--17065232890.f4baa70D.30837
Date: Mon, 29 Jan 2024 10:14:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219277

            Bug ID: 1219277
           Summary: KDE login notification sound not playing
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: 64bit
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: alanhants-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I have Plasma configured to play a sound
(/usr/share/sounds/Oxygen-Sys-Log-In-Long.ogg) on login. Following an updat=
e to
Tumbleweed 20240124, this notification sound has not played although checks=
 on
the sound system do not indicate any issues. Note that other notification
sounds do play once the login process has been completed.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17065232890.f4baa70D.30837
Date: Mon, 29 Jan 2024 10:14:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219277

          Summary
          KDE login notification sound not playing

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          64bit

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Workspace (Plasma)

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          alanhants@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I have Plasma configured to play a sound
(/usr/share/sounds/Oxygen-Sys-Log-In-Long.ogg) on login. Following an updat=
e to
Tumbleweed 20240124, this notification sound has not played although checks=
 on
the sound system do not indicate any issues. Note that other notification
sounds do play once the login process has been completed.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17065232890.f4baa70D.30837--


body:
--17065434915.0d2d.31712
Date: Mon, 29 Jan 2024 15:51:31 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219306

            Bug ID: 1219306
           Summary: [Tracker[ Remove python2 from openSUSE:Factory
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

This bug report serves as parent to file tickets against packages still usi=
ng
python2 (our long-awaited gimp 3 should be coming out in May - let's collect
what else is still in need of python2, trying to eliminate these things)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17065434915.0d2d.31712
Date: Mon, 29 Jan 2024 15:51:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219306

          Summary
          [Tracker[ Remove python2 from openSUSE:Factory

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Python

          Assignee
          python-maintainers@suse.com

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

This bug report serves as parent to file tickets against pac=
kages still using
python2 (our long-awaited gimp 3 should be coming out in May - let's collect
what else is still in need of python2, trying to eliminate these things)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17065434915.0d2d.31712--

pkgs: python squilt-python


--17065442311.3a0fD6D2.31775
Date: Mon, 29 Jan 2024 16:03:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219310

            Bug ID: 1219310
           Summary: trilinos_14_0_0-gnu-*-hpc-devel have runtime dep on /usr/bin/python
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

zypper se -x --requires /usr/bin/python

lists

  | trilinos_14_0_0-gnu-mpich-hpc-devel=20=20=20=20
  | trilinos_14_0_0-gnu-mvapich2-hpc-devel=20
  | trilinos_14_0_0-gnu-openmpi4-hpc-devel=20

=3D> these packages have a runtime dep on /usr/bin/python - aka python2.

Please help migrate TW off of python2.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17065442311.3a0fD6D2.31775
Date: Mon, 29 Jan 2024 16:03:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219310

          Summary
          trilinos_14_0_0-gnu-*-hpc-devel have runtime dep on /usr/bin/=
python

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

zypper se -x --requires /usr/bin/python

lists

  | trilinos_14_0_0-gnu-mpich-hpc-devel=20=20=20=20
  | trilinos_14_0_0-gnu-mvapich2-hpc-devel=20
  | trilinos_14_0_0-gnu-openmpi4-hpc-devel=20

=3D> these packages have a runtime dep on /usr/bin/python - aka python2.

Please help migrate TW off of python2.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17065442311.3a0fD6D2.31775--


--17066050631.1CFefA4D.519
Date: Tue, 30 Jan 2024 08:57:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219336

            Bug ID: 1219336
           Summary: VUL-0: CVE-2024-23170: mbedtls: timing side channel in private key RSA operations
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/392471/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: meissner-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: andrea.mattiazzo-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

CVE-2024-23170 Timing side channel in private key RSA operations.

Mbed TLS is vulnerable to a timing side channel in private key RSA operatio=
ns.
This side channel could be sufficient for an attacker to recover the plaint=
ext.
A local attacker or a remote attacker who is close to the victim on the net=
work
might have precise enough timing measurements to exploit this. It requires =
the
attacker to send a large number of messages for decryption.

https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-secur=
ity-advisory-2024-01-1/

Resolution: update net-libs/mbedtls to 2.28.7 and 3.5.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-23170
https://bugzilla.redhat.com/show_bug.cgi?id=3D2261598
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066050631.1CFefA4D.519
Date: Tue, 30 Jan 2024 08:57:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219336

          Summary
          VUL-0: CVE-2024-23170: mbedtls: timing side channel in privat=
e key RSA operations

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/392471/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          meissner@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          andrea.mattiazzo@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

CVE-2024-23170 Timing side channel in private key RSA operat=
ions.

Mbed TLS is vulnerable to a timing side channel in private key RSA operatio=
ns.
This side channel could be sufficient for an attacker to recover the plaint=
ext.
A local attacker or a remote attacker who is close to the victim on the net=
work
might have precise enough timing measurements to exploit this. It requires =
the
attacker to send a large number of messages for decryption.

https://mbed-tls.readthedocs.io/en/late=
st/security-advisories/mbedtls-security-advisory-2024-01-1/

Resolution: update net-libs/mbedtls to 2.28.7 and 3.5.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-23170
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2261598

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066050631.1CFefA4D.519--


body:
--17066057691.549F77c.558
Date: Tue, 30 Jan 2024 09:09:29 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219339

            Bug ID: 1219339
           Summary: AUDIT-0: The sendmail binary needs to be setgid mail but rpmlint does not know about
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: werner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The  binary /usr/sbin/sendmail of package sendmail has to be owned by root:=
mail
and the set group identity bit has to set aka

  werner/sendmail> ll /usr/sbin/sendmail
  -r-xr-sr-x 1 root mail 893656 Oct  9 10:55 /usr/sbin/sendmail

this ensures that sendmail can mail handle in offline enqueue
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066057691.549F77c.558
Date: Tue, 30 Jan 2024 09:09:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219339

          Summary
          AUDIT-0: The sendmail binary needs to be setgid mail but rpml=
int does not know about

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          All

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          werner@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The  binary /usr/sbin/sendmail of package sendmail has to be=
 owned by root:mail
and the set group identity bit has to set aka

  werner/sendmail> ll /usr/sbin/sendmail
  -r-xr-sr-x 1 root mail 893656 Oct  9 10:55 /usr/sbin/sendmail

this ensures that sendmail can mail handle in offline enqueue

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066057691.549F77c.558--

pkgs: rpmlint sendmail


--17066278522.2B128bDDE.1823
Date: Tue, 30 Jan 2024 15:17:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219358

            Bug ID: 1219358
           Summary: AUDIT-0: pam: new module: pam_canonicalize_user to canonicalize user name
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: kukuk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Linux-PAM comes with a new trivial PAM module (~15 lines of code), which ne=
eds
to be whitelisted.

PR for the module:
https://github.com/linux-pam/linux-pam/pull/617
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066278522.2B128bDDE.1823
Date: Tue, 30 Jan 2024 15:17:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219358

          Summary
          AUDIT-0: pam: new module: pam_canonicalize_user to canonicali=
ze user name

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          kukuk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Linux-PAM comes with a new trivial PAM module (~15 lines of =
code), which needs
to be whitelisted.

