body:
--1501254683.F3Db0.7735
Date: Fri, 28 Jul 2017 15:11:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1051248

            Bug ID: 1051248
           Summary: VUL-0: PlayOnLinux: privacy issues
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: ecsos-at-schirra.net
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: astieger-at-suse.com, ecsos-at-schirra.net,
                    simon.herrmann-at-posteo.ch, stefan@fam-elser.de
          Found By: Security Response Team
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1051224 +++

In PlayOnLinux ./bash/run_app:

    # Unique anonymous id (autorisation to edit the review)
    if [ ! -e "$POL_USER_ROOT/configurations/reports/$PACKAGE" ]; then
        UniqId="$(perl -e 'print int(rand(10000000000000000))')"
    else
        UniqId="$(cat "$POL_USER_ROOT/configurations/reports/$PACKAGE")"
    fi
    # Wine version
    Prefix="$(POL_Shortcut_GetPrefix "$PACKAGE")"
    Version="$(POL_Config_PrefixRead VERSION "$Prefix")"
    PArch="$(POL_Config_PrefixRead ARCH "$Prefix")"
    [ "$PArch" = "x86" ] && archty="0" || archty="1"
    # AMD64
    [ "$AMD64_COMPATIBLE" = "True" ] && amd64_set="1" || amd64_set="0"

    if [ "$ScriptName" ]; then
        # Device Infos - Could also directly use POL_DetectVideoCards for full
list
        POL_LoadVar_Device --non-interactive

        Info="$(printf
"$VendorID~$DeviceID~$currentOS~$ScriptName~$amd64_set~$OpenGL32~$OpenGL64~$Version~$ExitCode~$DISTRO~$vms~$UniqId~$archty~$PACKAGE~$VERSION~$delta"
| POL_base64)"
        POL_Website_GET
"http://www.playonlinux.com/api/s.php?data=$(POL_Website_urlencode "$Info")"
        echo "$UniqId" > "$POL_USER_ROOT/configurations/reports/$PACKAGE"
    fi

This uploads a user-identifying ID with all hardware information in PLAIN to a
third party.
This should be HTTPS at least, NOT use a unique ID unless the user is informed,
and be default off anyway.

summary: VUL-0: PlayOnLinux: privacy issues


--1501262028.A2ac0.6395
Date: Fri, 28 Jul 2017 17:13:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1051277

            Bug ID: 1051277
           Summary: primusrun can't start openGL apps on systems using bumblebee for nvidia optimus technology
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: X11 3rd Party Driver
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: Mathias.Homann-at-opensuse.org
        QA Contact: sndirsch-at-suse.com
          Found By: ---
           Blocker: ---

on systems with intel and nvidia chipsets the user has to use optirun or
primusrun to start 3d apps, to get them to use the nvidia card instead of the
intel card.

For steam on linux optirun is *not* an option, only primusrun works from inside
steam.

On 42.3 there is a rather outdated version or primusrun, from 2015, which does
NOT work with current nvidia drivers / the current kernel...

The fix is easy, update primus to a more current version. It has been done for
Tumbleweed almost a year ago, can we please have that fix in 42.3 ASAP?


body:
Build Identifier:

When I copy files over a network (using Dolphin) the CPU load starts to rise
quickly. An animated icon in the system tray shows the progress of the file
transfer. If this icon is hidden via the system tray settings the CPU load of
plasmashell drops quickly. I've attached a video that demonstrates this
behavior.

This bug is probably related to Bug #1016920 that occured (or still occurs) in
Leap 42.2

Reproducible: Always

Steps to Reproduce:
1. Copy files over network using Dolphin file browser

Actual Results:
CPU load increases significantly

Expected Results:
CPU load shouldn't be affected that much by an animated icon

This is probably not tied to file transfer but it's an easy way to reproduce
this behavior.

summary: Plasmashell high CPU load when icon in system tray is animated


body:
Build Identifier:

new install of openSUSE 42.3
Chromium 60.0.3112.78 installed
In systemsettings5 > applications > web browser set chromium as the default
Launch chromium and am informed that it isn't the default browser . . .  would
I like to set it as default. Select "Yes"
But on next launch of Chromium am asked same question again
Chromium no longer has a setting to disable the checking to see if it is
default.

Reproducible: Always

Expected Results:
Chromium should respect the setting in Plasma 5.8

summary: Chromium cannot be set as default browser in Plasma


--1501427472.100a3B40.8576
Date: Sun, 30 Jul 2017 15:11:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1051368

            Bug ID: 1051368
           Summary: k3b always shows message "MP3 plugin missing", even if "Do not show again" has been selected
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: fkrueger-at-mailbox.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I am using k3b from the current Tumbleweed and Leap 42.3 repos (not Packman).
It starts, as expected, with the message "MP3-Audio-Decoder-Modul not found".
Checking the tick box "Do not show again", however, does not have any effect,
i.e., the above-mentioned message shows up again when restarting k3b. Apart
from the MP3/codecs issue, is there any difference between k3b from openSUSE
und Packman? I only vaguely remember a discussion some time ago on different
permissions.


body:
--1501469680.acE80.7797
Date: Mon, 31 Jul 2017 02:54:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1051385

            Bug ID: 1051385
           Summary: make corosync.spec uniform
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: High Availability
          Assignee: ha-bugs-at-suse.de
          Reporter: bliu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

1. there are some lines are commented in corosync.spec, will define new macro
to make these lines uncommented

2. in former, xmlconf, rdma and snmp were disabled, these features are wrongly
enabled, will disable them

summary: make corosync.spec uniform


body:
--1501488715.45eDc7.2311
Date: Mon, 31 Jul 2017 08:11:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1051429

            Bug ID: 1051429
           Summary: docker and runc failed to build with kernel 4.12 on ppc64le
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: PowerPC-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: asarai-at-suse.com, jmassaguerpla-at-suse.com,
                    jslaby-at-suse.com, normand-at-linux.vnet.ibm.com
          Found By: ---
           Blocker: ---

Currently we see docker[1] and runc[2] failed to build with kernel 4.12[3] in
the staging project, and it does happened only on ppc64le build.

[1]
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L:DVD/docker/standard/ppc64le

[2]
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L:DVD/runc/standard/ppc64le

[3] https://build.opensuse.org/request/show/512894

pkgs: docker-runc docker_1_12_6 runc


body:
--1501534850.5D581.23027
Date: Mon, 31 Jul 2017 21:00:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1051562

            Bug ID: 1051562
           Summary: Update sysdig to version 0.17.0
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mpluskal-at-suse.com
          Reporter: mpluskal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Version 0.17.0 brings several improvemenets:
* Netlink support
* Support for Kernel 4.11
* Decode unshare syscall

As well as several bugfixes

summary: Update sysdig to version 0.17.0


--1501602086.EBce314.3798
Date: Tue, 1 Aug 2017 15:41:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1051714

            Bug ID: 1051714
           Summary: pulseaudio doesn't properly detect usb headset hotplug
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: fcrozat-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When turning on a usb headset (Parrot Zik 3), which has two different USB
profile (5.1 or 2.0), pulseaudio often detects only one entry point.

Upstream has fixed this with https://bugs.freedesktop.org/show_bug.cgi?id=54029

I've been testing the patch for some time and it works fine (and I forgot to
push it as maintenace update).

