--1503416375.EAac14.28936
Date: Tue, 22 Aug 2017 15:39:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055060

            Bug ID: 1055060
           Summary: unbound: consider dropping "dlv-anchor-file" from the configuration file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: markos.chandras-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to the unbound docs[1]

"Default  is "",  or  no  dlv anchor file. DLV is going to be decommissioned.
Please do not use it any more."

We have reasons to believe that the default option as shipped by Leap and TW
packages leads to spurious errors like the following ones

Aug 22 10:46:05 unbound[2381:0] info: validation failure
zm08.openstack.org.dlv.isc.org. DLV IN
Aug 22 10:46:05 unbound[2381:1] info: validation failure
zm08.openstack.org.dlv.isc.org. DLV IN
Aug 22 10:46:30 unbound[2381:0] info: validation failure
pypi.python.org.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:0] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:0] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:1] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:0] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:1] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:0] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
Aug 22 10:48:07 unbound[2381:1] info: validation failure
ftp.halifax.rwth-aachen.de.dlv.isc.org. DLV IN
[2]

Please consider removing this option from the configuration file.

[1] https://unbound.net/documentation/unbound.conf.html
[2]
http://logs.openstack.org/99/496199/1/check/gate-openstack-ansible-pip_install-ansible-func-opensuse-423-nv/96d9ad0/logs/host/unbound.log.txt.gz


body:
--1503438055.d3A6F0.11871
Date: Tue, 22 Aug 2017 21:40:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055131

            Bug ID: 1055131
           Summary: Conky installation error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: opensuse@the-systems-commonwealth.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm trying to install Conky but am getting the following error:

eureka-maru:~> sudo zypper in conky
[sudo] password for root:
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides liblua.so.5.1()(64bit) needed by
conky-1.10.6-13.2.x86_64
 Solution 1: do not install conky-1.10.6-13.2.x86_64
 Solution 2: break conky-1.10.6-13.2.x86_64 by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c] (c):

I have liblua_5-1 but I suspect there is a version problem?

eureka-maru:~> zypper search --details liblua
Loading repository data...
Reading installed packages...

S  | Name              | Type    | Version            | Arch   | Repository
---+-------------------+---------+--------------------+--------+------------------------
i+ | liblua5_1-5       | package | 5.1.5-14.1         | x86_64 |
openSUSE-Tumbleweed_OSS
v  | liblua5_1-5       | package | 5.1.5-14.1         | i586   |
openSUSE-Tumbleweed_OSS
   | liblua5_1-5-32bit | package | 5.1.5-14.1         | x86_64 |
openSUSE-Tumbleweed_OSS
   | liblua5_2-5       | package | 5.2.4-4.1          | x86_64 |
openSUSE-Tumbleweed_OSS

summary: Conky installation error


body:
--1503502957.5A8E654.1678
Date: Wed, 23 Aug 2017 15:42:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055322

            Bug ID: 1055322
           Summary: Botan fails to build with OpenSSL 1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: daniel.molkentin-at-suse.com
          Reporter: vcizek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: thb-at-libreoffice.org
            Blocks: 1042629
          Found By: ---
           Blocker: ---

The package fails to build with OpenSSL 1.1.
We need to migrate Factory to OpenSSL 1.1 as it will become the default on
SLE-15. For more information see the blocker bug.

Currently testing in a staging project:
https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11
Fails with:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:SSL11/Botan/standard/x86_64

summary: Botan fails to build with OpenSSL 1.1


--1503506654.caF7C0f0.14106
Date: Wed, 23 Aug 2017 16:44:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055340

            Bug ID: 1055340
           Summary: DosBox menu entry is in the wrong place.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: openSUSE 42.3
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: X11 Applications
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ManuelStol-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The menu entry for DosBox shows up under: Lost & Found .
It should be under: System > Emulator .

In the file dosbox.desktop the category is Emulator.
However, 'Emulator' is an Additional Category for both Game and System.

Change the Categories key in the dosbox.desktop file:

-Categories=Emulator;
+Categories=System;Emulator;


body:
--1503507439.eF2F28400.17026
Date: Wed, 23 Aug 2017 16:57:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055344

            Bug ID: 1055344
           Summary: KWave menu entry is in the wrong place.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: openSUSE 42.3
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: ManuelStol-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The menu entry for KWave shows up under: Lost & Found .

This has already been fixed in upstream.
Please, pull from: git://anongit.kde.org/kwave .

summary: KWave menu entry is in the wrong place.


--1503534544.Bc7b7e0.25575
Date: Thu, 24 Aug 2017 00:29:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055386

            Bug ID: 1055386
           Summary: please add dependency of greenlet to gevent
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: myleader@163.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

http://docs.gunicorn.org/en/stable/install.html

in gunicorn official document, greenlet is required by gevent

in Tumbleweed 2017/8/24, the dependency of greenlet is not in gevent rpm, so if
install gevent and gunicorn by zypper, greenlet would not be installed

if the user run gunicorn by gevent kernel, gunicorn can't find gevent, and the
command would fail

it exists in both python2 and python3


--1503567894.CfcA20.27280
Date: Thu, 24 Aug 2017 09:44:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055466

            Bug ID: 1055466
           Summary: glusterfs fails to build with OpenSSL 1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jengelh-at-inai.de
          Reporter: vcizek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1042629
          Found By: ---
           Blocker: ---

The package fails to build with OpenSSL 1.1.
We need to migrate Factory to OpenSSL 1.1 as it will become the default on
SLE-15. For more information see the blocker bug.

Currently testing in staging project:
https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11
Fails with:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:SSL11/glusterfs/standard/x86_64


--1503571002.0E5C7610.7044
Date: Thu, 24 Aug 2017 10:36:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055478

            Bug ID: 1055478
           Summary: python-cryptography fails to build with OpenSSL 1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jmatejek-at-suse.com
          Reporter: vcizek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1042629
          Found By: ---
           Blocker: ---

The package fails to build with OpenSSL 1.1.
We need to migrate Factory to OpenSSL 1.1 as it will become the default on
SLE-15. For more information see the blocker bug.

Currently testing in staging project:
https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11
Fails with:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:SSL11/python-cryptography/standard/x86_64


body:
--1503571745.B5A400.11294
Date: Thu, 24 Aug 2017 10:49:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055480

            Bug ID: 1055480
           Summary: helm version doesn't match tiller image
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: dkarakasilis-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I'm using the helm package for Tumbleweed from this repository:
http://download.opensuse.org/repositories/Virtualization:/containers/openSUSE_Tumbleweed/

when I run `helm init` on the minion side the pod fails to start because it
cant' find this image:

gcr.io/kubernetes-helm/tiller:2.2.3

This is normal because the actual image is:

gcr.io/kubernetes-helm/tiller:v2.2.3

(notice the additional "v")

Looking at the helm code it seems that the image tag is propagated from the
version in the rpm spec:

https://github.com/kubernetes/helm/blob/5bc7c619f85d74702e810a8325e0a24f729aa11a/pkg/version/version.go

https://build.opensuse.org/package/view_file/Virtualization:containers/helm/helm.spec?expand=1

When I use `helm init -i gcr.io/kubernetes-helm/tiller:v2.2.3` it works fine.

I think the solution is to either change the version in the spec file or change
the ldflags there (and add a "v").

summary: helm version doesn't match tiller image


--1503573251.37C44CE07.18645
Date: Thu, 24 Aug 2017 11:14:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055489

            Bug ID: 1055489
           Summary: kdelibs4support fails to build with OpenSSL 1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: fvogt-at-suse.com
          Reporter: vcizek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kde-maintainers-at-suse.de
            Blocks: 1042629
          Found By: ---
           Blocker: ---

The package fails to build with OpenSSL 1.1.
We need to migrate Factory to OpenSSL 1.1 as it will become the default on
SLE-15. For more information see the blocker bug.

Currently testing in staging project:
https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11
Fails with:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:SSL11/kdelibs4support/standard/x86_64


--1503574141.802a3.22294
Date: Thu, 24 Aug 2017 11:29:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055493

            Bug ID: 1055493
           Summary: kernel panic after wakeup from STR / on switching terminals / displays after upgrade linux-default-4.4.36-8.1 -> 4.4.49-16, and still happening on 4.4.79-18.26-default
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: okurz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: sebastian.chlad-at-suse.com, tiwai-at-suse.com
        Depends on: 1029634
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1029634 +++

## observation

On DELL Latitude E7250 after waking up the system from STR in the docking
station and calling `xrandr` to enabled the display connected over DP sometimes
the system halts and has a kernel panic. Originally reported as bug #1029634
and thought to be fixed but it still happens sometimes although less than
before.

