--===============4784998874320802420==
Content-Type: multipart/alternative; boundary="1608649703.7776fc0.30824";
 charset="UTF-8"

--1608649703.7776fc0.30824
Date: Tue, 22 Dec 2020 15:08:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180298

            Bug ID: 1180298
           Summary: VUL-0: CVE-2020-35605: kitty: RCE because of filename containing special characters
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/273856/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1910073

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows
remote attackers to execute arbitrary code because a filename containing
special characters can be included in an error message.

Reference:
https://github.com/kovidgoyal/kitty/issues/3128

Upstream patch:
https://github.com/kovidgoyal/kitty/commit/82c137878c2b99100a3cdc1c0f0efea069313901

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1910073
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35605
https://github.com/kovidgoyal/kitty/commit/82c137878c2b99100a3cdc1c0f0efea069313901
https://github.com/kovidgoyal/kitty/issues/3128


body:
Build Identifier:

The problem appears to be with package libdebuginfod1-0.182-2.1.x86_64

It introduces the file "/etc/profile.d/debuginfod.csh" which produces an error
during shell initialization, so that startup scripts are not properly run.

Workaround: chmod +t /etc/profile.d/debuginfod.csh

This makes sure that the file is not used in csh startup.

Current content of file:
 ----

setenv DEBUGINFOD_URLS "$DEBUGINFOD_URLS "
 ----

Suggested alternative content for file:
 ----

if ( $?DEBUGINFOD_URLS ) then
    setenv DEBUGINFOD_URLS "$DEBUGINFOD_URLS "
endif
 ----

This change avoids evaluating an undefined variable.

Reproducible: Always

summary: Tumbleweed 20201221 breaks "csh"


--===============6845036736725216047==
Content-Type: multipart/alternative; boundary="1608830447.ccf2F40.30354";
 charset="UTF-8"

--1608830447.ccf2F40.30354
Date: Thu, 24 Dec 2020 17:20:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180339

            Bug ID: 1180339
           Summary: dnf default configuration is missing allow_vendor_change setting
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tux93-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The currently shipped default configuration for dnf is missing the
allow_vendor_change setting, leading this warning when using dnf:
    allow_vendor_change is disabled. This option is currently not supported for
downgrade and distro-sync commands


body:
--===============6773152171863002930==
Content-Type: multipart/alternative; boundary="1608888565.ffcE40.26166";
 charset="UTF-8"

--1608888565.ffcE40.26166
Date: Fri, 25 Dec 2020 09:29:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180352

            Bug ID: 1180352
           Summary: Download manager KGet does not start
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Jump 15.2.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: arbichev-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 844704
  --> http://bugzilla.opensuse.org/attachment.cgi?id=844704&action=edit
Screenshot.

The download manager KGet does not start. When trying to start from the
terminal, the following message is displayed (see screenshot).

summary: Download manager KGet does not start


body:
--===============2720662033728467292==
Content-Type: multipart/alternative; boundary="1608893146.D7d50.993";
 charset="UTF-8"

--1608893146.D7d50.993
Date: Fri, 25 Dec 2020 10:45:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180353

            Bug ID: 1180353
           Summary: etags: Segmentation fault
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ishii.hironobu-at-jp.fujitsu.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

While making TAGS for upstream linux kernel, etags command aborted with
segmentation fault. I think it was caused by too much recursion in
put_entries().

I assume it is same with following bug report.
https://lists.gnu.org/archive/html/bug-gnu-emacs/2016-08/msg00672.html

And I believe that following commit will solve this issue.
https://github.com/emacs-mirror/emacs/commit/6d8144a2abb1c37982d82e32c68ab5115aca792c

(gdb) bt
#0  0x00007f34e192fd02 in _IO_new_file_xsputn (f=0x18d3c60, data=0x4159ed, n=0)
    at fileops.c:1272
#1  0x00007f34e1902d9b in _IO_vfprintf_internal (s=s@entry=0x18d3c60,
    format=format@entry=0x4159ed "%d,", ap=ap@entry=0x7ffc6eb07590)
    at vfprintf.c:1328
#2  0x00007f34e19bbee6 in ___fprintf_chk (fp=0x18d3c60, flag=flag@entry=1,
    format=format@entry=0x4159ed "%d,") at fprintf_chk.c:35
#3  0x000000000040cbb5 in fprintf (__fmt=0x4159ed "%d,",
    __stream=<optimized out>) at /usr/include/bits/stdio2.h:97
#4  put_entries (np=0x2be9920) at etags.c:2236
#5  0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#6  put_entries (np=0x2be9870) at etags.c:2283
#7  0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#8  put_entries (np=0x2be97c0) at etags.c:2283
#9  0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#10 put_entries (np=0x2be9710) at etags.c:2283
#11 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#12 put_entries (np=0x2be9660) at etags.c:2283
#13 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#14 put_entries (np=0x2be95b0) at etags.c:2283
#15 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#16 put_entries (np=0x2be9500) at etags.c:2283
#17 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
  .
  .
  .
#45273 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45274 put_entries (np=0x28a7840) at etags.c:2283
#45275 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45276 put_entries (np=0x28a77c0) at etags.c:2283
#45277 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45278 put_entries (np=0x28a7730) at etags.c:2283
#45279 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45280 put_entries (np=0x28a76a0) at etags.c:2283
#45281 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45282 put_entries (np=0x28a7610) at etags.c:2283
#45283 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45284 put_entries (np=0x28a7580) at etags.c:2283
#45285 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45286 put_entries (np=0x28a74f0) at etags.c:2283
#45287 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
#45288 put_entries (np=0x28a7470) at etags.c:2283
#45289 0x000000000040cbe0 in put_entries (np=<optimized out>) at etags.c:2209
^C#45290 put_entries (np=0x28a73f0Quit

summary: etags: Segmentation fault


body:
--===============5846755605438920426==
Content-Type: multipart/alternative; boundary="1608916369.8CF6EE480.12833";
 charset="UTF-8"

--1608916369.8CF6EE480.12833
Date: Fri, 25 Dec 2020 17:12:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180359

            Bug ID: 1180359
           Summary: missing bz2 dependency for libboost_iostream1_75_0-devel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the 1.75 update, heaptrack fails to build with:

/usr/lib64/gcc/x86_64-suse-linux/10/../../../../x86_64-suse-linux/bin/ld:
cannot find -lbz2

the link dependency comes from
/usr/lib64/cmake/boost_iostreams-1.75.0/libboost_iostreams-variant-shared.cmake:

set_property(TARGET Boost::iostreams APPEND PROPERTY INTERFACE_LINK_LIBRARIES
    "$<$<CONFIG:release>:bz2;z>")

The requirement is not detected by the post-build checks.

pkgs: boost orthanc orthanc-gdcm


body:
--===============4789532031199425200==
Content-Type: multipart/alternative; boundary="1609024730.AA1FC75a0.2188";
 charset="UTF-8"

--1609024730.AA1FC75a0.2188
Date: Sat, 26 Dec 2020 23:18:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180377

            Bug ID: 1180377
           Summary: borgbackup undefined symbol: PyFPE_jbuf
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jonathan.b.wiebe-at-protonmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

My apologies if I am misfiling this. It is my first bug report for OpenSUSE.

I updated my system this afternoon using the commands:
sudo zypper patch
sudo zypper update

After doing this I rebooted and my backup application (vorta) auto-started as
usual but immediately exited.

Looking a bit deeper I found the the underlying error was with borgbackup
(which vorta uses as a backend).

Here is the error I get when running the command 'borg' manually:

Traceback (most recent call last):
  File "/usr/lib64/python3.6/site-packages/borg/archiver.py", line 38, in
<module>
    from . import helpers
  File "/usr/lib64/python3.6/site-packages/borg/helpers.py", line 75, in
<module>
    import borg.crypto.low_level
ImportError:
/usr/lib64/python3.6/site-packages/borg/crypto/low_level.cpython-36m-x86_64-linux-gnu.so:
undefined symbol: PyFPE_jbuf

I get this error even when running 'borg --version".

Current versions taken from zypper info borgbackup:

Information for package borgbackup:
-----------------------------------
Repository     : Main Repository
Name           : borgbackup
Version        : 1.1.13-lp152.1.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 3.6 MiB
Installed      : Yes
Status         : up-to-date
Source package : borgbackup-1.1.13-lp152.1.1.src
Summary        : Deduplicating backup program with compression and
authenticated encryption

And zypper info python3:

Repository     : Main Update Repository
Name           : python3
Version        : 3.6.12-lp152.4.12.2
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 141.3 KiB
Installed      : Yes (automatically)
Status         : up-to-date
Source package : python3-3.6.12-lp152.4.12.2.src
Summary        : Python 3 Interpreter

Please let me know if I can provide any additional information to help in
tracking down this issue.

summary: borgbackup undefined symbol: PyFPE_jbuf


--===============4208117023584050290==
Content-Type: multipart/alternative; boundary="1609151607.cfCceA0.7206";
 charset="UTF-8"

--1609151607.cfCceA0.7206
Date: Mon, 28 Dec 2020 10:33:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180399

            Bug ID: 1180399
           Summary: VUL 0: CVE-2020-35730: roundcubemail:  cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: All
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: lars.vogdt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Roundcube developers released security updates to the stable version 1.4 and
the LTS versions 1.3 and 1.2 of Roundcube Webmail. They all contain fixes to a
recently reported stored XSS vulnerability.

https://roundcube.net/news/2020/12/27/security-updates-1.4.10-1.3.16-and-1.2.13

openSUSE Leap 15.1 and 15.2 contain the vulnerable 1.3.15 version.

I already updated the package in obs://server:php:applications to 1.4.10, so
this should fix Tumbleweed (via SR#858985) in a few hours.

Maintenance updates for the packages in 15.1 and 15.2 will come in a few
minutes.