Bug is present in 42.2 and 42.3


body:
--1501640615.551c2F807.12536
Date: Wed, 2 Aug 2017 02:23:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1051772

            Bug ID: 1051772
           Summary: Bring SLE-Classic to Tumbleweed.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: yfjiang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

In the past, the sle-classic session was only made available for SLE. From the
release of GNOME 3.24.x, we tried to make the code base shared as much as
possible between Factory and SLE15. By the fact the recent SLE15 fork from
Factory, it looks a good timing to have the code merged in Factory and keep a
much better patch synchronization in future.

In addition, we are also working on 3.25.x in GNOME:Next, and the final target
in this round of synchronized patching is 3.26.x.

Let me take it as a meta bug to track everything related.

summary: Bring SLE-Classic to Tumbleweed.


--1501745600.1D33b6.4319
Date: Thu, 3 Aug 2017 07:33:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052017

            Bug ID: 1052017
           Summary: product-builder should not suppress missing repopackages error
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: adrian-at-suse.com, dimstar-at-opensuse.org, ma-at-suse.com
          Found By: ---
           Blocker: ---

In the TW staging we see a problem with product builder, a kiwi file had
invalid content like below,

      <repopackage name="problem"/>
      <repopackage name="730fa50f"/>
      <repopackage name="info"/>
      <repopackage name="nothing"/>
      <repopackage name="provides"/>
      <repopackage name="docker-runc"/>
      <repopackage name="="/>
      <repopackage name="0.1.1+gitr2947_9c2d8d1"/>
      <repopackage name="needed"/>
      <repopackage name="by"/>
      <repopackage name="docker-17.04.0_ce-5.2.x86_64"/>
      <repopackage name="problem"/>
      <repopackage name="730fa50f"/>
      <repopackage name="solution"/>
      <repopackage name="95cb15dc"/>
      <repopackage name="deljob"/>
      <repopackage name="install"/>
      <repopackage name="name"/>
      <repopackage name="docker"/>
      <repopackage name="CREATE_TEST_DVD_PROBLEM"/>

with old kiwi the testdvd fails to build due to this repopackage error, with
product-builder the error was ignored and the testdvd build succeeded. For
staging project we really want to see the fail if exists the broken content. I
also tried set IGNORE_MISSING_REPO_PACKAGES to false, but it just going to be a
error log message and didn't stop the build.

$this->logMsg('E', "Required packages were not found");

can we make it stop the build if missing repopackage when
IGNORE_MISSING_REPO_PACKAGES is false? if not then can we have another option
for that?


--1501745913.232753c15.6042
Date: Thu, 3 Aug 2017 07:38:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052022

            Bug ID: 1052022
           Summary: lifecycle-data: is not installed with zypper-lifecycle-plugin
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: snwint-at-suse.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: coolo-at-suse.com, dimstar-at-opensuse.org,
                    igonzalezsosa-at-suse.com, jsrain-at-suse.com,
                    lnussel-at-suse.com, locilka-at-suse.com, snwint-at-suse.com
          Found By: Security Response Team
           Blocker: ---

lifecycle-data-openSUSE is not automatically installed with
zypper-lifecycle-plugin.

From lifecycle-data.spec:
Supplements:    packageand(openSUSE-release:zypper-lifecycle-plugin)

This obviously need to go into:
%package openSUSE
which is the only package built from it


body:
--1501758425.7Be07.21234
Date: Thu, 3 Aug 2017 11:07:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052058

            Bug ID: 1052058
           Summary: _NET_RESTACK_WINDOW does nothing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: x86-64
                OS: openSUSE 42.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: mse00000-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 735119
  --> http://bugzilla.opensuse.org/attachment.cgi?id=735119&action=edit
Test program

_NET_RESTACK_WINDOW protocol seems not to be implemented, see test program.

summary: _NET_RESTACK_WINDOW does nothing


--1501771505.28f2AfBb3.31668
Date: Thu, 3 Aug 2017 14:45:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052102

            Bug ID: 1052102
           Summary: dblatex is incompatible with the current texlive-multirow
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: thomas.schraitle-at-suse.com
          Reporter: sbrabec-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: werner-at-suse.com
          Found By: ---
           Blocker: ---

nut started to fail in Factory:

[   44s] a2x: ERROR: "dblatex" -t pdf -p
"/etc/asciidoc/dblatex/asciidoc-dblatex.xsl" -s
"/etc/asciidoc/dblatex/asciidoc-dblatex.sty"
"/home/abuild/rpmbuild/BUILD/nut-2.7.4/docs/user-manual.xml" returned non-zero
exit status 1

Verbose build shows:

pdflatex -interaction=batchmode user-manual.tex
pdflatex failed
/usr/share/dblatex/latex/style/dbk_table.sty:32: Use of \@xmultirow doesn't
match its definition.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{
/usr/share/dblatex/latex/style/dbk_table.sty:32: Missing \begin{document}.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[
/usr/share/dblatex/latex/style/dbk_table.sty:32: You can't use `macro parameter
character #' in horizontal mode.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[#
/usr/share/dblatex/latex/style/dbk_table.sty:32: You can't use `macro parameter
character #' in horizontal mode.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[#2]{#
/usr/share/dblatex/latex/style/dbk_table.sty:32: You can't use `macro parameter
character #' in horizontal mode.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[#2]{#3}[#
/usr/share/dblatex/latex/style/dbk_table.sty:32: You can't use `macro parameter
character #' in horizontal mode.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[#2]{#3}[#4]{#
/usr/share/dblatex/latex/style/dbk_table.sty:32: Too many }'s.
/usr/share/dblatex/latex/style/dbk_table.sty:32: leading text:
\expandafter{\@xmultirow{#1}[#2]{#3}[#4]{#5}}
Unexpected error occured
Error: pdflatex compilation failed

According to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840189 and
https://bugs.archlinux.org/task/51670, this is a problem of use of a private
\@xmultirow macro. Patch exists at least in Debian and Arch Linux.


--1501776410.4F8b36A0.7067
Date: Thu, 3 Aug 2017 16:06:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052119

            Bug ID: 1052119
           Summary: Path transversal : Wrong placement of /usr/share/kservices5/plasma-applet-org.kde.plasma.net workmanagement.desktop
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: bruno@ioda-net.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Found in plasma log

Path traversal attempt detected:
"/usr/share/kservices5/plasma-applet-org.kde.plasma.networkmanagement.desktop"
is not inside "/usr/share/plasma/plasmoids/org.kde.plasma.networkmanagement/"

In packaging the macro %{_kf5_servicesdir} is used
when it seems that plasma would prefer to find the corresponding .desktop in
/usr/share/plasma/plasmoids/

 Any thought on that ?


body:
--1501906838.1fa1bccb1.4276
Date: Sat, 5 Aug 2017 04:20:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052383

            Bug ID: 1052383
           Summary: info2html generated links not working
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: VMWare
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Apache
          Assignee: bnc-team-apache-at-forge.provo.novell.com
          Reporter: erchbox-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running info2html Perl script from my web server by pointing a browser to:

  http://srv/cgi-script/info2html

correctly generates the directory node but clicking any of its hyperlinks
produces:

File IO Error
The Info file could not be opened for reading.

summary: info2html generated links not working


--1501928392.3dAbcA70.32602
Date: Sat, 5 Aug 2017 10:19:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052389

            Bug ID: 1052389
           Summary: php7-pear should explicitly require php7-pear-Archive_Tar
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jweberhofer-at-weberhofer.at
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

php7-pear should explicitly require php7-pear-Archive_Tar otherwise this
dependency must be packaged in every php7-pear-* package explicitly.