## reproducible

So far I do not know a non-statistical way to reproduce so the best way to
reproduce it is so far -> Run the following procedure every day until the
problem happens :-/ :

* system in docking station with internal screen and external DP screen on
docking station enabled in openSUSE Leap 42.2 in awesome window manager
* work a day
* put system to STR in docking station
* wait for system to be in STR
* close lid
* undock
* bring computer back home
* sometimes switch computer on from home, sometimes not. Switch on, call xrandr
and configure only single, internal screen, work, switch off
* next day go to work
* put computer in docking station
* open lid, computer switches on
* wait some seconds or not
* unlock screen
* call xrandr over keyboard shortcut bound to script to call xrandr to enable
external screen
* observe problem or if not, repeat whole procedure

## expected results

last good should be linux 4.4.36, at least I do not recall observing this
problem in before the last kernel update, at least not that often.

Expected: Obviously the kernel should not crash here.


--1503600064.fDff2d5D0.12067
Date: Thu, 24 Aug 2017 18:41:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055585

            Bug ID: 1055585
           Summary: ha-cluster-init and ha-cluster-join bootstrapping scripts do not enable corosync.service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: High Availability
          Assignee: ha-bugs-at-suse.de
          Reporter: hunter86_bg-at-abv.bg
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Description of problem:
The following bootstrapping scripts do not enable the corosync.service , while
pacemaker.service is being enabled:
ha-cluster-init
ha-cluster-join

Version-Release number of selected component (if applicable):
ha-cluster-bootstrap-0.5-1.1.noarch

How reproducible:
Always

Steps to Reproduce:
1.Install package:
zypper install ha-cluster-bootstrap
2.Start the bootstrap script via:
ha-cluster-init
3.Answer all questions without floating management IP

Actual results:
Service 'pacemaker.service' is enabled , while 'corosync.service' is not.

Expected results:
Both services to be enabled via the bootstrap script.

Additional info:


--1503643271.5dAB0.26023
Date: Fri, 25 Aug 2017 06:41:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055632

            Bug ID: 1055632
           Summary: python-py2pack is missing a runtime requirement
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: aloisio-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

python-py2pack needs python-setuptools at runtime, but it's not in the
requires.

---
> py2pack search foo
Traceback (most recent call last):
  File "/usr/bin/py2pack", line 19, in <module>
    from py2pack import main
  File "/usr/lib/python2.7/site-packages/py2pack/__init__.py", line 31, in
<module>
    import pkg_resources
ImportError: No module named pkg_resources
---

The problem appears to have been fixed in Factory.


body:
--1503644121.B07A5.28953
Date: Fri, 25 Aug 2017 06:55:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055634

            Bug ID: 1055634
           Summary: mlocate cron job failures
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: peter.simons-at-suse.com
          Reporter: mpluskal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tchvatal-at-suse.com
          Found By: ---
           Blocker: ---

I (well root) on my TW system is getting messages like:
Message-Id: <20170822121509.56B2014DEE7@localhost>
Date: Tue, 22 Aug 2017 14:15:09 +0200 (CEST)

running daily cronjob scripts

SCRIPT: mlocate.cron exited with RETURNCODE = 1.
SCRIPT: output (stdout && stderr) follows

nologin: invalid option

summary: mlocate cron job failures


--1503660735.28EDD780.28314
Date: Fri, 25 Aug 2017 11:32:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1055679

            Bug ID: 1055679
           Summary: freeradius-server does not provide winbind/AD auth
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: varkoly-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

freeradius-server does not provide winbind/AD authorization  because it will be
build without libwbclient-devel.


--1503679208.deaAE1431.5920
Date: Fri, 25 Aug 2017 16:40:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055746

            Bug ID: 1055746
           Summary: LXQT pattern does not suggest to install any text editor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Patterns
          Assignee: dimstar-at-opensuse.org
          Reporter: opensuse.lietuviu.kalba-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

openSUSE Tumbleweed installed with LXQT desktop via pattern.
By default there is no even simple text editor.
(I, I know, I can install any manually, but I suggest, that pattern would be
more complete after adding some editor )


body:
--1503730866.Ab4ED80.978
Date: Sat, 26 Aug 2017 07:01:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1055816

            Bug ID: 1055816
           Summary: gnustep-base runs /usr/bin/gdnc unconditionally
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

gnustep-base contains /etc/profile.d/GNUstep-start.sh which runs /usr/bin/gdnc

This is bad if one just does chroot into another root partition. Since gdnc
runs, that partition is now busy and can not be umounted anymore.

root@host:~ # chroot ${root} su -
Error, do this: mount -t proc proc /proc
Couldn't open file /proc/28318/cmdline when starting gnustep-base; No such file
or directory
Your gnustep-base library is compiled for a kernel supporting the /proc
filesystem, but it can't access it.
You should recompile or change your kernel.
We try to go on anyway; but the program will ignore any argument which were
passed to it.

root@host:~ # rpm -e gnustep-base
error: Failed dependencies:
        libgnustep-base.so.1.25()(64bit) is needed by (installed)
unar-1.10.1-2.3.x86_64

pkgs: file-roller gnustep-base


--1503752821.144Bdf1.3085
Date: Sat, 26 Aug 2017 13:07:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055821

            Bug ID: 1055821
           Summary: [Build 20170824] openQA test fails in yast2_ntpclient - "/usr/sbin/sntp: No such file or directory"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/474335/modules/yast2_
                    ntpclient/steps/22
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: okurz-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_ui@64bit fails in
[yast2_ntpclient](http://openqa.opensuse.org/tests/474335/modules/yast2_ntpclient/steps/22)
with a message "Server is unreachable or does not respond properly." but y2log
reveals more details:

```
2017-08-25 15:43:03 <1> susetest(4485) [ncurses] NCPopupMenu.cc(postAgain):115
Menu item: &Public NTP Server
 2017-08-25 15:43:03 <3> susetest(4485) [Ruby] modules/CWM.rb:290 Error on key
label of widget ac_options: Label has no shortcut or more than 1 shortcuts
 --
 2017-08-25 15:43:14 <1> susetest(4485) [Ruby] ntp-client/widgets.rb:1078
Handling server list change, last country: UK, current country: UK
 2017-08-25 15:43:14 <2> susetest(4485) [ui-shortcuts]
YShortcutManager.cc(checkShortcuts):85 Not enough widgets with valid shortcut
characters - no check
 2017-08-25 15:43:14 <1> susetest(4485) [Ruby] modules/NtpClient.rb:845 Testing
reachability of server uk.pool.ntp.org
 2017-08-25 15:43:14 <3> susetest(4485) [bash] ShellCommand.cc(shellcommand):78
sh: /usr/sbin/sntp: No such file or directory
 2017-08-25 15:43:14 <1> susetest(4485) [Ruby] modules/NtpClient.rb:820 sntp
test response: {"exit"=>127, "stderr"=>"sh: /usr/sbin/sntp: No such file or
directory\n", "stdout"=>""}
 2017-08-25 15:43:14 <3> susetest(4485) [bash] ShellCommand.cc(shellcommand):78
sh: /usr/sbin/sntp: No such file or directory
 2017-08-25 15:43:14 <1> susetest(4485) [Ruby] modules/NtpClient.rb:820 sntp
test response: {"exit"=>127, "stderr"=>"sh: /usr/sbin/sntp: No such file or
directory\n", "stdout"=>""}
 2017-08-25 15:43:14 <3> susetest(4485) [Ruby] modules/NtpClient.rb:856 Server
is unreachable or does not respond properly.
```

as can be seen in
https://openqa.opensuse.org/tests/474335#step/yast2_ntpclient/56

## Reproducible

Fails since (at least) Build
[20170822](http://openqa.opensuse.org/tests/473978)

## Expected result

Last good: [20170822](http://openqa.opensuse.org/tests/473907) (or more recent)

## Further details

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?flavor=DVD&distri=opensuse&machine=64bit&arch=x86_64&test=yast2_ui&version=Tumbleweed)


--1503842628.B6Bf30.4284
Date: Sun, 27 Aug 2017 14:03:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055834

            Bug ID: 1055834
           Summary: [FAILED] Failed to start Setup Virtual Console.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: jsrain-at-suse.com
          Reporter: eatobin-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

My first bug report. Please excuse irregularities.

After a recent Tumbleweed update (20170822?) I began to receive this error on
boot:

[FAILED] Failed to start Setup Virtual Console.

