body:
--1556029948.72A54.17460
Date: Tue, 23 Apr 2019 14:32:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133118

            Bug ID: 1133118
           Summary: LTO: clutter build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  189s] Invalid GType function: 'clutter_point_get_type'
[  189s] Failed to find symbol 'clutter_point_get_type'
[  189s] Command
'['/home/abuild/rpmbuild/BUILD/clutter-1.26.2/clutter/tmp-introspectz0jmc5y8/Clutter-1.0',
'--introspect-dump=/home/abuild/rpmbuild/BUILD/clutter-1.26.2/clutter/tmp-introspectz0jmc5y8/functions.txt,/home/abuild/rpmbuild/BUILD/clutter-1.26.2/clutter/tmp-introspectz0jmc5y8/dump.xml']'
returned non-zero exit status 1.
[  190s] make[2]: ***
[/usr/share/gobject-introspection-1.0/Makefile.introspection:156:
Clutter-1.0.gir] Error 1

As reported here:
https://gitlab.gnome.org/GNOME/gtk/issues/1309

It's a more common issue:
https://en.opensuse.org/openSUSE:LTO#GObject_Introspection

summary: LTO: clutter build fails


body:
--1556030008.84e3F4.17489
Date: Tue, 23 Apr 2019 14:33:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133119

            Bug ID: 1133119
           Summary: LTO: gtk3 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  745s] Invalid GType function: 'gtk_accel_group_get_type'
[  745s] Failed to find symbol 'gtk_accel_group_get_type'
[  745s] gtkentry.c:2104: Warning: Gtk: multiple comment blocks documenting
'GtkEntry:inner-border:' identifier (already seen at gtkentry.c:888).

It's a more common issue:
https://en.opensuse.org/openSUSE:LTO#GObject_Introspection

summary: LTO: gtk3 build fails


body:
--1556030049.da1185314.19453
Date: Tue, 23 Apr 2019 14:34:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133120

            Bug ID: 1133120
           Summary: LTO: libostree build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  126s] Invalid GType function: 'ostree_async_progress_get_type'
[  126s] Failed to find symbol 'ostree_async_progress_get_type'

It's a more common issue:
https://en.opensuse.org/openSUSE:LTO#GObject_Introspection

summary: LTO: libostree build fails


body:
--1556030086.220FBf6a13.18242
Date: Tue, 23 Apr 2019 14:34:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133121

            Bug ID: 1133121
           Summary: LTO: mutter build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  244s] Invalid GType function: 'clutter_point_get_type'
[  244s] Failed to find symbol 'clutter_point_get_type'

It's a more common issue:
https://en.opensuse.org/openSUSE:LTO#GObject_Introspection

summary: LTO: mutter build fails


body:
--1556030155.8f3d019.18242
Date: Tue, 23 Apr 2019 14:35:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133122

            Bug ID: 1133122
           Summary: LTO: cmocka build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with:
[   64s] [   LINE   ] ---
/home/abuild/rpmbuild/BUILD/cmocka-1.1.1/tests/test_group_setup_assert.c:13:
error: Failure!

It's due to a known issue:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88643

pkgs: cmocka multipath-tools

summary: LTO: cmocka build fails


body:
--1556030376.A8DF3C19.17489
Date: Tue, 23 Apr 2019 14:39:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133123

            Bug ID: 1133123
           Summary: LTO: ffmpeg-4 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

An configure options needs to be enabled and parallel linking must be enabled.

summary: LTO: ffmpeg-4 build fails


body:
--1556030452.3c35C4.22909
Date: Tue, 23 Apr 2019 14:40:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133124

            Bug ID: 1133124
           Summary: LTO: flatpack build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to gobject-introspection tool.

It's a more common issue:
https://en.opensuse.org/openSUSE:LTO#GObject_Introspection

summary: LTO: flatpack build fails


body:
--1556031700.fdc1c4.5748
Date: Tue, 23 Apr 2019 15:01:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133131

            Bug ID: 1133131
           Summary: LTO: gperftools build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[   25s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/usr/lib64/gcc/x86_64-suse-linux/9/libstdc++.so: undefined reference to
`pthread_create'
[   25s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/usr/lib64/gcc/x86_64-suse-linux/9/libstdc++.so: undefined reference to
`pthread_join'
[   25s] collect2: error: ld returned 1 exit status

Probably a bad configure of pthread functions.

summary: LTO: gperftools build fails


body:
--1556032192.5E57bCC4.11461
Date: Tue, 23 Apr 2019 15:09:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133136

            Bug ID: 1133136
           Summary: LTO: jemalloc build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to a test failure.

summary: LTO: jemalloc build fails


body:
--1556032230.AC1cbB173.11989
Date: Tue, 23 Apr 2019 15:10:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133137

            Bug ID: 1133137
           Summary: openSUSE:Leap:15.1/python-csvkit failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/python-csvkit/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: mcepl-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: tchvatal-at-suse.com
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/python-csvkit failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/python-csvkit/standard/x86_64

[   76s]
[   76s] ======================================================================
[   76s] FAIL: test_before_after_insert
(tests.test_utilities.test_csvsql.TestCSVSQL)
[   76s] ----------------------------------------------------------------------
[   76s] Traceback (most recent call last):
[   76s]   File
"/home/abuild/rpmbuild/BUILD/csvkit-1.0.4/tests/test_utilities/test_csvsql.py",
line 200, in test_before_after_insert
[   76s]     self.assertEqual(output, 'a,b,c\n1,2,3\n0,5,6\n')
[   76s] AssertionError: 'a,b,c\n1,2.0,3.0\n0,5.0,6.0\n' !=
'a,b,c\n1,2,3\n0,5,6\n'
[   76s]
[   76s] ======================================================================
[   76s] FAIL: test_linenumbers (tests.test_utilities.test_sql2csv.TestSQL2CSV)
[   76s] ----------------------------------------------------------------------
[   76s] Traceback (most recent call last):
[   76s]   File
"/home/abuild/rpmbuild/BUILD/csvkit-1.0.4/tests/test_utilities/test_sql2csv.py",
line 140, in test_linenumbers
[   76s]     self.assertTrue('1,1,2,3' in csv)
[   76s] AssertionError: False is not true

summary: openSUSE:Leap:15.1/python-csvkit failed


body:
--1556035367.2b0A00.7369
Date: Tue, 23 Apr 2019 16:02:47 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133156

            Bug ID: 1133156
           Summary: VUL-0: CVE-2019-11373: mediainfo: out-of-bounds read in function File__Analyze:Get_L8 in File__Analyze_Buffer.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230040/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: aloisio-at-gmx.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1701844

An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in
MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.

Reference:
https://github.com/MediaArea/MediaInfoLib/pull/1111
https://sourceforge.net/p/mediainfo/bugs/1101/

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1701844
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11373
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-11373.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11373
http://www.cvedetails.com/cve/CVE-2019-11373/
https://github.com/MediaArea/MediaInfoLib/pull/1111
https://sourceforge.net/p/mediainfo/bugs/1101/

pkgs: libmediainfo mediainfo


body:
--1556035412.aCae0.5777
Date: Tue, 23 Apr 2019 16:03:32 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133157

            Bug ID: 1133157
           Summary: VUL-0: CVE-2019-11372: mediainfo: out-of-bounds read in function MediaInfoLib:File__Tags_Helper:Synched_Test in Tag/File__Tags.cpp
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230039/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: aloisio-at-gmx.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

rh#1701840

An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in
Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a
crash.

References:
https://github.com/MediaArea/MediaInfoLib/pull/1111
https://sourceforge.net/p/mediainfo/bugs/1101/

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1701840
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11372
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-11372.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11372
http://www.cvedetails.com/cve/CVE-2019-11372/
https://github.com/MediaArea/MediaInfoLib/pull/1111
https://sourceforge.net/p/mediainfo/bugs/1101/


--1556061611.A57FBBe0.21005
Date: Tue, 23 Apr 2019 23:20:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133181

            Bug ID: 1133181
           Summary: putty: Xresources support broken, no X11 support
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: manfred99-at-gmx.ch
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

1) putty 0.71 is built with -DNOT_X_WINDOWS, this is because of Bug 1098962.
However this bug seems to be fixed in the 0.71 release, see
https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=7fee4e9b43ea7d72e373b08cfd4afce8e031d0ef
This commit is incuded in 0.71, so this setting is probably not needed any
more.

