May 2016 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Broken -fsanitize=address in local installation
by Cristian Rodríguez 20 May '16

20 May '16

Hi: In my local workstation, I have both gcc5 and gcc6 installed from the devel:gcc repository.. since maybe a month.. ASAN is broken and I can't figure out how to fix it. cat t.c #include <stdio.h> int main(void) { return 0; } gcc-5 -fsanitize=address t.c ➜ ~ ./a.out ==59605==AddressSanitizer CHECK failed: ../../../../libsanitizer/asan/asan_rtl.cc:556 "((!asan_init_is_running && "ASan init calls itself!")) != (0)" (0x0, 0x0) <empty stack> same result if I use GCC-6. any pointers about what exactly I screwed up ? ;) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 4

[opensuse-factory] Cinnamon don't exits the 'gnome-keyring-daemon' at shutdown
by Marco Calistri 20 May '16

20 May '16

Hello, I'd like if this is a known wide general problem or it could be a local issue: I use Cinnamon as main DE and every time I shutdown the system there is a POP window alerting that the key-manager is still working. I checked and after excluding the gpg-agent which I suspected at firts glance, I discovered that the blocking process is: /usr/bin/gnome-keyring-daemon --daemonize --login So I tried to add a line into my /etc/init.d/halt.local #! /bin/sh # # Copyright (c) 2002 SuSE Linux AG Nuernberg, Germany. All rights reserved. # # Author: Werner Fink, 1998 # Burchard Steinbild, 1998 # # /etc/init.d/halt.local # # script with local commands to be executed from init on system shutdown # # Here you should add things, that should happen directly before shuting # down. # KILL gpg-agent to prevent Cinnamon to wait at shutdown *killall /usr/bin/gnome-keyring-daemon* Without success. Any clues? Thanks and regards, -- Marco Calistri Opensuse Tumbleweed 64 bit - Kernel 4.5.0-3-default Gnome 3.20 Intel® Core™ i5-2410M CPU @ 2.30GHz × 4 - Intel® Sandybridge Mobile -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 3

[opensuse-factory] lokalize in Tumbleweed needs still libhunspell-1_3
by Freek de Kruijf 20 May '16

20 May '16

I can't use lokalize anymore in Tumbleweed. It still needs libhunspell-1_3, but only libhunspell-1_4 is available. -- fr.gr. member openSUSE Freek de Kruijf -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] New Tumbleweed snapshot 20160517 released!
by Ludwig Nussel 20 May '16