The details as reported:

eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service
● systemd-vconsole-setup.service - Setup Virtual Console
   Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service;
static; vendor preset: disabled)
   Active: inactive (dead) since Thu 2017-08-24 20:04:51 CDT; 26min ago
     Docs: man:systemd-vconsole-setup.service(8)
           man:vconsole.conf(5)
  Process: 467 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited,
status=0/SUCCESS)
 Main PID: 467 (code=exited, status=0/SUCCESS)

Aug 24 20:04:51 linux-epth systemd-vconsole-setup[467]: KD_FONT_OP_SET failed,
fonts will not be copied to tty7: Invalid argument
Aug 24 20:04:51 linux-epth systemd[1]: Started Setup Virtual Console.
eric@linux-epth:~$

More research and think this is tied to a boot problem as systemctl work
manually:

eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service
[sudo] password for root:
● systemd-vconsole-setup.service - Setup Virtual Console
   Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service;
static; vendor preset: disabled)
   Active: inactive (dead) since Sat 2017-08-26 08:54:42 CDT; 1min 51s ago
     Docs: man:systemd-vconsole-setup.service(8)
           man:vconsole.conf(5)
  Process: 441 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited,
status=0/SUCCESS)
 Main PID: 441 (code=exited, status=0/SUCCESS)

Aug 26 08:54:42 linux-epth systemd-vconsole-setup[441]: KD_FONT_OP_SET failed,
fonts will not be copied to tty7: Invalid argument
Aug 26 08:54:42 linux-epth systemd[1]: Started Setup Virtual Console.
eric@linux-epth:~$ sudo systemctl start systemd-vconsole-setup.service
eric@linux-epth:~$ sudo systemctl status systemd-vconsole-setup.service
● systemd-vconsole-setup.service - Setup Virtual Console
   Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service;
static; vendor preset: disabled)
   Active: inactive (dead) since Sat 2017-08-26 08:57:03 CDT; 4s ago
     Docs: man:systemd-vconsole-setup.service(8)
           man:vconsole.conf(5)
  Process: 2637 ExecStart=/usr/lib/systemd/systemd-vconsole-setup (code=exited,
status=0/SUCCESS)
 Main PID: 2637 (code=exited, status=0/SUCCESS)

Aug 26 08:57:02 linux-epth systemd[1]: Starting Setup Virtual Console...
Aug 26 08:57:03 linux-epth systemd[1]: Started Setup Virtual Console.
eric@linux-epth:~$

My thanks to tsu2 on the user forum (Re: New Boot Error -"[FAILED] Failed to
start Setup Virtual Console."):

"Looks like this is likely a systemd upstream error.
I found where your error is generated, and I doubt anyone but upstream can do
anything about it
https://github.com/systemd/systemd/blob/master/src/vconsole/vconsole-setup.c

Best to just submit a bug to https://bugzilla.opensuse.org

TSU"

Please note line 306 of referenced code as it pertains to warning I received:

log_warning_errno(errno, "KD_FONT_OP_SET failed, fonts will not be copied to
tty%u: %m", i);

KD_FONT_OP_SET failed, fonts will not be copied to tty7: Invalid argument

Thank you for your help with this.


body:
--1503914451.Ff2851.9841
Date: Mon, 28 Aug 2017 10:00:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055891

            Bug ID: 1055891
           Summary: fwts: update to version 17.07.00
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mpluskal-at-suse.com
          Reporter: mpluskal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Updating to version 17.07.00 brings in several important enahancements:
* Support for latest acpi (6.2)
* Support for SMBIOS 3.1.1
* Enhanced support for secureboot
* Improved support for OPAL (ppc64le firmware)

summary: fwts: update to version 17.07.00


--1503924281.00200.7939
Date: Mon, 28 Aug 2017 12:44:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055929

            Bug ID: 1055929
           Summary: Mesa broken with lang != en and glibc 2.26
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: fvogt-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
                CC: sndirsch-at-suse.com
          Found By: ---
           Blocker: ---

On a system with a non-english locale, there are various display glitches
and some things do not appear at all, like input into password fields or
the login avatar.

See also https://bugs.archlinux.org/task/55244


--1503956990.02bd70.16878
Date: Mon, 28 Aug 2017 21:49:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056011

            Bug ID: 1056011
           Summary: multipathd produces too many sd_notify events
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The state DAEMON_RUNNING is used by multipathd's checkerloop to indicate that
path checkers are running. checkerloop switches back and forth
between DAEMON_IDLE and DAEMON_RUNNING in every iteration, i.e.
it performs two status changes per second on an idle system, and sends
a notification to systemd using sd_notify every time.

The repeated sd_notify() calls cause a lot of traffic on dbus as
systemd forwards these messages on the system bus. This can be
seen with systemd.log_level=debug. Better skip these notifications
that don't provide useful information to the user, who is very
unlikely to catch the daemon in "running" state anyway.

If booting with systemd.log_level=debug and serial console, this can basically
prevent the system from booting because multipathd/systemd generate log
messages constantly at the same speed the serial console is able to print them.

I have a patch for this which I'm going to submit upstream.


body:
--1503977628.d64CA0.30730
Date: Tue, 29 Aug 2017 03:33:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056021

            Bug ID: 1056021
           Summary: Update Xonotic to 0.8.2 for Leap
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: maxmitschke-at-fastmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I was wondering if someone could update Xonotic to version the latest version
0.8.2? The current version for Leap is still on version 0.8.1.

Possible issues that users might face:

1. Banner that floats across the screen as the user plays the game. It tells
the user to update as soon as possible.
2. Users might not be able to join servers that are on version 0.8.2

summary: Update Xonotic to 0.8.2 for Leap


body:
--1504016820.7B86008a0.12535
Date: Tue, 29 Aug 2017 14:27:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056171

            Bug ID: 1056171
           Summary: cfdisk segfaults
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jayrusman-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Ass root, execute cfdisk with no or any parameters.  It always segfaults
immediately.  Looks like ncurses, again.

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff72a520e in ?? () from /lib64/libncursesw.so.6
(gdb) bt
#0  0x00007ffff72a520e in ?? () from /lib64/libncursesw.so.6
#1  0x00007ffff72a0a1b in newterm_sp () from /lib64/libncursesw.so.6
#2  0x00007ffff72a0ef1 in newterm () from /lib64/libncursesw.so.6
#3  0x00007ffff729caf6 in initscr () from /lib64/libncursesw.so.6
#4  0x000055555555a0be in ?? ()
#5  0x00007ffff6eeef1a in __libc_start_main () from /lib64/libc.so.6
#6  0x000055555555adaa in ?? ()
(gdb)

summary: cfdisk segfaults


--1504073454.cFB8bd6.20073
Date: Wed, 30 Aug 2017 06:10:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056289

            Bug ID: 1056289
           Summary: User's default IBUS input engine should only be "Mozc" under Japanese language with GNOME desktop
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: qzhao-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 738783
  --> http://bugzilla.opensuse.org/attachment.cgi?id=738783&action=edit
a Japanese user first login to desktop and check his input engine under IBUS.

Description of problem:
If a new user login to GNOME desktop with Japanese as his default language,
default input engine should *only* be "Mozc".

Version-Release number of selected component:
openSUSE Tumbleweed

How reproducible:
always

Steps to Reproduce:
1, Fresh install openSUSE Tumbleweed.

2, During installation, select Japanese as the default language,

3, Create a new user account during installation.

4, Make sure Gnome desktop component has been installed together.

5, login as this user after installation successfully finished.

6, Check the default input method.

Actual results:
User's input method is xkeyboard key-mapping or none.

Expected results:
IBUS has Mozc input engine only.

Additional info:
This is an enhancement issue, which can make Japanese user more convenient to
input local charactors.


--1504092127.b873d30.948
Date: Wed, 30 Aug 2017 11:22:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056389

            Bug ID: 1056389
           Summary: Openconnect 7.06 fails on connect to Junos Pulse
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: tcj-at-tomas.dk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When connecting to a Junos Pulse gateway, connection fails.
openconnect --juniper https://******
WARNING: Juniper Network Connect support is experimental.
It will probably be superseded by Junos Pulse support.
GET https://******
Attempting to connect to server 193.162.145.68:443
SSL negotiation with *****
Connected to HTTPS on *****
frmLogin
realm
[USER-REALM-NORDIC-NMSLAN-RADIUS+RSA|USER-REALM-NORDIC-NMSLAN-RADIUS+TOTP]:USER-REALM-NORDIC-NMSLAN-RADIUS+RSA
frmLogin
username:_my_user_id_
password:
POST https://*******
SSL negotiation with *******
Connected to HTTPS on ********
Got HTTP response: HTTP/1.1 302 Moved
GET https://*******
SSL negotiation with *******
Connected to HTTPS on ********
frmLogin
password#2:
POST https://********
SSL negotiation with *******
Connected to HTTPS on sltvpn1.eng.tdc.net
Got HTTP response: HTTP/1.1 302 Moved
GET https://******
SSL negotiation with *******
Connected to HTTPS on *******
SSL negotiation with *******
Connected to HTTPS on ********
Got HTTP response: HTTP/1.1 400 Bad Request   <<<<< FAILS
Unexpected 400 result from server             <<<<< FAILS
Creating SSL connection failed                <<<<< FAILS

This bug ought to have been fixed in openconnect v. 7.08
Please replace the current 7.06 with the latest and greatest 7.08.

