--1627218532.6D5E26A22.12883
Date: Sun, 25 Jul 2021 13:08:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188689

            Bug ID: 1188689
           Summary: Allow easy setting up wireless network when installing and upgrading
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: freek-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

When installing or upgrading from the DVD iso on a laptop, not connected by
wire, there is no standard option to setup a wireless connection. The automatic
network setup does not result in a network connection, when only WiFi is
available.

There is a workaround to disrupt the installation/upgrading and using Settings
to setup a wireless connection. After that it is not so obvious to return to
the installation/upgrading process.

The advantage of having a network connection is that during
installation/upgrading newer packages get downloaded from the update
repositories. This is even more required when upgrading is used to repair an
almost fully updated system, where newer packages get replaced by the packages
from the iso image, which need to be updated afterwards.

It would be even more easy if the data for the network connection are read from
an already existing system; the system to be upgraded.

I needed this to recover, after updating one system on a multi-boot computer,
which left the other systems not bootable. The recovery was to use the iso to
"upgrade" the non-bootable system.


--1627310246.c18BAF70.7464
Date: Mon, 26 Jul 2021 14:37:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188715

            Bug ID: 1188715
           Summary: virt-host-validate reports wrong status for SEV support
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: vasily.ulyanov-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

virt-host-validate reads the value from sysfs file
`/sys/module/kvm_amd/parameters/sev` and expects it to be set to `1` if SEV is
enabled:

        if (virFileReadValueString(&mod_value,
"/sys/module/kvm_amd/parameters/sev") < 0) {
            virHostMsgFail(level, "AMD Secure Encrypted Virtualization not "
                                  "supported by the currently used kernel");
            return VIR_HOST_VALIDATE_FAILURE(level);
        }

        if (mod_value[0] != '1') { // <--


body:
--1627338079.bbE730.16120
Date: Mon, 26 Jul 2021 22:21:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188724

            Bug ID: 1188724
           Summary: "man motd" still only lists /etc/motd
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: pgajdos-at-suse.com
          Reporter: suse-beta-at-cboltz.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

"man motd" lists /etc/motd as the one and only file, but nowadays the motd gets
merged from various places.

Bug 1133929 lists several options - probably we don't use all of them.
On my Tumbleweed, I've found /usr/lib/motd.d/, /run/motd.d/ and/etc/motd.d/,
but I'm not sure if that list is complete.

Oh, and /etc/motd no longer exists on a default Tumbleweed installation (unless
an admin creates it).

Please update the motd manpage to include pointers to all the motd.d
directories.

pkgs: man-pages pam

summary: "man motd" still only lists /etc/motd


--1627465292.Bc0aCCDd0.15364
Date: Wed, 28 Jul 2021 09:41:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188847

            Bug ID: 1188847
           Summary: filesystem package executes binary from other package in pretrans
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bzeller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

We are currently implementing a new behaviour in zypper where all packages are
installed in a single rpm transaction.

Running a zypper dup in this mode breaks the system when the usrmerge is done
during the transaction and the compat-usrmerge-tools is pulled in as a
requirement, same would most likely happen if anyone uses dnf.

Reason for this is a bug in the filesystem package, a package MUST NOT depend
on anything else but Lua in its pretrans scripts. However, filesystem does
os.execute() the /usr/libexec/convertfs binary that is provided by the
compat-usrmerge-tools package.

Pretrans scripts are running before anything else, possibly even before a
single package was installed in the system. Requires like
>Requires(pre):  (compat-usrmerge-tools or rpmlib(X-CheckUnifiedSystemdir))
can only considered to be fulfilled in the preinstall scripts.

This should be fixed asap since it has the potential to badly break systems.


body:
--1627487507.deCaFFDe0.2526
Date: Wed, 28 Jul 2021 15:51:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188862

            Bug ID: 1188862
           Summary: hardcoded COLORTERM=1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: werner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: meissner-at-suse.com
          Found By: ---
           Blocker: ---

playing with notcurses () I noticed that we hardcode COLORTERM=1 in
/etc/profile.

According to
https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md#the-colorterm-environment-variable
it should be set to "24bit" if the terminal supports it, alternatively the
terminfo should have rgb capability.

Just did a quick test with the terminal applications we have in kde and xfce
and they seem to override the setting and actually set COLORTERM=truecolor.

Teaching ssh to relay that setting it would always be reset to 1 via
/etc/profile.

You can see the effect by installing notcurses-demos and running
"notcurses-demo i" with different COLORTERM settings.

Maybe time to get rid of COLORTERM handling in /etc/profile at all? mc seems to
be colorized in any case :-)

summary: hardcoded COLORTERM=1


--1627489088.a34ed32.12525
Date: Wed, 28 Jul 2021 16:18:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188867

            Bug ID: 1188867
           Summary: Add standardized French keyboard layout (AZERTY AFNOR, NF Z71-300)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: mvidner-at-suse.com
          Reporter: mvidner-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

We got a contribution to YaST, https://github.com/yast/yast-country/pull/273
saying

> This keyboard layout is the normalized (i.e. defined by the French authority of normalization AFNOR) version of the azerty layout. It???s a major improvement and was released in 2019. It???s already made its way into kbd and xkeyboard-config a while ago

References:
https://norme-azerty.fr/en/
https://normalisation.afnor.org/actualites/faq-clavier-francais/


body:
--1627582138.1A42BBC00.14586
Date: Thu, 29 Jul 2021 18:08:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188902

            Bug ID: 1188902
           Summary: [Build 20210728] qgis failed to build against qwt 6.2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1860578/modules/qgis
                    /steps/21
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_gnome@64bit
fails in
[qgis](https://openqa.opensuse.org/tests/1860578/modules/qgis/steps/21)

## Test suite description
Maintainer: QE Core, asmorodskyi. Extra tests which were designed to run on
gnome

## Reproducible

Fails since (at least) Build
[20210727](https://openqa.opensuse.org/tests/1860309)

## Expected result

Last good: [20210727](https://openqa.opensuse.org/tests/1860308) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=extra_tests_gnome&version=Tumbleweed)

pkgs: flatpak qgis


--1627608570.E7f4a1571.5475
Date: Fri, 30 Jul 2021 01:29:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188906

            Bug ID: 1188906
           Summary: Golang 1.15: many segmentation faults while build some package on ppc64le arch
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hillwoodroc-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

deepin-api
[  205s] go build unicode/utf8:
/usr/lib64/go/1.15/pkg/tool/linux_ppc64le/compile: signal: segmentation fault
[  205s] go build image/color:
/usr/lib64/go/1.15/pkg/tool/linux_ppc64le/compile: signal: segmentation fault
[  208s] go build runtime: /usr/lib64/go/1.15/pkg/tool/linux_ppc64le/compile:
signal: segmentation fault


--1627641012.cFa57FD0.22189
Date: Fri, 30 Jul 2021 10:30:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188918

            Bug ID: 1188918
           Summary: latex2html tests/l2htest/WARNINGS varies
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: pgajdos-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our latex2html package differs between builds

/usr/share/doc/packages/latex2html-doc/tests/l2htest/WARNINGS
@@ -1,20 +1,20 @@

-Failed to convert image /tmp/l2h3923/image001.ps
+Failed to convert image /tmp/l2h3924/image001.ps

-Failed to convert image /tmp/l2h3923/image002.ps
+Failed to convert image /tmp/l2h3924/image002.ps

The file probably does not need to be in the package anyway.


