body:
--17581143560.68CB358.1244
Date: Wed, 17 Sep 2025 13:05:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249956

            Bug ID: 1249956
           Summary: texlive fails to build with boost 1.89
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aschnell-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

adriconf fails to build with boost 1.89 since libboost_system was removed
upstream. It has been an empty stub library for 6 years.

Apart from that deprecated boost::asio::deadline_timer used in SimpleTimer.h
has been removed. Also SimpleTimer.h needs to include
boost/date_time/posix_time/posix_time_duration.hpp. Maybe upstream will pro=
vide
a fix.

See https://build.opensuse.org/project/show/home:aschnell:boost2.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17581143560.68CB358.1244
Date: Wed, 17 Sep 2025 13:05:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249956

          Summary
          texlive fails to build with boost 1.89

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          aschnell@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

adriconf fails to build with boost 1.89 since libboost_syste=
m was removed
upstream. It has been an empty stub library for 6 years.

Apart from that deprecated boost::asio::deadline_timer used in SimpleTimer.h
has been removed. Also SimpleTimer.h needs to include
boost/date_time/posix_time/posix_time_duration.hpp. Maybe upstream will pro=
vide
a fix.

See https://build.opensuse.org/project/show/home:aschnell:boost2.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17581143560.68CB358.1244--

summary: texlive fails to build with boost 1.89


body:
--17581769451.A141.2530
Date: Thu, 18 Sep 2025 06:29:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249973

            Bug ID: 1249973
           Summary: adolc fails to build with boost 1.89
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aschnell-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

adolc fails to build with boost 1.89 since libboost_system was removed
upstream. It has been an empty stub library for 6 years.

See https://build.opensuse.org/project/show/home:aschnell:boost2.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17581769451.A141.2530
Date: Thu, 18 Sep 2025 06:29:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249973

          Summary
          adolc fails to build with boost 1.89

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          aschnell@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

adolc fails to build with boost 1.89 since libboost_system w=
as removed
upstream. It has been an empty stub library for 6 years.

See https://build.opensuse.org/project/show/home:aschnell:boost2.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17581769451.A141.2530--

summary: adolc fails to build with boost 1.89


--17581811462.Ce6e98F.80
Date: Thu, 18 Sep 2025 07:39:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249985

            Bug ID: 1249985
           Summary: go1.25: go tool pprof fails to run because of packaging bug
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Trying to run "go tool pprof" with openSUSE's go1.25 package leads to the
following error:

% go version
go version go1.25.1 linux/amd64
% go tool pprof -top ./umoci umoci.profile
cmd/vendor/github.com/google/pprof/third_party/svgpan:
/usr/lib64/go/1.25/src/cmd/vendor/github.com/google/pprof/third_party/svgpa=
n/svgpan.go:10:12:
pattern svgpan.js: no matching files found

However, this works with go1.24:

% /usr/lib64/go/1.24/bin/go tool pprof -top ./umoci umoci.profile
File: umoci
Build ID: 92dba68898c2a4f76f7dbeb49e1622651226159c
Type: cpu
Time: 2025-09-18 17:25:44 AEST
Duration: 201.15ms, Total samples =3D 0
Showing nodes accounting for 0, 0% of 0 total
      flat  flat%   sum%        cum   cum%

The core issue is (as the error implies) that svgpan.js is missing from the
package /usr/lib64/go/... source tree and so go:embed is failing to embed t=
he
file. The specfile has handling for pprof but I guess go:embed usage is new=
 in
Go 1.25 or something else changed since Go 1.22.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17581811462.Ce6e98F.80
Date: Thu, 18 Sep 2025 07:39:06 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249985

          Summary
          go1.25: go tool pprof fails to run because of packaging bug

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          asarai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Trying to run "go tool pprof" with openSUSE's go1.=
25 package leads to the
following error:

% go version
go version go1.25.1 linux/amd64
% go tool pprof -top ./umoci umoci.profile
cmd/vendor/github.com/google/pprof/third_party/svgpan:
/usr/lib64/go/1.25/src/cmd/vendor/github.com/google/pprof/third_party/svgpa=
n/svgpan.go:10:12:
pattern svgpan.js: no matching files found

However, this works with go1.24:

% /usr/lib64/go/1.24/bin/go tool pprof -top ./umoci umoci.profile
File: umoci
Build ID: 92dba68898c2a4f76f7dbeb49e1622651226159c
Type: cpu
Time: 2025-09-18 17:25:44 AEST
Duration: 201.15ms, Total samples =3D 0
Showing nodes accounting for 0, 0% of 0 total
      flat  flat%   sum%        cum   cum%

The core issue is (as the error implies) that svgpan.js is missing from the
package /usr/lib64/go/... source tree and so go:embed is failing to embed t=
he
file. The specfile has handling for pprof but I guess go:embed usage is new=
 in
Go 1.25 or something else changed since Go 1.22.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17581811462.Ce6e98F.80--


body:
--17581839520.0777b0B5.239
Date: Thu, 18 Sep 2025 08:25:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1249999

            Bug ID: 1249999
           Summary: VUL-0: chromium: release 140.0.7339.185
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in Chromium 140.0.7339.185:=20

* CVE-2025-10585: Type Confusion in V8
* CVE-2025-10500: Use after free in Dawn
* CVE-2025-10501: Use after free in WebRTC
* CVE-2025-10502: Heap buffer overflow in ANGLE

Google is aware that an exploit for CVE-2025-10585 exists in the wild.

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-des=
ktop_17.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17581839520.0777b0B5.239
Date: Thu, 18 Sep 2025 08:25:52 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1249999

          Summary
          VUL-0: chromium: release 140.0.7339.185

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in Chromium 140.0.7339.185:=20

* CVE-2025-10585: Type Confusion in V8
* CVE-2025-10500: Use after free in Dawn
* CVE-2025-10501: Use after free in WebRTC
* CVE-2025-10502: Heap buffer overflow in ANGLE

Google is aware that an exploit for CVE-2025-10585 exists in the wild.

https://chromereleases.googleblog.com/2025/09/stab=
le-channel-update-for-desktop_17.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17581839520.0777b0B5.239--

summary: VUL-0: chromium: release 140.0.7339.185


body:
--17581906713.EDBbecF0A.773
Date: Thu, 18 Sep 2025 10:17:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250033

            Bug ID: 1250033
           Summary: gdb infinite loop during whatis
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: pafee-at-tycoint.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Infinite loop occurs when using GDB "whatis" to query the type of
"std::string::npos".