--===============1258901461666484099==
Content-Type: multipart/alternative; boundary="1609231216.47A2dF0.15391";
 charset="UTF-8"

--1609231216.47A2dF0.15391
Date: Tue, 29 Dec 2020 08:40:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180429

            Bug ID: 1180429
           Summary: xorg-cf-files-1.0.6-lp152.3.2.noarch provides defines that are deprecated
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dieter.jurzitza@t-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When building tgif that in turn is using xmkmf it shows that defines get
propagated to the Makefile that should not be there any more.
That said xmkmf takes the following values out of
/usr/share/X11/config/linux.cf:

 -D_BSD_SOURCE -D_SVID_SOURCE

what should not be used any more and should (according to the warning messages
from gcc) be replaced by:
 -D_DEFAULT_SOURCE

As this is provided by the xorg-cf-files package as listed above I'd consider
this a bug.


--1609382265.E2cac60.20836
Date: Thu, 31 Dec 2020 02:37:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180469

            Bug ID: 1180469
           Summary: Steam should recommend steamtricks instead of having a hard dependency
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dlrobin874-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I understand at one point Steam needed a lot of massaging to get it to work on
non-Ubuntu distros but lately it seems to be much less annoying.

Steamtricks doesn't seem to be getting much attention upstream anymore, and so
far for me Steam has been working fine without it (by locking steamtricks and
telling zypper to break Steam's dependencies).

Since openSUSE defaults to installing recommends by default moving to a
recommended package, the default behavior wouldn't change, but it would allow
users that would rather not use Steamtricks to do that easily.


--1609404706.DDAd5e310.29241
Date: Thu, 31 Dec 2020 08:51:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180473

            Bug ID: 1180473
           Summary: [Build 20201230] postfix has invalid default config
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1536548/modules/mail
                    server_setup/steps/118
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit
fails in
[mailserver_setup](https://openqa.opensuse.org/tests/1536548/modules/mailserver_setup/steps/118)

There seems to be an inalid configuration, which makes the mailserver tests
fail:

cpt to: recipient-at-testdomain.com[ 1277.455266] postfix/trivial-rewrite[8468]:
warning: hash:/etc/postfix/virtual is unavailable. unsupported dictionary type:
hash
[ 1277.521849] postfix/trivial-rewrite[8468]: warning: virtual_alias_domains:
hash:/etc/postfix/virtual: table lookup problem
[ 1277.523528] postfix/trivial-rewrite[8468]: warning:
hash:/etc/postfix/transport is unavailable. unsupported dictionary type: hash

451 4.3.0 <sender-at-testdomain.com>: Temporary lookup failure

[ 1277.526363] postfix/trivial-rewrite[8468]: warning:
hash:/etc/postfix/transport lookup error for "recipient-at-testdomain.com"
[ 1277.528025] postfix/trivial-rewrite[8468]: warning: transport_maps lookup
failure
[ 1277.529311] postfix/trivial-rewrite[8468]: warning:
hash:/etc/postfix/virtual is unavailable. unsupported dictionary type: hash
[ 1277.531013] postfix/trivial-rewrite[8468]: warning: virtual_alias_domains:
hash:/etc/postfix/virtual: table lookup problem
[ 1277.532660] postfix/trivial-rewrite[8468]: warning:
hash:/etc/postfix/transport is unavailable. unsupported dictionary type: hash
[ 1277.534399] postfix/trivial-rewrite[8468]: warning:
hash:/etc/postfix/transport lookup error for "sender-at-testdomain.com"
[ 1277.536033] postfix/trivial-rewrite[8468]: warning: transport_maps lookup
failure

## Test suite description
Maintainer: llzhao-at-suse.de.
Test AppArmor profiles with an existing disk image.

## Reproducible

Fails since (at least) Build
[20201230](https://openqa.opensuse.org/tests/1536094)

## Expected result

Last good: [20201229](https://openqa.opensuse.org/tests/1534746) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=apparmor_profile&version=Tumbleweed)


--1609576034.7fFbb20.13255
Date: Sat, 2 Jan 2021 08:27:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180491

            Bug ID: 1180491
           Summary: "Panic on CPU 0: IO-APIC + timer doesn't work!"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Xen
          Assignee: xen-bugs-at-suse.de
          Reporter: opensuse-at-pohw.nl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 844778
  --> http://bugzilla.opensuse.org/attachment.cgi?id=844778&action=edit
Screen capture upon boot

Just installed Leap 15.2 + Xen on my brand new Odroid-H2+.
After selecting Xen from the boot menu, the boot processes is halted with the
error message "Panic on CPU 0: IO-APIC + timer doesn't work!". Then it reboots
after 5 seconds.

I've tried the following boot params to no avail: noapic,
acpi_skip_timer_override.


--1609598993.a6fbF1B0.17540
Date: Sat, 2 Jan 2021 14:49:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180492

            Bug ID: 1180492
           Summary: X11:wxWidgets/wxWidgets-3_0: Ugrade to 3.0.5
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: sbrabec-at-suse.com
          Reporter: nahkaz-at-gmail.com
        QA Contact: screening-team-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Current package in devel repo is outdated as per the official WxWidgets
website.
Latest stable release is version 3.0.5 and it was released in 2020-04-25

http://www.wxwidgets.org/news/2020/04/wxwidgets-3.0.5-released/


--1609660095.87466eD20.2944
Date: Sun, 3 Jan 2021 07:48:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180496

            Bug ID: 1180496
           Summary: TLP package installs bash completions for tlp-rdw, even though tlp-rdw belongs to a different package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: philipp.reichmuth-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

See summary: the tlp package installs bash completions at
/usr/share/bash-completion/completions/tlp-rdw, even though tlp-rdw is a
separate package.

The bash completions for tlp-rdw should not be part of the tlp package, but of
the tlp-rdw package.


body:
--1609698043.Ff7F00.1353
Date: Sun, 3 Jan 2021 18:20:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180501

            Bug ID: 1180501
           Summary: frequent sshd coredumps
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: paka-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 844783
  --> http://bugzilla.opensuse.org/attachment.cgi?id=844783&action=edit
sshd coredump file

sshd frequently coredumps, ie: several times a day
and has for several months
current tw version 20210101

12:13 crash: ~ # coredumpctl info 24778 -o sshd.coredump.txt
PID: 24778 (sshd)
UID: 1000 (paka)
GID: 100 (users)
Signal: 11 (SEGV)
Timestamp: Sun 2021-01-03 10:49:57 EST (1h 23min ago)
Command Line: sshd: paka@notty
Executable: /usr/sbin/sshd
Control Group: /user.slice/user-1000.slice/session-27.scope
Unit: session-27.scope
Slice: user-1000.slice
Session: 27
Owner UID: 1000 (paka)
Boot ID: 6daaababe19d42638b365590e4f26aee
Machine ID: 3384cbc37a574dcc99445aa25cd2db04
Hostname: crash
Storage:
/var/lib/systemd/coredump/core.sshd.1000.6daaababe19d42638b365590e4f26aee.24778.16096
88997000000.zst
Message: Process 24778 (sshd) of user 1000 dumped core.

Stack trace of thread 24778:
#0  0x000055d628693563 cipher_free (sshd + 0x4e563)
#1  0x000055d628695b67 ssh_packet_close_internal (sshd + 0x50b67)
#2  0x000055d628655cbf main (sshd + 0x10cbf)
#3  0x00007f2cae063152 __libc_start_main (libc.so.6 + 0x28152)
#4  0x000055d62865624e _start (sshd + 0x1124e)

coredump attached
core.sshd.1000.6daaababe19d42638b365590e4f26aee.24778.1609688997000000.zst

summary: frequent sshd coredumps


--1609758199.Eb64EB25.19876
Date: Mon, 4 Jan 2021 11:03:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180522

            Bug ID: 1180522
           Summary: pidgin crashes on startup in GStreamer Vulkan routines
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: tserong-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This appears to be identical to a recent Fedora bug
(https://bugzilla.redhat.com/show_bug.cgi?id=1911130), but is happening on my
openSUSE Tumbleweed desktop since I `zypper dup`d earlier today.

> pidgin
Pidgin 2.14.1 has segfaulted and attempted to dump a core file.
This is a bug in the software and has happened through
no fault of your own.

If you can reproduce the crash, please notify the developers
by reporting a bug at:
http://developer.pidgin.im/simpleticket/

Please make sure to specify what you were doing at the time
and post the backtrace from the core file.  If you do not know
how to get the backtrace, please read the instructions at
http://developer.pidgin.im/wiki/GetABacktrace
Aborted (core dumped)

gdb backtrace says:

(gdb) bt
#0  0x0000000000000000 in  ()
#1  0x00007ffff33df1bd in gst_vulkan_physical_device_fill_info.constprop.0
(device=0x555555d1aac0 [GstVulkanPhysicalDevice],
error=error@entry=0x7fffffffb1c0) at
../gst-libs/gst/vulkan/gstvkphysicaldevice.c:877
#2  0x00007ffff33d1dfb in gst_vulkan_physical_device_constructed
(object=0x555555d1aac0 [GstVulkanPhysicalDevice]) at
../gst-libs/gst/vulkan/gstvkphysicaldevice.c:205
#3  0x00007ffff715f9d7 in g_object_new_internal
(class=class@entry=0x555555d1a120, params=params@entry=0x7fffffffb320,
n_params=n_params@entry=2) at ../gobject/gobject.c:1979
#4  0x00007ffff7161614 in g_object_new_valist (object_type=<optimized out>,
first_property_name=first_property_name@entry=0x7ffff33e2574 "instance",
var_args=var_args@entry=0x7fffffffb470) at ../gobject/gobject.c:2264
#5  0x00007ffff7161979 in g_object_new (object_type=<optimized out>,
first_property_name=first_property_name@entry=0x7ffff33e2574 "instance") at
../gobject/gobject.c:1782
#6  0x00007ffff33d5ce9 in gst_vulkan_physical_device_new
(instance=instance@entry=0x555555a7d870 [GstVulkanInstance],
device_index=device_index@entry=0) at
../gst-libs/gst/vulkan/gstvkphysicaldevice.c:109
#7  0x00007ffff353821e in gst_vulkan_device_provider_probe (provider=<optimized
out>) at ../ext/vulkan/vkdeviceprovider.c:276
#8  0x00007ffff72087be in gst_device_provider_start (provider=0x555555a129a0
[GstVulkanDeviceProvider]) at ../gst/gstdeviceprovider.c:474
#9  0x00007ffff721c774 in gst_device_monitor_start (monitor=0x55555580d580
[GstDeviceMonitor]) at ../gst/gstdevicemonitor.c:515
#10 0x00007ffff74775b2 in purple_media_manager_init_device_monitor
(manager=0x5555556e89d0 [PurpleMediaManager]) at mediamanager.c:2320
#11 purple_media_manager_init (media=0x5555556e89d0 [PurpleMediaManager]) at
mediamanager.c:266
#12 0x00007ffff7179738 in g_type_create_instance (type=0x55555577d940
[PurpleMediaManager]) at ../gobject/gtype.c:1867
#13 0x00007ffff715f8f5 in g_object_new_internal
(class=class@entry=0x555555808d30, params=params@entry=0x0,
n_params=n_params@entry=0) at ../gobject/gobject.c:1939
#14 0x00007ffff7160d2d in g_object_new_with_properties
(object_type=0x55555577d940 [PurpleMediaManager], n_properties=0,
names=names@entry=0x0, values=values@entry=0x0) at ../gobject/gobject.c:2107
#15 0x00007ffff71619a1 in g_object_new (object_type=<optimized out>,
first_property_name=first_property_name@entry=0x0) at ../gobject/gobject.c:1779
#16 0x00007ffff7471d2a in purple_media_manager_get () at mediamanager.c:335
#17 0x00007ffff4b43613 in jabber_do_init () at jabber.c:3924
#18 jabber_plugin_init (plugin=0x5555557b4600) at jabber.c:3980
#19 0x00007ffff5039329 in load_plugin (plugin=<optimized out>) at libxmpp.c:142
#20 0x00007ffff747e175 in purple_plugin_load (plugin=0x5555557b4600) at
plugin.c:606
#21 purple_plugin_load (plugin=plugin@entry=0x5555557b4600) at plugin.c:505
#22 0x00007ffff747f528 in purple_plugins_probe (ext=0x7ffff74e586e "so") at
plugin.c:1419
#23 purple_plugins_probe (ext=0x7ffff74e586e "so") at plugin.c:1351
#24 0x00007ffff745e468 in purple_core_init (ui=ui@entry=0x55555562b070
"gtk-gaim") at core.c:149
#25 0x0000555555595b54 in main (argc=<optimized out>, argv=<optimized out>) at
gtkmain.c:826

Note that the Fedora bug says this problem was actually introduced by Mesa
20.3.x, but allegedly works with Mesa 20.2.3.  On my system I have Mesa 20.2.4.
 Maybe that's when the problem was introduced?  I don't know, this is really
not my area of expertise:

> rpm -q Mesa
Mesa-20.2.4-269.1.x86_64


body:
--1609767219.D5c5620.19641
Date: Mon, 4 Jan 2021 13:33:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180528

            Bug ID: 1180528
           Summary: rubygems have timestamps
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Ruby
          Assignee: mrueckert-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: coolo-at-suse.com
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
rubygem-json

and other gem packages no more build reproducibly.

-/usr/lib64/ruby/gems/3.0.0/gems/json-2.5.1/ext/json/ext/generator/.gem.20210104
-1363-wlawvk 0 (none) 40755 root root 0 4294967295
+/usr/lib64/ruby/gems/3.0.0/gems/json-2.5.1/ext/json/ext/generator/.gem.20360207
-1333-4whyd2 0 (none) 40755 root root 0 4294967295

There is a timestamp, PID and random
in a file that probably does not need to be there.

summary: rubygems have timestamps


--1609803432.FE3A1CD0.5523
Date: Mon, 4 Jan 2021 23:37:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180549

            Bug ID: 1180549
           Summary: /usr/lib/tmpfiles.d/fetchmail.conf:1: Failed to resolve group 'fetchmail'.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: gp-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I just updated a Tumbleweed system and noticed the following:

Installing: systemd-246.9-1.1.x86_64 ....[done]
Additional rpm output:
/usr/lib/tmpfiles.d/fetchmail.conf:1: Failed to resolve group 'fetchmail'.

Additional information:

> id fetchmail
uid=458(fetchmail) gid=2(daemon) groups=2(daemon)
> grep fetchmail /etc/group
>

That is, my system does not have a group named fetchmail, but a user.


--1609849031.f51fB67C0.24061
Date: Tue, 5 Jan 2021 12:17:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180570

            Bug ID: 1180570
           Summary: VUL-0: CVE-2020-35678: python-autobahn: allows redirect header injection
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/274062/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: steven.kowalik-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: dmueller-at-suse.com
          Found By: Security Response Team
           Blocker: ---

rh#1911314

Autobahn|Python before 20.12.3 allows redirect header injection.

Reference and upstream patch:
https://github.com/crossbario/autobahn-python/pull/1439

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1911314
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35678
https://access.redhat.com/security/cve/CVE-2020-35678
https://github.com/crossbario/autobahn-python/pull/1439
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35678
https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3
https://github.com/crossbario/autobahn-python
https://pypi.org/project/autobahn/20.12.3/
https://autobahn.readthedocs.io/en/latest/changelog.html


--1609874545.EdAfa0.21788
Date: Tue, 5 Jan 2021 19:22:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180593

            Bug ID: 1180593
           Summary: AUDIT-0: [brltty]: [/usr/share/polkit-1/rules.d/org.a11y.brlapi.rules]
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
               URL: https://build.opensuse.org/request/show/860419
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://build.opensuse.org/request/show/860419

brltty.x86_64: E: polkit-unauthorized-rules (Badness: 10000)
/usr/share/polkit-1/rules.d/org.a11y.brlapi.rules


--1609935214.FaCcd1.1285
Date: Wed, 6 Jan 2021 12:13:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180610

            Bug ID: 1180610
           Summary: perf does not load symbols from libantlr4
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mliska-at-suse.cz
          Found By: ---
           Blocker: ---

1) install libantlr4-runtime-devel and perf.
2)

3) cat > main.cpp <<EOF
#include <cstdio>
#include <antlr4-runtime.h>

int main()
{
        for (int a = 0; a < 10000000; a++)
                antlr4::ANTLRInputStream input("/dev/null");
}
EOF

4) cat > Makefile <<EOF
CXXFLAGS=-g -Wall -I/usr/include/antlr4-runtime -Wno-attributes -mfentry
LDLIBS=-lantlr4-runtime

all: main
EOF

5) make && perf record -g ./main

6) perf report -g

7) symbols of antlr library are shown in hexa (not resolved), despite debuginfo
is installed

Perf fails here:
https://github.com/torvalds/linux/blob/9f1abbe97c08ba7ed609791627533a805a1b2c66/tools/perf/util/symbol-elf.c#L1229

It walks through all symbols in .symtab of:
/usr/lib/debug/usr/lib64/libantlr4-runtime.so.4.8-4.8-1.4.x86_64.debug

and resolves the symbol addresses into names there. First, it obtains the
section a symbol is in


body:
--1609941693.da6C0.24432
Date: Wed, 6 Jan 2021 14:01:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180614

            Bug ID: 1180614
           Summary: GIMP GEGL operation missing!
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: arcesson-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 844888
  --> http://bugzilla.opensuse.org/attachment.cgi?id=844888&action=edit
Output of gimp -v

GIMP in version 2.10.22-3.1 isn't starting with error

"GIMP requires the GEGL operation "gegl:introspect". This operation cannot be
found. Check your GEGL install and ensure it has been compiled with any
dependencies required for GIMP."

summary: GIMP GEGL operation missing!


--1610009186.c1DCa0.27235
Date: Thu, 7 Jan 2021 08:46:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180645

            Bug ID: 1180645
           Summary: VUL-0: chromium: Update to 87.0.4280.141
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: atoptsoglou-at-suse.com, meissner-at-suse.com,
                    security-team-at-suse.de
        Depends on: 1179576
          Found By: ---
           Blocker: ---

[$20000][1148749] High CVE-2021-21106: Use after free in autofill. Reported by
Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on
2020-11-13

[$20000][1153595] High CVE-2021-21107: Use after free in drag and drop.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2020-11-30

[$20000][1155426] High CVE-2021-21108: Use after free in media. Reported by
Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-04

[$15000][1152334] High CVE-2021-21109: Use after free in payments. Reported by
Rong Jian and Guang Gong of 360 Alpha Lab on 2020-11-24

[$15000][1152451] High CVE-2021-21110: Use after free in safe browsing.
Reported by Anonymous on 2020-11-24

[$7500][1149125] High CVE-2021-21111: Insufficient policy enforcement in WebUI.
Reported by Alesandro Ortiz on 2020-11-15

[$7500][1151298] High CVE-2021-21112: Use after free in Blink. Reported by
YoungJoo Lee(@ashuu_lee) of Raon Whitehat on 2020-11-20

[$6000][1155178] High CVE-2021-21113: Heap buffer overflow in Skia. Reported by
tsubmunu on 2020-12-03

[$N/A][1148309] High CVE-2020-16043: Insufficient data validation in
networking. Reported by Samy Kamkar, Ben Seri at Armis, Gregory Vishnepolsky at
Armis on 2020-11-12

[$N/A][1150065] High CVE-2021-21114: Use after free in audio. Reported by Man
Yue Mo of GitHub Security Lab on 2020-11-17

[$TBD][1157790] High CVE-2020-15995: Out of bounds write in V8. Reported by
Bohan Liu (@P4nda20371774) of Tencent Security Xuanwu Lab on 2020-12-11

[$TBD][1157814] High CVE-2021-21115: Use after free in safe browsing. Reported
by Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-11

[$N/A][1151069] Medium CVE-2021-21116: Heap buffer overflow in audio. Reported
by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-11-19


--1610010787.1e1116A0.29375
Date: Thu, 7 Jan 2021 09:13:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180648

            Bug ID: 1180648
           Summary: VUL-1: CVE-2021-21236: CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/274785/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: toddrme2178-at-gmail.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: dmueller-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2021-21236

CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on
Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial
of
service (REDoS) vulnerability. When processing SVG files, the python package
CairoSVG uses two regular expressions which are vulnerable to Regular
Expression
Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make
cairosvg get stuck processing the file for a very long time. This is fixed in
version 2.5.1. See Referenced GitHub advisory for more information.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-21236
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21236
https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3
https://github.com/Kozea/CairoSVG/releases/tag/2.5.1
https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf
https://pypi.org/project/CairoSVG/


--1610024176.81F4Be10.11341
Date: Thu, 7 Jan 2021 12:56:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180665

            Bug ID: 1180665
           Summary: VUL-0: segv_handler: various security issues
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This old piece of code taken from samba / junkcode is designed to run as an
LD_PRELOAD library but has terrible security. The README provides the example
of installing the library system wide via /etc/ld.so.repload to catch SIGSEGVs
in any program.

