/modules/firs
                    trun/steps/48
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mloviska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-AArch64-aarch64-jeos@aarch64-HD24G fails in
[firstrun](https://openqa.opensuse.org/tests/1174670/modules/firstrun/steps/48)

## Test suite description
Maintainer: fvogt, mnowak

Start JeOS from the HDD image, configure it using the firstboot wizard and then
run basic tests. console=tty0 added as needed for aarch64.

`findmnt --verbose --verify` reports issue with mounts in /boot

:
:
/usr/local
   [ ] target exists
   [ ] FS options: autodefrag,subvol=@/usr/local
   [ ] UUID=f8d31393-2483-4231-9ead-1682c870873e translated to /dev/vda4
   [ ] source /dev/vda4 exists
   [ ] FS type is btrfs
/boot/grub2/arm64-efi
   [E] wrong order: /boot/grub2/arm64-efi specified before /boot
   [ ] target exists
   [ ] FS options: autodefrag,subvol=@/boot/grub2/arm64-efi
   [ ] UUID=f8d31393-2483-4231-9ead-1682c870873e translated to /dev/vda4
   [ ] source /dev/vda4 exists
   [ ] FS type is btrfs
/
   [ ] target exists
   [ ] FS options: autodefrag
   [ ] UUID=f8d31393-2483-4231-9ead-1682c870873e translated to /dev/vda4
   [ ] source /dev/vda4 exists
   [ ] FS type is btrfs
swap
   [ ] UUID=135d9c2f-691f-4f23-8f61-75672c1fa424 translated to /dev/vda3
   [ ] source /dev/vda3 exists
   [ ] FS type is swap
/boot
   [ ] target exists
   [ ] UUID=221bc50e-fee7-4fc4-8659-a6245c9ff571 translated to /dev/vda2
   [ ] source /dev/vda2 exists
   [ ] FS type is ext4
/boot/efi
   [ ] target exists
   [ ] UUID=90F4-E245 translated to /dev/vda1
   [ ] source /dev/vda1 exists
   [ ] FS type is vfat

## Reproducible

Fails since (at least) Build
[20200115](https://openqa.opensuse.org/tests/1146520)

## Expected result

Last good: [20200107](https://openqa.opensuse.org/tests/1136889) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensuse&flavor=JeOS-for-AArch64&machine=aarch64-HD24G&test=jeos&version=Tumbleweed)


body:
--1582188197.d42A4BA0.25616
Date: Thu, 20 Feb 2020 08:43:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164440

            Bug ID: 1164440
           Summary: hfst-ospell fails to build with ICU 65
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: tchvatal-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

we had ICU 65 in SLE-15 SP2 and delivered to Leap 15.2[1], hfst-ospell fails to
build with it, please check complete build log[2].