--1627652817.5AAc1.1640
Date: Fri, 30 Jul 2021 13:46:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188928

            Bug ID: 1188928
           Summary: X segfault on aarch64 in openQA with qemu with -cpu max (PAC/BTI enabled)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
               URL: https://openqa.opensuse.org/tests/1861115/modules/firs
                    t_boot/steps/2
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: gfx-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com
          Found By: openQA
           Blocker: Yes

Created attachment 851439
  --> http://bugzilla.opensuse.org/attachment.cgi?id=851439&action=edit
X logs

X segfault on aarch64 in openQA with qemu with '-cpu max' option (without KVM),
which enables additional features, such as SVE, Pointer Authentication (aka
PAC) and BTI. (MTE is disabled).
This test does not fail on regular aarch64 qemu tests using '-cpu host' option
(even on LSE enabled systems)

Xorg log is in attachment.


body:
--1627675410.6CFFa8F0.9056
Date: Fri, 30 Jul 2021 20:03:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1188941

            Bug ID: 1188941
           Summary: ppc64 optflags don't enable LTO
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

x86_64
[   30s] + /usr/bin/make -O -j8 V=1 VERBOSE=1 V=1 'CFLAGS=-O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type
-flto=auto -g'
ppc
[   45s] + /usr/bin/make -O -j4 V=1 VERBOSE=1 V=1 'CFLAGS=-O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type
-flto=auto -g'
ppc64le
[   40s] + /usr/bin/make -O -j4 V=1 VERBOSE=1 V=1 'CFLAGS=-fmessage-length=0
-grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection
-Werror=return-type -flto=auto -g'
ppc64
[   39s] + /usr/bin/make -O -j4 V=1 VERBOSE=1 V=1 'CFLAGS=-O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -g'

summary: ppc64 optflags don't enable LTO


body:
--1627706265.Be33fb0c0.31045
Date: Sat, 31 Jul 2021 04:37:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188946

            Bug ID: 1188946
           Summary: [trackerbug] lxd 4.16 update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547

  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch

summary: [trackerbug] lxd 4.16 update


--1627896049.CAbf1.16524
Date: Mon, 2 Aug 2021 09:20:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188970

            Bug ID: 1188970
           Summary: Xorg crashes with a segmentation fault when a secondary USB display using DisplayLink is connected
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: marc-at-msys.ch
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 851469
  --> http://bugzilla.opensuse.org/attachment.cgi?id=851469&action=edit
Xorg.0.log showing the degmentation fault.

When a USB DisplayLink display is connected to the system, Xorg segfaults while
starting.  lsusb lists the following display device:

Bus 001 Device 019: ID 17e9:039a DisplayLink PA35 USB Display

This is a regression, it worked without problems in openSUSE Leap 15.2.

The hardware is an Aures Twist POS terminal with touchscreen.

Xorg.0.log ais attached.


--1627906072.7ac08F40.536
Date: Mon, 2 Aug 2021 12:07:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1188976

            Bug ID: 1188976
           Summary: VUL-0: CVE-2021-37601:  Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/305331/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: jubalh-at-iodoru.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain
sensitive information (list of admins, members, owners, and banned entities of
a
Multi-User chat room) in some common configurations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37601
https://prosody.im/security/advisory_20210722/
https://prosody.im/


--1627976868.4d0D11730.29727
Date: Tue, 3 Aug 2021 07:47:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189006

            Bug ID: 1189006
           Summary: VUL-1: Chromium: Multiple vulnerability, update to version 92.0.4515.131
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This update includes 10 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$20000][1227777] High CVE-2021-30590: Heap buffer overflow in Bookmarks.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09

[$20000][1229298] High CVE-2021-30591: Use after free in File System API.
Reported by SorryMybad (@S0rryMybad) of Kunlun Lab on 2021-07-14

[$10000][1209469] High CVE-2021-30592: Out of bounds write in Tab Groups.
Reported by David Erceg on 2021-05-15

[$5000][1209616] High CVE-2021-30593: Out of bounds read in Tab Strip. Reported
by David Erceg on 2021-05-16

[$N/A][1218468] High CVE-2021-30594: Use after free in Page Info UI. Reported
by raven (@raid_akame)  on 2021-06-10

[$1000][1214481] Medium CVE-2021-30596: Incorrect security UI in Navigation.
Reported by Mohit Raj (shadow2639)  on 2021-05-29

[$TBD][1232617] Medium CVE-2021-30597: Use after free in Browser UI. Reported
by raven (@raid_akame)  on 2021-07-24

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

As usual, our ongoing internal security work was responsible for a wide range
of fixes:

[1229408] Various fixes from internal audits, fuzzing and other initiatives

Reference:
-
https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html


--1628008134.7EFBC1.27658
Date: Tue, 3 Aug 2021 16:28:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189023

            Bug ID: 1189023
           Summary: Recommended libvmaf1 dependency vmaf-data missing from main repository
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: x86-64
                OS: openSUSE Leap 15.3
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: maintenance-at-opensuse.org
          Reporter: eecdc3.opensuse@coders-haven.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have libvmaf1 installed from the Main Repository in version 2.1.1-bp153.1.1.
I would like to install the recommended dependency vmaf-data, which I suspect
contains the missing model files from
https://github.com/Netflix/vmaf/tree/v2.1.1/model. Unfortunately this package
is not available from the Main repository.


body:
--1628088187.85DA08d70.15275
Date: Wed, 4 Aug 2021 14:43:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189085

            Bug ID: 1189085
           Summary: fedfs-utils fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/fedfs-utils/standard/x86_64

due to:
[   22s] configure: error: libresolv not found.
[   22s] error: Bad exit status from /var/tmp/rpm-tmp.fcuuxw (%build)

summary: fedfs-utils fails with glibc 2.34


body:
--1628088365.84CE8670.25169
Date: Wed, 4 Aug 2021 14:46:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189086

            Bug ID: 1189086
           Summary: fuse fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/fuse/standard/x86_64

due to:
[   59s] ulockmgr_server.c:127:12: error: conflicting types for 'closefrom';
have 'int(int)'
[   59s]   127 | static int closefrom(int minfd)
[   59s]       |            ^~~~~~~~~
[   59s] In file included from ulockmgr_server.c:14:
[   59s] /usr/include/unistd.h:363:13: note: previous declaration of
'closefrom' with type 'void(int)'
[   59s]   363 | extern void closefrom (int __lowfd) __THROW;
[   59s]       |             ^~~~~~~~~
[   59s] ulockmgr_server.c: In function 'main':
[   59s] ulockmgr_server.c:371:16: warning: ignoring return value of 'chdir'
declared with attribute 'warn_unused_result' [-Wunused-result]
[   59s]   371 |         (void) chdir("/");
[   59s]       |                ^~~~~~~~~~
[   59s] make[2]: *** [Makefile:517: ulockmgr_server-ulockmgr_server.o] Error 1

summary: fuse fails with glibc 2.34


body:
--1628088476.b5c80.16094
Date: Wed, 4 Aug 2021 14:47:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189088

            Bug ID: 1189088
           Summary: glibc2 fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/glib2/standard/x86_64

due to:
[  133s] ../glib/gspawn.c:1497:7: error: too few arguments to function
???close_range???
[  133s]  1497 |   if (close_range (lowfd, G_MAXUINT) != 0 && errno == ENOSYS)
[  133s]       |       ^~~~~~~~~~~
[  133s] In file included from /usr/include/unistd.h:1205,
[  133s]                  from /usr/include/bits/sigstksz.h:24,
[  133s]                  from /usr/include/signal.h:328,
[  133s]                  from /usr/include/sys/wait.h:36,
[  133s]                  from ../glib/gspawn.c:25:
[  133s] /usr/include/bits/unistd_ext.h:56:12: note: declared here
[  133s]    56 | extern int close_range (unsigned int __fd, unsigned int
__max_fd,
[  133s]       |            ^~~~~~~~~~~

This has already been fixed upstream:

https://gitlab.gnome.org/GNOME/glib/-/commit/b71117d89434db83d34bc1b981ca03d4be299576
https://gitlab.gnome.org/GNOME/glib/-/commit/63e7864d1a0ddbead3c18872e95116e3843e81be

summary: glibc2 fails with glibc 2.34


--1628089131.665FF0A0.27488
Date: Wed, 4 Aug 2021 14:58:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189095

            Bug ID: 1189095
           Summary: libqt5-qtwebengine fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/libqt5-qtwebengine/standard/x86_64

due to:
[  191s]
../../3rdparty/chromium/third_party/abseil-cpp/absl/debugging/failure_signal_handler.cc:
In function 'bool absl::SetupAlternateStackOnce()':
[  191s]
../../3rdparty/chromium/third_party/abseil-cpp/absl/debugging/failure_signal_handler.cc:138:32:
error: no matching function for call to 'max(long int, int)'
[  191s]   138 |   size_t stack_size = (std::max(SIGSTKSZ, 65536) + page_mask)
& ~page_mask;
[  191s]       |                        ~~~~~~~~^~~~~~~~~~~~~~~~~


body:
--1628089592.eA47Db000.20034
Date: Wed, 4 Aug 2021 15:06:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189101