However look at the following code:

```
    char progname[100];
    char *p;
    int n;

    n = readlink("/proc/self/exe",progname,sizeof(progname));
    progname[n] = 0;

    p = strrchr(progname, '/');
    *p = 0;

    snprintf(cmd, sizeof(cmd), "backtrace %d > /var/log/segv/segv_%s.%d.out
2>&1",
         (int)getpid(), p+1, (int)getpid());
    system(cmd);
```

So system() is used (the shell) and the program name is part of the output
filename. Thus if I have a funny program name:

root # ./sig\;\ dmesg\;\ segv

Then `dmesg` will be executed as part of the SEGFAULT handling. Normally
`root` shouldn't be executing arbitrarily named programs but still this is not
good.

Also the `backtrace` script called here has issues:

```
PID=$1
TMPFILE=/tmp/gdb.$$
cat << EOF  > $TMPFILE
set height 0
bt full
thread apply all bt full
quit
EOF
gdb -batch -x $TMPFILE --pid $PID < /dev/null 2>&1
/bin/rm -f $TMPFILE
```

The temporary filename /tmp/gdb.$$ is predictable could thus be pre-created by
an unprivileged user. Passing arbitrary commands to a `gdb` shell run by root
this way will probably allow local root escalation pretty much.

Also the directory /var/log/segv used to store the backtraces isn't created by
the segv_handler package. To use this in a system-wide manner also for
non-root programs, the directory would need to have a sticky bit set i.e. mode
1777. This would then allow symlink attacks when a root process segfaults.

I don't think anybody actually uses this package. openSUSE is the only distro
that has this. We should delete it. I will also try to contact the upstream
author from the samba project Andrew Tridgell and ask him to remove or at
least document these issues. I guess this code was never intended to be used
in production.


--1610100378.7765A1.20001
Date: Fri, 8 Jan 2021 10:06:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180689

            Bug ID: 1180689
           Summary: MicroOS defaults to using the SUSE NTP pool
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1545137/modules/ntp_
                    config_settings/steps/1
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

It has to use the opensuse pool instead.

Kubic is affected as well:
https://openqa.opensuse.org/tests/1545143#step/ntp_config_settings/1

Plain Tumbleweed seems to be fine.

## Observation

openQA test in scenario microos-Tumbleweed-DVD-x86_64-microos@64bit fails in
[ntp_config_settings](https://openqa.opensuse.org/tests/1545137/modules/ntp_config_settings/steps/1)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=DVD&machine=64bit&test=microos&version=Tumbleweed)


--1610151858.ab1151610.20483
Date: Sat, 9 Jan 2021 00:24:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180724

            Bug ID: 1180724
           Summary: hplip: hp-doctor crashes if python3-qt4 is not installed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Printing
          Assignee: jsmeix-at-suse.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: jsmeix-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 844961
  --> https://bugzilla.suse.com/attachment.cgi?id=844961&action=edit
PATCH: fix crash in hp-doctor

Traceback (most recent call last):
  File "/usr/bin/hp-doctor", line 297, in <module>
    num_errors, num_warns = dep.validate(DEPENDENCY_RUN_AND_COMPILE_TIME,
False)
  File "/usr/share/hplip/check.py", line 368, in validate
    self.core.dependencies[dep])
  File "/usr/share/hplip/check.py", line 210, in __update_deps_info
    installed_ver = self.core.version_func[deps_info[6]]()
  File "/usr/share/hplip/installer/dcheck.py", line 304, in get_pyQt4_version
    from PyQt4 import QtCore
ImportError: cannot import name 'QtCore'


--1610179122.c118EE60.6119
Date: Sat, 9 Jan 2021 07:58:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180728

            Bug ID: 1180728
           Summary: u-boot-am335xevm-2020.10-8.1.armv7hl: unbootable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: screening-team-bugs-at-suse.de
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I've found that u-boot-am335xevm-2020.10-8.1.armv7hl is currently broken.

Actual behavior:

U-Boot SPL 2020.10 (Jan 04 2021 - 09:39:59 +0000)
Trying to boot from MMC1

U-Boot SPL 2020.10 (Jan 04 2021 - 09:39:59 +0000)
Trying to boot from MMC1

Expected behavior (u-boot v2020.10 build manually using the upstream sources):

U-Boot SPL 2020.10 (Jan 09 2021 - 10:50:33 +0300)
Trying to boot from MMC1

U-Boot 2020.10 (Jan 09 2021 - 10:50:33 +0300)

CPU  : AM335X-GP rev 2.1
Model: TI AM335x BeagleBone Black
DRAM:  512 MiB
WDT:   Started with servicing (60s timeout)
NAND:  0 MiB
MMC:   OMAP SD/MMC: 0, OMAP SD/MMC: 1
Loading Environment from FAT... ** No partition table - mmc 0 **
<ethaddr> not set. Validating first E-fuse MAC
Net:   eth2: ethernet@4a100000, eth3: usb_ether
Hit any key to stop autoboot:  0


--1610272883.ACcfF0A0.32668
Date: Sun, 10 Jan 2021 10:01:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180739

            Bug ID: 1180739
           Summary: profanity: error in whitness themes floods logfiles
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bugzilla-at-singvogel.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In file /usr/share/profanity/themes/whiteness is a typo, which causes profanity
to create a lot of logfiles in $HOME/.local/share/profanity/logs/

Please correct the "e" in /usr/share/profanity/themes/whiteness:
statusbar.active=megenta

to:
statusbar.active=magenta


--1610294785.5cdDD0a60.7095
Date: Sun, 10 Jan 2021 16:06:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180748

            Bug ID: 1180748
           Summary: Can't build DragonFFI, due to missing CMake scripts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: local.tourist.kiev-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

riscv:/root # zypper search clang
Loading repository data...
Reading installed packages...

S | Name                          | Summary                                   |
Type
--+-------------------------------+-------------------------------------------+--------
  | clang                         | CLANG frontend for LLVM                   |
package
  | clang-devel                   | CLANG frontend for LLVM (devel package)   |
package
  | clang-tools                   | Tools for Clang                           |
package
  | clang10                       | CLANG frontend for LLVM                   |
package
  | clang10-devel                 | CLANG frontend for LLVM (devel package)   |
package
  | clang10-doc                   | Documentation for Clang                   |
package
  | clang11                       | CLANG frontend for LLVM                   |
package
  | clang11-devel                 | CLANG frontend for LLVM (devel package)   |
package
  | clang11-doc                   | Documentation for Clang                   |
package
  | clang9                        | CLANG frontend for LLVM                   |
package
  | clang9-devel                  | CLANG frontend for LLVM (devel package)   |
package
  | clang9-doc                    | Documentation for Clang                   |
package
  | icecream-clang-wrappers       | Distributed Compile Wrappers for Clang    |
package
  | libclang10                    | Library files needed for clang            |
package
  | libclang11                    | Library files needed for clang            |
package
  | libclang9                     | Library files needed for clang            |
package
  | python3-clang                 | Python bindings for libclang              |
package
  | texlive-sclang-prettifier     | Prettyprinting SuperCollider source code  |
package
  | texlive-sclang-prettifier-doc | Documentation for texlive-sclang-pretti-> |
package
riscv:/root # zypper install clang11 clang11-devel libclang11
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 26 NEW packages are going to be installed:
  autoconf automake clang-tools clang11 clang11-devel clang11-doc glibc-devel
libLLVM11
  libLTO11 libclang11 libltdl7 libstdc++-devel libstdc++6-devel-gcc10 libtool
  libxcrypt-devel linux-glibc-devel llvm11 llvm11-LTO-devel llvm11-devel
llvm11-doc
  llvm11-gold llvm11-polly llvm11-polly-devel llvm11-vim-plugins m4 site-config

The following 4 recommended packages were automatically selected:
  clang-tools clang11-doc libstdc++-devel llvm11-doc