--1502016926.f8eD8340.17014
Date: Sun, 6 Aug 2017 10:55:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052420

            Bug ID: 1052420
           Summary: Secure Grub does not honor settings made in yast about "secure grub" / password protected grub and asks for password at every boot
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: jsrain-at-suse.com
          Reporter: stakanov-at-freenet.de
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The help file says correctly:
"Al momento dell'avvio, per la modifica o anche l'avvio di qualsiasi voce verr�
richiesta la password. Se l'opzione Proteggi solo modifica della voce �
selezionata sar� possibile avviare qualsiasi voce, ma per modificare le voci
sar� necessaria la password (� lo stesso comportamento di GRUB1). Come effetto
collaterale di tale opzione, ai parametri del kernel � aggiunto rd.shell=0,
cos� da impedire un accesso non autorizzato alla shell initrd."
So: if the option "protect only the modification of menu entries" is selecte,
it will be possible to start any item, but, if you want to modify anything, it
will be necessary to type the password for "root-grub-user".

So:
I did set password protected grub and protect only modification of the items.
But this is not honored by grub. It asks for the password no matter what. Even
if just letting time go by (and not modifying, not even pressing enter to
select the item faster, in all cases you will be asked to set "root" and the
password for root-grub you defined. Even without any modification.

This is a strong incentive against the useful feature of password protected
grub.

What the software does: asks for the grub-root password every time.

What the software should have done: asks for the password only in case of
modification of the boot loader menu items.


--1502025660.eDDDEE44.26753
Date: Sun, 6 Aug 2017 13:21:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052428

            Bug ID: 1052428
           Summary: virtualbox-host-kmp-default mkinitrd called twice during install/update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Maintenance
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: Ralf.Friedl-at-online.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

During install/update of virtualbox-host-kmp-default-5.1.26_k4.11.8_2-1.3,
postinstall calls
 /usr/lib/module-init-tools/weak-modules2 --add-kmp
virtualbox-host-kmp-default-5.1.26_k4.11.8_2-1.3
which in turn calls mkinitrd.

Than posttrans calls
 /usr/lib/module-init-tools/regenerate-initrd-posttrans
which in turn calls mkinitrd again.

Also, for some reasons, mkinitrd is not just called twice for the affected
kernel, but for both present version (with means probably all versions).
In /usr/lib/module-init-tools/weak-modules2, add_kmp processes each of
/lib/modules/*. Is this necessary, or is it just too difficult to find out the
kernel version? In this case it seems part of the module name, but if that
doesn't work in general, an option could be added that is supplied by the rpm
script. The rpm spec file has to know the kernel version.
add_kmp then for each kernel calls run_depmod_and_mkinitrd. In
run_depmod_and_mkinitrd there is a test for INITRD_IN_POSTTRANS, and if it is
set, than it will just touch /run/regenerate-initrd/$image-$krel, otherwise it
will run mkinitrd. But here it seems it either does both, or there is something
else.
In
https://kernel.suse.com/cgit/kernel-source/tree/rpm/kernel-binary.spec.in?id=95f8b948f7e5fbee48b6e621920c6c96761cd6ba#n983
it seems that the spec file is supposed to set INITRD_IN_POSTTRANS=1 before
calling /usr/lib/module-init-tools/weak-modules2. That would explain the
mkinitrd call from postinstall, but than what triggers the call from posttrans?

In addition, in this case the modules are not needed for the initrd at all.
/usr/lib/module-init-tools/weak-modules2 needs_mkinitrd test for
KMP_NEEDS_MKINITRD, and if nonzero it forces the call to mkinitrd, even if it
would otherwise seem unnecessary. It would be easy to expand the meaning so
that  if KMP_NEEDS_MKINITRD is set to zero mkinitrd is never called.

At least in the case of virtualbox-host-kmp, I see no reason to include the
modules in the initrd. The initrd should just hold what is necessary to mount
the real root, and the tools to debug if that doesn't work. The
virtualbox-host-kmp modules are not usable for that, as there is no VM or
VirtualBox binaries in the initrd.

That leads to the last point, dracut actually does include the virtualbox
modules in the initrd, for whatever reason. I know that dracut doesn't include
all modules, since /lib/modules/4.11.8-2-default/kernel is more than 200MB,
which is more than most machines have, so there must be some reason why dracut
selects there files.

Installing: virtualbox-host-kmp-default-5.1.26_k4.11.8_2-1.3.x86_64
Additional rpm output:
Creating initrd: /boot/initrd-4.11.8-1-default
dracut: Executing: /usr/bin/dracut ...
...
Creating initrd: /boot/initrd-4.11.8-2-default
dracut: Executing: /usr/bin/dracut ...
...

Output of virtualbox-host-kmp-default-5.1.26_k4.11.8_2-1.3.x86_64.rpm
%posttrans script:
    Creating initrd: /boot/initrd-4.11.8-1-default
    dracut: Executing: /usr/bin/dracut ...
    ...
    Creating initrd: /boot/initrd-4.11.8-2-default
    dracut: Executing: /usr/bin/dracut
    ...


--1502086834.d34AeC1E7.14540
Date: Mon, 7 Aug 2017 06:20:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052451

            Bug ID: 1052451
           Summary: VUL-0: CVE-2017-12606: opencv: out-of-bounds write error in the function FillColorRow4 in utils.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12606

OpenCV (Open Source Computer Vision Library) through 3.3 has an
out-of-bounds write error in the function FillColorRow4 in utils.cpp
when reading an image file by using cv::imread.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12606
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12606


--1502086996.02a8BB7.16585
Date: Mon, 7 Aug 2017 06:23:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052454

            Bug ID: 1052454
           Summary: VUL-0: CVE-2017-12604: opencv: out-of-bounds write error in the FillUniColor function in utils.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12604

OpenCV (Open Source Computer Vision Library) through 3.3 has an
out-of-bounds write error in the FillUniColor function in utils.cpp
when reading an image file by using cv::imread.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12604
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12604


--1502087058.bB4eff77.16002
Date: Mon, 7 Aug 2017 06:24:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052455

            Bug ID: 1052455
           Summary: VUL-0: CVE-2017-12603: opencv: invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12603

OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid
write in the cv::RLByteStream::getBytes function in
modules/imgcodecs/src/bitstrm.cpp when reading an image file by using
cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test
case.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12603
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12603


--1502087114.F6F218.15792
Date: Mon, 7 Aug 2017 06:25:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052456

            Bug ID: 1052456
           Summary: VUL-0: CVE-2017-12602: opencv: denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12602

OpenCV (Open Source Computer Vision Library) through 3.3 has a denial
of service (memory consumption) issue, as demonstrated by the
10-opencv-dos-memory-exhaust test case.

References:
https://github.com/opencv/opencv/issues/9311
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12602
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12602


--1502087180.3fDe23.16002
Date: Mon, 7 Aug 2017 06:26:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052457

            Bug ID: 1052457
           Summary: VUL-0: CVE-2017-12601: opencv: buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12601

OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer
overflow in the cv::BmpDecoder::readData function in
modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using
cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test
case.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12601


--1502087245.F7617.15860
Date: Mon, 7 Aug 2017 06:27:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052459

            Bug ID: 1052459
           Summary: VUL-0: CVE-2017-12600: opencv: denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12600

OpenCV (Open Source Computer Vision Library) through 3.3 has a denial
of service (CPU consumption) issue, as demonstrated by the
11-opencv-dos-cpu-exhaust test case.