PR for the module:
https://github.=
com/linux-pam/linux-pam/pull/617

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066278522.2B128bDDE.1823--


--17066799431.b10AFE.2552
Date: Wed, 31 Jan 2024 05:45:43 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219370

            Bug ID: 1219370
           Summary: recent update of package 'man' is causing installation errors
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After the recent update of the package 'man' few days ago,
after I complete a tumbleweed installation I see many error message in
/var/log/zypp/history like:

# 2024-01-30 15:14:48 okular-23.08.4-1.2.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/28439: No such fi=
le
or directory
#=20
2024-01-30
15:14:48|install|okular|23.08.4-1.2|x86_64||openSUSE-20240128-0|7ab44958574=
8ca45227b66763d5376ca5fbba244075330b8d73f02b587fd53244422ea93636ceeee317460=
7716ba5eefdd04d9f995f213419fabfc68c76c9f44|

# 2024-01-30 14:47:14 totem-43.0-4.1.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/15071: No such fi=
le
or directory
#=20
2024-01-30
14:47:14|install|totem|43.0-4.1|x86_64||openSUSE-20240128-0|3d8ec0aa702138c=
b58f9d35681000e67103be5935f22b5b53c27e8f3a5d62c515bfe54ba6c6e6d005659bb7911=
fac213aa09a7f9318842b15c1ccb95bc7a5daa|

# 2024-01-30 14:44:28 emacs-29.1-8.1.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/12259: No such fi=
le
or directory
#=20
2024-01-30
14:44:28|install|emacs|29.1-8.1|x86_64||openSUSE-20240128-0|d19e7b859f1722b=
148afedf38c38031195206837a811f044be73c4292ccad4dac281b494451224633eb9ea3c2d=
5b926a9563d9e844998c5536f407b590fd7132|

There are about 300 of such errors. One week ago there were none.

I guess such errors are related to the macro %(trans)filetriggerin recently
added in the man spec file.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066799431.b10AFE.2552
Date: Wed, 31 Jan 2024 05:45:43 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219370

          Summary
          recent update of package 'man' is causing installation errors

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          comes@naic.edu

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After the recent update of the package 'man' few days ago,
after I complete a tumbleweed installation I see many error message in
/var/log/zypp/history like:

# 2024-01-30 15:14:48 okular-23.08.4-1.2.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/28439: No such fi=
le
or directory
#=20
2024-01-30
15:14:48|install|okular|23.08.4-1.2|x86_64||openSUSE-20240128-0|7ab44958574=
8ca45227b66763d5376ca5fbba244075330b8d73f02b587fd53244422ea93636ceeee317460=
7716ba5eefdd04d9f995f213419fabfc68c76c9f44|

# 2024-01-30 14:47:14 totem-43.0-4.1.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/15071: No such fi=
le
or directory
#=20
2024-01-30
14:47:14|install|totem|43.0-4.1|x86_64||openSUSE-20240128-0|3d8ec0aa702138c=
b58f9d35681000e67103be5935f22b5b53c27e8f3a5d62c515bfe54ba6c6e6d005659bb7911=
fac213aa09a7f9318842b15c1ccb95bc7a5daa|

# 2024-01-30 14:44:28 emacs-29.1-8.1.x86_64.rpm installed ok
# Additional rpm output:
# /usr/bin/mandb: can't create index cache /var/cache/man/12259: No such fi=
le
or directory
#=20
2024-01-30
14:44:28|install|emacs|29.1-8.1|x86_64||openSUSE-20240128-0|d19e7b859f1722b=
148afedf38c38031195206837a811f044be73c4292ccad4dac281b494451224633eb9ea3c2d=
5b926a9563d9e844998c5536f407b590fd7132|

There are about 300 of such errors. One week ago there were none.

I guess such errors are related to the macro %(trans)filetriggerin recently
added in the man spec file.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066799431.b10AFE.2552--


body:
--17066899123.BE9C3.2876
Date: Wed, 31 Jan 2024 08:31:52 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219387

            Bug ID: 1219387
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 121.0.6167.139
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Stable channel has been updated to 121.0.6167.139 for Mac and Linux and
121.0.6167.139/140 to Windows which will roll out over the coming days/week=
s. A
full list of changes in this build is available in the log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majori=
ty
of users are updated with a fix. We will also retain restrictions if the bug
exists in a third party library that other projects similarly depend on, but
haven=E2=80=99t yet fixed.
This update includes 4 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$5000][1511567] High CVE-2024-1060: Use after free in Canvas. Reported by
Anonymous on 2023-12-14
[$3000][1514777] High CVE-2024-1059: Use after free in WebRTC. Reported by
Cassidy Kim(@cassidy6564) on 2023-12-29
[N/A][1511085] High CVE-2024-1077: Use after free in Network. Reported by
Microsoft Security Research Center on 2023-12-13

We would also like to thank all security researchers that worked with us du=
ring
the development cycle to prevent security bugs from ever reaching the stable
channel.
As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:[1523290] Various fixes from internal audits, fuzzing and other
initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySaniti=
zer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzze
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066899123.BE9C3.2876
Date: Wed, 31 Jan 2024 08:31:52 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219387

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 121.0.6167.139

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          gianluca.gabrielli@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The Stable channel has been updated to 121.0.6167.139 for Ma=
c and Linux and
121.0.6167.139/140 to Windows which will roll out over the coming days/week=
s. A
full list of changes in this build is available in the log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majori=
ty
of users are updated with a fix. We will also retain restrictions if the bug
exists in a third party library that other projects similarly depend on, but
haven=E2=80=99t yet fixed.
This update includes 4 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

[$5000][1511567] High CVE-2024-1060: Use after free in Canvas. Reported by
Anonymous on 2023-12-14
[$3000][1514777] High CVE-2024-1059: Use after free in WebRTC. Reported by
Cassidy Kim(@cassidy6564) on 2023-12-29
[N/A][1511085] High CVE-2024-1077: Use after free in Network. Reported by
Microsoft Security Research Center on 2023-12-13

We would also like to thank all security researchers that worked with us du=
ring
the development cycle to prevent security bugs from ever reaching the stable
channel.
As usual, our ongoing internal security work was responsible for a wide ran=
ge
of fixes:[1523290] Various fixes from internal audits, fuzzing and other
initiatives

Many of our security bugs are detected using AddressSanitizer, MemorySaniti=
zer,
UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzze

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066899123.BE9C3.2876--

pkgs: chromium ungoogled-chromium


--17066997851.8FAb985.3395
Date: Wed, 31 Jan 2024 11:16:25 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219405

            Bug ID: 1219405
           Summary: older clang package depends on latest libLLVM
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: shung-hsi.yu-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Trying to install older clang will pull in the latest llvm package (libclan=
g13
and libLLVM17):

> $ zypper install clang16 # (latest is clang17 at the moment)
>=20
> The following 11 NEW packages are going to be installed:
>   clang16 libLLVM16 libLLVM17 libclang-cpp16 libclang-cpp17 libclang13
>   libedit0 libmpdec3 libpython3_11-1_0 python311-base update-alternatives

The problem is likely that c-index-test-16 is incorrectly linked to
/lib64/libclang.so.13 that is created from the latest llvm package (llvm17 =
at
the moment), and that ends up making it linked to both the latest llvm shar=
ed
library (libLLVM.so.17 from llvm17) as well as one in the corresponding pac=
kage
(libLLVM.so.16 from llvm16).