26 new packages to install.
Overall download size: 65.3 MiB. Already cached: 0 B. After the operation,
additional
320.1 MiB will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving package clang11-doc-11.0.0-8.1.noarch (1/26),   1.0 MiB (  7.5 MiB
unpacked)
Retrieving: clang11-doc-11.0.0-8.1.noarch.rpm
...................................[done]
Retrieving package libLLVM11-11.0.0-8.1.riscv64  (2/26),  18.0 MiB ( 69.0 MiB
unpacked)
Retrieving: libLLVM11-11.0.0-8.1.riscv64.rpm ........................[done (2.2
MiB/s)]
Retrieving package libltdl7-2.4.6-8.2.riscv64    (3/26),  40.0 KiB ( 26.3 KiB
unpacked)
Retrieving: libltdl7-2.4.6-8.2.riscv64.rpm
......................................[done]
Retrieving package libxcrypt-devel-4.4.17-1.1.riscv64
                                                 (4/26),  32.9 KiB ( 31.2 KiB
unpacked)
Retrieving: libxcrypt-devel-4.4.17-1.1.riscv64.rpm
..............................[done]
Retrieving package linux-glibc-devel-5.10-1.1.riscv64
                                                 (5/26),   1.1 MiB (  4.6 MiB
unpacked)
Retrieving: linux-glibc-devel-5.10-1.1.riscv64.rpm ................[done (845.0
KiB/s)]
Retrieving package llvm11-polly-11.0.0-8.1.riscv64
                                                 (6/26),   1.2 MiB (  3.1 MiB
unpacked)
Retrieving: llvm11-polly-11.0.0-8.1.riscv64.rpm .....................[done (1.2
MiB/s)]
Retrieving package llvm11-vim-plugins-11.0.0-8.1.noarch
                                                 (7/26),  78.8 KiB ( 38.2 KiB
unpacked)
Retrieving: llvm11-vim-plugins-11.0.0-8.1.noarch.rpm .............[done (1004.3
KiB/s)]
Retrieving package m4-1.4.18-5.2.riscv64         (8/26), 199.2 KiB (293.5 KiB
unpacked)
Retrieving: m4-1.4.18-5.2.riscv64.rpm
...........................................[done]
Retrieving package site-config-0.2-12.3.riscv64  (9/26),  16.6 KiB ( 21.4 KiB
unpacked)
Retrieving: site-config-0.2-12.3.riscv64.rpm
....................................[done]
Retrieving package llvm11-gold-11.0.0-8.1.riscv64
                                                (10/26), 102.2 KiB ( 90.4 KiB
unpacked)
Retrieving: llvm11-gold-11.0.0-8.1.riscv64.rpm ........................[done
(987 B/s)]
Retrieving package llvm11-11.0.0-8.1.riscv64    (11/26),   3.3 MiB (  9.5 MiB
unpacked)
Retrieving: llvm11-11.0.0-8.1.riscv64.rpm ...........................[done (2.2
MiB/s)]
Retrieving package libclang11-11.0.0-8.1.riscv64
                                                (12/26),  11.0 MiB ( 49.6 MiB
unpacked)
Retrieving: libclang11-11.0.0-8.1.riscv64.rpm .......................[done (1.8
MiB/s)]
Retrieving package libLTO11-11.0.0-8.1.riscv64  (13/26),  92.2 KiB ( 82.6 KiB
unpacked)
Retrieving: libLTO11-11.0.0-8.1.riscv64.rpm
.....................................[done]
Retrieving package glibc-devel-2.32-4.1.riscv64 (14/26), 740.6 KiB (  2.5 MiB
unpacked)
Retrieving: glibc-devel-2.32-4.1.riscv64.rpm
....................................[done]
Retrieving package llvm11-polly-devel-11.0.0-8.1.riscv64
                                                (15/26), 286.7 KiB (  2.2 MiB
unpacked)
Retrieving: llvm11-polly-devel-11.0.0-8.1.riscv64.rpm .............[done (715.4
KiB/s)]
Retrieving package autoconf-2.69-17.2.noarch    (16/26), 708.9 KiB (  2.2 MiB
unpacked)
Retrieving: autoconf-2.69-17.2.noarch.rpm
.......................................[done]
Retrieving package llvm11-doc-11.0.0-8.1.noarch (17/26),   3.1 MiB ( 22.5 MiB
unpacked)
Retrieving: llvm11-doc-11.0.0-8.1.noarch.rpm ........................[done (1.8
MiB/s)]
Retrieving package libstdc++6-devel-gcc10-10.2.1+git1030-1.1.riscv64
                                                (18/26),  13.6 MiB ( 83.9 MiB
unpacked)
Retrieving: libstdc++6-devel-gcc10-10.2.1+git1030-1.1.riscv64.rpm ...[done (2.0
MiB/s)]
Retrieving package automake-1.16.2-1.2.noarch   (19/26), 848.2 KiB (  2.6 MiB
unpacked)
Retrieving: automake-1.16.2-1.2.noarch.rpm ..........................[done (5.1
KiB/s)]
Retrieving package libstdc++-devel-10-3.1.riscv64
                                                (20/26),  12.9 KiB (    0   B
unpacked)
Retrieving: libstdc++-devel-10-3.1.riscv64.rpm
..................................[done]
Retrieving package libtool-2.4.6-8.2.riscv64    (21/26), 809.6 KiB (  4.1 MiB
unpacked)
Retrieving: libtool-2.4.6-8.2.riscv64.rpm
.......................................[done]
Retrieving package clang11-11.0.0-8.1.riscv64   (22/26),   4.0 MiB ( 22.9 MiB
unpacked)
Retrieving: clang11-11.0.0-8.1.riscv64.rpm ..........................[done (1.7
MiB/s)]
Retrieving package llvm11-devel-11.0.0-8.1.riscv64
                                                (23/26),   2.9 MiB ( 17.5 MiB
unpacked)
Retrieving: llvm11-devel-11.0.0-8.1.riscv64.rpm .....................[done (1.7
MiB/s)]
Retrieving package clang-tools-11.0.0-8.1.riscv64
                                                (24/26), 311.7 KiB (719.2 KiB
unpacked)
Retrieving: clang-tools-11.0.0-8.1.riscv64.rpm ......................[done (1.4
MiB/s)]
Retrieving package llvm11-LTO-devel-11.0.0-8.1.riscv64
                                                (25/26),  73.5 KiB ( 27.0 KiB
unpacked)
Retrieving: llvm11-LTO-devel-11.0.0-8.1.riscv64.rpm
.............................[done]
Retrieving package clang11-devel-11.0.0-8.1.riscv64
                                                (26/26),   1.9 MiB ( 15.2 MiB
unpacked)
Retrieving: clang11-devel-11.0.0-8.1.riscv64.rpm ....................[done (1.3
MiB/s)]

Checking for file conflicts:
....................................................[done]
( 1/26) Installing: clang11-doc-11.0.0-8.1.noarch
...............................[done]
( 2/26) Installing: libLLVM11-11.0.0-8.1.riscv64
................................[done]
( 3/26) Installing: libltdl7-2.4.6-8.2.riscv64
..................................[done]
( 4/26) Installing: libxcrypt-devel-4.4.17-1.1.riscv64
..........................[done]
( 5/26) Installing: linux-glibc-devel-5.10-1.1.riscv64
..........................[done]
( 6/26) Installing: llvm11-polly-11.0.0-8.1.riscv64
.............................[done]
( 7/26) Installing: llvm11-vim-plugins-11.0.0-8.1.noarch
........................[done]
( 8/26) Installing: m4-1.4.18-5.2.riscv64
.......................................[done]
( 9/26) Installing: site-config-0.2-12.3.riscv64
................................[done]
(10/26) Installing: llvm11-gold-11.0.0-8.1.riscv64
..............................[done]
(11/26) Installing: llvm11-11.0.0-8.1.riscv64
...................................[done]
Additional rpm output:
update-alternatives: using /usr/bin/llvm-ar-11.0.0 to provide /usr/bin/llvm-ar
(llvm-ar) in auto mode

(12/26) Installing: libclang11-11.0.0-8.1.riscv64
...............................[done]
(13/26) Installing: libLTO11-11.0.0-8.1.riscv64
.................................[done]
(14/26) Installing: glibc-devel-2.32-4.1.riscv64
................................[done]
(15/26) Installing: llvm11-polly-devel-11.0.0-8.1.riscv64
.......................[done]
(16/26) Installing: autoconf-2.69-17.2.noarch
...................................[done]
(17/26) Installing: llvm11-doc-11.0.0-8.1.noarch
................................[done]
(18/26) Installing: libstdc++6-devel-gcc10-10.2.1+git1030-1.1.riscv64
...........[done]
(19/26) Installing: automake-1.16.2-1.2.noarch
..................................[done]
Additional rpm output:
install-info: warning: no info dir entry in
`/usr/share/info/automake-history.info.gz'

(20/26) Installing: libstdc++-devel-10-3.1.riscv64
..............................[done]
(21/26) Installing: libtool-2.4.6-8.2.riscv64
...................................[done]
(22/26) Installing: clang11-11.0.0-8.1.riscv64
..................................[done]
Additional rpm output:
update-alternatives: using /usr/bin/clang-11.0.0 to provide /usr/bin/clang
(clang) in auto mode

(23/26) Installing: llvm11-devel-11.0.0-8.1.riscv64
.............................[done]
(24/26) Installing: clang-tools-11.0.0-8.1.riscv64
..............................[done]
(25/26) Installing: llvm11-LTO-devel-11.0.0-8.1.riscv64
.........................[done]
(26/26) Installing: clang11-devel-11.0.0-8.1.riscv64
............................[done]

riscv:/root # zypper install llvm-devel llvm-gold llvm-polly-devel
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following 4 NEW packages are going to be installed:
llvm-devel llvm-gold llvm-polly llvm-polly-devel

4 new packages to install.
Overall download size: 155.5 KiB. Already cached: 0 B. After the operation,
additional
288.0 B will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving package llvm-gold-11.0.0-1.1.riscv64 (1/4), 38.7 KiB ( 72 B
unpacked)
Retrieving: llvm-gold-11.0.0-1.1.riscv64.rpm
....................................[done]
Retrieving package llvm-polly-11.0.0-1.1.riscv64 (2/4), 39.1 KiB ( 72 B
unpacked)
Retrieving: llvm-polly-11.0.0-1.1.riscv64.rpm
...................................[done]
Retrieving package llvm-devel-11.0.0-1.1.riscv64 (3/4), 38.8 KiB ( 72 B
unpacked)
Retrieving: llvm-devel-11.0.0-1.1.riscv64.rpm .......................[done (5.2
KiB/s)]
Retrieving package llvm-polly-devel-11.0.0-1.1.riscv64
(4/4), 38.8 KiB ( 72 B unpacked)
Retrieving: llvm-polly-devel-11.0.0-1.1.riscv64.rpm
.............................[done]

Checking for file conflicts:
....................................................[done]
(1/4) Installing: llvm-gold-11.0.0-1.1.riscv64
..................................[done]
(2/4) Installing: llvm-polly-11.0.0-1.1.riscv64
.................................[done]
(3/4) Installing: llvm-devel-11.0.0-1.1.riscv64
.................................[done]
(4/4) Installing: llvm-polly-devel-11.0.0-1.1.riscv64
...........................[done]

riscv:/root # zypper install cmake cmake-full cmake-mini extra-cmake-modules
gccmakedep
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides this-is-only-for-build-envs needed by
cmake-mini-3.19.2-1.1.riscv64
Solution 1: do not install cmake-mini-3.19.2-1.1.riscv64
Solution 2: break cmake-mini-3.19.2-1.1.riscv64 by ignoring some of its
dependencies

Choose from above solutions by number or cancel [1/2/c/d/?] (c): y
: Invalid answer 'y'.
[1/2/c/d/?] (c): 1
Resolving dependencies...
Resolving package dependencies...