[   67s] office.cc:55:18: error: 'UnicodeString' was not declared in this scope
[   67s]  typedef std::map<UnicodeString,bool> valid_words_t;
[   67s]                   ^~~~~~~~~~~~~
[   67s] office.cc:55:18: note: suggested alternative:
[   67s] In file included from office.cc:48:0:
[   67s] /usr/include/unicode/unistr.h:294:20: note:
'icu_65_1::UnicodeString'
[   67s]  class U_COMMON_API UnicodeString : public Replaceable
[   67s]                     ^~~~~~~~~~~~~
[   67s] office.cc:55:36: error: template argument 1 is invalid
[   67s]  typedef std::map<UnicodeString,bool> valid_words_t;
[   67s]                                     ^
[   67s] office.cc:55:36: error: template argument 3 is invalid
[   67s] office.cc:55:36: error: template argument 4 is invalid
[   67s] office.cc:60:2: error: 'UnicodeString' does not name a type; did you
mean 'uset_addString'?
[   67s]   UnicodeString buffer;
[   67s]   ^~~~~~~~~~~~~
[   67s]   uset_addString
[   67s] office.cc:64:1: error: 'UnicodeString' does not name a type; did you
mean 'uset_addString'?
[   67s]  UnicodeString ubuffer, uc_buffer;
[   67s]  ^~~~~~~~~~~~~
[   67s]  uset_addString
[   67s] office.cc: In function 'bool
find_alternatives(hfst_ol::ZHfstOspeller&, size_t)':
[   67s] office.cc:74:15: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   67s]    words[cw-k].buffer.toUTF8String(buffer);
[   67s]                ^~~~~~
[   67s] office.cc:88:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   67s]      words[0].buffer.tempSubString(0,
words[cw-k].start).toUTF8String(buffer);
[   67s]               ^~~~~~
[   67s] office.cc:91:5: error: 'UnicodeString' has not been declared
[   67s]
UnicodeString::fromUTF8(corrections.top().first).toUpper().toUTF8String(buffer);
[   67s]      ^~~~~~~~~~~~~
[   67s] office.cc:94:5: error: 'uc_buffer' was not declared in this scope
[   67s]
uc_buffer.setTo(UnicodeString::fromUTF8(corrections.top().first));
[   67s]      ^~~~~~~~~
[   67s] office.cc:94:5: note: suggested alternative: 'buffer'
[   67s]
uc_buffer.setTo(UnicodeString::fromUTF8(corrections.top().first));
[   67s]      ^~~~~~~~~
[   67s]      buffer
[   67s] office.cc:94:21: error: 'UnicodeString' has not been declared
[   67s]
uc_buffer.setTo(UnicodeString::fromUTF8(corrections.top().first));
[   67s]                      ^~~~~~~~~~~~~
[   67s] office.cc:95:5: error: 'ubuffer' was not declared in this scope
[   67s]      ubuffer.setTo(uc_buffer, 0, 1);
[   67s]      ^~~~~~~
[   68s] office.cc:95:5: note: suggested alternative: 'buffer'
[   68s]      ubuffer.setTo(uc_buffer, 0, 1);
[   68s]      ^~~~~~~
[   68s]      buffer
[   68s] office.cc:104:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      words[0].buffer.tempSubString(words[cw-k].start +
words[cw-k].count).toUTF8String(buffer);
[   68s]               ^~~~~~
[   68s] office.cc: In function 'bool is_valid_word(hfst_ol::ZHfstOspeller&,
const string&, size_t)':
[   68s] office.cc:117:2: error: 'ubuffer' was not declared in this scope
[   68s]   ubuffer.setTo(UnicodeString::fromUTF8(word));
[   68s]   ^~~~~~~
[   68s] office.cc:117:2: note: suggested alternative: 'buffer'
[   68s]   ubuffer.setTo(UnicodeString::fromUTF8(word));
[   68s]   ^~~~~~~
[   68s]   buffer
[   68s] office.cc:117:16: error: 'UnicodeString' has not been declared
[   68s]   ubuffer.setTo(UnicodeString::fromUTF8(word));
[   68s]                 ^~~~~~~~~~~~~
[   68s] office.cc:124:12: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]    words[0].buffer = ubuffer;
[   68s]             ^~~~~~
[   68s] office.cc:154:11: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]   words[0].buffer.remove();
[   68s]            ^~~~~~
[   68s] office.cc:157:11: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]   words[0].buffer = ubuffer;
[   68s]            ^~~~~~
[   68s] office.cc:167:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.remove();
[   68s]               ^~~~~~
[   68s] office.cc:170:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.append(pwsz, words[cw].start, words[cw].count);
[   68s]               ^~~~~~
[   68s] office.cc:181:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.remove();
[   68s]               ^~~~~~
[   68s] office.cc:184:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.append(pwsz, words[cw].start, words[cw].count);
[   68s]               ^~~~~~
[   68s] office.cc:190:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.remove();
[   68s]               ^~~~~~
[   68s] office.cc:193:14: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[cw].buffer.append(pwsz, words[cw].start, words[cw].count);
[   68s]               ^~~~~~
[   68s] office.cc:200:27: error: qualified-id in declaration before 'it'
[   68s]    valid_words_t::iterator it = suggs ? valid_words.end() :
valid_words.find(words[i].buffer);
[   68s]                            ^~