> $ ldd /usr/bin/c-index-test-16.0.6
> 	linux-vdso.so.1 (0x00007ffce2336000)
> 	libclang.so.13 =3D> /lib64/libclang.so.13 (0x00007fb21ca18000)
> 	libclang-cpp.so.16 =3D> /lib64/libclang-cpp.so.16 (0x00007fb218800000)
> 	libxml2.so.2 =3D> /lib64/libxml2.so.2 (0x00007fb218690000)
> 	libLLVM.so.16 =3D> /lib64/libLLVM.so.16 (0x00007fb211200000)
> 	libstdc++.so.6 =3D> /lib64/libstdc++.so.6 (0x00007fb210e00000)
> 	libc.so.6 =3D> /lib64/libc.so.6 (0x00007fb210a00000)
> 	libclang-cpp.so.17 =3D> /lib64/libclang-cpp.so.17 (0x00007fb20c800000)
> 	libLLVM.so.17 =3D> /lib64/libLLVM.so.17 (0x00007fb205200000)
> 	libm.so.6 =3D> /lib64/libm.so.6 (0x00007fb21c92f000)
> 	/lib64/ld-linux-x86-64.so.2 (0x00007fb21cb11000)
> 	libz.so.1 =3D> /lib64/glibc-hwcaps/x86-64-v3/libz.so.1.3 (0x00007fb21867=
6000)
> 	liblzma.so.5 =3D> /lib64/glibc-hwcaps/x86-64-v3/liblzma.so.5.4.5 (0x0000=
7fb21863d000)
> 	libedit.so.0 =3D> /lib64/libedit.so.0 (0x00007fb218601000)
> 	libtinfo.so.6 =3D> /lib64/libtinfo.so.6 (0x00007fb2111c5000)
> 	libgcc_s.so.1 =3D> /lib64/libgcc_s.so.1 (0x00007fb2111a0000)

c-index-test-16.0.6 thus will segfault when ran

> #0 0x00007fccc253d319 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int)=
 (/lib64/libLLVM.so.17+0x3b3d319)
> #1 0x00007fccc253aed2 llvm::sys::RunSignalHandlers() (/lib64/libLLVM.so.1=
7+0x3b3aed2)
> #2 0x00007fccc253db9b (/lib64/libLLVM.so.17+0x3b3db9b)
> #3 0x00007fccca23f190 __restore_rt (/lib64/libc.so.6+0x3f190)
> #4 0x00007fccc724587a (/lib64/libclang-cpp.so.17+0x124587a)
> #5 0x00007fccca2414e1 __cxa_finalize (/lib64/libc.so.6+0x414e1)
> #6 0x00007fccc719c0f7 (/lib64/libclang-cpp.so.17+0x119c0f7)
> Segmentation fault (core dumped)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17066997851.8FAb985.3395
Date: Wed, 31 Jan 2024 11:16:25 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219405

          Summary
          older clang package depends on latest libLLVM

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          shung-hsi.yu@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Trying to install older clang will pull in the latest llvm p=
ackage (libclang13
and libLLVM17):

> $ zypper install clang16 # (latest is clang17 at=
 the moment)
>=20
> The following 11 NEW packages are going to be installed:
>   clang16 libLLVM16 libLLVM17 libclang-cpp16 libclang-cpp17 libclang13
>   libedit0 libmpdec3 libpython3_11-1_0 python311-base update-alternati=
ves

The problem is likely that c-index-test-16 is incorrectly linked to
/lib64/libclang.so.13 that is created from the latest llvm package (llvm17 =
at
the moment), and that ends up making it linked to both the latest llvm shar=
ed
library (libLLVM.so.17 from llvm17) as well as one in the corresponding pac=
kage
(libLLVM.so.16 from llvm16).

> $ ldd /usr/bin/c-index-test-16.0.6
> 	linux-vdso.so.1 (0x00007ffce2336000)
> 	libclang.so.13 =3D> /lib64/libclang.so.13 (0x00007fb21ca18000)
> 	libclang-cpp.so.16 =3D> /lib64/libclang-cpp.so.16 (0x00007fb218800=
000)
> 	libxml2.so.2 =3D> /lib64/libxml2.so.2 (0x00007fb218690000)
> 	libLLVM.so.16 =3D> /lib64/libLLVM.so.16 (0x00007fb211200000)
> 	libstdc++.so.6 =3D> /lib64/libstdc++.so.6 (0x00007fb210e00000)
> 	libc.so.6 =3D> /lib64/libc.so.6 (0x00007fb210a00000)
> 	libclang-cpp.so.17 =3D> /lib64/libclang-cpp.so.17 (0x00007fb20c800=
000)
> 	libLLVM.so.17 =3D> /lib64/libLLVM.so.17 (0x00007fb205200000)
> 	libm.so.6 =3D> /lib64/libm.so.6 (0x00007fb21c92f000)
> 	/lib64/ld-linux-x86-64.so.2 (0x00007fb21cb11000)
> 	libz.so.1 =3D> /lib64/glibc-hwcaps/x86-64-v3/libz.so.1.3 (0x00007f=
b218676000)
> 	liblzma.so.5 =3D> /lib64/glibc-hwcaps/x86-64-v3/liblzma.so.5.4.5 (=
0x00007fb21863d000)
> 	libedit.so.0 =3D> /lib64/libedit.so.0 (0x00007fb218601000)
> 	libtinfo.so.6 =3D> /lib64/libtinfo.so.6 (0x00007fb2111c5000)
> 	libgcc_s.so.1 =3D> /lib64/libgcc_s.so.1 (0x00007fb2111a0000)

c-index-test-16.0.6 thus will segfault when ran

> #0 0x00007fccc253d319 llvm::sys::PrintStackTrace=
(llvm::raw_ostream&, int) (/lib64/libLLVM.so.17+0x3b3d319)
> #1 0x00007fccc253aed2 llvm::sys::RunSignalHandlers() (/lib64/libLLVM.s=
o.17+0x3b3aed2)
> #2 0x00007fccc253db9b (/lib64/libLLVM.so.17+0x3b3db9b)
> #3 0x00007fccca23f190 __restore_rt (/lib64/libc.so.6+0x3f190)
> #4 0x00007fccc724587a (/lib64/libclang-cpp.so.17+0x124587a)
> #5 0x00007fccca2414e1 __cxa_finalize (/lib64/libc.so.6+0x414e1)
> #6 0x00007fccc719c0f7 (/lib64/libclang-cpp.so.17+0x119c0f7)
> Segmentation fault (core dumped)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17066997851.8FAb985.3395--


body:
--17068680071.Eb4ce0dfF.7176
Date: Fri, 2 Feb 2024 10:00:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219494

