body:
--1670989094.Fc8dBEB10.13318
Date: Wed, 14 Dec 2022 03:38:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206388

            Bug ID: 1206388
           Summary: efivar 38 failed to build with LTO/PIE
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: glin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When building efivar 38 against Factory/x86_64, it failed with the following
messages:

[   46s]
/usr/lib64/gcc/x86_64-suse-linux/12/../../../../x86_64-suse-linux/bin/ld:
/tmp/ccgxD9bJ.ltrans0.ltrans.o: warning: relocation against
`efi_well_known_names@@LIBEFIVAR_1.38' in read-only section `.text'
[   46s]
/usr/lib64/gcc/x86_64-suse-linux/12/../../../../x86_64-suse-linux/bin/ld:
warning: creating DT_TEXTREL in a PIE

The tricky part is that 'efi_well_known_names' is an array declared in a linker
script rather than in C source file.

There is a program, makeguids(*1), in efivar to generate guid-symbols.c,
guids.lds, and efivar-guids.h. In guid-symbols.c, 'efi_well_known_names_[42]'
is declared like this:

const struct efivar_guidname
        __attribute__((__visibility__ ("default")))
        efi_well_known_names_[42]= {
                {.guid={.a=cpu_to_le32(0x3b053091),
                        .b=cpu_to_le16(0x6c9f),
                        .c=cpu_to_le16(0x4cc),
                        .d=cpu_to_be16(0xb1ac),
                        .e={0xe2,0xa5,0x1e,0x3b,0xe5,0xf5}},
                 .symbol="efi_guid_asus",
                 .name="asus",
                 .description="Asus",
                },
...
                {.guid={.a=cpu_to_le32(0xffffffff),
                        .b=cpu_to_le16(0xffff),
                        .c=cpu_to_le16(0xffff),
                        .d=cpu_to_be16(0xffff),
                        .e={0xff,0xff,0xff,0xff,0xff,0xff}},
                 .symbol="efi_guid_zzignore-this-guid",
                 .name="zzignore-this-guid",
                 .description="zzignore-this-guid",
                },
};

To reuse 'efi_well_known_names_' and exclude the ending 'zzignore-this-guid',
'efi_well_known_names' is firstly declared as extern in efivar-guids.h:

extern const struct efivar_guidname
        __attribute__((__visibility__ ("default")))
        efi_well_known_guids[41];

And then in guids.lds:

SECTIONS
{
  .data :
  {
    efi_well_known_guids = efi_well_known_guids_;
    efi_well_known_guids_end = efi_well_known_guids_ + 32144;
    efi_well_known_names = efi_well_known_names_;
    efi_well_known_names_end = efi_well_known_names_ + 32144;
  }
} INSERT AFTER .data;

The only user of 'efi_well_known_names' in efivar is guid.c:

result = bsearch(&key,
         &efi_well_known_names[0],
         efi_n_well_known_names,
         sizeof(efi_well_known_names[0]),
         cmpnamep);

https://github.com/rhboot/efivar/blob/38/src/guid.c#L205-L209

It seems that gcc/ld was confused by the declaration of 'efi_well_known_names'
and didn't handle it properly for PIE.

It's worth mentioning that the warning didn't show when I built efivar manually
in my Tumbleweed VM until gcc-PIE was installed. Besides, disabling LTO
(%define _lto_cflags %{nil}) also worked around the warning.

Another interesting part is that efivar has its own gcc spec file(*2). Not sure
if it's relevant.

(*1) https://github.com/rhboot/efivar/blob/38/src/makeguids.c
(*2) https://github.com/rhboot/efivar/blob/38/src/include/gcc.specs

NOTE: my home branch for efivar 38:
https://build.opensuse.org/package/show/home:gary_lin:branches:Base:System/efivar

summary: efivar 38 failed to build with LTO/PIE


--1671007275.60c6e3.32355
Date: Wed, 14 Dec 2022 08:41:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206403

            Bug ID: 1206403
           Summary: VUL-0: chromium: multiple security issues fixed in 108.0.5359.124
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html

- High CVE-2022-4436: Use after free in Blink Media.
- High CVE-2022-4437: Use after free in Mojo IPC.
- High CVE-2022-4438: Use after free in Blink Frames.
- High CVE-2022-4439: Use after free in Aura.
- Medium CVE-2022-4440: Use after free in Profiles.


body:
--1671199743.b73C465d11.13857
Date: Fri, 16 Dec 2022 14:09:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206480

            Bug ID: 1206480
           Summary: GCC13 fails on armv6/7
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: armv7
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
                CC: afaerber-at-suse.com, dmueller-at-suse.com, fvogt-at-suse.com
          Found By: ---
           Blocker: ---

GCC13 fails on armv6/7, which blocks Tumbleweed for Arm.

Error log is:
[14249s] RPM build errors:
[14249s]     Installed (but unpackaged) file(s) found:
[14249s]
/usr/lib/gcc/armv7hl-suse-linux-gnueabi/13/include-fixed/bits/floatn-common.h

So, it seems we have 'include-fixed/bits/floatn-common.h' without
'include-fixed/bits/floatn.h'

See:
https://build.opensuse.org/package/live_build_log/devel:gcc/gcc13/openSUSE_Factory_ARM/armv7l

summary: GCC13 fails on armv6/7


body:
--1671208504.efF81.5752
Date: Fri, 16 Dec 2022 16:35:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206485

            Bug ID: 1206485
           Summary: pam and pam_unix got merged again
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The packages pam and pam_unix got merged again after the conflicting package
got dropped.
This seems to need adjustements in some checker scripts:

[  221s] pam.x86_64: E: pam-file-unauthorized (Badness: 10)
/usr/lib64/security/pam_unix_auth.so (sha256 file digest default
filter:b1722429c8d115db4855d931aaf385cb5e79acecb9ea2a43e8fd62fe5b39f316 shell
filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[  221s] pam.x86_64: E: pam-file-unauthorized (Badness: 10)
/usr/lib64/security/pam_unix_acct.so (sha256 file digest default
filter:b1722429c8d115db4855d931aaf385cb5e79acecb9ea2a43e8fd62fe5b39f316 shell
filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[  221s] pam.x86_64: E: pam-file-unauthorized (Badness: 10)
/usr/lib64/security/pam_unix_session.so (sha256 file digest default
filter:b1722429c8d115db4855d931aaf385cb5e79acecb9ea2a43e8fd62fe5b39f316 shell
filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[  221s] pam.x86_64: E: pam-file-unauthorized (Badness: 10)
/usr/lib64/security/pam_unix.so (sha256 file digest default
filter:b1722429c8d115db4855d931aaf385cb5e79acecb9ea2a43e8fd62fe5b39f316 shell
filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[  221s] pam.x86_64: E: pam-file-unauthorized (Badness: 10)
/usr/lib64/security/pam_unix_passwd.so (sha256 file digest default
filter:b1722429c8d115db4855d931aaf385cb5e79acecb9ea2a43e8fd62fe5b39f316 shell
filter:<failed-to-calculate> xml filter:<failed-to-calculate>)

summary: pam and pam_unix got merged again


--1671400273.4BB8F1e40.13032
Date: Sun, 18 Dec 2022 21:51:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206505