20 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: Mesa (11.2.1 -> 11.2.2) NetworkManager-vpnc abiword aria2 (1.22.0 -> 1.23.0) bijiben (3.20.0 -> 3.20.2) btrfsprogs (4.5.2 -> 4.5.3) calligra cheese (3.20.1 -> 3.20.2) eog (3.20.1 -> 3.20.2) evolution (3.20.1 -> 3.20.2) evolution-data-server (3.20.1 -> 3.20.2) evolution-ews (3.20.1 -> 3.20.2) fetchmail file-roller (3.20.1 -> 3.20.2) ghex (3.18.0 -> 3.18.1) glib-networking (2.48.1 -> 2.48.2) glib2 (2.48.0 -> 2.48.1) gnome-desktop (3.20.1 -> 3.20.2) gnome-user-docs (3.20.1 -> 3.20.2) goffice (0.10.28 -> 0.10.29) gpg2 (2.1.11 -> 2.1.12) gtk3 (3.20.3 -> 3.20.4) gvfs (1.28.1 -> 1.28.2) harfbuzz (1.2.6 -> 1.2.7) hunspell ipsec-tools kdevelop4 kernel-source (4.5.3 -> 4.5.4) libgweather (3.20.0 -> 3.20.1) libqt5-qtbase (5.5.1 -> 5.6.0) libqt5-qtdeclarative (5.5.1 -> 5.6.0) libqt5-qtgraphicaleffects (5.5.1 -> 5.6.0) libqt5-qtimageformats (5.5.1 -> 5.6.0) libqt5-qtlocation (5.5.1 -> 5.6.0) libqt5-qtmultimedia (5.5.1 -> 5.6.0) libqt5-qtquickcontrols (5.5.1 -> 5.6.0) libqt5-qtscript (5.5.1 -> 5.6.0) libqt5-qtsensors (5.5.1 -> 5.6.0) libqt5-qtserialport (5.5.1 -> 5.6.0) libqt5-qtsvg (5.5.1 -> 5.6.0) libqt5-qttools (5.5.1 -> 5.6.0) libqt5-qtwebchannel (5.5.1 -> 5.6.0) libqt5-qtwebkit (5.5.1 -> 5.6.0) libqt5-qtwebsockets (5.5.1 -> 5.6.0) libqt5-qtx11extras (5.5.1 -> 5.6.0) libqt5-qtxmlpatterns (5.5.1 -> 5.6.0) libsndfile libvirt-python (1.3.3 -> 1.3.4) libyui-qt (2.46.22 -> 2.46.23) libzypp (15.22.0 -> 16.0.0) lightdm (1.18.1 -> 1.19.0) man-pages (4.05 -> 4.06) mercurial (3.7.3 -> 3.8.1) mutt (1.6.0 -> 1.6.1) myspell-dictionaries (20160203 -> 20160511) ocaml polari (3.20.1 -> 3.20.2) python-atspi (2.20.1 -> 2.20.2) python3-atspi (2.20.1 -> 2.20.2) python3-numpy python3-py python3-pycurl python3-requests python3-setuptools (20.7.0 -> 21.0.0) python3-six python3-smbc python3-urllib3 python3-wheel systemd systemd-presets-branding-openSUSE unixODBC vinagre (3.20.1 -> 3.20.2) vino (3.20.1 -> 3.20.2) vm-install (0.8.51 -> 0.8.52) xf86-video-intel (2.99.917.641_ge4ef6e9 -> 2.99.917.651_g34f63f2) xorg-x11-server zypper (1.13.0 -> 1.13.1) === Details === ==== Mesa ==== Version update (11.2.1 -> 11.2.2) Subpackages: Mesa-32bit Mesa-devel Mesa-dri-devel Mesa-libEGL-devel Mesa-libEGL1 Mesa-libEGL1-32bit Mesa-libGL-devel Mesa-libGL1 Mesa-libGL1-32bit Mesa-libGLESv1_CM-devel Mesa-libGLESv1_CM1 Mesa-libGLESv2-2 Mesa-libGLESv2-devel Mesa-libglapi-devel Mesa-libglapi0 Mesa-libglapi0-32bit Mesa-libva libOSMesa-devel libOSMesa9 libOSMesa9-32bit libgbm-devel libgbm1 libgbm1-32bit libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libwayland-egl-devel libwayland-egl1 libxatracker2 - update to 11.2.2 - removed upstreamed patches: + u_dri2-Check-for-dummyContext-to-see-if-the-glx_context-is-valid.patch + u_dri3-Check-for-dummyContext-to-see-if-the-glx_contex.patch * fdo#92850 - Segfault loading War Thunder * fdo#93767 - Glitches with soft shadows and MSAA in Knights of the Old Republic 2 * fdo#94955 - Uninitialized variables leads to random segfaults (valgrind log, apitrace attached) * fdo#94994 - OSMesaGetProcAdress always fails on mangled OSMesa * fdo#95026 - Alien Isolation segfault after initial loading screen/video * fdo#95133 - X-COM Enemy Within crashes when entering tactical mission with Bonaire * fdo#95164 - GLSL compiler (linker I think) emits assertion upon call to glAttachShader * fdo#95251 - vdpau decoder capabilities: not supported * radeon/uvd: alignment fix for decode message buffer * st/mesa: fix sampler view leak in st_DrawAtlasBitmaps() * gallium/util: initialize pipe_framebuffer_state to zeros * dri: Fix robust context creation via EGL attribute * dri2: Check for dummyContext to see if the glx_context is valid * cherry-ignore: remove duplicate commit * cherry-ignore: ignore the GetSamplerParameterIuiv{EXT,OES} fixups * vc4: Fix subimage accesses to LT textures. * vc4: Add support for rendering to cube map surfaces. * vc4: Fix tests for format supported with nr_samples == 1. * vc4: Make sure we recompile when sample_mask changes. * glapi: fix _glapi_get_proc_address() for mangled function names * nvc0: fix retrieving query results into buffer for timestamps * nouveau/video: properly detect the decoder class for availability checks * i965/fs: Properly report regs_written from SAMPLEINFO * egl/x11: authenticate before doing chipset id ioctls * winsys/sw/xlib: use correct free function for xlib_dt->data * i965: Fix clear code for ignoring colormask for XRGB formats on Gen9+. * glsl: Convert lower_vec_index_to_swizzle to a rvalue visitor. * glsl: Lower vector_extracts to swizzles after lower_vector_derefs. * radeon/uvd: fix tonga feedback buffer size * st/mesa: fix blit-based GetTexImage for non-finalized textures * gallium/radeon: handle failure when mapping staging buffer * st/glsl_to_tgsi: reduce stack explosion in recursive expression visitor * gallium/radeon: fix crash in r600_set_streamout_targets * radeonsi: correct NULL-pointer check in si_upload_const_buffer * radeonsi: work around an MSAA fast stencil clear problem * r600g/radeonsi: send endian info to format translation functions * r600g: set endianess of 16/32-bit buffers according to do_endian_swap * r600g: use do_endian_swap in color swapping functions * r600g: use do_endian_swap in texture swapping function * r600g: fix and optimize tgsi_cmp when using ABS and NEG modifier * llvmpipe: (trivial) initialize src1_alpha var to NULL * gallivm: fix bogus argument order to lp_build_sample_mipmap function * gallivm: make sampling more robust against bogus coordinates * gk110/ir: do not overwrite def value with zero for EXCH ops * gk110/ir: make use of IMUL32I for all immediates * nvc0/ir: fix wrong emission of (a OP b) OP c * gk110/ir: add emission for (a OP b) OP c * nvc0: reduce GL_MAX_3D_TEXTURE_SIZE to 2048 on Kepler+ * st/glsl_to_tgsi: fix potential crash when allocating temporaries * dri3: Check for dummyContext to see if the glx_context is valid * i965/blorp/gen7: Prepare re-using for gen8 * i965/blorp: Use 8k chunk size for urb allocation * tgsi: initialize stack allocated struct * winsys/sw/dri: use correct free function for dri_sw_dt->data * android: enable dlopen() on all architectures ==== NetworkManager-vpnc ==== Subpackages: NetworkManager-vpnc-gnome - Move Requires: gnome-keyring from core package to gnome frontend package ==== abiword ==== Subpackages: libabiword-3_0 - Re-add abiword-librevenge.patch that was wrongly dropped when upgrading to Abiword 3.0.1. - Add libtool BuildRequires and an injected copy of abiword's autogen.sh, as above patch touches the build system. - Add abiword-libwps-0.4.patch: Port to libwps 0.4. - Change pkgconfig(libwps-0.3) BuildRequires to pkgconfig(libwps-0.4) in order to enable Microsoft Works Document support again. - Drop explicit libabiword-3_0 and link-grammar Requires: they are auto-detected. ==== aria2 ==== Version update (1.22.0 -> 1.23.0) Subpackages: aria2-lang libaria2-0 - Update to version 1.23.0: * Simplify cache write * Allow subsecond value in ns cookie.txt file's expiry time field * Adjust chromium cookie time * import-po: iterate on glob, not ls output * Add --stderr option to redirect all stdout log output to stderr * Add "hide" to --download-result option * Fix downloaded metaurl torrent filename * Add a little bit of color to have a better visual of important informations * Update README URLs based on HTTP redirects * Relocate from github.com/tatsuhiro-t/aria2 to github.com/aria2/aria2 * mingw: Defer the falloc warning until falloc is specified by option * Add bittorrent key to aria2.tellStopped status * Addsystem.listNotifications RPC method * Report CheckIntegrity info in tellStatus - Update download url ==== bijiben ==== Version update (3.20.0 -> 3.20.2) Subpackages: gnome-shell-search-provider-bijiben - Update to version 3.20.2: + Updated translations. ==== btrfsprogs ==== Version update (4.5.2 -> 4.5.3) Subpackages: libbtrfs0 - update to 4.5.3 * ioctl: fix unaligned access in buffer from TREE_SEARCH; might cause SIGBUS on architectures that do not support unaligned access and do not performa any fixups * improved validation checks of superblock and chunk-related structures * subvolume sync: fix handling of -s option * balance: adjust timing of safety delay countdown with --full-balance * rescue super-recover: fix reversed condition check * check: fix bytes_used accounting * documentation updates: mount options, scrub, send, receive, select-super, check, mkfs * testing: new fuzzed images, for superblock and chunks - fix build failure on 13.1: conditional default for udevdir - fix build failure on SLE11SP4: wrong check in makefile - Add udev rules for dm devices (bsc#912170 bsc#888215) - Added patch: 0169-btrfs-progs-udev-add-rules-for-dm-devices.patch - Added patch: btrfs-progs-no-PKG_CHECK_VAR ==== calligra ==== Subpackages: calligra-extras-dolphin calligra-extras-okular calligra-stage calligra-words-common - Use share-mime-info macros (boo#979301) ==== cheese ==== Version update (3.20.1 -> 3.20.2) Subpackages: libcheese-common libcheese-gtk25 libcheese8 - Update to version 3.20.2: + Explicitly mark the GSettings schema for intltool. As recommended in the GSettings documentation. + Add gettext-domain the GSettings schema. + Fix fallback application icon name (bgo#765874). + Updated translations. ==== eog ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== evolution ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin - Update to version 3.20.2: + Optimize some of the DOM functions related to selection. + EMsgComposer: Move the DOM manipulation to EHTMLEditorView. + EHTMLEditorActions: 'Select All' action is always disabled. + EHTMLEditorView: - Deleting a content in a PRE element could wrap the content in SPAN element. - Moving a Preformatted block one level up in the quoted content will change it to Normal. - Restore the selection end mark correctly when processing HTML to plain text. - Redoing a citation split removes an extra text. - Simplify and improve how the undo/redo of delete operation in quoted content is performed. + Recognize special folders for a global mail view also based on flags. + Rather hide, than disable, items in Taskpad/Memopad context menus. + Correct placement of emoticon and color chooser in composer under Wayland. + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446, bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017. + Updated translations. ==== evolution-data-server ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-data-server-devel libcamel-1_2-57 libebackend-1_2-10 libebook-1_2-16 libebook-contacts-1_2-2 libecal-1_2-19 libedata-book-1_2-25 libedata-cal-1_2-28 libedataserver-1_2-21 libedataserverui-1_2-1 typelib-1_0-EBook-1_2 typelib-1_0-EBookContacts-1_2 typelib-1_0-EDataServer-1_2 - Update to version 3.20.2: + [IMAPx]: - Release idle_lock before disconnecting the cancellable. - Crash under imapx_server_info_changed_cb(). - [CalDAV] Backend not initialized when asked to authenticate. + Possible use-after-free on factory subprocess close. + Bugs fixed: bgo#728496, bgo#235681. + Updated translations. ==== evolution-ews ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-ews-lang libeews-1_2-0 libewsutils0 - Update to version 3.20.2: + Ask for password after NTLM/SSO authentication failure. + Bugs fixed: bgo#764976, bgo#765209, bgo#765398. - Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream. ==== fetchmail ==== - Made the helper script introduced in last change return exit status 5 on configuration errors instead of 1, which should make it a bit less confusing (bsc#979534) ==== file-roller ==== Version update (3.20.1 -> 3.20.2) Subpackages: nautilus-file-roller - Update to version 3.20.2: + Extract here: show the 'operation completed' dialog. + Avoid tarbombs when using extract here (bgo#766071). + Fix extracting files with single-character names (bgo#761582). + Fix Add Files dialog button sensitivity (bgo#738177). + Fix GSettings schema validation with recent GLib (bgo#756607). + Updated translations. ==== ghex ==== Version update (3.18.0 -> 3.18.1) Subpackages: ghex-lang libgtkhex-3-0 - Update to version 3.18.1: + Update the AppData file to spec version 0.7+. + Updated translations. ==== glib-networking ==== Version update (2.48.1 -> 2.48.2) - Update to version 2.48.2: + gnutls: Fixed an infinite loop if a server sent two identical copies of its CA certificate (bgo#765317). + Updated translations. ==== glib2 ==== Version update (2.48.0 -> 2.48.1) Subpackages: glib2-devel glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - Update to version 2.48.1: + Bugs fixed: bgo#731988, bgo#747107, bgo#747478, bgo#748474, bgo#748530, bgo#748806, bgo#749606, bgo#758174, bgo#758738, bgo#762994, bgo#763379, bgo#763821, bgo#764092, bgo#764574, bgo#764575, bgo#764685, bgo#764754, bgo#765959, bgo#765990. + Updated translations. ==== gnome-desktop ==== Version update (3.20.1 -> 3.20.2) Subpackages: gnome-version libgnome-desktop-3-12 libgnome-desktop-3-devel libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 - Update to version 3.20.2: + No changes. ==== gnome-user-docs ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== goffice ==== Version update (0.10.28 -> 0.10.29) Subpackages: goffice-lang libgoffice-0_10-10 - Update to version 0.10.29: + Do not load invalid data labels in XYcolor plots (bgo#765155). + Fix an infinite loop condition in 3D plots (bgo#765480). + Implement line width and fill pattern support in themes (bgo#765970). + Improve go_complex_sqrt. + Improve go_complex_div. ==== gpg2 ==== Version update (2.1.11 -> 2.1.12) - GnuPG 2.1.12: * gpg: New --edit-key sub-command "change-usage" for testing purposes. * gpg: Out of order key-signatures are now systematically detected and fixed by --edit-key. * gpg: Improved detection of non-armored messages. * gpg: Removed the extra prompt needed to create Curve25519 keys. * gpg: Improved user ID selection for --quick-sign-key. * gpg: Use the root CAs provided by the system with --fetch-key. * gpg: Add support for the experimental Web Key Directory key location service. * gpg: Improve formatting of Tofu messages and emit new Tofu specific status lines. * gpgsm: Add option --pinentry-mode to support a loopback pinentry. * gpgsm: A new pubring.kbx is now created with the header blob so that gpg can detect that the keybox format needs to be used. * agent: Add read support for the new private key protection format openpgp-s2k-ocb-aes. * agent: Add read support for the new extended private key format. * agent: Default to --allow-loopback-pinentry and add option - -no-allow-loopback-pinentry. * scd: Changed to use the new libusb 1.0 API for the internal CCID driver. * dirmngr: The dirmngr-client does now auto-detect the PEM format. * g13: Add experimental support for dm-crypt. * The man pages for gpg and gpgv are now installed under the correct name (gpg2 or gpg - depending on a configure option). ==== gtk3 ==== Version update (3.20.3 -> 3.20.4) Subpackages: gtk3-data gtk3-devel gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Fix libgtk-3-0 dependency on gtk-data: require the data package for the latest installed version of libgtk-3-<n>. This is only needed for any eventual case where an ABI incompatible libgtk3 might ever appear in order to allow them to be parallel installable - something upstream knows to avoid doing. - Update to version 3.20.4: + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405, bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424, bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065, bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261, bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486, bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592, bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907, bgo#765922, bgo#765981, bgo#766166. + Updated translations. ==== gvfs ==== Version update (1.28.1 -> 1.28.2) Subpackages: gvfs-backend-afc gvfs-backends gvfs-fuse - Disable libnfs support on SLE. - Update to version 1.28.2: + udisks2: Fix crash when mounting encrypted volume. + Updated translations. ==== harfbuzz ==== Version update (1.2.6 -> 1.2.7) Subpackages: harfbuzz-devel libharfbuzz-icu0 libharfbuzz0 libharfbuzz0-32bit - Update to version 1.2.7: + Blacklist another version of Times New Roman (Bold) Italic from Windows 7. + Fix Mongolian Free Variation Selectors shaping with certain fonts. + Fix Tibetan shorthand contractions shaping. + Improved list of language tag mappings. + Unbreak build on Windows CE. + Make 'glyf' table loading lazy in hb-ot-font. ==== hunspell ==== Subpackages: hunspell-devel libhunspell-1_4-0 - Update baselibs.conf bnc#977784 - Add conflicts to hunspell 1.4.0 ==== ipsec-tools ==== - do not run %fdupes over the whole tree, to avoid symlinking /etc/ config files and /usr/ sample configs. ==== kdevelop4 ==== Subpackages: kdevelop4-devel kdevelop4-lang kdevelop4-plugin-cppsupport - Use share-mime-info macros (boo#979301) ==== kernel-source ==== Version update (4.5.3 -> 4.5.4) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.5.4 (bsc#969870). - Delete patches.arch/ACPI-processor-Request-native-thermal-interrupt-hand. - commit db90c25 - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (CVE-2016-4569,bsc#979213). - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (CVE-2016-4569,bsc#979213). - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (CVE-2016-4569,bsc#979213). - commit 875e079 - Bluetooth: vhci: Fix race at creating hci device (bsc#971799,bsc#966849). - Bluetooth: vhci: purge unhandled skbs (bsc#971799,bsc#966849). - Bluetooth: vhci: fix open_timeout vs. hdev race (bsc#971799,bsc#966849). - commit ea94c66 - net: fix infoleak in rtnetlink (CVE-2016-4486 bsc#978822). - commit 61212a2 - bpf: fix refcnt overflow (CVE-2016-4558 bsc#979019). - commit 6f2153b - bpf: fix double-fdput in replace_map_fd_with_map_ptr() (CVE-2016-4557 bsc#979018). - commit c96cd1e ==== libgweather ==== Version update (3.20.0 -> 3.20.1) Subpackages: libgweather-3-6 libgweather-data libgweather-devel typelib-1_0-GWeather-3_0 - Update to version 3.20.1: + Updated translations. ==== libqt5-qtbase ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Concurrent-devel libQt5Concurrent5 libQt5Core-devel libQt5Core-private-headers-devel libQt5Core5 libQt5DBus-devel libQt5DBus5 libQt5Gui-devel libQt5Gui-private-headers-devel libQt5Gui5 libQt5Network-devel libQt5Network5 libQt5OpenGL-devel libQt5OpenGL5 libQt5PlatformHeaders-devel libQt5PrintSupport-devel libQt5PrintSupport5 libQt5Sql-devel libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-postgresql libQt5Sql5-sqlite libQt5Sql5-unixODBC libQt5Test-devel libQt5Test5 libQt5Widgets-devel libQt5Widgets5 libQt5Xml-devel libQt5Xml5 libqt5-qtbase-common-devel libqt5-qtbase-devel - Add patches from upstream: 0001-xcb-XInput2-fixes-enter-leave-event-fixes.patch 0002-xcb-Correct-enter-leave-event-handling-when-mouse-bu.patch 0003-xcb-Fix-not-delivering-focusIn-event-on-hide-show.patch 0004-xcb-Fix-drag-and-drop-between-xcb-screens.patch 0005-xcb-Properly-initialize-available-geometry-when-XRan.patch 0006-xcb-properly-initialize-size-in-millimeters-if-XRand.patch 0007-xcb-Deliver-mouse-enter-event-to-window-when-closing.patch 0008-xcb-resourceType-names-must-have-only-small-letters.patch 0009-Expose-the-number-of-X-screen-through-the-QXcbScreen.patch 0010-xcb-mark-mouse-events-from-tablet-devices-as-synthes.patch 0011-xcb-Initialize-all-xcb_client_message_event_t-member.patch 0012-xcb-Merge-_NET_WM_STATE-hints-instead-of-overwriting.patch 0013-xcb-Fix-interpretation-of-the-size-from-RRCrtcChange.patch 0014-xcb-Properly-process-enter-leave-events.patch 0015-Use-the-state-of-the-key-event-to-process-it.patch 0016-xcb-Fix-drag-and-drop-to-applications-like-Emacs-and.patch - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 - Added patches for various QtDBus issues: Fix-QtDBus-deadlock-inside-kded-kiod.patch, QtDBus-clean-up-signal-hooks-and-object-tree-in-closeConnection.patch and QtDBus-finish-all-pending-call-with-error-if-disconnected.patch - Added tell-the-truth-about-private-api.patch: mark private and QPA API with symbols for only current patch release - Drop obsolete and/or upstreamed patches: xcb-fix-yet-another-crash-when-screens-are-disconnected.patch, xcb-dont-crash-in-mapToNativemapFromNative-if-the-screen-is-null.patch, qtwidgets_do_not-hide_show_via_WA_OutsideWSRange_for_native_widgets.patch, protect-geometry-QTBUG-40584.patch, move-the-official-Qt-version-from-qglobal-to-qmake-conf.patch, QMimeDatabase-follow-symlinks-when-checking-for-FIFO.patch, Fix-QtCore-compilation-with-clang.patch, Add-option-to-disable-session-management-by-closing-windows.patch, Add-an-automatic-use-of-the-ELF-versioned-QtCore-symbol.patch, Add-a-qt_version_tag-symbol-to-QtCore-that-uses-ELF-versions.patch, Add-a-linker-version-script-to-Qt-libraries.patch, 0005-Restore-documented-behavior-for-the-WA_X11NetWmWindo.patch, 0001-Fix-exclusion-of-anonymous-ciphers.patch and 0001-Fix-QWidget-setWindowRole.patch ==== libqt5-qtdeclarative ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQtQuick5 libqt5-qtdeclarative-devel libqt5-qtdeclarative-tools - Update to 5.6.0 - Drop support for non-SSE2 machines - Drop sse2_nojit.patch - Drop upstreamed patches: 0001-scene-graph-fixed-memory-leak-in-qsgbatchrenderer-re.patch, Refactor-FxViewItem-releasing-code.patch and sanitize-visibleItems-list-after-model-insertions.patch - Add overflow.patch to resolve "Statement might be overflowing a buffer" post-build-check error * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtgraphicaleffects ==== Version update (5.5.1 -> 5.6.0) - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtimageformats ==== Version update (5.5.1 -> 5.6.0) Subpackages: libqt5-qtimageformats-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtlocation ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Location5 libQt5Positioning5 libqt5-qtlocation-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtmultimedia ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Multimedia5 libqt5-qtmultimedia-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtquickcontrols ==== Version update (5.5.1 -> 5.6.0) - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtscript ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Script5 libqt5-qtscript-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtsensors ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports libqt5-qtsensors-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtserialport ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5SerialPort5 libqt5-qtserialport-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtsvg ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5Svg5 libqt5-qtsvg-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qttools ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5CLucene5 libQt5Designer5 libQt5DesignerComponents5 libQt5Help5 libqt5-linguist libqt5-linguist-devel libqt5-qttools-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtwebchannel ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtwebkit ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5WebKit5 libQt5WebKit5-devel libQt5WebKit5-imports libQt5WebKitWidgets-devel libQt5WebKitWidgets5 - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 - Swap link-qtcore.patch with 7dac8c2d5f743563df76c2347c6ad394b6779ffc.patch - Added 05-fix-linker-errors.diff: Explicitly link pthread, before it was pulled in via external deps ==== libqt5-qtwebsockets ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports libqt5-qtwebsockets-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtx11extras ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5X11Extras5 libqt5-qtx11extras-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libqt5-qtxmlpatterns ==== Version update (5.5.1 -> 5.6.0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-devel - Update to 5.6.0 * For more details please see: http://blog.qt.io/blog/2016/03/16/qt-5-6-released/ and https://wiki.qt.io/New_Features_in_Qt_5.6 ==== libsndfile ==== Subpackages: libsndfile-devel libsndfile1 libsndfile1-32bit - Fix spec file to enable builds on non opensuse OS ==== libvirt-python ==== Version update (1.3.3 -> 1.3.4) - Update to 1.3.4 - Add all new APIs and constants in libvirt 1.3.4 ==== libyui-qt ==== Version update (2.46.22 -> 2.46.23) - Now Yast requests the focus to the window manager when running fullscreen instead of relying on the window manager focus policy (bsc#974627) - 2.46.23 ==== libzypp ==== Version update (15.22.0 -> 16.0.0) - Prepare cmake to maintain the .pot and .po files in git. Add initial .po file set derived from tarballs. Translations are now maintained via Weblate. - Provide 'libzypp(plugin:services) = 1' after fixing bsc#933760 - Bump major version for Factory, 15.x is continued on SuSE-SLE-12-SP1-Branch - version 16.0.0 (0) - Update sle-zypp-po.tar.bz2 - Update sle-zypp-po.tar.bz2 ==== lightdm ==== Version update (1.18.1 -> 1.19.0) Subpackages: liblightdm-gobject-1-0 lightdm-lang - Update to version 1.19.0: * Use /dev/tty0 instead of /dev/console for VT operations. * Don't quit on SIGUSR1, SIGUSR2 or SIGHUP. * Improve XDMCP IPv6 address selection. * Set XDMCP hostname field in to system hostname or configured value. * Allow fcitx and mozc to run in guest session. * Fix lxsession running in guest session. * Drop support for legacy XMir. * Fix g_spawn compiler warning. - Don't configure twice. - Enable Vala bindings. - Drop support for openSUSE older than 13.2. - Some spec cleanup. ==== man-pages ==== Version update (4.05 -> 4.06) - update to 4.06: * New and rewritten pages cgroups.7 cgroup_namespaces.7 * Newly documented interfaces in existing pages clone.2 Document CLONE_NEWCGROUP readv.2 Document preadv2() and pwritev2() setns.2 Document CLONE_NEWCGROUP unshare.2 Document CLONE_NEWCGROUP ==== mercurial ==== Version update (3.7.3 -> 3.8.1) Subpackages: mercurial-lang - fix mercurial-locale-fix.patch - update to v3.8.1 (3.8.1 was released immediately after 3.8 to fix a release oversight.) Regularly scheduled feature release. This release contains a low-priority security fix for: * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos Features * `hg update` and other commands that can perform update (such as hg pull -u) now warn about other topological heads * cHg has been added * `hg update` now updates to the tip-most changeset on the same topological branch. Before, it would update to the tip-most changeset, possibly on a different topological head * Hints on how to continue interrupted commands are now printed (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or `hg histedit --continue`) * The experimental automv extension has been added. This extension attempts to detect file copes and renames automatically. * The 3rd party hgwatchman extension has been imported as the fsmonitor extension. This extension uses filesystem watching to make commands like `hg status` significantly faster on large repositories. * `hg rebase` now chooses its default destination the same way `hg merge` does * `hg pull -u` now activates a bookmark if the has a bookmark * `hg pull -u` now deactivates a bookmark if the destination doesn't match the existing bookmark * Improved edge styles in graph log. * User template keywords and functions can be defined in `[templatealias]` section. * It's now possible to push the active bookmark using `hg push -B .`. Improvements This release includes many improvements, including (but not limited to): * performance of copy detection during rebases has been improved, potentially leading to faster rebase execution * performance of `hg log -f <file>` has been improved * syntax errors in loaded extensions are now handled better * `hg update` on Windows should now be up to 4x faster * JSON encoding should now be proper UTF-8 for all inputs * Performance of the - revset operator has been improved * The blackbox extension now logs more data * "hgext" is now a Python namespace package * revsets accessing changelog data (commit messages, authors, dates) are now 10-15% faster * hg.exe built in MinGW will now link against the proper Python DLL ==== mutt ==== Version update (1.6.0 -> 1.6.1) - Update to mutt version 1.6.1 (2016-05-01): ! Bug fix release. No features were modified or added. - Add and use neomutt-patches-20160502.tar.gz from http://www.neomutt.org/ - Modify the patches aw.listreply.diff bsc907453-CVE-2014-9116-jessie.patch bug-676388-largefile.patch mutt-1.5.15-wrapcolumn.diff mutt-1.5.20-sendgroupreplyto.diff mutt-1.5.21-mailcap.diff mutt-1.5.21-tinfo.dif mutt-1.5.23-cariage-return.path mutt-1.5.9i-pgpewrap.diff patch-1.5.24.vk.pgp_verbose_mime widechar.sidebar.dif - Modify and rename the patches mutt-1.6.0-opennfs.dif becomes mutt-1.6.1-opennfs.dif mutt-1.6.0.dif becomes mutt-1.6.1.dif patch-1.6.0.rr.compressed.bz2 becomes patch-1.6.1.rr.compressed.bz2 - Remove the patches patch-1.6.0.sidebar.20160411.patch nion.sidebar-color.diff now upstream or part of neomutt patch collection ==== myspell-dictionaries ==== Version update (20160203 -> 20160511) Subpackages: myspell-cs_CZ myspell-da_DK myspell-de myspell-de_DE myspell-el_GR myspell-en myspell-en_GB myspell-en_US myspell-es myspell-es_ES myspell-fr_FR myspell-hu_HU myspell-it_IT myspell-lightproof-en myspell-lightproof-hu_HU myspell-lightproof-pt_BR myspell-lightproof-ru_RU myspell-pl_PL myspell-pt_BR myspell-ru_RU - Version update to git state 20160511: * Notably croatian and czech rules updates ==== ocaml ==== Subpackages: ocaml-compiler-libs ocaml-runtime - add ocaml-4.02.3-bufferoverflow_infoleak.patch to prevent buffer overflow and information leak [bsc#977990], [CVE-2015-8869] - use spec-cleaner to clean the specfile ==== polari ==== Version update (3.20.1 -> 3.20.2) Subpackages: typelib-1_0-Polari-1_0 - Update to version 3.20.2: + Support pasting text/image content from files (bgo#766066). + Enable text/image uploads via drag and drop (bgo#766068). + Updated translations. ==== python-atspi ==== Version update (2.20.1 -> 2.20.2) - Update to version 2.20.2: + Update STATE_LAST_DEFINED so that STATE_READ_ONLY is recognized (bgo#766121). ==== python3-atspi ==== Version update (2.20.1 -> 2.20.2) - Update to version 2.20.2: + Update STATE_LAST_DEFINED so that STATE_READ_ONLY is recognized (bgo#766121). ==== python3-numpy ==== - specfile: * updated source url to files.pythonhosted.org ==== python3-py ==== - specfile: * changed to https for source url * updated source url to files.pythonhosted.org ==== python3-pycurl ==== - specfile: * updated source url to files.pythonhosted.org ==== python3-requests ==== - specfile: * changed to https for source url * updated source url to files.pythonhosted.org ==== python3-setuptools ==== Version update (20.7.0 -> 21.0.0) - update to version 21.0.0: * Removed ez_setup.py from Setuptools sdist. The bootstrap script will be maintained in its own branch and should be generally be retrieved from its canonical location at https://bootstrap.pypa.io/ez_setup.py. - specfile: * updated source url to files.pythonhosted.org - update to version 20.10.1: (no changelog available) - changes from version 20.10.0: * #553: egg_info section is now generated in a deterministic order, matching the order generated by earlier versions of Python. Except on Python 2.6, order is preserved when existing settings are present. * #556: Update to Packaging 16.7, restoring support for deprecated python_implmentation marker. * #555: Upload command now prompts for a password when uploading to PyPI (or other repository) if no password is present in .pypirc or in the keyring. - update to version 20.9.0: * #548: Update certify version to 2016.2.28 * #545: Safely handle deletion of non-zip eggs in rotate command. - changes from version 20.8.1: * Issue #544: Fix issue with extra environment marker processing in WorkingSet due to refactor in v20.7.0. - changes from version 20.8.0: * Issue #543: Re-release so that latest release doesn't cause d�j� vu with distribute and setuptools 0.7 in older environments. ==== python3-six ==== - specfile: * changed to https for source url * updated source url to files.pythonhosted.org ==== python3-smbc ==== - specfile: * updated source url to files.pythonhosted.org ==== python3-urllib3 ==== - specfile: * updated source url to files.pythonhosted.org ==== python3-wheel ==== - specfile: * updated source url to files.pythonhosted.org ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-logger systemd-sysvinit udev - fix warning about missing install info during preset (boo#970293) 0001-systemctl-pid1-do-not-warn-about-missing-install-inf.patch ==== systemd-presets-branding-openSUSE ==== - enable mcelog by default instead of using an udev rule on /dev/mcelog (bsc#976781) ==== unixODBC ==== Subpackages: unixODBC-32bit - Requested by fate#319390 - Add comment in spec file so people know why the .so files are not in the devel package ==== vinagre ==== Version update (3.20.1 -> 3.20.2) Subpackages: vinagre-lang - Update to version 3.20.2: + Updated translations. ==== vino ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== vm-install ==== Version update (0.8.51 -> 0.8.52) - bsc#978526 - text mode installation doesn't allow specifying install source - Version 0.8.52 ==== xf86-video-intel ==== Version update (2.99.917.641_ge4ef6e9 -> 2.99.917.651_g34f63f2) - Updated to 2.99.917.651_g34f63f2: sna: Do not force ping-pong migration for TearFree + NoAccel sna: Add a special case for fast DRI2CopyRegion and NoAccel sna/dri2: Force consideration of the DRI2CopyRegion source as unclean sna/dri2: Enforce swap-limits on stale buffers sna/gen6+: Don't force a switch to BLT if the target bo cannot be blitted sna/dri2: Force blocking wait if vblank queue fails sna/dri2: Refactor open-coded __kgem_bo_is_busy sna: Do not cache the current crtc bo after performing the setcrtc sna: Ensure we only cache the local CRTC scanout buffer (boo#980124). ==== xorg-x11-server ==== Subpackages: xorg-x11-server-extra xorg-x11-server-sdk - Replace N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch by N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch Only disable HW cursor for cirrus and mgag200. This should fix a regression introduced by using modesetting for Intel gen9+ (boo#980124). ==== zypper ==== Version update (1.13.0 -> 1.13.1) Subpackages: zypper-aptitude zypper-log - Prepare cmake to maintain the .pot and .po files in git. Add initial .po file set derived from tarballs. Translations are now maintained via Weblate. - Fix install/remove commands to be case sensitive (bsc#940477) - Fix testing for '-- download*' options (bsc#956480) - Unify code acquiring the zypp lock (bnc#969107) - Rephrase note if 'lsof' is not installed (bsc#974438) - search: fix empty search result message (bsc#972999) - versioncmp: don't check for zypp lock (bsc#970575) - BuildRequires: libzypp-devel >= 15.22.1 - version 1.13.1 - Update sle-zypper-po.tar.bz2 (bsc#972768) - Update zypper-po.tar.bz2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] Increase entropy in openQA?
by Shyukri Shyukriev 19 May '16