References:
https://github.com/opencv/opencv/issues/9311
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12600
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12600


--1502087292.84BfAC8d7.17919
Date: Mon, 7 Aug 2017 06:28:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052461

            Bug ID: 1052461
           Summary: VUL-0: CVE-2017-12599: opencv: out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12599

OpenCV (Open Source Computer Vision Library) through 3.3 has an
out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when
reading an image file by using cv::imread.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12599
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12599


--1502087369.46Eca1E77.16066
Date: Mon, 7 Aug 2017 06:29:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052462

            Bug ID: 1052462
           Summary: VUL-0: CVE-2017-12598: opencv: out-of-bounds read error in the cv::RBaseStream::readBlock function
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12598

OpenCV (Open Source Computer Vision Library) through 3.3 has an
out-of-bounds read error in the cv::RBaseStream::readBlock function in
modules/imgcodecs/src/bitstrm.cpp when reading an image file by using
cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test
case.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12598
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12598


--1502087430.AE2347.18550
Date: Mon, 7 Aug 2017 06:30:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052465

            Bug ID: 1052465
           Summary: VUL-0: CVE-2017-12597: opencv: out-of-bounds write error in the function FillColorRow1 in utils.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kde-maintainers-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12597

OpenCV (Open Source Computer Vision Library) through 3.3 has an
out-of-bounds write error in the function FillColorRow1 in utils.cpp
when reading an image file by using cv::imread.

References:
https://github.com/opencv/opencv/issues/9309
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12597
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12597


--1502090460.8FA00e840.3940
Date: Mon, 7 Aug 2017 07:21:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052482

            Bug ID: 1052482
           Summary: KMail 5.5.2 - Printing via Browser does not respect locale
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When printing from Kmail in current Leap 42.3, this is done via a Browser
Window.
If you print a mail with Umlauts (�. �. �), they are all messed up - see:
https://bugs.kde.org/show_bug.cgi?id=374260
Reason is that Leap uses an old QT stack (5.6.x) while this problem does not
appear in current Tumbleweed, using the same KMail version, but a newer QT
(5.9).

Can we update QT in Leap, maybe together with the next KDE update, to solve
this issue?


--1502164236.f8C5F15f7.8666
Date: Tue, 8 Aug 2017 03:50:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052668

            Bug ID: 1052668
           Summary: Gtk+2 gtkrecentchooser GLib-CRITICAL Source ID xxx was not found when attempting to remove it
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: drankinatty-at-suddenlinkmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 735611
  --> http://bugzilla.opensuse.org/attachment.cgi?id=735611&action=edit
patch implementing Gtk+2 commit 491d79d54083044a5de3bfa2d7afe9cced3974f0

This is a PLACEHOLDER bug report to generate an id for osc sr. This bug has
been FIXED upstream. The original bug report was:

https://bugzilla.gnome.org/show_bug.cgi?id=779605

The upstream commit was:

https://git.gnome.org/browse/gtk+/commit/?h=gtk-2-24&id=491d79d54083044a5de3bfa2d7afe9cced3974f0

The patched buildservice branch is:

https://build.opensuse.org/package/show/home:drankinatty/gtk2_patch_491d79d5

and the patch itself will be attached here.

NO ACTION IS NEEDED ON THIS BUG (other than helping get the darn 'osc sr' to
actually work).


body:
--1502195819.bCd8dbb0.30489
Date: Tue, 8 Aug 2017 12:36:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052776

            Bug ID: 1052776
           Summary: libGLESv2 misses GL ES 3.1 symbols
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: fvogt-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

I noticed this while comparing the Qt 5.9.1 (TW) and Qt 5.6.2 (SP3) build logs:

[  716s] > g++ -Wl,-O1 -o opengles31 opengles31.o   -L/usr/lib64 -lGLESv2
[  716s] > opengles31.o: In function `main':
[  716s] > opengles31.cpp:(.text.startup+0x14): undefined reference to
`glDispatchCompute'
[  716s] > opengles31.cpp:(.text.startup+0x24): undefined reference to
`glProgramUniform1i'

And sure enough, it's not defined on TW:

> readelf --dyn-syms /usr/lib64/libGLESv2.so.2.0.0 | grep glDispatchCompute
> (empty)

On SLE 12 SP3, the symbol exists

> readelf --dyn-syms /usr/lib64/libGLESv2.so.2.0.0 | grep glDispatchCompute
    33: 00000000000089ac    40 FUNC    GLOBAL DEFAULT   12
glDispatchComputeIndirect
    85: 0000000000008984    40 FUNC    GLOBAL DEFAULT   12 glDispatchCompute

summary: libGLESv2 misses GL ES 3.1 symbols


--1502207094.30FEb2f0.1747
Date: Tue, 8 Aug 2017 15:44:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052817

            Bug ID: 1052817
           Summary: transmission-qt does not handle magnet links
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Usability
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: carmen-at-carmenbianca.eu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When clicking on magnet links in either Firefox or Chromium, Transmission does
not open.

If you copy /usr/share/applications/transmission-qt.desktop to
~/.local/share/applications/ and edit the following lines:

    -Exec=transmission-qt %F
    +Exec=transmission-qt %U
    -MimeType=application/x-bittorrent;
    +MimeType=application/x-bittorrent;x-scheme-handler/magnet;

Then Transmission works.


--1502214760.fC8470.1283
Date: Tue, 8 Aug 2017 17:52:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052837

            Bug ID: 1052837
           Summary: Dependency Before=nss-lookup.target dropped
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jmader2-at-gmu.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Aug 08 13:30:37 linux-f7to systemd[1]: Set hostname to <linux-f7to>.
Aug 08 13:30:38 linux-f7to systemd[1]: nss-lookup.target: Dependency
Before=nss-lookup.target dropped

Out of the box install Leap 42.3 with GNOME.

# systemctl show nss-lookup.target -p Before -p After
Before=ntpd.service postfix.service rpc-statd-notify.service ypbind.service
After=nscd.service


--1502266677.4444BfBa0.28419
Date: Wed, 9 Aug 2017 08:17:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1052927

            Bug ID: 1052927
           Summary: python-cryptography requires dependency to python-setuptools
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: niko-at-nerdno.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When trying to work with the cryptography module in Python I get the following
error:

Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File
"/usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/__init__.py",
line 7, in <module>
    import pkg_resources
ImportError: No module named pkg_resources

The cryptography backend requires pkg_resources during runtime but it is not
installed as a dependency.