It seems upstream is willing to support multiple backends and seems willing to
fix wayland bugs as they appear, so it would be great if there would be some
collaboration with upstream and not to resolve to cheap band-aids by disabling
features. It seems this bug was fixed almost 2 months before bug report 1098962
was raised ...

2) in putty 0.71 Xresources support is completely broken, which is most obvious
in the pterm application, simply try
#> pterm -xrm 'TermWidth: 20'
which does nothing at all.

This bug is fixed by
https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=39c20d4819794417e4e84429d1eb5430e3865b25

It would be great if this commit could be picked and included into the opensuse
releases.


--1556086065.e6CC0.6954
Date: Wed, 24 Apr 2019 06:07:45 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133200

            Bug ID: 1133200
           Summary: VUL-1: CVE-2018-20821: libsass: The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass:Parser:parse_css_variable_value in parser.cpp).
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230147/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: cbosdonnat-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20821

The parsing component in LibSass through 3.5.5 allows attackers to cause a
denial-of-service (uncontrolled recursion in
Sass::Parser::parse_css_variable_value in parser.cpp).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20821
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20821.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20821
https://github.com/sass/libsass/issues/2658


--1556086110.B1e1e14.6954
Date: Wed, 24 Apr 2019 06:08:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133201

            Bug ID: 1133201
           Summary: VUL-1: CVE-2018-20822: libsass: LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass:Complex_Selector:perform in ast.hpp and Sass:Inspect:operator in inspect.cpp).
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230148/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: cbosdonnat-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2018-20822

LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled
recursion in Sass::Complex_Selector::perform in ast.hpp and
Sass::Inspect::operator in inspect.cpp).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20822
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-20822.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20822
https://github.com/sass/libsass/issues/2671


--1556097365.8c4f5E33.18237
Date: Wed, 24 Apr 2019 09:16:05 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133222

            Bug ID: 1133222
           Summary: openSUSE:Leap:15.1/hdf5:gnu-mpich-hpc failed
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
               URL: https://build.opensuse.org/package/live_build_log/open
                    SUSE:Leap:15.1/hdf5:gnu-mpich-hpc/standard/x86_64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: eich-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: adrian-at-suse.com
          Found By: ---
           Blocker: ---

openSUSE:Leap:15.1/hdf5:gnu-mpich-hpc failed to build. Please see build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.1/hdf5:gnu-mpich-hpc/standard/x86_64

The job repeatedly gets stuck in
[ 2513s] Testing  t_cache_image


body:
--1556103292.DEcF140c4.26474
Date: Wed, 24 Apr 2019 10:54:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133232

            Bug ID: 1133232
           Summary: LTO: leveldb build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with LTO due to:

[   52s] collect2: error: ld returned 1 exit status

[   14s] /usr/lib64/gcc/x86_64-suse-linux/8/libstdc++.so: undefined reference
to `pthread_create'
[   14s] /usr/lib64/gcc/x86_64-suse-linux/8/libstdc++.so: undefined reference
to `pthread_once'

I've been working on that.

summary: LTO: leveldb build fails


body:
--1556104440.FE2c4.5522
Date: Wed, 24 Apr 2019 11:14:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133239

            Bug ID: 1133239
           Summary: LTO: libqt4 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[ 2898s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQtScript.so.4.8.7.1AX6os.ltrans0.ltrans.o: in function
`ctiVMThrowTrampoline':
[ 2898s] <artificial>:(.text+0x4c): undefined reference to `cti_vm_throw'

summary: LTO: libqt4 build fails


body:
--1556104760.FEeEAbb64.5693
Date: Wed, 24 Apr 2019 11:19:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133241

            Bug ID: 1133241
           Summary: LTO: libqt5-qtscript build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with LTO due to a usage of top level assembler.

summary: LTO: libqt5-qtscript build fails


body:
--1556104839.4726D4.7139
Date: Wed, 24 Apr 2019 11:20:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133242

            Bug ID: 1133242
           Summary: LTO: libqt5-qtbase build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x0):
undefined reference to `qt_version_tag'
[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x10):
undefined reference to `qt_version_tag'
[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x20):
undefined reference to `qt_version_tag'
[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x30):
undefined reference to `qt_version_tag'
[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x40):
undefined reference to `qt_version_tag'
[  958s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libQt5Network.so.5.12.2.I6MFgc.ltrans0.ltrans.o:(.qtversion[qt_version_tag]+0x50):
more undefined references to `qt_version_tag' follow

summary: LTO: libqt5-qtbase build fails


body:
--1556105173.5CB5044.10868
Date: Wed, 24 Apr 2019 11:26:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133244

            Bug ID: 1133244
           Summary: LTO: libselinux-bindings build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with LTO due to:

[    3s] cc -fmessage-length=0 -grecord-gcc-switches -O2 -Wall
-D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables
-fasynchronous-unwind-tables -fstack-clash-protection -flto=160 -g -I../include
-D_GNU_SOURCE -DNO_ANDROID_BACKEND   -shared -o libselinux.so.1 avc.lo
avc_internal.lo avc_sidtab.lo booleans.lo callbacks.lo canonicalize_context.lo
checkAccess.lo check_context.lo checkreqprot.lo compute_av.lo compute_create.lo
compute_member.lo compute_relabel.lo compute_user.lo context.lo deny_unknown.lo
disable.lo enabled.lo fgetfilecon.lo freecon.lo freeconary.lo fsetfilecon.lo
get_context_list.lo get_default_type.lo get_initial_context.lo getenforce.lo
getfilecon.lo getpeercon.lo init.lo is_customizable_type.lo label.lo
label_db.lo label_file.lo label_media.lo label_support.lo label_x.lo
lgetfilecon.lo load_policy.lo lsetfilecon.lo mapping.lo matchmediacon.lo
matchpathcon.lo policyvers.lo procattr.lo query_user_context.lo regex.lo
reject_unknown.lo selinux_check_securetty_context.lo selinux_config.lo
selinux_restorecon.lo sestatus.lo setenforce.lo setexecfilecon.lo setfilecon.lo
setrans_client.lo seusers.lo sha1.lo stringrep.lo -lpcre  -ldl
-Wl,-soname,libselinux.so.1,-z,defs,-z,relro
[    3s] ranlib libselinux.a
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans0.ltrans.o: in function
`selinux_set_mapping':
[    6s] /home/abuild/rpmbuild/BUILD/libselinux-2.9/src/mapping.c:47: undefined
reference to `avc_reset_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans0.ltrans.o: in function `selabel_x_init':
[    6s] /home/abuild/rpmbuild/BUILD/libselinux-2.9/src/label_x.c:119:
undefined reference to `selinux_x_context_path_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans0.ltrans.o: in function `selabel_media_init':
[    6s] /home/abuild/rpmbuild/BUILD/libselinux-2.9/src/label_media.c:92:
undefined reference to `selinux_media_context_path_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans0.ltrans.o: in function
`restorecon_sb.isra.0':
[    6s]
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:576:
undefined reference to `context_type_get_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:576:
undefined reference to `context_type_get_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:578:
undefined reference to `context_user_get_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:578:
undefined reference to `context_user_set_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:579:
undefined reference to `context_role_get_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:579:
undefined reference to `context_role_set_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:580:
undefined reference to `context_range_get_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/libselinux-2.9/src/selinux_restorecon.c:580:
undefined reference to `context_range_set_internal'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans1.ltrans.o: in function `selabel_db_init':
[    6s] /home/abuild/rpmbuild/BUILD/libselinux-2.9/src/label_db.c:278:
undefined reference to `selinux_sepgsql_context_path'
[    6s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libselinux.so.1.2cexBn.ltrans1.ltrans.o: in function
`default_selinux_validate':
[    6s] /home/abuild/rpmbuild/BUILD/libselinux-2.9/src/callbacks.c:38:
undefined reference to `security_check_context'
[    6s] collect2: error: ld returned 1 exit status
[    6s] make: *** [Makefile:155: libselinux.so.1] Error 1

summary: LTO: libselinux-bindings build fails


body:
--1556105276.4Aa7D4.12405
Date: Wed, 24 Apr 2019 11:27:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133245

