--1565096490.ceE35.12956
Date: Tue, 6 Aug 2019 13:01:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1144506

            Bug ID: 1144506
           Summary: sphinx-build requires python-attrs to run but does not require it
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dcermak-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The sphinxcontrib-autopgrogram and sphinxcontrib-asyncio packages started to
fail to build on OBS with the following error:

[   43s] + sphinx-build -b html -d doc/_build/doctrees doc doc/_build/html
[   43s] Traceback (most recent call last):
[   43s]   File "/usr/bin/sphinx-build", line 6, in <module>
[   43s]     from pkg_resources import load_entry_point
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 3241, in <module>
[   43s]     @_call_aside
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 3225, in _call_aside
[   43s]     f(*args, **kwargs)
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 3254, in _initialize_master_working_set
[   43s]     working_set = WorkingSet._build_master()
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 583, in _build_master
[   43s]     ws.require(__requires__)
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 900, in require
[   43s]     needed = self.resolve(parse_requirements(requirements))
[   43s]   File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py",
line 786, in resolve
[   43s]     raise DistributionNotFound(req, requirers)
[   43s] pkg_resources.DistributionNotFound: The 'attrs' distribution was not
found and is required by packaging
[   43s] error: Bad exit status from /var/tmp/rpm-tmp.tYlY4G (%build)

Both invoke sphinx-build during %build. For some reason sphinx-build appears to
require python-attrs now, but this is not reflected in the rpm. Thus OBS does
not know about this dependency and leaves out python-attrs out of the buildroot
(thereby causing the above error).

Affected packages:
-
https://build.opensuse.org/package/show/devel:languages:python/python-sphinxcontrib-autoprogram
-
https://build.opensuse.org/package/show/devel:languages:python/python-sphinxcontrib-asyncio


body:
--1565100632.3eDb10.8117
Date: Tue, 6 Aug 2019 14:10:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1144522

            Bug ID: 1144522
           Summary: make LibreLogo a separate package
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: novell-at-howorth.org.uk
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Since the brouhaha about LibreLogo providing a way to hijack a system, I've
beome aware that this software is loaded on my system whether I want it or not.

So please make LibreLogo a separate package that I can choose whether to
install or not.

summary: make LibreLogo a separate package


--1565109605.38dA0.2595
Date: Tue, 6 Aug 2019 16:40:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1144547

            Bug ID: 1144547
           Summary: VUL-1: putty: buffer overflow in SSH-1 if server sends two tiny RSA keys
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-ssh1-short-rsa-keys.html

summary: Vulnerability: buffer overflow in SSH-1 if server sends two tiny RSA
keys
fixed-in: (0.72)
https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=c191ff129cd3415af08143fb40c461de5730655d

All versions of the PuTTY suite prior to 0.72 have a memory corruption bug in
SSH-1 key exchange, which might lead to a security vulnerability.

During SSH-1 key exchange, the server sends a packet containing an RSA host key
and an RSA server key. PuTTY will allocate a buffer the size of the larger key,
and then write a random 32-byte session id into it, before encrypting the
session id with both keys in sequence.

The bug is triggered if a malicious server sends RSA host and server keys which
are both shorter than 32 bytes, in which case the allocated buffer will also be
less than 32 bytes, and the initial writing of the session id will overrun the
buffer.

We have no evidence that this can be exploited to cause remote code execution.
The data written into the too-small buffer is made up by PuTTY, not by the
server. But, on the other hand, we don't know that it can't allow code
execution.

The bug occurs before host key verification. (PuTTY verifies the host key
before performing encryption with it, but unfortunately, not before the initial
write into the buffer it's going to encrypt in.) So a network attacker
intercepting your connection could attack PuTTY through this vulnerability
before being detected as not the real server.

This bug only affects the obsolete SSH-1 protocol, which is rarely used. In
PuTTY 0.68 and later, we no longer support automatic fallback to SSH-1 from
SSH-2, so any saved session configured to the default of SSH-2 will not be
vulnerable to this issue.

This vulnerability was found as part of a bug bounty programme run under the
auspices of the EU-FOSSA project.


--1565109808.55fD0.6802
Date: Tue, 6 Aug 2019 16:43:27 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1144548

            Bug ID: 1144548
           Summary: VUL-1: putty: integer underflow parsing SSH-1 packet length
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-ssh1-buffer-length-underflow.html

summary: Vulnerability: integer underflow parsing SSH-1 packet length
fixed-in: 0.72
https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=031537092643956d4e1dd7b061fe920086fff7b7

All versions of the PuTTY suite prior to 0.72 have an integer underflow bug in
the SSH-1 binary packet protocol, which might lead to a security vulnerability.

The packet length field in an SSH-1 packet takes a value which is 5 more than
the number of actual data bytes in the packet. If the server sent a value less
than 5, PuTTY's SSH-1 BPP code did not check it.

The resulting behaviour can vary between 32- and 64-bit builds of PuTTY, and
possibly also between Linux and Windows. Possibilities include trying to
allocate 232 bytes of memory and terminating the program when that fails;
trying to allocate 232 bytes of memory and consuming excessive OS resources
when that succeeds; passing a negative packet length to the rest of the code,
with further unpredictable results.

The bug can occur before host key verification, because the length field is the
same in all packets, encrypted or not. So in any situation where a bad effect
can be caused by this bug, a network attacker intercepting your connection
could cause the bad effect before being detected as not the real server.

This bug only affects the obsolete SSH-1 protocol, which is rarely used. In
PuTTY 0.68 and later, we no longer support automatic fallback to SSH-1 from
SSH-2, so any saved session configured to the default of SSH-2 will not be
vulnerable to this issue.

This vulnerability was found as part of a bug bounty programme run under the
auspices of the EU-FOSSA project.


body:
--1565111079.cEaBDEc2.16563
Date: Tue, 6 Aug 2019 17:04:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1144550

            Bug ID: 1144550
           Summary: yast2-registration build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: lslezak-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

The unit tests fail with error:

[   85s]   1) Registration::UI::MigrationReposWorkflow#run_sequence if package
management initialization succeeds reports error and aborts when no installed
product is found
[   85s]      Failure/Error:
[   85s]        expect(Registration::SwMgmt).to receive(:installed_products)
[   85s]          .and_return([])
[   85s]
[   85s]        (Registration::SwMgmt (class)).installed_products(*(any args))
[   85s]            expected: 1 time with any arguments
[   85s]            received: 11 times with any arguments
[   85s]      # ./test/migration_repos_workflow_spec.rb:193:in `block (4
levels) in <top (required)>'
[   85s]
[   85s]   2) Registration::UI::MigrationReposWorkflow#run_sequence if package
management initialization succeeds reports error and aborts when no migration
is available
[   85s]      Failure/Error:
[   85s]        expect(Registration::SwMgmt).to receive(:installed_products)
[   85s]
.and_return([load_yaml_fixture("products_legacy_installation.yml")[1]])
[   85s]
[   85s]        (Registration::SwMgmt (class)).installed_products(*(any args))
[   85s]            expected: 1 time with any arguments
[   85s]            received: 21 times with any arguments
[   85s]      # ./test/migration_repos_workflow_spec.rb:202:in `block (4
levels) in <top (required)>'

summary: yast2-registration build fails


--1565167375.D46bcFe4.27059
Date: Wed, 7 Aug 2019 08:42:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1144625

            Bug ID: 1144625
           Summary: chromium: Can't open some HTTPS sites (NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

After update of my Tumbleweed I can't load pages like google.com or airbnb.com:

Your connection is not private
Attackers might be trying to steal your information from gmail.com (for
example, passwords, messages, or credit cards). Learn more
NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED
Subject: gmail.com