            Bug ID: 1189101
           Summary: postfix fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/postfix/standard/x86_64

due to:
[   41s] /usr/include/unistd.h:363:13: error: conflicting types for
'closefrom'; have 'void(int)'
[   41s]   363 | extern void closefrom (int __lowfd) __THROW;
[   41s]       |             ^~~~~~~~~
[   41s] In file included from attr_clnt.c:96:
[   41s] ./sys_defs.h:1512:12: note: previous declaration of 'closefrom' with
type 'int(int)'
[   41s]  1512 | extern int closefrom(int);
[   41s]       |            ^~~~~~~~~

RedHat issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1984045

summary: postfix fails with glibc 2.34


body:
--1628089765.bbB120.29771
Date: Wed, 4 Aug 2021 15:09:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189103

            Bug ID: 1189103
           Summary: spdlog fails with glibc 2.34
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:B/spdlog/standard/x86_64

due to:
[   40s]                  from
/home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/catch.hpp:6323,
[   40s]                  from
/home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/main.cpp:2:
[   40s] /home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/catch.hpp:9041:58:
error: call to non-'constexpr' function 'long int sysconf(int)'
[   40s]  9041 |     constexpr static std::size_t sigStackSize = 32768 >=
MINSIGSTKSZ ? 32768 : MINSIGSTKSZ;
[   40s]       |
^~~~~~~~~~~
[   40s] In file included from /usr/include/bits/sigstksz.h:24,
[   40s]                  from /usr/include/signal.h:328,
[   40s]                  from
/home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/catch.hpp:6323,
[   40s]                  from
/home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/main.cpp:2:
[   40s] /usr/include/unistd.h:641:17: note: 'long int sysconf(int)' declared
here
[   40s]   641 | extern long int sysconf (int __name) __THROW;
[   40s]       |                 ^~~~~~~
[   40s] In file included from
/home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/main.cpp:2:
[   40s] /home/abuild/rpmbuild/BUILD/spdlog-1.9.1/tests/catch.hpp:9100:45:
error: size of array 'altStackMem' is not an integral constant-expression
[   40s]  9100 |     char FatalConditionHandler::altStackMem[sigStackSize] =
{};
[   40s]       |                                             ^~~~~~~~~~~~

Upstream issue:
https://github.com/catchorg/Catch2/issues/2178

summary: spdlog fails with glibc 2.34


body:
--1628165324.e56F547e0.12930
Date: Thu, 5 Aug 2021 12:08:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189139

            Bug ID: 1189139
           Summary: useradd: adjust defaults to the one used by other similar tools and other Linux distributions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After the discussion about default permissions of home directories and
usergroups
(https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/thread/WR7OUSARPJNIR22D55TRNL2J7UR55BJX/),
an analysis showed that we changed some defaults in login.defs for useradd
compared to other Linux distributions, upstream and other tools to create users
on openSUSE:

USERGROUPS_ENAB from "yes" to "no".
All other tools we provide and other distros do create usergroups by
default, so I suggest to change it back to "USERGROUPS_ENAB yes".

CREATE_HOME from "yes" to "no".
I did never understand why we disabled this. All other tools we provide
and other distros create the home directory by default. I would suggest
to change that back to "yes".

FORCE_SHADOW from "yes" to "no".
I also don't understand this change. We should revert that change, so
we don't need the hacks in other places to split passwd later during
installation. If we enforce the shadow usage later, why not from the
beginning?

HOME_MODE not set
We should set "HOME_MODE 0700" as other distros do.

Looks like the majority is in favour of adjusting the defaults to the rest of
the world:
https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/thread/Q4HHJJJBLQEGAMEAP3HGHLF2IF4VEVBU/

pkgs: pam shadow


--1628219588.B7DEE0.24582
Date: Fri, 6 Aug 2021 03:13:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189162

            Bug ID: 1189162
           Summary: VUL-0: CVE-2021-36221: go1.16,go1.15: go: net/http: panic due to racy read of persistConn after handler panic
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.


--1628428844.c2560.23222
Date: Sun, 8 Aug 2021 13:20:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189184

            Bug ID: 1189184
           Summary: org.kde.pim.akonadiserver:   Error code: "1292"
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: opensuse-at-mike.franken.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After upgradung to the latest Tumbleweed snapshot 20210806, akonadi throws
errors regarding datetime values:

Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:
DATABASE ERROR:
Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:   Error
code: "1292"
Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:   DB
error:  "Incorrect datetime value: '2021-08-08T13:14:52Z' for column
`akonadi`.`pimitemtable`.`atime` at row 1"
Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:   Error
text: "Incorrect datetime value: '2021-08-08T13:14:52Z' for column
`akonadi`.`pimitemtable`.`atime` at row 1 QMYSQL: Unable to execute query"
Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:
Values: QMap((":0", QVariant(QDateTime, QDateTime(2021-08-08 13:14:52.162 UTC
Qt::UTC)))(":1", QVariant(qlonglong, 10215)))
Aug 08 15:14:52 thunder akonadiserver[6813]: org.kde.pim.akonadiserver:
Query: "UPDATE PimItemTable SET atime = :0 WHERE ( PimItemTable.collectionId =
:1 )"

Operating System: openSUSE Tumbleweed 20210806
KDE Plasma Version: 5.22.4
KDE Frameworks Version: 5.84.0
Qt Version: 5.15.2
Kernel Version: 5.13.6-1-default (64-bit)
Graphics Platform: X11
Processors: 8 ?? Intel?? Core??? i7-8550U CPU @ 1.80GHz
Memory: 15,0 GiB of RAM
Graphics Processor: Mesa DRI Intel?? UHD Graphics 620

akonadi-calendar-lang-21.04.3-1.1
akonadi-calendar-tools-21.04.3-1.1
akonadi-calendar-tools-lang-21.04.3-1.1
akonadi-contact-21.04.3-1.2
akonadi-contact-lang-21.04.3-1.2
akonadi-import-wizard-21.04.3-1.1
akonadi-import-wizard-lang-21.04.3-1.1
akonadi-mime-21.04.3-1.2
akonadi-mime-lang-21.04.3-1.2
akonadi-notes-lang-21.04.3-1.1
akonadi-plugin-calendar-21.04.3-1.1
akonadi-plugin-contacts-21.04.3-1.2
akonadi-plugin-kalarmcal-21.04.3-1.1
akonadi-plugin-mime-21.04.3-1.2
akonadi-search-21.04.3-1.2
akonadi-search-lang-21.04.3-1.2
akonadi-server-21.04.3-2.2
akonadi-server-lang-21.04.3-2.2
akonadi-server-sqlite-21.04.3-2.2
akonadiconsole-21.04.3-1.1
libKF5AkonadiAgentBase5-21.04.3-2.2
libKF5AkonadiCalendar5-21.04.3-1.1
libKF5AkonadiContact5-21.04.3-1.2
libKF5AkonadiCore5-21.04.3-2.2
libKF5AkonadiMime5-21.04.3-1.2
libKF5AkonadiNotes5-21.04.3-1.1
libKF5AkonadiPrivate5-21.04.3-2.2
libKF5AkonadiSearch-21.04.3-1.2
libKF5AkonadiWidgets5-21.04.3-2.2
libKF5AkonadiXml5-21.04.3-2.2
libKF5MailImporterAkonadi5-21.04.3-1.1
libKF5MailTransportAkonadi5-21.04.3-1.1
libKF5PimCommonAkonadi5-21.04.3-1.1


--1628553506.0CC40600.12440
Date: Mon, 9 Aug 2021 23:58:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189254

            Bug ID: 1189254
           Summary: chromium package is missing crashpad_handler
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

which leads to sigabrt

[14903:14903:0810/015649.711736:FATAL:double_fork_and_exec.cc(131)] execv
/usr/lib64/chromium/crashpad_handler: No such file or directory (2)


body:
--1628594862.ECeAf7DA0.7978
Date: Tue, 10 Aug 2021 11:27:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189283

            Bug ID: 1189283
           Summary: kernel-obs-build needs af_alg
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

libkcapi got updated to 1.3.1 (https://build.opensuse.org/request/show/910806)
and apparently gnutls picks that up now and enables support for it.
It seems like that depends on AF_ALG sockets though, which are currently not
enabled in kernel-obs-build (missing af_alg module), so various builds (libzip,
libvirt) fail with

libkcapi - Error: AF_ALG: socket syscall failed (errno: -97)

I'm not sure whether just af_alg is enough, it might need some other modules as
well.

summary: kernel-obs-build needs af_alg


body:
--1628647332.1C3DFc0.32024
Date: Wed, 11 Aug 2021 02:02:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189305

            Bug ID: 1189305
           Summary: kernel-obs-build varies between builds
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1047218
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our kernel-obs-build package varied between builds.

one part is
+++ new/.build.initrd.kvm.cpio.extract/etc/shadow
@@ -1 +1 @@
-root:*:18110::::::
+root:*:23621::::::

and the other part is timestamps and inode-numbers in cpio metadata
that are ignored by build-compare, but prevent producing bit-identical rpms

summary: kernel-obs-build varies between builds


--1628660130.A8EF0.9034
Date: Wed, 11 Aug 2021 05:35:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189310

            Bug ID: 1189310
           Summary: GIMP foreground selection tool doesn't work properly on Wayland
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: nicomu.net-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 851662
  --> http://bugzilla.opensuse.org/attachment.cgi?id=851662&action=edit
Behavior under Wayland

Foreground selection tool doesn't work as it under Wayland. Instead of showing
line that is being currently drawn, it shows a rectangle.