            Bug ID: 1133245
           Summary: LTO: libsigsegv build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[   45s] /usr/include/asm/sigcontext.h:40:8: error: redefinition of 'struct
_fpx_sw_bytes'

There's some broken configure:

Bad configure:

 checking whether a fault handler according to Hurd works... no
 checking ucontext.h usability... yes
 checking ucontext.h presence... yes
 checking for ucontext.h... yes
vs.

 checking whether a fault handler according to Hurd works... no
 checking for the fault handler specifics... fault-linux-x86_64-old.h
 checking if the system supports catching SIGSEGV... no
 checking for stack direction... grows down

summary: LTO: libsigsegv build fails


body:
--1556109199.F0bEBf74.6133
Date: Wed, 24 Apr 2019 12:33:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133254

            Bug ID: 1133254
           Summary: LTO: llvm[67] build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:
clang-6.0: error: linker command failed with exit code 1 (use -v to see
invocation)

I would expect the package should use a LTO bootstrap configuration.

summary: LTO: llvm[67] build fails


body:
--1556109321.b55BD4.9047
Date: Wed, 24 Apr 2019 12:35:21 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133256

            Bug ID: 1133256
           Summary: LTO: ltrace build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[   64s] filter.h:95:5: error: type of 'filter_matches_symbol' does not match
original declaration [-Werror=lto-type-mismatch]

It's real issue, missing inclusion of config.h in a header. Thus
a struct contains different number of fields (classic #ifdef int field #endif).

summary: LTO: ltrace build fails


body:
--1556109657.7A5f4.11449
Date: Wed, 24 Apr 2019 12:40:57 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133259

            Bug ID: 1133259
           Summary: LTO: lzo build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Defines a static library:

[   47s] RPMLINT report:
[   47s] ===============
[   48s] lzo-devel-static.x86_64: W: lto-bytecode /usr/lib64/liblzo2.a

summary: LTO: lzo build fails


body:
--1556111119.a0eea14.22059
Date: Wed, 24 Apr 2019 13:05:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133265

            Bug ID: 1133265
           Summary: LTO: Mesa build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[   19s] cc  -o src/glx/libGLX_mesa.so.0.0.0  -Wl,--no-undefined
-Wl,--as-needed -shared -fPIC -Wl,--start-group -Wl,-soname,libGLX_mesa.so.0
-Wl,--whole-archive src/glx/libglx.a -Wl,--no-whole-archive -fmessage-length=0
-grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong
-funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -flto=160
-g src/mapi/glapi/libglapi_static.a src/mapi/shared-glapi/libglapi.so.0.0.0
src/loader/libloader.a src/loader/libloader_dri3_helper.a
src/util/libmesa_util.a src/util/libxmlconfig.a -Wl,-Bsymbolic
-Wl,--gc-sections /usr/lib64/libdrm.so -ldl -lm /usr/lib64/libX11.so
/usr/lib64/libxcb-glx.so /usr/lib64/libxcb.so /usr/lib64/libX11-xcb.so
/usr/lib64/libxcb-dri2.so /usr/lib64/libXext.so /usr/lib64/libXfixes.so
/usr/lib64/libXdamage.so /usr/lib64/libXxf86vm.so /usr/lib64/libxcb-dri3.so
/usr/lib64/libxcb-present.so /usr/lib64/libxcb-sync.so
/usr/lib64/libxshmfence.so
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../lib64/libz.so -lm
/usr/lib64/libexpat.so -lm -Wl,--end-group -pthread
'-Wl,-rpath,$ORIGIN/../mapi/glapi:$ORIGIN/../mapi/shared-glapi'
-Wl,-rpath-link,/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/src/mapi/glapi:/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/src/mapi/shared-glapi
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans0.ltrans.o: in function
`dri2Flush.constprop.0':
[   19s]
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/dri2_glx.c:562:
undefined reference to `glFlush'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`driCopySubBuffer':
[   19s]
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/dri_glx.c:802:
undefined reference to `glFlush'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`driSwapBuffers':
[   19s]
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/dri_glx.c:787:
undefined reference to `glFlush'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`driswSwapBuffers':
[   19s]
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/drisw_glx.c:731:
undefined reference to `glFlush'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`driswCopySubBuffer':
[   19s]
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/drisw_glx.c:747:
undefined reference to `glFlush'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`DRI_glXUseXFont':
[   19s] /home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:275:
undefined reference to `glGetIntegerv'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:276: undefined
reference to `glGetIntegerv'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:277: undefined
reference to `glGetIntegerv'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:278: undefined
reference to `glGetIntegerv'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:279: undefined
reference to `glGetIntegerv'
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o:/home/abuild/rpmbuild/BUILD/mesa-19.0.2/build/../src/glx/xfont.c:280:
more undefined references to `glGetIntegerv' follow
[   19s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/libGLX_mesa.so.0.0.0.3ld7rV.ltrans1.ltrans.o: in function
`DRI_glXUseXFont':

summary: LTO: Mesa build fails


body:
--1556111222.bbbF4.24475
Date: Wed, 24 Apr 2019 13:07:02 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133267

            Bug ID: 1133267
           Summary: LTO: MozillaThunderbird build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Unlike MozillaFirefox where we have enabled LTO, the project does not support a
configure option yet.

summary: LTO: MozillaThunderbird build fails


body:
--1556111390.daaA2eaE4.22880
Date: Wed, 24 Apr 2019 13:09:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133269

            Bug ID: 1133269
           Summary: LTO: ocaml-ocamlbuild build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3ba): undefined reference to `caml_exception_pointer'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3c6): undefined reference to `caml_young_ptr'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3d4): undefined reference to `caml_last_return_address'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3de): undefined reference to `caml_bottom_of_stack'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3e8): undefined reference to `caml_exception_pointer'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3f4): undefined reference to `caml_stash_backtrace'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x3fe): undefined reference to `caml_exception_pointer'
[   35s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
(.text+0x40a): undefined reference to `caml_young_ptr'

summary: LTO: ocaml-ocamlbuild build fails


body:
--1556112070.A5e8BfB24.711
Date: Wed, 24 Apr 2019 13:21:10 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133275

            Bug ID: 1133275
           Summary: LTO: php7 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  247s] /home/abuild/rpmbuild/BUILD/php-7.2.6/Zend/zend_execute.c:66:40:
error: global register variable follows a function definition

[  194s] /home/abuild/rpmbuild/BUILD/php-7.2.6/Zend/zend_execute.c: In function
'zval_undefined_cv':
[  194s] /home/abuild/rpmbuild/BUILD/php-7.2.6/Zend/zend_execute.c:66:40:
error: global register variable follows a function definition
[  194s]    register zend_execute_data* volatile execute_data
__asm__(ZEND_VM_FP_GLOBAL_REG);
[  194s]                                         ^
[  194s] lto-wrapper: fatal error: cc returned 1 exit status

Error in GCC:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86442

summary: LTO: php7 build fails


body:
--1556113408.D82EDAb64.5824
Date: Wed, 24 Apr 2019 13:43:28 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133289

            Bug ID: 1133289
           Summary: LTO: virtualbox build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:
[ 2605s]     's/^\(.*\)$/error: Missing # define \1 /' \

summary: LTO: virtualbox build fails


body:
--1556113481.aed15415.10967
Date: Wed, 24 Apr 2019 13:44:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133291

            Bug ID: 1133291
           Summary: LTO: webkit2gtk3 build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with LTO due to:

[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0xfdf3):
error: undefined reference to 'llint_slow_path_call_varargs'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0xfe88):
error: undefined reference to 'llint_slow_path_size_frame_for_varargs'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0xfec4):
error: undefined reference to 'llint_slow_path_tail_call_varargs'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0xffbe):
error: undefined reference to 'llint_slow_path_size_frame_for_varargs'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0xfffa):
error: undefined reference to 'llint_slow_path_tail_call_varargs'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0x100f2):
error: undefined reference to
'llint_slow_path_size_frame_for_forward_arguments'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0x1012e):
error: undefined reference to 'llint_slow_path_tail_call_forward_arguments'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0x10228):
error: undefined reference to
'llint_slow_path_size_frame_for_forward_arguments'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0x10264):
error: undefined reference to 'llint_slow_path_tail_call_forward_arguments'
[ 1848s]
/tmp/libjavascriptcoregtk-4.0.so.18.13.3.ooJPNt.ltrans0.ltrans.o(.text+0x10377):
error: undefined reference to 'llint_slow_path_construct_varargs'

summary: LTO: webkit2gtk3 build fails


body:
--1556113440.207c84.10752
Date: Wed, 24 Apr 2019 13:44:00 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133290

            Bug ID: 1133290
           Summary: LTO: vlc build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails with LTO due to:

[  805s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/liblive555_plugin.so.rZUS0O.ltrans0.ltrans.o:(.data.rel.ro+0x70):
undefined reference to `RTSPClient::sendRequest(RTSPClient::RequestRecord*)'
[  805s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/liblive555_plugin.so.rZUS0O.ltrans0.ltrans.o:(.data.rel.ro+0x78):
undefined reference to
`RTSPClient::setRequestFields(RTSPClient::RequestRecord*, char*&, unsigned
char&, char const*&, char*&, unsigned char&)'
[  805s]
/usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld:
/tmp/liblive555_plugin.so.rZUS0O.ltrans0.ltrans.o:(.data.rel.ro+0x80):
undefined reference to `RTSPClient::connectToServer(int, unsigned short)

summary: LTO: vlc build fails


body:
--1556113994.DFDcC4.17035
Date: Wed, 24 Apr 2019 13:53:14 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133297

            Bug ID: 1133297
           Summary: LTO: zstd build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Defines a static library.

It's a common issue described here:
https://en.opensuse.org/openSUSE:LTO#Symbol_versioning

summary: LTO: zstd build fails


body:
--1556113655.25Fe3B4.14766
Date: Wed, 24 Apr 2019 13:47:35 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133294

            Bug ID: 1133294
           Summary: LTO:  xorg-x11-server build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  786s] events.c:605:49: error: array subscript -1 is below array bounds of
'struct _Window *[16]' [-Werror=array-bounds]

https://bugs.freedesktop.org/show_bug.cgi?id=110256

summary: LTO:  xorg-x11-server build fails


body:
--1556113074.321fc4.9160
Date: Wed, 24 Apr 2019 13:37:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133287

            Bug ID: 1133287
           Summary: LTO: texlive build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Fails due to:

[  301s] configure: error:

[  269s] Unknown float word ordering. You need to manually preset
[  269s] ax_cv_c_float_words_bigendian=no (or yes) according to your system.

I'm almost sure they grep an ELF object file for a specific blob. It's not
possible with LTO.

summary: LTO: texlive build fails


body:
--1556116460.ae2E0.13285
Date: Wed, 24 Apr 2019 14:34:20 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133305

            Bug ID: 1133305
           Summary: LTO: multipath-tools build fails
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

in the  LTO staging project (openSUSE:Factory:Staging:N), libaio doesn't export
all symbols it used to export. In particular, io_cancel() and io_getevents()
are undefined:

apollon:/mnt/img/lib64 # nm -D libaio.so.1
0000000000000000 A LIBAIO_0.1
0000000000000000 A LIBAIO_0.4
                 U __stack_chk_fail
                 U io_cancel
0000000000001050 T io_destroy
                 U io_getevents
0000000000001110 T io_queue_init
0000000000001100 T io_queue_release
0000000000001080 T io_queue_run
0000000000001060 T io_setup
0000000000001070 T io_submit

This causes the multipath-tools build to fail. The failure is independent on
whether -flto=X is active while building multipath-tools itself.

> [   50s] gcc -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -flto=4 -g -DBIN_DIR=\"/sbin\" -DLIB_STRING=\"lib64\" -DRUN_DIR=\"run\" -MMD -MP  -fPIE -I../libmultipath -I../libmpathcmd main.o -o multipath -Wl,-z,relro -Wl,-z,now -pie -L../libmultipath -lmultipath -L../libmpathcmd -lmpathcmd -lpthread -ldevmapper -ldl -ludev -laio
> [   50s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: ../libmultipath/libmultipath.so: undefined reference to `io_getevents'
> [   50s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: ../libmultipath/libmultipath.so: undefined reference to `io_cancel''
> [   50s] collect2: error: ld returned 1 exit status
> [   50s] make[1]: *** [Makefile:18: multipath] Error 1

summary: LTO: multipath-tools build fails


--1556117191.72Ecf6.14782
Date: Wed, 24 Apr 2019 14:46:31 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133307

            Bug ID: 1133307
           Summary: gimp: don't recommend gimp-plugins-python, it pulls in python2
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
          Assignee: bnc-team-gnome-at-forge.provo.novell.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

the gimp package recommends gimp-plugins-python. That one pulls in python2
which is phased out though. So I'd suggest to remove the Recommends or at least
change to a Suggests.


--1556119509.feBCF4.8465
Date: Wed, 24 Apr 2019 15:25:09 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133313

            Bug ID: 1133313
           Summary: VUL-0: chromium: multiple security fixes in 74.0.3729.108
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
          Found By: Community User
           Blocker: ---

https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html

fixed in Chromium 74.0.3729.108

CVE-2019-5805: Use after free in PDFium
CVE-2019-5806: Integer overflow in Angle
CVE-2019-5807: Memory corruption in V8
CVE-2019-5808: Use after free in Blink
CVE-2019-5809: Use after free in Blink
CVE-2019-5810: User information disclosure in Autofill
CVE-2019-5811: CORS bypass in Blink
CVE-2019-5813: Out of bounds read in V8
CVE-2019-5814: CORS bypass in Blink
CVE-2019-5815: Heap buffer overflow in Blink
CVE-2019-5818: Uninitialized value in media reader
CVE-2019-5819: Incorrect escaping in developer tools
CVE-2019-5820: Integer overflow in PDFium
CVE-2019-5821: Integer overflow in PDFium
CVE-2019-5822: CORS bypass in download manager
CVE-2019-5823: Forced navigation from service worker

Other platforms:
CVE-2019-5812: URL spoof in Omnibox on iOS
CVE-2019-5816: Exploit persistence extension on Android
CVE-2019-5817: Heap buffer overflow in Angle on Windows


body:
--1556207394.D14Ba0.13252
Date: Thu, 25 Apr 2019 15:49:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133432

            Bug ID: 1133432
           Summary: Add config for alsaequal
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Sound
          Assignee: tiwai-at-suse.com
          Reporter: ilya-at-ilya.pp.ua
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Add config for alsaequal

summary: Add config for alsaequal


--1556202853.748C7b5c0.24197
Date: Thu, 25 Apr 2019 14:34:13 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133418

            Bug ID: 1133418
           Summary: sg3_utils: syntax error in 59-fc-wwpn-id.rules
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.wilck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

[   74.262834] systemd-udevd[2958]:
/usr/lib/udev/rules.d/59-fc-wwpn-id.rules:12: Invalid key/value pair, starting
at character 25 (';')


--1556264923.32Ed653.7578
Date: Fri, 26 Apr 2019 07:48:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133486

            Bug ID: 1133486
           Summary: Elan touchpad floods /var/log/messages and /var/log/warn
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: host71-at-hotmail.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

I recently bought a new Laptop (Acer Aspire 5) and it works well with
tumbleweed, beside one thing:
The touchpad, which works actually as it should, creates lots of log messages.
Each touch is reflected in /var/log/messages with information like this:

kernel: [   94.698399] i2c_hid i2c-ELAN0504:01: i2c_hid_get_input: incomplete
report (14/65535)

Also /var/log/warn is being filled up with such messages.