            Bug ID: 1206505
           Summary: multimedia:libs/ffmpeg:ffmpeg-5: missing sdl format starting from 5.1.2-6.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Usability
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dlshcbmuipmam-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After upgrading ffmpeg-5 (from 5.1.2-5.1, currently at 5.1.2-7.1), sdl support
is missing. You can run `ffmpeg -formats | grep SDL` to check it, here is my
output:

```
ffmpeg version 5.1.2 Copyright (c) 2000-2022 the FFmpeg developers
  built with gcc 12 (SUSE Linux)
  configuration: --prefix=/usr --libdir=/usr/lib64 --shlibdir=/usr/lib64
--incdir=/usr/include/ffmpeg --extra-cflags='-O2 -Wall -U_FORTIFY_SOURCE
-D_FORTIFY_SOURCE=3 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type
-flto=auto -ffat-lto-objects -g' --optflags='-O2 -Wall -U_FORTIFY_SOURCE
-D_FORTIFY_SOURCE=3 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type
-flto=auto -ffat-lto-objects -g' --disable-htmlpages --enable-pic
--disable-stripping --enable-shared --disable-static --enable-gpl
--enable-version3 --disable-openssl --enable-gnutls --enable-ladspa
--enable-libshaderc --enable-vulkan --enable-libaom --enable-libass
--enable-libbluray --enable-libbs2b --enable-libcdio --enable-libcodec2
--enable-libdav1d --enable-libdc1394 --enable-libdrm --enable-libfontconfig
--enable-libfreetype --enable-libfribidi --enable-libgsm --enable-libjack
--enable-libjxl --enable-librist --enable-libmp3lame --enable-libmysofa
--enable-libopenjpeg --enable-libopenmpt --enable-libopenh264-dlopen
--enable-libopus --enable-libpulse --enable-librav1e --enable-librubberband
--enable-libsvtav1 --enable-libsoxr --enable-libspeex --enable-libssh
--enable-libsrt --enable-libtheora --enable-libtwolame --enable-libvidstab
--enable-libvmaf --enable-libvorbis --enable-libvpx --enable-libwebp
--enable-libxml2 --enable-libzimg --enable-libzmq --enable-libzvbi --enable-lto
--enable-lv2 --enable-libmfx --enable-vaapi --enable-vdpau --enable-version3
--enable-libfdk-aac-dlopen --enable-nonfree --enable-libvo-amrwbenc
--enable-libx264 --enable-libx265 --enable-libxvid
  libavutil      57. 28.100 / 57. 28.100
  libavcodec     59. 37.100 / 59. 37.100
  libavformat    59. 27.100 / 59. 27.100
  libavdevice    59.  7.100 / 59.  7.100
  libavfilter     8. 44.100 /  8. 44.100
  libswscale      6.  7.100 /  6.  7.100
  libswresample   4.  7.100 /  4.  7.100
  libpostproc    56.  6.100 / 56.  6.100
 DE smjpeg          Loki SDL MJPEG
```


--1671435455.eAbC70.10395
Date: Mon, 19 Dec 2022 07:37:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206507

            Bug ID: 1206507
           Summary: Firefox 108.0.1 is available (new version)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
               URL: https://www.mozilla.org/en-US/firefox/108.0.1/releasen
                    otes/
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: factory-mozilla-at-lists.opensuse.org
          Reporter: jayjayjazz-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Community User
           Blocker: ---

Firefox 108.0.1, first offered to Release channel users on December 16, 2022
Fixed

- Fixes the default search engine being reset on upgrade for profiles which
were previously copied from a different location.

Please consider an update.


--1671621395.B0E0e63f0.32501
Date: Wed, 21 Dec 2022 11:16:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206590

            Bug ID: 1206590
           Summary: [cycle] Build cycle in openSUSE:Factory: python-rq <--> python-sentry-sdk
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

A new build cycle has formed in openSUSE:Factory

    python-rq, python-sentry-sdk

As the two packages originate from the same devel project, the cycle can also
be observed there and be worked out:

https://build.opensuse.org/project/repository_state/devel:languages:python/openSUSE_Tumbleweed


--1671629027.C5a60.12416
Date: Wed, 21 Dec 2022 13:23:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206592

            Bug ID: 1206592
           Summary: sssd doesn't restart cleanly and even seg.faults during update
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 863615
  --> https://bugzilla.suse.com/attachment.cgi?id=863615&action=edit
sssd.log

During update, sssd.rpm tries to restart all sssd sevices and sockets, even if
they cannot be restarted.

This leads to a lot of error messages and sometimes a non functional sssd
service. See the sssd.log in the attachment. According to the admin, it happens
on a regular base that they need to restart the daemon.

Please restart only this services in the correct order, which lead to a
functional system afterwards! Don't restart *.socket services, it's really not
necessary. And don't try to restart services which cannot be restarted.
If rpmlint complains, ignore that or add an exception.
Prior 1 has to be that the services continues to work after an update and the
admin does not need to fix it afterwards.
If it is not possible to restart sssd in a secure, safe way, better don't do so
before you lockout the admin.

In this case sssd even seg.faulted in libsss_utils.so, no idea why only in this
place and not always. Maybe other, depending libraries got only update
afterwards and not before? If this can happen, restarting a service in a
pre/post install script is even more dangerous.


body:
--1671635322.E6a2600.21639
Date: Wed, 21 Dec 2022 15:08:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206600

            Bug ID: 1206600
           Summary: Firefox no longer builds for i586/i686
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: i686
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
          Assignee: factory-mozilla-at-lists.opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

with SR https://build.opensuse.org/request/show/1043934, Mozilla Firefox has
been excluded to be built on i586/i686. Prior to excluding it, the last two SRs
had a non-building version (which meant blocking the update on all arches)

With FF disabled on i586/i686, that basically means there are not many
web-browser left on this architecture (only epiphany comes to mind)

summary: Firefox no longer builds for i586/i686


--1671764103.3dc5f000.24921
Date: Fri, 23 Dec 2022 02:55:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206651

            Bug ID: 1206651
           Summary: Leap 15.4 guests running VirtualBox 7.0.4 crash when run on hosts with certain Intel graphics cards
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: Larry.Finger-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Long-term tests of Leap 15.4 guests running VirtualBox 7.0.4 find crashes of
the VM. If 'journalctl -f' is running on the VM, the output shows repeated
instances of the following:
Dec 18 07:36:28 suse15r2 kernel: [drm:drm_crtc_commit_wait [drm]] *ERROR*
flip_done timed out
Dec 18 07:36:28 suse15r2 kernel: [drm:drm_atomic_helper_wait_for_dependencies
[drm_kms_helper]] *ERROR* [CRTC:38:crtc-0] commit wait timed out

Testing showed that VMs running the Oracle version of the code did not have the
problem, which led to the solution.

When the kernel module vboxvideo.ko became part of the kernel, generation of
that module was disabled in the openSUSE package. Although this decision had
not previously caused problems, something in the 7.0.4 code is interacting
badly with that kernel module from 5.14.X when used with the i915 driver for
the Intel Corporation CoffeeLake-S GT2 [UHD Graphics 630] hardware. The "bug"
is causing the VM to error. There may be other types of Intel graphics devices
that error - this was the only one that was available for testing. The problem
happened on every machine with this graphics device, and is not an obscure
hardware error. On one machine with nVidia hardware using the nouveau driver,
no problems were noted. We also did not find the problem with Tumbleweed
guests. It seems that whatever causes the bug, it was fixed between kernel
5.14.X used in Leap 15.4 and kernel 6.0.X used in Tumbleweed.

Once the module vboxvideo.ko was generated as part of the
virtualbox-kmp-default package, and the new code was installed on the VM, no
further problems of this type were noted.

Outside the scope of this defect, but worth noting, all Windows 11 guests run
with the 7.0.4 guest extensions crashed. Furthermore, these crashes corrupted
the virtual disk of the guest. Oracle knows of this problem and strongly
recommends that Windows 11 guests be run with the VB 6.1.40 guest extensions.
We have not found any problems with this configuration. Whether Windows 10 is
also affected is not clear.


--1671857409.AA36AF8D0.30566
Date: Sat, 24 Dec 2022 04:50:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206684

            Bug ID: 1206684
           Summary: Segmentation fault with zypper-1.14.58-1.2.aarch64
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ydfan-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 863681
  --> https://bugzilla.suse.com/attachment.cgi?id=863681&action=edit
strace of "zypper lu"

"zypper lu" is causing Segmentation fault in my current TW environment:

ydfan@bogon:~> zypper lu
Segmentation fault (core dumped)

ydfan@bogon:~> rpm -qi zypper
Name        : zypper
Version     : 1.14.58
Release     : 1.2
Architecture: aarch64
Install Date: Mon 05 Dec 2022 10:17:19 AM CST
Group       : System/Packages
Size        : 7617640
License     : GPL-2.0-or-later
Signature   : RSA/SHA256, Thu 01 Dec 2022 02:43:53 AM CST, Key ID
b88b2fd43dbdc284
Source RPM  : zypper-1.14.58-1.2.src.rpm
Build Date  : Thu 01 Dec 2022 02:37:11 AM CST
Build Host  : obs-arm-10
Packager    : http://bugs.opensuse.org
Vendor      : openSUSE
URL         : https://github.com/openSUSE/zypper
Summary     : Command line software manager using libzypp

ydfan@bogon:~> cat /etc/os-release
NAME="openSUSE Tumbleweed"
# VERSION="20221219"
ID="opensuse-tumbleweed"
ID_LIKE="opensuse suse"
VERSION_ID="20221219"
PRETTY_NAME="openSUSE Tumbleweed"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:opensuse:tumbleweed:20221219"
BUG_REPORT_URL="https://bugs.opensuse.org"
HOME_URL="https://www.opensuse.org/"
DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed"
LOGO="distributor-logo-Tumbleweed"

My environment is a VM based on Qemu hypervisor on MacOS 13.0.1 running on M1
Max CPU.

I didn't see the core file in /var/lib/systemd/coredump/, there is nothing
there.  The strace file is attached for reference.