Issuer: Google Internet Authority G3

Expires on: Oct 21, 2019

Current date: Aug 7, 2019

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEXDCCA0SgAwIBAgINAeOpMBz8cgY4P5pTHTANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xNzA2MTUwMDAwNDJaFw0yMTEy
MTUwMDAwNDJaMFQxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVHb29nbGUgVHJ1c3Qg
U2VydmljZXMxJTAjBgNVBAMTHEdvb2dsZSBJbnRlcm5ldCBBdXRob3JpdHkgRzMw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUkvqHv/OJGuo2nIYaNVW
XQ5IWi01CXZaz6TIHLGp/lOJ+600/4hbn7vn6AAB3DVzdQOts7G5pH0rJnnOFUAK
71G4nzKMfHCGUksW/mona+Y2emJQ2N+aicwJKetPKRSIgAuPOB6Aahh8Hb2XO3h9
RUk2T0HNouB2VzxoMXlkyW7XUR5mw6JkLHnA52XDVoRTWkNty5oCINLvGmnRsJ1z
ouAqYGVQMc/7sy+/EYhALrVJEA8KbtyX+r8snwU5C1hUrwaW6MWOARa8qBpNQcWT
kaIeoYvy/sGIJEmjR0vFEwHdp1cSaWIr6/4g72n7OqXwfinu7ZYW97EfoOSQJeAz
AgMBAAGjggEzMIIBLzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHfCuFCa
Z3Z2sS3ChtCDoH6mfrpLMB8GA1UdIwQYMBaAFJviB1dnHB7AagbeWbSaLd/cGYYu
MDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AucGtpLmdv
b2cvZ3NyMjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnBraS5nb29nL2dz
cjIvZ3NyMi5jcmwwPwYDVR0gBDgwNjA0BgZngQwBAgIwKjAoBggrBgEFBQcCARYc
aHR0cHM6Ly9wa2kuZ29vZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEA
HLeJluRT7bvs26gyAZ8so81trUISd7O45skDUmAge1cnxhG1P2cNmSxbWsoiCt2e
ux9LSD+PAj2LIYRFHW31/6xoic1k4tbWXkDCjir37xTTNqRAMPUyFRWSdvt+nlPq
wnb8Oa2I/maSJukcxDjNSfpDh/Bd1lZNgdd/8cLdsE3+wypufJ9uXO1iQpnh9zbu
FIwsIONGl1p3A8CgxkqI/UAih3JaGOqcpcdaCIzkBaR9uYQ1X4k2Vg5APRLouzVy
7a8IVk6wuy6pm+T7HT4LY8ibS5FEZlfAFLSW8NwsVz9SBK2Vqn1N0PIMn5xA6NZV
c7o835DLAFshEWfC7TIe3g==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Certificate Transparency:

SCT Google 'Skydiver' log (TLS extension, Verified)

SCT Sectigo 'Sabre' CT log (TLS extension, Verified)

Warnings may be common while websites update their security. This should
improve soon.

sudo zypper info chromium
Loading repository data...
Reading installed packages...

Information for package chromium:
---------------------------------
Repository     : Main Repository (OSS)
Name           : chromium
Version        : 76.0.3809.87-1.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 262.8 MiB
Installed      : Yes
Status         : up-to-date
Source package : chromium-76.0.3809.87-1.1.src
Summary        : Google's open source browser project


--1565347503.BDCB0Cdd3.26186
Date: Fri, 9 Aug 2019 10:45:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1145051

            Bug ID: 1145051
           Summary: 5.3.0-rc3: kcompactd / i915 / KVM deadlock
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 813493
  --> http://bugzilla.suse.com/attachment.cgi?id=813493&action=edit
journalctl -b output with 2 sysrq-w invocations

This happened to me just now, running kernel 5.3.0-rc3-1.g571863b-default,
after starting a KVM virtual machine. The X screen was frozen and didn't react
on on any mouse movements and or keystrokes. Remote login via ssh was still
possible.

sysrq-w (called via /proc/sysrq-trigger) shows two blocked processes
(kcompactd0 and KVM). After a minute, the same two processes were still
blocked. KVM seems to try to acquire a lock that kcompactd is holding.
kcompactd is waiting for IO to complete on pages owned by the i915 driver.

kcompactd stack:

Aug 09 12:12:48 apollon.suse.de kernel: sysrq: Show Blocked State
Aug 09 12:12:48 apollon.suse.de kernel:   task                        PC stack
 pid father
Aug 09 12:12:48 apollon.suse.de kernel: kcompactd0      D    0    43      2
0x80004000
Aug 09 12:12:48 apollon.suse.de kernel: Call Trace:
Aug 09 12:12:48 apollon.suse.de kernel:  ? __schedule+0x2af/0x6a0
Aug 09 12:12:48 apollon.suse.de kernel:  schedule+0x33/0x90
Aug 09 12:12:48 apollon.suse.de kernel:  io_schedule+0x12/0x40
Aug 09 12:12:48 apollon.suse.de kernel:  __lock_page+0x123/0x200
Aug 09 12:12:48 apollon.suse.de kernel:  ? gen8_ppgtt_clear_pdp+0xc0/0x140
[i915]
Aug 09 12:12:48 apollon.suse.de kernel:  ? file_fdatawait_range+0x20/0x20
Aug 09 12:12:48 apollon.suse.de kernel:  set_page_dirty_lock+0x49/0x50
Aug 09 12:12:48 apollon.suse.de kernel:  i915_gem_userptr_put_pages+0x13f/0x1c0
[i915]
Aug 09 12:12:48 apollon.suse.de kernel:  __i915_gem_object_put_pages+0x5e/0xa0
[i915]
Aug 09 12:12:48 apollon.suse.de kernel:
userptr_mn_invalidate_range_start+0x1ff/0x220 [i915]
Aug 09 12:12:48 apollon.suse.de kernel:
__mmu_notifier_invalidate_range_start+0x57/0xa0
Aug 09 12:12:48 apollon.suse.de kernel:  try_to_unmap_one+0xa0b/0xae0
Aug 09 12:12:48 apollon.suse.de kernel:  ? __mod_lruvec_state+0x3f/0xf0
Aug 09 12:12:48 apollon.suse.de kernel:  rmap_walk_file+0xf2/0x250
Aug 09 12:12:48 apollon.suse.de kernel:  try_to_unmap+0xa6/0xe0
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_remove_rmap+0x290/0x290
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_not_mapped+0x20/0x20
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_get_anon_vma+0x80/0x80
Aug 09 12:12:48 apollon.suse.de kernel:  migrate_pages+0x8cd/0xbc0
Aug 09 12:12:48 apollon.suse.de kernel:  ? fast_isolate_freepages+0x6b0/0x6b0
Aug 09 12:12:48 apollon.suse.de kernel:  ? move_freelist_tail+0xb0/0xb0
Aug 09 12:12:48 apollon.suse.de kernel:  compact_zone+0x669/0xc80
Aug 09 12:12:48 apollon.suse.de kernel:  ?
entry_SYSCALL_64_after_hwframe+0xb8/0xbe
Aug 09 12:12:48 apollon.suse.de kernel:  kcompactd_do_work+0x120/0x290

KVM stack:

Aug 09 12:12:48 apollon.suse.de kernel: CPU 0/KVM       D    0 25189      1
0x00000320
Aug 09 12:12:48 apollon.suse.de kernel: Call Trace:
Aug 09 12:12:48 apollon.suse.de kernel:  ? __schedule+0x2af/0x6a0
Aug 09 12:12:48 apollon.suse.de kernel:  schedule+0x33/0x90
Aug 09 12:12:48 apollon.suse.de kernel:  schedule_preempt_disabled+0xa/0x10
Aug 09 12:12:48 apollon.suse.de kernel:  __mutex_lock.isra.0+0x172/0x4d0
Aug 09 12:12:48 apollon.suse.de kernel:
userptr_mn_invalidate_range_start+0x1bf/0x220 [i915]
Aug 09 12:12:48 apollon.suse.de kernel:
__mmu_notifier_invalidate_range_start+0x57/0xa0
Aug 09 12:12:48 apollon.suse.de kernel:  try_to_unmap_one+0xa0b/0xae0
Aug 09 12:12:48 apollon.suse.de kernel:  rmap_walk_file+0xf2/0x250
Aug 09 12:12:48 apollon.suse.de kernel:  try_to_unmap+0xa6/0xe0
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_remove_rmap+0x290/0x290
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_not_mapped+0x20/0x20
Aug 09 12:12:48 apollon.suse.de kernel:  ? page_get_anon_vma+0x80/0x80
Aug 09 12:12:48 apollon.suse.de kernel:  migrate_pages+0x8cd/0xbc0
Aug 09 12:12:48 apollon.suse.de kernel:  ? fast_isolate_freepages+0x6b0/0x6b0
Aug 09 12:12:48 apollon.suse.de kernel:  ? move_freelist_tail+0xb0/0xb0
Aug 09 12:12:48 apollon.suse.de kernel:  compact_zone+0x669/0xc80
Aug 09 12:12:48 apollon.suse.de kernel:  compact_zone_order+0xc6/0xf0
Aug 09 12:12:48 apollon.suse.de kernel:  try_to_compact_pages+0xcc/0x2a0
Aug 09 12:12:48 apollon.suse.de kernel:
__alloc_pages_direct_compact+0x7c/0x150
Aug 09 12:12:48 apollon.suse.de kernel:  __alloc_pages_slowpath+0x1ee/0xd00
Aug 09 12:12:48 apollon.suse.de kernel:  ? vmx_vcpu_load+0x100/0x120
[kvm_intel]

Does this make sense to anyone? Should this be reported upstream, and if yes,
where? Is this more likely an i915 problem, or a generic mm problem, or
something totally different?