[   68s] office.cc:202:7: error: 'it' was not declared in this scope
[   68s]    if (it == valid_words.end()) {
[   68s]        ^~
[   68s] office.cc:202:7: note: suggested alternative: 'i'
[   68s]    if (it == valid_words.end()) {
[   68s]        ^~
[   68s]        i
[   68s] office.cc:202:25: error: request for member 'end' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]    if (it == valid_words.end()) {
[   68s]                          ^~~
[   68s] office.cc:204:13: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     words[i].buffer.toUTF8String(buffer);
[   68s]              ^~~~~~
[   68s] office.cc:206:21: error: request for member 'insert' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]     it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                      ^~~~~~
[   68s] office.cc:206:52: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]     it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                                                     ^~~~~~
[   68s] office.cc:211:24: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      ubuffer = words[i].buffer;
[   68s]                         ^~~~~~
[   68s] office.cc:218:15: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      words[cw].buffer = ubuffer;
[   68s]                ^~~~~~
[   68s] office.cc:222:29: error: qualified-id in declaration before 'itl'
[   68s]      valid_words_t::iterator itl = suggs ? valid_words.end() :
valid_words.find(ubuffer);
[   68s]                              ^~~
[   68s] office.cc:223:9: error: 'itl' was not declared in this scope
[   68s]      if (itl != valid_words.end()) {
[   68s]          ^~~
[   68s] office.cc:223:28: error: request for member 'end' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]      if (itl != valid_words.end()) {
[   68s]                             ^~~
[   68s] office.cc:230:23: error: request for member 'insert' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]       it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                        ^~~~~~
[   68s] office.cc:230:54: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]       it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                                                       ^~~~~~
[   68s] office.cc:237:28: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      ubuffer.setTo(words[i].buffer, 0, 1);
[   68s]                             ^~~~~~
[   68s] office.cc:239:5: error: 'uc_buffer' was not declared in this scope
[   68s]      uc_buffer.setTo(words[i].buffer, 1);
[   68s]      ^~~~~~~~~
[   68s] office.cc:239:5: note: suggested alternative: 'buffer'
[   68s]      uc_buffer.setTo(words[i].buffer, 1);
[   68s]      ^~~~~~~~~
[   68s]      buffer
[   68s] office.cc:239:30: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      uc_buffer.setTo(words[i].buffer, 1);
[   68s]                               ^~~~~~
[   68s] office.cc:247:15: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]      words[cw].buffer = ubuffer;
[   68s]                ^~~~~~
[   68s] office.cc:251:29: error: qualified-id in declaration before 'itl'
[   68s]      valid_words_t::iterator itl = suggs ? valid_words.end() :
valid_words.find(ubuffer);
[   68s]                              ^~~
[   68s] office.cc:252:9: error: 'itl' was not declared in this scope
[   68s]      if (itl != valid_words.end()) {
[   68s]          ^~~
[   68s] office.cc:252:28: error: request for member 'end' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]      if (itl != valid_words.end()) {
[   68s]                             ^~~
[   68s] office.cc:259:23: error: request for member 'insert' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]       it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                        ^~~~~~
[   68s] office.cc:259:54: error:
'__gnu_cxx::__alloc_traits<std::allocator<word_t> >::value_type {aka struct
word_t}' has no member named 'buffer'
[   68s]       it =
valid_words.insert(std::make_pair(words[i].buffer,valid)).first;
[   68s]                                                       ^~~~~~
[   68s] office.cc:264:7: error: 'it' was not declared in this scope
[   68s]    if (it->second == true) {
[   68s]        ^~
[   68s] office.cc:264:7: note: suggested alternative: 'i'
[   68s]    if (it->second == true) {
[   68s]        ^~
[   68s]        i
[   68s] office.cc: In function 'int zhfst_spell(const char*)':
[   68s] office.cc:304:19: error: request for member 'size' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]    if (valid_words.size() > 20480) {
[   68s]                    ^~~~
[   68s] office.cc:305:16: error: request for member 'clear' in 'valid_words',
which is of non-class type 'valid_words_t {aka int}'
[   68s]     valid_words.clear();
[   68s]                 ^~~~~
[   68s] make[1]: *** [Makefile:1091: hfst_ospell_office-office.o] Error 1