Other commands I found are also affected such as "zypper ref", "zypper up",
"zypper patch" and "zypper info", etc.


--1672218589.A5CB6A1.30608
Date: Wed, 28 Dec 2022 09:09:49 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206723

            Bug ID: 1206723
           Summary: [Build B.585.1] YaST relies on /etc/sysconfig/network directory structure
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/2977140/modules/awai
                    t_install/steps/68
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
          Found By: openQA
           Blocker: Yes

## Observation

The base package 'filesystem' eliminates /etc/sysconfig/network structure:
  > - Remove /etc/sysconfig/network hierachy, not used by default anymore

YaST is not ready for this and seems to be wanting to write there (even though
with NetworkManager, this seems unused)

2022-12-24 18:11:38 <3> install(3940) [Ruby] cfa/generic_sysconfig.rb(rescue in
merge_files):55 Failed to load /mnt/etc/sysconfig/network/dhcp with
#<Errno::ENOTDIR: Not a directory @ rb_sysopen -
/mnt/etc/sysconfig/network/dhcp>. Copying just new content.
2022-12-24 18:11:38 <3> install(3940) [Ruby] yast/wfm.rb(handle_exception):271
Client /mounts/mp_0001/usr/share/YaST2/clients/save_network.rb failed with 'Not
a directory @ rb_sysopen - /mnt/etc/sysconfig/network/dhcp' (Errno::ENOTDIR).

openQA test in scenario
microos-Staging:B-Staging-DVD-x86_64-microos@uefi-staging fails in
[await_install](https://openqa.opensuse.org/tests/2977140/modules/await_install/steps/68)

## Test suite description

## Reproducible

Fails since (at least) Build
[B.585.1](https://openqa.opensuse.org/tests/2977140) (current job)

## Expected result

Last good: [B.584.1](https://openqa.opensuse.org/tests/2964973) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=Staging-DVD&machine=uefi-staging&test=microos&version=Staging%3AB)


--1672488876.Ab24b0C1.7558
Date: Sat, 31 Dec 2022 12:14:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206756

            Bug ID: 1206756
           Summary: AUDIT-WHITELIST: NetworkManager-iodine: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Move /etc/dbus-1/system.d/nm-iodine-service.conf to
/usr/share/dbus-1/system.d/nm-iodine-service.conf


--1672489099.A5cB161.7794
Date: Sat, 31 Dec 2022 12:18:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206757

            Bug ID: 1206757
           Summary: AUDIT-WHITELIST: NetworkManager-libreswan: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Move nm-libreswan-service.conf from /etc to /usr/share


--1672733655.AfDF4.10234
Date: Tue, 3 Jan 2023 08:14:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206795

            Bug ID: 1206795
           Summary: [pdsh] Backport  Features and Bugfixes from Upstream
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: hpc-bugs-at-suse.de
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

There has been no release to pdsh since 2020. The upstream git repo contains a
small set of features and bug fixes since the last release which may be
interesting to users:
  * Add '-C' option on Slrum plugin to restrict selected nodes to ones
    with the specified features present.
  * Add option '-k' to the ssh plugin to fail faster on connection failures.
  * Fix use of strchr
  * Dshbak: Fix uninitialized use of $tag on empty input
  * Dsh: Release a lock that is no longer used in dsh()

These should be considered for backporting.


body:
--1672741468.686270.26402
Date: Tue, 3 Jan 2023 10:24:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206798

            Bug ID: 1206798
           Summary: Deprecate the %usrmerged macro
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: lnussel-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1029961
          Found By: ---
           Blocker: ---

When transitioning to usrmerged systemd we introduced the %usrmerged macro.
Since there is no way back for Tumbleweed and already released distributions
won't ever go for usrmerge, the macro is actually obsolete. It's sufficient to
check for Tumbleweed which is usually done by checking %suse_version.

So the %usrmerged macro in spec files needs to be removed. Of course spec files
could manually set it based on %suse_version if that's convenient. Spec files
just shouldn't rely on an externally set %usrmerged anymore.

pkgs: bash blog cryptsetup dmraid ecryptfs-utils f2fs-tools fuse iproute2 keyutils kmod libreadline5 mailutils mailx mingetty mksh pam_mount procps psmisc rash rpm-config-SUSE s390-tools scsh suse-module-tools syslogd sysvinit tcsh util-linux wicked

summary: Deprecate the %usrmerged macro


--1672836157.A836f0.3203
Date: Wed, 4 Jan 2023 12:42:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1206837

            Bug ID: 1206837
           Summary: clang sets uneeded RUNPATH when enabling openmp
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

This feature might be useful if libomp is in a non standard search path. but in
our case the library is in the default search path. We found this behavior
while debugging the fedora builds of [vkdt][0] and then noticed that openSUSE
Tumbleweed has the same behavior in general. weirdly not when linking
/usr/libexec/vkdt/modules/i-mlv/libi-mlv.so.

```
// cat openmp-reproducer.c
#include <stdio.h>
#include <omp.h>

int main(int argc, char** argv){
    #pragma omp parallel
    {
        printf("Hello from process: %d\n", omp_get_thread_num());
    }
    return 0;
}
```

compiler output:

```
clang --verbose openmp-reproducer.c -fopenmp -shared -o openmp-reproducer

clang version 15.0.6
Target: x86_64-suse-linux
Thread model: posix
InstalledDir: /usr/bin
Found candidate GCC installation: /usr/bin/../lib64/gcc/x86_64-suse-linux/12
Found candidate GCC installation: /usr/bin/../lib64/gcc/x86_64-suse-linux/13
Selected GCC installation: /usr/bin/../lib64/gcc/x86_64-suse-linux/13
Candidate multilib: .;@m64
Selected multilib: .;@m64
 "/usr/bin/clang-15.0.6" -cc1 -triple x86_64-suse-linux -emit-obj -mrelax-all
--mrelax-relocations -disable-free -clear-ast-before-backend
-disable-llvm-verifier -discard-value-names -main-file-name openmp-reproducer.c
-mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=all
-fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases
-funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -mllvm
-treat-scalable-fixed-error-as-warning -debugger-tuning=gdb -v
-fcoverage-compilation-dir=/srv/home/darix/workspace -resource-dir
/usr/lib64/clang/15.0.6 -internal-isystem /usr/lib64/clang/15.0.6/include
-internal-isystem /usr/local/include -internal-isystem
/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../x86_64-suse-linux/include
-internal-externc-isystem /include -internal-externc-isystem /usr/include
-fdebug-compilation-dir=/srv/home/darix/workspace -ferror-limit 19 -fopenmp
-fgnuc-version=4.2.1 -fcolor-diagnostics -faddrsig
-D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/openmp-reproducer-2559cc.o -x c
openmp-reproducer.c
clang -cc1 version 15.0.6 based upon LLVM 15.0.6 default target
x86_64-suse-linux
ignoring nonexistent directory "/include"
#include "..." search starts here:
#include <...> search starts here:
 /usr/lib64/clang/15.0.6/include
 /usr/local/include

/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../x86_64-suse-linux/include
 /usr/include
End of search list.
 "/usr/bin/ld" -z relro --hash-style=gnu --hash-style=both --build-id
--enable-new-dtags --eh-frame-hdr -m elf_x86_64 -shared -o openmp-reproducer
/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../lib64/crti.o
/usr/bin/../lib64/gcc/x86_64-suse-linux/13/crtbeginS.o
-L/usr/bin/../lib64/gcc/x86_64-suse-linux/13
-L/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../lib64 -L/lib/../lib64
-L/usr/lib/../lib64
-L/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../x86_64-suse-linux/lib
-L/lib -L/usr/lib /tmp/openmp-reproducer-2559cc.o -lomp -rpath /usr/lib64
-L/usr/lib64 -lgcc --as-needed -lgcc_s --no-as-needed -lpthread -lc -lgcc
--as-needed -lgcc_s --no-as-needed
/usr/bin/../lib64/gcc/x86_64-suse-linux/13/crtendS.o
/usr/bin/../lib64/gcc/x86_64-suse-linux/13/../../../../lib64/crtn.o
```

Verify the RUNPATH value:

```
objdump -x openmp-reproducer | grep RUNPATH
  RUNPATH              /usr/lib64
```

[0]: https://build.opensuse.org/package/show/graphics:darktable:master/vkdt


--1672847617.Cb5Bc681.18359
Date: Wed, 4 Jan 2023 15:53:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206850

            Bug ID: 1206850
           Summary: texlive-dvips incorrectly depends on metapost
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: stefan.bruens@rwth-aachen.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

According to `texlive.tlpdb`:

name dvips
category TLCore
revision 62387
shortdesc A DVI to PostScript driver
longdesc ...
depend dvips.ARCH

i.e. not dependency on metapost or collection-metapost.