The following 28 NEW packages are going to be installed:
binutils cmake cmake-full cmake-man cpp cpp10 extra-cmake-modules
extra-cmake-modules-doc gcc gcc-c++ gcc10 gcc10-c++ gccmakedep
hicolor-icon-theme
hicolor-icon-theme-branding-openSUSE kf5-filesystem libarchive13 libasan6
libctf-nobfd0 libctf0 libisl22 libjsoncpp24 libmpc3 libmpfr6 librhash0
libubsan1
libuv1 make

The following recommended package was automatically selected:
extra-cmake-modules-doc

28 new packages to install.
Overall download size: 52.0 MiB. Already cached: 0 B. After the operation,
additional
174.2 MiB will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving package cmake-man-3.19.2-1.1.riscv64 (1/28), 711.2 KiB (571.6 KiB
unpacked)
Retrieving: cmake-man-3.19.2-1.1.riscv64.rpm
....................................[done]
Retrieving package gccmakedep-1.0.3-3.3.noarch (2/28), 13.6 KiB ( 9.9 KiB
unpacked)
Retrieving: gccmakedep-1.0.3-3.3.noarch.rpm
.....................................[done]
Retrieving package hicolor-icon-theme-0.17-3.2.noarch
(3/28), 45.6 KiB ( 76.7 KiB unpacked)
Retrieving: hicolor-icon-theme-0.17-3.2.noarch.rpm
..............................[done]
Retrieving package libarchive13-3.5.0-1.1.riscv64
(4/28), 377.5 KiB (701.5 KiB unpacked)
Retrieving: libarchive13-3.5.0-1.1.riscv64.rpm ........................[done
(987 B/s)]
Retrieving package libasan6-10.2.1+git1030-1.1.riscv64
(5/28), 371.9 KiB (972.3 KiB unpacked)
Retrieving: libasan6-10.2.1+git1030-1.1.riscv64.rpm ...............[done (863.0
KiB/s)]
Retrieving package libctf-nobfd0-2.35.1-1.1.riscv64
(6/28), 135.3 KiB ( 91.0 KiB unpacked)
Retrieving: libctf-nobfd0-2.35.1-1.1.riscv64.rpm
................................[done]
Retrieving package libisl22-0.22.1-1.2.riscv64 (7/28), 550.2 KiB ( 1.2 MiB
unpacked)
Retrieving: libisl22-0.22.1-1.2.riscv64.rpm ......................[done (1007.5
KiB/s)]
Retrieving package libjsoncpp24-1.9.4-4.1.riscv64
(8/28), 89.3 KiB (179.1 KiB unpacked)
Retrieving: libjsoncpp24-1.9.4-4.1.riscv64.rpm
..................................[done]
Retrieving package libmpfr6-4.1.0-1.2.riscv64 (9/28), 229.1 KiB (360.7 KiB
unpacked)
Retrieving: libmpfr6-4.1.0-1.2.riscv64.rpm
......................................[done]
Retrieving package librhash0-1.4.0-1.2.riscv64 (10/28), 143.9 KiB (189.2 KiB
unpacked)
Retrieving: librhash0-1.4.0-1.2.riscv64.rpm
.....................................[done]
Retrieving package libubsan1-10.2.1+git1030-1.1.riscv64
(11/28), 150.5 KiB (281.4 KiB unpacked)
Retrieving: libubsan1-10.2.1+git1030-1.1.riscv64.rpm
............................[done]
Retrieving package libuv1-1.40.0-9.1.riscv64 (12/28), 115.4 KiB (144.0 KiB
unpacked)
Retrieving: libuv1-1.40.0-9.1.riscv64.rpm
.......................................[done]
Retrieving package make-4.3-2.2.riscv64 (13/28), 291.6 KiB (377.6 KiB unpacked)
Retrieving: make-4.3-2.2.riscv64.rpm ..............................[done (556.7
KiB/s)]
Retrieving package kf5-filesystem-20201017-1.1.riscv64
(14/28), 54.9 KiB ( 34.5 KiB unpacked)
Retrieving: kf5-filesystem-20201017-1.1.riscv64.rpm
.............................[done]
Retrieving package hicolor-icon-theme-branding-openSUSE-42.1-2.2.noarch
(15/28), 29.4 KiB ( 46.3 KiB unpacked)
Retrieving: hicolor-icon-theme-branding-openSUSE-42.1-2.2.noarch.rpm
............[done]
Retrieving package libctf0-2.35.1-1.1.riscv64 (16/28), 136.9 KiB ( 91.1 KiB
unpacked)
Retrieving: libctf0-2.35.1-1.1.riscv64.rpm ..........................[done (5.1
KiB/s)]
Retrieving package libmpc3-1.2.1-1.1.riscv64 (17/28), 57.6 KiB ( 86.9 KiB
unpacked)
Retrieving: libmpc3-1.2.1-1.1.riscv64.rpm
.......................................[done]
Retrieving package cmake-full-3.19.2-1.1.riscv64
(18/28), 6.9 MiB ( 23.8 MiB unpacked)
Retrieving: cmake-full-3.19.2-1.1.riscv64.rpm .......................[done (1.3
MiB/s)]
Retrieving package binutils-2.35.1-1.1.riscv64 (19/28), 3.8 MiB ( 18.2 MiB
unpacked)
Retrieving: binutils-2.35.1-1.1.riscv64.rpm .........................[done (2.1
MiB/s)]
Retrieving package cpp10-10.2.1+git1030-1.1.riscv64
(20/28), 6.9 MiB ( 16.1 MiB unpacked)
Retrieving: cpp10-10.2.1+git1030-1.1.riscv64.rpm ....................[done (2.0
MiB/s)]
Retrieving package cmake-3.19.2-1.1.riscv64 (21/28), 28.5 KiB ( 715 B unpacked)
Retrieving: cmake-3.19.2-1.1.riscv64.rpm
........................................[done]
Retrieving package gcc10-10.2.1+git1030-1.1.riscv64
(22/28), 22.6 MiB ( 91.3 MiB unpacked)
Retrieving: gcc10-10.2.1+git1030-1.1.riscv64.rpm ....................[done (2.0
MiB/s)]
Retrieving package cpp-10-3.1.riscv64 (23/28), 13.7 KiB ( 82 B unpacked)
Retrieving: cpp-10-3.1.riscv64.rpm
..............................................[done]
Retrieving package gcc10-c++-10.2.1+git1030-1.1.riscv64
(24/28), 7.9 MiB ( 17.7 MiB unpacked)
Retrieving: gcc10-c++-10.2.1+git1030-1.1.riscv64.rpm ................[done (2.1
MiB/s)]
Retrieving package gcc-10-3.1.riscv64 (25/28), 9.2 KiB ( 0 B unpacked)
Retrieving: gcc-10-3.1.riscv64.rpm
..............................................[done]
Retrieving package gcc-c++-10-3.1.riscv64 (26/28), 13.6 KiB ( 0 B unpacked)
Retrieving: gcc-c++-10-3.1.riscv64.rpm ................................[done
(995 B/s)]
Retrieving package extra-cmake-modules-5.77.0-1.1.riscv64
(27/28), 154.5 KiB (580.9 KiB unpacked)
Retrieving: extra-cmake-modules-5.77.0-1.1.riscv64.rpm
..........................[done]
Retrieving package extra-cmake-modules-doc-5.77.0-1.1.noarch
(28/28), 309.0 KiB ( 1.2 MiB unpacked)
Retrieving: extra-cmake-modules-doc-5.77.0-1.1.noarch.rpm
.......................[done]

Checking for file conflicts:
....................................................[done]
( 1/28) Installing: cmake-man-3.19.2-1.1.riscv64
................................[done]
( 2/28) Installing: gccmakedep-1.0.3-3.3.noarch
.................................[done]
( 3/28) Installing: hicolor-icon-theme-0.17-3.2.noarch
..........................[done]
( 4/28) Installing: libarchive13-3.5.0-1.1.riscv64
..............................[done]
( 5/28) Installing: libasan6-10.2.1+git1030-1.1.riscv64
.........................[done]
( 6/28) Installing: libctf-nobfd0-2.35.1-1.1.riscv64
............................[done]
( 7/28) Installing: libisl22-0.22.1-1.2.riscv64
.................................[done]
( 8/28) Installing: libjsoncpp24-1.9.4-4.1.riscv64
..............................[done]
( 9/28) Installing: libmpfr6-4.1.0-1.2.riscv64
..................................[done]
(10/28) Installing: librhash0-1.4.0-1.2.riscv64
.................................[done]
(11/28) Installing: libubsan1-10.2.1+git1030-1.1.riscv64
........................[done]
(12/28) Installing: libuv1-1.40.0-9.1.riscv64
...................................[done]
(13/28) Installing: make-4.3-2.2.riscv64
........................................[done]
(14/28) Installing: kf5-filesystem-20201017-1.1.riscv64
.........................[done]
(15/28) Installing: hicolor-icon-theme-branding-openSUSE-42.1-2.2.noarch
........[done]
(16/28) Installing: libctf0-2.35.1-1.1.riscv64
..................................[done]
(17/28) Installing: libmpc3-1.2.1-1.1.riscv64
...................................[done]
(18/28) Installing: cmake-full-3.19.2-1.1.riscv64
...............................[done]
(19/28) Installing: binutils-2.35.1-1.1.riscv64
.................................[done]
Additional rpm output:
update-alternatives: using /usr/bin/ld.bfd to provide /usr/bin/ld (ld) in auto
mode

(20/28) Installing: cpp10-10.2.1+git1030-1.1.riscv64
............................[done]
(21/28) Installing: cmake-3.19.2-1.1.riscv64
....................................[done]
(22/28) Installing: gcc10-10.2.1+git1030-1.1.riscv64
............................[done]
(23/28) Installing: cpp-10-3.1.riscv64
..........................................[done]
(24/28) Installing: gcc10-c++-10.2.1+git1030-1.1.riscv64
........................[done]
(25/28) Installing: gcc-10-3.1.riscv64
..........................................[done]
(26/28) Installing: gcc-c++-10-3.1.riscv64
......................................[done]
(27/28) Installing: extra-cmake-modules-5.77.0-1.1.riscv64
......................[done]
(28/28) Installing: extra-cmake-modules-doc-5.77.0-1.1.noarch
...................[done]

Let's check whether we got everything installed:

riscv:/root # clang --version
clang clang version 11.0.0
Target: riscv64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/bin
+riscv:/root # clang++ --version
clang version 11.0.0
Target: riscv64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/bin
riscv:/root # cmake --version
cmake version 3.19.2