            Bug ID: 1219494
           Summary: libmfx no longer supported
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X.Org
          Assignee: gfx-bugs-at-suse.de
          Reporter: sndirsch-at-suse.com
        QA Contact: gfx-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

libmfx is no longer supported

https://github.com/Intel-Media-SDK/MediaSDK

DISCONTINUATION OF PROJECT.
This project will no longer be maintained by Intel.
This project has been identified as having known security escapes.
Intel has ceased development and contributions including, but not limited t=
o,
maintenance, bug and security fixes, new releases, or updates, to this proj=
ect.
Intel no longer accepts patches to this project.
If you have an ongoing need to use this project, are interested in
independently developing it, or would like to maintain patches for the open
source software community, please create your own fork of this project.
[...]

Let's get rid of it, i.e. remove the support from the following affected
packages

libavfilter7_110
libavutil56_70
libavcodec58_134
--> ffmpeg-4

vlc-noX
--> vlc

libavfilter8
libavutil57
libavcodec59
--> ffmpeg-5

gstreamer-plugins-bad
--> gstreamer-plugins-bad

Then drop libmfx package (includes libmfx-samples subpackage).
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17068680071.Eb4ce0dfF.7176
Date: Fri, 2 Feb 2024 10:00:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219494

          Summary
          libmfx no longer supported

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X.Org

          Assignee
          gfx-bugs@suse.de

          Reporter
          sndirsch@suse.com

          QA Contact
          gfx-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

libmfx is no longer supported

https://github.com/=
Intel-Media-SDK/MediaSDK

DISCONTINUATION OF PROJECT.
This project will no longer be maintained by Intel.
This project has been identified as having known security escapes.
Intel has ceased development and contributions including, but not limited t=
o,
maintenance, bug and security fixes, new releases, or updates, to this proj=
ect.
Intel no longer accepts patches to this project.
If you have an ongoing need to use this project, are interested in
independently developing it, or would like to maintain patches for the open
source software community, please create your own fork of this project.
[...]

Let's get rid of it, i.e. remove the support from the following affected
packages

libavfilter7_110
libavutil56_70
libavcodec58_134
--> ffmpeg-4

vlc-noX
--> vlc

libavfilter8
libavutil57
libavcodec59
--> ffmpeg-5

gstreamer-plugins-bad
--> gstreamer-plugins-bad

Then drop libmfx package (includes libmfx-samples subpackage).

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17068680071.Eb4ce0dfF.7176--

summary: libmfx no longer supported


body:
--17069817670.E350aEe8F.8821
Date: Sat, 3 Feb 2024 17:36:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219522

            Bug ID: 1219522
           Summary: Kernel panic with 6.7.x version
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: e.kleinmentink-at-zonnet.nl
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 872422
  --> https://bugzilla.suse.com/attachment.cgi?id=3D872422&action=3Dedit
dmesg 6.6.11-1 kernel

I get a kernel panic since the 6.7.x kernels.
The capslock key is flickering and if i use the "recovery mode" i usually s=
ee:
  [T8] psmouse serio1: synaptics: Touchpad model: 1, fw: 8.16, id: 0x1e2b1,
caps: 0xf01fa3/0x940300/0x12e800/0x400000, board id: 3276, fw id: 2700068
  [T8] psmouse serio1: synaptics: serio: Synaptics pass-through port at
isa0060/serio1/input0
  [T8] input: SynPS/2 Synaptics TouchPad as
/devices/platform/i8042/serio1/input/input2

I have no idea how to debug this. No error message. In the past i applied a
kernel bisect (for debian i think) but i could not find a guide for Tumblew=
eed.

Hardware: Lenovo T580

Grub menu contains:
* 6.7.2-1
* 6.7.1-2
* 6.6.11-1

Included a "dmesg" output of a normal boot with the "6.6.11-1" kernel.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17069817670.E350aEe8F.8821
Date: Sat, 3 Feb 2024 17:36:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219522

          Summary
          Kernel panic with 6.7.x version

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          e.kleinmentink@zonnet.nl

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 87242=
2 [details]
dmesg 6.6.11-1 kernel

I get a kernel panic since the 6.7.x kernels.
The capslock key is flickering and if i use the "recovery mode" i=
 usually see:
  [T8] psmouse serio1: synaptics: Touchpad model: 1, fw: 8.16, id: 0x1e2b1,
caps: 0xf01fa3/0x940300/0x12e800/0x400000, board id: 3276, fw id: 2700068
  [T8] psmouse serio1: synaptics: serio: Synaptics pass-through port at
isa0060/serio1/input0
  [T8] input: SynPS/2 Synaptics TouchPad as
/devices/platform/i8042/serio1/input/input2

I have no idea how to debug this. No error message. In the past i applied a
kernel bisect (for debian i think) but i could not find a guide for Tumblew=
eed.

Hardware: Lenovo T580

Grub menu contains:
* 6.7.2-1
* 6.7.1-2
* 6.6.11-1

Included a "dmesg" output of a normal boot with the "6.6.11-=
1" kernel.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17069817670.E350aEe8F.8821--

summary: Kernel panic with 6.7.x version


body:
--17070013151.EBC5.8902
Date: Sat, 3 Feb 2024 23:01:55 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219527

            Bug ID: 1219527
           Summary: abcde breaks on non-octal track numbers
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: x86-64
                OS: openSUSE Leap 15.5
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: geoff-at-cs.hmc.edu
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 872425
  --> https://bugzilla.suse.com/attachment.cgi?id=3D872425&action=3Dedit
Patch to /usr/bin/abcde

abcde pads track numbers with a leading zero but later does some bash
arithmetic on the track number.  That breaks for track numbers 8 and 9, bec=
ause
09 isn't an octal number.

Reproduce by inserting an 8+ track CD and running "abcde -T 1 8-8".

The attached patch will correct the problem for any CD having 99 or fewer
tracks.  (As far as I know, 99 is the track limit for CDs, though I definit=
ely
could be wrong.)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17070013151.EBC5.8902
Date: Sat, 3 Feb 2024 23:01:55 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219527

          Summary
          abcde breaks on non-octal track numbers

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          x86-64

          OS
          openSUSE Leap 15.5

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          geoff@cs.hmc.edu

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 872425 [details]
Patch to /usr/bin/abcde

abcde pads track numbers with a leading zero but later does some bash
arithmetic on the track number.  That breaks for track numbers 8 and 9, bec=
ause
09 isn't an octal number.

Reproduce by inserting an 8+ track CD and running "abcde -T 1 8-8&quot=
;.