Greppping for metapost/mpost in the dvips package contents also yields no
results.

Removing metapost from the dependencies of dvips is especially beneficial for
the OBS, as metapost has a dependency chain libcairo -> libglvnd -> Mesa-dri ->
libllvm*. This can extend the installed package set significantly.


--1673185919.e4cad01.31811
Date: Sun, 8 Jan 2023 13:51:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206947

            Bug ID: 1206947
           Summary: cleanup-overlays should also delete empty folders in /var/lib/overlay
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: MicroOS
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: reiokorn-at-tutanota.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I've noticed that the transactional-update cleanup-overlays isn't removing the
folders of unused /etc overlay directories in /var/lib/overlay

After many updates, this causes a large number of empty folders to appear
there.

As an improvement, I suggest that the cleaning mechanism for the overlays also
deletes the empty folders.


--1673225327.E67f3FC01.12459
Date: Mon, 9 Jan 2023 00:48:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206951

            Bug ID: 1206951
           Summary: hhdate library downloads IANA timezone DB to ~/Downloads/tzdata instead of using /usr/share/zoneinfo
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: opensuse-at-arnavion.dev
        QA Contact: qa-bugs-at-suse.de
                CC: filippo.bonazzi-at-suse.com, socvirnyl.estela-at-gmail.com
          Found By: ---
           Blocker: ---

I use waybar, and every time I start it it creates a ~/Downloads/tzdata
directory. This is from the hhdate library used by waybar's clock module,
which defaults to downloading the IANA timezone DB to this location.

Libraries should not be silently downloading files, especially not to
a user's homedir. Also, if I manually create this directory for my own reason,
then the library fails with a fatal error, which in waybar means that
the clock module does not show. So the library is essentially squatting on
this name in my Downloads directory.

Per its documentation, hhdate has options HAS_REMOTE_API and AUTO_DOWNLOAD to
control this behavior and they default to 1. It also has USE_OS_TZDB which
allows it to use /usr/share/zoneinfo, and this defaults to 0.
Using /usr/share/zoneinfo is the correct behavior for such a library.
So it seems to me that the fix would be to set
`HAS_REMOTE_API=0 AUTO_DOWNLOAD=0 USE_OS_TZDB=1`, and the BuildRequires on
libcurl-devel can then be dropped since it is only used for this auto-download
feature.


body:
--1673253299.048fFef0.14596
Date: Mon, 9 Jan 2023 08:34:59 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1206957

            Bug ID: 1206957
           Summary: lua-lmod Permission denied in init/bash
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aplanas-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When calling `less` over a file I can see this output at the exit:

> less /usr/share/lmod/8.7.15/init/bash
/usr/share/lmod/8.7.15/init/bash: line 57: /usr/bin/readlink: Permission denied
/usr/share/lmod/8.7.15/init/bash: line 61: /usr/bin/expr: Permission denied
/usr/share/lmod/8.7.15/init/bash: line 62: /usr/bin/basename: Permission denied

I did not dig into the bug, but this file seems not to be updated in the last
version in git.

summary: lua-lmod Permission denied in init/bash


--1673384422.58CcCf81.16686
Date: Tue, 10 Jan 2023 21:00:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207018

            Bug ID: 1207018
           Summary: VUL-0: chromium: multiple security issues fixed in 109.0.5414.74
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html

Fixed in Chromium 109.0.5414.74

* CVE-2023-0128: Use after free in Overview Mode
* CVE-2023-0129: Heap buffer overflow in Network Service
* CVE-2023-0130: Inappropriate implementation in Fullscreen API
* CVE-2023-0131: Inappropriate implementation in iframe Sandbox
* CVE-2023-0132: Inappropriate implementation in Permission prompts
* CVE-2023-0133: Inappropriate implementation in Permission prompts
* CVE-2023-0134: Use after free in Cart
* CVE-2023-0135: Use after free in Cart
* CVE-2023-0136: Inappropriate implementation in Fullscreen API
* CVE-2023-0137: Heap buffer overflow in Platform Apps
* CVE-2023-0138: Heap buffer overflow in libphonenumber
* CVE-2023-0139: Insufficient validation of untrusted input in Downloads
* CVE-2023-0140: Inappropriate implementation in File System API
* CVE-2023-0141: Insufficient policy enforcement in CORS
* Various fixes from internal audits, fuzzing and other initiatives


--1673393757.36e14bA0.21411
Date: Tue, 10 Jan 2023 23:35:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207023

            Bug ID: 1207023
           Summary: util-linux-systemd-2.38.1-2.1 contains man pages for binaries found in util-linux-2.38.1-2.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jared.hudson-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

util-linux-2.38.1-2.1.x86_64
util-linux-systemd-2.38.1-2.1.x86_64

util-linux-systemd-2.38.1-2.1 contains man pages for binaries found in
util-linux-2.38.1-2.1

hostname:~ # rpm -ql util-linux-systemd-2.38.1-2.1.x86_64 | grep -c /man/
121
hostname:~ # rpm -ql util-linux-2.38.1-2.1.x86_64 | grep -c /man/
0

util-linux-2.37.4-4.3 and earlier had man pages.

hostname:~ # rpm -qlp Downloads/util-linux-2.37.4-4.3.x86_64.rpm | grep -c
/man/
111


--1673417402.fE5af1.17661
Date: Wed, 11 Jan 2023 06:10:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207028

            Bug ID: 1207028
           Summary: VUL-0: CVE-2022-46449: mpd: Denial of Service (DoS) via a crafted input
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/353335/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: ilya-at-ilya.cf
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-46449

An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a
Denial of Service (DoS) via a crafted input.

Upstream fix:
https://github.com/MusicPlayerDaemon/MPD/commit/73b5d0a9b9ace89edcee30d9d83eb16c27c6f9b2

Wrongly tagged as Windows-only.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46449
https://www.cve.org/CVERecord?id=CVE-2022-46449
https://github.com/MusicPlayerDaemon/MPD/issues/1676


body:
--1673442264.aEdaaaB0.2939
Date: Wed, 11 Jan 2023 13:04:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207053

            Bug ID: 1207053
           Summary: [HPC,  Spack] 'var_path' set incorrectly
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Spack cannot find its repos since var_path is set incorrectly since release of
version 0.19.0: it points to /var/spack instead of /var/lib/spack.

summary: [HPC,  Spack] 'var_path' set incorrectly


body:
--1673446362.AdB1aaeB0.2908
Date: Wed, 11 Jan 2023 14:12:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207056

            Bug ID: 1207056
           Summary: systemd missing conf.d directories
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

/etc/systemd/system.conf is recommending, rather than modifying it,  to create
a droplet in /etc/systemd/system.conf.d/ and /etc/system/user.conf.d (for
/etc/systemd/user.conf).

can we please ship those directories as part of the systemd package?

summary: systemd missing conf.d directories


--1673536676.4D424.7130
Date: Thu, 12 Jan 2023 15:17:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207084

            Bug ID: 1207084
           Summary: Piviti cannot be started due to "ImportError: cannot import name 'MouseButton'"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: fgruener-at-web.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Pitivi cannot be started as it cannot import MouseButton from matplotlib.

Error Message:
bash> pitivi
Traceback (most recent call last):
  File "/usr/bin/pitivi", line 172, in <module>
    _run_pitivi()
  File "/usr/bin/pitivi", line 143, in _run_pitivi
    from pitivi import application
  File "/usr/lib64/pitivi/python/pitivi/application.py", line 32, in <module>
    from pitivi.mainwindow import MainWindow
  File "/usr/lib64/pitivi/python/pitivi/mainwindow.py", line 29, in <module>
    from pitivi.editorperspective import EditorPerspective
  File "/usr/lib64/pitivi/python/pitivi/editorperspective.py", line 41, in
<module>
    from pitivi.timeline.timeline import TimelineContainer
  File "/usr/lib64/pitivi/python/pitivi/timeline/timeline.py", line 37, in
<module>
    from pitivi.timeline.elements import Clip
  File "/usr/lib64/pitivi/python/pitivi/timeline/elements.py", line 30, in
<module>
    from matplotlib.backend_bases import MouseButton
ImportError: cannot import name 'MouseButton'

Installed packages:
bash> zypper search -s -i matplotlib
Loading repository data...
Reading installed packages...