This issue doesn't occur if GIMP is running under X.Org

This bug exists for quite some time (I think way over 3 months).
Doesn't seem to depend on hardware/drivers, as I had this issue both on Intel
iGPU and AMD iGPU.


body:
--1628686960.2ACeaD10.27010
Date: Wed, 11 Aug 2021 13:02:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189327

            Bug ID: 1189327
           Summary: krita will not build with openexr 3
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: pgajdos-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

See bsc#1189073 for details.

Perhaps
https://github.com/KDE/krita/commit/d66383f6c593d21463c658fbcc6adef28a7f570f
should fix the issue.

Thanks!

summary: krita will not build with openexr 3


--1628702173.486a50.28247
Date: Wed, 11 Aug 2021 17:16:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189354

            Bug ID: 1189354
           Summary: VUL-1: CVE-2021-38165: lynx: through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
               URL: https://smash.suse.de/issue/305971/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: pgajdos-at-suse.com
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

HTParse in Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI,
which allows remote attackers to discover cleartext credentials because they
may
appear in SNI data or HTTP headers.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-38165
https://www.openwall.com/lists/oss-security/2021/08/07/7
http://seclists.org/oss-sec/2021/q3/80
http://seclists.org/oss-sec/2021/q3/78
https://www.openwall.com/lists/oss-security/2021/08/07/1
http://www.debian.org/security/-1/dsa-4953
https://github.com/w3c/libwww/blob/f010b4cc58d32f34b162f0084fe093f7097a61f0/Library/src/HTParse.c#L118
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38165
http://www.cvedetails.com/cve/CVE-2021-38165/
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991971
https://lists.nongnu.org/archive/html/lynx-dev/2021-08/msg00000.html
https://lynx.invisible-island.net/current/CHANGES.html
https://bugs.debian.org/991971


body:
--1628706385.4AE1F8f0.10092
Date: Wed, 11 Aug 2021 18:26:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189356

            Bug ID: 1189356
           Summary: Add mpdecimal package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: skrah-at-bytereef.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This issue coordinates the addition of the mpdecimal package (libmpdec) and the
use of --with-system-libmpdec in the Python build.

New package
===========

https://build.opensuse.org/request/show/911436

Python --with-system-libmpdec build issues
==========================================

Since the mpdecimal.h cleanup in mpdecimal-2.5.1, Python 3.9 and 3.8
need these trivial patches (removal of uchar, link against so.3):

Python 3.9: https://www.bytereef.org/contrib/decimal.diff

Python 3.8: https://www.bytereef.org/contrib/decimal-3.8.diff

Python 3.10 should compile without patches.

summary: Add mpdecimal package


--1628957074.a7D783020.9301
Date: Sat, 14 Aug 2021 16:04:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189441

            Bug ID: 1189441
           Summary: ARM: System needing module from -extra failed to boot after kernel update (initrd built without -extra)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-suse.de
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 851775
  --> https://bugzilla.suse.com/attachment.cgi?id=851775&action=edit
zypper.log of the transaction

ARM system (Odroid C2) failed to boot after kernel update to 5.3.18-59.19

The reason was that the system needs the meson-gx-mmc module, which is part of
the kernel-default-extra package. The module was installed, but not included in
the initrd created during the update transaction.

The transaction was this:

> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):104 Install summary:
> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):144 <install>   U_Ts_(98888)dtb-amlogic-5.3.18-59.19.1.aarch64(repo-sle-update)
> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):144 <install>   U_Ts_(99776)kernel-default-5.3.18-59.19.1.aarch64(repo-sle-update)
> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):144 <install>   U_Ts_r(99863)kernel-default-extra-5.3.18-59.19.1.aarch64(repo-sle-update)
> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):144 <install>   USTu_(106130)patch:openSUSE-SLE-15.3-2021-2687-1.noarch(repo-sle-update)
> 2021-08-14 17:01:25 <1> proxy(15106) [zypper++] Summary.cc(readPool):144 <uninstall> I_TsU(106619)dtb-amlogic-5.3.18-lp153.2.2.g8f77a17.aarch64(@System)

The problem was caused by the fact that the kernel-default-extra package was
installed after kernel-default, but the initrd was created during the install
of kernel-default, and it wasn't rebuilt afterwards.

> 2021-08-14 17:02:42 <1> proxy(15106) [zypp::exec++] ExternalProgram.cc(start_program):260 Executing[C] 'rpm' '--root' '/' '--dbpath' '/usr/lib/sysimage/rpm' '-U' '--percent' '--noglob' '--force' '--nodeps' '--' '/var/cache/zypp/packages/repo-sle-update/aarch64/dtb-amlogic-5.3.18-59.19.1.aarch64.rpm'

> 2021-08-14 17:02:45 <1> proxy(15106) [zypp::exec++] ExternalProgram.cc(start_program):260 Executing[C] 'rpm' '--root' '/' '--dbpath' '/usr/lib/sysimage/rpm' '-i' '--percent' '--noglob' '--force' '--nodeps' '--' '/var/cache/zypp/packages/repo-sle-update/aarch64/kernel-default-5.3.18-59.19.1.aarch64.rpm'
> 2021-08-14 17:03:34 <1> proxy(15106) [zypp::exec++] ExternalProgram.cc(start_program):260 Executing[C] 'rpm' '--root' '/' '--dbpath' '/usr/lib/sysimage/rpm' '-i' '--percent' '--noglob' '--force' '--nodeps' '--' '/var/cache/zypp/packages/repo-sle-update/aarch64/kernel-default-extra-5.3.18-59.19.1.aarch64.rpm'
> 2021-08-14 17:04:06 <1> proxy(15106) [zypp::exec++] ExternalProgram.cc(checkStatus):549 Pid 18942 successfully completed

Note the jump in the time stamp after installing kernel-default, which was
probably due to dracut running (I don't know why I see no dracut output in
zypper.log here). Installing kernel-default-extra also took 30s, but apparently
not because of dracut.

~ # stat /boot/initrd-5.3.18-59.19-default
  File: /boot/initrd-5.3.18-59.19-default
  Size: 10846660        Blocks: 21192      IO Block: 4096   regular file
Device: b303h/45827d    Inode: 24118       Links: 1
Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2021-08-14 17:03:25.970463785 +0200
Modify: 2021-08-14 17:03:26.010466194 +0200
Change: 2021-08-14 17:33:11.108484574 +0200
 Birth: 2021-08-14 17:03:25.970463785 +0200

The timestamp of the intird shows that it had been created during the
installation of kernel-default. This is also obvious from the fact that all
modules from kernel-default-extra were missing from it.

Simply booting the previous kernel and rebuilding the 5.3.19-59.19 initrd fixed
the issue.

zypper.log of the transaction is attached.