The attached patch will correct the problem for any CD having 99 or fewer
tracks.  (As far as I know, 99 is the track limit for CDs, though I definit=
ely
could be wrong.)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17070013151.EBC5.8902--

summary: abcde breaks on non-octal track numbers


--17070102702.4c111.8953
Date: Sun, 4 Feb 2024 01:31:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219530

            Bug ID: 1219530
           Summary: [Build 20240202] openQA test fails in tomcat
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3913723/modules/tomc
                    at/steps/14
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Java
          Assignee: java-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

The introduction of rpm 4.19 resulted in this error

Any package that declares special owner on files get an automatic dependenc=
y on
the respective user/group.

If said user/group are generated by means of Stausees.d, the provides are
automatically added by rpm.

In case the user is manually created using add user/add group in a pre scri=
pt,
the capability needs to be manually advertised using
provides: user(username)
Provides: group(group name)

Preferably the packages are converted to sysusers to generate the user, but
manually adding the provides is a valid stop-measure.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-tomcat@64bit fails in
[tomcat](https://openqa.opensuse.org/tests/3913723/modules/tomcat/steps/14)

## Test suite description
Maintainer: zluo-at-suse.de
Install and test tomcat on Tumbleweed.

## Reproducible

Fails since (at least) Build
[20240202](https://openqa.opensuse.org/tests/3913723) (current job)

## Expected result

Last good: [20240201](https://openqa.opensuse.org/tests/3910782) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dtomcat&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17070102702.4c111.8953
Date: Sun, 4 Feb 2024 01:31:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219530

          Summary
          [Build 20240202] openQA test fails in tomcat

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/3913723/modules/tomcat/step=
s/14

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Java

          Assignee
          java-maintainers@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

The introduction of rpm 4.19 resulted in this error

Any package that declares special owner on files get an automatic dependenc=
y on
the respective user/group.

If said user/group are generated by means of Stausees.d, the provides are
automatically added by rpm.

In case the user is manually created using add user/add group in a pre scri=
pt,
the capability needs to be manually advertised using
provides: user(username)
Provides: group(group name)

Preferably the packages are converted to sysusers to generate the user, but
manually adding the provides is a valid stop-measure.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-tomcat@64bit fai=
ls in
[tomcat](https://openqa.opensuse.org/tests/3913723/modules/tomcat/steps/=
14)

## Test suite description
Maintainer: zluo@suse.de
Install and test tomcat on Tumbleweed.

## Reproducible

Fails since (at least) Build
[20240202](https://op=
enqa.opensuse.org/tests/3913723) (current job)

## Expected result

Last good: [20240201](https://openqa.opensuse.org/tests/3910782) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=
=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D64bit&te=
st=3Dtomcat&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17070102702.4c111.8953--


--17070296810.aCEb.9082
Date: Sun, 4 Feb 2024 06:54:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219540

            Bug ID: 1219540
           Summary: [Build 20240202] RMT Server uninstallable - missing user provides
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/3914067/modules/yast
                    2_rmt/steps/4
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: YaST2
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

The introduction of rpm 4.19 resulted in this error

Any package that declares special owner on files get an automatic dependenc=
y on
the respective user/group.

If said user/group are generated by means of Stausees.d, the provides are
automatically added by rpm.

In case the user is manually created using add user/add group in a pre scri=
pt,
the capability needs to be manually advertised using
provides: user(username)
Provides: group(group name)

Preferably the packages are converted to sysusers to generate the user, but
manually adding the provides is a valid stop-measure.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_ncurses@64bit
fails in
[yast2_rmt](https://openqa.opensuse.org/tests/3914067/modules/yast2_rmt/ste=
ps/4)

## Test suite description
Maintainer: qsf-y Test for yast2 UI, ncurses only. Running on created gnome
images which provides both text console for ncurses UI tests as well as the
gnome environment for the GUI tests.
riafarov set TIMEOUT_SCALE to improve stability of the test.

## Reproducible

Fails since (at least) Build
[20221123](https://openqa.opensuse.org/tests/2899189)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dyast2_ncurses&version=3DTumblewe=
ed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17070296810.aCEb.9082
Date: Sun, 4 Feb 2024 06:54:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219540

          Summary
          [Build 20240202] RMT Server uninstallable - missing user prov=
ides

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/3914067/modules/yast2_rmt/s=
teps/4

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          YaST2

          Assignee
          yast2-maintainers@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

The introduction of rpm 4.19 resulted in this error

Any package that declares special owner on files get an automatic dependenc=
y on
the respective user/group.

If said user/group are generated by means of Stausees.d, the provides are
automatically added by rpm.

In case the user is manually created using add user/add group in a pre scri=
pt,
the capability needs to be manually advertised using
provides: user(username)
Provides: group(group name)

Preferably the packages are converted to sysusers to generate the user, but
manually adding the provides is a valid stop-measure.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-yast2_ncurses@64=
bit
fails in
[yast2_rmt](https://openqa.opensuse.org/tests/3914067/modules/yast2_rm=
t/steps/4)

## Test suite description
Maintainer: qsf-y Test for yast2 UI, ncurses only. Running on created gnome
images which provides both text console for ncurses UI tests as well as the
gnome environment for the GUI tests.
riafarov set TIMEOUT_SCALE to improve stability of the test.

## Reproducible

Fails since (at least) Build
[20221123](https://op=
enqa.opensuse.org/tests/2899189)

## Expected result

Last good: (unknown) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest=
?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D64bit&a=
mp;test=3Dyast2_ncurses&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17070296810.aCEb.9082--


--17071299782.bea84.10074
Date: Mon, 5 Feb 2024 10:46:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219562

            Bug ID: 1219562
           Summary: zypper dup killed zypper: can't open librpm.so.9
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: libzypp
          Assignee: zypp-maintainers-at-suse.de
          Reporter: shundhammer-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After not updating my TW VM for two weeks (last zypper dup: 2024-01-17),
today's 'zypper dup' destroyed the package management stack:

(all commands entered as root)

# zypper dup -y --download-only

  (worked without any problem, downloaded 3181 packages)

# zypper dup -y

( 330/3181) Installing: openssl-3-3.1.4-3.2.x86_64
...........................................................................=
................[error]
Installation of openssl-3-3.1.4-3.2.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: Command exited with status 1.
Abort, retry, ignore? [a/r/i] (a): a
Warning: %posttrans and %transfiletrigger scripts are not executed when
aborting!

Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.

# zypper dup -y
zypper: error while loading shared libraries: librpm.so.9: cannot open shar=
ed
object file: No such file or directory

# ldconfig
# zypper dup -y

zypper: error while loading shared libraries: librpm.so.9: cannot open shar=
ed
object file: No such file or directory
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17071299782.bea84.10074
Date: Mon, 5 Feb 2024 10:46:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219562

          Summary
          zypper dup killed zypper: can't open librpm.so.9

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          libzypp

          Assignee
          zypp-maintainers@suse.de

          Reporter
          shundhammer@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After not updating my TW VM for two weeks (last zypper dup: =
2024-01-17),
today's 'zypper dup' destroyed the package management stack:

(all commands entered as root)

# zypper dup -y --download-only

  (worked without any problem, downloaded 3181 packages)

# zypper dup -y

( 330/3181) Installing: openssl-3-3.1.4-3.2.x86_64
...........................................................................=
................[error]
Installation of openssl-3-3.1.4-3.2.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: Command exited with status 1.
Abort, retry, ignore? [a/r/i] (a): a
Warning: %posttrans and %transfiletrigger scripts are not executed when
aborting!

Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.

# zypper dup -y
zypper: error while loading shared libraries: librpm.so.9: cannot open shar=
ed
object file: No such file or directory

# ldconfig
# zypper dup -y

zypper: error while loading shared libraries: librpm.so.9: cannot open shar=
ed
object file: No such file or directory

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17071299782.bea84.10074--


--17071408210.DB993d.10575
Date: Mon, 5 Feb 2024 13:47:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219571

            Bug ID: 1219571
           Summary: profiles: openssl 1.1 requires /etc/ssl/engines3.d/ path access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: AppArmor
          Assignee: ddiss-at-suse.com
          Reporter: ddiss-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mrueckert-at-suse.com, suse-beta-at-cboltz.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

darix reported the following AVCs following when running nginx alongside
openssl 1.1 :

type=3DAVC msg=3Daudit(X): apparmor=3D"DENIED" operation=3D"open" class=3D"=
file"
profile=3D"nginx" name=3D"/etc/ssl/engines3.d/" pid=3DY comm=3D"nginx"
requested_mask=3D"r" denied_mask=3D"r" fsuid=3D0 ouid=3D0

type=3DAVC msg=3Daudit(X+1): apparmor=3D"DENIED" operation=3D"open" class=
=3D"file"
profile=3D"nginx" name=3D"/etc/ssl/engdef3.d/" pid=3DY comm=3D"nginx"
requested_mask=3D"r" denied_mask=3D"r" fsuid=3D0 ouid=3D0

Presumably we need something like:

-


--17071955571.B5CdFF5A.11792
Date: Tue, 6 Feb 2024 04:59:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219600

            Bug ID: 1219600
           Summary: Unable to update / Install packages - nothing provides 'group(name)' needed by the to be installed package
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Upgrade Problems
          Assignee: screening-team-bugs-at-suse.de
          Reporter: william.brown-at-suse.com
        QA Contact: jsrain-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Multiple packages (freeradius-server-3.2.3-2.3.x86_64,
freeradius-server-python3-3.2.3-2.3.x86_64, nagios-www-4.4.7-2.7.x86_64,
nagios-4.4.7-2.7.x86_64, monitoring-plugins-nrpe-4.0.3-6.3.x86_64 and likely
more) are unable to be installed or updated. This appears to be due to chan=
ges
in RPM that were introduced per
https://lists.opensuse.org/archives/list/factory-at-lists.opensuse.org/thread/=
HG2JKUIKDTWQQIQSA43A4VWHX7YKJQT3/=20

This prevents container pipelines from working, packages installing, or oth=
er
system updates from being able to proceed.=20

Similar issue: https://bugzilla.opensuse.org/show_bug.cgi?id=3D1219586
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17071955571.B5CdFF5A.11792
Date: Tue, 6 Feb 2024 04:59:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219600

          Summary
          Unable to update / Install packages - nothing provides 'group=
(name)' needed by the to be installed package

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Upgrade Problems

          Assignee
          screening-team-bugs@suse.de

          Reporter
          william.brown@suse.com

          QA Contact
          jsrain@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Multiple packages (freeradius-server-3.2.3-2.3.x86_64,
freeradius-server-python3-3.2.3-2.3.x86_64, nagios-www-4.4.7-2.7.x86_64,
nagios-4.4.7-2.7.x86_64, monitoring-plugins-nrpe-4.0.3-6.3.x86_64 and likely
more) are unable to be installed or updated. This appears to be due to chan=
ges
in RPM that were introduced per
https://lists.opensuse.or=
g/archives/list/factory@lists.opensuse.org/thread/HG2JKUIKDTWQQIQSA43A4=
VWHX7YKJQT3/=20

This prevents container pipelines from working, packages installing, or oth=
er
system updates from being able to proceed.=20

Similar issue: https://bugzilla.opensuse.org/show_bug.cgi?id=3D1219586

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17071955571.B5CdFF5A.11792--


--17072234623.eccCDA8.12662
Date: Tue, 6 Feb 2024 12:44:22 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219626

            Bug ID: 1219626
           Summary: Arrow keys do not work in some ncurses program (less, ncdu, ...) running under urxvt
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: pujos.michael-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since recently (unfortunately cannot tell which snapshot exactly), arrow ke=
ys
(up/down/left/right) do not work anymore in some programs using ncurses,
including 'less' and 'ncdu' when they are run under urxvt terminal.

xterm works properly and so do urxvt if the terminal is changed to xterm's =
with
'urxvt -tn xterm-256color'. For now, it can be worked-around permanently=20
adding 'URxvt.termName: xterm-256color' to ~/.Xdefaults.

So it seems the culprit might be the terminfo definition of
'rxvt-unicode-256color' which is the default TERM urxvt set itself to.
I also see there has been a lot of recent changes in packages libncurses6 a=
nd
terminfo, so there's that.

It would be great to have this fixed as it should not be necessary to fiddle
with TERM to have urxvt working fine with ncurses.

Interestingly, if launching 'man man' (which will spawn less, which is
affected), then typing / for search, then typing left,right,up,down arrow
characters in sequence, this is what is displayed in the less bottom
command-line:

/ESCODESCOCESCOAESCOB

For some reasons, escape sequences are displayed.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072234623.eccCDA8.12662
Date: Tue, 6 Feb 2024 12:44:22 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219626

          Summary
          Arrow keys do not work in some ncurses program (less, ncdu, .=
..) running under urxvt

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          pujos.michael@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Since recently (unfortunately cannot tell which snapshot exa=
ctly), arrow keys
(up/down/left/right) do not work anymore in some programs using ncurses,
including 'less' and 'ncdu' when they are run under urxvt terminal.

xterm works properly and so do urxvt if the terminal is changed to xterm's =
with
'urxvt -tn xterm-256color'. For now, it can be worked-around permanently=20
adding 'URxvt.termName: xterm-256color' to ~/.Xdefaults.

So it seems the culprit might be the terminfo definition of
'rxvt-unicode-256color' which is the default TERM urxvt set itself to.
I also see there has been a lot of recent changes in packages libncurses6 a=
nd
terminfo, so there's that.

It would be great to have this fixed as it should not be necessary to fiddle
with TERM to have urxvt working fine with ncurses.