S  | Name                     | Type    | Version          | Arch   |
Repository
---+--------------------------+---------+------------------+--------+-----------------------
i+ | python3-matplotlib       | package | 2.2.5-150400.9.4 | x86_64 |
openSUSE-Leap_15.4-OSS
i+ | python3-matplotlib-cairo | package | 2.2.5-150400.9.4 | x86_64 |
openSUSE-Leap_15.4-OSS
i+ | python3-matplotlib-gtk3  | package | 2.2.5-150400.9.4 | x86_64 |
openSUSE-Leap_15.4-OSS
i+ | python3-matplotlib-qt5   | package | 2.2.5-150400.9.4 | x86_64 |
openSUSE-Leap_15.4-OSS
i+ | python3-matplotlib-tk    | package | 2.2.5-150400.9.4 | x86_64 |
openSUSE-Leap_15.4-OSS

I found out, that the matplotlib provided by the release 15.4 is too old. It is
version 2.2.5, while Mousebutton seems to be introduced around version 3.1.0.
In the version 2.2.5 MouseButton was not yet implemented as you can see under:
https://matplotlib.org/2.2.5/api/backend_bases_api.html. While in 3.1.0 it is
documented: https://matplotlib.org/3.1.0/api/backend_bases_api.html


--1673551280.ccfDCa071.31829
Date: Thu, 12 Jan 2023 19:21:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207110

            Bug ID: 1207110
           Summary: VUL-0: tor: The SafeSocks option for SOCKS4(a) is inverted leading to SOCKS4 going through (TROVE-2022-002)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: bwiedemann-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

It was discovered that tor before 0.4.5.16 / 0.4.7.13 had an inverted logic for
the SafeSocks options for SOCKS4 and SOCKS4a. The could load to tor client
users who relied on the "SafeSocks 1" option to avoid DNS leaks to have unsafe
Tor traffic. The incorrect implementation would let the unsafe SOCKS4 pass but
not the safe SOCKS4a one.

References:
https://gitlab.torproject.org/tpo/core/tor/-/issues/40730
https://gitlab.torproject.org/tpo/core/tor/-/commit/a282145b3634547ab84ccd959d0537c021ff7ffc
https://hackerone.com/bugs?subject=torproject&report_id=1784589
https://lists.torproject.org/pipermail/tor-announce/2023-January/000261.html
https://forum.torproject.net/t/stable-release-0-4-5-16-and-0-4-7-13/6216


--1673601178.Ebc0e1.19177
Date: Fri, 13 Jan 2023 09:12:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207122

            Bug ID: 1207122
           Summary: VUL-0: CVE-2023-23457: upx: SEGV on PackLinuxElf64:invert_pt_dynamic() in p_lx_elf.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/353588/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2160382

A Segmentation fault was found in UPX in invert_pt_dynamic() function in
p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory
address access that could lead to a denial of service.

https://github.com/upx/upx/issues/631
https://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2160382
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-23457
https://www.cve.org/CVERecord?id=CVE-2023-23457
https://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860
https://github.com/upx/upx/issues/631


--1673601544.a61531.23909
Date: Fri, 13 Jan 2023 09:19:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207123

            Bug ID: 1207123
           Summary: VUL-0: CVE-2022-48257: EternalTerminal: Predictable logfile names in /tmp.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/353647/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jubalh-at-iodoru.org
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names
in /tmp.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48257
https://www.cve.org/CVERecord?id=CVE-2022-48257
https://github.com/MisterTea/EternalTerminal/issues/555
https://github.com/MisterTea/EternalTerminal/pull/556


--1673601671.4BEAe1.22328
Date: Fri, 13 Jan 2023 09:21:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207124

            Bug ID: 1207124
           Summary: VUL-0: CVE-2022-48258: In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/353646/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jubalh-at-iodoru.org
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48258
https://www.cve.org/CVERecord?id=CVE-2022-48258
https://github.com/MisterTea/EternalTerminal/issues/555
https://github.com/MisterTea/EternalTerminal/pull/556


--1673689554.25b10.14120
Date: Sat, 14 Jan 2023 09:45:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207144

            Bug ID: 1207144
           Summary: suse-prime cli commands no proper output and generaly meaningless output logic
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: All
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: joerg.buelow-at-schoerch.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

suse-prime cli commands no proper output and generaly meaningless output logic.

System Enviroment:
==================
- HP Latop Intentel core i7 with dedicate Nvidia card
- HP dock
- 2x FHD+ Monitor

openSUE lEap 15.4 latest patch
# zypper se -si prime
Loading repository data...
Reading installed packages...

S | Name                      | Type    | Version          | Arch   |
Repository
--+---------------------------+---------+------------------+--------+--------------
i | plasma5-applet-suse-prime | package | 1.1-bp154.3.27   | noarch |
leap_main_oss
i | suse-prime                | package | 0.8.6-150400.1.4 | noarch |
leap_main_oss

Problem descripton:
===================
After the last Nvidia driver update I wanted to check the status. This command
no longer outputs the status. Instead, the help comes.
When I dug deeper into the command options, I found that they are completely
without proper function.

Found behavior:
===============
1.) prime-select -> get help
2.) prime-select get-current -> only the help again
3.) prime-select get-last -> only the help again
4.) prime-select get+ [tab] -> no completions
5.) man prime-select -> nothing

Expected behavior:
==================
1.) prime-select -> short Info of prime-sect Version and current settings. No
full help.
2.) prime-select get-current -> only the current setup
3.) prime-select get-last -> only the latest setup
4.) prime-select get+ [tab] -> autocomplete the option paratmeters, because no
short key (aka -g -l -v -h....)
5.) man prime-select -> this should be present and contain the full help


--1673700233.ceFC4cd0.1291
Date: Sat, 14 Jan 2023 12:43:53 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207147

            Bug ID: 1207147
           Summary: After update tumbleweed at 20230112 chromium browser crashes with error: SIGILL
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: virex-at-mail.ru
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After update tumbleweed at 20230112 chromium browser crashes with error: SIGILL

Version of chromium browser is 109.0.5414.74-1.1-x86_64


body:
--1673721496.FbFe61cC0.14953
Date: Sat, 14 Jan 2023 18:38:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207150

            Bug ID: 1207150
           Summary: jhead autorot broken
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: tuxuser-at-quantentunnel.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 864125
  --> http://bugzilla.opensuse.org/attachment.cgi?id=864125&action=edit
example file for jhead autorot bug

OS: openSUSE Leap 15.4, all updates installed
Kernel: 5.14.21-150400.38-default

Problem: jhead -autorot breaks exif info
The bug occurs with the patched version 3.06.0.1-bp154.2.3.1 and the latest
version ...-bp154.261. There is no problem with the original version
...-bp154.1.20

Put the attached photo into a new directory and run
jhead -autorot *

This will rotate the photo as expected but will kill every exif info such as
camera, exposure gps,...
There is also an error message "Nonfatal Error : 'DSC08058.JPG' Command has
invalid characters."

summary: jhead autorot broken


--1673855429.7d70A5C64.23705
Date: Mon, 16 Jan 2023 07:50:29 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207167

            Bug ID: 1207167
           Summary: librsvg PDF related testsuite tests are failing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: gnome-bugs-at-suse.de
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Errors are like:

[  379s] --


body:
--1673864910.32a71.5478
Date: Mon, 16 Jan 2023 10:28:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207178

            Bug ID: 1207178
           Summary: php-ssh2: add into the PackageHub
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-15-SP4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: pgajdos-at-suse.com
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

I have a request to include php-ssh2 into 15sp4 Backports.

summary: php-ssh2: add into the PackageHub


--1673885997.B7c47aC0.19405
Date: Mon, 16 Jan 2023 16:19:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207196

            Bug ID: 1207196
           Summary: VUL-0: CVE-2022-45299: tree-sitter: webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/353723/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: Security Response Team
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1207179 +++

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows
attackers to access arbitrary files via supplying a crafted URL.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45299
https://www.cve.org/CVERecord?id=CVE-2022-45299
https://github.com/offalltn/CVE-2022-45299


--1674033010.641C1.11839
Date: Wed, 18 Jan 2023 09:10:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207242

            Bug ID: 1207242
           Summary: VUL-0: CVE-2021-32837: mechanize: Regular Expression Denial of Service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/354032/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#2161855

mechanize, a library for automatically interacting with HTTP web servers,
contains a regular expression that is vulnerable to regular expression denial
of service (ReDoS) prior to version 0.4.6. If a web server responds in a
malicious way, then mechanize could crash. Version 0.4.6 has a patch for the
issue.

https://securitylab.github.com/advisories/GHSL-2021-108-python-mechanize-mechanize/
https://github.com/python-mechanize/mechanize/commit/dd05334448e9f39814bab044d2eaa5ef69b410d6
https://github.com/python-mechanize/mechanize/blob/3acb1836f3fd8edc5a758a417dd46b53832ae3b5/mechanize/_urllib2_fork.py#L878-L879
https://github.com/python-mechanize/mechanize/releases/tag/v0.4.6

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2161855
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32837
https://github.com/python-mechanize/mechanize/releases/tag/v0.4.6
https://www.cve.org/CVERecord?id=CVE-2021-32837
https://github.com/python-mechanize/mechanize/commit/dd05334448e9f39814bab044d2eaa5ef69b410d6
https://github.com/python-mechanize/mechanize/blob/3acb1836f3fd8edc5a758a417dd46b53832ae3b5/mechanize/_urllib2_fork.py#L878-L879
https://securitylab.github.com/advisories/GHSL-2021-108-python-mechanize-mechanize/


body:
--1674060044.Ff0FDAb24.31999
Date: Wed, 18 Jan 2023 16:40:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207266

            Bug ID: 1207266
           Summary: mistake in specfile from mdadm ?
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: holgerbruenjes-at-gmx.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello

I am wondering if this a mistake im specfile mdadm from tumbleweed.