This happens in a massive manner, so that the files run up to hundreds of
megabytes in a short time and fills up my disc space.

I found this, maybe it helps:
https://bugzilla.redhat.com/show_bug.cgi?id=1616414

HArdware Info of the touchpad:
36: PS/2 00.0: 10500 PS/2 Mouse
  [Created at input.249]
  Unique ID: AH6Q.n1Y2kY4ZMhB
  Hardware Class: mouse
  Model: "ELAN0504:01 04F3:3091 Touchpad"
  Vendor: 0x04f3
  Device: 0x3091 "ELAN0504:01 04F3:3091 Touchpad"
  Compatible to: int 0x0210 0x0001
  Device File: /dev/input/mice (/dev/input/mouse0)
  Device Files: /dev/input/mice, /dev/input/mouse0, /dev/input/event16,
/dev/input/by-path/pci-0000:00:15.1-platform-i2c_designware.1-event-mouse,
/dev/input/by-path/pci-0000:00:15.1-platform-i2c_designware.1-mouse
  Device Number: char 13:63 (char 13:32)
  Driver Info #0:
    Buttons: 1
    Wheels: 0
    XFree86 Protocol: explorerps/2
    GPM Protocol: exps2
  Config Status: cfg=new, avail=yes, need=no, active=unknown

NAME="openSUSE Tumbleweed"
# VERSION="20190423"

Thanks


--1556265292.8e3d4.22245
Date: Fri, 26 Apr 2019 07:54:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133490

            Bug ID: 1133490
           Summary: VUL-1: CVE-2019-9635: tensorflow: NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230235/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: cgoll-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-9635

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a
denial
of service via an invalid GIF file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-9635
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9635
http://www.cvedetails.com/cve/CVE-2019-9635/
https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md


--1556266119.dbA322d4.25317
Date: Fri, 26 Apr 2019 08:08:39 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133492

            Bug ID: 1133492
           Summary: virtualbox should not limit build system by 2 threads
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: martin.liska-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Seen in virtualbox.spec:

# To keep memory requirements within bounds, limit make to 2 jobs
    %{_bindir}/kmk -j2 \

It's incorrect, the package should use %_smp_mflags and a memory constraint
should be set:
https://openbuildservice.org/help/manuals/obs-reference-guide/cha.obs.build_job_constraints.html#id-1.7.16.12.6


--1556268596.B75fDAA20.20131
Date: Fri, 26 Apr 2019 08:49:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133498

            Bug ID: 1133498
           Summary: VUL-1: CVE-2019-11506: GraphicsMagick: heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possi
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230258/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: pgajdos-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-11506

In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a
heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c,
which allows an attacker to cause a denial of service or possibly have
unspecified other impact via a crafted image file. This is related to
ExportRedQuantumType in magick/export.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11506
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11506
https://sourceforge.net/p/graphicsmagick/bugs/604/
http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/57ac0ae85e2a


--1556268883.3af70.25117
Date: Fri, 26 Apr 2019 08:54:43 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133501

            Bug ID: 1133501
           Summary: VUL-1: CVE-2019-11505: GraphicsMagick: heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/230257/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Other
          Assignee: pgajdos-at-suse.com
          Reporter: meissner-at-suse.com
        QA Contact: security-team-at-suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2019-11505

In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a
heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which
allows an attacker to cause a denial of service or possibly have unspecified
other impact via a crafted image file. This is related to
MagickBitStreamMSBWrite in magick/bit_stream.c.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11505
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11505
http://www.securityfocus.com/bid/108063
https://sourceforge.net/p/graphicsmagick/bugs/605/
http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/85f5bdcd246a


--1556420764.72C131.22064
Date: Sun, 28 Apr 2019 03:06:04 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133593

            Bug ID: 1133593
           Summary: Kernel panic during installer detecting hardware on Dell Precision 5530 (nouveau)
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Installation
          Assignee: yast2-maintainers-at-suse.de
          Reporter: dawei.pang-at-suse.com
        QA Contact: jsrain-at-suse.com
          Found By: ---
           Blocker: ---

Created attachment 803737
  --> http://bugzilla.suse.com/attachment.cgi?id=803737&action=edit
Leap15.1 panic on DELL Precision 5530

Writing openSUSE-Leap-15.1-DVD-x86_64-Build462.1-Media.iso to USB disk, boot it
on Dell Precision 5530, the installer enter panic during detecting hardware,
then  the machine is shutdown quickly. I only took a photo for the panic
information, and not sure how to capture full log during installation in this
situation, please refer to attached file. This panic blocks installation on
Dell Precision 5530 laptop.

According to the panic information, I tried to add boot parameter
'nouveau.modeset=0', installer can boot into GUI interface without panic.

The latest tumbleweed build 20190425 can boot successfully without panic.


--1556445820.C85ef8C0.2474
Date: Sun, 28 Apr 2019 10:03:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133597

            Bug ID: 1133597
           Summary: Alpine fails to create initial encripted paswword store
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: carlos.e.r-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 803741
  --> http://bugzilla.opensuse.org/attachment.cgi?id=803741&action=edit
Patch

Alpine can store the passwords used to access servers on an encrypted .pinepw
file. Just doing:

touch .pinepw

should do it. But it fails with this message:

          [Refusing to write non-encrypted password file]

This is affecting at least 15.1 and 15.0. If instead of using a zero bytes file
we use one from another install, it works.

This issue has been tracked upstream at a mail thread
<http://mailman13.u.washington.edu/pipermail/alpine-info/2019-April/008368.html>

and there is a patch that I will attach to this report.


body:
--1556513528.F644470.6482
Date: Mon, 29 Apr 2019 04:52:08 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133616

            Bug ID: 1133616
           Summary: use after free in list_lru_add
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: CONFIRMED
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: jslaby-at-suse.com
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: mkoutny-at-suse.com
          Found By: ---
           Blocker: ---

On a specific hardware, we see 100 % reproducible crash while booting with
fresh enough systemd. Systemd version matters as it does something special.