BR
Tomas Jensen


--1504098094.D3675A75.2141
Date: Wed, 30 Aug 2017 13:01:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056421

            Bug ID: 1056421
           Summary: VUL-0: CVE-2016-10507: openjpeg2: integer overflow in bmp24toimage
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: hpj-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in
OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service
(heap-based buffer over-read and application crash) via a crafted bmp file.

https://github.com/uclouvain/openjpeg/issues/833

https://github.com/trylab/openjpeg/commit/16b0e4a18133e23e9c4986a58a286b50854c87e6


--1504103878.41e20.24472
Date: Wed, 30 Aug 2017 14:37:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056450

            Bug ID: 1056450
           Summary: VUL-0: libidn2: integer overflow in puny_decode.c/decode_digit()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://lists.gnu.org/archive/html/info-gnu/2017-08/msg00013.html

Integer overflow fixed in libidn2 2.0.4:

** Fix integer overflow in puny_decode.c/decode_digit()

http://git.savannah.gnu.org/cgit/libidn/libidn2.git/commit/?h=libidn2-2.0.4&id=3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd


--1504103878.bc3fE0f0.23154
Date: Wed, 30 Aug 2017 14:37:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056451

            Bug ID: 1056451
           Summary: VUL-0: libidn2: integer overflow in bidi.c/_isBidi()
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://lists.gnu.org/archive/html/info-gnu/2017-08/msg00013.html

Integer overflow fixed in libidn2 2.0.4:

** Fix integer overflow in bidi.c/_isBidi()

http://git.savannah.gnu.org/cgit/libidn/libidn2.git/commit/?h=libidn2-2.0.4&id=16853b6973a1e72fee2b7cccda85472cb9951305


--1504117155.A3D4c0.5372
Date: Wed, 30 Aug 2017 18:19:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056508

            Bug ID: 1056508
           Summary: parted partition names for dm devices don't match kpartx
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 738913
  --> http://bugzilla.suse.com/attachment.cgi?id=738913&action=edit
modified libparted-partition-naming.patch

kpartx as called by (not only) SUSE udev rules always uses the -part%d for
partitions.

parted uses the suffix "-part%d" only if the parent device ends in a digit, and
simply appends the partition number "%d" otherwise:

3600601600a3020002282d7e2c5a6e411-part1 (parent ends with "1")

but

360080e500017c4160000a0be52809f3a1 (parent ends with "a")

Updated patch is attached.


--1504127629.5eDBd8da0.7905
Date: Wed, 30 Aug 2017 21:13:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056526

            Bug ID: 1056526
           Summary: multipathd ignores "partition_delimiter" setting
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 738923
  --> http://bugzilla.suse.com/attachment.cgi?id=738923&action=edit
libmultipath: fix partition_delimiter config option

The partition_delimiter setting in multipath.conf is ignored.
Patch attached.


--1504173826.4D3a40.23767
Date: Thu, 31 Aug 2017 10:03:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056599

            Bug ID: 1056599
           Summary: kpartx doesn't delete partition mappings if partition table is empty
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# kpartx -d /dev/mapper/360080e500017c4160000a0be52809f3a
(no errors)

but partition mappings still exist:
# dmsetup ls | grep f3a
360080e500017c4160000a0be52809f3a-part2    (254:22)
360080e500017c4160000a0be52809f3a-part1    (254:21)
360080e500017c4160000a0be52809f3a

The partition table had been deleted:
# parted  /dev/mapper/360080e500017c4160000a0be52809f3a print
Error: /dev/mapper/360080e500017c4160000a0be52809f3a: unrecognised disk label
Model: Linux device-mapper (multipath) (dm)
Disk /dev/mapper/360080e500017c4160000a0be52809f3a: 34.4GB
Sector size (logical/physical): 512B/512B
Partition Table: unknown
Disk Flags:

After applying patch, the issue is resolved:

# dmsetup ls | grep f3a
360080e500017c4160000a0be52809f3a-part2    (254:22)
360080e500017c4160000a0be52809f3a-part1    (254:21)
360080e500017c4160000a0be52809f3a
# kpartx -d /dev/mapper/360080e500017c4160000a0be52809f3a
# dmsetup ls | grep f3a
360080e500017c4160000a0be52809f3a    (254:2)


--1504175337.6b010.32204
Date: Thu, 31 Aug 2017 10:28:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056606

            Bug ID: 1056606
           Summary: ld search paths from RPATH contain "haswell" rather than expected "x86_64"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mdiluzio-at-feralinteractive.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 738991
  --> http://bugzilla.opensuse.org/attachment.cgi?id=738991&action=edit
tar ball of main.cpp and output

After installing Tumbleweed and updating as of yesterday (30-08-2017) I'm
seeing the ld search paths fail to pick up libraries that were picked up
before.

I'd expect to see search paths containing the current architecture (x86_64), to
assist in finding architecture specific libraries for different CPU features.
I'm finding the path populated with "haswell" instead, causing issues in our
case with trying to run Feral Interactive games on steam.

To reproduce:
Compile the attached main.cpp with the following command:
    $ g++ main.cpp -Wl,--disable-new-dtags,-rpath,\$ORIGIN/lib/

And then check the library search paths with this command:
    $ LD_DEBUG=libs ldd ./a.out

See attached output from local machine. Note this output:
    search
path=/home/mdiluzio/lib/tls/haswell:/home/mdiluzio/lib/tls:/home/mdiluzio/lib/haswell:/home/mdiluzio/lib
           (RPATH from file /home/mdiluzio/a.out)

Previously, and on other available distributions, we saw search paths
containing the architecture. Without these paths programs that rely on this
behaviour will fail to find the required libraries that are contained in an
"x86_64" sub-directory of the specified RPATH.

We think these paths should be coming from _gl_important_hwcaps in glibc's
elf/dl-hwcaps.c, but haven't yet traced the root cause of change in behaviour.
We're unsure if the behaviour of the ld search paths is not stable enough to be
relied on in this way, or if this is in fact a configuration bug, so any help
would be appreciated.

uname -a: Linux localhost 4.12.8-1-default #1 SMP PREEMPT Thu Aug 17 05:30:12
UTC 2017 (4d7933a) x86_64 x86_64 x86_64 GNU/Linux

Please note, a similar issue has been seen recently by one user on Arch as
reported here:
https://github.com/FeralInteractive/ferallinuxscripts/issues/3
That could be a hint that this is a wider reaching ld, glibc or kernel related
issue, but since it manifests differently on Tumbleweed, and that's the
reproduction case I have, I'm reporting it here.


--1504211766.D0562A41.12282
Date: Thu, 31 Aug 2017 20:36:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056718

            Bug ID: 1056718
           Summary: package java-1_5_0-gcj-compat: installation error
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: PC
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

After I perform a standard installation that includes also the pattern:
  Java Development
I found this error in /var/log/zypp/history:

# 2017-08-31 11:41:19 java-1_5_0-gcj-compat-1.5.0.0-137.24.x86_64.rpm installed
ok
# Additional rpm output:
# update-alternatives: using /usr/lib64/jvm/jre-1.5.0-gcj/bin/java to provide
/usr/bin/java (java) in auto mode
# update-alternatives: using /usr/lib64/jvm/jre-1.5.0-gcj to provide
/usr/lib64/jvm/jre-gcj (jre_gcj) in auto mode
# update-alternatives: using /usr/lib64/jvm/jre-1.5.0-gcj to provide
/usr/lib64/jvm/jre-1.5.0 (jre_1.5.0) in auto mode
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 41: sed: command not found
# /var/tmp/rpm-tmp.X23HDn: line 42: sed: command not found
#
2017-08-31
11:41:19|install|java-1_5_0-gcj-compat|1.5.0.0-137.24|x86_64||openSUSE-Leap-42.3-0|17950505d2dd0d9958bd2d48b428932da47839f9|

The problem is that java-1_5_0-gcj-compat is installed before sed and at that
time the binaries sed used in the postinstall scriptlet, is not available yet.