CMake suite maintained and supported by Kitware (kitware.com/cmake).
riscv:/root # llc --version
LLVM (http://llvm.org/):
LLVM version 11.0.0
Optimized build.
Default target: riscv64-unknown-linux-gnu
Host CPU: (unknown)

Registered Targets:
aarch64 - AArch64 (little endian)
aarch64_32 - AArch64 (little endian ILP32)
aarch64_be - AArch64 (big endian)
amdgcn - AMD GCN GPUs
arm - ARM
arm64 - ARM64 (little endian)
arm64_32 - ARM64 (little endian ILP32)
armeb - ARM (big endian)
avr - Atmel AVR Microcontroller
bpf - BPF (host endian)
bpfeb - BPF (big endian)
bpfel - BPF (little endian)
hexagon - Hexagon
lanai - Lanai
mips - MIPS (32-bit big endian)
mips64 - MIPS (64-bit big endian)
mips64el - MIPS (64-bit little endian)
mipsel - MIPS (32-bit little endian)
msp430 - MSP430 [experimental]
nvptx - NVIDIA PTX 32-bit
nvptx64 - NVIDIA PTX 64-bit
ppc32 - PowerPC 32
ppc64 - PowerPC 64
ppc64le - PowerPC 64 LE
r600 - AMD GPUs HD2XXX-HD6XXX
riscv32 - 32-bit RISC-V
riscv64 - 64-bit RISC-V
sparc - Sparc
sparcel - Sparc LE
sparcv9 - Sparc V9
systemz - SystemZ
thumb - Thumb
thumbeb - Thumb (big endian)
wasm32 - WebAssembly 32-bit
wasm64 - WebAssembly 64-bit
x86 - 32-bit X86: Pentium-Pro and above
x86-64 - 64-bit X86: EM64T and AMD64
xcore - XCore
riscv:/root # llvm-config
usage: llvm-config ... [...]

Get various configuration information needed to compile programs which use
LLVM. Typically called from 'configure' scripts. Examples:
llvm-config --cxxflags
llvm-config --ldflags
llvm-config --libs engine bcreader scalaropts

Options:
--version Print LLVM version.
--prefix Print the installation prefix.
--src-root Print the source root LLVM was built from.
--obj-root Print the object root used to build LLVM.
--bindir Directory containing LLVM executables.
--includedir Directory containing LLVM headers.
--libdir Directory containing LLVM libraries.
--cmakedir Directory containing LLVM cmake modules.
--cppflags C preprocessor flags for files that include LLVM headers.
--cflags C compiler flags for files that include LLVM headers.
--cxxflags C++ compiler flags for files that include LLVM headers.
--ldflags Print Linker flags.
--system-libs System Libraries needed to link against LLVM components.
--libs Libraries needed to link against LLVM components.
--libnames Bare library names for in-tree builds.
--libfiles Fully qualified library filenames for makefile depends.
--components List of all possible components.
--targets-built List of all targets currently built.
--host-target Target triple used to configure LLVM.
--build-mode Print build mode of LLVM tree (e.g. Debug or Release).
--assertion-mode Print assertion mode of LLVM tree (ON or OFF).
--build-system Print the build system used to build LLVM (always cmake).
--has-rtti Print whether or not LLVM was built with rtti (YES or NO).
--has-global-isel Print whether or not LLVM was built with global-isel support
(ON or OFF).
--shared-mode Print how the provided components can be collectively linked
(shared or static).
--link-shared Link the components as shared libraries.
--link-static Link the component libraries statically.
--ignore-libllvm Ignore libLLVM and link component libraries instead.
Typical components:
all All LLVM libraries (default).
engine Either a native JIT or a bitcode interpreter.

oceanfish81@riscv:/home/oceanfish81> git clone
https://github.com/aguinet/dragonffi
Cloning into 'dragonffi'...
remote: Enumerating objects: 105, done.
remote: Counting objects: 100% (105/105), done.
remote: Compressing objects: 100% (70/70), done.
remote: Total 1900 (delta 49), reused 68 (delta 30), pack-reused 1795
Receiving objects: 100% (1900/1900), 703.99 KiB | 884.00 KiB/s, done.
Resolving deltas: 100% (1246/1246), done.
oceanfish81@riscv:/home/oceanfish81> cd dragonffi
oceanfish81@riscv:/home/oceanfish81/dragonffi> ls
bindings CMakeClangRes.txt include logo.jpg third-party
CHANGELOG CMakeLists.txt lib README.rst TODO
ci examples LICENSE.txt tests tools
oceanfish81@riscv:/home/oceanfish81/dragonffi> which llvm-config
/usr/bin/llvm-config
oceanfish81@riscv:/home/oceanfish81/dragonffi> mkdir build && cd build && cmake
-DCMAKE_BUILD_TYPE=Release -DCMAKE_C_COMPILER=clang
-DCMAKE_CXX_COMPILER=clang++ -DLLVM_CONFIG=/usr/bin/llvm-config ..


--1610303197.E3Fe40.8991
Date: Sun, 10 Jan 2021 18:26:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180749

            Bug ID: 1180749
           Summary: AMD Ryzen 4800H Integrated Graphics brightness control not working as found in some Lenovo Legion 5 15ARH05
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: antonyjr000-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When using switchable graphics in Lenovo Legion 5 15ARH05, the AMD Renoir APU
works along with NVIDIA Graphics(even non-free and prime works) but the
brightness cannot be controlled by the Fn keys, Software or
/sys/class/backlight

I've tried setting all the kernel params like acpi_backlight=vender or native
but the brightness control still does not work.

I highly suspect it's a bug in the amdgpu kernel driver. For now nvidia
graphics card works with brightness control.

It is also worthy to note that cat /sys/class/backlight/*/actual_brightness
always returns 311 and does not change even when executed echo 50 >
/sys/class/backlight/*/brightness

There are number of reports on this issue over the internet but nothing
official. I've tried a lot of linux distros and none of them work and it seems
it is broken even in the mainline kernel. I've also tried Kernel:HEAD version
of the kernel without the nvidia graphics support but still the brightness
control does not work. At the time writing I've booted linux 5.11-rc2 but the
brightness control still does not work.


--1610353376.acADa1.26159
Date: Mon, 11 Jan 2021 08:22:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180755

            Bug ID: 1180755
           Summary: VUL-0: CVE-2020-26664: vlc: A vulnerability in EbmlTypeDispatcher:send allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/274947/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dimstar-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: dmueller-at-suse.com
          Found By: Security Response Team
           Blocker: ---

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11
allows attackers to trigger a heap-based buffer overflow via a crafted .mkv
file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-26664
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
http://videolan.com
http://vlc.com
https://gist.githubusercontent.com/henices/db11664dd45b9f322f8514d182aef5ea/raw/d56940c8bf211992bf4f3309a85bb2b69383e511/CVE-2020-26664.txt


--1610364569.ed20cB0.15741
Date: Mon, 11 Jan 2021 11:29:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180766

            Bug ID: 1180766
           Summary: apparmor unix (connect) type=stream rule disallows creating unix stream sockets
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: maciek.borzecki-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm trying to update snapd to 2.48.2 which contains a fix for the snap's
AppArmor profile that blocks access to ICE sockets:
https://github.com/snapcore/snapd/pull/9542

The rule is defined as:

deny unix (connect, receive, send)
    type=stream
    peer=(addr="@/tmp/.ICE-unix/[0-9]*"),

However, the rule apparently blocks all access to X sockets. The audit log
contains the following entry:

type=AVC msg=audit(1610354923.200:498): apparmor="DENIED" operation="create"
profile="snap.ohmygiraffe.ohmygiraffe" pid=9202 comm="getent" family="unix"
sock_type="stream" protocol=0 requested_mask="create" denied_mask="create"

This is confirmed by strace output:

[pid 9165] socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0) = -1 EACCES (Permission
denied)

The behavior is unexpected, as abstractions/base explicitly allows creating
unix sockets.

I was able to extract the relevant bits and come up with a minimal profile that
demonstrates that behavior without snaps:

#include <tunables/global>

profile "test-profile" {
  #include <abstractions/base>
  #include <abstractions/consoles>
  #include <abstractions/dbus-strict>
  #include <abstractions/dbus-session-strict>
  #include <abstractions/X>
  #include <abstractions/fonts>
  allow /etc/** mrkix,
  allow /usr/** mrkix,
  # Deny access to ICE granted by abstractions/X
  # See: https://bugs.launchpad.net/snapd/+bug/1901489
  deny owner @{HOME}/.ICEauthority r,
  deny owner /run/user/*/ICEauthority r,
  deny unix (connect, receive, send)
       type=stream
       peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
}

Then after loading and trying to run gnome-calculator, it cannot connect to
Xorg:

$ strace aa-exec -p test-profile /usr/bin/gnome-calculator
..
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0) = -1 EACCES (Permission denied)
...

time->Mon Jan 11 11:58:56 2021
type=AVC msg=audit(1610362736.216:1763): apparmor="DENIED" operation="create"
profile="test-profile" pid=17496 comm="gnome-calculato" family="unix"
sock_type="stream" protocol=0 requested_mask="create" denied_mask="create"

I have further arrived at this minimal sample:

#include <tunables/global>

profile "test-profile" {
  #include <abstractions/base>
  deny unix (connect)
       type=stream,
}

$ sudo strace -e socket aa-exec -p test-profile python3 -c 'import socket;
socket.socket(socket.AF_UNIX, socket.SOCK_STREAM, 0)'

socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0) = -1 EACCES (Permission denied)
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib64/python3.8/socket.py", line 231, in __init__
    _socket.socket.__init__(self, family, type, proto, fileno)
PermissionError: [Errno 13] Permission denied
+++ exited with 1 +++

time->Mon Jan 11 12:26:38 2021
type=AVC msg=audit(1610364398.488:1944): apparmor="DENIED" operation="create"
profile="test-profile" pid=18103 comm="python3" family="unix"
sock_type="stream" protocol=0 requested_mask="create" denied_mask="create"