--1629040692.BcED8f170.28058
Date: Sun, 15 Aug 2021 15:18:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189449

            Bug ID: 1189449
           Summary: watchdog iTCO_wdt problem after upgrading to kernel 5.3.18-59.19
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have a problem with the iTCO_wdt watchdog after upgrading to the kernel
5.3.18-59.19.
Here is the issue description:
with kernel 5.3.18-59.16 the output of the command wdctl is:
Device:        /dev/watchdog0
Identity:      iTCO_wdt [version 0]
Timeout:       30 seconds
Pre-timeout:    0 seconds
Timeleft:      30 seconds
FLAG           DESCRIPTION               STATUS BOOT-STATUS
KEEPALIVEPING  Keep alive ping reply          1           0
MAGICCLOSE     Supports magic close char      0           0
SETTIMEOUT     Set timeout (in seconds)       0           0

With kernel 5.3.18-59.19 the output of the command wdctl is:
Device:        /dev/watchdog0
Identity:      iTCO_wdt [version 0]
Timeout:       30 seconds
Pre-timeout:    0 seconds
Timeleft:      15 seconds
FLAG           DESCRIPTION               STATUS BOOT-STATUS
KEEPALIVEPING  Keep alive ping reply          1           0
MAGICCLOSE     Supports magic close char      0           0
SETTIMEOUT     Set timeout (in seconds)       0           0

With kernel 5.3.18-59.16 after a reset the timer start at 30, decreases every
second and after about 15 seconds it get reset when it has reached a value
between 14 and 16.
With kernel 5.3.18-59.19 after a reset the timer start at 15, decreases every
second and after about 15 seconds it get reset but it is usually too late
because the counter has reached 0 and the system is rebooted. Continuously.

If you are going to test the problem yourself, keep in mind that systemd
handling of the watchdog is currently broken (boo#1189446)


--1629083632.3ffbABb10.25956
Date: Mon, 16 Aug 2021 03:13:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189451

            Bug ID: 1189451
           Summary: libnl reports incorrect number of received packets
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: bart.vanassche+novell-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The number of received packets as reported in sysfs seems correct to me:

$ grep -aH . /sys/class/net/{lo,eno1}/statistics/rx_packets
/sys/class/net/lo/statistics/rx_packets:354008
/sys/class/net/eno1/statistics/rx_packets:107246

However, libnl reports the number of received packets for interfaces lo and
eno1 as zero, which is a bug in my opinion:

$ ./libnlstats | grep -A2 -E '^[^ ]|Stats:'
lo loopback <loopback,up,running,lowerup> group 0
    mtu 65536 txqlen 1000 weight 0 qdisc noqueue index 1
    txq 1 rxq 1 brd 00:00:00:00:00:00 mode default carrier up carrier-changes 0
--
          Stats:    bytes    packets     errors    dropped   fifo-err
compressed
     RX   28.87 MiB          0          0          0          0          0
     TX   28.87 MiB     354018          0          0          0          0
--
enp4s0 ether fc:aa:14:9d:6d:bf <broadcast,multicast,up> group 0
    mtu 1500 txqlen 1000 weight 0 qdisc mq irq 18 index 2
    txq 4 rxq 1 brd ff:ff:ff:ff:ff:ff state down num-vf 0 mode default carrier
down carrier-changes 0
--
          Stats:    bytes    packets     errors    dropped   fifo-err
compressed
     RX      0.00 B          0          0          0          0          0
     TX      0.00 B          0          0          0          0          0
--
eno1 ether fc:aa:14:9d:6d:bd <broadcast,multicast,up,running,lowerup> group 0
    mtu 1500 txqlen 1000 weight 0 qdisc pfifo_fast irq 20 index 3
    txq 1 rxq 1 brd ff:ff:ff:ff:ff:ff state up num-vf 0 mode default carrier up
carrier-changes 12
--
          Stats:    bytes    packets     errors    dropped   fifo-err
compressed
     RX  119.00 MiB          0          0          0          0          0
     TX    7.10 MiB      62293          0          0          0          0

The source code of the libnlstats program is as follows:
~~~
#define _GNU_SOURCE

#include <assert.h>
#include <stdio.h>
#include <netlink/cache.h>
#include <netlink/netlink.h>
#include <netlink/route/addr.h>

int main(int argc, char **argv)
{
    struct nl_sock *nl_sock = nl_socket_alloc();
    assert(nl_sock);
    int ret = nl_connect(nl_sock, NETLINK_ROUTE);
    assert(ret == 0);
    {
        struct nl_cache *link_cache;

        ret = rtnl_link_alloc_cache(nl_sock, AF_UNSPEC, &link_cache);
        assert(ret == 0);
        {
            char buf[16384];

            struct nl_dump_params dump_params = {
                .dp_type = NL_DUMP_STATS,
                .dp_buf = buf,
                .dp_buflen = sizeof(buf),
            };
            nl_cache_dump(link_cache, &dump_params);
            printf("%s\n", buf);
        }
        nl_cache_put(link_cache);
    }
    nl_close(nl_sock);
    nl_socket_free(nl_sock);
    return 0;
}
~~~

Software version information:
$ rpm -qf /usr/lib64/libnl-route-3*
libnl3-devel-3.5.0-2.4.x86_64
libnl3-200-3.5.0-2.4.x86_64
libnl3-200-3.5.0-2.4.x86_64
$ uname -r
5.13.8-1-default


--1629091979.038bF0.26975
Date: Mon, 16 Aug 2021 05:32:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189452

            Bug ID: 1189452
           Summary: Mate Desktop: can not add mate advanced menu on mate panel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Leap 15.2
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hillwoodroc-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Confirm this issue on Leap 15.2+ and Tumbleweed. But reasons are defferent. We
should provide an update to fix it for Leap 15.2+


--1629136794.eFbECF80.8638
Date: Mon, 16 Aug 2021 17:59:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189480

            Bug ID: 1189480
           Summary: systemd-udevd.service fails with undefined symbol: fchmod_and_chown
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: systemd-maintainers-at-suse.de
          Reporter: mkoutny-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm not sure how much reproducible this is but here's what happened to me.

I ran ordinary `zypper dup` to update my TW system.

> zypper.log-20210727.xz:2021-07-26 10:01:53 <1> blackbook(30026) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/udev-248.3-3.1.x86_64.rpm,0x0000040c)
> ...
> zypper.log-20210727.xz:2021-07-26 10:01:33 <1> blackbook(30026) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/systemd-248.3-3.1.x86_64.rpm,0x0000000c)

So far, so good. Then I realized I needed systemd-debuginfo, so I ran `zypper
in systemd-debuginfo glibc-debuginfo` which installed/updated the following
packages:

> 2021-08-06 13:10:07 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-debug/x86_64/systemd-debugsource-248.6-2.1.x86_64.rpm,0x0000000c)
> 2021-08-06 13:10:13 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-debug/x86_64/systemd-debuginfo-248.6-2.1.x86_64.rpm,0x0000000c)
> 2021-08-06 13:10:14 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/systemd-248.6-2.1.x86_64.rpm,0x0000000c)
> 2021-08-06 13:10:16 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/systemd-container-248.6-2.1.x86_64.rpm,0x0000000c)
> 2021-08-06 13:10:16 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/systemd-sysvinit-248.6-2.1.x86_64.rpm,0x0000000c)
> 2021-08-06 13:10:16 <1> blackbook(48487) [librpmDb] RpmDb.cc(doInstallPackage):1606 RpmDb::installPackage(/var/cache/zypp/packages/repo-oss/x86_64/systemd-coredump-248.6-2.1.x86_64.rpm,0x0000000c)

Note that udev wasn't updated. Then I rebooted and I wasn't able to boot again,
the systemd-udevd.service failed because of missing symbols:

> Aug 16 10:00:48 blackbook udevadm[764]: udevadm: symbol lookup error: udevadm: undefined symbol: fchmod_and_chown, version SD_SHARED
> Aug 16 10:00:48 blackbook udevadm[765]: udevadm: symbol lookup error: udevadm: undefined symbol: fchmod_and_chown, version SD_SHARED
> Aug 16 10:00:49 blackbook systemd-udevd[800]: /usr/lib/systemd/systemd-udevd: symbol lookup error: /usr/lib/systemd/systemd-udevd: undefined symbol: fchmod_and_chown, version SD_SHARED

The fix was as "simple" [1] as updating the udev to the version matching
systemd (provider of libsystemd-shared-248.so).

I _think_ either the symbol shouldn't have been removed in the newer version or
udev should have stricter dependency on systemd so that matching version is
always installed.

[1] Fortunately, I was able to boot by temporarily using the "old"
libsystemd-shared-248.so from initrd via LD_PRELOAD.