A possible fix is to add this line in java-1_5_0-gcj-compat.spec:

 Requires(pre):   gcc-gij
 Requires(post):  update-alternatives
+Requires(post):  sed
 PreReq:         coreutils


--1504249092.54c26.30563
Date: Fri, 1 Sep 2017 06:58:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056760

            Bug ID: 1056760
           Summary: VUL-0: CVE-2017-14056: In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due tolack of an EOF (End of File) check might cause huge CPU and memoryconsumption. When a crafted RL2 file, which claims a large"frame_count" field
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: dimstar-at-opensuse.org, idonmez-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14056

In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to
lack of an EOF (End of File) check might cause huge CPU and memory
consumption. When a crafted RL2 file, which claims a large
"frame_count" field in the header but does not contain sufficient
backing data, is provided, the loops (for offset and size tables) would
consume huge CPU and memory resources, since there is no EOF check
inside these loops.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14056
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14056


--1504249402.4c1C5DF0.31125
Date: Fri, 1 Sep 2017 07:03:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056761

            Bug ID: 1056761
           Summary: VUL-0: CVE-2017-14057: ffmpeg: DoS in asf_read_marker() due to lack of an EOF (End of File) check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14057

In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End
of File) check might cause huge CPU and memory consumption. When a
crafted ASF file, which claims a large "name_len" or "count" field in
the header but does not contain sufficient backing data, is provided,
the loops over the name and markers would consume huge CPU and memory
resources, since there is no EOF check inside these loops.

Upstream Fix:
https://github.com/FFmpeg/FFmpeg/commit/7f9ec5593e04827249e7aeb466da06a98a0d7329

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14057
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14057


--1504249602.FFee00.558
Date: Fri, 1 Sep 2017 07:06:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056762

            Bug ID: 1056762
           Summary: VUL-0: CVE-2017-14058: ffmpeg: DoS in read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14058

In FFmpeg 3.3.3, the read_data function in libavformat/hls.c does not
restrict reload attempts for an insufficient list, which allows remote
attackers to cause a denial of service (infinite loop).

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/7ec414892ddcad88313848494b6fc5f437c9ca4a

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14058


--1504249703.37160.935
Date: Fri, 1 Sep 2017 07:08:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056763

            Bug ID: 1056763
           Summary: VUL-0: CVE-2017-14059: ffmpeg: DoS in cine_read_header() due to lack of an EOF check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14059

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF
check might cause huge CPU and memory consumption. When a crafted CINE
file, which claims a large "duration" field in the header but does not
contain sufficient backing data, is provided, the image-offset parsing
loop would consume huge CPU and memory resources, since there is no EOF
check inside the loop.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/7e80b63ecd259d69d383623e75b318bf2bd491f6

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14059
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14059


--1504249863.C25B6Db0.1721
Date: Fri, 1 Sep 2017 07:11:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056765

            Bug ID: 1056765
           Summary: VUL-0: CVE-2017-14054: ffmpeg: DoS in ivr_read_header() due to lack of an EOF (End of File) check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14054

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due
to lack of an EOF (End of File) check might cause huge CPU consumption.
When a crafted IVR file, which claims a large "len" field in the header
but does not contain sufficient backing data, is provided, the first
type==4 loop would consume huge CPU resources, since there is no EOF
check inside the loop.

Upstream Fix:
https://github.com/FFmpeg/FFmpeg/commit/124eb202e70678539544f6268efc98131f19fa49

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14054


--1504249968.44CE0.2155
Date: Fri, 1 Sep 2017 07:12:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056766

            Bug ID: 1056766
           Summary: VUL-0: CVE-2017-14055: ffmpeg: DoS in mv_read_header() due to lack of an EOF (End of File) check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due
to lack of an EOF (End of File) check might cause huge CPU and memory
consumption. When a crafted MV file, which claims a large "nb_frames"
field in the header but does not contain sufficient backing data, is
provided, the loop over the frames would consume huge CPU and memory
resources, since there is no EOF check inside the loop.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/4f05e2e2dc1a89f38cd9f0960a6561083d714f1e

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14055
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14055


--1504256212.aFad0.30284
Date: Fri, 1 Sep 2017 08:56:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056783

            Bug ID: 1056783
           Summary: GCC 6 C++: std::isnan fails to compile with cmath
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: qantas94heavy-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The following C++ file fails to build with GCC 6:

#include <cmath>
#include <iostream>

int main(int argc, char *argv[])
{
  double num = 0.0;
  std::cout << std::isnan(num) << "\n";
  return 0;
}

This throws the following compile time error:

> test.cpp: In function ‘int main(int, char**)’:
> test.cpp:7:16: error: ‘__builtin_isnan’ is not a member of ‘std’
>    std::cout << std::isnan(num) << "\n";
>                 ^~~
> test.cpp:7:16: note: suggested alternative:
> <built-in>: note:   ‘__builtin_isnan’

Is that meant to happen? It builds properly with GCC 7.

Build command: g++-6 -O2 -Wall -g test.cpp


--1504265184.a8E00.24978
Date: Fri, 1 Sep 2017 11:26:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056822

            Bug ID: 1056822
           Summary: Support PHP7 packagers with new packaging macros
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jweberhofer-at-weberhofer.at
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

To simplify packaging some new macros should be included into PHP7.

Please include those changes in the upcoming SRs of maintained leap versions
when possible!

There is an intermediate package in
https://build.opensuse.org/package/show/server:php:applications/php7-macros

Those are the new macros:
%php_pearxmldir /var/lib/pear
%pear_phpdir  %(%{__pear} config-get php_dir  2> /dev/null || echo undefined)
%pear_docdir  %(%{__pear} config-get doc_dir  2> /dev/null || echo undefined)
%pear_testdir %(%{__pear} config-get test_dir 2> /dev/null || echo undefined)
%pear_datadir %(%{__pear} config-get data_dir 2> /dev/null || echo undefined)
%pear_cfgdir  %(%{__pear} config-get cfg_dir  2> /dev/null || echo undefined)
%pear_wwwdir  %(%{__pear} config-get www_dir  2> /dev/null || echo undefined)
%pear_metadir %(%{__pear} config-get metadata_dir 2> /dev/null || echo
undefined)

# pecl related macros
%__pecl       /usr/bin/pecl
%pecl_phpdir  %(%{__pecl} config-get php_dir  2> /dev/null || echo undefined)
%pecl_docdir  %(%{__pecl} config-get doc_dir  2> /dev/null || echo undefined)
%pecl_testdir %(%{__pecl} config-get test_dir 2> /dev/null || echo undefined)
%pecl_datadir %(%{__pecl} config-get data_dir 2> /dev/null || echo undefined)


--1504466852.d54C60.9787
Date: Sun, 3 Sep 2017 19:27:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1056980

            Bug ID: 1056980
           Summary: libnettle is not built with AES-NI support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: asn-at-cryptomilk.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

libnettle is not built with AES-NI support and thus is slowing down
cryptographic operation especially AES operations.

libnettle should be built with --enable-fat


--1504469560.D8E4A54.15578
Date: Sun, 3 Sep 2017 20:12:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1056981

            Bug ID: 1056981
           Summary: libidn2-0-32bit is not installable due to libunistring
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: astieger-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: pgajdos-at-suse.com, tchvatal-at-suse.com
          Found By: ---
           Blocker: ---

libidn2-0-32bit cannot be installed on Leap:

zypper in -r oss libidn2-0-32bit
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides libunistring.so.0 needed by
libidn2-0-32bit-2.0.2-1.1.x86_64
 Solution 1: do not install libidn2-0-32bit-2.0.2-1.1.x86_64
 Solution 2: break libidn2-0-32bit-2.0.2-1.1.x86_64 by ignoring some of its
dependencies

This was fixed in Factory:
https://build.opensuse.org/request/show/448698

Beaks a maintenance update for libidn2 on Leap:
https://openqa.opensuse.org/tests/476836#step/install_packages/9

Plan is to backport this change to Leap, will also submit to SLE.


body:
--1504509517.402f61d60.22723
Date: Mon, 4 Sep 2017 07:18:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1057007

            Bug ID: 1057007
           Summary: hostname no longer set via dhcp
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have an about 1 year old Tumbleweed installation updated regular to the
latest snapshot.
Since some time, the hostname is no longer set via dhcp, even if the variable
is enabled in /etc/sysconfig/network/dhcp (and it worked for nearly one year).