Example program:

#include <string>

int main()
{
  std::string foo =3D "bar";
  return foo.size();
}

Compile and debug:
$ c++ -g example.cpp
$ gdb a.out
(gdb) start
(gdb) ptype std::string::npos
type =3D const unsigned long
(gdb) whatis std::string::npos

Expected output:
type =3D const std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> >::size_type

Current result:
GDB hangs, consumes 100% CPU.  Using strace, I can see it's busy allocating
memory:
[pid 184527] 11:13:26.979889 brk(0x55a3e9a48000) =3D 0x55a3e9a48000
[pid 184527] 11:13:26.983764 brk(0x55a3e9a69000) =3D 0x55a3e9a69000
[pid 184527] 11:13:26.987646 brk(0x55a3e9a8a000) =3D 0x55a3e9a8a000
[pid 184527] 11:13:26.991553 brk(0x55a3e9aab000) =3D 0x55a3e9aab000
[pid 184527] 11:13:26.995421 brk(0x55a3e9acc000) =3D 0x55a3e9acc000
[pid 184527] 11:13:26.999312 brk(0x55a3e9aed000) =3D 0x55a3e9aed000

Packages versions: (all Tumbleweed updates installed)
openSUSE-release-20250916-3709.1.x86_64
gdb-16.3-2.1.x86_64
gcc-c++-15-1.1.x86_64
libstdc++6-pp-15.2.0+git10201-1.1.x86_64
libstdc++6-15.2.0+git10201-1.1.x86_64
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17581906713.EDBbecF0A.773
Date: Thu, 18 Sep 2025 10:17:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250033

          Summary
          gdb infinite loop during whatis

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Linux

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          pafee@tycoint.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Infinite loop occurs when using GDB "whatis" to qu=
ery the type of
"std::string::npos".

Example program:

#include <string>

int main()
{
  std::string foo =3D "bar";
  return foo.size();
}

Compile and debug:
$ c++ -g example.cpp
$ gdb a.out
(gdb) start
(gdb) ptype std::string::npos
type =3D const unsigned long
(gdb) whatis std::string::npos

Expected output:
type =3D const std::__cxx11::basic_string<char, std::char_traits<char=
>,
std::allocator<char> >::size_type

Current result:
GDB hangs, consumes 100% CPU.  Using strace, I can see it's busy allocating
memory:
[pid 184527] 11:13:26.979889 brk(0x55a3e9a48000) =3D 0x55a3e9a48000
[pid 184527] 11:13:26.983764 brk(0x55a3e9a69000) =3D 0x55a3e9a69000
[pid 184527] 11:13:26.987646 brk(0x55a3e9a8a000) =3D 0x55a3e9a8a000
[pid 184527] 11:13:26.991553 brk(0x55a3e9aab000) =3D 0x55a3e9aab000
[pid 184527] 11:13:26.995421 brk(0x55a3e9acc000) =3D 0x55a3e9acc000
[pid 184527] 11:13:26.999312 brk(0x55a3e9aed000) =3D 0x55a3e9aed000

Packages versions: (all Tumbleweed updates installed)
openSUSE-release-20250916-3709.1.x86_64
gdb-16.3-2.1.x86_64
gcc-c++-15-1.1.x86_64
libstdc++6-pp-15.2.0+git10201-1.1.x86_64
libstdc++6-15.2.0+git10201-1.1.x86_64

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17581906713.EDBbecF0A.773--

summary: gdb infinite loop during whatis


--17582703981.9c77C.2875
Date: Fri, 19 Sep 2025 08:26:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250115

            Bug ID: 1250115
           Summary: openSSH is strict about used openssl version, but rpm metadata does not say so
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Factory has just updated to a new openssl version 3.0.3f; openssh was last
build against 3.0.2

This mismatch causes openssh / sshd-gen-keys-start to refuse starting

 Sep 19 03:39:22 localhost.localdomain sshd-gen-keys-start[4449]: OpenSSL
version mismatch. Built against 30500020, you have 3050003f
 Sep 19 03:39:22 localhost.localdomain systemd[1]: sshd.service: Control
process exited, code=3Dexited, status=3D255/EXCEPTION

That check implies a distrust against ABI stability in openSSL (why else wo=
uld
it matter?)

If openSSH is so strict about using the same library at runtime as at build
time, then the rpm needs to specify this strict dependency

(we have now triggered a rebuild of openssh in Factory, to keep Factory mov=
ing
- but the issue is not 'fixed' just with that)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17582703981.9c77C.2875
Date: Fri, 19 Sep 2025 08:26:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250115

          Summary
          openSSH is strict about used openssl version, but rpm metadat=
a does not say so

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Factory has just updated to a new openssl version 3.0.3f; op=
enssh was last
build against 3.0.2

This mismatch causes openssh / sshd-gen-keys-start to refuse starting

 Sep 19 03:39:22 localhost.localdomain sshd-gen-keys-start[4449]: OpenSSL
version mismatch. Built against 30500020, you have 3050003f
 Sep 19 03:39:22 localhost.localdomain systemd[1]: sshd.service: Control
process exited, code=3Dexited, status=3D255/EXCEPTION

That check implies a distrust against ABI stability in openSSL (why else wo=
uld
it matter?)

If openSSH is so strict about using the same library at runtime as at build
time, then the rpm needs to specify this strict dependency

(we have now triggered a rebuild of openssh in Factory, to keep Factory mov=
ing
- but the issue is not 'fixed' just with that)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17582703981.9c77C.2875--


--17583885773.BFca2F42.4805
Date: Sat, 20 Sep 2025 17:16:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250228