19 May '16

Cross-posting to Factory... Hello All, I'm struggling with testing OBS Appliances ( https://openqa.opensuse.org/group_overview/17 ) which uses gpg keygen during setup. Checking the appliance started with openQA QEMU_VIRTIO_RNG=1 options shows: cat /proc/sys/kernel/random/entropy_avail 16 while on o.o.o w/o QEMU_VIRTION_RNG entropy_avail is ~37 Googling about the topic suggests using dev/urandom, but it's not secure enough... http://linux-audit.com/gpg-key-generation-not-enough-random-bytes-available/ http://serverfault.com/questions/471412/gpg-gen-key-hangs-at-gaining-enough… Any ideas? serial0 log https://openqa.opensuse.org/tests/196141/file/serial0.txt Best regards -- Shyukri Shyukriev http://susestudio.com SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 9

[opensuse-factory] missing symbol in /usr/lib64/samba/libauthkrb5-samba4.so
by Hartmut Rosch 19 May '16

19 May '16

Hi, I am using Tumbleweed snapshot 20160517 and still have the same problem. If I want to see a video, it doesn't matter which videoformat, calling mplayer I receive an error message like: mplayer: relocation error: /usr/lib64/samba/libauthkrb5-samba4.so: symbol tevent_req_is_unix_error, version TEVENT_UTIL_0.0.1 not defined in file libtevent-util.so.0 with link time reference How can I fix that? Any suggestions? regards Hartmut Rosch Delmenhorst long time Tumbleweed user -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] Is osc downloading RPM packages via HTTP?
by Robert Munteanu 19 May '16

19 May '16

Hi, I tried building a package while behind a network with a pretty intrusive HTTP proxy. When osc needed to download some packages, I got corrupt files, signaled by: unsupported package type. magic: '<!DOCTY' Obviously an HTML error page was served instead of the rpm file. Looking at the stat output it seems indeed that packages are downloaded via http instead of https ( see sin_port value for the connect call ) socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 11 connect(11, {sa_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("195.135.221.134")}, 16) = 0 sendto(11, "GET /repositories/openSUSE:/Fact"..., 194, 0, NULL, 0) = 194 recvfrom(11, "HTTP/1.1 302 Found\r\nDate: Mon, 1"..., 8192, 0, NULL, NULL) = 673 But that may be just me reading the output incorrectly. A couple of questions from me: 1. Should osc really be downloading package over http instead of https? I would imagine injecting a malicious RPM file can be problematic from a security POV when building locally. 2. Is there a switch to use https? I could not find in when looking at `osc -h` or ~/.oscrc 3. Should I file a bug for this? If so, where? Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 7

[opensuse-factory] Change request in Software Update (adding feature)
by Marco Calistri 19 May '16

19 May '16

Hello, I'm using LinuxMint and Ubuntu 14.04 LTS as VM guests beside Opensuse TW and one feature I would like to be added in TW is the detailed status during system update/upgrade. On Opensuse we cannot see the progress status of what is going on during a system update or even upgrade from the Software Update GUI as happens in LinuxMint and Ubuntu. Ok, I know that by using zypper from console allows to see what is going on but I would like to have this feature also in the GUI by clicking on "Details". Thanks for your attention. Regards, -- Marco Calistri Opensuse Tumbleweed 64 bit - Kernel 4.5.0-3-default Gnome 3.20 Intel® Core™ i5-2410M CPU @ 2.30GHz × 4 - Intel® Sandybridge Mobile -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] YaST: highlights of development sprint 19
by Ancor Gonzalez Sosa 19 May '16

19 May '16

Another three weeks, another update from the YaST Team. https://lizards.opensuse.org/?p=11822 Enjoy. -- Ancor González Sosa YaST Team at SUSE Linux GmbH -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 5

[opensuse-factory] systemd, failed to start udev
by C. Brouerius van Nidek 18 May '16

18 May '16

At every boot I get a failure message and it takes some time before the boot process finishes. I finally started to read through the error info and got following result: ---------------------------- #systemctl status systemd-udev-settle.service ● systemd-udev-settle.service - udev Wait for Complete Device Initialization Loaded: loaded (/usr/lib/systemd/system/systemd-udev-settle.service; static; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2016-05-17 23:30:15 WIB; 20min ago Docs: man:udev(7) man:systemd-udevd.service(8) Process: 516 ExecStart=/usr/bin/udevadm settle (code=exited, status=1/ FAILURE) Main PID: 516 (code=exited, status=1/FAILURE) May 17 23:30:15 bigone systemd[1]: systemd-udev-settle.service: Main process exited, code=exited, status=1/FAILURE May 17 23:30:15 bigone systemd[1]: Failed to start udev Wait for Complete Device Initialization. May 17 23:30:15 bigone systemd[1]: systemd-udev-settle.service: Unit entered failed state. May 17 23:30:15 bigone systemd[1]: systemd-udev-settle.service: Failed with result 'exit-code'. ------------------------------- It did not much togive a solution to the problem and reading the man pages udev and systemd-udevd.service did not help either. Could somebody with an understanding of my problem give me some guidance? Thanks beforehand Constant -- Linux User 183145 using Tumbleweed on a Pentium IV System : Linux 4.5.4-1.gdb90c25-default Distro : openSUSE 20160514 (x86_64) Desktop: KDE Frameworks: 5.21.0 and Plasma 5.6.3 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 7

[opensuse-factory] Slow RPM generating on libreoffice
by Tomas Chvatal 18 May '16

18 May '16

Hello everyone, I am having quite problems with slowness that happens when building libreoffice [1]. This time the build was exceptionally slow but aside from that I noticed 1/3rd of the time was spent generating the rpms. Thats really really bad. End is [37099s] OTHER/rpmlint.log And build ends on [24352s] ~/rpmbuild/BUILD/libreoffice-5.1.3.2 I am not sure if rpmlint or rpmbuild are to blame. But I would like to draw on experience of you guys here to figure out what is happening and how to speed it up. TIA Tom [1] https://build.opensuse.org/build/LibreOffice:Factory/openSUSE_42.1/ x86_64/libreoffice/_log

3 3

Re: [opensuse-factory] Re: Lilo package removal?
by Linda Walsh 18 May '16

18 May '16

Ondřej Súkup wrote: > DONT lie ... https://github.com/torvalds/linux/blob/9256d5a308c95a50c6e85d682492ae1f86a7… > I see many bootloaders ---- It's been years since I had to deal with getting lilo fixed for the larger size disks. However, your accusation of deliberate manufacturing of falsehood: lying, vs. being misinformed, is a typical tactic of a veteran liar to discredit others who may make mistakes but do not, as you have chosen to, do so deliberately. Your deliberate intent to misinform forms the basis of lying -- not my being misinformed. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 6

[opensuse-factory] Splash Screen remains on desktop after logging in.
by Chan Ju Ping 18 May '16

18 May '16

Somehow, the KDE splashscreen now remains as an overlay over the desktop after logging in, and fails to disappear. I am currently working around the problem by running: $killall kwin_x11 $kwin_x11 Can someone familiar with the splashscreen settings help me with this possible configuration issue with the KDE splashscreen?

1 1

[opensuse-factory] Zepper stopped working
by Marcio Rodrigues 18 May '16

18 May '16

Hi, I am since yesterday my zypper stopped working. When I run zypper command if for example the error appears: "zypper: relocation error: zypper: symbol _ZN4zypp5CpeId11NoThrowType13lastMalformedB5cxx11E, version ZYPP_plain not defined in file libzypp.so.1519" with link reference team. Google found nothing to settle, someone on the list already had the same problem? - - Márcio Rodrigues -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 2

[opensuse-factory] New Tumbleweed snapshot 20160516 released!
by Ludwig Nussel 17 May '16