Interestingly, if launching 'man man' (which will spawn less, which is
affected), then typing / for search, then typing left,right,up,down arrow
characters in sequence, this is what is displayed in the less bottom
command-line:

/ESCODESCOCESCOAESCOB

For some reasons, escape sequences are displayed.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072234623.eccCDA8.12662--


--17072268171.C06c04d.12818
Date: Tue, 6 Feb 2024 13:40:17 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219627

            Bug ID: 1219627
           Summary: RPM uses wrong target triple for armvX since switch to cmake
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: mls-at-suse.com
          Reporter: fvogt-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Before RPM 4.19, the .spec file had

%ifarch %arm
BUILDTARGET=3D"--build=3D%{_target_cpu}-suse-linux-gnueabi"
%elifarch x86_64 %x86_64
BUILDTARGET=3D"--build=3Dx86_64-suse-linux"
%else
BUILDTARGET=3D"--build=3D%{_target_cpu}-suse-linux"
%endif

This is now gone and I don't see a way to easily do that with cmake.

The result is that for e.g. armv7hl, the host macros changed:

Before:

%_host                  armv7hl-suse-linux-gnueabi
%_host_alias            armv7hl-suse-linux-gnueabi%{nil}
%_host_cpu              armv7hl
%_host_vendor           suse
%_host_os               linux

After:

%_host                  armv7l-suse-linux
%_host_alias            armv7l-suse-linux%{nil}
%_host_cpu              armv7l
%_host_vendor           suse
%_host_os               linux

This means that binaries built for armv7hl have the wrong %_host specified,
whic h is also used in %configure to set --host.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072268171.C06c04d.12818
Date: Tue, 6 Feb 2024 13:40:17 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219627

          Summary
          RPM uses wrong target triple for armvX since switch to cmake

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          mls@suse.com

          Reporter
          fvogt@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Before RPM 4.19, the .spec file had

%ifarch %arm
BUILDTARGET=3D"--build=3D%{_target_cpu}-suse-linux-gnueabi"
%elifarch x86_64 %x86_64
BUILDTARGET=3D"--build=3Dx86_64-suse-linux"
%else
BUILDTARGET=3D"--build=3D%{_target_cpu}-suse-linux"
%endif

This is now gone and I don't see a way to easily do that with cmake.

The result is that for e.g. armv7hl, the host macros changed:

Before:

%_host                  armv7hl-suse-linux-gnueabi
%_host_alias            armv7hl-suse-linux-gnueabi%{nil}
%_host_cpu              armv7hl
%_host_vendor           suse
%_host_os               linux

After:

%_host                  armv7l-suse-linux
%_host_alias            armv7l-suse-linux%{nil}
%_host_cpu              armv7l
%_host_vendor           suse
%_host_os               linux

This means that binaries built for armv7hl have the wrong %_host specified,
whic h is also used in %configure to set --host.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072268171.C06c04d.12818--


--17072561661.A0827899c.13636
Date: Tue, 6 Feb 2024 21:49:26 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219640

            Bug ID: 1219640
           Summary: libnsl.so.1 no longer provided by glibc-32bit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: javispedro-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

A recent change in glibc in TW=20
https://build.opensuse.org/request/show/1141234
has split libnsl.so.1 into a separate package called libnsl1=20

However the corresponding libnsl1-32bit package is not built.=20
I'm not sure if this intentional or not, but a lot of x86 packages out ther=
e in
the wild depend (correctly or not) on libnsl.1.so, and this change makes th=
em
uninstallable.

Example: Crossover https://www.codeweavers.com/crossover/download
 > rpm -q --requires crossover-23.7.1-1.rpm
 ...
 libnsl.so.1

If this was intentional, please consider this as a humble request to add the
libnsl1-32bit package.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072561661.A0827899c.13636
Date: Tue, 6 Feb 2024 21:49:26 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219640

          Summary
          libnsl.so.1 no longer provided by glibc-32bit

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          javispedro@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

A recent change in glibc in TW=20
https://build.o=
pensuse.org/request/show/1141234
has split libnsl.so.1 into a separate package called libnsl1=20

However the corresponding libnsl1-32bit package is not built.=20
I'm not sure if this intentional or not, but a lot of x86 packages out ther=
e in
the wild depend (correctly or not) on libnsl.1.so, and this change makes th=
em
uninstallable.

Example: Crossover https://www.codeweavers.com/crossover/download
 > rpm -q --requires crossover-23.7.1-1.rpm
 ...
 libnsl.so.1

If this was intentional, please consider this as a humble request to add the
libnsl1-32bit package.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072561661.A0827899c.13636--


--17072872871.Bf3dc4B26.13924
Date: Wed, 7 Feb 2024 06:28:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219652

            Bug ID: 1219652
           Summary: after update to Leap 15.5 rdiff-backup is missing some python packages
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.5
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jgross-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

After having done an update from Leap 15.4 to Leap 15.5 rdiff-backup isn't
working an more due to missing Python packages python3-PyYAML and
python3-importlib-metadata.

After manually installing those packages everything works again.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072872871.Bf3dc4B26.13924
Date: Wed, 7 Feb 2024 06:28:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219652

          Summary
          after update to Leap 15.5 rdiff-backup is missing some python=
 packages

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.5

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jgross@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

After having done an update from Leap 15.4 to Leap 15.5 rdif=
f-backup isn't
working an more due to missing Python packages python3-PyYAML and
python3-importlib-metadata.

After manually installing those packages everything works again.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072872871.Bf3dc4B26.13924--


--17073081761.372B9.14773
Date: Wed, 7 Feb 2024 12:16:16 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219674

            Bug ID: 1219674
           Summary: nothing provides group(ddclient) and group(mailman)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: comes-at-naic.edu
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

If I try to install ddclient I get
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17073081761.372B9.14773
Date: Wed, 7 Feb 2024 12:16:16 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219674

          Summary
          nothing provides group(ddclient) and group(mailman)

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          comes@naic.edu

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

If I try to install ddclient I get

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17073081761.372B9.14773--


--17073040823.67562Ab.14629
Date: Wed, 7 Feb 2024 11:08:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219672

            Bug ID: 1219672
           Summary: syslog-ng-dev marked with incorrect dependencies
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: opensuse@1.opensuse.bgcomp.co.uk
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

With tumbleweed, syslog-ng has been built with openssl3, not openssl-1_1.

However, the dev package has been marked as requiring libopenssl-1_1-devel.

Could this please be corrected.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17073040823.67562Ab.14629
Date: Wed, 7 Feb 2024 11:08:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219672

          Summary
          syslog-ng-dev marked with incorrect dependencies

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          opensuse@1.opensuse.bgcomp.co.uk

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

With tumbleweed, syslog-ng has been built with openssl3, not=
 openssl-1_1.

However, the dev package has been marked as requiring libopenssl-1_1-devel.