--1565358135.8728d1dC0.3936
Date: Fri, 9 Aug 2019 13:42:15 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145091

            Bug ID: 1145091
           Summary: VUL-1: CVE-2019-10209: postgresql11: Memory disclosure in cross-type comparison for hashed subplan
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/239278/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: max-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-10209

In a database containing hypothetical, user-defined hash equality operators,
an attacker could read arbitrary bytes of server memory.  For an attack to
become possible, a superuser would need to create unusual operators.  It is
possible for operators not purpose-crafted for attack to have the properties
that enable an attack, but we are not aware of specific examples.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1734447
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10209
http://www.debian.org/security/2019/dsa-4493
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-10209.html


--1565468878.ADE6DDAf0.3387
Date: Sat, 10 Aug 2019 20:27:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1145182

            Bug ID: 1145182
           Summary: kcm_sddm: polkit-untracked-privilege org.kde.kcontrol.kcmsddm.reset and .sync
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: fabian@ritter-vogt.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

kcm_sddm got some more features which needed some additional methods in its
kauth helper.

https://build.opensuse.org/package/live_build_log/KDE:Unstable:Frameworks/kcm_sddm/openSUSE_Factory/x86_64

[  138s] kcm_sddm.x86_64: I: polkit-cant-acquire-privilege
org.kde.kcontrol.kcmsddm.reset (??:no:auth_admin_keep)
[  138s] kcm_sddm.x86_64: I: polkit-cant-acquire-privilege
org.kde.kcontrol.kcmsddm.sync (??:no:auth_admin_keep)

[  138s] kcm_sddm.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.kde.kcontrol.kcmsddm.reset (??:no:auth_admin_keep)
[  138s] kcm_sddm.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.kde.kcontrol.kcmsddm.sync (??:no:auth_admin_keep)

I submitted a patch upstream to make that auth_admin already:
https://phabricator.kde.org/D23078

Code: https://cgit.kde.org/sddm-kcm.git/tree/sddmauthhelper.cpp


--1565510750.Eaf02B1.17727
Date: Sun, 11 Aug 2019 08:05:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145188

            Bug ID: 1145188
           Summary: Corruption in browsers with amdgpu and Mesa 18.3.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: aloisio-at-gmx.com
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Created attachment 813623
  --> http://bugzilla.opensuse.org/attachment.cgi?id=813623&action=edit
chromium screen corruption

I've recently switched to amdgpu with a Polaris card and when using Chromium
some video players (e.g. on abcnews.com) show corrupt images as per attachment.

The problem disappears either if I disable hardware acceleration or install
Mesa 19.1.3 from X11:XOrg and built against openSUSE:Leap:15.1.

There are also occasional smaller rainbow-like corruptions on Firefox that seem
to likewise disappear with the newer Mesa, so I'm filing this bug for X.Org.


--1565538211.cDAF15F10.9138
Date: Sun, 11 Aug 2019 15:43:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145195

            Bug ID: 1145195
           Summary: imap: Outdated instructions to install certificate
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: iforster-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When installing the package "imap" the instructions in
/usr/share/doc/packages/imap/README.SUSE explain how to install the
certificates for connecting via TSL/SSL. However when following the
instructions and generating / copying the certificate into /etc/ssl/certs this
won't be persistent: each `update-ca-certificates` run (e.g. triggered by
package update) will delete the certificate again.

The README.SUSE file has to be changed to reflect the current certificate
installation mechanism.


--1565562084.6cd5Edf1.8159
Date: Sun, 11 Aug 2019 22:21:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1145197

            Bug ID: 1145197
           Summary: Yast2 Control Center with wrong language
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: fkrueger-at-mailbox.org
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 813630
  --> http://bugzilla.suse.com/attachment.cgi?id=813630&action=edit
Yast2 Control Center with system language set to German

TW20190809 with KDE Plasma 5.16.4 and a German environment, i.e.

> locale
LANG=de_DE.UTF-8
LC_CTYPE="de_DE.UTF-8"
LC_NUMERIC="de_DE.UTF-8"
LC_TIME="de_DE.UTF-8"
LC_COLLATE="de_DE.UTF-8"
LC_MONETARY="de_DE.UTF-8"
LC_MESSAGES="de_DE.UTF-8"
LC_PAPER="de_DE.UTF-8"
LC_NAME="de_DE.UTF-8"
LC_ADDRESS="de_DE.UTF-8"
LC_TELEPHONE="de_DE.UTF-8"
LC_MEASUREMENT="de_DE.UTF-8"
LC_IDENTIFICATION="de_DE.UTF-8"
LC_ALL=

gives Yast2 Control Center in English (see attachment).


--1565601456.64ad7a2b0.32048
Date: Mon, 12 Aug 2019 09:17:36 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145242

            Bug ID: 1145242
           Summary: VUL-0: chromium: multiple security issues fixed in 76.0.3809.100
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop.html

* CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
* CVE-2019-5867: Out-of-bounds read in V8

Tarball now at
https://commondatastorage.googleapis.com/chromium-browser-official/chromium-76.0.3809.100.tar.xz


body:
--1565640371.a418eaD0.16180
Date: Mon, 12 Aug 2019 20:06:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145328

            Bug ID: 1145328
           Summary: calamaris does not generate a report
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: kasimir_-at-outlook.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When I try to generate a report with calamaris, I get the following error
message:
Can't use 'defined(%hash)' (Maybe you should just omit the defined()?) at
/usr/bin/calamaris line 2609.

Generate command to report:
cat /var/log/squid/access.log | calamaris -a -F 'html' > /squidreport.html

Greetings
Kasimir

summary: calamaris does not generate a report


body:
--1565696296.3b10fC8D4.27458
Date: Tue, 13 Aug 2019 11:38:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145444

            Bug ID: 1145444
           Summary: Clang8 pulls in old clang-checker6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: xaver-at-hellauer.bayern
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On an up-to-date Tumbleweed (20190809) install, no additional repos,

`zypper in clang`

would install

```
The following 12 NEW packages are going to be installed:
  clang clang6-checker clang8 glibc-devel libclang6 libclang8 libLLVM6 libLTO8
  libstdc++6-devel-gcc9 libstdc++-devel libxcrypt-devel linux-glibc-devel

The following recommended package was automatically selected:
  clang6-checker
```

while `zypper in clang8` would install

```
The following 11 NEW packages are going to be installed:
  clang6-checker clang8 glibc-devel libclang6 libclang8 libLLVM6 libLTO8
  libstdc++6-devel-gcc9 libstdc++-devel libxcrypt-devel linux-glibc-devel

The following recommended package was automatically selected:
  clang6-checker

The following package is recommended, but will not be installed due to
conflicts or dependency issues:
  clang8-checker
```

and `zypper in clang clang-checker` would install

```
The following 6 NEW packages are going to be installed:
  clang clang8 clang8-checker clang-checker libclang8 libLTO8

The following recommended package was automatically selected:
  clang8-checker
```

In my opinion all three zypper commands should resolve to the same packages and
preferably the latter (no clang6*, libstdc++6* deps).

summary: Clang8 pulls in old clang-checker6


body:
--1565792103.EAcfc38e4.4581
Date: Wed, 14 Aug 2019 14:15:03 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145639

            Bug ID: 1145639
           Summary: AUDIT-0: systemd: new dbus service and polkit privileges for systemd-portabled
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I'd like to have portabled enabled in systemd. As usual it brings a dbus
service and some polkit privileges so needs whitelisting of

org.freedesktop.portable1.attach-images (auth_admin:auth_admin:auth_admin_keep)
org.freedesktop.portable1.inspect-images
(auth_admin:auth_admin:auth_admin_keep)
org.freedesktop.portable1.manage-images (auth_admin:auth_admin:auth_admin_keep)

and

org.freedesktop.portable1.service
org.freedesktop.portable1.conf

https://github.com/systemd/systemd/blob/master/src/portable/org.freedesktop.portable1.service
https://github.com/systemd/systemd/blob/master/src/portable/org.freedesktop.portable1.conf
https://github.com/systemd/systemd/blob/master/src/portable/org.freedesktop.portable1.policy

pkgs: polkit-default-privs rpmlint


--1565827282.6Ace0.521
Date: Thu, 15 Aug 2019 00:01:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1145692

            Bug ID: 1145692
           Summary: gcc emits incorrect zypper debug info commands
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: william.brown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Gcc helpfully tries to emit commands to install missing debug info such as:

Missing separate debuginfo for /usr/lib64/libdb-4.8.so
Try: zypper install -C
"debuginfo(build-id)=9389fd372516908dc446b7d39238dd9e83c2e168"

However, most people (myself included) try to copy paste this, yielding:

zypper install -C
"debuginfo(build-id)=9389fd372516908dc446b7d39238dd9e83c2e168"
Loading repository data...
Reading installed packages...
No provider of 'debuginfo(build-id)=9389fd372516908dc446b7d39238dd9e83c2e168'
found. ['--plus-content debug'?]
Resolving package dependencies...