--1629150484.d83250.17444
Date: Mon, 16 Aug 2021 21:48:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189489

            Bug ID: 1189489
           Summary: VUL-0: CVE-2021-38385: tor: assertion failure in signature verification
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: bwiedemann-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Fixed in Tor 0.3.5.16, 0.4.5.10, or 0.4.6.7:

  o Major bugfixes (cryptography, security):
    - Resolve an assertion failure caused by a behavior mismatch between our
      batch-signature verification code and our single-signature verification
      code. This assertion failure could be triggered remotely, leading to a
      denial of service attack. We fix this issue by disabling batch
      verification. Fixes bug 40078; bugfix on 0.2.6.1-alpha. This issue is
      also tracked as TROVE-2021-007 and CVE-2021-38385.

References:
https://gitlab.torproject.org/tpo/core/tor/-/issues/40078
https://gitweb.torproject.org/tor.git/commit/?id=fe5a9db1e6d32f6d706140a6ddda6b40db80434a
https://lists.torproject.org/pipermail/tor-announce/2021-August/000228.html


--1629177866.eE0f3AF0.16274
Date: Tue, 17 Aug 2021 05:24:26 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189490

            Bug ID: 1189490
           Summary: VUL-0: chromium: update to 92.0.4515.159
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Security Fixes and Rewards

This update includes 9 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$21000][1234764] High CVE-2021-30598: Type Confusion in V8. Reported by
Manfred Paul on 2021-07-30

[$21000][1234770] High CVE-2021-30599: Type Confusion in V8. Reported by
Manfred Paul on 2021-07-30

[$20000][1231134] High CVE-2021-30600: Use after free in Printing. Reported by
Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-20

[$20000][1234009] High CVE-2021-30601: Use after free in Extensions API.
Reported by koocola(@alo_cook) and Nan Wang(@eternalsakura13) of 360 Alpha Lab
on 2021-07-28

[$TBD][1230767] High CVE-2021-30602: Use after free in WebRTC. Reported by
Marcin Towalski of Cisco Talos  on 2021-07-19

[$NA][1233564] High CVE-2021-30603: Race in WebAudio. Reported by Sergei
Glazunov of Google Project Zero on 2021-07-27

[$TBD][1234829] High CVE-2021-30604: Use after free in ANGLE. Reported by
Seong-Hwan Park (SeHwa) of SecunologyLab on 2021-07-30

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

As usual, our ongoing internal security work was responsible for a wide range
of fixes:

    [1240159] Various fixes from internal audits, fuzzing and other initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop.html


body:
--1629184614.edabCA60.18767
Date: Tue, 17 Aug 2021 07:16:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189495

            Bug ID: 1189495
           Summary: %autopatch rpm macro does not work
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dcermak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The %autopatch rpm macro does not support the -M option
(https://github.com/rpm-software-management/rpm/blob/master/docs/manual/autosetup.md#autopatch)
on Leap 15.3:

[   87s] autopatch: invalid option

summary: %autopatch rpm macro does not work


--1629207704.c2Ab640.1743
Date: Tue, 17 Aug 2021 13:41:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189518

            Bug ID: 1189518
           Summary: sysuser-tools does not respect the login shell
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dcermak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I have tried to migrate openQA to using sysusers.d config files, but the
following config file:

# Type Name            ID     GECOS           [HOME]    Shell
u   _openqa-worker   -     "openQA worker" /var/lib/empty  /bin/bash
m   _openqa-worker  nogroup
m   _openqa-worker  kvm

does not result in the correct login shell being set. The installation of
openQA-worker yields the following additional output:

    Leap-15.3: Additional rpm output:
    Leap-15.3: useradd -r -s /sbin/nologin -c "openQA worker" -U -d
/var/lib/empty _openqa-worker
    Leap-15.3: usermod -a -G nogroup _openqa-worker
    Leap-15.3: usermod -a -G kvm _openqa-worker

So it looks like that useradd omits the login shell and sets it to
/sbin/nologin instead. This issue is also present on Leap 15.2 (please also fix
it there), but not on Tumbleweed.


--1629287150.Fb728D850.9767
Date: Wed, 18 Aug 2021 11:45:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189560

            Bug ID: 1189560
           Summary: firewalld forgets wicked zone assignment on service restart
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: mrostecki-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rfrohl-at-suse.com, wicked-maintainers-at-suse.de
          Found By: ---
           Blocker: ---

When the system boots, wicked's firewalld extension mechanism informs firewalld
about the configured interfaces and assignes them to the configured zones:

localhost:~ # firewall-cmd --list-interfaces
ens3

This is kept after a reload:

localhost:~ # firewall-cmd --reload
success
localhost:~ # firewall-cmd --list-interfaces
ens3

But not after a restart:

localhost:~ # rcfirewalld restart
localhost:~ # firewall-cmd --list-interfaces
You're performing an operation over default zone ('public'),
but your connections/interfaces are in zone 'docker' (see --get-active-zones)
You most likely need to use --zone=docker option.

This seems very fragile and hits openQA which (for some reason, probably a bad
one) disables the firewall temporarily in some tests.

Maybe wicked should save the zone assignments in the permanent config?


--1629454191.16B5d120.28622
Date: Fri, 20 Aug 2021 10:09:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189634

            Bug ID: 1189634
           Summary: VUL-1: CVE-2021-3716: nbdkit: STARTTLS vulnerability for nbdkit
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jfehlig-at-suse.com
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A flaw was found in nbdkit due to to improperly caching plaintext state across
the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject
a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client
sends to the server, potentially leading the client to terminate the NBD
session. The highest threat from this vulnerability is to system availability.


body:
--1629460949.de43080.29751
Date: Fri, 20 Aug 2021 12:02:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189645

            Bug ID: 1189645
           Summary: [trackerbug] lxd 4.17 update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: containers-bugowner-at-suse.de
          Reporter: asarai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812

  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor

summary: [trackerbug] lxd 4.17 update


body:
--1629958741.ffa344C50.31874
Date: Thu, 26 Aug 2021 06:19:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189817

            Bug ID: 1189817
           Summary: ctrl-d hardcoded on desktop?
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm using a classic desktop with icons in kde plasma. Every once in a while
icons seemed to have vanished after I finished a work day and turned the
computer on the next day. Finally I found out why. Before shutting down I
usually close all my terminals using ctrl-d. If for some reason I press that
too often, the focus might be on some desktop icon which then gets deleted.

I couldn't find a way to turn off ctrl-d in the keyboard shortcut module. Is it
hardcoded somehow? Could that be turned off please? :-)

Also, locking the icons does not help :-(

summary: ctrl-d hardcoded on desktop?


--1629988176.Ec0ADF040.30388
Date: Thu, 26 Aug 2021 14:29:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189841

            Bug ID: 1189841
           Summary: Secure Boot certificate no longer queued for import into MOK
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: msuchanek-at-suse.com
          Reporter: jeffm-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since kernel-source commit 18f65dfce6af8bef50878fb80ba29f6d8626a918,
automatically queuing the secure boot certificate isn't happening.

This is because the post.sh changes cause the scriptlet to exit unconditionally
but the secure boot handling adds to the end of the script after the exit:

[...]

# check if something failed
[ $wm2_rc != 0 ] && exit $wm2_rc
exit $rc

# vim: set sts=4 sw=4 ts=8 noet:
if ! command -v mokutil >/dev/null; then
        exit 0
fi

[...]

This change has also been adopted in SLE.


--1629990423.e7Ad63.4467
Date: Thu, 26 Aug 2021 15:07:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189853

            Bug ID: 1189853
           Summary: [Build 20210825] accountsservice: not able to create home directory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1887264/modules/chan
                    ge_password/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-desktopapps-gnome@64bit
fails in
[change_password](https://openqa.opensuse.org/tests/1887264/modules/change_password/steps/18)

accountssservice has been hardened by harden_accounts-daemon.service.patch

but protecting home directories is not a good idea for a service creating home
directories.

## Test suite description
Maintainer: qkzhu-at-suse.com
See https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/3558
and
poo#23884

## Reproducible

Fails since (at least) Build
[20210825](https://openqa.opensuse.org/tests/1887264) (current job)

## Expected result

Last good: [20210824](https://openqa.opensuse.org/tests/1885645) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=desktopapps-gnome&version=Tumbleweed)


body:
--1630056450.8C6dD0.24191
Date: Fri, 27 Aug 2021 09:27:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189879

            Bug ID: 1189879
           Summary: Missing kernel config in /boot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: petr.vorel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

bsc#1184804 moved kernel config out of /boot into /usr/lib/modules/. But unlike
vmlinuz and initrd there is missing symlink in /boot.  Is it really a wanted
change?