Could this please be corrected.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17073040823.67562Ab.14629--


--17072912767.e4236fb.14011
Date: Wed, 7 Feb 2024 07:34:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219656

            Bug ID: 1219656
           Summary: AUDIT-WHITELIST: aaa_base: sysctl-file-digest-mismatch /usr/lib/sysctl.d/52-yama.conf
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Last upload of aaa_base https://build.opensuse.org/request/show/1143637 has
triggered:

[   25s] aaa_base.i586: E: sysctl-file-digest-mismatch (Badness: 10000)
/usr/lib/sysctl.d/52-yama.conf expected
sha256:e874c084daaf0035d29687ec65275ad5b429ca312b72ef7f6362d2fd9d5bcc46,
has:f801b862fe65a66ff56283254946e86016212977dd8583ac65d1a650b94131a8
[   25s] A whitelisting related sysctl.d drop-in file changed in content.
Packaging
[   25s] sysctl.d drop in configuration files requires a review and
whitelisting by the
[   25s] SUSE security team. If the package is intended for inclusion in any
SUSE
[   25s] product please open a bug report to request review of the package =
by
the
[   25s] security team. Please refer to
[   25s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[   25s] more information.

Thank you.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072912767.e4236fb.14011
Date: Wed, 7 Feb 2024 07:34:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219656

          Summary
          AUDIT-WHITELIST: aaa_base: sysctl-file-digest-mismatch /usr/l=
ib/sysctl.d/52-yama.conf

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          ana.guerrero@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Last upload of aaa_base https://build.opensuse.org/request/show/1143637=
 has
triggered:

[   25s] aaa_base.i586: E: sysctl-file-digest-mismatch (Badness: 10000)
/usr/lib/sysctl.d/52-yama.conf expected
sha256:e874c084daaf0035d29687ec65275ad5b429ca312b72ef7f6362d2fd9d5bcc46,
has:f801b862fe65a66ff56283254946e86016212977dd8583ac65d1a650b94131a8
[   25s] A whitelisting related sysctl.d drop-in file changed in content.
Packaging
[   25s] sysctl.d drop in configuration files requires a review and
whitelisting by the
[   25s] SUSE security team. If the package is intended for inclusion in any
SUSE
[   25s] product please open a bug report to request review of the package =
by
the
[   25s] security team. Please refer to
[   25s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit=
_bugs for
[   25s] more information.

Thank you.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072912767.e4236fb.14011--


body:
--17072954130.9be4b40E.14170
Date: Wed, 7 Feb 2024 08:43:33 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219661

            Bug ID: 1219661
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 121.0.6167.160
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: thomas.leroy-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: gmbr3-at-opensuse.org, m.szczepaniak.000-at-gmail.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The Stable channel has been updated to 121.0.6167.160 for Mac and Linux and
121.0.6167.160/161 to Windows which will roll out over the coming days/week=
s. A
full list of changes in this build is available in the log.

Security Fixes and Rewards

This update includes 3 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

- High CVE-2024-1284: Use after free in Mojo. Reported by Anonymous on
2024-01-25
- High CVE-2024-1283: Heap buffer overflow in Skia. Reported by Jorge Buzeti
(@r3tr074) on 2024-01-25

References:
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-des=
ktop.html
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17072954130.9be4b40E.14170
Date: Wed, 7 Feb 2024 08:43:33 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219661

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 121.0.6167.160

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          thomas.leroy@suse.com

          QA Contact
          security-team@suse.de

          CC
          gmbr3@opensuse.org, m.szczepaniak.000@gmail.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The Stable channel has been updated to 121.0.6167.160 for Ma=
c and Linux and
121.0.6167.160/161 to Windows which will roll out over the coming days/week=
s. A
full list of changes in this build is available in the log.

Security Fixes and Rewards

This update includes 3 security fixes. Below, we highlight fixes that were
contributed by external researchers. Please see the Chrome Security Page for
more information.

- High CVE-2024-1284: Use after free in Mojo. Reported by Anonymous on
2024-01-25
- High CVE-2024-1283: Heap buffer overflow in Skia. Reported by Jorge Buzeti
(@r3tr074) on 2024-01-25

References:
https://chromereleases.googleblog.com/2024/02/stable-=
channel-update-for-desktop.html

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17072954130.9be4b40E.14170--


--17073828024.cA1eB5.16617
Date: Thu, 8 Feb 2024 09:00:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1219722

            Bug ID: 1219722
           Summary: QEMU: [ipxe] Apply patch to build with newer Binutils
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KVM
          Assignee: kvm-bugs-at-suse.de
          Reporter: burnus-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: dfaggioli-at-suse.com, matz-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Namely, a patch like

https://gitlab.com/qemu-project/ipxe/-/commit/6ca597eee9f95b846a3c2dc1231e6=
3cfc02272c1

--------<cut>-------------
[build] Fix building with newer binutils

Newer versions of the GNU assembler (observed with binutils 2.41) will
complain about the ".arch i386" in files assembled with "as --64",
with the message "Error: 64bit mode not supported on 'i386'".

In files such as stack.S that contain no instructions to be assembled,
the ".arch i386" is redundant and may be removed entirely.

In the remaining files, fix by moving ".arch i386" below the relevant
".code16" or ".code32" directive, so that the assembler is no longer
expecting 64-bit instructions to be used by the time that the ".arch
i386" directive is encountered.
-----------</cut>--------------------------------------

This is visible the builds run for
https://build.opensuse.org/request/show/1144349 - namely:

[ 2881s] arch/x86/core/patch_cf.S: Assembler messages:
[ 2881s] arch/x86/core/patch_cf.S:26: Warning: 64bit mode not supported on
`i386' (consider swapping .arch and .code directives).
[ 2881s] {standard input}: Error: 1 warning, treating warnings as errors
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17073828024.cA1eB5.16617
Date: Thu, 8 Feb 2024 09:00:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1219722

          Summary
          QEMU: [ipxe] Apply patch to build with newer Binutils

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KVM

          Assignee
          kvm-bugs@suse.de

          Reporter
          burnus@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          dfaggioli@suse.com, matz@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Namely, a patch like

https://gitlab.com/qemu-project/ipxe/-/commit/6ca59=
7eee9f95b846a3c2dc1231e63cfc02272c1

--------<cut>-------------
[build] Fix building with newer binutils

Newer versions of the GNU assembler (observed with binutils 2.41) will
complain about the ".arch i386" in files assembled with "as =
--64",
with the message "Error: 64bit mode not supported on 'i386'".

In files such as stack.S that contain no instructions to be assembled,
the ".arch i386" is redundant and may be removed entirely.

In the remaining files, fix by moving ".arch i386" below the rele=
vant
".code16" or ".code32" directive, so that the assembler=
 is no longer
expecting 64-bit instructions to be used by the time that the ".arch
i386" directive is encountered.
-----------</cut>--------------------------------------

This is visible the builds run for
https://build.o=
pensuse.org/request/show/1144349 - namely:

[ 2881s] arch/x86/core/patch_cf.S: Assembler messages:
[ 2881s] arch/x86/core/patch_cf.S:26: Warning: 64bit mode not supported on
`i386' (consider swapping .arch and .code directives).
[ 2881s] {standard input}: Error: 1 warning, treating warnings as errors

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17073828024.cA1eB5.16617--