[1] https://build.opensuse.org/request/show/760041
[2]
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.2:Staging:A/hfst-ospell/standard/x86_64

summary: hfst-ospell fails to build with ICU 65


body:
--1582189434.dD5C6cb15.18899
Date: Thu, 20 Feb 2020 09:03:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164444

            Bug ID: 1164444
           Summary: mailutils fails with -fno-common
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The package fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:M/mailutils/standard/x86_64

Please take a look at the META issue for the instructions.

summary: mailutils fails with -fno-common


--1582297693.665ea0.18237
Date: Fri, 21 Feb 2020 15:08:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164572

            Bug ID: 1164572
           Summary: VUL-1: CVE-2020-9272: proftpd: out-of-bounds read in mod_cap via the cap_text.c cap_to_text function
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/253471/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-9272

ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via
the cap_text.c cap_to_text function.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-9272
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-9272.html


--1582297802.e0C4Fd3C0.20075
Date: Fri, 21 Feb 2020 15:10:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164574

            Bug ID: 1164574
           Summary: VUL-1: CVE-2020-9273: proftpd: possibility of corrupting memory pool by interrupting the data transfer channel
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/253472/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: chris-at-computersalat.de
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting
the data transfer channel. This triggers a use-after-free in alloc_pool in
pool.c, and possible remote code execution.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-9273
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-9273.html


--1582301024.bfB4C7.796
Date: Fri, 21 Feb 2020 16:03:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164583

            Bug ID: 1164583
           Summary: jeos-firstboot does not change license on Tumbleweed and Leap
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: gmoro-at-suse.com
          Reporter: gmoro-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

License is not shown by jeos-firstboot on Leap and TW,


--1582391058.0b040.24198
Date: Sat, 22 Feb 2020 17:04:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164619

            Bug ID: 1164619
           Summary: /etc/nfs.conf:12: error loading included config
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: nfbrown-at-suse.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fresh installation of nfs-server, starting it leads to an error:

Starting NFS server and services...
exportfs: config error at /etc/nfs.conf:12: error loading included config
: config error at /etc/nfs.conf:12: error loading included config


--1582463467.4D7Dc8D84.6711
Date: Sun, 23 Feb 2020 13:11:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164632

            Bug ID: 1164632
           Summary: Obsolete CONFIG_BLK_DEV_SR_VENDOR=y in ppc configs
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The option was added in 9489b2b1cfd5278eec74d139d0004fc82bc9c222 to ppc64
config without any explanation (probably from upstream pSeries defconfig), and
propagated to ppc config in 1b0fe63d603970a83e4c3160ef4a51fb16cbc1c2 without
any explanation again.


--1582465647.b8C2dcb0.30229
Date: Sun, 23 Feb 2020 13:47:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164633

            Bug ID: 1164633
           Summary: Ksystemlog crashes when closing window via X button in title bar
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: tmoldt-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 830969
  --> http://bugzilla.opensuse.org/attachment.cgi?id=830969&action=edit
backtrace

SUMMARY
Ksystemlog crashes reproducibly when exiting by clicking on the X button in the
title bar. Exiting via CTRL-Q works fine.

STEPS TO REPRODUCE
1. Start KSystemLog from the menu or via launcher (ALT-F2)
2. Enter credentials for root
3. Exit program by clicking on the X in the title bar
4. Get stacktrace

OBSERVED RESULT:

Exits with Segmentation fault.

EXPECTED RESULT

Exits cleanly.

SOFTWARE/OS VERSIONS

Operating System: openSUSE Leap 15.2
KDE Plasma Version: 5.18.0
KDE Frameworks Version: 5.67.0
Qt Version: 5.12.7
Kernel Version: 5.3.18-lp152.4-default
OS Type: 64-bit
Processors: 4 × Intel® Core™ i5-2520M CPU @ 2.50GHz
Memory: 3,7 GiB
$ ksystemlog --version
ksystemlog 19.12.1

ADDITIONAL INFORMATION

This bug was reported upstream: https://bugs.kde.org/show_bug.cgi?id=409375

Full stack trace with debugging symbols is attached.


--1582508415.AA6a4BF0.19101
Date: Mon, 24 Feb 2020 01:40:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164650

            Bug ID: 1164650
           Summary: dmenu: regression in dmenu - input not working
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When running dmenu it grabs input but input inside dmenu is not working locking
up the X session.

This is regression from 4.8 to 4.9.


--1582541642.E6bA25ae2.18995
Date: Mon, 24 Feb 2020 10:54:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164688

            Bug ID: 1164688
           Summary: Mesa 20 breaks build of various packages like cogl, mutter, ...
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: sndirsch-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Apparently Mesa 20 breaks the build of various packages like cogl, mutter, ...

https://build.opensuse.org/request/show/778461
https://build.opensuse.org/project/monitor/openSUSE:Factory:Staging:K?utf8=%E2%9C%93&defaults=0&failed=1&broken=1&arch_i586=1&arch_x86_64=1&repo_bootstrap_copy=1&repo_images=1&repo_standard=1

First Google search results ...

https://bugs.gentoo.org/698736

cogl/mutter
https://698736.bugs.gentoo.org/attachment.cgi?id=594588
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=44dc733c0dc81aeb5f3476f0de495278eb8a449f