17 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: abiword calligra cheese (3.20.1 -> 3.20.2) evolution (3.20.1 -> 3.20.2) evolution-data-server (3.20.1 -> 3.20.2) evolution-ews (3.20.1 -> 3.20.2) ghex (3.18.0 -> 3.18.1) glib2 (2.48.0 -> 2.48.1) gnome-desktop (3.20.1 -> 3.20.2) gnome-user-docs (3.20.1 -> 3.20.2) goffice (0.10.28 -> 0.10.29) harfbuzz (1.2.6 -> 1.2.7) hunspell kdevelop4 kernel-source (4.5.3 -> 4.5.4) libsndfile libvirt-python (1.3.3 -> 1.3.4) libzypp (15.22.0 -> 16.0.0) man-pages (4.05 -> 4.06) myspell-dictionaries (20160203 -> 20160511) ocaml polari (3.20.1 -> 3.20.2) python-atspi (2.20.1 -> 2.20.2) python3-atspi (2.20.1 -> 2.20.2) python3-setuptools (20.7.0 -> 21.0.0) unixODBC vinagre (3.20.1 -> 3.20.2) vino (3.20.1 -> 3.20.2) zypper (1.13.0 -> 1.13.1) === Details === ==== abiword ==== Subpackages: libabiword-3_0 - Re-add abiword-librevenge.patch that was wrongly dropped when upgrading to Abiword 3.0.1. - Add libtool BuildRequires and an injected copy of abiword's autogen.sh, as above patch touches the build system. - Add abiword-libwps-0.4.patch: Port to libwps 0.4. - Change pkgconfig(libwps-0.3) BuildRequires to pkgconfig(libwps-0.4) in order to enable Microsoft Works Document support again. - Drop explicit libabiword-3_0 and link-grammar Requires: they are auto-detected. ==== calligra ==== Subpackages: calligra-extras-dolphin calligra-extras-okular calligra-stage calligra-words-common - Use share-mime-info macros (boo#979301) ==== cheese ==== Version update (3.20.1 -> 3.20.2) Subpackages: libcheese-common libcheese-gtk25 libcheese8 - Update to version 3.20.2: + Explicitly mark the GSettings schema for intltool. As recommended in the GSettings documentation. + Add gettext-domain the GSettings schema. + Fix fallback application icon name (bgo#765874). + Updated translations. ==== evolution ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin - Update to version 3.20.2: + Optimize some of the DOM functions related to selection. + EMsgComposer: Move the DOM manipulation to EHTMLEditorView. + EHTMLEditorActions: 'Select All' action is always disabled. + EHTMLEditorView: - Deleting a content in a PRE element could wrap the content in SPAN element. - Moving a Preformatted block one level up in the quoted content will change it to Normal. - Restore the selection end mark correctly when processing HTML to plain text. - Redoing a citation split removes an extra text. - Simplify and improve how the undo/redo of delete operation in quoted content is performed. + Recognize special folders for a global mail view also based on flags. + Rather hide, than disable, items in Taskpad/Memopad context menus. + Correct placement of emoticon and color chooser in composer under Wayland. + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446, bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017. + Updated translations. ==== evolution-data-server ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-data-server-devel libcamel-1_2-57 libebackend-1_2-10 libebook-1_2-16 libebook-contacts-1_2-2 libecal-1_2-19 libedata-book-1_2-25 libedata-cal-1_2-28 libedataserver-1_2-21 libedataserverui-1_2-1 typelib-1_0-EBook-1_2 typelib-1_0-EBookContacts-1_2 typelib-1_0-EDataServer-1_2 - Update to version 3.20.2: + [IMAPx]: - Release idle_lock before disconnecting the cancellable. - Crash under imapx_server_info_changed_cb(). - [CalDAV] Backend not initialized when asked to authenticate. + Possible use-after-free on factory subprocess close. + Bugs fixed: bgo#728496, bgo#235681. + Updated translations. ==== evolution-ews ==== Version update (3.20.1 -> 3.20.2) Subpackages: evolution-ews-lang libeews-1_2-0 libewsutils0 - Update to version 3.20.2: + Ask for password after NTLM/SSO authentication failure. + Bugs fixed: bgo#764976, bgo#765209, bgo#765398. - Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream. ==== ghex ==== Version update (3.18.0 -> 3.18.1) Subpackages: ghex-lang libgtkhex-3-0 - Update to version 3.18.1: + Update the AppData file to spec version 0.7+. + Updated translations. ==== glib2 ==== Version update (2.48.0 -> 2.48.1) Subpackages: glib2-devel glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - Update to version 2.48.1: + Bugs fixed: bgo#731988, bgo#747107, bgo#747478, bgo#748474, bgo#748530, bgo#748806, bgo#749606, bgo#758174, bgo#758738, bgo#762994, bgo#763379, bgo#763821, bgo#764092, bgo#764574, bgo#764575, bgo#764685, bgo#764754, bgo#765959, bgo#765990. + Updated translations. ==== gnome-desktop ==== Version update (3.20.1 -> 3.20.2) Subpackages: gnome-version libgnome-desktop-3-12 libgnome-desktop-3-devel libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 - Update to version 3.20.2: + No changes. ==== gnome-user-docs ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== goffice ==== Version update (0.10.28 -> 0.10.29) Subpackages: goffice-lang libgoffice-0_10-10 - Update to version 0.10.29: + Do not load invalid data labels in XYcolor plots (bgo#765155). + Fix an infinite loop condition in 3D plots (bgo#765480). + Implement line width and fill pattern support in themes (bgo#765970). + Improve go_complex_sqrt. + Improve go_complex_div. ==== harfbuzz ==== Version update (1.2.6 -> 1.2.7) Subpackages: harfbuzz-devel libharfbuzz-icu0 libharfbuzz0 libharfbuzz0-32bit - Update to version 1.2.7: + Blacklist another version of Times New Roman (Bold) Italic from Windows 7. + Fix Mongolian Free Variation Selectors shaping with certain fonts. + Fix Tibetan shorthand contractions shaping. + Improved list of language tag mappings. + Unbreak build on Windows CE. + Make 'glyf' table loading lazy in hb-ot-font. ==== hunspell ==== Subpackages: hunspell-devel libhunspell-1_4-0 - Update baselibs.conf bnc#977784 - Add conflicts to hunspell 1.4.0 ==== kdevelop4 ==== Subpackages: kdevelop4-devel kdevelop4-lang kdevelop4-plugin-cppsupport - Use share-mime-info macros (boo#979301) ==== kernel-source ==== Version update (4.5.3 -> 4.5.4) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.5.4 (bsc#969870). - Delete patches.arch/ACPI-processor-Request-native-thermal-interrupt-hand. - commit db90c25 - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (CVE-2016-4569,bsc#979213). - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (CVE-2016-4569,bsc#979213). - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (CVE-2016-4569,bsc#979213). - commit 875e079 - Bluetooth: vhci: Fix race at creating hci device (bsc#971799,bsc#966849). - Bluetooth: vhci: purge unhandled skbs (bsc#971799,bsc#966849). - Bluetooth: vhci: fix open_timeout vs. hdev race (bsc#971799,bsc#966849). - commit ea94c66 - net: fix infoleak in rtnetlink (CVE-2016-4486 bsc#978822). - commit 61212a2 - bpf: fix refcnt overflow (CVE-2016-4558 bsc#979019). - commit 6f2153b - bpf: fix double-fdput in replace_map_fd_with_map_ptr() (CVE-2016-4557 bsc#979018). - commit c96cd1e ==== libsndfile ==== Subpackages: libsndfile-devel libsndfile1 libsndfile1-32bit - Fix spec file to enable builds on non opensuse OS ==== libvirt-python ==== Version update (1.3.3 -> 1.3.4) - Update to 1.3.4 - Add all new APIs and constants in libvirt 1.3.4 ==== libzypp ==== Version update (15.22.0 -> 16.0.0) - Prepare cmake to maintain the .pot and .po files in git. Add initial .po file set derived from tarballs. Translations are now maintained via Weblate. - Provide 'libzypp(plugin:services) = 1' after fixing bsc#933760 - Bump major version for Factory, 15.x is continued on SuSE-SLE-12-SP1-Branch - version 16.0.0 (0) - Update sle-zypp-po.tar.bz2 - Update sle-zypp-po.tar.bz2 ==== man-pages ==== Version update (4.05 -> 4.06) - update to 4.06: * New and rewritten pages cgroups.7 cgroup_namespaces.7 * Newly documented interfaces in existing pages clone.2 Document CLONE_NEWCGROUP readv.2 Document preadv2() and pwritev2() setns.2 Document CLONE_NEWCGROUP unshare.2 Document CLONE_NEWCGROUP ==== myspell-dictionaries ==== Version update (20160203 -> 20160511) Subpackages: myspell-cs_CZ myspell-da_DK myspell-de myspell-de_DE myspell-el_GR myspell-en myspell-en_GB myspell-en_US myspell-es myspell-es_ES myspell-fr_FR myspell-hu_HU myspell-it_IT myspell-lightproof-en myspell-lightproof-hu_HU myspell-lightproof-pt_BR myspell-lightproof-ru_RU myspell-pl_PL myspell-pt_BR myspell-ru_RU - Version update to git state 20160511: * Notably croatian and czech rules updates ==== ocaml ==== Subpackages: ocaml-compiler-libs ocaml-runtime - add ocaml-4.02.3-bufferoverflow_infoleak.patch to prevent buffer overflow and information leak [bsc#977990], [CVE-2015-8869] - use spec-cleaner to clean the specfile ==== polari ==== Version update (3.20.1 -> 3.20.2) Subpackages: typelib-1_0-Polari-1_0 - Update to version 3.20.2: + Support pasting text/image content from files (bgo#766066). + Enable text/image uploads via drag and drop (bgo#766068). + Updated translations. ==== python-atspi ==== Version update (2.20.1 -> 2.20.2) - Update to version 2.20.2: + Update STATE_LAST_DEFINED so that STATE_READ_ONLY is recognized (bgo#766121). ==== python3-atspi ==== Version update (2.20.1 -> 2.20.2) - Update to version 2.20.2: + Update STATE_LAST_DEFINED so that STATE_READ_ONLY is recognized (bgo#766121). ==== python3-setuptools ==== Version update (20.7.0 -> 21.0.0) - update to version 21.0.0: * Removed ez_setup.py from Setuptools sdist. The bootstrap script will be maintained in its own branch and should be generally be retrieved from its canonical location at https://bootstrap.pypa.io/ez_setup.py. - specfile: * updated source url to files.pythonhosted.org - update to version 20.10.1: (no changelog available) - changes from version 20.10.0: * #553: egg_info section is now generated in a deterministic order, matching the order generated by earlier versions of Python. Except on Python 2.6, order is preserved when existing settings are present. * #556: Update to Packaging 16.7, restoring support for deprecated python_implmentation marker. * #555: Upload command now prompts for a password when uploading to PyPI (or other repository) if no password is present in .pypirc or in the keyring. - update to version 20.9.0: * #548: Update certify version to 2016.2.28 * #545: Safely handle deletion of non-zip eggs in rotate command. - changes from version 20.8.1: * Issue #544: Fix issue with extra environment marker processing in WorkingSet due to refactor in v20.7.0. - changes from version 20.8.0: * Issue #543: Re-release so that latest release doesn't cause d�j� vu with distribute and setuptools 0.7 in older environments. ==== unixODBC ==== Subpackages: unixODBC-32bit - Requested by fate#319390 - Add comment in spec file so people know why the .so files are not in the devel package ==== vinagre ==== Version update (3.20.1 -> 3.20.2) Subpackages: vinagre-lang - Update to version 3.20.2: + Updated translations. ==== vino ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== zypper ==== Version update (1.13.0 -> 1.13.1) Subpackages: zypper-aptitude zypper-log - Prepare cmake to maintain the .pot and .po files in git. Add initial .po file set derived from tarballs. Translations are now maintained via Weblate. - Fix install/remove commands to be case sensitive (bsc#940477) - Fix testing for '-- download*' options (bsc#956480) - Unify code acquiring the zypp lock (bnc#969107) - Rephrase note if 'lsof' is not installed (bsc#974438) - search: fix empty search result message (bsc#972999) - versioncmp: don't check for zypp lock (bsc#970575) - BuildRequires: libzypp-devel >= 15.22.1 - version 1.13.1 - Update sle-zypper-po.tar.bz2 (bsc#972768) - Update zypper-po.tar.bz2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] ownCloud client fails to start
by Vojtěch Zeisek 17 May '16

17 May '16

$ lsb_release -sd "openSUSE Tumbleweed (20160514) (x86_64)” $ uname -a Linux veles 4.5.3-1-default #1 SMP PREEMPT Thu May 5 05:03:39 UTC 2016 (d29747f) x86_64 x86_64 x86_64 GNU/Linux $ rpm -qa | grep owncloud owncloud-client-dolphin-2.2.0-2.4.x86_64 owncloud-client-2.2.0-2.4.x86_64 libowncloudsync0-2.2.0-2.4.x86_64 owncloud-client-l10n-2.2.0-2.4.x86_64 http://download.opensuse.org/repositories/isv:/ownCloud:/desktop/ openSUSE_Tumbleweed/ $ owncloud owncloud: symbol lookup error: /usr/lib64/libowncloudsync.so.0: undefined symbol: _ZN9QKeychain3Job6setKeyERK7QString Any solution? -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/ https://trapa.cz/

2 2

[opensuse-factory] A taste of classic UNIX desktop on your Tumbleweed
by Howard Guo 17 May '16

17 May '16

Hello! Do you want to get a taste of the classic/traditional UNIX desktop environment on your bleeding-edge Tumbleweed distribution? CDE (Common Desktop Environment) was jointly developed by HP, IBM, SUN, and others. It was the iconic desktop for various UNIX workstations. Although CDE used to be proprietary software, its source code has recently released under LGPL, and the code base is now actively maintained by the open source community. Here is the RPM package, however it doesn't come with any warranty: https://build.opensuse.org/package/show/home:guohouzuo/cde To run CDE: - Enable and start "rpcbind" service - a mandatory requirement for CDE. - Use LightDM as display manager - other DM may work but they are not tested. - Enter user credentials and choose "CDE" desktop in the dropdown list. More on the history oc CDE: https://en.wikipedia.org/wiki/Common_Desktop_Environment Screenshot: http://susepaste.org/73324945 Have a nice long weekend ahead. Kind regards, Howard -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 5

[opensuse-factory] Bug in TW20160514 at least for Skylake
by Robby Engelmann 16 May '16

16 May '16

Please see the bug: https://bugzilla.novell.com/show_bug.cgi?id=980124 On my Skylake i7 the desktop is hardly usable after upgrade to this snapshot. --

1 0

[opensuse-factory] Re: Installing Gnome desktop on KDE Syste,
by Lindsay Mathieson 16 May '16

16 May '16

"sudo zypper in -t pattern gnome"? On 16 May 2016 at 11:24, Lindsay Mathieson <lindsay.mathieson(a)gmail.com> wrote: > I'm running Tumbleweed KDE, but would like to try the latest gnome. Couple > of questions :) > > What packed to install? "zypper install gnome-desktop"? or is it a pattern? > Not really up on zypper patterns yet. > > Would it be safe to snapshot the system with snapper and just rollback > afterwards? > > thanks, > > -- > Lindsay -- Lindsay -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Python support in LLDB
by Ronan Arraes Jardim Chagas 15 May '16

15 May '16

Hi guys, I'm trying to use the neovim plugin lldb.nvim that provides a good integration between lldb and neovim. However, it needs python support in lldb that was dropped in openSUSE [1]. Is there any reasonable explanation why this was dropped? ---------- [1] https://build.opensuse.org/request/show/369633 Regards, Ronan Arraes -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 5

[opensuse-factory] New package proposal: manpageeditor
by Dmitriy Perlow 15 May '16

15 May '16

Hello to all! I'd like to open a submit request with manpageeditor to openSUSE Factory. It is a really simple manual pages editor. It supports import of existing man page and a new man page template. [0] https://pkgs.org/search/?keyword=manpageeditor [1] https://build.opensuse.org/package/show/devel:tools/manpageeditor [2] http://keithhedger.hostingsiteforfree.com/pages/manpageeditor/help.html [3] http://gtk-apps.org/content/show.php?content=160219 [4] https://github.com/KeithDHedger/ManPageEditor -- Best regards, Dmitriy Perlow R&D chemical engineer Lekpharm JLLC -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] openSUSE Tumbleweed – Review of the Weeks 2016/19
by Dominique Leuenberger / DimStar 14 May '16

14 May '16

Dear Tumbleweed users and hackers, Despite the ‘shorter’ work-weeks we currently see in Europe due to various celebrations, Tumbleweed keeps on rolling. This is of course thanks to our community that does not let itself be stopped by some days off from work. This review will touch the snapshots 0508, 0511 and 0512. Note-worthy updates shipped in those snapshots: * Plasma 5.6.3 * Linux kernel 4.5.3 What is cooking: * Qt 5.6 – It is coming. Last night, a fix to address this was checked in to YaST. YaST is trying to work around an icewm issue, which would be much more complex to fix. * A switch away from sun rpc to tirpc. This is done in pam now and will move along to other areas, including glibc * KDE Application 16.04.1 * Perl 5.24.0 – let’s be surprised on how much we might need to fix Have a great weekend -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Rust language inclusion in Opensuse repos?
by Aayush Agarwal 14 May '16

14 May '16

Hi, Are there any plans to include the rust programming language packages in the official opensuse repositories for Leap and Tumbleweed? If not, who should I talk to about getting them included? Rust is v1.8.0 and pretty stable now. Personally I've never used it before but I was interested in learning it, and I saw it wasn't available as a package in any of the official repositories on Tumbleweed. Thank you, Aayush Agarwal -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 8

[opensuse-factory] Tumbleweed Docker Image needs updating.
by Carlos Hernandez 14 May '16

14 May '16

Hello, My docker images based on Tumbleweed are broken, they failed when trying to execute an upgrade or dist-upgrade. Building a new Tumbleweed image from a recently built kiwi image seems to resolve the issue. By the way the error is as follows: Warning: blog-2.18-1.9.x86_64.rpm %posttrans script failed (returned 1) zypper: relocation error: zypper: symbol _ZN4zypp5CpeId11NoThrowType13lastMalformedB5cxx11E, version ZYPP_plain not defined in file libzypp.so.1519 with link time reference I'd to suggest that the docker image be update. Additionally, would it not make sense for the docker image of Tumbleweed to be update every time there is a snapshot? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 2

[opensuse-factory] pam_yubico (2.21) depends on ykclient >= 2.15
by Carlos Hernandez 14 May '16

14 May '16

Hello, pam_yubico was updated 18 days ago to version 2.21 yet ykclient was not updated to the latest release. pam_yubico version 2.21 depends on ykclient >= 2.15 If not, you are locked out with the following error: PAM unable to dlopen(/lib64/security/pam_yubico.so): /lib64/security/pam_yubico.so: undefined symbol: ykclient_set_proxy The development project security for factory has an updated version for the ykclient that is compatible and produces no error with pam_yubico version 2.21. Package from security was submitted to factory. Thanks, Carlos Hernandez -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] The system crashes
by Kyrill Detinov 14 May '16