            Bug ID: 1250228
           Summary: clang/llvm 19 crash when building zig 0.14.0 on x86_64 while it works on aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: aaronpuchert@alice-dsl.net
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://build.opensuse.org/package/show/devel:languages:zig/zig0.14

```
(gdb) bt
#0  0x00007fffee3123dd in ?? () from /lib64/libLLVM.so.19.1
#1  0x00007fffee30e6a6 in llvm::ConstantFoldCall(llvm::CallBase const*,
llvm::Function*, llvm::ArrayRef<llvm::Constant*>, llvm::TargetLibraryInfo
const*, bool) () from /lib64/libLLVM.so.19.1
#2  0x00007fffee38edb6 in ?? () from /lib64/libLLVM.so.19.1
#3  0x00007fffee389477 in ?? () from /lib64/libLLVM.so.19.1
#4  0x00007fffee383c0b in ?? () from /lib64/libLLVM.so.19.1
#5  0x00007fffee382cdb in llvm::getInlineCost(llvm::CallBase&, llvm::Functi=
on*,
llvm::InlineParams const&, llvm::TargetTransformInfo&,
llvm::function_ref<llvm::AssumptionCache& (llvm::Function&)>,
llvm::function_ref<llvm::TargetLibraryInfo const& (llvm::Function&)>,
llvm::function_ref<llvm::BlockFrequencyInfo& (llvm::Function&)>,
llvm::ProfileSummaryInfo*, llvm::OptimizationRemarkEmitter*) () from
/lib64/libLLVM.so.19.1
#6  0x00007fffee396890 in ?? () from /lib64/libLLVM.so.19.1
#7  0x00007fffee3930f3 in llvm::shouldInline(llvm::CallBase&,
llvm::function_ref<llvm::InlineCost (llvm::CallBase&)>,
llvm::OptimizationRemarkEmitter&, bool) () from /lib64/libLLVM.so.19.1
#8  0x00007fffee392b19 in ?? () from /lib64/libLLVM.so.19.1
#9  0x00007fffee392621 in
llvm::DefaultInlineAdvisor::getAdviceImpl(llvm::CallBase&) () from
/lib64/libLLVM.so.19.1
#10 0x00007fffee3960b9 in llvm::InlineAdvisor::getAdvice(llvm::CallBase&, b=
ool)
() from /lib64/libLLVM.so.19.1
#11 0x00007fffedfc7d89 in llvm::InlinerPass::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libLLVM.so.1=
9.1
#12 0x00007fffedfcbd1d in ?? () from /lib64/libLLVM.so.19.1
#13 0x00007fffee2eab93 in llvm::PassManager<llvm::LazyCallGraph::SCC,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>::run(llvm::LazyCallGraph::S=
CC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libLLVM.so.1=
9.1
#14 0x00007fffedfcc3ae in ?? () from /lib64/libLLVM.so.19.1
#15 0x00007fffee2ecb8e in
llvm::DevirtSCCRepeatedPass::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libLLVM.so.1=
9.1
#16 0x00007fffedfccb1e in ?? () from /lib64/libLLVM.so.19.1
#17 0x00007fffee2ec14b in
llvm::ModuleToPostOrderCGSCCPassAdaptor::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.19.1
#18 0x00007fffedfcc84e in ?? () from /lib64/libLLVM.so.19.1
#19 0x00007fffecd2d096 in llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.19.1
#20 0x00007fffedfc9acd in llvm::ModuleInlinerWrapperPass::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.19.1
#21 0x00007ffff046e5ae in ?? () from /lib64/libLLVM.so.19.1
#22 0x00007fffecd2d096 in llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.19.1
#23 0x000055555868fef2 in ZigLLVMTargetMachineEmitToFile ()
#24 0x00005555584b4f5e in codegen_llvm_Object_emit__12092 ()
#25 0x0000555557e1c908 in Compilation_emitLlvmObject__5475 ()
#26 0x0000555557e39396 in link_File_emitLlvmObject__5153 ()
#27 0x0000555557e222d6 in link_Elf_flushModule__5192 ()
#28 0x0000555557e20f1a in link_File_flushModule__5127 ()
#29 0x0000555557e1e7f9 in link_File_linkAsArchiveInner__5142 ()
#30 0x0000555557e1ca5f in link_File_linkAsArchive__5141 ()
#31 0x0000555557e1bd08 in link_File_flush__5126 ()
#32 0x0000555555e1dcc2 in Compilation_flush__5468 ()
#33 0x0000555555e056f7 in Compilation_update__5466 ()
#34 0x00005555579df084 in Compilation_updateSubCompilation__5560 ()
#35 0x00005555579de673 in Compilation_buildOutputFromZig__5561 ()
#36 0x00005555579dbb27 in Compilation_buildRt__5513 ()
#37 0x00005555579db2a7 in
Thread_WaitGroup_spawnManager__anon_93887_Manager_run__69101 ()
#38 0x00005555579dba71 in Thread_callFn__anon_242819__91961 ()
#39 0x00005555579db9e2 in
Thread_PosixThreadImpl_spawn__anon_183151_Instance_entryFn__83824 ()
#40 0x00007fffebd56df1 in start_thread () from /lib64/libc.so.6
#41 0x00007fffebddbc8c in __clone3 () from /lib64/libc.so.6
```
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17583885773.BFca2F42.4805
Date: Sat, 20 Sep 2025 17:16:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250228

          Summary
          clang/llvm 19 crash when building zig 0.14.0 on x86_64 while =
it works on aarch64

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mrueckert@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          aaronpuchert@alice-dsl.net

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://build.opensuse.org/package/show/devel:languages=
:zig/zig0.14

```
(gdb) bt
#0  0x00007fffee3123dd in ?? () from /lib64/libLLVM.so.19.1
#1  0x00007fffee30e6a6 in llvm::ConstantFoldCall(llvm::CallBase const*,
llvm::Function*, llvm::ArrayRef<llvm::Constant*>, llvm::TargetLibrary=
Info
const*, bool) () from /lib64/libLLVM.so.19.1
#2  0x00007fffee38edb6 in ?? () from /lib64/libLLVM.so.19.1
#3  0x00007fffee389477 in ?? () from /lib64/libLLVM.so.19.1
#4  0x00007fffee383c0b in ?? () from /lib64/libLLVM.so.19.1
#5  0x00007fffee382cdb in llvm::getInlineCost(llvm::CallBase&, llvm::Fu=
nction*,
llvm::InlineParams const&, llvm::TargetTransformInfo&,
llvm::function_ref<llvm::AssumptionCache& (llvm::Function&)>,
llvm::function_ref<llvm::TargetLibraryInfo const& (llvm::Function&am=
p;)>,
llvm::function_ref<llvm::BlockFrequencyInfo& (llvm::Function&)&g=
t;,
llvm::ProfileSummaryInfo*, llvm::OptimizationRemarkEmitter*) () from
/lib64/libLLVM.so.19.1
#6  0x00007fffee396890 in ?? () from /lib64/libLLVM.so.19.1
#7  0x00007fffee3930f3 in llvm::shouldInline(llvm::CallBase&,
llvm::function_ref<llvm::InlineCost (llvm::CallBase&)>,
llvm::OptimizationRemarkEmitter&, bool) () from /lib64/libLLVM.so.19.1
#8  0x00007fffee392b19 in ?? () from /lib64/libLLVM.so.19.1
#9  0x00007fffee392621 in
llvm::DefaultInlineAdvisor::getAdviceImpl(llvm::CallBase&) () from
/lib64/libLLVM.so.19.1
#10 0x00007fffee3960b9 in llvm::InlineAdvisor::getAdvice(llvm::CallBase&amp=
;, bool)
() from /lib64/libLLVM.so.19.1
#11 0x00007fffedfc7d89 in llvm::InlinerPass::run(llvm::LazyCallGraph::SCC&a=
mp;,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&=
>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libL=
LVM.so.19.1
#12 0x00007fffedfcbd1d in ?? () from /lib64/libLLVM.so.19.1
#13 0x00007fffee2eab93 in llvm::PassManager<llvm::LazyCallGraph::SCC,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&=
>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>::run(llvm::LazyC=
allGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&=
>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libL=
LVM.so.19.1
#14 0x00007fffedfcc3ae in ?? () from /lib64/libLLVM.so.19.1
#15 0x00007fffee2ecb8e in
llvm::DevirtSCCRepeatedPass::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&=
>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&) () from /lib64/libL=
LVM.so.19.1
#16 0x00007fffedfccb1e in ?? () from /lib64/libLLVM.so.19.1
#17 0x00007fffee2ec14b in
llvm::ModuleToPostOrderCGSCCPassAdaptor::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.1=
9.1
#18 0x00007fffedfcc84e in ?? () from /lib64/libLLVM.so.19.1
#19 0x00007fffecd2d096 in llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.1=
9.1
#20 0x00007fffedfc9acd in llvm::ModuleInlinerWrapperPass::run(llvm::Module&=
amp;,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.1=
9.1
#21 0x00007ffff046e5ae in ?? () from /lib64/libLLVM.so.19.1
#22 0x00007fffecd2d096 in llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&) () from /lib64/libLLVM.so.1=
9.1
#23 0x000055555868fef2 in ZigLLVMTargetMachineEmitToFile ()
#24 0x00005555584b4f5e in codegen_llvm_Object_emit__12092 ()
#25 0x0000555557e1c908 in Compilation_emitLlvmObject__5475 ()
#26 0x0000555557e39396 in link_File_emitLlvmObject__5153 ()
#27 0x0000555557e222d6 in link_Elf_flushModule__5192 ()
#28 0x0000555557e20f1a in link_File_flushModule__5127 ()
#29 0x0000555557e1e7f9 in link_File_linkAsArchiveInner__5142 ()
#30 0x0000555557e1ca5f in link_File_linkAsArchive__5141 ()
#31 0x0000555557e1bd08 in link_File_flush__5126 ()
#32 0x0000555555e1dcc2 in Compilation_flush__5468 ()
#33 0x0000555555e056f7 in Compilation_update__5466 ()
#34 0x00005555579df084 in Compilation_updateSubCompilation__5560 ()
#35 0x00005555579de673 in Compilation_buildOutputFromZig__5561 ()
#36 0x00005555579dbb27 in Compilation_buildRt__5513 ()
#37 0x00005555579db2a7 in
Thread_WaitGroup_spawnManager__anon_93887_Manager_run__69101 ()
#38 0x00005555579dba71 in Thread_callFn__anon_242819__91961 ()
#39 0x00005555579db9e2 in
Thread_PosixThreadImpl_spawn__anon_183151_Instance_entryFn__83824 ()
#40 0x00007fffebd56df1 in start_thread () from /lib64/libc.so.6
#41 0x00007fffebddbc8c in __clone3 () from /lib64/libc.so.6
```