--1582582990.fC8F4.25056
Date: Mon, 24 Feb 2020 22:23:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164757

            Bug ID: 1164757
           Summary: v4l2loopback fails to build with kernel 5.6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/Kernel:HEAD:KMP/v4l2loopback/standard/x86_64

[   57s]   gcc
-Wp,-MD,/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/.v4l2loopback.o.d
 -nostdinc -isystem /usr/lib64/gcc/x86_64-suse-linux/9/include
-I/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/arch/x86/include
-I./arch/x86/include/generated -I/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include
-I./include -I/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/arch/x86/include/uapi
-I./arch/x86/include/generated/uapi
-I/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/uapi -I./include/generated/uapi
-include /usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/linux/kconfig.h -include
/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/linux/compiler_types.h -D__KERNEL__
-Wall -Wundef -Werror=strict-prototypes -Wno-trigraphs -fno-strict-aliasing
-fno-common -fshort-wchar -fno-PIE -Werror=implicit-function-declaration
-Werror=implicit-int -Wno-format-security -std=gnu89 -mno-sse -mno-mmx
-mno-sse2 -mno-3dnow -mno-avx -m64 -falign-jumps=1 -falign-loops=1 -mno-80387
-mno-fp-ret-in-387 -mpreferred-stack-boundary=3 -mskip-rax-setup -mtune=generic
-mno-red-zone -mcmodel=kernel -DCONFIG_X86_X32_ABI -DCONFIG_AS_CFI=1
-DCONFIG_AS_CFI_SIGNAL_FRAME=1 -DCONFIG_AS_CFI_SECTIONS=1 -DCONFIG_AS_SSSE3=1
-DCONFIG_AS_AVX=1 -DCONFIG_AS_AVX2=1 -DCONFIG_AS_AVX512=1 -DCONFIG_AS_SHA1_NI=1
-DCONFIG_AS_SHA256_NI=1 -Wno-sign-compare -fno-asynchronous-unwind-tables
-mindirect-branch=thunk-extern -mindirect-branch-register -fno-jump-tables
-fno-delete-null-pointer-checks -Wno-frame-address -Wno-format-truncation
-Wno-format-overflow -Wno-address-of-packed-member -O2
--param=allow-store-data-races=0 -Wframe-larger-than=2048
-fstack-protector-strong -Wno-unused-but-set-variable -Wimplicit-fallthrough
-Wno-unused-const-variable -fno-var-tracking-assignments -g -gdwarf-4 -pg
-mrecord-mcount -mfentry -DCC_USING_FENTRY -fno-inline-functions-called-once
-flive-patching=inline-clone -Wdeclaration-after-statement -Wvla
-Wno-pointer-sign -Wno-stringop-truncation -fno-strict-overflow
-fno-merge-all-constants -fmerge-constants -fno-stack-check -fconserve-stack
-Werror=date-time -Werror=incompatible-pointer-types -Werror=designated-init
-fmacro-prefix-map=/usr/src/linux-5.6.0-rc3-1.g8f8ffe7/= -fcf-protection=none
-Wno-packed-not-aligned  -DMODULE  -DKBUILD_BASENAME='"v4l2loopback"'
-DKBUILD_MODNAME='"v4l2loopback"' -c -o
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.o
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:137:47:
warning: 'struct timeval' declared inside parameter list will not be visible
outside of this definition or declaration
[   57s]   137 | static inline void v4l2l_get_timestamp(struct timeval *tv) {
[   57s]       |                                               ^~~~~~~
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c: In
function 'v4l2l_get_timestamp':
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:147:4:
error: dereferencing pointer to incomplete type 'struct timeval'
[   57s]   147 |  tv->tv_sec = (time_t)ts.tv_sec;
[   57s]       |    ^~
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:147:16:
error: 'time_t' undeclared (first use in this function); did you mean
'ktime_t'?
[   57s]   147 |  tv->tv_sec = (time_t)ts.tv_sec;
[   57s]       |                ^~~~~~
[   57s]       |                ktime_t
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:147:16:
note: each undeclared identifier is reported only once for each function it
appears in
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:147:23:
error: expected ';' before 'ts'
[   57s]   147 |  tv->tv_sec = (time_t)ts.tv_sec;
[   57s]       |                       ^~
[   57s]       |                       ;
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c: In
function 'vidioc_qbuf':
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:1521:24:
error: passing argument 1 of 'v4l2l_get_timestamp' from incompatible pointer
type [-Werror=incompatible-pointer-types]
[   57s]  1521 |    v4l2l_get_timestamp(&b->buffer.timestamp);
[   57s]       |                        ^~~~~~~~~~~~~~~~~~~~
[   57s]       |                        |
[   57s]       |                        struct __kernel_v4l2_timeval *
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:137:56:
note: expected 'struct timeval *' but argument is of type 'struct
__kernel_v4l2_timeval *'
[   57s]   137 | static inline void v4l2l_get_timestamp(struct timeval *tv) {
[   57s]       |                                        ~~~~~~~~~~~~~~~~^~
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c: In
function 'v4l2_loopback_write':
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:1948:22:
error: passing argument 1 of 'v4l2l_get_timestamp' from incompatible pointer
type [-Werror=incompatible-pointer-types]
[   57s]  1948 |  v4l2l_get_timestamp(&b->timestamp);
[   57s]       |                      ^~~~~~~~~~~~~
[   57s]       |                      |
[   57s]       |                      struct __kernel_v4l2_timeval *
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:137:56:
note: expected 'struct timeval *' but argument is of type 'struct
__kernel_v4l2_timeval *'
[   57s]   137 | static inline void v4l2l_get_timestamp(struct timeval *tv) {
[   57s]       |                                        ~~~~~~~~~~~~~~~~^~
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c: In
function 'init_buffers':
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:2053:23:
error: passing argument 1 of 'v4l2l_get_timestamp' from incompatible pointer
type [-Werror=incompatible-pointer-types]
[   57s]  2053 |   v4l2l_get_timestamp(&b->timestamp);
[   57s]       |                       ^~~~~~~~~~~~~
[   57s]       |                       |
[   57s]       |                       struct __kernel_v4l2_timeval *
[   57s]
/home/abuild/rpmbuild/BUILD/v4l2loopback-0.12.3/obj/default/v4l2loopback.c:137:56:
note: expected 'struct timeval *' but argument is of type 'struct
__kernel_v4l2_timeval *'
[   57s]   137 | static inline void v4l2l_get_timestamp(struct timeval *tv) {
[   57s]       |                                        ~~~~~~~~~~~~~~~~^~