14 May '16

Hello. I have got 4 crashes today (13/14 May). The system crashes and going reboot. Running current Tumbleweed. Have no problem before. % cat /etc/os-release NAME=openSUSE VERSION="Tumbleweed" VERSION_ID="20160511" PRETTY_NAME="openSUSE Tumbleweed (20160511) (x86_64)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:20160511" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org/" ID_LIKE="suse" % uname -a Linux lazy 4.5.3-1-default #1 SMP PREEMPT Thu May 5 05:03:39 UTC 2016 (d29747f) x86_64 x86_64 x86_64 GNU/Linux messages and warn logs: http://susepaste.org/view/simple/60646278 http://susepaste.org/view/simple/44907391 -- WBR Kyrill

1 0

[opensuse-factory] Lost sound :/
by James Mason 14 May '16

14 May '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 After the last tumbleweed update, I've lost sound through my laptop's built-in sound device, and through it's docking station. (This is my first failure ever with Linux audio, so I guess I had it coming.) This is a Dell Latitude E7450, BTW. I know pulseaudio and any underlying subsystems are working - if I plug in a USB audio device it's recognized and usable immediately - so I assume it's a driver issue with my hardware. # lspci -v -s 00:03.0 00:03.0 Audio device: Intel Corporation Broadwell-U Audio Controller (rev 09) Subsystem: Dell Device 062e Flags: bus master, fast devsel, latency 0, IRQ 51 Memory at f723c000 (64-bit, non-prefetchable) [size=16K] Capabilities: [50] Power Management version 2 Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel # lspci -v -s 00:1b.0 00:1b.0 Audio device: Intel Corporation Wildcat Point-LP High Definition Audio Controller (rev 03) Subsystem: Dell Device 062e Flags: bus master, fast devsel, latency 32, IRQ 52 Memory at f7238000 (64-bit, non-prefetchable) [size=16K] Capabilities: [50] Power Management version 3 Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel # pulseaudio --dump-modules module-alsa-card ALSA Card module-alsa-sink ALSA Sink module-alsa-source ALSA Source module-always-sink Always keeps at least one sink loaded even if it's a null one module-augment-properties Augment the property sets of streams with additional static information module-bluetooth-discover Detect available Bluetooth daemon and load the corresponding discovery module module-bluetooth-policy When a bluetooth sink or source is added, load module-loopback module-bluez5-device BlueZ 5 Bluetooth audio sink and source module-bluez5-discover Detect available BlueZ 5 Bluetooth audio devices and load BlueZ 5 Bluetooth audio drivers module-card-restore Automatically restore profile of cards module-cli Command line interface module-cli-protocol-tcp Command line interface protocol (TCP sockets) module-cli-protocol-unix Command line interface protocol (UNIX sockets) module-combine Compatibility module (module- combine rename) module-combine-sink Combine multiple sinks to one module-console-kit Create a client for each ConsoleKit session of this user module-dbus-protocol D-Bus interface module-default-device-restore Automatically restore the default sink and source module-detect Detect available audio hardware and load matching drivers module-device-manager Keep track of devices (and their descriptions) both past and present and prioritise by role module-device-restore Automatically restore the volume/mute state of devices module-echo-cancel Echo Cancellation module-equalizer-sink General Purpose Equalizer module-esound-compat-spawnfd ESOUND compatibility module: - -spawnfd emulation module-esound-compat-spawnpid ESOUND compatibility module: - -spawnpid emulation module-esound-protocol-tcp ESOUND protocol (TCP sockets) module-esound-protocol-unix ESOUND protocol (UNIX sockets) module-esound-sink ESOUND Sink module-filter-apply Load filter sinks automatically when needed module-filter-heuristics Detect when various filters are desirable module-gconf GConf Adapter module-http-protocol-tcp HTTP (TCP sockets) module-http-protocol-unix HTTP (UNIX sockets) module-intended-roles Automatically set device of streams based on intended roles of devices module-ladspa-sink Virtual LADSPA sink module-lirc LIRC volume control module-loopback Loopback from source to sink module-match Playback stream expression matching module module-mmkbd-evdev Multimedia keyboard support via Linux evdev module-native-protocol-fd Native protocol autospawn helper module-native-protocol-tcp Native protocol (TCP sockets) module-native-protocol-unix Native protocol (UNIX sockets) module-null-sink Clocked NULL sink module-null-source Clocked NULL source module-oss OSS Sink/Source module-pipe-sink UNIX pipe sink module-pipe-source UNIX pipe source module-position-event-sounds Position event sounds between L and R depending on the position on screen of the widget triggering them. module-raop-discover mDNS/DNS-SD Service Discovery of RAOP devices module-raop-sink RAOP Sink module-remap-sink Virtual channel remapping sink module-remap-source Virtual channel remapping source module-rescue-streams When a sink/source is removed, try to move its streams to the default sink/source module-role-cork Mute & cork streams with certain roles while others exist module-role-ducking Apply a ducking effect based on streams roles module-rtp-recv Receive data from a network via RTP/SAP/SDP module-rtp-send Read data from source and send it to the network via RTP/SAP/SDP module-rygel-media-server UPnP MediaServer Plugin for Rygel module-simple-protocol-tcp Simple protocol (TCP sockets) module-simple-protocol-unix Simple protocol (UNIX sockets) module-sine Sine wave generator module-sine-source Sine wave generator source module-stream-restore Automatically restore the volume/mute/device state of streams module-suspend-on-idle When a sink/source is idle for too long, suspend it module-switch-on-connect When a sink/source is added, switch to it or conditionally switch to it module-switch-on-port-available n/a module-systemd-login Create a client for each login session of this user module-tunnel-sink Tunnel module for sinks module-tunnel-sink-new Create a network sink which connects via a stream to a remote PulseAudio server module-tunnel-source Tunnel module for sources module-tunnel-source-new Create a network source which connects via a stream to a remote PulseAudio server module-udev-detect Detect available audio hardware and load matching drivers module-virtual-sink Virtual sink module-virtual-source Virtual source module-virtual-surround-sink Virtual surround sink module-volume-restore Compatibility module module-x11-bell X11 bell interceptor module-x11-cork-request Synthesize X11 media key events when cork/uncork is requested module-x11-publish X11 credential publisher module-x11-xsmp X11 session management module-zeroconf-discover mDNS/DNS-SD Service Discovery module-zeroconf-publish mDNS/DNS-SD Service Publisher E: [pulseaudio] ltdl-bind-now.c: Failed to open module /usr/lib/module- init-tools.so: /usr/lib/module-init-tools.so: cannot open shared object file: No such file or directory E: [pulseaudio] modinfo.c: Failed to open module "/usr/lib/module-init- tools": file not found $ pactl list Module #0 Name: module-device-restore Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Automatically restore the volume/mute state of devices" module.version = "8.0-rebootstrapped" Module #1 Name: module-stream-restore Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Automatically restore the volume/mute/device state of streams" module.version = "8.0-rebootstrapped" Module #2 Name: module-card-restore Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Automatically restore profile of cards" module.version = "8.0-rebootstrapped" Module #3 Name: module-augment-properties Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Augment the property sets of streams with additional static information" module.version = "8.0-rebootstrapped" Module #4 Name: module-switch-on-port-available Argument: Usage counter: n/a Properties: Module #5 Name: module-udev-detect Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Detect available audio hardware and load matching drivers" module.version = "8.0-rebootstrapped" Module #6 Name: module-bluetooth-policy Argument: Usage counter: n/a Properties: module.author = "Frédéric Dalleau" module.description = "When a bluetooth sink or source is added, load module-loopback" module.version = "8.0-rebootstrapped" Module #7 Name: module-bluetooth-discover Argument: Usage counter: n/a Properties: module.author = "João Paulo Rechi Vita" module.description = "Detect available Bluetooth daemon and load the corresponding discovery module" module.version = "8.0-rebootstrapped" Module #8 Name: module-bluez5-discover Argument: Usage counter: n/a Properties: module.author = "João Paulo Rechi Vita" module.description = "Detect available BlueZ 5 Bluetooth audio devices and load BlueZ 5 Bluetooth audio drivers" module.version = "8.0-rebootstrapped" Module #9 Name: module-esound-protocol-unix Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "ESOUND protocol (UNIX sockets)" module.version = "8.0-rebootstrapped" Module #10 Name: module-native-protocol-unix Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Native protocol (UNIX sockets)" module.version = "8.0-rebootstrapped" Module #11 Name: module-gconf Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "GConf Adapter" module.version = "8.0-rebootstrapped" Module #12 Name: module-default-device-restore Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Automatically restore the default sink and source" module.version = "8.0-rebootstrapped" Module #13 Name: module-rescue-streams Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "When a sink/source is removed, try to move its streams to the default sink/source" module.version = "8.0-rebootstrapped" Module #14 Name: module-always-sink Argument: Usage counter: n/a Properties: module.author = "Colin Guthrie" module.description = "Always keeps at least one sink loaded even if it's a null one" module.version = "8.0-rebootstrapped" Module #16 Name: module-intended-roles Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Automatically set device of streams based on intended roles of devices" module.version = "8.0-rebootstrapped" Module #17 Name: module-suspend-on-idle Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "When a sink/source is idle for too long, suspend it" module.version = "8.0-rebootstrapped" Module #18 Name: module-console-kit Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Create a client for each ConsoleKit session of this user" module.version = "8.0-rebootstrapped" Module #19 Name: module-systemd-login Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Create a client for each login session of this user" module.version = "8.0-rebootstrapped" Module #20 Name: module-position-event-sounds Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Position event sounds between L and R depending on the position on screen of the widget triggering them." module.version = "8.0-rebootstrapped" Module #21 Name: module-role-cork Argument: Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Mute & cork streams with certain roles while others exist" module.version = "8.0-rebootstrapped" Module #22 Name: module-filter-heuristics Argument: Usage counter: n/a Properties: module.author = "Colin Guthrie" module.description = "Detect when various filters are desirable" module.version = "8.0-rebootstrapped" Module #23 Name: module-filter-apply Argument: Usage counter: n/a Properties: module.author = "Colin Guthrie" module.description = "Load filter sinks automatically when needed" module.version = "8.0-rebootstrapped" Module #24 Name: module-x11-publish Argument: display=:0 Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "X11 credential publisher" module.version = "8.0-rebootstrapped" Module #25 Name: module-x11-cork-request Argument: display=:0 Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "Synthesize X11 media key events when cork/uncork is requested" module.version = "8.0-rebootstrapped" Module #26 Name: module-x11-xsmp Argument: display=:0 session_manager=local/jmason- e7450.attachmate.com:@/tmp/.ICE-unix/2166,unix/jmason- e7450.attachmate.com:/tmp/.ICE-unix/2166 Usage counter: n/a Properties: module.author = "Lennart Poettering" module.description = "X11 session management" module.version = "8.0-rebootstrapped" Module #28 Name: module-null-sink Argument: sink_name=auto_null sink_properties='device.description="Dummy Output"' Usage counter: 0 Properties: module.author = "Lennart Poettering" module.description = "Clocked NULL sink" module.version = "8.0-rebootstrapped" Sink #2 State: SUSPENDED Name: auto_null Description: Dummy Output Driver: module-null-sink.c Sample Specification: s16le 2ch 44100Hz Channel Map: front-left,front-right Owner Module: 28 Mute: no Volume: front-left: 49808 / 76% / -7.15 dB, front-right: 49808 / 76% / -7.15 dB balance 0.00 Base Volume: 65536 / 100% / 0.00 dB Monitor Source: auto_null.monitor Latency: 0 usec, configured 0 usec Flags: DECIBEL_VOLUME LATENCY Properties: device.description = "Dummy Output" device.class = "abstract" device.icon_name = "audio-card" Formats: pcm Source #3 State: SUSPENDED Name: auto_null.monitor Description: Monitor of Dummy Output Driver: module-null-sink.c Sample Specification: s16le 2ch 44100Hz Channel Map: front-left,front-right Owner Module: 28 Mute: no Volume: front-left: 65536 / 100% / 0.00 dB, front-right: 65536 / 100% / 0.00 dB balance 0.00 Base Volume: 65536 / 100% / 0.00 dB Monitor of Sink: auto_null Latency: 0 usec, configured 0 usec Flags: DECIBEL_VOLUME LATENCY Properties: device.description = "Monitor of Dummy Output" device.class = "monitor" device.icon_name = "audio-input-microphone" Formats: pcm Client #0 Driver: module-systemd-login.c Owner Module: 19 Properties: application.name = "Login Session 1" systemd-login.session = "1" Client #1 Driver: protocol-native.c Owner Module: 10 Properties: application.name = "GNOME Shell" native-protocol.peer = "UNIX socket client" native-protocol.version = "30" window.x11.display = ":0" window.x11.screen = "0" application.language = "en_US.UTF-8" application.icon_name = "start-here" application.id = "org.gnome.Shell" application.process.id = "2296" application.process.user = "jmason" application.process.host = "jmason- e7450.attachmate.com" application.process.binary = "gnome-shell" application.process.machine_id = "32640556cf7e951f8bdcf2cc5653a7e2" application.process.session_id = "1" Client #2 Driver: protocol-native.c Owner Module: 10 Properties: application.name = "GNOME Shell Volume Control" native-protocol.peer = "UNIX socket client" native-protocol.version = "30" application.id = "org.gnome.VolumeControl" application.icon_name = "multimedia-volume-control" application.version = "3.20.1" application.process.id = "2296" application.process.user = "jmason" application.process.host = "jmason- e7450.attachmate.com" application.process.binary = "gnome-shell" application.language = "en_US.UTF-8" window.x11.display = ":0" application.process.machine_id = "32640556cf7e951f8bdcf2cc5653a7e2" application.process.session_id = "1" Client #6 Driver: module-x11-xsmp.c Owner Module: 26 Properties: application.name = "XSMP Session on gnome-session as 10c82fcd6a4a9a2e58146310364068016700000021660030" xsmp.vendor = "gnome-session" xsmp.client.id = "10c82fcd6a4a9a2e58146310364068016700000021660030" Client #7 Driver: protocol-native.c Owner Module: 10 Properties: application.name = "GNOME Volume Control Media Keys" native-protocol.peer = "UNIX socket client" native-protocol.version = "30" application.id = "org.gnome.VolumeControl" application.icon_name = "multimedia-volume-control" application.version = "3.20.1" application.process.id = "2411" application.process.user = "jmason" application.process.host = "jmason- e7450.attachmate.com" application.process.binary = "gnome-settings-daemon" application.language = "en_US.UTF-8" window.x11.display = ":0" application.process.machine_id = "32640556cf7e951f8bdcf2cc5653a7e2" application.process.session_id = "1" Client #16 Driver: protocol-native.c Owner Module: 10 Properties: application.name = "pactl" native-protocol.peer = "UNIX socket client" native-protocol.version = "30" application.process.id = "6574" application.process.user = "jmason" application.process.host = "jmason- e7450.attachmate.com" application.process.binary = "pactl" application.language = "en_US.UTF-8" window.x11.display = ":0" application.process.machine_id = "32640556cf7e951f8bdcf2cc5653a7e2" application.process.session_id = "1" - -- James Mason Technical Architect, Public Cloud openSUSE Member SUSE jmason(a)suse.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXNVnEAAoJEBs5UYhsRJAjkPgH/A9h9UETRMxAjqa23NuYt71d cFU8CX+w+3bEtbJww3JfVFKzGlUFXu4HmZLHzQ3XBUQcECwb84nhwm2k0ej2mr18 NqcTXCfBJEUK8q/9Fi6vDYfQrYBBxAAE+Tv+SOaVynEJSHEfH+NYBDJ0g8DGpLGG pX7fDTlNw00oEbxsC4Ck6K470AUr+V9aCmUJrqj2QccS3GbLgeK4ruhyBWTJu+sq Xgi32FKEmVFfYNpb1/gOuN7pWd2d7548IqAJ7Zze4ve0uw3EHIAAaflavhbnN/0D 5MDNGBnWg1WczeAuACTKp4xLIwG1BfQd0CrS35SDc+P9Xp3WpdkGryejpfjfgxs= =C1bi -----END PGP SIGNATURE----- N��r��y隊Z)z{.��r�+�맲��r��z�^�ˬz��N�(�֜��^� ޭ隊Z)z{.��r�+��0��Ǩ�

4 6

[opensuse-factory] New Tumbleweed snapshot 20160512 released!
by Ludwig Nussel 13 May '16

13 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: GraphicsMagick aaa_base (13.2+git20160408.3d9d3a8 -> 13.2+git20160426.f25dcda) curl eog-plugins (3.16.3 -> 3.16.4) epiphany (3.20.1 -> 3.20.2) epiphany-branding-openSUSE flex (2.5.37 -> 2.6.1) gedit (3.20.1 -> 3.20.2) glibc glibc gnome-clocks (3.20.0 -> 3.20.1) gnome-nibbles (3.20.1 -> 3.20.2.1) gnome-weather (3.20.0 -> 3.20.1) gtksourceview (3.20.2 -> 3.20.3) gzip (1.7 -> 1.8) iagno (3.20.1 -> 3.20.2) libunwind yast2-ntp-client (3.1.22 -> 3.1.23) === Details === ==== GraphicsMagick ==== Subpackages: GraphicsMagick-devel libGraphicsMagick-Q16-3 libGraphicsMagick3-config libGraphicsMagickWand-Q16-2 - Multiple security issues in GraphicsMagick/ImageMagick [boo#978061] (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717) * GraphicsMagick-upstream-delegates-safer.patch * GraphicsMagick-upstream-disable-mvg-ext.patch * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch * GraphicsMagick-upstream-image-sanity-check.patch ==== aaa_base ==== Version update (13.2+git20160408.3d9d3a8 -> 13.2+git20160426.f25dcda) Subpackages: aaa_base-extras - fix typo in last patch (no-systemctl support for chkconfig) ==== curl ==== Subpackages: libcurl-devel libcurl4 - Add 0001-Fix-invalid-Network-is-unreachable-errors.patch. Fixes "Network is unreachable" errors in valid situations when ipv6 is not available but ipv4 is working fine. This also fixes the same error from happening in applications using libcurl4 (like zypper). (bsc#915846) ==== eog-plugins ==== Version update (3.16.3 -> 3.16.4) Subpackages: eog-plugins-lang - Update to version 3.16.4: + Updated translations. ==== epiphany ==== Version update (3.20.1 -> 3.20.2) Subpackages: epiphany-lang gnome-shell-search-provider-epiphany - Update to version 3.20.2: + Fix snapshots sometimes not appearing in overview (bgo#763184). + Add gnome.org and webkit.org default bookmarks. + Incognito mode theme updates and fixes. + Updated translations. ==== epiphany-branding-openSUSE ==== - Rebase opensuse-bookmarks.patch to fit with what epiphany now ships in the stable release. ==== flex ==== Version update (2.5.37 -> 2.6.1) - Update to version 2.6.1 * A number of compiler warnings have been remedied. * Line directives should now work as expected and be absent when that is expected. * Resolved github issues #53, #54, #55, #61. * Resolved sf bugs #128, #129, #155, #160, #184, #187, #195. - Refresh flex-2.5.34-fPIC.patch -> flex-2.6.1-fPIC.patch - Drop upstream patches: config-guess-sub-update.patch, flex-2.5.37-bison-2.6.1-1.patch, flex-compatible-with-bison3.patch, flex-yyleng.patch - Drop unneeded patch flex-2.5.37-notex.patch ==== gedit ==== Version update (3.20.1 -> 3.20.2) Subpackages: python3-gedit - Update to version 3.20.2: + Misc bugfixes. + Updated translations. ==== glibc ==== Subpackages: glibc-32bit glibc-locale-32bit - glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-info glibc-locale nscd - glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses ==== gnome-clocks ==== Version update (3.20.0 -> 3.20.1) Subpackages: gnome-shell-search-provider-gnome-clocks - Update to version 3.20.1: + Rework gnome-shell search provider to be stateless. + Updated translations. ==== gnome-nibbles ==== Version update (3.20.1 -> 3.20.2.1) Subpackages: gnome-nibbles-lang - Update to version 3.20.2.1: + Remove extra file added in the previous pre-release commit. - Changes from version 3.20.2: + Updated translations. ==== gnome-weather ==== Version update (3.20.0 -> 3.20.1) Subpackages: gnome-shell-search-provider-gnome-weather - Update to version 3.20.1: + Build system fixes. + Updated translations. ==== gtksourceview ==== Version update (3.20.2 -> 3.20.3) Subpackages: glade-catalog-gtksourceview gtksourceview-devel libgtksourceview-3_0-1 typelib-1_0-GtkSource-3_0 - Update to version 3.20.3: + Improvements to the Meson and JavaScript syntax highlighting. + Small bug fixes. + Updated translations. ==== gzip ==== Version update (1.7 -> 1.8) - Update to 1.8 * gzip -l no longer falsely reports a write error when writing to a pipe. * Port to Oracle Solaris Studio 12 on x86-64. * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now suppresses assembler again. - Small spec file cleanup ==== iagno ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Updated translations. ==== libunwind ==== - Add patches for boo#976955: * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch ==== yast2-ntp-client ==== Version update (3.1.22 -> 3.1.23) - Fixed the default synchronization interval in the help text (bsc#978453) - Unify the default value in the code (the proposal client used a different default) - Set the initial state of the interval widget according to the current synchronization mode (bsc#978892) - Fixed firewall widget layout (double frame widget) - 3.1.23 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] New package: libjaylink
by Andreas Färber 13 May '16

13 May '16

Hello, Marc's libjaylink [1] is a library for using Segger J-Link [2] devices. Often found as USB interface on-board microcontroller development kits these days (Silicon Labs, Infineon, Renesas, Nordic among others) but also standalone as USB or Ethernet adapters, these debug probes allow interacting with ARM, RX and 8051 CPUs via JTAG or SWD among others. Much of the functionality of libjaylink was previously part of OpenOCD v0.9.0; this Factory submission serves to retain that functionality once we update the openocd package [3] to either a recent Git snapshot or the next stable release. I've tested libjaylink against OpenOCD Git versions for several months now and the only notable issue I once ran into was that - still lacking a stable release or API feature checks - updating openocd snapshots may create a dependency on a newer libjaylink snapshot. If that happens again we'll need to express openocd's dependency as 0.1.0~git.X date. Note that this package uses the new obs_scm service [4] but has it disabled and still generates a tarball via `osc service disabledrun`. Regards, Andreas [1] https://build.opensuse.org/request/show/395143 [2] https://www.segger.com/jlink-debug-probes.html [3] https://build.opensuse.org/package/show/hardware/openocd [4] http://openbuildservice.org/2016/04/08/new_git_in_27/ -- SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Installation with encrypt LVM setup fails
by Robby Engelmann 13 May '16

13 May '16

Hi all, yesterday I tried to install 20160505 snapshot on my brandnew Tuxedo InfinityBook using the standard proposal for crypted LVM with btrfs for / and XFS for home. I only adjusted the sizes for / and home to use the whole disk size (180 GB for / and 260 GB for home) in the expert partitioner. Installation went fine until the bootloader is written. At this step I get this bug: https://bugzilla.novell.com/show_bug.cgi?id=979788. Has anybody an idea how to overcome this and how to get a working TW installation with encrypted LVM setup? Perhaps I am missing something? Thanks in advance. Robby. -- Jabber: robby81(a)jabber.de -- Jede meiner Mails ist mittels PGP signiert. Die Signatur kann einfach mit meinem öffentlichen Schlüssel auf den Standard Key-Servern geprüft werden und zum Senden von verschluesselten Mails an mich genutzt werden. --

1 0

[opensuse-factory] New package: mininet
by Markos Chandras 13 May '16

13 May '16

Hi, Mininet is an application for quickly creating and testing realistic virtual network topologies around openvswitch. It's written in python and it makes use of the network namespaces to create virtual hosts. Remember to also install the openvswitch-test package if you do not already have an external SDN controller (listed as suggested dependency) The package is currently maintained in https://build.opensuse.org/package/show/network/mininet and I will submit a SR to factory soon. The project website is at http://mininet.org/ and you can find various online tutorials such as 1) https://www.youtube.com/watch?v=jmlgXaocwiE or 2) http://mininet.org/walkthrough/. Upstream is active but there is quite a bit of backlog in terms of bugs and pull requests. Have fun! -- markos SUSE LINUX GmbH | GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg) Maxfeldstr. 5, D-90409, Nürnberg -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

Re: [opensuse-factory] New Tumbleweed snapshot 20160511 released!
by Zhangjian (Bamvor) 13 May '16

13 May '16

Hi, On 2016/5/12 20:43, Ludwig Nussel wrote: [...] > ==== kiwi ==== > Version update (7.03.67 -> 7.03.68) > Subpackages: kiwi-desc-isoboot kiwi-desc-netboot kiwi-desc-oemboot kiwi-desc-vmxboot kiwi-doc kiwi-media-requires kiwi-pxeboot kiwi-templates kiwi-tools > > - v7.03.68 released > - Add aarch64_ilp32 to the list of known architectures > - Add aarch64_ilp32 support > This is the -32bit variant of aarch64. Right now only needed for > install medias. How should I use it? Where could I find the toolchain and package for ILP32? Is there any plan to support ILP32(toolchain, libraries and other packages if user want to build) in opensuse? Regards Bamvor > - new sle12-sp2 media style > default patterns are now provides and not recommends > - implement experimental headersonly build > - Don't create default fstab file > Follow up fix for bnc#964472. A kiwi generated fstab file > is not required to build the image > - DB: rebuild documentation > - Fixed documentation style > indexterms must be in para element. Fixes #568 > - Translated using Weblate (Korean) > Currently translated at 100.0% (28 of 28 strings) > - Update README [...] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

Fwd: Re: [opensuse-factory] Lilo package removal?
by Martin Pluskal 12 May '16

12 May '16

On čtvrtek 12. května 2016 11:24:38 CEST Tomas Chvatal wrote: > Hello everyone, > > during update and split of lvm2 package we detected failure [1] in lilo > to build because of broken br/r set on device-mapper. > > Now the easy solution is to replace that device-mapper-32bit with the > proper split-out library and be done with it. But I would like to > figure out if we have still some people using the lilo now. > > Installer does support only grub2 and lilo is quite archaic today. I > would then propose to remove lilo from Factory instead of just fixing > it and leaving be. I am in favor of removing it - TW is not museum, and there are alternatives, which unlike lilo are supported. Cheers Martin

3 2

[opensuse-factory] Re: openSUSE Tumbleweed – Review of the Weeks 2016/17 & 18
by André Verwijs 12 May '16

12 May '16

Tumbleweed devs should also create a whole new installation DVD for TW, from scratch..!!! Really rebuild all scripts and packages, i'm still getting crash with choosing installation mirrors during setup... or make this a separate project to make installation a smooth process... if devs want i could upload log files for debugging.. .. ______________________________________________________________________________________ La Ventura (heavy metal band) Tumblr page: http://laventurafan.tumblr.com My Twitter Page: http://twitter.com/OpenSimFan My Facebook page (be my friend, please ) http://www.facebook.com/andre.verwijs My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

6 8

[opensuse-factory] New Tumbleweed snapshot 20160511 released!
by Ludwig Nussel 12 May '16