This is a problem for CaaSP/Kubic.

summary: hostname no longer set via dhcp


--1504538574.57d280.30733
Date: Mon, 4 Sep 2017 15:22:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057104

            Bug ID: 1057104
           Summary: php7-devel package should require php7-pear
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: PVince81-at-yahoo.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Steps to reproduce:

1. Install php7
2. Type "pecl": the cnf prompt tells you that this command is only available in
php7-devel
3. Install php7-devel
4. Type "pecl" again

Expected result:
pecl works

Actual result:
`Could not open input file: /usr/share/php7/PEAR/peclcmd.php`

The workaround is to manually install php7-pear.


--1504594758.f48eB6E7.20911
Date: Tue, 5 Sep 2017 06:59:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057146

            Bug ID: 1057146
           Summary: VUL-0: CVE-2017-14136: opencv: out-of-bounds write error in the function FillColorRow1 in utils.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14136

OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds
write error in the function FillColorRow1 in utils.cpp when reading an
image file by using cv::imread. NOTE: this vulnerability exists because
of an incomplete fix for CVE-2017-12597.

Upstream bug:
https://github.com/opencv/opencv/issues/9443

Upstream fix:
https://github.com/opencv/opencv/pull/9448/commits/aacae2065744adb05e858d327198c7bbe7f452b0

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14136
http://www.cvedetails.com/cve/CVE-2017-14136/


body:
--1504611873.eD8FEF0.16971
Date: Tue, 5 Sep 2017 11:44:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057209

            Bug ID: 1057209
           Summary: Failed to start Network Time Service.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: emiliano.langella-at-microfocus.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installed Tumbleweed on two laptops, NTP seems to be broken on both, I can't
start it.

Messages:
Sep 05 13:30:30 osiris systemd[1]: Starting Network Time Service...
Sep 05 13:30:30 osiris ntpd[1616]: ntpd ntpsec-0.9.7+970 2017-06-07T09:46:10Z:
Starting
Sep 05 13:30:30 osiris ntpd[1616]: 09-05T13:30:30 ntpd[1616]: ntpd
ntpsec-0.9.7+970 2017-06-07T09:46:10Z: Starting
Sep 05 13:30:30 osiris ntpd[1616]: 09-05T13:30:30 ntpd[1616]: Command line:
/usr/sbin/ntpd -g -u ntp:ntp
Sep 05 13:30:30 osiris ntpd[1616]: Command line: /usr/sbin/ntpd -g -u ntp:ntp
Sep 05 13:30:30 osiris systemd[1]: Started Network Time Service.
Sep 05 13:30:30 osiris ntpd[1617]: proto: precision = 0.204 usec (-22)
Sep 05 13:30:30 osiris ntpd[1617]: successfully locked into RAM
Sep 05 13:30:30 osiris ntpd[1617]: sandbox: seccomp enabled.
Sep 05 13:30:30 osiris ntpd[1617]: ERROR: SIGSYS: got a trap.
Sep 05 13:30:30 osiris ntpd[1617]: ERROR: SIGSYS/seccomp bad syscall
257/0xc000003e
Sep 05 13:30:30 osiris systemd[1]: ntpd.service: Main process exited,
code=killed, status=31/SYS
Sep 05 13:30:30 osiris systemd[1]: ntpd.service: Unit entered failed state.
Sep 05 13:30:30 osiris systemd[1]: ntpd.service: Failed with result 'signal'.

NTP version:
i | ntpsec                      | package | 0.9.7+git20170607.7c0008c91-1.2 |
x86_64 | openSUSE-Tumbleweed-Oss
v | ntpsec                      | package | 0.9.7+git20170607.7c0008c91-1.2 |
i586   | openSUSE-Tumbleweed-Oss
i | ntpsec-utils                | package | 0.9.7+git20170607.7c0008c91-1.2 |
x86_64 | openSUSE-Tumbleweed-Oss
v | ntpsec-utils                | package | 0.9.7+git20170607.7c0008c91-1.2 |
i586   | openSUSE-Tumbleweed-Oss

summary: Failed to start Network Time Service.


body:
--1504613630.Bf41ea0.6971
Date: Tue, 5 Sep 2017 12:13:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.novell.com/show_bug.cgi?id=1057216

            Bug ID: 1057216
           Summary: rpmlint wrongly detects arch dependent binaries
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: BuildService
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: davejplater-at-gmail.com
        QA Contact: adrian-at-suse.com
          Found By: ---
           Blocker: ---

I split off part of the package kicad-library into a sub package
kicad-library-3d due to the size of the 3d symbol files. After doing this
rpmlint now detects arch dependent binaries. I've worked around this with an
rpmlintrc file but rpmlint's method for checking for arch dependent files is
faulted.
The resulting kicad-library rpm is 1.9M in size and the resulting
kicad-library-3d rpm is 180M in size.

pkgs: kicad-library rpmlint


--1504748598.5b57a1.4446
Date: Thu, 7 Sep 2017 01:43:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057496

            Bug ID: 1057496
           Summary: devel:languages:python/python-six: egg-info can't be unpacked, cpio rename
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: 3rd party software
          Assignee: jmatejek-at-suse.com
          Reporter: i-at-marguerite.su
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

happened on latest TW, message:

Installation of python2-six-1.10.0-4.2.noarch failed:

Error: Subprocess failed. Error: RPM failed: error: unpacking of archive failed
on file /usr/lib/python2.7/site-packages/six-1.10.0-py2.7.egg-info: cpio rename
error: python2-six-1.10.0-4.2.noarch: install failed

This same message occurs at installing python2-six and python2-PyYAML, so it's
a common issue.

This issue will cause those packages not installed onto the system.

As python2-six is a system essential package, please take a look and fix ASAP.

A little hint: I upgraded several tumbleweed on different servers. And I
remembered I saw messages complain that egg-info is a directory.

Marguerite


--1504772749.E1847.25705
Date: Thu, 7 Sep 2017 08:25:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057537

            Bug ID: 1057537
           Summary: VUL-0: CVE-2017-14170: ffmpeg: DoS in mxf_read_index_entry_array() due to lack of an EOF check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14170

In libavformat/mxfdec.c in FFmpeg 3.3.3, a DoS in
mxf_read_index_entry_array() due to lack of an EOF (End of File) check
might cause huge CPU consumption. When a crafted MXF file, which claims
a large "nb_index_entries" field in the header but does not contain
sufficient backing data, is provided, the loop would consume huge CPU
resources, since there is no EOF check inside the loop. Moreover, this
big loop can be invoked multiple times if there is more than one
applicable data segment in the crafted MXF file.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/900f39692ca0337a98a7cf047e4e2611071810c2

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14170
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14170


--1504772854.132ffB0.26073
Date: Thu, 7 Sep 2017 08:27:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057539

            Bug ID: 1057539
           Summary: VUL-0: CVE-2017-14171: ffmpeg: DoS in nsv_parse_NSVf_header() due to lack of an EOF check
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 3.3.3, a DoS in
nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might
cause huge CPU consumption. When a crafted NSV file, which claims a
large "table_entries_used" field in the header but does not contain
sufficient backing data, is provided, the loop over
'table_entries_used' would consume huge CPU resources, since there is
no EOF check inside the loop.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/c24bcb553650b91e9eff15ef6e54ca73de2453b7

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14171
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14171


--1504772608.6C848ebD9.24234
Date: Thu, 7 Sep 2017 08:23:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057536

            Bug ID: 1057536
           Summary: VUL-0: CVE-2017-14169: ffmpeg: integer signedness error in mxf_read_primer_pack function in libavformat/mxfdec.c
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14169

In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg
3.3.3, an integer signedness error might occur when a crafted file,
which claims a large "item_num" field such as 0xffffffff, is provided.
As a result, the variable "item_num" turns negative, bypassing the
check for a large value.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14169
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14169


--1504786960.c63DDF0.5238
Date: Thu, 7 Sep 2017 12:22:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1057592

            Bug ID: 1057592
           Summary: Cannot connect to EAP secured wireless network with wicked
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: lmb-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have trouble connecting my laptop to a PEAP secured wireless network,
embarrassingly the AttachemateGroup one at SUSE HQ.