--1582583143.117D4.21102
Date: Mon, 24 Feb 2020 22:25:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164758

            Bug ID: 1164758
           Summary: xtables-addons fails to build with 5.6 kernel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/live_build_log/Kernel:HEAD:KMP/xtables-addons/standard/x86_64

[  103s]
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/pknock/xt_pknock.c:
In function 'add_rule':
[  103s]
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/pknock/xt_pknock.c:472:22:
error: passing argument 4 of 'proc_create_data' from incompatible pointer type
[-Werror=incompatible-pointer-types]
[  103s]   472 |                      &pknock_proc_ops, rule);
[  103s]       |                      ^~~~~~~~~~~~~~~~
[  103s]       |                      |
[  103s]       |                      const struct file_operations *
[  103s] In file included from
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/pknock/xt_pknock.c:18:
[  103s] /usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/linux/proc_fs.h:59:31:
note: expected 'const struct proc_ops *' but argument is of type 'const struct
file_operations *'
[  103s]    59 | extern struct proc_dir_entry *proc_create_data(const char *,
umode_t,
[  103s]       |                               ^~~~~~~~~~~~~~~~
[  104s]
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/xt_DNETMAP.c:
In function 'dnetmap_tg_check':
[  104s]
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/xt_DNETMAP.c:324:9:
error: passing argument 4 of 'proc_create_data' from incompatible pointer type
[-Werror=incompatible-pointer-types]
[  104s]   324 |         &dnetmap_tg_fops, p);
[  104s]       |         ^~~~~~~~~~~~~~~~
[  104s]       |         |
[  104s]       |         const struct file_operations *
[  104s] In file included from
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/xt_DNETMAP.c:29:
[  104s] /usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/linux/proc_fs.h:59:31:
note: expected 'const struct proc_ops *' but argument is of type 'const struct
file_operations *'
[  104s]    59 | extern struct proc_dir_entry *proc_create_data(const char *,
umode_t,
[  104s]       |                               ^~~~~~~~~~~~~~~~
[  104s]
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/xt_DNETMAP.c:336:23:
error: passing argument 4 of 'proc_create_data' from incompatible pointer type
[-Werror=incompatible-pointer-types]
[  104s]   336 |                       &dnetmap_stat_proc_fops, p);
[  104s]       |                       ^~~~~~~~~~~~~~~~~~~~~~~
[  104s]       |                       |
[  104s]       |                       const struct file_operations *
[  104s] In file included from
/home/abuild/rpmbuild/BUILD/xtables-addons-default-3.8/extensions/xt_DNETMAP.c:29:
[  104s] /usr/src/linux-5.6.0-rc3-1.g8f8ffe7/include/linux/proc_fs.h:59:31:
note: expected 'const struct proc_ops *' but argument is of type 'const struct
file_operations *'
[  104s]    59 | extern struct proc_dir_entry *proc_create_data(const char *,
umode_t,
[  104s]       |                               ^~~~~~~~~~~~~~~~