Followed by misunderstanding the option placement:

zypper install --plus-content debug  -C
"debuginfo(build-id)=9389fd372516908dc446b7d39238dd9e83c2e168"
The flag --plus-content is not known.

Instead, gcc should emit the correct command by default:

zypper --plus-content debug install -C
"debuginfo(build-id)=9389fd372516908dc446b7d39238dd9e83c2e168"


--1565827904.a3DdDBCb0.5312
Date: Thu, 15 Aug 2019 00:11:44 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145693

            Bug ID: 1145693
           Summary: xmlgraphics-fop does not find hyphenation pattern
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Factory
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Java
          Assignee: bnc-team-java-at-forge.provo.novell.com
          Reporter: frank.h.ellenberger-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I see several occurences of

> <timestamp> org.apache.fop.hyphenation.Hyphenator
> getHyphenationTree
> SCHWERWIEGEND: Couldn't find hyphenation pattern for lang="de".

although there is /usr/share/xmlgraphics-fop/hyph with all language files.

The language does not matter, I run through serveral.

It seems, there is a link wrong or missing.


--1565863086.E8bEDf0.13809
Date: Thu, 15 Aug 2019 09:58:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1145724

            Bug ID: 1145724
           Summary: Update kiwi-boot-descriptions for Leap 15.2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: dcassany-at-suse.com
          Reporter: mlin-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

need to update kiwi-boot-packages patch for Leap 15.2, I hot-patched it[1] for
now.

David, can you please take care of this?

[1]
https://build.opensuse.org/package/rdiff/openSUSE:Leap:15.2/kiwi-boot-descriptions?linkrev=base&rev=19


--1565868503.536e2f50.6251
Date: Thu, 15 Aug 2019 11:28:23 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145735

            Bug ID: 1145735
           Summary: Duplicate binaries produced by different llvm versions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Reported by the duplicate binary detection bot:

  libc++-devel:
  - llvm6
  - llvm7
  - llvm8
  libc++1:
  - llvm6
  - llvm7
  - llvm8
  libc++abi-devel:
  - llvm6
  - llvm7
  - llvm8
  libc++abi1:
  - llvm6
  - llvm7
  - llvm8
  python3-clang:
  - llvm6
  - llvm7
  - llvm8

Those binaries are all produced by three different llvm versions. For OBS and
the product, this is an issue insofar as there is no guarantee which of the
three wins to be published (but only ONE gets used/published)

Only one package should produce the binaries (others can use a name suffix, as
is done for GCC for example)


--1565886318.acc5Fa6.25912
Date: Thu, 15 Aug 2019 16:25:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145779

            Bug ID: 1145779
           Summary: several perl Modules do not get installed with pcsc-tools (required by gscriptor)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: chris-at-computersalat.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

# gscriptor
Can't locate Glib.pm in @INC (you may need to install the Glib module) (@INC
contains: /usr/lib/perl5/site_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/site_perl/5.26.1
/usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.26.1
/usr/lib/perl5/5.26.1/x86_64-linux-thread-multi /usr/lib/perl5/5.26.1
/usr/lib/perl5/site_perl) at /usr/bin/gscriptor line 27.
BEGIN failed--compilation aborted at /usr/bin/gscriptor line 27.

# gscriptor
Can't locate Gtk2.pm in @INC (you may need to install the Gtk2 module) (@INC
contains: /usr/lib/perl5/site_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/site_perl/5.26.1
/usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.26.1
/usr/lib/perl5/5.26.1/x86_64-linux-thread-multi /usr/lib/perl5/5.26.1
/usr/lib/perl5/site_perl) at /usr/bin/gscriptor line 28.
BEGIN failed--compilation aborted at /usr/bin/gscriptor line 28.

# which gscriptor
/usr/bin/gscriptor

# rpm -q --whatprovides /usr/bin/gscriptor
pcsc-tools-1.5.2-lp150.1.3.x86_64

Please add missing

Requires: perl(Glib)
Requires: perl(Gtk2)

to pcsc-tools spec file.
Thank you


--1565946966.FE366380.1702
Date: Fri, 16 Aug 2019 09:16:06 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145887

            Bug ID: 1145887
           Summary: VUL-1: CVE-2019-13222: stb:  out-of-bounds read of a global buffer in the draw_line function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240236/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13222

An out-of-bounds read of a global buffer in the draw_line function in
stb_vorbis
through 2019-03-04 allows an attacker to cause a denial of service or disclose
sensitive information by opening a crafted Ogg Vorbis file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13222
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13222
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565947052.7eE3DE0.3172
Date: Fri, 16 Aug 2019 09:17:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145889

            Bug ID: 1145889
           Summary: VUL-0: CVE-2019-13221: stb: stack buffer overflow in the compute_codewords function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240235/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13221

A stack buffer overflow in the compute_codewords function in stb_vorbis through
2019-03-04 allows an attacker to cause a denial of service or execute arbitrary
code by opening a crafted Ogg Vorbis file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13221
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565947153.1cAe0.31904
Date: Fri, 16 Aug 2019 09:19:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145890

            Bug ID: 1145890
           Summary: VUL-1: CVE-2019-13220: stb: Use of uninitialized stack variables in the start_decoder function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240234/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13220

Use of uninitialized stack variables in the start_decoder function in
stb_vorbis
through 2019-03-04 allows an attacker to cause a denial of service or disclose
sensitive information by opening a crafted Ogg Vorbis file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13220
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13220
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565947214.3bedf6Ca0.5699
Date: Fri, 16 Aug 2019 09:20:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145891

            Bug ID: 1145891
           Summary: VUL-1: CVE-2019-13219: A NULL pointer dereference in the get_window function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240233/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13219

A NULL pointer dereference in the get_window function in stb_vorbis through
2019-03-04 allows an attacker to cause a denial of service by opening a crafted
Ogg Vorbis file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13219
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13219
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565947282.77ed6FD0.5831
Date: Fri, 16 Aug 2019 09:21:22 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145892

            Bug ID: 1145892
           Summary: VUL-1: CVE-2019-13218: stb: Division by zero in the predict_point function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240232/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13218

Division by zero in the predict_point function in stb_vorbis through 2019-03-04
allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis
file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13218
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13218
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565947700.ECD63e70.6866
Date: Fri, 16 Aug 2019 09:28:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145899

            Bug ID: 1145899
           Summary: VUL-1: CVE-2019-13223: stb: reachable assertion in the lookup1_values function in stb_vorbis
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://smash.suse.de/issue/240237/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: adrian-at-suse.com
          Reporter: rfrohl-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-13223

A reachable assertion in the lookup1_values function in stb_vorbis through
2019-03-04 allows an attacker to cause a denial of service by opening a crafted
Ogg Vorbis file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13223
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13223
https://github.com/nothings/stb/commits/master/stb_vorbis.c
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
http://nothings.org/stb_vorbis/


--1565975232.C0CE07BF3.19712
Date: Fri, 16 Aug 2019 17:07:12 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1145946

            Bug ID: 1145946
           Summary: amdgpu BUG: unable to handle kernel NULL pointer dereference
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: thomas-at-abiwatch.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Moving an existing installation of opensuse 15.1 to a new system with "AMD
Athlon 240GE with Radeon Vega Graphics" ended up in a blackscreen:

Aug 15 15:17:54 tv3 kernel: amdgpu: [powerplay] dpm has been enabled
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB: values for Invalid clock
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         400000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         933000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         1067000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         1200000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB: values for Invalid clock
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         300000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         600000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         626000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm] DM_PPLIB:         654000 in kHz
Aug 15 15:17:54 tv3 kernel: [drm:construct [amdgpu]] *ERROR* construct: Invalid
Connector ObjectID from Adapter Service for connector index:2! type 0 expected
3
Aug 15 15:17:54 tv3 kernel: [drm] Display Core initialized with v3.1.59!
Aug 15 15:17:54 tv3 kernel: [drm] SADs count is: -2, don't need to read it
Aug 15 15:17:54 tv3 systemd-udevd[574]: worker [606] terminated by signal 9
(KILL)
Aug 15 15:17:54 tv3 systemd-udevd[574]: worker [606] failed while handling
'/devices/pci0000:00/0000:00:08.1/0000:2a:00.0'
Aug 15 15:17:54 tv3 kernel: BUG: unable to handle kernel NULL pointer
dereference at 0000000000000018
Aug 15 15:17:54 tv3 kernel: IP: dc_link_aux_transfer+0x7b/0x140 [amdgpu]
Aug 15 15:17:54 tv3 kernel: PGD 0 P4D 0
Aug 15 15:17:54 tv3 kernel: Oops: 0000 [#1] SMP NOPTI
Aug 15 15:17:54 tv3 kernel: CPU: 1 PID: 606 Comm: systemd-udevd Not tainted
4.12.14-lp151.28.10-default #1 openSUSE Leap 15.1
Aug 15 15:17:54 tv3 kernel: Hardware name: Micro-Star International Co., Ltd.
MS-7B84/A320M PRO-M2 V2 (MS-7B84), BIOS 3.4O 07/01/2019
Aug 15 15:17:54 tv3 kernel: task: ffff88021217a140 task.stack: ffffc90001b30000
Aug 15 15:17:54 tv3 kernel: RIP: 0010:dc_link_aux_transfer+0x7b/0x140 [amdgpu]
Aug 15 15:17:54 tv3 kernel: RSP: 0018:ffffc90001b336e8 EFLAGS: 00010296
Aug 15 15:17:54 tv3 kernel: RAX: ffff88021778fc00 RBX: 0000000000000000 RCX:
ffffc90001b33818
Aug 15 15:17:54 tv3 kernel: RDX: 0000000000000003 RSI: ffff88021545b360 RDI:
ffff880217784800
Aug 15 15:17:54 tv3 kernel: RBP: 0000000000000000 R08: 0000000000000001 R09:
0000000000000000
Aug 15 15:17:54 tv3 kernel: R10: ffffc90001b33778 R11: 0000000000000001 R12:
0000000000000001
Aug 15 15:17:54 tv3 kernel: R13: ffffc90001b33818 R14: ffffc90001b3377d R15:
0000000000000000
Aug 15 15:17:54 tv3 kernel: FS:  00007f3e9c73ed40(0000)
GS:ffff88021e840000(0000) knlGS:0000000000000000
Aug 15 15:17:54 tv3 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Aug 15 15:17:54 tv3 kernel: CR2: 0000000000000018 CR3: 00000002100c2000 CR4:
00000000003406e0
Aug 15 15:17:54 tv3 kernel: Call Trace:
Aug 15 15:17:54 tv3 kernel:  dm_dp_aux_transfer+0x55/0x110 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  drm_dp_dpcd_access+0x69/0xf0 [drm_kms_helper]
Aug 15 15:17:54 tv3 kernel:  drm_dp_dpcd_read+0x2e/0xc0 [drm_kms_helper]
Aug 15 15:17:54 tv3 kernel:  dm_helpers_dp_read_dpcd+0x27/0x40 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  core_link_read_dpcd+0x1f/0x30 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  retrieve_link_cap+0x55/0x490 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  dc_link_detect+0x3b1/0xa30 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  amdgpu_dm_initialize_drm_device+0x6a6/0xca0
[amdgpu]
Aug 15 15:17:54 tv3 kernel:  ? printk+0x43/0x4b
Aug 15 15:17:54 tv3 kernel:  dm_hw_init+0x147/0x230 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  amdgpu_device_init+0xc55/0x1500 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  ? kmem_cache_alloc_trace+0x1d4/0x540
Aug 15 15:17:54 tv3 kernel:  amdgpu_driver_load_kms+0x88/0x2d0 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  drm_dev_register+0x112/0x1a0 [drm]
Aug 15 15:17:54 tv3 kernel:  amdgpu_pci_probe+0x13f/0x200 [amdgpu]
Aug 15 15:17:54 tv3 kernel:  local_pci_probe+0x42/0xa0
Aug 15 15:17:54 tv3 kernel:  pci_device_probe+0x13c/0x160
Aug 15 15:17:54 tv3 kernel:  driver_probe_device+0x2f7/0x440
Aug 15 15:17:54 tv3 kernel:  device_driver_attach+0x76/0x80
Aug 15 15:17:54 tv3 kernel:  ? device_driver_attach+0x80/0x80
Aug 15 15:17:54 tv3 kernel:  __driver_attach+0x4c/0x130
Aug 15 15:17:54 tv3 kernel:  ? device_driver_attach+0x80/0x80
Aug 15 15:17:54 tv3 kernel:  bus_for_each_dev+0x5e/0x90
Aug 15 15:17:54 tv3 kernel:  bus_add_driver+0x141/0x210
Aug 15 15:17:54 tv3 kernel:  ? 0xffffffffa07a7000
Aug 15 15:17:54 tv3 kernel:  driver_register+0x57/0xc0
Aug 15 15:17:54 tv3 kernel:  ? 0xffffffffa07a7000
Aug 15 15:17:54 tv3 kernel:  do_one_initcall+0x4e/0x190
Aug 15 15:17:54 tv3 kernel:  ? __vunmap+0x6d/0xb0
Aug 15 15:17:54 tv3 kernel:  ? __vunmap+0x6d/0xb0
Aug 15 15:17:54 tv3 kernel:  do_init_module+0x5b/0x1e4
Aug 15 15:17:54 tv3 kernel:  load_module+0x18ec/0x1f80
Aug 15 15:17:54 tv3 kernel:  ? SYSC_finit_module+0xb7/0xd0
Aug 15 15:17:54 tv3 kernel:  SYSC_finit_module+0xb7/0xd0
Aug 15 15:17:54 tv3 kernel:  do_syscall_64+0x7b/0x160
Aug 15 15:17:54 tv3 kernel:  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Aug 15 15:17:54 tv3 kernel: RIP: 0033:0x7f3e9b5a5269
Aug 15 15:17:54 tv3 kernel: RSP: 002b:00007ffeea9401a8 EFLAGS: 00000246
ORIG_RAX: 0000000000000139
Aug 15 15:17:54 tv3 kernel: RAX: ffffffffffffffda RBX: 000055c4e8f0a490 RCX:
00007f3e9b5a5269
Aug 15 15:17:54 tv3 kernel: RDX: 0000000000000000 RSI: 00007f3e9bee18bd RDI:
0000000000000019
Aug 15 15:17:54 tv3 kernel: RBP: 00007f3e9bee18bd R08: 0000000000000000 R09:
000055c4e8edea20
Aug 15 15:17:54 tv3 kernel: R10: 0000000000000019 R11: 0000000000000246 R12:
0000000000020000
Aug 15 15:17:54 tv3 kernel: R13: 000055c4e8ee6100 R14: 0000000000000000 R15:
0000000003938700
Aug 15 15:17:54 tv3 kernel: Code: 10 00 00 00 00 c6 44 24 03 00 48 c7 44 24 08
00 00 00 00 48 8b 16 48 8b 00 8b 52 14 48 8b 80 38 01 00 00 48 8b 9c d0 b0 01
00 00 <48> 8b 43 18 48 89 df 48 8b 40 48 e8 95 f8 3f e1 8b 44 24 70 4c
Aug 15 15:17:54 tv3 kernel: Modules linked in: msr edac_mce_amd kvm_amd ccp kvm
snd_hda_intel(+) irqbypass snd_hda_codec crc32_pclmul amdkfd amd_iommu_v2
snd_hda_core snd_hwdep crc32c_intel snd_pcm ghash_clmulni_intel snd_seq
amdgpu(+) hid_generic chash gpu_sched snd_seq_device pcbc wmi_bmof snd_timer
ttm aesni_intel usbhid aes_x86_64 crypto_simd drm_kms_helper glue_helper cryptd
snd pcspkr drm drm_panel_orientation_quirks fb_sys_fops r8169 sp5100_tco
syscopyarea sysfillrect sysimgblt i2c_piix4 k10temp i2c_algo_bit soundcore mii
wmi gpio_amdpt gpio_generic acpi_cpufreq button xhci_pci serio_raw xhci_hcd
ahci libahci usbcore video ata_generic pata_atiixp sg dm_multipath dm_mod
scsi_dh_rdac scsi_dh_emc scsi_dh_alua ecryptfs
Aug 15 15:17:54 tv3 kernel: CR2: 0000000000000018
Aug 15 15:17:54 tv3 kernel: ---[ end trace cd33dfd8766e483c ]---
Aug 15 15:17:54 tv3 kernel: RIP: 0010:dc_link_aux_transfer+0x7b/0x140 [amdgpu]
Aug 15 15:17:54 tv3 kernel: RSP: 0018:ffffc90001b336e8 EFLAGS: 00010296
Aug 15 15:17:54 tv3 kernel: RAX: ffff88021778fc00 RBX: 0000000000000000 RCX:
ffffc90001b33818
Aug 15 15:17:54 tv3 kernel: RDX: 0000000000000003 RSI: ffff88021545b360 RDI:
ffff880217784800
Aug 15 15:17:54 tv3 kernel: RBP: 0000000000000000 R08: 0000000000000001 R09:
0000000000000000
Aug 15 15:17:54 tv3 kernel: R10: ffffc90001b33778 R11: 0000000000000001 R12:
0000000000000001
Aug 15 15:17:54 tv3 kernel: R13: ffffc90001b33818 R14: ffffc90001b3377d R15:
0000000000000000
Aug 15 15:17:54 tv3 kernel: FS:  00007f3e9c73ed40(0000)
GS:ffff88021e840000(0000) knlGS:0000000000000000
Aug 15 15:17:54 tv3 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Aug 15 15:17:54 tv3 kernel: CR2: 0000000000000018 CR3: 00000002100c2000 CR4:
00000000003406e0
Aug 15 15:17:54 tv3 systemd[1]: nss-lookup.target: Dependency
Before=nss-lookup.target dropped
Aug 15 15:17:54 tv3 systemd[1]: Started Apply settings from
/etc/sysconfig/keyboard.
Aug 15 15:17:54 tv3 systemd[1]: Started System Logging Service.
Aug 15 15:17:54 tv3 systemd[1]: Created slice
system-systemd\x2dbacklight.slice.
Aug 15 15:17:54 tv3 systemd[1]: Starting Load/Save Screen Backlight Brightness
of backlight:acpi_video0...
Aug 15 15:17:54 tv3 systemd[1]: Started Load/Save Screen Backlight Brightness
of backlight:acpi_video0.