It defines

%define services mdmonitor.service mdcheck_start.service
mdcheck_continue.service mdmonitor-oneshot.service

but it shouldn't say?

%define services mdmonitor.service mdcheck_start.timer mdcheck_continue.timer
mdmonitor-oneshot.timer

the systemd unit files *.timer triggered the service unit and so musst start
the *.timer unit and not the *.service unit

Please correct me if I am wrong
Thanks

Holger

summary: mistake in specfile from mdadm ?


--1674304571.0b6Cc80.9627
Date: Sat, 21 Jan 2023 12:36:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207366

            Bug ID: 1207366
           Summary: [Build 20230120] openQA test fails in disk_boot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3057264/modules/disk
                    _boot/steps/9
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

The qcow2 file that is being booted here is generated using kiwi as part of a
snapshot build.

The somewhat most likely candidate to cause the failure would be the dracut
update

openQA test in scenario microos-Tumbleweed-MicroOS-Image-x86_64-microos@64bit
fails in
[disk_boot](https://openqa.opensuse.org/tests/3057264/modules/disk_boot/steps/9)

## Test suite description

## Reproducible

Fails since (at least) Build
[20230120](https://openqa.opensuse.org/tests/3057116)

## Expected result

Last good: [20230119](https://openqa.opensuse.org/tests/3054789) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image&machine=64bit&test=microos&version=Tumbleweed)


body:
--1674317086.55D1D50.29635
Date: Sat, 21 Jan 2023 16:04:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207369

            Bug ID: 1207369
           Summary: velociraptor embeds build date
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jeffm-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1047218
          Found By: Development
           Blocker: ---

Building the Factory/velociraptor rpm twice results in this diff in the
produced binary:

filterdiff strings RPMS*/usr/bin/velociraptor
-

summary: velociraptor embeds build date


--1674460698.43bbCd13.10490
Date: Mon, 23 Jan 2023 07:58:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207377

            Bug ID: 1207377
           Summary: VUL-0: CVE-2022-45748: assimp: UaF in ColladaParser:ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/354449/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: christophe-at-krop.fr
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in
function
ColladaParser::ExtractDataObjectFromChannel in file
/code/AssetLib/Collada/ColladaParser.cpp.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45748
https://github.com/assimp/assimp/issues/4286
https://www.cve.org/CVERecord?id=CVE-2022-45748


--1674460765.b2E61.8147
Date: Mon, 23 Jan 2023 07:59:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207378

            Bug ID: 1207378
           Summary: VUL-0: CVE-2022-48279: modsecurity: HTTP multipart requests incorrectly parsed and could bypass the Web Application Firewall
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
               URL: https://smash.suse.de/issue/354441/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mrostecki-at-suse.com
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-48279

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were
incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is
related to CVE-2022-39956 but can be considered independent changes to the
ModSecurity (C language) codebase.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48279
https://www.cve.org/CVERecord?id=CVE-2022-48279
https://github.com/SpiderLabs/ModSecurity/pull/2797
https://github.com/SpiderLabs/ModSecurity/pull/2795
https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8
https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6
https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/


--1674461636.e4d0FD281.9170
Date: Mon, 23 Jan 2023 08:13:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207381

            Bug ID: 1207381
           Summary: VUL-0: CVE-2022-47021: opusfile: Null pointer dereference issue allows attackers to cause denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
               URL: https://smash.suse.de/issue/354445/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: sreeves-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2022-47021

A null pointer dereference issue was discovered in functions op_get_data and
op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause
denial of service or other unspecified impacts.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47021
https://www.cve.org/CVERecord?id=CVE-2022-47021
https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5
https://github.com/xiph/opusfile/issues/36


--1674466354.7ED3E5f0.24925
Date: Mon, 23 Jan 2023 09:32:34 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207395

            Bug ID: 1207395
           Summary: leap 15.5: virtualbox kmp fails to build error: implicit declaration of function 'drm_framebuffer_unregister_private'
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: lubos.kocman-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 864314
  --> http://bugzilla.opensuse.org/attachment.cgi?id=864314&action=edit
failed build log

Hello

this currently breaks DVD builds of Leap 15.5

[  316s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/modules_build_dir/default/vboxvideo/vbox_fb.c:
In function 'vbox_fbdev_fini':
[  316s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/modules_build_dir/default/vboxvideo/vbox_fb.c:423:2:
error: implicit declaration of function 'drm_framebuffer_unregister_private';
did you mean 'drm_fb_helper_unregister_fbi'?
[-Werror=implicit-function-declaration]
[  316s]   drm_framebuffer_unregister_private(&afb->base);
[  316s]   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[  316s]   drm_fb_helper_unregister_fbi
[  316s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/modules_build_dir/default/vboxvideo/vbox_fb.c:425:2:
error: implicit declaration of function 'drm_framebuffer_cleanup'; did you mean
'drm_encoder_cleanup'? [-Werror=implicit-function-declaration]
[  316s]   drm_framebuffer_cleanup(&afb->base);
[  316s]   ^~~~~~~~~~~~~~~~~~~~~~~
[  316s]   drm_encoder_cleanup
[  316s] cc1: some warnings being treated as errors
[  316s] make[2]: ***
[/usr/src/linux-5.14.21-150500.37/scripts/Makefile.build:276:
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/modules_build_dir/default/vboxvideo/vbox_fb.o]
Error 1
[  316s] make[1]: *** [/usr/src/linux-5.14.21-150500.37/Makefile:1895:
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/modules_build_dir/default/vboxvideo]
Error 2
[  316s] make: *** [../../../linux-5.14.21-150500.37/Makefile:220: __sub-make]
Error 2
[  316s] error: Bad exit status from /var/tmp/rpm-tmp.psjQra (%build)
[  316s]


--1674463767.bD46CAFC4.14522
Date: Mon, 23 Jan 2023 08:49:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207388

            Bug ID: 1207388
           Summary: amdgpu driver and a not visible mouse cursor
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 3rd Party Driver
          Assignee: gfx-bugs-at-suse.de
          Reporter: bjawebos@adelberg-online.de
        QA Contact: sndirsch-at-suse.com
          Found By: ---
           Blocker: ---

GPU: AMD Radeon RX 7900 XT

I am trying to use the amdgpu (not amdgpu-pro) driver and have installed it on
my system running openSUSE Tumbleweed. The problem now is that the mouse cursor
is not displayed. The mouse works, I can drag frames and click icons. The only
thing is that the mouse pointer is not visible. I have the same problem with
Manjaro, so I think it’s not a Tumbleweed problem, but the driver from AMD.

```
bja@localhost:~> inxi -G
Graphics:
  Device-1: AMD Navi 31 [Radeon RX 7900 XT/7900 XTX] driver: amdgpu v: kernel
  Display: x11 server: X.Org v: 21.1.6 with: Xwayland v: 22.1.7 driver: X:
    loaded: amdgpu unloaded: fbdev,modesetting,vesa dri: radeonsi gpu: amdgpu
    resolution: 3840x2160~60Hz
  API: OpenGL v: 4.6 Mesa 22.3.3 renderer: AMD Radeon Graphics (gfx1100
    LLVM 15.0.6 DRM 3.49 6.1.7-1-default)
bja@localhost:~> lsmod | grep amdgpu
amdgpu              10661888  30
drm_ttm_helper         16384  1 amdgpu
ttm                    94208  2 amdgpu,drm_ttm_helper
iommu_v2               24576  1 amdgpu
gpu_sched              53248  1 amdgpu
drm_buddy              20480  1 amdgpu
drm_display_helper    221184  1 amdgpu
video                  69632  1 amdgpu
```

If I remove the package xf86-video-amdgpu the mouse cursor is visible and I get
the following output in the terminal:
```
bja@localhost:~> inxi -G
Graphics:
  Device-1: AMD Navi 31 [Radeon RX 7900 XT/7900 XTX] driver: amdgpu v: kernel
  Display: x11 server: X.Org v: 21.1.6 with: Xwayland v: 22.1.7 driver: X:
    loaded: modesetting unloaded: fbdev,vesa dri: radeonsi gpu: amdgpu
    resolution: 3840x2160~60Hz
  API: OpenGL v: 4.6 Mesa 22.3.3 renderer: AMD Radeon Graphics (gfx1100
    LLVM 15.0.6 DRM 3.49 6.1.7-1-default)
bja@localhost:~> lsmod | grep amdgpu
amdgpu              10661888  52
drm_ttm_helper         16384  1 amdgpu
ttm                    94208  2 amdgpu,drm_ttm_helper
iommu_v2               24576  1 amdgpu
gpu_sched              53248  1 amdgpu
drm_buddy              20480  1 amdgpu
drm_display_helper    221184  1 amdgpu
video                  69632  1 amdgpu
```

It looks like the amdgpu driver is then not used.