body:
--1582629153.7Df0870.8260
Date: Tue, 25 Feb 2020 11:12:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164817

            Bug ID: 1164817
           Summary: [RPi4] EFI partition too small, can't install raspberrypi-firmware-extra
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: nsaenzjulienne-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

(2/2) Installing: raspberrypi-firmware-extra-2020.01.16-1.1.noarch
.......[done]
Additional rpm output:
cp: error writing '/boot/efi/start_db.elf': No space left on device
cp: error writing '/boot/efi/fixup_db.dat': No space left on device
cp: error writing '/boot/efi/start_x.elf': No space left on device
cp: error writing '/boot/efi/fixup_x.dat': No space left on device
warning: %post(raspberrypi-firmware-extra-2020.01.16-1.1.noarch) scriptlet
failed, exit status 1

pkgs: JeOS kiwi-templates-JeOS


--1582632415.AE18b820.8643
Date: Tue, 25 Feb 2020 12:06:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1164828

            Bug ID: 1164828
           Summary: VUL-0: CVE-2020-6407, CVE-2020-6418: chromium: update to 80.0.3987.122
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This update includes CVE-2020-6418 that Google is aware of reports that an
exploit exists in the wild.

High CVE-2020-6418: Type confusion in V8
High CVE-2020-6407: Out of bounds memory access in streams.
High: Integer overflow in ICU

Reference

https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html


body:
--1582637840.7c2a0.26167
Date: Tue, 25 Feb 2020 13:37:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1164845

            Bug ID: 1164845
           Summary: Firefox 73.0 fails to build on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The problem is:
error: cannot convert 'uint8x16_t' {aka '__vector(16) unsigned char'} to
'uint16x8_t' {aka '__vector(8) short unsigned int'}