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17583885773.BFca2F42.4805--


body:
--17584110441.fafdE9A8.4916
Date: Sat, 20 Sep 2025 23:30:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250231

            Bug ID: 1250231
           Summary: MuseScore Studio 4.5.2 Available
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Operating System: openSUSE Tumbleweed 20250919
KDE Plasma Version: 6.4.5
KDE Frameworks Version: 6.18.0
Qt Version: 6.9.2
Kernel Version: 6.16.7-1-default (64-bit)
Graphics Platform: Wayland
Processors: 12 =C3=97 Intel=C2=AE Core=E2=84=A2 7 150U
Memory: 16 GiB of RAM (15.3 GiB usable)
Graphics Processor: Intel=C2=AE Graphics
Manufacturer: Dell Inc.
Product Name: Inspiron 16 5640

Link to Change Log https://musescore.org/en/4.5.2
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17584110441.fafdE9A8.4916
Date: Sat, 20 Sep 2025 23:30:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250231

          Summary
          MuseScore Studio 4.5.2 Available

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Enhancement

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jshand2013@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Operating System: openSUSE Tumbleweed 20250919
KDE Plasma Version: 6.4.5
KDE Frameworks Version: 6.18.0
Qt Version: 6.9.2
Kernel Version: 6.16.7-1-default (64-bit)
Graphics Platform: Wayland
Processors: 12 =C3=97 Intel=C2=AE Core=E2=84=A2 7 150U
Memory: 16 GiB of RAM (15.3 GiB usable)
Graphics Processor: Intel=C2=AE Graphics
Manufacturer: Dell Inc.
Product Name: Inspiron 16 5640

Link to Change Log https://muses=
core.org/en/4.5.2

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17584110441.fafdE9A8.4916--

summary: MuseScore Studio 4.5.2 Available


--17586142492.eDBC3a82f.8139
Date: Tue, 23 Sep 2025 07:57:29 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250366

            Bug ID: 1250366
           Summary: Selected keyboard during installation not set in GNOME, is set on console.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: yfjiang-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

This is spotted during SLES/Leap 16.0 testing using gdm-systemd as a display
launcher instead of xdm.

"When setting language to "English" and Keyboard layout to "Finnish
(official)", and having the checkbox "Use these same settings for the selec=
ted
product" checked, the resulting installation does have the correct keyboard
layout in console, but in GNOME's graphical terminal the keyboard is wrong.

The GNOME's "Keyboard" settings has no "Input Sources" defined. If manually
adding "Finnish (official)" as the layout, the keyboard works correctly als=
o in
GNOME."

The reason is the /usr/etc/X11/xdm/keytable script in xdm has been doing the
setup to set proper XKBLAYOUT in /etc/vconsole.conf. So without xdm, GNOME =
will
not get the proper XKBLAYOUT from the installer.

Tumbleweed is not hit by this because Tumbleweed is using xdm at the moment.
But I think it is a good thing to adapt the installer's keyboard layout set=
up
without xdm.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17586142492.eDBC3a82f.8139
Date: Tue, 23 Sep 2025 07:57:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250366

          Summary
          Selected keyboard during installation not set in GNOME, is se=
t on console.

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          GNOME

          Assignee
          gnome-bugs@suse.de

          Reporter
          yfjiang@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

This is spotted during SLES/Leap 16.0 testing using gdm-syst=
emd as a display
launcher instead of xdm.

"When setting language to "English" and Keyboard layout to &=
quot;Finnish
(official)", and having the checkbox "Use these same settings for=
 the selected
product" checked, the resulting installation does have the correct key=
board
layout in console, but in GNOME's graphical terminal the keyboard is wrong.

The GNOME's "Keyboard" settings has no "Input Sources" =
defined. If manually
adding "Finnish (official)" as the layout, the keyboard works cor=
rectly also in
GNOME."

The reason is the /usr/etc/X11/xdm/keytable script in xdm has been doing the
setup to set proper XKBLAYOUT in /etc/vconsole.conf. So without xdm, GNOME =
will
not get the proper XKBLAYOUT from the installer.

Tumbleweed is not hit by this because Tumbleweed is using xdm at the moment.
But I think it is a good thing to adapt the installer's keyboard layout set=
up
without xdm.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17586142492.eDBC3a82f.8139--


body:
--17587145844.Adfda6.1040
Date: Wed, 24 Sep 2025 11:49:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250472

            Bug ID: 1250472
           Summary: VUL-0: chromium: release 140.0.7339.185
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in 140.0.7339.207:

CVE-2025-10890: Side-channel information leakage in V8
CVE-2025-10891: Integer overflow in V8
CVE-2025-10892: Integer overflow in V8

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-des=
ktop_23.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17587145844.Adfda6.1040
Date: Wed, 24 Sep 2025 11:49:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250472

          Summary
          VUL-0: chromium: release 140.0.7339.185

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in 140.0.7339.207:

CVE-2025-10890: Side-channel information leakage in V8
CVE-2025-10891: Integer overflow in V8
CVE-2025-10892: Integer overflow in V8

https://chromereleases.googleblog.com/2025/09/stab=
le-channel-update-for-desktop_23.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17587145844.Adfda6.1040--

summary: VUL-0: chromium: release 140.0.7339.185


body:
--17587259380.8ccAb.1463
Date: Wed, 24 Sep 2025 14:58:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250481