Switching to kernel-vanilla-5.2.8-2.1.ga44175e.x86_64.rpm solved the problem
for me.


body:
--1566174025.01C3cEc0.31226
Date: Mon, 19 Aug 2019 00:20:25 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146028

            Bug ID: 1146028
           Summary: texdoc missing package database
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: masterpatricko-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

New install of TeXLive on Tumbleweed does not have a functional texdoc:

> texdoc texdoc
texdoc error: No texlive.tlpdb nor shipped tlpdb data found.

I believe this is to do with the warning in the texdoc v3.0 release notes:

> One more thing (IMPORTANT for dis�trib�u�tors): from v3.0, we won't
> in�clude Data.tlpdb.lua (the pseudo cache file) in our repos�i�tory.
> If your dis�tri�bu�tion do not ship the tlpdb, you have to pre-gen�er�ate
> the pseudo cache file to make Tex�doc work�able.

According to https://github.com/TeX-Live/texdoc,

$ rake gen_datafile

needs to be run from the build directory. But I couldn't figure out the
structure of the package to make the change myself :)

summary: texdoc missing package database


--1566209124.a6B83.16881
Date: Mon, 19 Aug 2019 10:05:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146141

            Bug ID: 1146141
           Summary: bpftrace: BUG: unable to handle kernel NULL pointer dereference at      (null)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: aojeagarcia-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 814495
  --> http://bugzilla.suse.com/attachment.cgi?id=814495&action=edit
kernel stack trace

Kernel crash after using the bpftrace hello world example

How to reproduce

1. Clone bpftrace

# git clone https://github.com/iovisor/bpftrace.git

2. Build bpftrace using the release scripts (use a container to build it
statically linked)

# cd bpftrace
# ./build.sh

3. Execute hello world example

# build-release/src/bpftrace -e 'BEGIN { printf("hello world\n"); }'
(kernel stack trace attached)


--1566219127.fbfb1.22965
Date: Mon, 19 Aug 2019 12:52:07 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146181

            Bug ID: 1146181
           Summary: Xf86-input-wacom driver project has moved
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: xorg-maintainer-bugs-at-forge.provo.novell.com
          Reporter: admin-at-leinir.dk
        QA Contact: xorg-maintainer-bugs-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

The current xf86-input-wacom driver in Tumbleweed is version 0.34.2, and says
that the project website is on sourceforge. The project moved from there to
GitHub, and has since had a couple of releases[1].

The new home is: https://github.com/linuxwacom/xf86-input-wacom/

[1] a couple being 2 minor and 1 revision release, with the current at time of
writing being 0.37.0, released on Jun 18th 2019.


--1566231480.4aE8a14.10573
Date: Mon, 19 Aug 2019 16:18:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146219

            Bug ID: 1146219
           Summary: network:chromium/chromium: Bug - No video playback on Intel Kaby Lake and later
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: tchvatal-at-suse.com
          Reporter: suse-at-bugs.jan.ritzerfeld.org
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

Using newer Intel HD Graphics hardware (Coffee Lake and later), hardware
accelerated video playback (i.e. vaapi) is broken for both VP9 and H264 with
both i965 and iHD drivers in Chromium 75 and 76:
https://github.com/intel/intel-vaapi-driver/issues/456

This patch seems to work for me:
https://aur.archlinux.org/cgit/aur.git/tree/chromium-vaapi-fix.patch?h=brave

Fedora used this patch to fix its Chromium a couple of weeks ago:
http://koji.rpmfusion.org/koji/buildinfo?buildID=11624
* Wed Jul 03 2019 Akarshan Biswas <akarshanbiswas-at-fedoraproject.org> -
75.0.3770.100-2
- Fix vaapi regression on few intel devices, disabled vaapi post processing for
Nvidia
https://github.com/intel/intel-vaapi-driver/issues/456#issuecomment-508328870


--1566285771.D163d1.7264
Date: Tue, 20 Aug 2019 07:22:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146283

            Bug ID: 1146283
           Summary: VUL-1: CVE-2019-15232: live555: before 2019.08.16 has a Use-After-Free because GenericMediaServer:createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska demuxer
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/240502/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dimstar-at-opensuse.org
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15232

Live555 before 2019.08.16 has a Use-After-Free because
GenericMediaServer::createNewClientSessionWithId can generate the same client
session ID in succession, which is mishandled by the MPEG1or2 and Matroska file
demultiplexors.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15232
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15232
http://www.live555.com/liveMedia/public/changelog.txt


--1566288378.Bdf0b316.29933
Date: Tue, 20 Aug 2019 08:06:18 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146300

            Bug ID: 1146300
           Summary: AUDIT-0: systemd: networkd untracked privileges
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: systemd-maintainers-at-suse.de
          Found By: ---
           Blocker: ---

Upcoming systemd 243 has a number of new privileges that need whitelisting
please:

[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.revert-dns (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.revert-ntp (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-default-route
(auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-dns-over-tls
(auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-dns-servers
(auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-dnssec (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-dnssec-negative-trust-anchors
(auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-domains (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-llmnr (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-mdns (auth_admin:auth_admin:auth_admin_keep)
[  246s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000)
org.freedesktop.network1.set-ntp-servers
(auth_admin:auth_admin:auth_admin_keep)

https://github.com/systemd/systemd/blob/master/src/network/org.freedesktop.network1.policy
https://github.com/systemd/systemd/blob/master/src/network/networkd-link-bus.c


--1566302082.c16e0a0.11479
Date: Tue, 20 Aug 2019 11:54:42 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146368

            Bug ID: 1146368
           Summary: VUL-0: CVE-2019-15099: kernel-source: NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/240283/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15099

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a
NULL pointer dereference via an incomplete address in an endpoint descriptor.