The profile works as expected on Ubuntu 20.04 and Arch (using 5.10.6 kernel).
Arch uses pretty much the mainline kernel without any patches on top, thus at
least the AppArmor bits should be close to what is on openSUSE. I have found
this patch in opensuse's tree, maybe it is relevant:
https://github.com/openSUSE/kernel-source/blob/master/patches.suse/apparmor-compatibility-with-v2.x-net.patch

Relevant packages on Tumbleweed:

apparmor-abstractions-3.0.1-1.2.noarch
apparmor-docs-3.0.1-1.2.noarch
apparmor-parser-3.0.1-1.2.x86_64
apparmor-parser-lang-3.0.1-1.2.noarch
apparmor-profiles-3.0.1-1.2.noarch
apparmor-rpm-macros-1.0-6.3.noarch
apparmor-utils-3.0.1-1.2.noarch
apparmor-utils-lang-3.0.1-1.2.noarch
kernel-default-5.10.4-1.1.x86_64


body:
--1610370979.74DF0.26758
Date: Mon, 11 Jan 2021 13:16:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180772

            Bug ID: 1180772
           Summary: [trackerbug] lxd 4.10 update
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.10. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-10-has-been-released/9894

  + VLAN information in network state
  + Proxy device support for VMs (NAT only)
  + Bridge port isolation
  + New sub-commands for image properties
  + Multi-queue networking in VMs

summary: [trackerbug] lxd 4.10 update


body:
--1610386562.764eba0.25017
Date: Mon, 11 Jan 2021 17:36:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180789

            Bug ID: 1180789
           Summary: texlive latexmk needs global config file to fully function out of the box
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: screening-team-bugs-at-suse.de
          Reporter: zyzzyxdonta-at-posteo.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I noticed that latexmk's preview flags (-pv and -pvc) don't work out of the box
because they try to use acroread:

    $ latexmk -pdf -pv example.tex
    Rc files read:
      NONE
    Latexmk: This is Latexmk, John Collins, 17 Apr. 2020, version: 4.69a.
    Latexmk: All targets (example.pdf) are up-to-date
    For rule 'view', running '&if_source(  )' ...
    ------------
    Running 'start start acroread  "example.pdf"'
    ------------
    sh: acroread: Kommando nicht gefunden.

To fix this, the programs for previewing PDF, DVI, and PS need to be defined in
a config file.

    $dvi_previewer = 'xdg-open %O %S';
    $dvi_previewer_landscape = 'xdg-open %O %S';
    $pdf_previewer = 'xdg-open %O %S';
    $ps_previewer = 'xdg-open %O %S';
    $ps_previewer_landscape = 'xdg-open %O %S';

which results in the preview being launched:

    Running 'start xdg-open  "example.pdf"'

Of course this can be done by the users themselves in ~/.latexmkrc or per
project, however having this work by default would be nice.

Fedora e.g. provides a config as /etc/latexmk.conf and patches this path into
the latexmk script, see https://src.fedoraproject.org/rpms/latexmk/tree/master

Let me know what you think, thanks!

pkgs: texlive-specs-n texlive-specs-v


--1610408600.bA03b8c40.16678
Date: Mon, 11 Jan 2021 23:43:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180794

            Bug ID: 1180794
           Summary: bogus qemu binary path used when creating fv guest under xen
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xen
          Assignee: xen-bugs-at-suse.de
          Reporter: brogers-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 845011
  --> https://bugzilla.suse.com/attachment.cgi?id=845011&action=edit
output of virsh dom capabilities

I tried to create a xen fv vm via virt-manager with xen under up to date
Tumbleweed, and it errored out. Poking around at the log files I saw that it
was looking for the qemu-system-i386 binary under /usr/libexec/xen/bin/ and it
is not there.
When I manually put a soft link there to the binary qemu-x86 installs in
/usr/bin the vm was able to be successfully installed and run.

I've attached the output of virsh dom capabilities which also shows that path.


--1610439379.fCcEfda0.26162
Date: Tue, 12 Jan 2021 08:16:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180804

            Bug ID: 1180804
           Summary: VUL-0: CVE-2020-35701: cacti: SQL injection vulnerability in data_debug.php
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/275013/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1915042

An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection
vulnerability in data_debug.php allows remote authenticated attackers to
execute arbitrary SQL commands via the site_id parameter. This can lead to
remote code execution.

https://asaf.me/2020/12/15/cacti-1-2-0-to-1-2-16-sql-injection/
https://github.com/Cacti/cacti/issues/4022

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1915042
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35701
https://github.com/Cacti/cacti/issues/4022
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35701
https://asaf.me/2020/12/15/cacti-1-2-0-to-1-2-16-sql-injection/


--1610442356.6f7b81.17485
Date: Tue, 12 Jan 2021 09:05:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1180808

            Bug ID: 1180808
           Summary: transactional-update: /usr needs newer timestamp than /etc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to bsc#1180549, we need to make sure after an transactional-update
that /usr has a newer timestamp than /etc at the next boot


--1610459812.8cCdA0.27557
Date: Tue, 12 Jan 2021 13:56:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180822

            Bug ID: 1180822
           Summary: dracut should include /usr/lib/modprobe.d/ into the initrd
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: daniel.molkentin-at-suse.com
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

companion bug to https://bugzilla.opensuse.org/show_bug.cgi?id=1180821

it seems the module is loaded in the initrd and only /etc/modprobe.d/ is
included in my initrd.


--1610557403.72cA0.13483
Date: Wed, 13 Jan 2021 17:03:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180898

            Bug ID: 1180898
           Summary: colord missing AppArmor directory specification
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: bugrprt21882-at-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On boot, colord errors as follows:
colord[20775]: CdMain: failed to search system directories: Error opening
directory '/usr/local/share/color/icc': Keine Berechtigung

The reason is, a couple of directories are missing from the AppArmor
configuration file supplied by the colord package -
/etc/apparmor.d/usr.lib.colord

Adding the following lines to the AppArmor configuration file gets rid of the
error raised when the colord service is restarted:

 > diff -cw /etc/apparmor.d/usr.lib.colord /etc/apparmor.d/local/usr.lib.colord
*** /etc/apparmor.d/usr.lib.colord      2020-06-09 06:54:57.000000000 +0200
-


--1610628552.E2AcC5D50.1928
Date: Thu, 14 Jan 2021 12:49:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180929

            Bug ID: 1180929
           Summary: VUL-0: CVE-2020-8225: nextcloud-desktop: cleartext storage of sensitive information
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
               URL: https://smash.suse.de/issue/267936/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: sor.alexei-at-meowr.ru
          Found By: Security Response Team
           Blocker: ---

CVE-2020-8225

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4
gave away information about used proxies and their authentication credentials.

References:

https://hackerone.com/reports/685990
https://nextcloud.com/security/advisory/?id=NC-SA-2020-031

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1914205
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8225
http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-8225.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8225
https://hackerone.com/reports/685990
https://nextcloud.com/security/advisory/?id=NC-SA-2020-031


--1610709137.FDec40.369
Date: Fri, 15 Jan 2021 11:12:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1180971

            Bug ID: 1180971
           Summary: Black screen after updating to kernel 5.3.18-lp152.57 to 5.3.18-lp152.60
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: grewin.mathias-at-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

It's exactly the same problem as in the reported Bug ID:
1177384
(which was resolved at that time!)
Best regards - M.Grewin


--1610800358.8bEae7aE1.24012
Date: Sat, 16 Jan 2021 12:32:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181011

            Bug ID: 1181011
           Summary: Mesa creates world readable XDG_CACHE_HOME (~/.cache)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Creating a new user account by default makes the home directory world readable
(755), which is fine by itself as long as contained files/diretories have
appropriate permissions.

~/.local/ and ~/.config/ are created user-accessible only (700) by
useradd/skel.

~/.cache is created on first use, which is typically by the graphics driver on
first login for ~/.cache/mesa_shader_cache/:

https://gitlab.freedesktop.org/mesa/mesa/-/blob/master/src/util/disk_cache_os.c#L235

Other programs may store/leak sensitive information in files or directories
below ~/.cache/.


--1610817335.b8b5e30.9191
Date: Sat, 16 Jan 2021 17:15:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181014

            Bug ID: 1181014
           Summary: Regression in snd-usb-audio: Audioinput for Webcam (046d:0825) stopped working as of 5.3.18-lp152.60-default
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: doerges@pre-sense.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a Logitech C270 webcam which was working fine with
5.3.18-lp152.57-default and before.

As of 5.3.18-lp152.60-default the builtin microphone is not available.
Video continues to work.

In dmesg the device shows up like this:

-


--1610836723.0a026Da0.19096
Date: Sat, 16 Jan 2021 22:38:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181018

            Bug ID: 1181018
           Summary: floppy broken in 5.3.18-lp152.57.1 under KVM
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: x86-64
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: suse-at-garloff.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running a Leap-15.2 VM under KVM on Leap-15.2 on x86-64:

[    3.721557] floppy0: disk absent or changed during operation^M
[    3.723621] blk_update_request: I/O error, dev fd0, sector 0 op 0x0:(READ)
flags 0x80700 phys_seg 1 prio class 0^M
[    3.727385] floppy0: disk absent or changed during operation^M
[    3.729420] blk_update_request: I/O error, dev fd0, sector 0 op 0x0:(READ)
flags 0x0 phys_seg 1 prio class 0^M
[    3.733782] Buffer I/O error on dev fd0, logical block 0, async page read^M

An older image with 5.3.18-lp152.50.1 still worked.

This one is tricky:
* I don't see any changes from 50 to 57 in the floppy.c sources.
* After many more of these I/O errors (till second 136), floppy starts to work.
I can dd /dev/fd0 to /dev/null without any further errors


body:
--1610900662.E12800.1017
Date: Sun, 17 Jan 2021 16:24:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1181027

            Bug ID: 1181027
           Summary: Lua-cyrussasl is needed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kristof.p-at-fce.vutbr.cz
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Opensuse is the last mainstream distro without package lua-cyrussasl.

I need it to run Prosody IM server with saslauthd auth
(https://prosody.im/doc/cyrus_sasl)

Can someone build package for Opensuse, please?
EPEL package is there:
https://mirror.it4i.cz/epel/8/Everything/SRPMS/Packages/l/lua-cyrussasl-1.1.0-7.el8.src.rpm

Thank you very much

summary: Lua-cyrussasl is needed