            Bug ID: 1250481
           Summary: hplip missing dependencies
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Printing
          Assignee: jsmeix-at-suse.com
          Reporter: gcomes.obs-at-gmail.com
        QA Contact: jsmeix-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

In Leap 16.0 GM the package hplip requires foomatic-filters but such packag=
e is
not present in the distribution.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17587259380.8ccAb.1463
Date: Wed, 24 Sep 2025 14:58:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250481

          Summary
          hplip missing dependencies

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Printing

          Assignee
          jsmeix@suse.com

          Reporter
          gcomes.obs@gmail.com

          QA Contact
          jsmeix@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

In Leap 16.0 GM the package hplip requires foomatic-filters =
but such package is
not present in the distribution.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17587259380.8ccAb.1463--

summary: hplip missing dependencies


--17587944482.dE637dB.2623
Date: Thu, 25 Sep 2025 10:00:48 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250507

            Bug ID: 1250507
           Summary: kernel-source:kernel-docs package doesn't build with latest docutils
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: daniel.garcia-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 885963
  --> https://bugzilla.suse.com/attachment.cgi?id=3D885963&action=3Dedit
docs: extensions: don't use deprecated ErrorString, SafeString

We are trying to update python-docutils to 0.22 in Factory [1] and the pack=
age
kernel-source:kernel-docs is failing to build.

I've created a patch to fix this upstream [2].

[1] https://build.opensuse.org/project/show/openSUSE:Factory:Staging:E
[2]
https://lore.kernel.org/linux-doc/20250925094508.43174-1-daniel.garcia@suse=
.com/T/
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17587944482.dE637dB.2623
Date: Thu, 25 Sep 2025 10:00:48 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250507

          Summary
          kernel-source:kernel-docs package doesn't build with latest d=
ocutils

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          daniel.garcia@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 885963 [details]
docs: extensions: don't use deprecated ErrorString, SafeString

We are trying to update python-docutils to 0.22 in Factory [1] and the pack=
age
kernel-source:kernel-docs is failing to build.

I've created a patch to fix this upstream [2].

[1] https://build.opensuse.org/project/show/openSUSE:Factory:Staging:E<=
/a>
[2]
https://lore.kernel.org/linux-doc/20250925094508.43=
174-1-daniel.garcia@suse.com/T/

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17587944482.dE637dB.2623--


--17587993221.a7ea.2800
Date: Thu, 25 Sep 2025 11:22:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250512

            Bug ID: 1250512
           Summary: [Build 20250924] gnucash failed to build against Boost 1.89
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5341178/modules/gnuc
                    ash/steps/27
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

Boost 1.89 has removed the 'system' library, which has been a stub since 1.=
70
gnucash still buildrequired the library though and as a result could not be
rebuilt

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_on_kde@u=
efi
fails in
[gnucash](https://openqa.opensuse.org/tests/5341178/modules/gnucash/steps/2=
7)

## Test suite description

## Reproducible

Fails since (at least) Build
[20250924](https://openqa.opensuse.org/tests/5341178) (current job)

## Expected result

Last good: [20250923](https://openqa.opensuse.org/tests/5336313) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi&test=3Dextra_tests_on_kde&version=3DTumb=
leweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17587993221.a7ea.2800
Date: Thu, 25 Sep 2025 11:22:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250512

          Summary
          [Build 20250924] gnucash failed to build against Boost 1.89

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5341178/modules/gnucash/ste=
ps/27

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

Boost 1.89 has removed the 'system' library, which has been a stub since 1.=
70
gnucash still buildrequired the library though and as a result could not be
rebuilt

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_on_kde&#=
64;uefi
fails in
[gnucash](https://openqa.opensuse.org/tests/5341178/modules/gnucash/ste=
ps/27)

## Test suite description

## Reproducible

Fails since (at least) Build
[20250924](https://op=
enqa.opensuse.org/tests/5341178) (current job)

## Expected result

Last good: [20250923](https://openqa.opensuse.org/tests/5336313) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/la=
test?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3Duef=
i&test=3Dextra_tests_on_kde&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17587993221.a7ea.2800--


--17588143393.9ad2d9.3432
Date: Thu, 25 Sep 2025 15:32:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250526

            Bug ID: 1250526
           Summary: [Build 20250924] awesome: fails to login from lightdm to awesome_wm
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5343464/modules/rebo
                    ot_icewm/steps/11
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

We have the same test setup for 4 desktops, 3 of them work
the 'awesome_wm' test fails to login after installation though

the test layout is: install a system as minimalX (icewm); save that HDD
* Boot that HDD< install the expected desktop, switch to the right DM
Reboot, and login

The same routine works for mate, lxqt and enlightenment; awesome_wm fails

openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_awesome@uefi
fails in
[reboot_icewm](https://openqa.opensuse.org/tests/5343464/modules/reboot_ice=
wm/steps/11)

## Test suite description

## Reproducible

Fails since (at least) Build
[20250924](https://openqa.opensuse.org/tests/5341021)

## Expected result

Last good: [20250923](https://openqa.opensuse.org/tests/5336156) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DNET&machine=3Duefi&test=3DotherDE_awesome&version=3DTumblew=
eed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17588143393.9ad2d9.3432
Date: Thu, 25 Sep 2025 15:32:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250526

          Summary
          [Build 20250924] awesome: fails to login from lightdm to awes=
ome_wm

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5343464/modules/reboot_icew=
m/steps/11

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

We have the same test setup for 4 desktops, 3 of them work
the 'awesome_wm' test fails to login after installation though

the test layout is: install a system as minimalX (icewm); save that HDD
* Boot that HDD< install the expected desktop, switch to the right DM
Reboot, and login

The same routine works for mate, lxqt and enlightenment; awesome_wm fails

openQA test in scenario opensuse-Tumbleweed-NET-x86_64-otherDE_awesome@=
uefi
fails in
[reboot_icewm](https://openqa.opensuse.org/tests/5343464/modules/r=
eboot_icewm/steps/11)

## Test suite description

## Reproducible

Fails since (at least) Build
[20250924](https://op=
enqa.opensuse.org/tests/5341021)

## Expected result

Last good: [20250923](https://openqa.opensuse.org/tests/5336156) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/lates=
t?arch=3Dx86_64&distri=3Dopensuse&flavor=3DNET&machine=3Duefi&a=
mp;test=3DotherDE_awesome&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17588143393.9ad2d9.3432--


body:
--17590166793.5df3fdd.5792
Date: Sat, 27 Sep 2025 23:44:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250583

            Bug ID: 1250583
           Summary: After 0925 update gkrellm wont load
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: erbenton-at-comcast.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I have multiple systems and gkrellm wont load aftaer i did the 0925 update
If i run it from the command line i get this:

(gkrellm:33476): GdkPixbuf-WARNING **: 16:43:18.278: Error loading XPM image
loader: Image type =E2=80=9Cxpm=E2=80=9D is not supported
  Cannot load xpm: frame_top

multiple times
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17590166793.5df3fdd.5792
Date: Sat, 27 Sep 2025 23:44:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250583