Upstream Patch:

https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike-at-gmail.com/T/#u

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1743560
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15099
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15099.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15099
https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike-at-gmail.com/T/#u


--1566302351.F84ac1.6710
Date: Tue, 20 Aug 2019 11:59:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146372

            Bug ID: 1146372
           Summary: kubelet.service tries to start even without config file
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installing Kubic results in this multiple times:

Aug 20 11:34:33 install systemd[1]: kubelet.service: Service RestartSec=10s
expired, scheduling restart.
Aug 20 11:34:33 install systemd[1]: kubelet.service: Scheduled restart job,
restart counter is at 5.
Aug 20 11:34:33 install systemd[1]: Stopped kubelet: The Kubernetes Node Agent.
Aug 20 11:34:33 install systemd[1]: Started kubelet: The Kubernetes Node Agent.
Aug 20 11:34:33 install kubelet[1961]: Flag --runtime-request-timeout has been
deprecated, This parameter should be set via the config file specified by the
Kubelet's --config flag. See
https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for
more information.
Aug 20 11:34:33 install kubelet[1961]: F0820 11:34:33.955572    1961
server.go:198] failed to load Kubelet config file /var/lib/kubelet/config.yaml,
error failed to read kubelet config file "/var/lib/kubelet/config.yaml", error:
open /var/lib/kubelet/config.yaml: no such file or directory
Aug 20 11:34:33 install systemd[1]: kubelet.service: Main process exited,
code=exited, status=255/EXCEPTION
Aug 20 11:34:33 install systemd[1]: kubelet.service: Failed with result
'exit-code'.

Sounds like adding a ConditionPathExists=/var/lib/kubelet/config.yaml would be
useful.


--1566315960.DcdDd1.17801
Date: Tue, 20 Aug 2019 15:46:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146427

            Bug ID: 1146427
           Summary: VUL-1: CVE-2019-14751: python-nltk: Natural Language Toolkit (NLTK) prior to version 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/240518/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: sleep_walker-at-opensuse.org
          Found By: Security Response Team
           Blocker: ---

CVE-2019-14751

Natural Language Toolkit (NLTK) prior to version 3.4.5 is vulnerable to a
directory traversal, allowing attackers to write arbitrary files via a ../ (dot
dot slash) in an NLTK package (ZIP archive) that is mishandled during
extraction.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-14751
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-14751.html


body:
--1566330283.DCA72D54.27421
Date: Tue, 20 Aug 2019 19:44:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146452

            Bug ID: 1146452
           Summary: Broken lighttpd logrotate config
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello,

I am running openSUSE Leap 15.1 with lighttpd-1.4.49-lp151.2.3.x86_64
and I see the following postrotate in /etc/logrotate.d/lighttpd which is came
from the package:

    postrotate
     /etc/init.d/lighttpd reload
    endscript

However, there is no such file /etc/init.d/lighttpd

summary: Broken lighttpd logrotate config


body:
--1566374148.A5CeFBC0.1209
Date: Wed, 21 Aug 2019 07:55:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146533

            Bug ID: 1146533
           Summary: llvm8 pulls in python 2
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: aaronpuchert@alice-dsl.net
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I can't remove python-base from my system because of:

        /usr/bin/python is needed by (installed) llvm8-8.0.1-1.2.x86_64
        /usr/bin/python is needed by (installed)
clang8-checker-8.0.1-1.2.x86_64
        /usr/bin/python is needed by (installed) clang8-8.0.1-1.2.x86_64

Seems to be caused by #!/usr/bin/python shebangs.

summary: llvm8 pulls in python 2


--1566376037.16BE4.17161
Date: Wed, 21 Aug 2019 08:27:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146548

            Bug ID: 1146548
           Summary: gcc: cannot ignore fatal warnings with LTO
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: martin.liska-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: rguenther-at-suse.com
          Found By: ---
           Blocker: ---

With LTO enabled, tor stopped building with -Werror
It seems, there are 2 places in the code that trigger warnings.

One of them is
src/test/test_bt_cl.c:    *(volatile int *)0 = 0;

It is marked with DISABLE_GCC_WARNING(null-dereference)
defined in src/lib/cc/compat_compiler.h as
#pragma GCC diagnostic ignored "-Wnull-dereference"

and that seems to work fine in the non-LTO case,
but triggers the -Werror with -flto.

I will try to construct a smaller reproducer.


--1566383730.C08bB20.13229
Date: Wed, 21 Aug 2019 10:35:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146622

            Bug ID: 1146622
           Summary: KPatience can routinely be crashed - specific circumstances
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: Pemberton.John.M-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 814970
  --> http://bugzilla.suse.com/attachment.cgi?id=814970&action=edit
KPatience crash image

Since I generally don't wish to spend a lot of time playing "solitaire", when I
do play "Freecell", I repeatedly request a New Deal until there are no Aces in
the top three rows.  When I complete that game, then I'll immediately play
"Grandfather's Clock".  With Leap 15.0 no problems.  But with leap 15.1, in
that sequence of events, when I click "New Game..." and select "Grandfather's
Clock", KPatience crashes routinely.


--1566385397.3AB73.4643
Date: Wed, 21 Aug 2019 11:03:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146634

            Bug ID: 1146634
           Summary: pcc does not build reproducibly with LTO
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: matz-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: martin.liska-at-suse.com
            Blocks: 1081754
          Found By: Development
           Blocker: ---

/usr/lib64/pcc/x86_64-suse-linux-gnu/1.0.0.RELEASE/lib/*.o differ

e.g.
+Contents of section .gnu.lto_.profile.23efe723a460f453:
+ 0000 789ce360 60044220 0000005d 000b      x..``.B ...]..
/usr/lib64/pcc/x86_64-suse-linux-gnu/1.0.0.RELEASE/lib/crt0.o differs in ELF
section .gnu.lto_.icf.23efe723a460f453

 /usr/lib64/pcc/x86_64-suse-linux-gnu/1.0.0.RELEASE/lib/crt0.o:     file format
elf64-x86-64

+Contents of section .gnu.lto_.icf.23efe723a460f453:
+ 0000 789ce360 6064e060 40004686 cecf6fba  x..``d.`@.F...o.
+ 0010 1819000e db0306                      .......

The .a files are fine, though, because they are stripped by
https://github.com/openSUSE/brp-check-suse/blob/master/brp-15-strip-debug#L40


--1566392568.d0bE2d30.24587
Date: Wed, 21 Aug 2019 13:02:48 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146661

            Bug ID: 1146661
           Summary: (Dracut) ifup in network-legacy fails because hotname bin is not there
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: aplanas-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

When creating a PXE boot image with python-kiwi, using the openSUSE Factory
repos, the initrd generate an error when doing ifup:

/sbin/ifup: line 73 hostname not found (or something like that)

The issue, after debugging a bit the code, is that the hostname binary is not
present in the initrd ramfs, but is indeed required by the
35network-legacy/ifup.sh script, in line 73

https://github.com/aplanas/dracut/blob/SUSE/049/modules.d/35network-legacy/ifup.sh#L73

Maybe a missing `inst_multiple -o hostname` in
35network-legacy/module-setup.sh?


--1566407714.EeB7Ba4.1748
Date: Wed, 21 Aug 2019 17:15:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146704

            Bug ID: 1146704
           Summary: lifelines crashes when trying to import GEDCOM fiel: "Fatal Error in file btrec.c at line 344"
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: graymark-at-ptd.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 815085
  --> http://bugzilla.opensuse.org/attachment.cgi?id=815085&action=edit
The sample GEDCOM file from the gnuology program

When I try to import a GEDCOM ged file into llines it always crashes with the
error message:

Fatal Error: 2019-08-21-15:36:29Z
    in file <btrec.c> at line 344

This happens with my own GEDCOM file which I exported from my father's "Family
Tree Maker (13.0.280)" family tree as well as the sample GEDCOM file that comes
with the gnuology program. Both of these work perfectly well on Ubuntu 18.04
but they use "version 3.0.61 2007 Aug" of lifelines whereas openSUSE 15.1 uses
"Lifelines 3.0.62 2007 Oct" in case that is important. The CrashLog_llines.log
file that it dumps on openSUSE just contains the lines:

Fatal Error: 2019-08-21-15:36:29Z
    in file <btrec.c> at line 344

I am attaching the GEDCOM ged file from the gnuology program so you can
recreate it.


--1566408796.d6dB536c0.2810
Date: Wed, 21 Aug 2019 17:33:16 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146705

            Bug ID: 1146705
           Summary: Installation/upgrade of filesystem inside LXD container fails due to /proc not being writable by the container
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: palica-at-liguros.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

The installation of filesystem package is failing inside LXD/LXC container as
the /proc directory isn't owned by the container, but rather by the host.

( 3/52) Installing: filesystem-15.5-27.1.x86_64
..........................................................................................................................................................................[error]
Installation of filesystem-15.5-27.1.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: error: unpacking of archive failed
on file /proc: cpio: chown failed - No such file or directory
error: filesystem-15.5-27.1.x86_64: install failed
error: filesystem-15.5-26.2.x86_64: erase skipped

Would it be possible to inspect if running inside container and skip
installation of /proc (and probably /sys) if true?