12 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: ImageMagick (6.9.3.8 -> 6.9.3.10) apache2 autogen bundle-lang-common bundle-lang-gnome bundle-lang-kde ebtables four-in-a-row (3.20.0 -> 3.20.1) gnome-chess (3.20.0 -> 3.20.1) gnome-klotski (3.20.1 -> 3.20.2) gnome-robots (3.20.1 -> 3.20.2) gnome-sudoku (3.20.0 -> 3.20.1) gtk2-branding-openSUSE hunspell (1.4.0 -> 1.4.1) kgamma5 (5.6.2 -> 5.6.3) kiwi (7.03.67 -> 7.03.68) libapr1 libgames-support (1.0.1 -> 1.0.2) liborcus mcelog (1.29 -> 1.36) mono-core (4.2.2 -> 4.2.3) perl-Config-IniFiles (2.88 -> 2.89) perl-Devel-Symdump (2.16 -> 2.17) perl-MailTools (2.14 -> 2.16) python-keyring (7.1.2 -> 9.0) ruby2.2 (2.2.4 -> 2.2.5) squid (3.5.16 -> 3.5.19) xf86-video-intel (2.99.917 -> 2.99.917.641_ge4ef6e9) xsane (0.998 -> 0.999) yast2-installation (3.1.182 -> 3.1.184) yast2-iscsi-client (3.1.26 -> 3.1.27) yast2-network (3.1.148 -> 3.1.149) yast2-storage (3.1.90 -> 3.1.92) yast2-users (3.1.47 -> 3.1.49) === Details === ==== ImageMagick ==== Version update (6.9.3.8 -> 6.9.3.10) Subpackages: ImageMagick-devel ImageMagick-extra libMagick++-6_Q16-6 libMagickCore-6_Q16-2 libMagickWand-6_Q16-2 perl-PerlMagick - Disable insecure coders [bnc#978061] * ImageMagick-6.8.8-1-disable-insecure-coders.patch * CVE-2016-3714 * CVE-2016-3715 * CVE-2016-3716 * CVE-2016-3717 * CVE-2016-3718 - Update to 6.9.3-10: fix imagetragick ==== apache2 ==== Subpackages: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils - removed note about ulimits in sysconfig file [bsc#976711] - do not build mod_http2 for 13.2 ==== autogen ==== Subpackages: libopts25 - Rename devel package to libopts-devel - Add corresponding obsoletion - Fix typo in preun script ==== bundle-lang-common ==== Subpackages: bundle-lang-common-cs bundle-lang-common-da bundle-lang-common-de bundle-lang-common-el bundle-lang-common-en bundle-lang-common-es bundle-lang-common-fr bundle-lang-common-hu bundle-lang-common-it bundle-lang-common-ja bundle-lang-common-pl bundle-lang-common-pt bundle-lang-common-ru bundle-lang-common-zh - Update package list. ==== bundle-lang-gnome ==== Subpackages: bundle-lang-gnome-cs bundle-lang-gnome-da bundle-lang-gnome-de bundle-lang-gnome-el bundle-lang-gnome-en bundle-lang-gnome-es bundle-lang-gnome-fr bundle-lang-gnome-hu bundle-lang-gnome-it bundle-lang-gnome-ja bundle-lang-gnome-pl bundle-lang-gnome-pt bundle-lang-gnome-ru bundle-lang-gnome-zh - Update package list. ==== bundle-lang-kde ==== Subpackages: bundle-lang-kde-cs bundle-lang-kde-da bundle-lang-kde-de bundle-lang-kde-el bundle-lang-kde-en bundle-lang-kde-es bundle-lang-kde-fr bundle-lang-kde-hu bundle-lang-kde-it bundle-lang-kde-ja bundle-lang-kde-pl bundle-lang-kde-pt bundle-lang-kde-ru bundle-lang-kde-zh - Update package list. ==== ebtables ==== - add "Requires(post): %insserv_prereq %fillup_prereq" to fix problem with missing sed during the installation [bnc#976919] - remove non-break space from specfile - use spec-cleaner to clean the specfile ==== four-in-a-row ==== Version update (3.20.0 -> 3.20.1) Subpackages: four-in-a-row-lang - Update to version 3.20.1: + Updated translations. ==== gnome-chess ==== Version update (3.20.0 -> 3.20.1) - Update to version 3.20.1: + Fix window size growing out of control with GTK+ 3.20. + Updated translations. ==== gnome-klotski ==== Version update (3.20.1 -> 3.20.2) Subpackages: gnome-klotski-lang - Update to version 3.20.2: + Updated translations. ==== gnome-robots ==== Version update (3.20.1 -> 3.20.2) Subpackages: gnome-robots-lang - Update to version 3.20.2: + Updated translations. ==== gnome-sudoku ==== Version update (3.20.0 -> 3.20.1) - Update to version 3.20.1: + Updated translations. ==== gtk2-branding-openSUSE ==== - Update gtk2-branding-gtkrc to have Adwaita as gtk-icon-theme-name and hicolor as gtk-fallback-icon-theme values. ==== hunspell ==== Version update (1.4.0 -> 1.4.1) - Update to 1.4.1: * Past begin() iterator decrement error * VS Debug build threw error on decrement past begin. - Split shared library - Do not call autoreconf - Move manpages to corresponding packages ==== kgamma5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kiwi ==== Version update (7.03.67 -> 7.03.68) Subpackages: kiwi-desc-isoboot kiwi-desc-netboot kiwi-desc-oemboot kiwi-desc-vmxboot kiwi-doc kiwi-media-requires kiwi-pxeboot kiwi-templates kiwi-tools - v7.03.68 released - Add aarch64_ilp32 to the list of known architectures - Add aarch64_ilp32 support This is the -32bit variant of aarch64. Right now only needed for install medias. - new sle12-sp2 media style default patterns are now provides and not recommends - implement experimental headersonly build - Don't create default fstab file Follow up fix for bnc#964472. A kiwi generated fstab file is not required to build the image - DB: rebuild documentation - Fixed documentation style indexterms must be in para element. Fixes #568 - Translated using Weblate (Korean) Currently translated at 100.0% (28 of 28 strings) - Update README ==== libapr1 ==== Subpackages: libapr1-devel - 0017-Merge-r1733694-r1733708-from-trunk.patch and 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch Refcount shared mutexes usage to avoid destruction while still is use by some processes, this fixes apache graceful-restart sometimes leaving processes in "Gracefully finishing" state forever. - apr-proc-mutex-map-anon.patch use MAP_ANON instead of mmap'ing /dev/zero. ==== libgames-support ==== Version update (1.0.1 -> 1.0.2) - Update to version 1.0.2: + Updated translations. ==== liborcus ==== - Coflict with liborcus-0_10-0 ==== mcelog ==== Version update (1.29 -> 1.36) - Update to bugfix version 1.36 - Do not start mcelog service based on an udev (/dev/mcelog) rule (bsc#976781) ==== mono-core ==== Version update (4.2.2 -> 4.2.3) Subpackages: libmono-2_0-1 libmono-2_0-devel libmonoboehm-2_0-1 libmonoboehm-2_0-devel libmonosgen-2_0-1 mono-data mono-data-sqlite mono-extras mono-mvc mono-wcf mono-web mono-winforms mono-winfxcore - update to 4.2.3.4 (service release), bugfixes: * bxc#36116 - [System.Web.Services] Unix paths fix * bxc#37079 - [jit] Fix the support for gshared types in mini_emit_initobj () * bxc#37273 - [llvm] Disable support for nested clauses. * bxc#38012 - [sgen] Fix register scanning on ARM * bxc#37846 - [jit] Fix the reference type detection for Volatile:Read/Write () - remove outdated authors.patch as it was removed on purpose https://github.com/mono/mono/commit/b39e7e9d78938362417b2c966d204da60952c7b4 ==== perl-Config-IniFiles ==== Version update (2.88 -> 2.89) - updated to 2.89 see /usr/share/doc/packages/perl-Config-IniFiles/Changes ==== perl-Devel-Symdump ==== Version update (2.16 -> 2.17) - updated to 2.17 see /usr/share/doc/packages/perl-Devel-Symdump/Changes 2016-04-19 k <andk(a)cpan.org> * release 2.17 * address #113886: unlist Compress::Zlib as a prereq, it was and still is only used by a test that won't run for normal user installs (Thanks to Graham Knop for reporting) ==== perl-MailTools ==== Version update (2.14 -> 2.16) - updated to 2.16 see /usr/share/doc/packages/perl-MailTools/ChangeLog ==== python-keyring ==== Version update (7.1.2 -> 9.0) - update to upstream release 9.0 9.0 --- * Issue #217: Once again, the OS X backend uses the Framework API for invoking the Keychain service. As a result, applications utilizing this API will be authorized per application, rather than relying on the authorization of the 'security' application. Consequently, users will be prompted to authorize the system Python executable and also new Python executables, such as those created by virtualenv. 8.7 --- * Changelog now links to issues and provides dates of releases. 8.6 --- * Issue #217: Add warning in OS Keyring when 'store' is set to 'internet' to determine if this feature is used in the wild. 8.5.1 ----- * Pull Request #216: Kwallet backend now has lower priority than the preferred SecretService backend, now that the desktop check is no longer in place. 8.5 --- * Issue #168: Now prefer KF5 Kwallet to KF4. Users relying on KF4 must use prior releases. 8.4 --- * Pull Request #209: Better error message when no backend is available (indicating keyrings.alt as a quick workaround). * Pull Request #208: Fix pywin32-ctypes package name in requirements. 8.3 --- * Issue #207: Library now requires win32ctypes on Windows systems, which will be installed automatically by Setuptools 0.7 or Pip 6 (or later). * Actually removed QtKwallet, which was meant to be dropped in 8.0 but somehow remained. 8.2 --- * Update readme to include how-to use with Linux non-graphical environments. 8.1 --- * Issue #197: Add ``__version__`` attribute to keyring module. 8.0 --- * Issue #117: Removed all but the preferred keyring backends for each of the major desktop platforms: - keyring.backends.kwallet.DBusKeyring - keyring.backends.OS_X.Keyring - keyring.backends.SecretService.Keyring - keyring.backends.Windows.WinVaultKeyring All other keyrings have been moved to a new package, `keyrings.alt <https://pypi.python.org/pypi/keyrings.alt>`_ and backward-compatibility aliases removed. To retain availability of these less preferred keyrings, include that package in your installation (install both keyring and keyrings.alt). As these keyrings have moved, any keyrings indicated explicitly in configuration will need to be updated to replace "keyring.backends." with "keyrings.alt.". For example, "keyring.backends.file.PlaintextKeyring" becomes "keyrings.alt.file.PlaintextKeyring". 7.3.1 ----- * Issue #194: Redirect away from docs until they have something more than the changelog. Users seeking the changelog will want to follow the `direct link <https://pythonhosted.org/keyring/history.html>`_. 7.3 --- * Issue #117: Added support for filtering which backends are acceptable. To limit to only loading recommended keyrings (those with priority >= 1), call:: keyring.core.init_backend(limit=keyring.core.recommended) 7.2 --- * Pull Request #190: OS X backend now exposes a ``keychain`` attribute, which if set will be used by ``get_password`` when retrieving passwords. Useful in environments such as when running under cron where the default keychain is not the same as the default keychain in a login session. Example usage:: keyring.get_keyring().keychain = '/path/to/login.keychain' pw = keyring.get_password(...) ==== ruby2.2 ==== Version update (2.2.4 -> 2.2.5) Subpackages: libruby2_2-2_2 ruby2.2-devel ruby2.2-stdlib - update to 2.2.5 - README.EXT{,.ja}: `nul` should be uppercase. change 'nul' => 'NUL'. [Fix GH-1172] derived from a patch by craft4coder <yooobuntu(a)163.com> - doc/extension.rdoc: Improvements to english grammers. [Bug [#12246]][ruby-core:74792][ci skip] derived from a patch by Marcus Stollsteimer <sto.mar(a)web.de> - encoding.c: Fix return value of `Encoding::ISO8859_1.name` [Bug [#12313]][ruby-core:75147][ci skip] - ext/bigdecimal/bigdecimal.c: Fix code sample of `BigDecimal.new` - configure.in: add missing -lm for AIX. - configure.in: don't use the system-provided round(3) on AIX. In AIX, round(0.49999999999999994) returns 1.0. Use round() in numeric.c instead. - ruby.c: cygwin does not use w32_cmdvector, command line can be other than UTF-8. [ruby-dev:49519] [Bug #12184] - eval_jump.c (exec_end_procs_chain): restore previous error info for each end procs. [ruby-core:75038] [Bug #12302] - compile.c (new_label_body): initialize bit fields, since compile_data_alloc does not clear the memory. [Bug #12082] - compile.c (iseq_optimize): disable tail call optimization in rescued, rescue, and ensure blocks. [ruby-core:73871] [Bug [#12082]] - doc/regexp.rdoc (comments): [DOC] terminators cannot appear in comments. [ruby-core:74838] [Bug #12256] - extension.rdoc, extension.ja.rdoc: [DOC] Fix some errors. Renamed files, wrong method names or argument types; the example GetDBM macro is now updated to the current version of the actual code. patches are derived from Marcus Stollsteimer in [ruby-core:74690]. [Bug #12228] - ext/nkf/nkf-utf8/nkf.c (mime_putc): fix typo. [Bug #12202] [ruby-core:74802] - ext/nkf/nkf-utf8/nkf.c: Merge upstream 4f3edf80a0. patched by Anton Sivakov [Bug #12201] [Bug #12202] - lib/securerandom.rb (gen_random): to avoid blocking on Windows. On Windows OpenSSL RAND_bytes (underlying implementation is RAND_poll in crypto/rand/rand_win.c) may be blocked at NetStatisticsGet. https://wiki.openssl.org/index.php/Random_Numbers#Windows_Issues Instead of this, use Random.raw_seed directory (whose implementation CryptGenRandom is one of the source of entropy of RAND_poll on Windows). https://wiki.openssl.org/index.php/Random_Numbers Note: CryptGenRandom function is PRNG and doesn't check its entropy, so it won't block. [Bug #12139] https://msdn.microsoft.com/ja-jp/library/windows/desktop/aa379942.aspx https://tools.ietf.org/html/rfc4086#section-7.1.3 https://eprint.iacr.org/2007/419.pdf http://www.cs.huji.ac.il/~dolev/pubs/thesis/msc-thesis-leo.pdf - lib/rubygems/test_case.rb: Fix test on Windows for inconsistent temp path. https://github.com/rubygems/rubygems/pull/1554 [Bug [#12193]][ruby-core:74431] - ext/openssl/extconf.rb: check RAND_edg to support libressl. - ext/openssl/ossl_rand.c (ossl_rand_egd): define only if RAND_edg is available. [Fix GH-829] - configure.in (rb_cv_lgamma_r_m0): fix the condition for lgamma_r(-0.0). [Bug #12249] - configure.in (rb_cv_lgamma_r_m0): check if lgamma_r(-0.0) returns negative infinity. [Bug #12249] - math.c (ruby_lgamma_r): define by the configured result. - math.c (ruby_lgamma_r): missing/lgamma_r.c is used on Windows, since msvcrt does not provide it. - missing/lgamma_r.c (lgamma_r): fix lgamma(-0.0). [ruby-core:74823] [Bug #12249] - math.c (ruby_lgamma_r): mswin's lgamma_r also seems to be wrong. cf. [Bug #12249] - math.c (ruby_tgamma): fix tgamma(-0.0) on mingw. [ruby-core:74817] [Bug #12249] - defs/keywords (alias, undef): symbol literals are allowed. - parse.y (parse_percent): should parse symbol literals for alias and undef. [ruby-dev:47681] [Bug #8851] - struct.c (struct_make_members_list): extract making member name list from char* va_list, with creating symbols without intermediate IDs. - ext/win32/lib/win32/registry.rb (DeleteValue, DeleteKey): fix API names. [ruby-core:74863] [Bug #12264] - vm_core.h (rb_vm_struct): make at_exit a single linked list but not RArray, not to mark the registered functions by the write barrier. based on the patches by Evan Phoenix. [ruby-core:73908] [Bug #12095] - thread.c (update_coverage): Do not track coverage in loaded files after Coverage.result. Avoids out-of-bounds access. [Bug [#12237]] - ext/coverage/coverage.c (coverage_clear_result_i): document. - ext/date/date_core.c (Init_date_core): [DOC] fix misplaced doc of DateTime. [ruby-core:74729] [Bug #12233] - parse.y (parse_ident): allow keyword arguments just after a method where the same name local variable is defined. [ruby-core:73816] [Bug#12073] - eval.c (setup_exception): set the cause only if it is explicitly given or not set yet. [Bug #12068] - lib/forwardable.rb: Convert given accessors to String. r53381 changed to accept only Symbol or String for accessors, but there are several rubygems that pass classes (e.g. Array, Hash, ...) as accessors. Prior r53381, it was accepted because Class#to_s returns its class name. After r53381 given accessors are checked with define_method, but it accepts only Symbol or String, otherwise raises TypeError. def_delegator Foo, :some_method This change is to revert unexpected incompatibility. But this behavior may change in the future. - lib/forwardable.rb (def_instance_delegator) fix delegating to 'args' and 'block', clashing with local variables in generated methods. [ruby-core:72579] [Bug #11916] - lib/forwardable.rb (def_single_delegator): ditto. - compile.c (compile_massign_lhs): when index ends with splat, append rhs value to it like POSTARG, since VM_CALL_ARGS_SPLAT splats the last argument only. [ruby-core:72777] [Bug #11970] - sprintf.c (rb_str_format): fix buffer overflow, length must be greater than precision. reported by William Bowling <will AT wbowling.info>. - test/ruby/test_io.rb: handled rlimit value same as r52277 [Bug [#11852]][ruby-dev:49446] - tool/extlibs.rb (do_patch): let "patch" command change the working directory and open the patch file there, instead of spawn options, so that proper error message will be shown by the command not just "chdir" or "open". - thread_pthread.c (reserve_stack): fix reserving position where the stack growing bottom to top. [Bug #12118] - .travis.yml: removed commented-out code. - .travis.yml: removed osx code. follow up with r53517 - .travis.yml: update libssl before running tests. Thanks to Chris Sinjakli <chris(a)sinjakli.co.uk> for figuring out the travis settings! - .travis.yml: removed Ruby 1.9.3 build on Travis CI - .travis.yml: Remove redundant configuration option. [fix GH-809] Patch by @gxworld - ext/openssl/extconf.rb: check SSL_CTX_set_next_proto_select_cb function rather than OPENSSL_NPN_NEGOTIATED macro. it exists even if it is disabled by OpenSSL configuration. [ruby-core:74384] [Bug #12182] - ext/openssl/ossl_ssl.c: update #ifdef(s) as above. - test/openssl/test_ssl.rb: skip NPN tests if NPN is disabled. - lib/uri/http.rb (URI::HTTP#initialize): [DOC] fix example, missing mandatory arguments. [ruby-core:74540] [Bug #12215] - lib/uri/mailto.rb: raising URI::InvalidComponentError instead of failing with undefined method `split' for nil:NilClass for mailto: URIs without opaque part. [Bug #10738] - test/uri/testuri.rb: Test for above - signal.c: should also clear ruby_disable_gc. [Bug #11692] - vm_eval.c (rb_f_catch): [DOC] fix malformed RDoc syntax, "+...+" cannot enclose non-identifier characters. a patch by Sebastian S in [ruby-core:74278]. [Bug#12170] - test/-ext-/float/test_nextafter.rb: In AIX, nextafter(+0.0,-0.0)=+0.0, and nextafter(-0.0,+0.0)=-0.0, but they should return -0.0 and +0.0, respectively. This is a known bug in nextafter(3) on AIX, so skip related tests. - lib/rubygems/installer.rb: merge partially r49511. cherry picking https://github.com/rubygems/rubygems/commit/f9232680 [Bug #12066] - string.c (enc_succ_alnum_char): try to skip an invalid character gap between GREEK CAPITAL RHO and SIGMA. [ruby-core:74478] [Bug #12204] - parse.y (parse_numvar): NTH_REF must be less than a half of INT_MAX, as it is left-shifted to be ORed with back-ref flag. [ruby-core:74444] [Bug#12192] [Fix GH-1296] - enc/trans/JIS: update Unicode's notice. [Bug #11844] - marshal.c (r_object0): raise ArgumentError when linking to undefined object. - marshal.c (r_object0): Fix Marshal crash for corrupt extended object. - ext/openssl/ossl_ssl.c (ossl_sslctx_setup): document as MT-unsafe [ruby-core:73803] [Bug #12069] - insns.def (opt_mod): show its method name on ZeroDivisionError. [Bug #12158] - net/ftp.rb: add NullSocket#closed? to fix closing not opened connection. [Fix GH-1232] - variable.c: Added documentation about order of `Module#constants` [ci skip][Bug #12121][ruby-dev:49505][fix GH-1301] - test/ruby/test_process.rb (test_execopts_gid): Skip a test that is known to fail on AIX. AIX allows setgid to a supplementary group, but Ruby does not allow the "-e" option when setgid'ed, so the test does not work as intended. - test/socket/test_addrinfo.rb (test_ipv6_address_predicates): IN6_IS_ADDR_V4COMPAT and IN6_IS_ADDR_V4MAPPED are broken on AIX, so skip related tests. - test/rinda/test_rinda.rb (test_make_socket_ipv4_multicast): The fifth argument to getsockopt(2) should be modified to indicate the actual size of the value on return, but not in AIX. This is a know bug. Skip related tests. - test/rinda/test_rinda.rb (test_ring_server_ipv4_multicast): ditto. - test/rinda/test_rinda.rb (test_make_socket_unicast): ditto. - test/socket/test_basicsocket.rb (test_getsockopt): ditto. - test/socket/test_sockopt.rb (test_bool): ditto. - test/zlib/test_zlib.rb (test_adler32_combine, test_crc32_combine): Skip two tests on AIX because zconf.h in zlib does not correctly recognize _LARGE_FILES in AIX. The problem was already reported to zlib, and skip these tests until it is fixed. - test/gdbm/test_gdbm.rb (TestGDBM#test_s_open_lock): skip this test on AIX. The issue is the same as on Solaris. [ruby-dev:47631] - thread_pthread.c (getstack): __pi_stacksize returned by pthread_getthrds_np() is wrong on AIX. Use __pi_stackend - __pi_stackaddr instead. - lib/irb.rb: avoid to needless truncation when using back_trace_limit option. [fix GH-1205][ruby-core:72773][Bug [#11969]] - ext/tk/lib/tkextlib/tcllib/tablelist_tile.rb: fix method name typo. [ruby-core:72513] [Bug #11893] The patch provided by Akira Matsuda. - ext/tk/lib/tkextlib/tcllib/toolbar.rb: fix method name typo. [ruby-core:72511] [Bug #11891] The patch provided by Akira Matsuda. - ext/tk/lib/tkextlib/blt/tree.rb: fix method name typo. [ruby-core:72510] [Bug #11890] The patch provided by Akira Matsuda. - ext/tk/lib/tk/menubar.rb: fix a typo in font name. [ruby-core:72505] [Bug #11886] The patch provided by Akira Matsuda. - ext/tk/sample/*.rb: ditto. - test/fiddle/test_handle.rb (test_NEXT): use -test-/dln/empty which is always a shared object and is not used by others. [ruby-dev:48629] [Bug #10384] - ruby.h: undef HAVE_BUILTIN___BUILTIN_CHOOSE_EXPR_CONSTANT_P and HAVE_BUILTIN___BUILTIN_TYPES_COMPATIBLE_P on C++. [ruby-core:72736] [Bug #11962] - ext/socket/option.c (inspect_tcpi_msec): more accurate condition for TCPI msec member inspection function. [ruby-core:74388] [Bug #12185] - lib/logger.rb: Remove block from Logger.add as it's not needed patch provided by Daniel Lobato Garcia [fix GH-1240] [Bug [#12054]] - re.c: Remove deprecated kcode argument from Regexp.new and compile patch provided by Dylan Pulliam [Bug #11495] - re.c: Update documentation for Regexp class. [fix GH-937][ci skip] Patch by @davydovanton - ext/socket/socket.c (sock_gethostname): support unlimited size hostname. - lib/xmlrpc/client.rb: Support SSL options in async methods of XMLRPC::Client. [Bug #11489] Reported by Aleksandar Kostadinov. Thanks!!! - marshal.c (r_object0): honor Marshal.load post proc value for TYPE_LINK. by Hiroshi Nakamura <nahi(a)ruby-lang.org> https://github.com/ruby/ruby/pull/1204 fix GH-1204 - ext/socket/option.c (sockopt_bool): relax boolean size to be one too not only sizeof(int). Winsock getsockopt() returns a single byte as a boolean socket option. [ruby-core:72730] [Bug [#11958]] - io.c (io_getpartial): remove unused kwarg from template - test/ruby/test_io.rb (test_readpartial_bad_args): new [Bug [#11885]] - ext/openssl/ossl_ssl.c (ossl_ssl_read_internal): do not process kwargs in blocking mode - test/openssl/test_ssl.rb: test sysread - process.c (rb_execarg_parent_start1): need to convert the encoding to ospath's one. - process.c: use rb_w32_uchdir() instead of plain chdir() on Windows. reported by naruse via twitter. - process.c (rb_execarg_addopt): need to convert the encoding to ospath's one. - ext/stringio/stringio.c (strio_binmode): implement to set encoding - test/stringio/test_stringio.rb (test_binmode): new test [ruby-core:72699] [Bug #11945] - compile.c, cont.c, doc, man: fix common misspelling. [ruby-core:72466] [Bug #11870] - ext/socket/init.c (rsock_init_sock): reject reserved FDs [ruby-core:72445] [Bug #11862] - ext/socket/init.c (rsock_init_sock): check FD after validating - test/socket/test_basicsocket.rb (test_for_fd): new [ruby-core:72418] [Bug #11854] - re.c (reg_names_iter): should consider encoding of regexp. [ruby-core:72185] [Bug #11825] - enc/windows_1250.c: Should not use C++ style comments (C99 feature). [Bug #11843] - enc/iso_8859_2.c, enc/windows_1250.c: separate Windows-1250 from ISO-8859-2 to fix 0x80..0x9e range (from Kimihito Matsui) - enc/windows_1252.c: separate from ISO-8859-1 to fix 0x80..0x9e range. [ruby-core:64049] [Bug #10097] - enc/iso_8859_13.c: Added three missing lower/upper-case character pairs (from Kimihito Matsui) - enc/iso_8859_4.c: Added missing lower/upper-case character pair (U+014A and U+014B, LATIN CAPITAL/SMALL LETTER ENG) (from Kimihito Matsui) - string.c (rb_str_scrub): the result should be infected by the original string. - transcode.c (rb_econv_substr_append, econv_primitive_convert): the result should be infected by the original string. - include/ruby/ruby.h: add raw FL macros, which assume always the argument object is not a special constant. - internal.h (STR_EMBED_P, STR_SHARED_P): valid only for T_STRING. - string.c: deal with taint flags directly across String instances. - parse.y (regexp): set_yylval_num sets u1, should use nd_tag instead of nd_state. [ruby-core:72638] [Bug #11932] - gc.c (RVALUE_PAGE_WB_UNPROTECTED): fix a typo of argument name. [Fix GH-1221] - vm_insnhelper.c (vm_call_method): should not set fastpath with keyword arguments for VM_METHOD_TYPE_ATTRSET type methods. Normally, we can not use keyword arguments for this kind of methods, (obj.foo = 1), but we can set alias names for them. [Bug #11657] - test/ruby/test_keyword.rb: add a test for this fix. - parse.y (parser_yylex): allow here documents in labeled argument. [ruby-core:72396] [Bug #11849] - test/ruby/test_syntax.rb: fix typo in test - parse.y (parse_percent): Allow %-literals in labeled arg as r51624 did for parentheses. Fixes [ruby-core:72084] [Bug [#11812]]. - cont.c: fix a double word typo. [Bug #11313][ruby-core:69749] - ext/tk/lib/multi-tk.rb: fix typos. [Bug [#11764]][ruby-core:71800] ==== squid ==== Version update (3.5.16 -> 3.5.19) - Update to 3.5.19 * Regression Bug 4515: interception proxy hangs - Update to 3.5.18 * Bug 4510: stale comment about 32KB limit on shared memory cache entries * Bug 4509: EUI compile error on NetBSD * Bug 4501: HTTP/1.1: normalize Host header * Bug 4498: URL-unescape the login-info after extraction from URI * Bug 4455: SegFault from ESIInclude::Start * Prevent Squid forcing -b 2048 into the arguments for sslcrtd_program * Fix TLS/SSL server handshake alert handling - Update to 3.5.17 * Regression Bug 4480: logformat [.width_max] * Regression Bug 4481: varyEvaluateMatch: Oops. Not a Vary match on second attempt * Bug 4495: Unknown SSL option SSL_OP_NO_TICKET * Bug 4493: theObject->sharedMemorySize() == theSegment.size() exception * Bug 4483: ./configure garbles -Og option in CFLAGS * Bug 4482: Solaris GCC 5.2 warning in src/ip/Intercept.cc * Bug 4468: NotNode (!acl) naming: Terminate the name before strncat(name). * Bug 4465: Header forgery detection leads to crash * Bug 2460 partial: workaround deferred reads on shutdown and restart * cachemgr.cgi: use dynamic MemBuf for internal content generation * ESI: Fix several element construction issues * TLS: Fix Handshake Error: ccs received early * TLS: Add chained and signing cert to peek-then-bumped connections * Fix some startup/shutdown crashes ==== xf86-video-intel ==== Version update (2.99.917 -> 2.99.917.641_ge4ef6e9) - Enable build of DRI3. DRI2 is still the default version used. - add xscrnsaver dependency to properly build intel-virtual-output - Update to 2.99.917.641_ge4ef6e9: * Since there have been over 640 patches since the last prerelease which was from Dec 2014, there is no option but to take a git snapshot. * Various bug fixes since 2.99.917. * This obsoletes all backported bug fixes: U_sna-Protect-against-ABI-breakage-in-recent-versions-.patch U_sna-udev-integration-depends-on-fstat-and-sys-stat.h.patch U_uxa-udev-integration-depends-on-fstat-and-sys-stat.h.patch U_uxa_fix_the_call_to_PixmapSyncDirtyHelper_broken_by_xservers_ U_gen8-Fix-the-YUV-RGB-shader.patch U_tools-intel-virtual-output-Check-for-DRI3-more-carefully.patch U_01-sna-Cache-the-output-status-and-modes-for-15s.patch U_02-sna-Add-missing-break-from-last-patch.patch U_03-sna-Improve-DBG-messages-for-MST-probing.patch U_04-Convert-from-RRSetChanged-to-RROutputChanged.patch U_05-sna-Remove-redundant-RRGetInfo-on-hotplug-discovery.patch U_06-Remove-the-driver-option-to-delete-connectors-on-unplugging.patch U_07-sna-On-hotplug-events-update-the-output-status.patch U_08-sna-Hook-up-kernel-modes-on-hotplug-notification.patch U_09-sna-Coldplug-all-outputs-on-startup.patch U_10-sna-Use-RRGetInfo-for-setting-hotplug-coldplug-information.patch U_uxa_fix_the_call_to_PixmapSyncDirtyHelper_broken_by_xservers_90db5ed.patch ==== xsane ==== Version update (0.998 -> 0.999) - Update to version 0.999: + Better preview window size calculation (thanks to Nils Phillipsen). + Removed null-pointer bug in xsane_update_param (thanks to Nils Phillipsen). + Manual page bugix. + Changed email password storage. - Fixed no-eula.patch. ==== yast2-installation ==== Version update (3.1.182 -> 3.1.184) - get more texts for roles dialog from control file, allow a general label (bsc#974625) - 3.1.184 - Always read the lists of local users in the previous system to have them available during user importing (part of fate#319624) - 3.1.183 ==== yast2-iscsi-client ==== Version update (3.1.26 -> 3.1.27) - set user and password correctly for global authentication (bsc#978183), improve error handling (bsc#959292) - 3.1.27 ==== yast2-network ==== Version update (3.1.148 -> 3.1.149) - bnc#977953 - added dependency on yast2-proxy. "yast2 lan" won't fail with internal error (missing Proxy module), when yast2-network is installed into a minimal server installation. - 3.1.149 ==== yast2-storage ==== Version update (3.1.90 -> 3.1.92) - fixed error in porting bsc#957913 to master branch - 3.1.92 - create subvolume for /var/cache (fate#320834) - create LVM-based proposal when specified in the control file (bsc#957913) - 3.1.91 ==== yast2-users ==== Version update (3.1.47 -> 3.1.49) - Make user import work even if passwd and shadow files are not copied to /var/lib/YaST2 via "copy_to_system" (part of fate#319624) - 3.1.49 - Fix users import when entries for all non-system users are missing in /etc/shadow (bsc#978648) - 3.1.48 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] [OT] Zuse, 75 years ago
by Juan Erbes 12 May '16