          Summary
          After 0925 update gkrellm wont load

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          erbenton@comcast.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I have multiple systems and gkrellm wont load aftaer i did t=
he 0925 update
If i run it from the command line i get this:

(gkrellm:33476): GdkPixbuf-WARNING **: 16:43:18.278: Error loading XPM image
loader: Image type =E2=80=9Cxpm=E2=80=9D is not supported
  Cannot load xpm: frame_top

multiple times

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17590166793.5df3fdd.5792--

summary: After 0925 update gkrellm wont load


--17591282570.8A052.6493
Date: Mon, 29 Sep 2025 06:44:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250605

            Bug ID: 1250605
           Summary: VUL-0: CVE-2025-59842: python-jupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/474688/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: mcepl-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: gianluca.gabrielli-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

jupyterlab is an extensible environment for interactive and reproducible
computing, based on the Jupyter Notebook Architecture. Prior to version 4.4=
.8,
links generated with LaTeX typesetters in Markdown files and Markdown cells=
 in
JupyterLab and Jupyter Notebook did not include the noopener attribute. Thi=
s is
deemed to have no impact on the default installations. Theoretically users =
of
third-party LaTeX-rendering extensions could find themselves vulnerable to
reverse tabnabbing attacks if links generated by those extensions included
target=3D_blank (no such extensions are known at time of writing) and they =
were
to click on a link generated in LaTeX (typically visibly different from oth=
er
links). This issue has been patched in version 4.4.8.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-59842
https://www.cve.org/CVERecord?id=3DCVE-2025-59842
https://github.com/jupyterlab/jupyterlab/commit/88ef373039a8cc09f27d3814382=
a512d9033675c
https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-vvfj-2jqx=
-52jm
https://bugzilla.redhat.com/show_bug.cgi?id=3D2399757
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/59xxx/CVE-2025=
-59842.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17591282570.8A052.6493
Date: Mon, 29 Sep 2025 06:44:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-59842: python-jupyterlab: JupyterLab LaTe=
X typesetter links did not enforce `noopener` attribute"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1250605">1250605

          Summary
          VUL-0: CVE-2025-59842: python-jupyterlab: JupyterLab LaTeX ty=
pesetter links did not enforce `noopener` attribute

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/474688/

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Other

          Assignee
          mcepl@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          gianluca.gabrielli@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

jupyterlab is an extensible environment for interactive and =
reproducible
computing, based on the Jupyter Notebook Architecture. Prior to version 4.4=
.8,
links generated with LaTeX typesetters in Markdown files and Markdown cells=
 in
JupyterLab and Jupyter Notebook did not include the noopener attribute. Thi=
s is
deemed to have no impact on the default installations. Theoretically users =
of
third-party LaTeX-rendering extensions could find themselves vulnerable to
reverse tabnabbing attacks if links generated by those extensions included
target=3D_blank (no such extensions are known at time of writing) and they =
were
to click on a link generated in LaTeX (typically visibly different from oth=
er
links). This issue has been patched in version 4.4.8.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-59842
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-59842
https://github.com/jupyterlab/jupyterlab/commit/8=
8ef373039a8cc09f27d3814382a512d9033675c
https://github.com/jupyterlab/jupyterlab/security/advisor=
ies/GHSA-vvfj-2jqx-52jm
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2399757
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/59xxx/CVE-2025-59842.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17591282570.8A052.6493--


body:
--17591675011.1eA7.8046
Date: Mon, 29 Sep 2025 17:38:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250659

            Bug ID: 1250659
           Summary: python314: support for compression.zstd
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: contact-at-rogdham.net
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello, I noticed that the _zstd module (added in CPython 3.14) seems to be
missing from the python314 package:

    # python3.14 -c 'from compression import zstd'
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
        from compression import zstd
      File "/usr/lib64/python3.14/compression/zstd/__init__.py", line
    29, in <module> import _zstd
    ModuleNotFoundError: No module named '_zstd'

I was wondering if this was done on purpose or not. As a comparison, the _l=
zma
module is available (and compression.lzma can be imported).

Sample Dockerfile for reproduction:

    FROM opensuse/tumbleweed
    RUN zypper install -y python314
    RUN python3.14 -c 'import compression.zstd'

Many thanks
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17591675011.1eA7.8046
Date: Mon, 29 Sep 2025 17:38:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250659

          Summary
          python314: support for compression.zstd

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          contact@rogdham.net

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hello, I noticed that the _zstd module (added in CPython 3.1=
4) seems to be
missing from the python314 package:

    # python3.14 -c 'from compression import zstd'
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
        from compression import zstd
      File "/usr/lib64/python3.14/compression/zstd/__init__.py", =
line
    29, in <module> import _zstd
    ModuleNotFoundError: No module named '_zstd'

I was wondering if this was done on purpose or not. As a comparison, the _l=
zma
module is available (and compression.lzma can be imported).

Sample Dockerfile for reproduction:

    FROM opensuse/tumbleweed
    RUN zypper install -y python314
    RUN python3.14 -c 'import compression.zstd'

Many thanks

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17591675011.1eA7.8046--

summary: python314: support for compression.zstd


--17593015400.cde161bE.10607
Date: Wed, 1 Oct 2025 06:52:20 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250696

            Bug ID: 1250696
           Summary: SELinux: openQA test fails in salt_master
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5347669/modules/salt
                    _master/steps/109
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: deepthi.venkatachala-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

SELinux prevents Salt from executing RPM

type=3DAVC msg=3Daudit(1759244587.412:219): avc:  denied  { transition } fo=
r=20
pid=3D4627 comm=3D"rpm" path=3D"/usr/bin/bash" dev=3D"vda2" ino=3D15775
scontext=3Dsystem_u:system_r:salt_t:s0 tcontext=3Dsystem_u:system_r:rpm_scr=
ipt_t:s0
tclass=3Dprocess permissive=3D0

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-salt-master@uefi fai=
ls
in
[salt_master](https://openqa.opensuse.org/tests/5347669/modules/salt_master=
/steps/109)

## Test suite description
Maintainer: zluo-at-suse.de
MM tests for Tumbleweed

## Reproducible

Fails since (at least) Build
[20250825-uefi](https://openqa.opensuse.org/tests/5267594)

## Expected result

Last good: [20250718-uefi-default](https://openqa.opensuse.org/tests/519102=
0)
(or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi&test=3Dsalt-master&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593015400.cde161bE.10607
Date: Wed, 1 Oct 2025 06:52:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250696

          Summary
          SELinux: openQA test fails in salt_master

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5347669/modules/salt_master=
/steps/109

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          deepthi.venkatachala@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

SELinux prevents Salt from executing RPM

type=3DAVC msg=3Daudit(1759244587.412:219): avc:  denied  { transition } fo=
r=20
pid=3D4627 comm=3D"rpm" path=3D"/usr/bin/bash" dev=3D&q=
uot;vda2" ino=3D15775
scontext=3Dsystem_u:system_r:salt_t:s0 tcontext=3Dsystem_u:system_r:rpm_scr=
ipt_t:s0
tclass=3Dprocess permissive=3D0