The crash with KASAN-enabled kernel:
> systemd[1]: Listening on Journal Socket.
> ==================================================================
> BUG: KASAN: slab-out-of-bounds in list_lru_add+0x5ec/0x6a0
> Read of size 8 at addr ffff8880c42f0a18 by task (le-setup)/204
>
> CPU: 3 PID: 204 Comm: (le-setup) Not tainted 5.0.9-0.g09ca824-default #1 openSUSE Tumbleweed (unreleased)
> Hardware name: Supermicro H8DSP-8/H8DSP-8, BIOS 080011  06/30/2006
> Call Trace:
>  dump_stack+0x9a/0xf0
>  ? list_lru_add+0x5ec/0x6a0
>  print_address_description+0x65/0x205
>  ? list_lru_add+0x5ec/0x6a0
>  ? list_lru_add+0x5ec/0x6a0
>  kasan_report.cold.4+0x1a/0x39
>  ? list_lru_add+0x5ec/0x6a0
>  list_lru_add+0x5ec/0x6a0
>  ? each_symbol_section+0x60/0x60
>  d_lru_add+0xd4/0x120
>  dput.part.27+0x2ba/0x330
>  __fput+0x333/0x7c0
>  ? _raw_write_lock_irq+0xe0/0xe0
>  task_work_run+0x11c/0x190
>  exit_to_usermode_loop+0x152/0x170
>  do_syscall_64+0x200/0x290
>  entry_SYSCALL_64_after_hwframe+0x49/0xbe
> RIP: 0033:0x7faa5a7c57b7
> Code: ff ff ff ff c3 48 8b 15 df 96 0c 00 f7 d8 64 89 02 b8 ff ff ff ff eb c0 66 2e 0f 1f 84 00 00 00 00 00 90 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 b1 96 0c 00 f7 d8 64 89 02 b8
> RSP: 002b:00007ffc7e72c8e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
> RAX: 0000000000000000 RBX: 0000556dd36f6fd0 RCX: 00007faa5a7c57b7
> RDX: 00007faa5a8907c0 RSI: 0000556dd36f7053 RDI: 0000000000000003
> RBP: 00007faa5a8913c0 R08: 0000556dd36f70b0 R09: 00007ffc7e72c715
> R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
> R13: 0000556dd36f90a0 R14: 00007ffc7e72c9ca R15: 0000000000000003
>
> Allocated by task 1:
>  __kasan_kmalloc.constprop.14+0xc1/0xd0
>  __list_lru_init+0x3cd/0x5e0
>  sget_userns+0x65c/0xba0
>  kernfs_mount_ns+0x120/0x7f0
>  cgroup_do_mount+0x93/0x2e0
>  cgroup1_mount+0x335/0x925
>  cgroup_mount+0x14a/0x7b0
>  mount_fs+0xce/0x304
>  vfs_kern_mount.part.33+0x58/0x370
>  do_mount+0x390/0x2540
>  ksys_mount+0xb6/0xd0
>  __x64_sys_mount+0xba/0x150
>  do_syscall_64+0xa5/0x290
>  entry_SYSCALL_64_after_hwframe+0x49/0xbe
>
> Freed by task 0:
> (stack is not available)
>
> The buggy address belongs to the object at ffff8880c42f0a00
>  which belongs to the cache kmalloc-32 of size 32
> The buggy address is located 24 bytes inside of
>  32-byte region [ffff8880c42f0a00, ffff8880c42f0a20)
> The buggy address belongs to the page:
> page:ffffea000310bc00 count:1 mapcount:0 mapping:ffff88800fc00900 index:0xffff8880c42f0fc1
> flags: 0x9ffff800000200(slab)
> raw: 009ffff800000200 ffffea000310ba88 ffffea000310fb88 ffff88800fc00900
> raw: ffff8880c42f0fc1 ffff8880c42f0000 000000010000003f 0000000000000000
> page dumped because: kasan: bad access detected
>
> Memory state around the buggy address:
>  ffff8880c42f0900: fb fb fb fb fc fc fc fc 00 00 02 fc fc fc fc fc
>  ffff8880c42f0980: 00 00 fc fc fc fc fc fc 00 00 05 fc fc fc fc fc
> >ffff8880c42f0a00: 00 00 fc fc fc fc fc fc 00 05 fc fc fc fc fc fc
>                             ^
>  ffff8880c42f0a80: fb fb fb fb fc fc fc fc 00 06 fc fc fc fc fc fc
>  ffff8880c42f0b00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
> ==================================================================

This happens at least with kernels 4.12 and 5.0.x.

summary: use after free in list_lru_add


--1556537651.2b560.18613
Date: Mon, 29 Apr 2019 11:34:11 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133680

            Bug ID: 1133680
           Summary: AUDIT-0: backintime-qt: backintime was ported to qt5 and executable renamed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: thardeck-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Backintime was ported from qt4 to qt5 which resulted in a file name change.

https://build.opensuse.org/package/rdiff/home:thardeck:branches:Archiving:Backup/backintime?linkrev=base&rev=2

New exectuable name: `/usr/bin/backintime-qt`

[    6s] backintime-qt.noarch: E: polkit-untracked-privilege (Badness: 10000)
net.launchpad.backintime.qtgui (auth_admin:auth_admin:auth_admin)
[    6s] The privilege is not listed in /etc/polkit-default-privs.* which makes
it
[    6s] harder for admins to find. Furthermore polkit authorization checks can
easily
[    6s] introduce security issues. If the package is intended for inclusion in
any
[    6s] SUSE product please open a bug report to request review of the package
by the
[    6s] security team. Please refer to
[    6s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[    6s] more information.

Could you update the polkit authorization or are any additional steps needed?


body:
--1556616677.80B0dd0.4989
Date: Tue, 30 Apr 2019 09:31:17 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133762

            Bug ID: 1133762
           Summary: drop mandb.timer
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: werner-at-suse.com
          Reporter: lnussel-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

/var/cache/man nowadays only holds index.db and only needs to be refreshed if
actual man pages are installed or updated. The method to crawl all man paths in
a cron job/time is a bit from another era.

The ideal solution would actually be file triggers I think. So no package would
have to be touched:
https://rpm.org/user_doc/file_triggers.html

Thinking of transactional-updates having the db in /var is suboptimal though.
Would ie be possible to keep the db in /usr/share/man instead, like info pages
do it?

summary: drop mandb.timer


body:
--1556632344.E7AEf0.26660
Date: Tue, 30 Apr 2019 13:52:24 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133808

            Bug ID: 1133808
           Summary: pam-kwallet cause sudo stop working
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Workspace (Plasma)
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: cornelis-at-solcon.nl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Yesterday I had a problem with sudo. The password was not accepted. kdesu and
su were still working. I had pam-kwallet installed.

I did a fresh install and sudo worked again, but it stopped working after
installing pam-kwallet. Removing pam-kwallet restored sudo again.

I have not made changes to the pam of sudo setups.

summary: pam-kwallet cause sudo stop working


--1556650974.d35aEb0.19351
Date: Tue, 30 Apr 2019 19:02:54 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1133843

            Bug ID: 1133843
           Summary: AUDIT-0: systemd: Please review the new DBUS methods brought by systemd v242
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: fbui-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Hello Secteam,

Could you review the following DBUS methods so we can upgrade Factory with the
latest version of systemd v242 ?

  org.freedesktop.login1.set-reboot-parameter
  org.freedesktop.login1.set-reboot-to-boot-loader-entry
  org.freedesktop.login1.set-reboot-to-boot-loader-menu

You can find the default policies shipped by upstream here:
https://github.com/systemd/systemd/blob/v242/src/login/org.freedesktop.login1.policy

Thanks.


--1556741430.cBeeC1B0.29165
Date: Wed, 1 May 2019 20:10:30 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133891

            Bug ID: 1133891
           Summary: mono-core not installable on transactional server
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: 64bit
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: tickopa-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 803994
  --> http://bugzilla.opensuse.org/attachment.cgi?id=803994&action=edit
full output from install command

When attempting to install mono-core the post action executes `cert-sync`,
mono's tool to generate its own certificate cache. On transactional server the
certificate bundle is not available in the chroot, resulting in installation
failure.

> cert-sync /etc/ssl/ca-bundle.pem
/etc/ssl/ca-bundle.pem is a symlink to /var/lib/ca-certificates/ca-bundle.pem.

/var/lib/ca-certificates does not contain a ca-bundle.pem or any certificates
inside the transactional server chroot.

( 8/12) Installing: mono-core-5.10.1-lp150.1.6.x86_64 [............done]
Additional rpm output:
Mono Certificate Store Sync - version 5.10.1.47
Populate Mono certificate store from a concatenated list of certificates.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.