Forum discussion:
https://forums.opensuse.org/t/amdgpu-driver-and-a-not-visible-mouse-cursor/163656/8


body:
--1674562574.c7cBC78.16510
Date: Tue, 24 Jan 2023 12:16:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207468

            Bug ID: 1207468
           Summary: GCC 13: virtualbox package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/virtualbox/standard/x86_64

due to:
[  242s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/src/libs/dxvk-native-1.9.2a/src/util/util_bit.h:36:22:
error: 'uint32_t' has not been declared
[  242s]    36 |   T extract(T value, uint32_t fst, uint32_t lst) {
[  242s]       |                      ^~~~~~~~
[  242s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/src/libs/dxvk-native-1.9.2a/src/util/util_bit.h:36:36:
error: 'uint32_t' has not been declared
[  242s]    36 |   T extract(T value, uint32_t fst, uint32_t lst) {
[  242s]       |                                    ^~~~~~~~
[  242s]
/home/abuild/rpmbuild/BUILD/VirtualBox-7.0.4/src/libs/dxvk-native-1.9.2a/src/util/util_bit.h:40:10:
error: 'uint32_t' does not name a type
[  242s]    40 |   inline uint32_t popcntStep(uint32_t n, uint32_t mask,
uint32_t shift) {

please include the missing header file:
https://gcc.gnu.org/gcc-13/porting_to.html#header-dep-changes

summary: GCC 13: virtualbox package fails


--1674562626.2178B0.13951
Date: Tue, 24 Jan 2023 12:17:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207469

            Bug ID: 1207469
           Summary: GCC 13: libqt5-qtwebengine package fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails here:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:Gcc7/libqt5-qtwebengine/standard/x86_64

due to:
[   94s]
../../3rdparty/chromium/ppapi/utility/completion_callback_factory_thread_traits.h:70:20:
error: declaration of 'typedef class pp::Lock pp::ThreadSafeThreadTraits::Lock'
changes meaning of 'Lock' [-fpermissive]
[   94s]    70 |   typedef pp::Lock Lock;
[   94s]       |                    ^~~~


body:
--1674572991.4ADEF0.5889
Date: Tue, 24 Jan 2023 15:09:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207487

            Bug ID: 1207487
           Summary: ipcrm on in %post
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: jengelh-at-inai.de
          Reporter: jsegitz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

171 %post
172 # clear translation caches
173 ipcrm -M 0x950412de 2>/dev/null || :

I stumbled over this doing a security review for %post sections. It
comes from upstream and strikes me as really strange and probably a
leftover, because I can't find anything in the Makefile even though
it should be according to the README. Do you know if this can be dropped?

summary: ipcrm on in %post


--1674635341.fBE60a1.11044
Date: Wed, 25 Jan 2023 08:29:01 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207512

            Bug ID: 1207512
           Summary: VUL-0: chromium: multiple security issues fixed in 109.0.5414.119
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gabriele.sonnu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

Fixed in Chromium 109.0.5414.119

* CVE-2023-0471: Use after free in WebTransport
* CVE-2023-0472: Use after free in WebRTC
* CVE-2023-0473: Type Confusion in ServiceWorker API
* CVE-2023-0474: Use after free in GuestView
* Various fixes from internal audits, fuzzing and other initiatives


--1674721666.FfCB5AC0.27970
Date: Thu, 26 Jan 2023 08:27:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207563

            Bug ID: 1207563
           Summary: [openblas, lapack] Files for 'update alternatives' conflict with their 32-bit Counterparts
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: hector.oron-at-suse.com
          Found By: ---
           Blocker: ---

lapack and openblas create links in /etc/alternatives to facilitate the
installation of both lapack/blas flavors. Since these name of these links
correspond to the file names of the link targets, they will conflict between
64-bit versions and 32-bit counterparts. The real libs of course live in
separate trees and therefore don't conflict.


--1674740912.0D8f0.10450
Date: Thu, 26 Jan 2023 13:48:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207577

            Bug ID: 1207577
           Summary: ntp: Please set /var/lib/ntp/var/run/ntp to 775
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: max-at-suse.com
          Reporter: jsegitz-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently is has
drwxr-xr-x. 2 ntp  root system_u:object_r:var_lib_t:s0 4096 Jan 25 15:26 ntp
Because of this the SELinux profile for ntp requires dac_overwrite. When this
directory is set to 775 root can write there without dac_overwrite


--1674746705.EeE5A1.7427
Date: Thu, 26 Jan 2023 15:25:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207586

            Bug ID: 1207586
           Summary: AUDIT-WHITELIST: sssd: move dbus system.d file to /usr
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: gmbr3-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Move from /etc to /usr
Name: org.freedesktop.sssd.infopipe.conf


--1674759796.ba60f5aa13.9325
Date: Thu, 26 Jan 2023 19:03:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207654

            Bug ID: 1207654
           Summary: AUDIT-FIND: kismet: systemd service unnecessarily runs as root
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mardnh-at-gmx.de, meissner-at-suse.com,
                    wolfgang.frisch-at-suse.com
        Depends on: 1200954
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1200954 +++

kismet's systemd service unnecessarily runs as root. Upstream actually warns
about it [1], since only the individual capture binaries require special
privileges, but not the main kismet daemon. However we shouldn't adopt their
recommendations verbatim, that is to install the capture binaries as
setuid-root. Instead of setuid-root, we can use more fine-grained Linux
capabilities [2].

Note there's already a submit request underway [3] with a number of systemd
hardenings. We can keep those, and additionally drop privileges.

[1]
https://github.com/kismetwireless/kismet/blob/master/packaging/systemd/README
[2] capabilities(7) setcap(8)
[3] https://build.opensuse.org/request/show/1046457


--1674831303.4cAAE0.31215
Date: Fri, 27 Jan 2023 14:55:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207698

            Bug ID: 1207698
           Summary: apparmor prevents nscd to be used with systemd-userdb
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: suse-beta-at-cboltz.de
          Reporter: fcrozat-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

If systemd-userdb is used to configure some users (config files are stored in
either /etc/userdb/, /run/userdb/, /run/host/userdb/ and /usr/lib/userdb/ ),
apparmor blocks the access to those files for nscd which reports those users
are unavailable.

type=AVC msg=audit(1674829305.461:248): apparmor="DENIED" operation="open"
profile="nscd" name="/etc/userdb/gdm.user" pid=764 comm="nscd"
requested_mask="r" denied_mask="r" fsuid=477 ouid=0

type=AVC msg=audit(1674829500.449:278): apparmor="DENIED" operation="open"
profile="nscd" name="/etc/userdb/" pid=764 comm="nscd" requested_mask="r"
denied_mask="r" fsuid=477 ouid=0

those directories should be whitelisted


--1674833084.c3FD0.1506
Date: Fri, 27 Jan 2023 15:24:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207703

            Bug ID: 1207703
           Summary: dracut fails to create initrd, and leaves faulty symlink
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: albert.koelmans-at-blueyonder.co.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The following is the relevant dracut output:

dracut-install: Failed to find module 'ide_pci_generic'
dracut: FAILED: /usr/lib/dracut/dracut-install -D
/var/tmp/dracut.RhiUGT/initramfs -N ^i2o_scsi$ --kerneldir
/lib/modules/6.1.8-1-default/ -m pata_jmicron ata_piix ata_generic
ide_pci_generic fan
dracut: installkernel failed in module suse-initrd
warning: %post(kernel-default-6.1.8-1.1.x86_64) scriptlet failed, exit status 1

I've seen reports on the missing ide_pci_generic for many years, but that never
seems to have been a problem. The modules pata_jmicron and ata_generic are also
not present on my system.