How to reproduce:
# zypper install python-cryptography
# python -c "from cryptography.hazmat.backends import default_backend"

The problem can be resolved by installing python-setuptools.
To fix this more permanently the following should be added to the .spec of
python-cryptography:
Requires:  python-setuptools


body:
--1502275585.763Aa0.18190
Date: Wed, 9 Aug 2017 10:46:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052949

            Bug ID: 1052949
           Summary: enchant depends on aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove aspell from the distro (fate#323578). We
need to ensure it is not dependency of any package in Tumbleweed.

summary: enchant depends on aspell


body:
--1502275767.8777c880.19269
Date: Wed, 9 Aug 2017 10:49:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052951

            Bug ID: 1052951
           Summary: igerman98 depends on aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove aspell from the distro (fate#323578). We
need to ensure it is not dependency of any package in Tumbleweed.

summary: igerman98 depends on aspell


body:
--1502275878.6D1c50.19244
Date: Wed, 9 Aug 2017 10:51:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052953

            Bug ID: 1052953
           Summary: inkscape depends on aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove aspell from the distro (fate#323578). We
need to ensure it is not dependency of any package in Tumbleweed.

summary: inkscape depends on aspell


body:
--1502276275.45c18C0.22352
Date: Wed, 9 Aug 2017 10:57:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052958

            Bug ID: 1052958
           Summary: link-grammar depends on aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove aspell from the distro (fate#323578). We
need to ensure it is not dependency of any package in Tumbleweed.

summary: link-grammar depends on aspell


body:
--1502277201.dd8a0.26986
Date: Wed, 9 Aug 2017 11:13:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052970

            Bug ID: 1052970
           Summary: suse-xsl-stylesheets depends on aspell
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove aspell from the distro (fate#323578). We
need to ensure it is not dependency of any package in Tumbleweed.

summary: suse-xsl-stylesheets depends on aspell


body:
--1502279597.5Fec0.4687
Date: Wed, 9 Aug 2017 11:53:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1052979

            Bug ID: 1052979
           Summary: sgmltools-lite depends on lynx
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Our management would like to remove lynx from the distro (fate#323578). We need
to ensure it is not dependency of any package in Tumbleweed.

summary: sgmltools-lite depends on lynx


--1502406310.3C0bd1.4932
Date: Thu, 10 Aug 2017 23:05:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053324

            Bug ID: 1053324
           Summary: patterns-openSUSE-kde_yast recommends yast2-scanner and yast-tv
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: itaranto7-at-gmail.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

patterns-openSUSE-kde_yast recommends yast2-scanner and yast-tv.

If I remove patterns-openSUSE-kde_yast then yast2-scanner and yast-tv appear as
"unneeded".


body:
--1502441009.d68a0eB0.21078
Date: Fri, 11 Aug 2017 08:43:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053373

            Bug ID: 1053373
           Summary: MIT-SHM extension does not work in Xvnc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: msrb-at-suse.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Application using MIT-SHM extension create the shm segments with 0600
permissions, which means X server must be running either under the same user,
or under root to be able to access them.

Xvnc that is started by xinetd/systemd runs under the "vnc" user (not root for
safety and not a specific user, because Xvnc is started before any user is
selected in a graphical login). So every attempt to use MIT-SHM fails. Some
applications do not handle the failure gracefully (for example kdm).

MIT-SHM extension should be disabled for Xvnc.

pkgs: tigervnc vncmanager

summary: MIT-SHM extension does not work in Xvnc


--1502475200.c1EFed0.4610
Date: Fri, 11 Aug 2017 18:13:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053481

            Bug ID: 1053481
           Summary: [powerman] %post script - create tmpfiles before adding service
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Change order of service creation and tmpfile creation in case the latter
requires the former:

-


--1502534616.0cEC11c0.10435
Date: Sat, 12 Aug 2017 10:43:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053528

            Bug ID: 1053528
           Summary: acct service use non absolute path ignoring chmod 066
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bruno@ioda-net.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[/usr/lib/systemd/system/acct.service:9] Executable path is not absolute,
ignoring: chmod 600 /var/log/account/pacct

in acct.service

ExecStartPre=chmod 600 /var/log/account/pacct

need to be replaced by

ExecStartPre=/usr/bin/chmod 600 /var/log/account/pacct


body:
--1502546235.E2F8a0.27879
Date: Sat, 12 Aug 2017 13:57:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053532

            Bug ID: 1053532
           Summary: failed to retrieve docker-runc version: unknown output format
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This happens because we're actually not building docker-runc (and runc)
properly. We should just use the Makefile rather than calling `go build`
directly. On paper this warning doesn't matter, but it can confuse users (and
also Docker might start supporting multiple runc versions in the future --
though I wouldn't put money on it).

WARN[0007] failed to retrieve docker-runc version: unknown output format: runc
version spec: 1.0.0-rc2-dev
WARN[0007] failed to retrieve docker-init version
INFO[0007] Daemon has completed initialization
INFO[0007] Docker daemon                                 commit=78d1802
graphdriver=devicemapper version=17.04.0-ce

pkgs: docker-runc runc


body:
Build Identifier:

Kmail 5.5.2 on leap 42.3
Importing google contacts into Kontact / Kmail there is no address
autocompletion in Kmail composer. To select an address I must click on "select"
and then choose from my google contacts.
As I thought the autocomplete might be an issue with the importation of google
contacts I instead added all my contacts to "personal contacts" via csv file.
Still there was no autocomplete so I followed previoulsy offered advice and
installed akonadiconsole and cleared personal contacts cache - however this
still did not correct the problem.
Others have suggested typing one or two characters and then backspace to get
autocomplete to work - but again this does not work in 5.5.2
libKF5AkonadiSearch is installed

Reproducible: Always

Expected Results:
addresses should be mined

summary: KMail address autocomplete not working


--1502631533.8e7a7dc11.21074
Date: Sun, 13 Aug 2017 13:38:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053559

            Bug ID: 1053559
           Summary: Yast bootloader kernel section crashes with valid GRUB_TERMINAL option
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: suse-at-aastral.net
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 736397
  --> http://bugzilla.opensuse.org/attachment.cgi?id=736397&action=edit
y2log

If valid option GRUB_TERMINAL = "console serial" is set in /etc/default/grub,
the yast bootloader text console  kernel tab crashes.

To reproduce:
Set GRUB_TERMINAL="console serial" in /etc/default/grub
Run the "yast bootloader" text console
Switch to the "Kernel Parameters" tab.

Yast crashes with the following error:
Internal error. Please report a bug report with logs.
Run save_y2logs to get complete logs.
Details: unknown GRUB_TERMINAL option "console serial"
Caller:
/usr/lib64/ruby/gems/2.1.0/gems/cfa_grub2-0.6.2/lib/cfa/grub2/default.rb:111:in
`terminal'


body:
--1502697470.dd3120.18021
Date: Mon, 14 Aug 2017 07:57:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053607

            Bug ID: 1053607
           Summary: python3 update breaks python3-apparmor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jmatejek-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the last update of python3 dropped python3 = %{python_version}, however some
pacakges still rely on that, eg. python3-apparmor, this end up python3-apparmor
uninstallable.

see the requirements in apparmor.spec

%if %{with python3}

%package -n python3-apparmor
Summary:        Python 3 interface for libapparmor functions
License:        GPL-2.0 and LGPL-2.1+
Group:          Development/Libraries/Python
Requires:       libapparmor1 = %{version}
Requires:       python3 = %{py3_ver}
Requires:       python(abi) = %{py3_ver}
Provides:       python-libapparmor = %{version}

summary: python3 update breaks python3-apparmor


--1502710541.A7AC1f10.13859
Date: Mon, 14 Aug 2017 11:35:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053646

            Bug ID: 1053646
           Summary: manufacturer-PPDs should not require recode
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jsmeix-at-suse.com
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We are removing recode due to various bugs and dead upstream fate#323644.

As such package in $SUMMARY needs to be adjusted to rather use iconv to convert
the files.


--1502710648.aB2d15.15151
Date: Mon, 14 Aug 2017 11:37:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053648

            Bug ID: 1053648
           Summary: installation-images should not require recode
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: snwint-at-suse.com
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We are removing recode due to various bugs and dead upstream fate#323644.