$ ls -l /boot/
-rw-r--r

summary: Missing kernel config in /boot


--1630065642.DCeCDaEC0.6981
Date: Fri, 27 Aug 2021 12:00:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1189881

            Bug ID: 1189881
           Summary: warning: /var/tmp/weak-modules2.7WPIFB/symvers-5.13.12-2-defaul t not available
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: gp-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Running zypper dup on my Tumbleweed machine, I noticed the following in
the logs:

(121/203) Installing: kernel-default-5.13.12-2.1.x86_64 ....[done]
Additional rpm output:
warning: /var/tmp/weak-modules2.7WPIFB/symvers-5.13.12-2-default not available

It is probably benign, but still a bit confusing/worrisome. What do we
want to tell users here (that would be actionable)?

And/or is this indicative of some problem with the upgrade as such?


--1630077482.eB26eCe50.24180
Date: Fri, 27 Aug 2021 15:18:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189893

            Bug ID: 1189893
           Summary: [Build K.300.2] podman 3.3.0 "Failed to decode the keys [\"storage.options.ostree_repo\"] from \"/etc/containers/storage.conf\"."
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/1888074/modules/tool
                    box/steps/51
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Containers
          Assignee: michael-at-stroeder.com
          Reporter: rbrown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
microos-Staging:K-Staging-Kubic-DVD-x86_64-container-host-kubic@uefi-staging
fails in
[toolbox](https://openqa.opensuse.org/tests/1888074/modules/toolbox/steps/51)

Podman 3.3.0 can't read the default provided storage options - "Failed to
decode the keys [\"storage.options.ostree_repo\"] from
\"/etc/containers/storage.conf\"."

## Test suite description

## Reproducible

Fails since (at least) Build
[K.300.2](https://openqa.opensuse.org/tests/1888074) (current job)

## Expected result

Last good: [K.300.1](https://openqa.opensuse.org/tests/1882187) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=Staging-Kubic-DVD&machine=uefi-staging&test=container-host-kubic&version=Staging%3AK)


body:
--1630089434.cC0Ae00.7890
Date: Fri, 27 Aug 2021 18:37:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189900

            Bug ID: 1189900
           Summary: AUDIT-0: power-profiles-daemon: Package installs new DBus service files
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: badshah400-at-gmail.com
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

For my package found in OBS in Base:System/power-profiles-daemon [1] I would
like a whitelisting for the following rpmlint error:

> power-profiles-daemon.aarch64: E: suse-dbus-unauthorized-service (Badness: 10) /etc/dbus-1/system.d/net.hadess.PowerProfiles.conf
> power-profiles-daemon.aarch64: E: suse-dbus-unauthorized-service (Badness: 10) /usr/share/dbus-1/system-services/net.hadess.PowerProfiles.service

Requesting the white-listing because I would like to submit this package to
Factory if approved.

Thank you.

[1] https://build.opensuse.org/package/show/Base:System/power-profiles-daemon

pkgs: polkit-default-privs rpmlint


--1630124188.D4360.9725
Date: Sat, 28 Aug 2021 04:16:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189905

            Bug ID: 1189905
           Summary: digikam has a runtime dependency on opencv-devel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

why do we need those?


--1630125165.163EBE44.14325
Date: Sat, 28 Aug 2021 04:32:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189907

            Bug ID: 1189907
           Summary: gnome-software: packages from the main distro repository should not be marked as potentially dangerous
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

it should work more like software.o.o categorizes packages.

i think the main culprit might be that it doesnt have any permissions
information like it has for flatpak based apps.


--1630129779.58Ea0.12962
Date: Sat, 28 Aug 2021 05:49:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1189908

            Bug ID: 1189908
           Summary: iconvconfig: gconv modules are not in directory /usr/lib/gconv
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: giecrilj@stegny.2a.pl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to the manual, gconv modules should be stored in directory
/usr/lib/gconv.  This directory does not even exist.


--1630424558.EB7FFAf0.15074
Date: Tue, 31 Aug 2021 15:42:38 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1190024

            Bug ID: 1190024
           Summary: haveged service has become obsolete with recent kernel (>= 5.6)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to
https://github.com/jirka-h/haveged/commit/297bdf1fc52fc6f59d0495f911d4e594b4d29190,
starting from Linux kernel v5.6, the HAVEGED *service* has become obsolete.

So it might make sense:

 - drop the unit file from the package

 - not install haveged by default


--1630438697.877AEc40.29655
Date: Tue, 31 Aug 2021 19:38:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1190029

            Bug ID: 1190029
           Summary: Services on Leap obsolete, cannot update OBS packages
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: msuchanek-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Extracting from
/home/michal/home:michals/suse-module-tools/suse-module-tools-15.1.13+144.obscpio:
   */suse-module-tools.spec
ERROR: unknown archive format
/home/michal/home:michals/suse-module-tools/suse-module-tools-15.1.13+144.obscpio
Aborting: service call failed:  /usr/lib/obs/service/extract_file --archive
*.obscpio --files */suse-module-tools.spec --outfilename suse-module-tools.spec
--outdir
/home/michal/home:michals/suse-module-tools/tmp8hcrs1s6.extract_file.service
hramrach@kitsune:~/home:michals/suse-module-tools> rpm -qf
/usr/lib/obs/service/extract_file
obs-service-extract_file-0.3-bp153.1.11.noarch


--1630503180.71a1b5C0.439
Date: Wed, 1 Sep 2021 13:33:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1190065

            Bug ID: 1190065
           Summary: libinput-tools is missing libinput-replay
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: alexander.reimelt-at-protonmail.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Trying to run "libinput replay" only returns "libinput: replay is not
installed".
I looked through the repo because the gui tool is separeate as well but
couldn't find anything.

please add libinput-replay to libinput-tools


body:
--1630566585.AFAe3F10.21982
Date: Thu, 2 Sep 2021 07:09:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1190096

            Bug ID: 1190096
           Summary: VUL-0: chromium: update to 93.0.4577.63
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority
of users are updated with a fix. We will also retain restrictions if the bug
exists in a third party library that other projects similarly depend on, but
haven???t yet fixed.

This update includes 27 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$20000][1233975] High CVE-2021-30606: Use after free in Blink. Reported by Nan
Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab on 2021-07-28

[$10000][1235949] High CVE-2021-30607: Use after free in Permissions. Reported
by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on
2021-08-03

[$7500][1219870] High CVE-2021-30608: Use after free in Web Share. Reported by
Huyna at Viettel Cyber Security on 2021-06-15

[$5000][1239595] High CVE-2021-30609: Use after free in Sign-In. Reported by
raven (@raid_akame)  on 2021-08-13

[$N/A][1200440] High CVE-2021-30610: Use after free in Extensions API. Reported
by Igor Bukanov from Vivaldi on 2021-04-19

[$20000][1233942] Medium CVE-2021-30611: Use after free in WebRTC. Reported by
Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab on
2021-07-28

[$20000][1234284] Medium CVE-2021-30612: Use after free in WebRTC. Reported by
Nan Wang (@eternalsakura13) and koocola (@alo_cook) of 360 Alpha Lab on
2021-07-29

[$15000][1209622] Medium CVE-2021-30613: Use after free in Base internals.
Reported by Yangkang (@dnpushme) of 360 ATA on 2021-05-16

[$10000][1207315] Medium CVE-2021-30614: Heap buffer overflow in TabStrip.
Reported by Huinian Yang (@vmth6) of Amber Security Lab, OPPO Mobile
Telecommunications Corp. Ltd.  on 2021-05-10

[$5000][1208614] Medium CVE-2021-30615: Cross-origin data leak in Navigation.
Reported by NDevTK on 2021-05-12

[$5000][1231432] Medium CVE-2021-30616: Use after free in Media. Reported by
Anonymous on 2021-07-21

[$3000][1226909] Medium CVE-2021-30617: Policy bypass in Blink. Reported by
NDevTK on 2021-07-07

[$3000][1232279] Medium CVE-2021-30618: Inappropriate implementation in
DevTools. Reported by @DanAmodio and @mattaustin from Contrast Security on
2021-07-23

[$3000][1235222] Medium CVE-2021-30619: UI Spoofing in Autofill. Reported by
Alesandro Ortiz on 2021-08-02

[$NA][1063518] Medium CVE-2021-30620: Insufficient policy enforcement in Blink.
Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2020-03-20

[$NA][1204722] Medium CVE-2021-30621: UI Spoofing in Autofill. Reported by
Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on 2021-04-30

[$NA][1224419] Medium CVE-2021-30622: Use after free in WebApp Installs.
Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2021-06-28

[$10000][1223667] Low CVE-2021-30623: Use after free in Bookmarks. Reported by
Leecraso and Guang Gong of 360 Alpha Lab on 2021-06-25

[$TBD][1230513] Low CVE-2021-30624: Use after free in Autofill. Reported by Wei
Yuan of MoyunSec VLab on 2021-07-19

We would also like to thank all security researchers that worked with us during
the development cycle to prevent security bugs from ever reaching the stable
channel.