Couldn't retrieve the file using the supplied information.
warning: %post(mono-core-5.10.1-lp150.1.6.x86_64) scriptlet failed, exit status
1


body:
--1556773301.a1DAB33.7615
Date: Thu, 2 May 2019 05:01:41 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1133897

            Bug ID: 1133897
           Summary: repeated kernel crashing on Intel GM965
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: mrmazda-at-earthlink.net
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Created attachment 804001
  --> http://bugzilla.opensuse.org/attachment.cgi?id=804001&action=edit
y2logs

System:    Host: bernp Kernel: 4.12.14-lp151.24-default x86_64 bits: 64
compiler: gcc v: 7.4.0
           parameters: root=LABEL=fu200s151 ipv6.disable=1 net.ifnames=0
noresume vga=791 video=1280x800@60
           drm.debug=0x1e log_buf_len=1M 3
           Desktop: IceWM 1.4.2 info: icewmtray dm: startx Distro: openSUSE
Leap 15.1
Machine:   Type: Laptop System: Sony product: VGN-CR290E v: R5360986 serial:
28399244-3000212 Chassis: type: 10
           serial: N/A
           Mobo: Sony model: VAIO serial: N/A BIOS: Phoenix v: R1080Q0 date:
09/21/2007
Battery:   ID-1: BAT1 charge: 41.1 Wh condition: 41.1/53.3 Wh (77%) volts:
3.9/11.1 model: Sony Corp. VGP-BPS9
           type: Li-ion serial: 15474 status: Full
CPU:       Dual Core: Intel Core2 Duo T7500 type: MCP arch: Core Merom speed:
798 MHz min/max: 800/2201 MHz
Graphics:  Device-1: Intel Mobile GM965/GL960 Integrated Graphics vendor: Sony
driver: i915 v: kernel
           bus ID: 00:02.0 chip ID: 8086:2a02
           Display: server: X.Org 1.20.3 driver: modesetting alternate:
fbdev,intel,vesa resolution: 1280x800~60Hz
           Message: Unable to show advanced data. Required tool glxinfo
missing.
Network:   Device-1: Intel PRO/Wireless 4965 AG or AGN [Kedron] Network driver:
iwl4965 v: in-tree: port: 1c00
           bus ID: 02:00.0 chip ID: 8086:4229
           Device-2: Realtek RTL8101/2/6E PCI Express Fast Ethernet vendor:
Sony driver: r8169 v: 2.3LK-NAPI
           port: 4000 bus ID: 06:00.0 chip ID: 10ec:8136
Drives:    Local Storage: total: 186.31 GiB used: 1.95 GiB (1.0%)
Info:      Processes: 107 Uptime: N/A Memory: 1.93 GiB used: 189.5 MiB (9.6%)
Init: systemd v: 234 runlevel: 3
           target: multi-user.target Compilers: gcc: N/A Shell: bash v: 4.4.23
running in: xterm inxi: 3.0.34

Booting to multi-user it's hard to tell when boot completes due to the debris
on vtty1. Switching to other vttys works as expected, as does startx IceWM, but
it takes an unusually long time to reach a desktop, and there's a significant
pause running inxi in xterm.

summary: repeated kernel crashing on Intel GM965


--1556906391.Ac6AB0.31246
Date: Fri, 3 May 2019 17:59:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1134089

            Bug ID: 1134089
           Summary: Update git-review to handle newer gerrit releases
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Maintenance
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: dmueller-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

we need to handle read-only mirrors more correctly, so an update to 1.28.0 is
recommended. see

https://docs.openstack.org/infra/git-review/releasenotes.html#relnotes-1-28-0

for details


--1556971432.eDcBD0880.3900
Date: Sat, 4 May 2019 12:03:52 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134125

            Bug ID: 1134125
           Summary: Wallpaper scaling fails if image contains EXIF markup for rotation - fix available
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: martin.jacobs-at-arcor.de
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

XFCE bug 14644 (https://bugzilla.xfce.org/show_bug.cgi?id=14644) has recently
been fixed. GIT commit is
https://git.xfce.org/xfce/xfdesktop/commit?id=723feab8cd11285410c2a10afa328d6d7611e052
Can this be merged into Leap 15.0+?


--1556971600.AD45c381.4164
Date: Sat, 4 May 2019 12:06:40 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134126

            Bug ID: 1134126
           Summary: Due to a bug at Mozilla extensions are swirched off.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Firefox
          Assignee: bnc-team-mozilla-at-forge.provo.novell.com
          Reporter: henk.vanvelden@xs4all.nl
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Extensions are switched off in FF due to certificates expired. This includes
e/g/ NoScript and that makes user vulnarable.

The bug report at FF is at
https://bugzilla.mozilla.org/show_bug.cgi?id=1548973#c57
Well, this shows post 57 in the bug report which announces a partial fix.

I reoprt this bug to drwa atten tion to it. Probably superfluous.
I assume it is imminent that the partital fix and the upcoming definitive fix
are pushed down to the Updates asap.

BTW. this being FF related, it is not only on Leap 15.0, but on all versions.


--1557111715.3b321a1.572
Date: Mon, 6 May 2019 03:01:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134139

            Bug ID: 1134139
           Summary: cryptsetup missing in kubic iso image, can't install with disk encryption enabled
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: SUSE Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kubic
          Assignee: kubic-bugs-at-opensuse.org
          Reporter: nimrod-at-shore.co.il
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Installation with encrypted partitions fail due to missing cryptsetup package
on the install media.

Steps to reproduce:

    Start installation from the ISO.
    Accept license agreement.
    Select MicroOS Container Host and continue.
    Enter some root password.
    Click on the Partitioning header.
    Click on the Guided Setup button.
    Tick the Enable Disk Encryption box and enter some password.
    Select BtrFS as File System Type and continue.
    Click on Accept.

Now there's a red error under the Software heading that the cryptsetup package
is missing and needs to be added manually. I tried searching for cryptsetup in
the software selection but I could only find libcryptsetup12. The installation
can't continue until that errors is resolved.


--1557151136.b4Dc60.18811
Date: Mon, 6 May 2019 13:58:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1134208

            Bug ID: 1134208
           Summary: nodejs10: unit test errors with OpenSSL 1.1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: amajer-at-suse.com
          Reporter: amajer-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1108977
          Found By: ---
           Blocker: ---

Unit tests fail when run against OpenSSL 1.1.1


--1557151256.beFC13D212.19653
Date: Mon, 6 May 2019 14:00:56 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1134209

            Bug ID: 1134209
           Summary: nodejs8: unit test errors with OpenSSL 1.1.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: amajer-at-suse.com
          Reporter: amajer-at-suse.com
        QA Contact: qa-bugs-at-suse.de
            Blocks: 1108977
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1134208 +++

Unit tests fail when run against OpenSSL 1.1.1

nodejs8 will require more backport work as upstream only does security fixes
for 8.x branch.


body:
--1557152450.632E0.22434
Date: Mon, 6 May 2019 14:20:50 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134213

            Bug ID: 1134213
           Summary: wireless-regdb: update to 2019.03.01
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: mpluskal-at-suse.com
          Reporter: mpluskal-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

2019.03.01 release of wireless regdb updates regulatory data such as:

* Sync IN with G.S.R. 1048(E)
* Update regulatory rules for Sweden (SE) on 2.4/5/60 GHz
* update 60ghz band rules for us
* Add 5725-5875 MHz rule for Portugal (PT)

summary: wireless-regdb: update to 2019.03.01


--1557155086.eeDe7E6B0.22844
Date: Mon, 6 May 2019 15:04:46 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1134218

            Bug ID: 1134218
           Summary: VUL-0: chromium: multiple security fixes in 74.0.3729.131
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: tchvatal-at-suse.com
          Reporter: atoptsoglou-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html

This update includes 2 security fixes:
CVE-2019-5827: Out-of-bounds access in SQLite.
CVE-2019-5824: Parameter passing error in media player

The following bugs were fixed in previous Chrome releases, but were mistakenly
omitted from the release notes at the time:
CVE-2019-5825: Out-of-bounds write in V8
CVE-2019-5826: Use-after-free in IndexedDB


body:
--1557222115.Add183DB0.876
Date: Tue, 7 May 2019 09:41:55 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134293

            Bug ID: 1134293
           Summary: Snapshot 20190505 breaks Cinnamon 3.8.9
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Other
          Assignee: bnc-team-screening-at-forge.provo.novell.com
          Reporter: timothyadams-at-ymail.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

Zypper dup from the 20190502 to 20190505 snapshot yields a looping Cinnamon
crash on desktop startup, and a default to IceWM.  I tested this on both a bare
metal install (while upgrading from a late April snapshot) and on a Cinnamon
virtual machine that had already been dup'd to 20190502.

The packages "upgraded" in the dup from 20190502 to 20190505 are listed below
the dashed line.