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-salt-master@uefi=
 fails
in
[salt_master](https://openqa.opensuse.org/tests/5347669/modules/sa=
lt_master/steps/109)

## Test suite description
Maintainer: zluo@suse.de
MM tests for Tumbleweed

## Reproducible

Fails since (at least) Build
[20250825-uefi](https=
://openqa.opensuse.org/tests/5267594)

## Expected result

Last good: [20250718-uefi-default](https://openqa.opensuse.org/tests/5191020)
(or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?ar=
ch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3Duefi&t=
est=3Dsalt-master&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593015400.cde161bE.10607--


body:
--17593045800.bEf54715D.10694
Date: Wed, 1 Oct 2025 07:43:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250697

            Bug ID: 1250697
           Summary: Missing xmaxima.info.gz
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: All
                OS: openSUSE Leap 15.6
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Checking for file conflicts:
..................................................[done]
( 1/13) Installing: libplot2-2.6-2.11.x86_64
..................................[done]
( 2/13) Installing: maxima-exec-clisp-5.47.0-bp156.1.54.x86_64
................[done]
( 3/13) Installing: rlwrap-0.46.1-bp156.1.3.x86_64
............................[done]
( 4/13) Installing: sbcl-2.3.7-bp156.1.47.x86_64
..............................[done]
( 5/13) Installing: plotutils-2.6-2.11.x86_64
.................................[done]
( 6/13) Installing: maxima-exec-sbcl-5.47.0-bp156.1.54.x86_64
.................[done]
( 7/13) Installing: maxima-5.47.0-bp156.1.54.x86_64
...........................[done]
( 8/13) Installing: maxima-xmaxima-5.47.0-bp156.1.54.x86_64
...................[done]
( 9/13) Installing: maxima-lang-5.47.0-bp156.1.54.noarch
......................[done]
(10/13) Installing: libwx_gtk3u_richtext-suse5_0_0-3.1.5-150400.3.10.1.x86_=
64
.[done]
(11/13) Installing: libwx_gtk3u_webview-suse5_0_0-3.1.5-150400.3.10.1.x86_64
..[done]

install-info: No such file or directory for /usr/share/info/wxmaxima.info.gz

(12/13) Installing: wxMaxima-23.07.0-bp156.1.7.x86_64
.........................[done]
(13/13) Installing: wxMaxima-lang-23.07.0-bp156.1.7.noarch
....................[done]
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593045800.bEf54715D.10694
Date: Wed, 1 Oct 2025 07:43:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250697

          Summary
          Missing xmaxima.info.gz

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          All

          OS
          openSUSE Leap 15.6

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          werner@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Checking for file conflicts:
..................................................[done]
( 1/13) Installing: libplot2-2.6-2.11.x86_64
..................................[done]
( 2/13) Installing: maxima-exec-clisp-5.47.0-bp156.1.54.x86_64
................[done]
( 3/13) Installing: rlwrap-0.46.1-bp156.1.3.x86_64
............................[done]
( 4/13) Installing: sbcl-2.3.7-bp156.1.47.x86_64
..............................[done]
( 5/13) Installing: plotutils-2.6-2.11.x86_64
.................................[done]
( 6/13) Installing: maxima-exec-sbcl-5.47.0-bp156.1.54.x86_64
.................[done]
( 7/13) Installing: maxima-5.47.0-bp156.1.54.x86_64
...........................[done]
( 8/13) Installing: maxima-xmaxima-5.47.0-bp156.1.54.x86_64
...................[done]
( 9/13) Installing: maxima-lang-5.47.0-bp156.1.54.noarch
......................[done]
(10/13) Installing: libwx_gtk3u_richtext-suse5_0_0-3.1.5-150400.3.10.1.x86_=
64
.[done]
(11/13) Installing: libwx_gtk3u_webview-suse5_0_0-3.1.5-150400.3.10.1.x86_64
..[done]

install-info: No such file or directory for /usr/share/info/wxmaxima.info.gz

(12/13) Installing: wxMaxima-23.07.0-bp156.1.7.x86_64
.........................[done]
(13/13) Installing: wxMaxima-lang-23.07.0-bp156.1.7.noarch
....................[done]

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593045800.bEf54715D.10694--

summary: Missing xmaxima.info.gz


--17593191193.7Fd6aB2EF.11171
Date: Wed, 1 Oct 2025 11:45:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250715

            Bug ID: 1250715
           Summary: VUL-0: CVE-2025-11226: logback: ACE vulnerability in conditional configuration file processing  by QOS.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/475078/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dleuenberger-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

ACE vulnerability in conditional configuration file processing  by QOS.CH
logback-core up to and including version 1.5.18 in Java applications, allow=
s an
attacker to execute arbitrary code by compromising an existing logback
configuration file or by injecting an environment variable before program
execution.

A successful attack requires the presence of Janino library and Spring
Framework to be present on the user's class path. In addition, the attacker
must=C2=A0 have write access to a=20
configuration file. Alternatively, the attacker could inject a malicious=20
environment variable pointing to a malicious configuration file. In both=20
cases, the attack requires existing privilege.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-11226
https://www.cve.org/CVERecord?id=3DCVE-2025-11226
https://logback.qos.ch/news.html#1.5.19
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593191193.7Fd6aB2EF.11171
Date: Wed, 1 Oct 2025 11:45:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250715

          Summary
          VUL-0: CVE-2025-11226: logback: ACE vulnerability in conditio=
nal configuration file processing  by QOS.

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/475078/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dleuenberger@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

ACE vulnerability in conditional configuration file processi=
ng  by QOS.CH
logback-core up to and including version 1.5.18 in Java applications, allow=
s an
attacker to execute arbitrary code by compromising an existing logback
configuration file or by injecting an environment variable before program
execution.

A successful attack requires the presence of Janino library and Spring
Framework to be present on the user's class path. In addition, the attacker
must=C2=A0 have write access to a=20
configuration file. Alternatively, the attacker could inject a malicious=20
environment variable pointing to a malicious configuration file. In both=20
cases, the attack requires existing privilege.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-11226
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-11226
https://logback.qos.ch/=
news.html#1.5.19

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593191193.7Fd6aB2EF.11171--


body:
--17593384540.80712a.12007
Date: Wed, 1 Oct 2025 17:07:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250780

            Bug ID: 1250780
           Summary: VUL-0: chromium: release 141.0.7390.54
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: ro-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in Chrome 141.0.7390.54=20

  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-des=
ktop_30.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593384540.80712a.12007
Date: Wed, 1 Oct 2025 17:07:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250780

          Summary
          VUL-0: chromium: release 141.0.7390.54

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          ro@suse.com

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in Chrome 141.0.7390.54=20

  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives

https://chromereleases.googleblog.com/2025/09/stab=
le-channel-update-for-desktop_30.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593384540.80712a.12007--

summary: VUL-0: chromium: release 141.0.7390.54


--17593847390.bCC45.12571
Date: Thu, 2 Oct 2025 05:58:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250804