As usual, our ongoing internal security work was responsible for a wide range
of fixes:

    [1245324] Various fixes from internal audits, fuzzing and other initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

https://chromereleases.googleblog.com/2021/08/stable-channel-update-for-desktop_31.html

summary: VUL-0: chromium: update to 93.0.4577.63


--1630572105.D30850.701
Date: Thu, 2 Sep 2021 08:41:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1190103

            Bug ID: 1190103
           Summary: kernel-macros is causing build issues since the last rpmlint change
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The rpmlint revamp is causing build issues for users.

Example with v4l2loopback:

[   34s] rpmlint: 2.1.0
[   34s] configuration:
[   34s]
/opt/testing/lib64/python3.8/site-packages/rpmlint/configdefaults.toml
[   34s]     /opt/testing/share/rpmlint/cron-whitelist.toml
[   34s]     /opt/testing/share/rpmlint/dbus-services.toml
[   34s]     /opt/testing/share/rpmlint/device-files-whitelist.toml
[   34s]     /opt/testing/share/rpmlint/licenses.toml
[   34s]     /opt/testing/share/rpmlint/opensuse.toml
[   34s]     /opt/testing/share/rpmlint/pam-modules.toml
[   34s]     /opt/testing/share/rpmlint/permissions-whitelist.toml
[   34s]     /opt/testing/share/rpmlint/pie-executables.toml
[   34s]     /opt/testing/share/rpmlint/polkit-rules-whitelist.toml
[   34s]     /opt/testing/share/rpmlint/scoring.toml
[   34s]     /opt/testing/share/rpmlint/security.toml
[   34s]     /opt/testing/share/rpmlint/users-groups.toml
[   34s]     /opt/testing/share/rpmlint/world-writable-whitelist.toml
[   34s]     /etc/xdg/rpmlint/scoring-strict.override.toml
[   34s] checks: 39, packages: 4
[   34s]
[   34s] v4l2loopback-kmp-default.x86_64: E: useless-provides v4l2loopback-kmp
[   34s] This package provides multiple times the same capacity. This means
versioned
[   34s] and unversioned symbols are provided at once thus one overshadowing
the other.
[   34s] I.e. 'foo' and 'foo = 1.0'.
[   34s]
[   34s] v4l2loopback-kmp-default.x86_64: E: suse-zypp-packageand
packageand(kernel-default:v4l2loopback)
[   34s] The 'packageand(package1:package2)' syntax is obsolete, please use
boolean
[   34s] dependencies like: 'Supplements: (package1 and package2)'
[   34s]
[   34s] v4l2loopback-kmp-default.x86_64: W: obsolete-not-provided
v4l2loopback-kmp-desktop
[   34s] v4l2loopback-kmp-default.x86_64: W: obsolete-not-provided
v4l2loopback-kmp-trace
[   34s] v4l2loopback-kmp-default.x86_64: W: obsolete-not-provided
v4l2loopback-kmp-xen
[   34s] If a package is obsoleted by a compatible replacement, the obsoleted
package
[   34s] should also be provided in order to not cause unnecessary dependency
breakage.
[   34s] If the obsoleting package is not a compatible replacement for the old
one,
[   34s] leave out the Provides.
[   34s]
[   34s] v4l2loopback-kmp-default.x86_64: E: kmp-missing-supplements (Badness:
10000)
[   34s] Make sure your 'BuildRequires:' include 'kernel-syms' and 'modutils'
for
[   34s] proper dependencies to be inserted in the resulting binary RPM.
[   34s]
[   34s] v4l2loopback-kmp-default.x86_64: W: kmp-excessive-supplements
packageand(kernel-default:v4l2loopback)
[   34s] There is more than one flavor of kernel specified in Suplements field.
[   34s]
[   34s] --------------


--1630645711.1F4F0.15756
Date: Fri, 3 Sep 2021 05:08:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1190141

            Bug ID: 1190141
           Summary: Socket Process[7346]: segfault at 0 ip 00005570e142bc4e sp 00007fffdf3417d0 error 6 in firefox[5570e141f000+90000]
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: mozilla-bugs-at-suse.de
          Reporter: jshand2013-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Code: 90 e3 09 00 48 8b 33 e8 60 38 ff ff 48 8b 33 bf 0a 00 00 00 e8 33 39 ff
ff 48 8d 05 a2 38 08 00 48 8d 0d 65 ff 09 00 48 89 01 <c7> 04 25 00 00 00 00 21
00 00 00 e8 02 00 00 00 66 90 48 83 ec 08


body:
--1630647271.EF070.21045
Date: Fri, 3 Sep 2021 05:34:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1190142

            Bug ID: 1190142
           Summary: tcsh error: LANG: Undefined variable
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

if as root I run the command:
  su - <user>
where <user> has tcsh as login shell, I got this error:
  LANG: Undefined variable
and various .csh files do not get sourced.
I tracked the problem to the file:
  /usr/etc/profile.d/lang.csh from package: aaa_base
Such file contains the following line:
  if (${?LANG}) set _save=$LANG
the purpose is clear: if the variable LANG is defined then assign its value to
_save. However variable substitution happens anyway for the whole line causing
an error if the variable LANG is not defined.
To avoid such error simply split the line like:
  if (${?LANG}) then
      set _save=$LANG
  endif
In this way if LANG is not defined the next line is never executed and $LANG is
not expanded.

summary: tcsh error: LANG: Undefined variable


body:
Build Identifier:

Mount in /etc/fstab or manual mount causes rpc-gssd service to die due to
segfault.
I have a kerberized nfs-server and mounts used to work correctly in the
beginning of August, so I suspect that the problem started after update to
nfs-client-2.5.4-25.1.x86_64. I'm running MicroOs but rolling back the
snapshots doesn't help, the problem persists. This prevents the use of any
podman container that uses nfs-mount volumes.

Reproducible: Always

Steps to Reproduce:
1. Have working kerberized nfs4-server with shares
2. Check that rpc-gssd.service is running on client
3. Mount a share from the server, e.g. mount.nfs4 server.domain:/ /mnt -o
sec=krb5

Actual Results:
Remote share is mounted and accessible

Expected Results:
Rpc-gssd.service dies due to segfault and share is not mounted

laura:~ # uname -a
Linux laura 5.13.13-1-default #1 SMP Fri Aug 27 08:52:15 UTC 2021 (6339fac)
x86_64 x86_64 x86_64 GNU/Linux

laura:~ # rpm -qa | grep -e nfs-client -e libtirpc -e rpcbind
nfs-client-2.5.4-25.1.x86_64
rpcbind-1.2.6-2.1.x86_64
libtirpc3-1.3.2-1.3.x86_64
libtirpc-netconfig-1.3.2-1.3.x86_64

rpc-gssd.service status after
laura:~ # systemctl status rpc-gssd.service
??? rpc-gssd.service - RPC security service for NFS client and server
     Loaded: loaded (/usr/lib/systemd/system/rpc-gssd.service; static)
    Drop-In: /usr/lib/systemd/system/rpc-gssd.service.d
             ??????options.conf
     Active: inactive (dead) since Fri 2021-09-03 08:53:44 EEST; 10s ago
    Process: 690 ExecStart=/usr/sbin/rpc.gssd $GSSD_OPTIONS (code=exited,
status=0/SUCCESS)
   Main PID: 691 (code=killed, signal=SEGV)
        CPU: 8ms

GSSD_OPTIONS='-v -v -v -v -r -r -r -r -M'

Line in dmesg
traps: rpc.gssd[1475] general protection fault ip:7ff8d98210b7 sp:7ff8d8a7f468
error:0 in libc-2.33.so[7ff8d96e4000+14d000]

summary: rpc.gssd segfault on mounting nfs4-share