---------------------------------

The following 2 NEW packages are going to be installed:
  kernel-default-5.0.11-1.2 libgnomekbd8

The following 2 packages are going to be REMOVED:
  libgnomekbd yast2-fonts

The following 189 packages are going to be upgraded:
  aaa_base aaa_base-extras adwaita-icon-theme at-spi2-atk-common
  at-spi2-atk-gtk2 at-spi2-core at-spi2-core-lang atk-lang autofs
  autoyast2-installation bash-completion bluez clutter-lang cogl-lang dconf
  dracut gio-branding-openSUSE girepository-1_0 glib2-lang glib2-tools
  gnome-bluetooth gnome-bluetooth-lang gnome-keyring gnome-keyring-lang
  gnome-keyring-pam gnome-online-accounts gnome-online-accounts-lang
  gnome-terminal gnome-terminal-lang gsettings-backend-dconf
  gsettings-desktop-schemas gsettings-desktop-schemas-lang
  gtk2-branding-openSUSE gtk2-data gtk2-engine-clearlooks gtk2-engine-crux
  gtk2-engine-glide gtk2-engine-hcengine gtk2-engine-industrial
gtk2-engine-mist
  gtk2-engine-redmond95 gtk2-engine-thinice gtk2-engines gtk2-immodule-amharic
  gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-tigrigna
  gtk2-immodule-vietnamese gtk2-lang gtk2-theme-clearlooks gtk2-theme-crux
  gtk2-theme-industrial gtk2-theme-mist gtk2-theme-redmond95 gtk2-theme-thinice
  gtk2-tools gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut
  gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-lang
  gtk3-tools gtk4-schema gvfs gvfs-backend-afc gvfs-backend-samba gvfs-backends
  gvfs-fuse gvfs-lang hplip-hpijs libLLVM6 libLLVM7 libatk-1_0-0
  libatk-bridge-2_0-0 libatspi0 libavahi-client3 libavahi-common3
libavahi-glib1
  libbluetooth3 libcdrdeflt1_0 libclutter-1_0-0 libcogl-pango20 libcogl20
  libdav1d1 libdconf1 libdeflt1_0 libdns_sd libedit0 libfile1_0 libfind3_0
  libgck-modules-gnome-keyring libgio-2_0-0 libgirepository-1_0-1 libglib-2_0-0
  libgmodule-2_0-0 libgnome-bluetooth13 libgnomekbd-lang libgoa-1_0-0
  libgoa-backend-1_0-1 libgobject-2_0-0 libgthread-2_0-0 libgtk-2_0-0
libgtk-3-0
  libjavascriptcoregtk-4_0-18 liblzo2-2 libnotify4 libpango-1_0-0 libpcre2-16-0
  libpcre2-8-0 libpolkit0 librados2 libreiserfscore0 librmt1_0 librscg1_0
  libscg1_0 libscgcmd1_0 libschily2_0 libsoup-2_4-1 libsoup-lang
  libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 libtasn1 libtasn1-6
  libvte-2_91-0 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang libyaml-0-2 libzstd1
  mkisofs notification-daemon notification-daemon-lang ntp openSUSE-release
  openSUSE-release-ftp patterns-base-apparmor patterns-base-apparmor_opt
  patterns-base-base patterns-base-enhanced_base
patterns-base-enhanced_base_opt
  patterns-base-minimal_base patterns-base-sw_management patterns-base-x11
  patterns-base-x11_enhanced patterns-base-x11_opt polkit python2-gobject
  python2-gobject-Gdk python2-gobject-cairo python2-rpm python3-cupshelpers
  python3-gobject python3-gobject-Gdk python3-gobject-cairo python3-rpm rpm
  schily-mt schily-rmt shared-mime-info shared-mime-info-lang spax star
  typelib-1_0-Atk-1_0 typelib-1_0-Clutter-1_0 typelib-1_0-Cogl-1_0
  typelib-1_0-CoglPango-1_0 typelib-1_0-GnomeBluetooth-1_0 typelib-1_0-Gtk-3_0
  typelib-1_0-Notify-0_7 typelib-1_0-Pango-1_0 typelib-1_0-Soup-2_4
  udev-configure-printer virtualbox-guest-kmp-default virtualbox-guest-tools
  virtualbox-guest-x11 vte-lang webkit2gtk-4_0-injected-bundles xterm xterm-bin
  yast2 yast2-bootloader yast2-firewall yast2-logs yast2-storage-ng
yast2-update
  zenity zenity-lang

The following 10 patterns are going to be upgraded:
  apparmor apparmor_opt base enhanced_base enhanced_base_opt minimal_base
  sw_management x11 x11_enhanced x11_opt

The following product is going to be upgraded:
  openSUSE Tumbleweed  20190502-0 -> 20190505-0

The following package requires a system reboot:
  kernel-default-5.0.11-1.2

summary: Snapshot 20190505 breaks Cinnamon 3.8.9


--1557224218.04360.14235
Date: Tue, 7 May 2019 10:16:58 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134298

            Bug ID: 1134298
           Summary: science/hdf5: wrong libname in hpc pkgconfig file
    Classification: openSUSE
           Product: openSUSE.org
           Version: unspecified
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: 3rd party software
          Assignee: dmitry-at-roshchin.org
          Reporter: neyers-at-geod.uni-bonn.de
        QA Contact: bnc-team-screening-at-forge.provo.novell.com
          Found By: ---
           Blocker: ---

The pkgconfig files contain wrong names for the shared libraries (they are
prefixed with `lib`).

grep "Libs" /usr/lib/hpc/gnu8/openmpi3/hdf5/1.10.4/lib64/pkgconfig/hdf5.pc
Libs: -L${libdir} -llibhdf5

The libraries therefore cannot be found, e.g.:

ml gnu hdf5

g++ $(pkg-config --libs hdf5)
/usr/lib64/gcc/x86_64-suse-linux/8/../../../../x86_64-suse-linux/bin/ld: cannot
find -llibhdf5
collect2: error: ld returned 1 exit status

g++ -lhdf5
/usr/lib64/gcc/x86_64-suse-linux/8/../../../../x86_64-suse-linux/bin/ld:
/usr/lib64/gcc/x86_64-suse-linux/8/../../../../lib64/crt1.o: in function
`_start':
/home/abuild/rpmbuild/BUILD/glibc-2.29/csu/../sysdeps/x86_64/start.S:104:
undefined reference to `main'
collect2: error: ld returned 1 exit status

Cheers


body:
--1557224931.63bcFdF53.15353
Date: Tue, 7 May 2019 10:28:51 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.opensuse.org/show_bug.cgi?id=1134303

            Bug ID: 1134303
           Summary: aarch64 kernel are not signed
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: aarch64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-maintainers-at-forge.provo.novell.com
          Reporter: guillaume.gardet-at-arm.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

On aarch64, "pesign -S -i /boot/Image-5.0.7-5.g8a6bcaf-default" returns:
  No signatures found.

This is because in kernel-binary.spec.in, we only have the x86_64 image format:
  BRP_PESIGN_FILES="/boot/vmlinuz-%kernelrelease-%build_flavor"

For aarch64, we should have:
  BRP_PESIGN_FILES="/boot/Image-%kernelrelease-%build_flavor"

summary: aarch64 kernel are not signed


--1557234079.ff8c0e0.10326
Date: Tue, 7 May 2019 13:01:19 +0000
MIME-Version: 1.0
Content-Type: text/plain

http://bugzilla.suse.com/show_bug.cgi?id=1134327

            Bug ID: 1134327
           Summary: Enhance Ghostscript apparmor profile for ps2epsi
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: All
                OS: openSUSE Factory
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jsmeix-at-suse.com
        QA Contact: qa-bugs-at-suse.de
          Found By: ---
           Blocker: ---

See
https://build.opensuse.org/request/show/701304

Basically this are the intended changes:

+++ ghostscript.changes
@@ -1,0 +2,5 @@
+Tue May  7 11:57:21 UTC 2019 - Dirk Stoecker <opensuse-at-dstoecker.de>
+
+- Fix apparmor profile for ps2epsi
+
+-------------------------------------------------------------------

other changes:
--------------

++++++ apparmor_ghostscript
-