I am open to questions and supplying more information if needed.


--1566425373.BFcE70.27036
Date: Wed, 21 Aug 2019 22:09:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1146724

            Bug ID: 1146724
           Summary: Vimb is compiled with wrong prefix, different than installation prefix
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: jakub-at-gramsz.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Like in title vimb is compiled without specifying PREFIX which means with
default prefix '/usr/local/' (see
https://github.com/fanglingsu/vimb/blob/a86e819d79a20932cb3554f66a696a7bd3a3e59c/config.mk#L5);
but installed with prefix '/usr/' (see
https://build.opensuse.org/package/view_file/openSUSE:Factory/vimb/vimb.spec?expand=1).

Unfortunately vimb build script hard codes in its binary full path to a
library, so we get '/usr/local/lib/webext_main.so', while the library is
installed at '/usr/lib/webext_main.so'. Rpm spec should be fixed.


body:
--1566461320.1EabbaE61.12115
Date: Thu, 22 Aug 2019 08:08:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146769

            Bug ID: 1146769
           Summary: kernel-firmware-amdgpu breaks polaris10
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: tiwai-at-suse.com
          Reporter: vbabka-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1143959
          Found By: ---
           Blocker: ---

With kernel-firmware-amdgpu-20190815-277.1 on kernel
5.3.0-rc5-3.g20b5ce2-default
I get:

2019-08-22T09:20:59.517060+02:00 gehinom kernel: [    5.101024] amdgpu
0000:09:00.0: Direct firmware load for amdgpu/polaris10_mc.bin failed with
error -2
2019-08-22T09:20:59.517061+02:00 gehinom kernel: [    5.101026] mc: Failed to
load firmware "amdgpu/polaris10_mc.bin"
2019-08-22T09:20:59.517062+02:00 gehinom kernel: [    5.101102]
[drm:gmc_v8_0_sw_init.cold [amdgpu]] *ERROR* Failed to load mc firmware!
2019-08-22T09:20:59.517144+02:00 gehinom kernel: [    5.101173]
[drm:amdgpu_device_ip_init [amdgpu]] *ERROR* sw_init of IP block <gmc_v8_0>
failed -2
2019-08-22T09:20:59.517145+02:00 gehinom kernel: [    5.101175] amdgpu
0000:09:00.0: amdgpu_device_ip_init failed
2019-08-22T09:20:59.517146+02:00 gehinom kernel: [    5.101177] amdgpu
0000:09:00.0: Fatal error during GPU init
2019-08-22T09:20:59.517150+02:00 gehinom kernel: [    5.101179] [drm] amdgpu:
finishing device.

kernel-firmware works fine on the same kernel. Does amdgpu not support .xz
firmware or what?

summary: kernel-firmware-amdgpu breaks polaris10


--1566478508.FdcF5124.5764
Date: Thu, 22 Aug 2019 12:55:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146866

            Bug ID: 1146866
           Summary: stricter security settings on some netwpork sysctls
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: ro-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jsegitz-at-suse.com
          Found By: ---
           Blocker: ---

from internal https://jira.suse.com/browse/SLE-9132

 On SLES we currently have
 - net.ipv4.conf.all.accept_redirects
  - net.ipv4.conf.default.accept_redirects
  - net.ipv4.conf.default.accept_source_route
  - net.ipv6.conf.all.accept_redirects
  - net.ipv6.conf.default.accept_redirects
 set. This allows attackers on the network to manipulate traffic of the victim
system (for one example please see
http://www.enclaveforensics.com/Blog/files/dbe04629c14a2d07495a38bbf2fc98d9-5.html)

We should make these defaults better.


--1566489538.1feE1.4505
Date: Thu, 22 Aug 2019 15:58:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146898

            Bug ID: 1146898
           Summary: yast2-adcommon-python: AD modules should connect to an AD-DC via the SamDB interface, instead of python-ldap
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: david.mulder-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Currently the yast samba modules are connecting to an AD-DC via python-ldap,
but this could be much improved by connecting via samba's SamDB interface.


body:
--1566520897.bBC83.5055
Date: Fri, 23 Aug 2019 00:41:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1146938

            Bug ID: 1146938
           Summary: intel 760p quirk backport
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: william.brown-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hi,

I'm using two intel 760p devices, and they are affected by an issue where they
have the same subnqn. I believe a patch exists, but it would be great to
backport for leap 15.1 to support this hardware.

commit b9453f9bb66e864f8b7d7e112aea475bdd7a4e2b
Author: James Dingwall <james-at-dingwall.me.uk>
Date:   Tue Jan 8 10:20:51 2019 -0700

    nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN

    [ Upstream commit 6299358d198a0635da2dd3c4b3ec37789e811e44 ]

    If a device provides an NQN it is expected to be globally unique.
    Unfortunately some firmware revisions for Intel 760p/Pro 7600p devices did
    not satisfy this requirement.  In these circumstances if a system has >1
    affected device then only one device is enabled.  If this quirk is enabled
    then the device supplied subnqn is ignored and we fallback to generating
    one as if the field was empty.  In this case we also suppress the version
    check so we don't print a warning when the quirk is enabled.

    Reviewed-by: Keith Busch <keith.busch-at-intel.com>
    Signed-off-by: James Dingwall <james-at-dingwall.me.uk>
    Signed-off-by: Christoph Hellwig <hch-at-lst.de>
    Signed-off-by: Sasha Levin <sashal-at-kernel.org>

This is the commit message that I found while researching the problem.

Thanks!

summary: intel 760p quirk backport


--1566805805.C7a2AFFA1.15093
Date: Mon, 26 Aug 2019 07:50:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1148080

            Bug ID: 1148080
           Summary: Running update-desktop-database causes some errors related to font category
    Classification: openSUSE
           Product: openSUSE Backports
           Version: SLE-15-SP1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Packages
          Assignee: packagehub-bugs-at-suse.com
          Reporter: smar-at-smar.fi
        QA Contact: packagehub-bugs-at-suse.com
          Found By: ---
           Blocker: ---

Hi,

When running command update-desktop-database, I get two errors:

  Error in file "/usr/share/applications/org.kde.kfontview.desktop": "font/otf"
is an invalid MIME type ("font" is an unregistered media type)
  Error in file "/usr/share/applications/org.kde.kfontview.desktop": "font/ttf"
is an invalid MIME type ("font" is an unregistered media type)

font category didn’t originally exist, but it was added to upstream, where the
patch has been ported to different distributions. Upstream patch:
https://cgit.freedesktop.org/xdg/desktop-file-utils/commit/?id=92af4108750ceaf4191fd54e255885c7d8a78b70

This probably exists in standard Leap packages too, but I can’t test it.


--1566807613.8aF80.30697
Date: Mon, 26 Aug 2019 08:20:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148087

            Bug ID: 1148087
           Summary: VUL-0: CVE-2019-15540: libmirage: filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
               URL: https://smash.suse.de/issue/241106/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: jengelh-at-inai.de
          Reporter: wolfgang.frisch-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-15540

filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in
CDemu
does not validate the part size, triggering a heap-based buffer overflow that
can lead to root access by a local Linux user.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15540
http://www.cvedetails.com/cve/CVE-2019-15540/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15540
https://gist.github.com/andreafioraldi/baa79cd78131888d98d6ba680d5f514e
https://sourceforge.net/p/cdemu/code/ci/0e9292c9aa34bf545f43f7efe5f0b94faba94962/
https://sourceforge.net/p/cdemu/bugs/119/


--1566826057.b8c37370.25121
Date: Mon, 26 Aug 2019 13:27:37 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148168

            Bug ID: 1148168
           Summary: Update applet does not handle license agreements
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Currently every transaction including packages with license agreements fails.

This is caused by the backport of support for EULAs in PackageKit.


body:
--1566923458.c2420.21319
Date: Tue, 27 Aug 2019 16:30:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1148401

            Bug ID: 1148401
           Summary: Qt4 removal - keepassx
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: christophe-at-krop.fr
        QA Contact: qa-bugs-at-suse.de
        Depends on: 1148397
            Blocks: 1148398
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1148397 +++

Hello,

There are a couple blockers left preventing the removal of Qt4 in openSUSE
Tumbleweed.

keepassx is one of them.

In the previous threads on the factory mailing list, users reported that
keepassxc can replace it and has more feature.

See https://lists.opensuse.org/opensuse-factory/2019-05/msg00249.html

Can this be done? (note that keepassxc currently fails to build in factory)

summary: Qt4 removal - keepassx