As such package in $SUMMARY needs to be adjusted to rather use iconv to convert
the files.


body:
--1502710770.e7b612Cb0.16556
Date: Mon, 14 Aug 2017 11:39:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053649

            Bug ID: 1053649
           Summary: instlux should not require recode
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: belphegor-at-belbel.or.jp
          Reporter: tchvatal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We are removing recode due to various bugs and dead upstream fate#323644.

As such package in $SUMMARY needs to be adjusted to rather use iconv to convert
the files.

summary: instlux should not require recode


--1502710921.eDE40.23241
Date: Mon, 14 Aug 2017 11:42:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053650

            Bug ID: 1053650
           Summary: shorewall 5.1.4.4 update shorewall.conf create invalid keywords
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: bruno@ioda-net.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The actual version has a defect fixed upstream
When the formerly built-in actions were converted to standard
    actions in Shorewall 5.1.3, the 'dropBcasts' action was
    inadvertently changed to 'dropBcast'. Beginning with this release,
    both spellings are accepted.

The minimal upstream bugfix release is 5.1.5


body:
--1502712679.B5Aa2e0.27162
Date: Mon, 14 Aug 2017 12:11:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053654

            Bug ID: 1053654
           Summary: radiusd.service is executable
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: suse-20050616-at-bgcomp.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The file, /usr/lib/systemd/system/radiusd.service has the executable bit set
and is responsible for the following systemd error:

/usr/lib/systemd/system/radiusd.service is marked executable. Please remove
executable permission bits. Proceeding anyway.

All with latest rpm's.

summary: radiusd.service is executable


--1502712862.06bEbCE0.28790
Date: Mon, 14 Aug 2017 12:14:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053657

            Bug ID: 1053657
           Summary: pullin-bcm43xx-firmware.service is marked rxrcutable
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: suse-20050616-at-bgcomp.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The file, /usr/lib/systemd/system/pullin-bcm43xx-firmware.service has the
executable bit set and is responsible for the following systemd error:

/usr/lib/systemd/system/pullin-bcm43xx-firmware.service is marked executable.
Please remove executable permission bits. Proceeding anyway.

This is with the latest rpm's.


--1502722593.C5EcE0.21218
Date: Mon, 14 Aug 2017 14:56:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053691

            Bug ID: 1053691
           Summary: Systemd nfs-client is not part of nfs.service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: ManuelStol-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 736502
  --> http://bugzilla.opensuse.org/attachment.cgi?id=736502&action=edit
Patch for /usr/lib/systemd/system/nfs-client.target.d/nfs.conf

The Systemd nfs-client (represented by nfs-client.target) is _not_ part of
openSUSE/YaST NFS client (represented by nfs.service).

In /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
the nfs-client.target is made a part-of nfs-client.target, which is
superfluous.
The nfs-client.target should be made part-of nfs.service.

In /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
Change line 4:
"

 # When nfs is stopped or restarted, nfs-client must too.
 [Unit]
-PartOf=nfs-client.target
+PartOf=nfs.service
"


body:
--1502726185.7337fb0.31503
Date: Mon, 14 Aug 2017 15:56:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053707

            Bug ID: 1053707
           Summary: Publishing:TeXLive/texlive: Bug Perl scripts (ltximg mptopdf pkfix thumbpdf) fail due to a bad shebang
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: werner-at-suse.com
          Reporter: killerrex-at-gmail.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

All this perl scripts that ships with the latex distribution fails with a
```
/bin/sh: -S: invalid option
```

Because the shebang line added to the original scripts. I have not managed to
find the point were this initial shebang line is added.

The solution is either use a shebang that contains the word perl like:
```
#! /usr/bin/env perl
eval '(exit $?0)' && eval 'exec perl -S $0 ${1+"$@"}' && eval 'exec perl -S $0
$argv:q'
        if 0;
```

Or modify the header so the full magic is according to
[perlrun](http://perldoc.perl.org/perlrun.html)
```
#! /bin/sh
#! -*-perl-*-
eval '(exit $?0)' && eval 'exec perl -x -S $0 ${1+"$@"}' && eval 'exec perl -x
-S $0 $argv:q'
        if 0;
```
Notice that we add here the '-x' flag w.r.t. the original scripts at
[tug.org](http://www.tug.org/svn/texlive/trunk/Master/texmf-dist/scripts/context/perl/mptopdf.pl)

This was described already in this old
[post](https://forums.opensuse.org/showthread.php/517565-mptopdf-script-in-metapost-broken)
but apparently no bug was then opened.

pkgs: texlive-specs-n texlive-specs-o texlive-specs-p texlive-specs-r texlive-specs-t texlive-specs-w texlive-specs-y


body:
--1502788683.8EFD4cd4.14564
Date: Tue, 15 Aug 2017 09:18:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1053825

            Bug ID: 1053825
           Summary: gd test suite failure on i586
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: pgajdos-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rguenther-at-suse.com
          Found By: ---
           Blocker: ---

in SLE15 and Leap15 gcc uses --with-arch-32=x86_64. This makes
gdimagegrayscale/basic pass. The spec file expects it to fail though. Please
add a guard to not add the test to XFAIL %if 0%{?sle_version} >= 1500

summary: gd test suite failure on i586


--1502804896.ce33ac1.5954
Date: Tue, 15 Aug 2017 13:48:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1053863

            Bug ID: 1053863
           Summary: [Build 20170810] gnome_ide is not installed using same profile which did so in previous build
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: http://openqa.opensuse.org/tests/465820/modules/instal
                    lation/steps/35
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: riafarov-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 736680
  --> http://bugzilla.opensuse.org/attachment.cgi?id=736680&action=edit
autoyast profile

## Observation
We have a change in product, so that using following software configuration:
<software>
    <install_recommended config:type="boolean">true</install_recommended>
    <patterns config:type="list">
      <pattern>apparmor</pattern>
      <pattern>base</pattern>
      <pattern>gnome</pattern>
    </patterns>
  </software>
we end up having gnome minimal installation.
In the yast logs we can see following:
2017-08-15 09:16:38 <1> linux(3301) [zypp] SATResolver.cc(setLocks):1417 Keep
NOT installed name pattern:gnome_ide
(U__h_(7845)pattern:gnome_ide-20170319-5.1.x86_64(openSUSE-20170813-0))
2017-08-15 09:16:38 <1> linux(3301) [zypp] SATResolver.cc(setLocks):1417 Keep
NOT installed name pattern:gnome_laptop
(U__h_(7849)pattern:gnome_laptop-20170319-5.1.x86_64(openSUSE-20170813-0))

To reproduce an issue, please, use autoinst profile in the attachment.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-autoyast_gnome@64bit
fails in
[installation](http://openqa.opensuse.org/tests/465820/modules/installation/steps/35)

## Reproducible

Fails since (at least) Build
[20170810](http://openqa.opensuse.org/tests/465820) (current job)

## Expected result

Last good: [20170808](http://openqa.opensuse.org/tests/464000) (or more recent)

## Further details

Recently we have merged some changes for yast in TW, so please, suggest changes
in the profile for same behavior as before.