            Bug ID: 1250804
           Summary: [Build 20251001] openQA test fails in fips_setup
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5356432/modules/fips
                    _setup/steps/19
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_fips@uefi fails in
[fips_setup](https://openqa.opensuse.org/tests/5356432/modules/fips_setup/s=
teps/19)

## Test suite description
microos FIPS enablement and some FIPS specific tests.=20

## Reproducible

Fails since (at least) Build
[20251001](https://openqa.opensuse.org/tests/5356432) (current job)

## Expected result

Last good: [20250930](https://openqa.opensuse.org/tests/5354885) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dmi=
croos&flavor=3DMicroOS-Image&machine=3Duefi&test=3Dmicroos_fips&version=3DT=
umbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593847390.bCC45.12571
Date: Thu, 2 Oct 2025 05:58:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250804

          Summary
          [Build 20251001] openQA test fails in fips_setup

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5356432/modules/fips_setup/=
steps/19

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          jslaby@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_fips@uefi fails in
[fips_setup](https://openqa.opensuse.org/tests/5356432/modules/fips_=
setup/steps/19)

## Test suite description
microos FIPS enablement and some FIPS specific tests.=20

## Reproducible

Fails since (at least) Build
[20251001](https://op=
enqa.opensuse.org/tests/5356432) (current job)

## Expected result

Last good: [20250930](https://openqa.opensuse.org/tests/5354885) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests=
/latest?arch=3Dx86_64&distri=3Dmicroos&flavor=3DMicroOS-Image&m=
achine=3Duefi&test=3Dmicroos_fips&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593847390.bCC45.12571--


--17593983811.4EDaDD.13225
Date: Thu, 2 Oct 2025 09:46:21 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250844

            Bug ID: 1250844
           Summary: AUDIT-WHITELIST: systemd: v258 new polkit rules 10-systemd-logind-root-ignore-inhibitors.rules.example
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: fbui-at-suse.com, security-team-at-suse.de
            Blocks: 1247556
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1247556

For the systemd main package only this finding is reported:

polkit-file-unauthorized /usr/share/polkit-1/rules.d/10-systemd-logind-root-
ignore-inhibitors.rules.example

Files without .rules extension will not be pulled in by Polkit, thus this f=
ile
will not be effective. I believe this is the first time we encounter such a
case. It's good, on the other hand, to have a look into example files, as
well, since they sometimes contain dangerous constructs. This file contains
the following:

```
// Allow the root user to ignore inhibitors when calling reboot etc.
polkit.addRule(function(action, subject) {
    if ((action.id =3D=3D "org.freedesktop.login1.power-off-ignore-inhibit"=
 ||
         action.id =3D=3D "org.freedesktop.login1.reboot-ignore-inhibit" ||
         action.id =3D=3D "org.freedesktop.login1.halt-ignore-inhibit" ||
         action.id =3D=3D "org.freedesktop.login1.suspend-ignore-inhibit" ||
         action.id =3D=3D "org.freedesktop.login1.hibernate-ignore-inhibit"=
) &&
        subject.user =3D=3D "root") {

        return polkit.Result.YES;
    }
});
```

This is fine. We can whitelist it.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17593983811.4EDaDD.13225
Date: Thu, 2 Oct 2025 09:46:21 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250844

          Summary
          AUDIT-WHITELIST: systemd: v258 new polkit rules 10-systemd-lo=
gind-root-ignore-inhibitors.rules.example

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          matthias.gerstner@suse.com

          Reporter
          matthias.gerstner@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          fbui@suse.com, security-team@suse.de

          Blocks
          1247556

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1247556

For the systemd main package only this finding is reported:

polkit-file-unauthorized /usr/share/polkit-1/rules.d/10-systemd-logind-root-
ignore-inhibitors.rules.example

Files without .rules extension will not be pulled in by Polkit, thus this f=
ile
will not be effective. I believe this is the first time we encounter such a
case. It's good, on the other hand, to have a look into example files, as
well, since they sometimes contain dangerous constructs. This file contains
the following:

```
// Allow the root user to ignore inhibitors when calling reboot etc.
polkit.addRule(function(action, subject) {
    if ((action.id =3D=3D "org.freedesktop.login1.power-off-ignore-inh=
ibit" ||
         action.id =3D=3D "org.freedesktop.login1.reboot-ignore-inhibi=
t" ||
         action.id =3D=3D "org.freedesktop.login1.halt-ignore-inhibit&=
quot; ||
         action.id =3D=3D "org.freedesktop.login1.suspend-ignore-inhib=
it" ||
         action.id =3D=3D "org.freedesktop.login1.hibernate-ignore-inh=
ibit") &&
        subject.user =3D=3D "root") {

        return polkit.Result.YES;
    }
});
```

This is fine. We can whitelist it.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17593983811.4EDaDD.13225--


--17594033233.B404AEE.13441
Date: Thu, 2 Oct 2025 11:08:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250880

            Bug ID: 1250880
           Summary: AUDIT-WHITELIST: systemd: v258 new polkit privilege in systemd-resolved
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: fbui-at-suse.com, security-team-at-suse.de
            Blocks: 1247556
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1247556

Split-off bug for easier tracking of the whitelistings. From the original b=
ug:

Here are the results for systemd-resolved:

E: polkit-untracked-privilege (Badness: 10) org.freedesktop.resolve1.subscr=
ibe-
dns-configuration (auth_admin:auth_admin:auth_admin_keep)

This protects a Varlink method. What is done here is subscribing for DNS
configuration change events at some DNS monitor. Polkit authentication is
properly called and evaluated. Only admins are allowed to subscribe for thi=
s,
no problems to be found.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17594033233.B404AEE.13441
Date: Thu, 2 Oct 2025 11:08:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250880

          Summary
          AUDIT-WHITELIST: systemd: v258 new polkit privilege in system=
d-resolved

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          matthias.gerstner@suse.com

          Reporter
          matthias.gerstner@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          fbui@suse.com, security-team@suse.de

          Blocks
          1247556

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1247556

Split-off bug for easier tracking of the whitelistings. From the original b=
ug:

Here are the results for systemd-resolved:

E: polkit-untracked-privilege (Badness: 10) org.freedesktop.resolve1.subscr=
ibe-
dns-configuration (auth_admin:auth_admin:auth_admin_keep)

This protects a Varlink method. What is done here is subscribing for DNS
configuration change events at some DNS monitor. Polkit authentication is
properly called and evaluated. Only admins are allowed to subscribe for thi=
s,
no problems to be found.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17594033233.B404AEE.13441--


body:
--17594043754.9a8a1F.13486
Date: Thu, 2 Oct 2025 11:26:15 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250884

            Bug ID: 1250884
           Summary: AUDIT-WHITELIST: systemd: v258 systemd-home D-Bus and Polkit changes
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: fbui-at-suse.com, security-team-at-suse.de
            Blocks: 1247556
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1247556

Split-off bug to better keep track of the whitelistings.

Original comment from the parent bug:

Next for the changes in systemd-homed. The diff of the D-Bus configuration
file is as follows:

> -

pkgs: polkit-default-privs rpmlint