After this error message, /boot/initrd exists, and point to
/boot/initrd-6.1.8-1.1.x86_64rd which does not exist, so the system is
unbootable.


--1674896049.AC8761.14134
Date: Sat, 28 Jan 2023 08:54:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207721

            Bug ID: 1207721
           Summary: The file x11protocol.xml cannot be rendered
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: giecrilj@stegny.2a.pl
        QA Contact: gfx-bugs-at-suse.de
          Found By: ---
           Blocker: ---

error on line 20 at column 52: Entity 'fullrelvers' not defined


--1675039763.F60750250.9531
Date: Mon, 30 Jan 2023 00:49:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207736

            Bug ID: 1207736
           Summary: Virtualbox  udev-related files are misplaced
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.4
          Hardware: x86-64
                OS: openSUSE Leap 15.4
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: zhuravlov.ip-at-ya.ru
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

How to reproduce:
1. Run Virtualbox from KDE as usually.
2. A warning is appeared about USB passthrough, and two alternatives are
proposed: (1) enable it, (2) disable it.
3. Select to disable it.
4. A dialog with root password request is appeared to run
/sbin/vbox-fix-usb-rules.sh .
5. After entering a password and pressing Enter, an error message is appeared:
"No file /sbin/vbox-fix-usb-rules.sh found.".

So I can't disable USB passthrough.

In fact, the file vbox-fix-usb-rules.sh is located at
/usr/sbin/vbox-fix-usb-rules.sh :

# rpm -ql virtualbox | grep 'vbox-fix-usb-rules.sh'
/usr/sbin/vbox-fix-usb-rules.sh
# ll /usr/sbin/vbox-fix-usb-rules.sh
-rwxr-xr-x 1 root root 327 Jan 26 19:57 /usr/sbin/vbox-fix-usb-rules.sh

Its content refers to /etc/udev/rules.d/60-vboxdrv.rules file which is missing.
That file has another location:

# rpm -ql virtualbox-qt | grep '60-vboxdrv.rules'
/usr/lib/udev/rules.d/60-vboxdrv.rules
# ll /usr/lib/udev/rules.d/60-vboxdrv.rules
-rw-r--r


--1675152616.b4144.31266
Date: Tue, 31 Jan 2023 08:10:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

https://bugzilla.suse.com/show_bug.cgi?id=1207784

            Bug ID: 1207784
           Summary: [spack, podman] Spack generated Dockerfile fails due to not sourcing setup-env.sh
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: eich-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: hpc-bugs-at-suse.de
          Found By: Development
           Blocker: ---

Created attachment 864634
  --> https://bugzilla.suse.com/attachment.cgi?id=864634&action=edit
Fix

Building a container from a Spack-generated Dockerfile fails with the error
message:
[1/2] STEP 3/5: RUN cd /opt/spack-environment && spack env activate . && spack
install --fail-fast && spack gc -y
/bin/sh: spack: command not found
Error: building at STEP "RUN cd /opt/spack-environment && spack env activate .
&& spack install --fail-fast && spack gc -y": while running runtime: exit
status 127

Reason:
The 'RUN' command does not source /opt/spack/share/spack/setup-env.sh before
calling spack which conveniently sets up PATH (among other things) to include
the spack binary.
Even with spack in the search path, `spack env activate .` would fail without
the environment set up.

There are two locations in the Dockerfile-template where this needs to be
added.

The singularityfile template does this correctly already.


--1675170793.7DAa4EB30.25095
Date: Tue, 31 Jan 2023 13:13:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207791

            Bug ID: 1207791
           Summary: [cycle] build cycle detected in openSUSE:Factory related to python-* packages
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

There are currently two python related build cycles in openSUSE:Factory:

1)    python-cmapfile, python-czifile, python-lfdfiles, python-oiffile,
python-roifile, python-tifffile

2)    python-folium, python-geopandas


--1675328927.0D601.30406
Date: Thu, 2 Feb 2023 09:08:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207853

            Bug ID: 1207853
           Summary: D-Installer cannot build in s390x because of missing fbcon module
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Live Medium
          Assignee: dimstar-at-opensuse.org
          Reporter: kanderssen-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'm trying to build a d-installer image for s390x but dracut-install fails
because missing fbcon.
(https://build.opensuse.org/package/show/YaST:Head:D-Installer/d-installer-live)

It could be related to (https://github.com/openSUSE/suse-module-tools/pull/7)


--1675433804.1Fde70.6549
Date: Fri, 3 Feb 2023 14:16:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207889

            Bug ID: 1207889
           Summary: QEMU Driver Error : failed to umount devfs on /dev: Device or resource busy
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: fritz.schadt-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

libvirt.libvirtError: Interner Fehler: Process exited prior to exec: libvirt:
QEMU Driver Fehler : failed to umount devfs on /dev: Device or resource busy

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 72, in
cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 108, in tmpcb
    callback(*args, **kwargs)
  File "/usr/share/virt-manager/virtManager/object/libvirtobject.py", line 57,
in newfn
    ret = fn(self, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/object/domain.py", line 1425, in
startup
    self._backend.create()
  File "/usr/lib64/python3.10/site-packages/libvirt.py", line 1373, in create
    raise libvirtError('virDomainCreate() failed')
libvirt.libvirtError: Interner Fehler: Process exited prior to exec: libvirt:
QEMU Driver Fehler : failed to umount devfs on /dev: Device or resource busy


--1675458130.6f350.4215
Date: Fri, 3 Feb 2023 21:02:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207892

            Bug ID: 1207892
           Summary: [Build 20230202] dracut: dips integrity check failed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3091784/modules/fips
                    _setup/steps/22
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Bootloader
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
opensuse-Tumbleweed-JeOS-for-kvm-and-xen-x86_64-jeos-fips@64bit_virtio fails in
[fips_setup](https://openqa.opensuse.org/tests/3091784/modules/fips_setup/steps/22)

## Test suite description

## Reproducible

Fails since (at least) Build
[20221127](https://openqa.opensuse.org/tests/2910314)

## Expected result

Last good: [20221126](https://openqa.opensuse.org/tests/2908533) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=JeOS-for-kvm-and-xen&machine=64bit_virtio&test=jeos-fips&version=Tumbleweed)


--1675606320.3C7AEcE0.5175
Date: Sun, 5 Feb 2023 14:12:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207911

            Bug ID: 1207911
           Summary: After upgrade to snapshot 20230202 dovecot gives error message
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: freek-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After upgrade to snapshot 20230202 dovecot gives error message when local user
is trying to connect from KMail.
The error messages are:
2023-02-05T14:56:56.232683+01:00 eiktum dovecot: imap-login: Error: Failed to
initialize SSL server context: Can't load SSL certificate (ssl_cert setting):
error:0200100D:system library:fopen:Permission denied:
fopen('/etc/ssl/openssl-1_1.cnf','rb'), error:2006D002:BIO
routines:BIO_new_file:system lib, error:0E078002:configuration file
routines:def_load:system lib: user=<>, rip=127.0.0.1, lip=127.0.0.1, secured,
session=<Y0aeSfTzgod/AAAB>
2023-02-05T14:56:56.232822+01:00 eiktum dovecot: imap-login: Disconnected: TLS
initialization failed. (no auth attempts in 0 secs): user=<>, rip=127.0.0.1,
lip=127.0.0.1, secured, session=<Y0aeSfTzgod/AAAB>

# ls -l /etc/ssl/openssl-1_1.cnf
-rw-r--r


--1675696397.cEAC50.25615
Date: Mon, 6 Feb 2023 15:13:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1207948

            Bug ID: 1207948
           Summary: Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: mjambor-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 864736
  --> http://bugzilla.opensuse.org/attachment.cgi?id=864736&action=edit
hwinfo output

With the current openSUSE Tumbleweed
(kernel-default-6.1.8-1.1.x86_64), attempts to resume from hibernation
(from "suspend to disk") ends in kernel panic.

After I type in my disk encryption password (I have kernel and initrd
on an unencrypted partition), initrd takes over but a short while
afterwards system hangs, does nothing for about 30 seconds and then
CapsLock starts blinking).  Usually the screen stays black but two or
three times I have seen the contents of the screen restored and only
then the laptop froze.

All my attempts to get at some backtraces or error messages were not
successful (I tried no_console_suspend=1 but that only meant I saw the
cursor blinking before the machine froze but no messages appeared and
my attempts to somehow use EFI pstore also led to nothing).

Resume from suspend to RAM works fine.

I am attaching output from hwinfo.