Always latest result in this scenario:
[latest](http://openqa.opensuse.org/tests/latest?machine=64bit&distri=opensuse&version=Tumbleweed&test=autoyast_gnome&arch=x86_64&flavor=DVD)


--1502883925.e4aee10.21852
Date: Wed, 16 Aug 2017 11:45:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054019

            Bug ID: 1054019
           Summary: VUL-0: CVE-2017-12864: opencv: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did notcheckout the input length, which lead to integer overflow. If the image is fromremote, may lead to remote code execution or denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12864

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not
checkout the input length, which lead to integer overflow. If the image is from
remote, may lead to remote code execution or denial of service. This affects
Opencv 3.3 and earlier.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12864
http://www.cvedetails.com/cve/CVE-2017-12864/
https://github.com/opencv/opencv/issues/9372


--1502884154.1cE0533a0.22633
Date: Wed, 16 Aug 2017 11:49:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054020

            Bug ID: 1054020
           Summary: VUL-0: CVE-2017-12863: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData hasa integer overflow when calculate src_pitch. If the image is from remote, maylead to remote code execution or denial of service. This a
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData
has
a integer overflow when calculate src_pitch. If the image is from remote, may
lead to remote code execution or denial of service. This affects Opencv 3.3 and
earlier.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12863
http://www.cvedetails.com/cve/CVE-2017-12863/
https://github.com/opencv/opencv/issues/9371


--1502884263.71150C77.24914
Date: Wed, 16 Aug 2017 11:51:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054021

            Bug ID: 1054021
           Summary: VUL-0: CVE-2017-12862: opencv: In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src issmall than expected, which will cause copy buffer overflow later. If the imageis from remote, may lead to remote code execution or denia
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: kde-maintainers-at-suse.de
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12862

In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is
small than expected, which will cause copy buffer overflow later. If the image
is from remote, may lead to remote code execution or denial of service. This
affects Opencv 3.3 and earlier.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12862
http://www.cvedetails.com/cve/CVE-2017-12862/
https://github.com/opencv/opencv/issues/9370


body:
--1502886239.0e4624.1842
Date: Wed, 16 Aug 2017 12:23:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054032

            Bug ID: 1054032
           Summary: Bugfix update for Tryton and GNU Health
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: axel.braun-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Tryton 3.8 and 4.2 series

summary: Bugfix update for Tryton and GNU Health


--1502900662.cc03ABEB3.15870
Date: Wed, 16 Aug 2017 16:24:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1054088

            Bug ID: 1054088
           Summary: failure to refresh repositories with GnuPG 2.1.23
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-forge.provo.novell.com
          Reporter: astieger-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tchvatal-at-suse.com
          Found By: ---
           Blocker: ---

from https://github.com/openSUSE/libzypp/issues/80

zypper fails to refresh repositories with GnuPG 2.1.23 (only). This is new
behavior with GnuPG 2.1.23, which has thus not been submitted to the
distribution at this point.

Combination tested:

    openSUSE Leap 42.3
    security:privacy/openSUSE_Leap_42.3
    gpg2-2.1.23 from home:AndreasStieger:branches:security:privacy/gpg2
    zypper ref -f (any)..

zypper ref -f 14
Forcing raw metadata refresh
Retrieving repository 'update-test' metadata
File 'repomd.xml' from repository 'update-test' is signed with an unknown key
''. Continue? [yes/no] (no):

The GnuPG version seems to operate normally otherwise, but something in the
behavior or output changed to break the zypper/libzypp scenario.


--1502961414.2Df7Ff3c0.23419
Date: Thu, 17 Aug 2017 09:16:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1054205

            Bug ID: 1054205
           Summary: Kmail corrupts indexes and requires cache clearing on a regular basis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: x86-64
                OS: openSUSE 42.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: stakanov-at-freenet.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 736998
  --> http://bugzilla.suse.com/attachment.cgi?id=736998&action=edit
output of akonadiconsole

Kmail qualifies as Kmail 5.5.2
The setup is one pop and one IMAP account.
The symptoms manifest nearly only with the pop one.
The mails are not shown, a script in the lower part claims something like
multiple merge candidate. The folder hit by this problem migrates in a random
way, once a folder is compromised it stays unreadable. Eliminating folders do
not help. The problem will appear again with a newly created folder.
I join a bug output of akonadiconsole.

Note:
akonadictl stop
akonadictl fsck (command runs in a apparently abortive mode, only rarely it
gives any feedback. It just runs and stay open without output or return to
prompt).
akonadictl vacuum is practically alway in this state and is apparently not
functional.
The above problem has been reported also by other users. It seems that also
this is due to a compromised index or cache.

There is a constant problem of "ghost messages" that have the right subject but
the wrong content is then displayed (with "multiple merge candidate error
diplayed". Unread messages in this condition will stay unread. They may persist
also a flush of cache, after however they will be unread and duplicated. If
opened, after cache clearing in akonadiconsole all doubles do open correctly.
When running "elminate duplicates" some will, sometimes, some will not be
eliminated. Can be eliminated however manually.
Before cache clearing they cannot be eliminated, not even manually.

Terminal: when restarting with akonadiconsole restart, the output gives besides
the normal feedback following error:
---snip-----
Connecting to deprecated signal
QDBusConnectionInterface::serviceOwnerChanged(QString,QString,QString)
org.kde.pim.maildispatcher: Item 68956 does not have the required attribute
Address.
org.kde.pim.maildispatcher: Item 68955 does not have the required attribute
Address.
org.kde.pim.maildispatcher: Item 68954 does not have the required attribute
Address.
Pass a valid window to KWallet::Wallet::openWallet().
----snap------

There is finally a very odd behavior during indexing. In the folder "drafts" -
here bozze because in Italian - where a multitude (up to thousand and more)
messages appear, then disappear again as they populate the indexes). As if a
magic and abusive filter entry filters all to drafts and then from there in
other folders. Often when this happens a bunch (about 20 messages) remain in
drafts. Manual triggered filtering (apply all filters) will then attribute
generally all but one message into the respective correct folders.
An elimination and recreation of drafts folder is not possible (greyed out) -
this may be a wanted behavior. Kmail qualifies as Kmail 5.5.2
I have this problem on several computers. However the gravity varies greatly
between user and user and the user with mixed pop/imap folders / accounts seem
to suffer this problem much more often then only pop or only imap.


--1503006224.eEeCFCd0.13737
Date: Thu, 17 Aug 2017 21:43:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054325

            Bug ID: 1054325
           Summary: Publishing:TeXLive/texlive-filesystem: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: x86-64
                OS: openSUSE 42.2
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: werner-at-suse.com
          Reporter: termim-at-gmail.com
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

When installing texlive-filesystem I've got the following error in YaST:

Subprocess failed. Error: RPM failed: groupadd: GID '505' already exists
error: %pre(texlive-filesystem-2015.105-18.2.noarch) scriptlet failed, exit
status 4
error: texlive-filesystem-2015.105-18.2.noarch: install failed


--1503046066.a5470.21238
Date: Fri, 18 Aug 2017 08:47:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054390

            Bug ID: 1054390
           Summary: VUL-0: CVE-2017-12927: cacti: XSS in methodparameter in spikekill.php.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: liedke-at-rz.uni-mannheim.de
          Reporter: astieger-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method
parameter in spikekill.php.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12927
https://github.com/Cacti/cacti/commit/a032ce0be6a4ea47862c594e40a619ac8de1ef99
https://github.com/Cacti/cacti/issues/907


--1503080666.3fBE4.28573
Date: Fri, 18 Aug 2017 18:24:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054519

            Bug ID: 1054519
           Summary: LXQt Desktop - As original Desktop install, does not create Downloads and Documents directories
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: All
                OS: openSUSE 42.3
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: tonysu@su-networking.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Minor issue since creating these directories can be done a number of different
ways,

But might be a problem for the unwary newly installed since for instance web
browsers typically download files to a Downloads directory by default.