The network settings seem to be right and match:

BOOTPROTO='dhcp'
BROADCAST=''
DHCLIENT_SET_DEFAULT_ROUTE='yes'
ETHTOOL_OPTIONS=''
IPADDR=''
MTU=''
NAME='Wireless 7260'
NETMASK=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='manual'
WIRELESS_AP=''
WIRELESS_AP_SCANMODE='1'
WIRELESS_AUTH_MODE='eap'
WIRELESS_BITRATE='auto'
WIRELESS_CA_CERT=''
WIRELESS_CHANNEL=''
WIRELESS_CLIENT_CERT=''
WIRELESS_CLIENT_KEY=''
WIRELESS_CLIENT_KEY_PASSWORD=''
WIRELESS_DEFAULT_KEY='0'
WIRELESS_EAP_AUTH='MSCHAPV2'
WIRELESS_EAP_MODE='PEAP'
WIRELESS_ESSID='AttachmateGroup'
WIRELESS_FREQUENCY=''
WIRELESS_KEY=''
WIRELESS_KEY_0=''
WIRELESS_KEY_1=''
WIRELESS_KEY_2=''
WIRELESS_KEY_3=''
WIRELESS_KEY_LENGTH='128'
WIRELESS_MODE='Managed'
WIRELESS_NICK=''
WIRELESS_NWID=''
WIRELESS_PEAP_VERSION=''
WIRELESS_POWER='no'
WIRELESS_WPA_ANONID=''
WIRELESS_WPA_IDENTITY='lmb'
WIRELESS_WPA_PASSWORD='xxxxxxxx'
WIRELESS_WPA_PSK=''

Sep 07 13:44:40 hermes kernel: iwlwifi 0000:03:00.0: L1 Enabled - LTR Enabled
Sep 07 13:44:43 hermes kernel: wlp3s0: authenticate with f0:5c:19:1f:93:f0
Sep 07 13:44:43 hermes kernel: wlp3s0: send auth to f0:5c:19:1f:93:f0 (try 1/3)
Sep 07 13:44:43 hermes kernel: wlp3s0: authenticated
Sep 07 13:44:43 hermes kernel: wlp3s0: associate with f0:5c:19:1f:93:f0 (try
1/3)
Sep 07 13:44:43 hermes kernel: wlp3s0: RX AssocResp from f0:5c:19:1f:93:f0
(capab=0x1411 status=0 aid=9)
Sep 07 13:44:43 hermes kernel: wlp3s0: associated
Sep 07 13:44:43 hermes wickedd-dhcp4[1521]: wlp3s0: Request to acquire DHCPv4
lease with UUID 4957ae59-c728-0b00-f205-000033000000
Sep 07 13:44:43 hermes kernel: wlp3s0: Limiting TX power to 23 (23 - 0) dBm as
advertised by f0:5c:19:1f:93:f0
Sep 07 13:44:46 hermes kernel: wlp3s0: deauthenticating from f0:5c:19:1f:93:f0
by local choice (Reason: 3=DEAUTH_LEAVING)
Sep 07 13:44:53 hermes wickedd-dhcp4[1521]: unable to confirm lease
Sep 07 13:44:58 hermes wickedd-dhcp4[1521]: wlp3s0: defer timeout 15 reached
(state INIT)
Sep 07 13:45:00 hermes kernel: wlp3s0: authenticate with f0:5c:19:1f:97:f0
Sep 07 13:45:00 hermes kernel: wlp3s0: send auth to f0:5c:19:1f:97:f0 (try 1/3)
Sep 07 13:45:00 hermes kernel: wlp3s0: authenticated
Sep 07 13:45:00 hermes kernel: wlp3s0: associate with f0:5c:19:1f:97:f0 (try
1/3)
Sep 07 13:45:00 hermes kernel: wlp3s0: RX AssocResp from f0:5c:19:1f:97:f0
(capab=0x1411 status=0 aid=13)
Sep 07 13:45:00 hermes kernel: wlp3s0: associated
Sep 07 13:45:00 hermes wickedd-dhcp4[1521]: wlp3s0: Request to acquire DHCPv4
lease with UUID 4957ae59-c728-0b00-f205-000033000000
Sep 07 13:45:00 hermes kernel: wlp3s0: Limiting TX power to 30 (30 - 0) dBm as
advertised by f0:5c:19:1f:97:f0
Sep 07 13:45:03 hermes kernel: wlp3s0: deauthenticating from f0:5c:19:1f:97:f0
by local choice (Reason: 3=DEAUTH_LEAVING)
Sep 07 13:45:10 hermes wickedd-dhcp4[1521]: unable to confirm lease
Sep 07 13:45:15 hermes wickedd-dhcp4[1521]: wlp3s0: defer timeout 15 reached
(state INIT)
Sep 07 13:45:41 hermes kernel: wlp3s0: authenticate with f0:5c:19:1f:93:e0
Sep 07 13:45:41 hermes kernel: wlp3s0: send auth to f0:5c:19:1f:93:e0 (try 1/3)
Sep 07 13:45:41 hermes kernel: wlp3s0: f0:5c:19:1f:93:e0 denied authentication
(status 17)
Sep 07 13:45:43 hermes wickedd-nanny[1523]: device wlp3s0: got signal linkDown
Sep 07 13:45:43 hermes kernel: wlp3s0: authenticate with f0:5c:19:1f:93:e0
Sep 07 13:45:43 hermes kernel: wlp3s0: send auth to f0:5c:19:1f:93:e0 (try 1/3)
Sep 07 13:45:43 hermes kernel: wlp3s0: aborting authentication with
f0:5c:19:1f:93:e0 by local choice (Reason: 3=DEAUTH_LEAVING)

So there are a bunch of successful authentication attempts, but then DHCP
doesn't work. Eventually the server throws me out again though.

And no, the password is not incorrect. ;-)


body:
--1504813242.2D310.18477
Date: Thu, 7 Sep 2017 19:40:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057664

            Bug ID: 1057664
           Summary: ping to certain interfaces is broken
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: petr.vorel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

ping to certain interfaces is broken

$ /usr/bin/ping -I 10.0.0.2 -c 500 10.0.0.1 -s 1 -i 0
ping: unknown iface 10.0.0.2

It's been fixed upstream in iputils version s20161105 => upgrade package

Fixed in commit
https://github.com/iputils/iputils/commit/1f6f39b84f81cfa6bc243557a68eebeeac7e8ea3
commit 1f6f39b84f81cfa6bc243557a68eebeeac7e8ea3
Author: Robert Schiele <rschiele-at-gmail.com>
Date:   Mon Mar 14 09:18:08 2016 +0100

    reorder -I option parsing
---

NOTE: this was found with LTP on sle-15-Leanos, but broken for all: Tumbleweed,
SLE 12, SLE 15
https://openqa.suse.de/tests/1155153/file/serial_terminal.txt

summary: ping to certain interfaces is broken


body:
--1504855004.d0cd1e1.18833
Date: Fri, 8 Sep 2017 07:16:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057736

            Bug ID: 1057736
           Summary: VLC depends on KDE4
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: dimstar-at-opensuse.org
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

VLC BuildRequires libkde4-devel, which in return pulls in libQtWebKit-devel and
some other ancient Qt 4 packages.

It's a short-term goal to get rid of libQtWebKit and a long-term goal to get
rid of kdelibs4, so this needs to be fixed.

Looking at the build sytem this is just needed to call kde4-config:
https://github.com/videolan/vlc/blob/92bf46e0b34dc21a668b3a3f37a048dc479e2cbd/configure.ac#L4107

This should be replaced by either calling

qtpaths --paths GenericDataLocation

and extracting the last part or alternatively

kf5-config --install data

However, kf5-config is part of kdelibs4support and therefore deprecated.

summary: VLC depends on KDE4


body:
--1504872321.5B2eA55.14528
Date: Fri, 8 Sep 2017 12:05:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057831

            Bug ID: 1057831
           Summary: unbundle nginx modules
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: achernikov-at-suse.com, astieger-at-suse.com,
                    ikapelyukhin-at-suse.com, mrueckert-at-suse.com,
                    tschmidt-at-suse.com
            Blocks: 1057205
          Found By: ---
           Blocker: ---

The tumbleweed nginx package bundles a number of modules. These should be
removed from the main package build process, and build separately, so as to not
automatically needing maintenance in the same source package.