See relevant part of the build log:
[ 2605s] 40:31.69 /usr/bin/g++ -std=gnu++17 -o SwizzleNEON.o -c
-I/home/abuild/rpmbuild/BUILD/obj/dist/stl_wrappers
-I/home/abuild/rpmbuild/BUILD/obj/dist/system_wrappers -include
/home/abuild/rpmbuild/BUILD/firefox-73.0/config/gcc_hidden.h -U_FORTIFY_SOURCE
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -DNDEBUG=1 -DTRIMMED=1 -DUSE_NEON
-DOS_POSIX=1 -DOS_LINUX=1 -DUSE_CAIRO -DMOZ2D_HAS_MOZ_CAIRO
-DMOZ_ENABLE_FREETYPE -DSTATIC_EXPORTABLE_JS_API -DMOZ_HAS_MOZGLUE
-DMOZILLA_INTERNAL_API -DIMPL_LIBXUL
-I/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d
-I/home/abuild/rpmbuild/BUILD/obj/gfx/2d
-I/home/abuild/rpmbuild/BUILD/obj/ipc/ipdl/_ipdlheaders
-I/home/abuild/rpmbuild/BUILD/firefox-73.0/ipc/chromium/src
-I/home/abuild/rpmbuild/BUILD/firefox-73.0/ipc/glue
-I/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/skia
-I/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/skia/skia
-I/home/abuild/rpmbuild/BUILD/obj/dist/include -I/usr/include/nspr4
-I/usr/include/nss3 -I/home/abuild/rpmbuild/BUILD/obj/dist/include/nss -fPIC
-DMOZILLA_CLIENT -include /home/abuild/rpmbuild/BUILD/obj/mozilla-config.h
-Wall -Wempty-body -Wignored-qualifiers -Woverloaded-virtual -Wpointer-arith
-Wsign-compare -Wtype-limits -Wunreachable-code -Wwrite-strings
-Wno-invalid-offsetof -Wduplicated-cond -Wimplicit-fallthrough
-Wno-error=maybe-uninitialized -Wno-error=deprecated-declarations
-Wno-error=array-bounds -Wno-error=coverage-mismatch
-Wno-error=free-nonheap-object -Wno-error=multistatement-macros
-Wno-error=class-memaccess -Wno-error=deprecated-copy -Wformat
-Wformat-overflow=2 -fno-sized-deallocation -fno-aligned-new -fno-exceptions
-fno-strict-aliasing -fno-rtti -ffunction-sections -fdata-sections
-fno-exceptions -fno-math-errno -pthread -pipe -g -freorder-blocks -O2
-fomit-frame-pointer -funwind-tables -Wno-error=shadow
-I/home/abuild/rpmbuild/BUILD/obj/dist/include/cairo -I/usr/include/freetype2
-I/usr/include/freetype2 -I/usr/include/uuid  -MD -MP -MF
.deps/SwizzleNEON.o.pp
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp
[ 2606s] 40:33.21
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp: In function
'void mozilla::gfx::UnpackRowRGB24_NEON(const uint8_t*, uint8_t*, int32_t)':
[ 2606s] 40:33.21
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:423:51: note:
use '-flax-vector-conversions' to permit conversions between vectors with
differing element types or numbers of subparts
[ 2606s] 40:33.22   423 |     vst1q_u16(reinterpret_cast<uint16_t*>(dst), px);
[ 2606s] 40:33.22       |                                                   ^
[ 2606s] 40:33.22
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:423:49: error:
cannot convert 'uint8x16_t' {aka '__vector(16) unsigned char'} to 'uint16x8_t'
{aka '__vector(8) short unsigned int'}
[ 2606s] 40:33.22   423 |     vst1q_u16(reinterpret_cast<uint16_t*>(dst), px);
[ 2606s] 40:33.22       |                                                 ^~
[ 2606s] 40:33.22       |                                                 |
[ 2606s] 40:33.22       |
uint8x16_t {aka __vector(16) unsigned char}
[ 2606s] 40:33.22 In file included from
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:9:
[ 2606s] 40:33.22
/usr/lib64/gcc/aarch64-suse-linux/9/include/arm_neon.h:27677:36: note:
initializing argument 2 of 'void vst1q_u16(uint16_t*, uint16x8_t)'
[ 2606s] 40:33.22 27677 | vst1q_u16 (uint16_t *a, uint16x8_t b)
[ 2606s] 40:33.22       |                         ~~~~~~~~~~~^
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp: In
instantiation of 'void mozilla::gfx::UnpackRowRGB24_NEON(const uint8_t*,
uint8_t*, int32_t) [with bool aSwapRB = false; uint8_t = unsigned char; int32_t
= int]':
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:430:75:
required from here
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:415:30: error:
cannot convert 'uint16x8_t' {aka '__vector(8) short unsigned int'} to
'uint8x16_t' {aka '__vector(16) unsigned char'} in initialization
[ 2606s] 40:33.27   415 |     uint8x16_t px = vld1q_u16(reinterpret_cast<const
uint16_t*>(src));
[ 2606s] 40:33.27       |
~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[ 2606s] 40:33.27       |                              |
[ 2606s] 40:33.27       |                              uint16x8_t {aka
__vector(8) short unsigned int}
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp: In
instantiation of 'void mozilla::gfx::UnpackRowRGB24_NEON(const uint8_t*,
uint8_t*, int32_t) [with bool aSwapRB = true; uint8_t = unsigned char; int32_t
= int]':
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:431:74:
required from here
[ 2606s] 40:33.27
/home/abuild/rpmbuild/BUILD/firefox-73.0/gfx/2d/SwizzleNEON.cpp:415:30: error:
cannot convert 'uint16x8_t' {aka '__vector(8) short unsigned int'} to
'uint8x16_t' {aka '__vector(16) unsigned char'} in initialization
[ 2607s] 40:33.41 gmake[4]: ***
[/home/abuild/rpmbuild/BUILD/firefox-73.0/config/rules.mk:738: SwizzleNEON.o]
Error 1
[ 2607s] 40:33.41 gmake[4]: *** Waiting for unfinished jobs....

summary: Firefox 73.0 fails to build on aarch64