Subject line is self-explanatory.

When LXQt is installed as the <original Desktop>.

To re-producce
During install,
"Configure Online Repositories"
Select "Custom" Desktop
Select LXQt pattern.
Continue installation until completed.
By whatever means, inspect subdirectories for the current User.

Of course,
This would not be observed if you <add> the LXQt desktop to another installed
Desktop which would have properly created these directories.

TSU


body:
--1503132983.bf3Bfd0.16535
Date: Sat, 19 Aug 2017 08:56:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054578

            Bug ID: 1054578
           Summary: VUL-0: CVE-2017-12904: newsbeuter

summary: VUL-0: CVE-2017-12904: newsbeuter


--1503135932.5A1bE5c0.21595
Date: Sat, 19 Aug 2017 09:45:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054586

            Bug ID: 1054586
           Summary: VUL-0: CVE-2017-12961: pspp: There is an assertion abort in function parse_attributes() of libpspp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
               URL: https://smash.suse.de/issue/190828/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: opensuse.lietuviu.kalba-at-gmail.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1482436

There is an assertion abort in the function parse_attributes() in
data/sys-file-reader.c of the libpspp library in GNU PSPP 0.11.0 that will lead
to remote denial of service.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1482436
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12961
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12961


--1503136038.E6bc58EE0.22204
Date: Sat, 19 Aug 2017 09:47:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054587

            Bug ID: 1054587
           Summary: VUL-0: CVE-2017-12960: pspp: There is an assertion abort in function dict_rename_var() of libpspp.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
               URL: https://smash.suse.de/issue/190827/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: opensuse.lietuviu.kalba-at-gmail.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1482433

There is a reachable assertion abort in the function dict_rename_var() in
data/dictionary.c of the libpspp library in GNU PSPP 0.11.0 that will lead to
remote denial of service.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1482433
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12960
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12960


--1503136082.DDCeE0.22303
Date: Sat, 19 Aug 2017 09:48:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054588

            Bug ID: 1054588
           Summary: VUL-0: CVE-2017-12959: pspp: There is a reachable assertion abort in  function dict_add_mrset()  of libpspp.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: opensuse.lietuviu.kalba-at-gmail.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1482432

There is a reachable assertion abort in the function dict_add_mrset() in
data/dictionary.c of the libpspp library in GNU PSPP 0.11.0 that will lead to a
remote denial of service attack.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1482432
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12959


--1503142260.Dd0ac60.4757
Date: Sat, 19 Aug 2017 11:31:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054593

            Bug ID: 1054593
           Summary: VUL-0: CVE-2017-12955: exiv2: There is a heap-buffer-overflow in  basicio.cpp of exiv2.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: dmueller-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1482295

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The
vulnerability causes an out-of-bounds write in
Exiv2::Image::printIFDStructure(), which may lead to remote denial of service
or
possibly unspecified other impact.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1482295
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12955


--1503167400.fdEaeC463.27826
Date: Sat, 19 Aug 2017 18:30:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054610

            Bug ID: 1054610
           Summary: [BeagleBoneBlack, musb]: Broken isochronous transfer
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

This is a reference bug for openSUSE ARM users, because the upstream seems to
be not going to fix it (at least in the nearest future).

The issue is that at least some USB webcams have limited or broken
functionality with BeagleBone Black (and probably other platforms using MUSB
host) starting since

f551e13529833e052f75ec628a8af7b034af20f9 ("Revert "usb: musb:
musb_host: Enable HCD_BH flag to handle urb return in bottom half"").

The behaviour is partial/full video stream suspend/hang due to missed incoming
data. The reason is that under specific circumstances next IN packet is not
emitted at time (current + 1ms.) by host that leads to unexpected peripheral
behaviour.

For instance, PWC based cameras start sending empty packages after skipped IN
until new frame is captured (?).

References for further reading:

[1] https://www.spinics.net/lists/linux-usb/msg145747.html
[2] https://patchwork.kernel.org/patch/9702697/


--1503294153.BfeC78c0.11518
Date: Mon, 21 Aug 2017 05:42:33 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054653

            Bug ID: 1054653
           Summary: VUL-0: CVE-2017-12976: git-annex: before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand URL, a related issue to CVE-
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: peter.simons-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12976

 git-annex before 6.20170818 allows remote attackers to execute arbitrary
commands via an ssh URL with an initial dash character in the hostname, as
demonstrated by an ssh://-eProxyCommand  URL, a related issue to CVE-2017-9800,
CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117. References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12976%20http%3A%2F%2Fwww.cvedetails.com%2Fcve%2FCVE-2017-12976%2F%20http%3A%2F%2Fsource.git-annex.branchable.com%2F%3Fp=source.git;a=blob;f=doc%2Fbugs%2Fdashed_ssh_hostname_security_hole.mdwn%20http%3A%2F%2Fsource.git-annex.branchable.com%2F%3Fp=source.git;a=commit;h=c24d0f0e8984576654e2be149005bc884fe0403a%20http%3A%2F%2Fsource.git-annex.branchable.com%2F%3Fp=source.git;a=commit;h=df11e54788b254efebb4898b474de11ae8d3b471


--1503294943.F04EAb5.16389
Date: Mon, 21 Aug 2017 05:55:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1054659

            Bug ID: 1054659
           Summary: libMagickCore and libMagickWand conflicts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: pgajdos-at-suse.com
          Reporter: vpelcak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Just like in #865782 libMagickWand-7_Q16HDRI3 and libMagickCore-7_Q16HDRI3
conflict with files from libMagickWand-7_Q16HDRI0 and libMagickCore-7_Q16HDRI2.

But the dependency conflict is missing.


--1503318712.22BDa0.10887
Date: Mon, 21 Aug 2017 12:31:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054742

            Bug ID: 1054742
           Summary: VUL-0: CVE-2017-12978: cacti: lib/html.php in Cacti before 1.1.18 has XSS via the title field of anexternal link added by an authenticated user.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: liedke-at-rz.uni-mannheim.de
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12978

lib/html.php in Cacti before 1.1.18 has XSS via the title field of an
external link added by an authenticated user.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12978
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12978


--1503402586.ab8be3E16.12657
Date: Tue, 22 Aug 2017 11:49:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1054984

            Bug ID: 1054984
           Summary: VUL-0: CVE-2017-12605: opencv: out-of-bounds write error in the function FillColorRow8
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
               URL: https://smash.suse.de/issue/189683/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: kde-maintainers-at-suse.de
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1483900

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds
write error in the FillColorRow8 function in utils.cpp when reading an image
file by using cv::imread.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1483900
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12605
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-12605.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12605


body:
--1503412628.a3060.3735
Date: Tue, 22 Aug 2017 14:37:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1055032

            Bug ID: 1055032
           Summary: server:monitoring/icinga2: Bug
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: thardeck-at-suse.com
          Reporter: eikese-at-mail.upb.de
        QA Contact: opensuse-communityscreening-at-forge.provo.novell.com
                CC: nix-at-opensuse.org
          Found By: ---
           Blocker: ---

Missing dependency for package "shadow". This is necessary for autoyast
installation of icinga2.
openSUSE 42.2
openSUSE 42.3

summary: server:monitoring/icinga2: Bug