%define ngx_fancyindex_version 0.4.1
%define ngx_fancyindex_module_path ngx-fancyindex-%{ngx_fancyindex_version}

%define headers_more_nginx_version 0.32
%define headers_more_nginx_module_path
headers-more-nginx-module-%{headers_more_nginx_version}

%define nginx_upstream_check_version 0.3.0
%define nginx_upstream_check_module_path
nginx_upstream_check_module-%{nginx_upstream_check_version}

%define nginx_rtmp_version 1.2.0
%define nginx_rtmp_module_path nginx-rtmp-module-%{nginx_rtmp_version}

Source4:
https://github.com/aperezdc/ngx-fancyindex/archive/v%{ngx_fancyindex_version}/%{ngx_fancyindex_module_path}.tar.gz
Source5:
https://github.com/openresty/headers-more-nginx-module/archive/v%{headers_more_nginx_version}/%{headers_more_nginx_module_path}.tar.gz
Source6:
https://github.com/yaoweibin/nginx_upstream_check_module/archive/v%{nginx_upstream_check_version}/%{nginx_upstream_check_module_path}.tar.gz
Source7:
https://github.com/arut/nginx-rtmp-module/archive/v%{nginx_rtmp_version}/%{nginx_rtmp_module_path}.tar.gz

Marcus noted in bug 1057205 comment #5:
> 1. you can only split out modules that can be dynamically loaded. which many
> modules still cant be.

Do we have a list?

> 2. we would need to find a way to build them out of tree in first place. atm
> you tell the nginx configure script "while you build nginx also enable those
> additional modules"

Can these modules be built from some nginx-modules sources in Tumbleweed, which
may contain the nginx tree for those modules that do not support out of tree
building?

summary: unbundle nginx modules


--1504894502.A7EE6F430.28561
Date: Fri, 8 Sep 2017 18:15:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057900

            Bug ID: 1057900
           Summary: traceroute needs to have enabled in it's AppArmor profile RO access to files in /proc/sys/net/ipv4/
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: jsrain-at-suse.com
          Reporter: petr.vorel-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Not sure if this is an upstream bug (didn't found apparmor-profiles upstream
repo [1]).

Traceroute with -T switch ("TCP mode") tries to read kernel TCP config from
procfs (/proc/sys/net/ipv4/tcp_ecn, /proc/sys/net/ipv4/tcp_sack,
/proc/sys/net/ipv4/tcp_timestamps, /proc/sys/net/ipv4/tcp_window_scaling), see
[2].

/var/log/audit/audit.log (and strace) shows refusing access to:
type=AVC msg=audit(1504892878.377:1284): apparmor="DENIED" operation="open"
profile="/usr/{sbin/traceroute,bin/traceroute.db}"
name="/proc/sys/net/ipv4/tcp_ecn" pid=11955 comm="traceroute"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=AVC msg=audit(1504892878.377:1285): apparmor="DENIED" operation="open"
profile="/usr/{sbin/traceroute,bin/traceroute.db}"
name="/proc/sys/net/ipv4/tcp_sack" pid=11955 comm="traceroute"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=AVC msg=audit(1504892878.377:1286): apparmor="DENIED" operation="open"
profile="/usr/{sbin/traceroute,bin/traceroute.db}"
name="/proc/sys/net/ipv4/tcp_timestamps" pid=11955 comm="traceroute"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=AVC msg=audit(1504892878.377:1287): apparmor="DENIED" operation="open"
profile="/usr/{sbin/traceroute,bin/traceroute.db}"
name="/proc/sys/net/ipv4/tcp_window_scaling" pid=11955 comm="traceroute"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Behaviour with AppArmor disabled:
# traceroute 10.0.0.1 -T
traceroute to 10.0.0.1 (10.0.0.1), 30 hops max, 60 byte packets
 1  10.0.0.1 (10.0.0.1)  0.012 ms  0.002 ms  0.002 ms

# traceroute fd00:1:1:1::1  -T
traceroute to fd00:1:1:1::1 (fd00:1:1:1::1), 30 hops max, 80 byte packets
 1  fd00:1:1:1::1 (fd00:1:1:1::1)  0.020 ms  0.007 ms  0.004 ms

Behaviour with AppArmor enabled:
# traceroute 10.0.0.1 -T
traceroute to 10.0.0.1 (10.0.0.1), 30 hops max, 44 byte packets
 1  10.0.0.1 (10.0.0.1)  0.013 ms  0.003 ms  0.004 ms
=> NOTE: 44 byte vs 60 byte

# traceroute fd00:1:1:1::1  -T
traceroute to fd00:1:1:1::1 (fd00:1:1:1::1), 30 hops max, 64 byte packets
 1  fd00:1:1:1::1 (fd00:1:1:1::1)  0.035 ms  0.005 ms  0.004 ms
=> NOTE: 64 byte vs. 80 byte

I'm not sure, if this is a real problem. I found this problem with LTP test
script [3].

[1] http://wiki.apparmor.net/index.php/Profile_repo
[2]
http://sources.debian.net/src/traceroute/1:2.1.0-2/traceroute/mod-tcp.c/#L255
(traceroute doesn't have public SCM, this is for next version, this part of the
code is the same)
[3]
https://github.com/linux-test-project/ltp/blob/master/testcases/network/traceroute/traceroute01.sh


body:
--1504912477.8c5aB0ff1.28557
Date: Fri, 8 Sep 2017 23:14:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057928

            Bug ID: 1057928
           Summary: certbot missing in Backports
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-12-SP3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: chris-at-computersalat.de
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

Is it possible to have certbot in Backports ?

summary: certbot missing in Backports


body:
--1504912840.bad4FEca1.31217
Date: Fri, 8 Sep 2017 23:20:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057930

            Bug ID: 1057930
           Summary: fail2ban missing in Backports
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-12-SP3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: chris-at-computersalat.de
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

is it possible to have fail2ban in Backports ?

summary: fail2ban missing in Backports


body:
--1504917401.C1f5acDc1.9031
Date: Sat, 9 Sep 2017 00:36:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057937

            Bug ID: 1057937
           Summary: package util-linux: installation error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PC
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

After a standard installation, I found this error in /var/log/zypp/history:

# 2017-09-07 15:52:24 util-linux-2.30-3.5.x86_64.rpm installed ok
# Additional rpm output:
# warning: group tty does not exist - using root
# warning: group tty does not exist - using root
# /usr/bin/wall: unknown group tty
# /usr/bin/write: unknown group tty
#
2017-09-07
15:52:24|install|util-linux|2.30-3.5|x86_64||openSUSE-20170904-0|ae67f71ddbfe3cef5f31e8251e0b8e528fa0b6fb|

The problem is that util-linux is installed before system-group-hardware and at
that time the group tty is not defined yet.

A possible fix is to add this line in util-linux.spec:

Requires: system-group-hardware

I cannot test the fix myself because I'm not able to build util-linux on my PC.

pkgs: system-users util-linux

summary: package util-linux: installation error


body:
--1505008034.385d00.15283
Date: Sun, 10 Sep 2017 01:47:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057965

            Bug ID: 1057965
           Summary: graphics/blender: No audio devices with system audaspace
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: davejplater-at-gmail.com
          Reporter: 9-at-cirno.systems
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

When Blender is built with system audaspace (like it is done currently), it
does not show any audio devices. In addition, using the -setaudio option to
force a backend and then opening the user preferences dialog results in a
segfault.

Building with internal audaspace fixes this.

pkgs: audaspace blender


--1505014551.8f8Ad8eB0.24682
Date: Sun, 10 Sep 2017 03:35:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057966

            Bug ID: 1057966
           Summary: undefined rpm macro %distribution cause build failure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I use build to create the qemu rpm, the build fails with the following
error message:

[   26s] (cd /home/abuild/rpmbuild/BUILD/qemu-2.9.0; printf '#define
QEMU_PKGVERSION '; if test -n "(%{distribution})"; then printf
'"(%{distribution})"\n'; else if test -d .git; then printf '" ('; git describe
--match 'v*' 2>/dev/null | tr -d '\n'; if ! git diff-index --quiet HEAD
&>/dev/null; then printf


--1505036792.35Da0.30582
Date: Sun, 10 Sep 2017 09:46:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1057971

            Bug ID: 1057971
           Summary: editors/emacs: Bug: XLIB_SKIP_ARGB_VISUALS crashes KDE applications
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: werner-at-suse.com
          Reporter: psychonaut-at-nothingisreal.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

The openSUSE package of Emacs installs a custom wrapper script, named emacs.sh
before installation. This wrapper script sets the environment variable
XLIB_SKIP_ARGB_VISUALS.  When Emacs is invoked through this wrapper in Plasma
5, and then used to launch KDE applications such as Okular or KWrite, then
those applications segfault as soon as a pull-down menu is invoked.

This is probably a bug in KDE and/or Qt.  See the upstream KDE report:
<https://bugs.kde.org/show_bug.cgi?id=384540>

Until that bug is fixed, a workaround might be for openSUSE's distribution of
Emacs to stop setting this environment variable.  Is there an important reason
why it is being set?  That is, is it supposed to be working around some other
critical bug?