12 May '16

On May 12, 1941, Konrad Zuse presented the Z3 - the first automatic, programmable computer. It didn't survive the war. But his ideas did, giving us computing as we know it. http://www.dw.com/en/konrad-zuse-and-the-digital-revolution-he-started-with… http://history-computer.com/People/ZuseBio.html -- USA LINUX OPENSUSE QUE ES SOFTWARE LIBRE, NO NECESITAS PIRATEAR NADA Y NI TE VAS A PREOCUPAR MAS POR LOS VIRUS Y SPYWARES: http://www.opensuse.org/es/ Puedes visitar mi blog en: http://jerbes.blogspot.com.ar/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Multiple issues in network/deluge 1.3.12 after upgrading to libtorrent-rasterbar 1.1.0
by Andrei Dziahel 11 May '16

11 May '16

Hello list, So, upgrade to litbtorrent-rasterbar v1.1 (comes with some of latest TW snapshots) doesn't go well for Deluge: there were reported at least 3 related issues (2 of which I am affected) and quick google search reveals them: * http://forum.deluge-torrent.org/viewtopic.php?t=53963 "Deluge 1.3.12 + libtorrent 1.1.0 not observing speed limits" * http://forum.deluge-torrent.org/viewtopic.php?t=53939 Error message in startup log * https://bugzilla.opensuse.org/show_bug.cgi?id=978600 segfault with IP Blocklist plugin enabled There's another issue I'm affected by but isn't reported yet: DHT is apparently malfunctioning, as status bar indicates "0 DHT nodes" and thus no leechers connected most of the time (wasn't the case with lt-r v1.0.9). What first 2 issues have in common is they go away after downgrading to libtorrent-rasterbar v1.0.9. Worse, TW users can't downgrade as old libtorrent was wiped from repositories. That would be ok if only upstream wouldn't refuse to support Deluge 1.3.x + libtorrent-rasterbar 1.1 in any way at http://forum.deluge-torrent.org/viewtopic.php?t=53939#p223925. So here are possible immediate steps to undertake: * Ignore * Bundle libtorrent 1.0.9 with Deluge * Provide libtorrent 1.0.9 package in TW along with 1.10 Should Deluge and/or rasterbar maintainers approve #2 or #3, I'm volunteering to make it happen. Thanks in advance. -- Regards, Andrei Dziahel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Tumbleweed Yast Boot loader no longer provides vga for Plymouth
by Roman Bysh 10 May '16

10 May '16

Hi all, Does anyone know why the "vga" settings were removed from the Tumbleweed Yast Boot loader? Plymouth needs the "vga" settings for initrd otherwise you get the three question marks. Any thoughts before I make a bug report. Cheers! Roman I -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 17

Re: [opensuse-factory] New Tumbleweed snapshot 20160508 released!
by Larry Finger 10 May '16

10 May '16

On 05/10/2016 05:42 AM, Ludwig Nussel wrote: > > Please note that this mail was generated by a script. > The described changes are computed based on the x86_64 DVD. > The full online repo contains too many changes to be listed here. > > Please check the known defects of this snapshot before upgrading: > https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… > > Packages changed: > autoyast2 (3.1.125 -> 3.1.126) > bluedevil5 (5.6.2 -> 5.6.3) > breeze (5.6.2 -> 5.6.3) > breeze-gtk (5.6.2 -> 5.6.3) > breeze4-style (5.6.2 -> 5.6.3) > btrfsprogs (4.5.1 -> 4.5.2) > dmidecode > hexchat > html2text > htmldoc > joe (4.1 -> 4.2) > kactivitymanagerd (5.6.2 -> 5.6.3) > kcm_sddm (5.6.2 -> 5.6.3) > kde-cli-tools5 (5.6.2 -> 5.6.3) > kde-gtk-config5 (5.6.2 -> 5.6.3) > kde-user-manager (5.6.2 -> 5.6.3) > kernel-source (4.5.2 -> 4.5.3) > khotkeys5 (5.6.2 -> 5.6.3) > kinfocenter5 (5.6.2 -> 5.6.3) > kmenuedit5 (5.6.2 -> 5.6.3) > kscreen5 (5.6.2 -> 5.6.3) > kscreenlocker (5.6.2 -> 5.6.3) > ksshaskpass5 (5.6.2 -> 5.6.3) > ksysguard5 (5.6.2 -> 5.6.3) > kwayland (5.6.2 -> 5.6.3) > kwin5 (5.6.2 -> 5.6.3) > libkdecoration2 (5.6.2 -> 5.6.3) > libkscreen2 (5.6.2 -> 5.6.3) > libksysguard5 (5.6.2 -> 5.6.3) > libxml2 > liferea (1.10.18 -> 1.10.19) > lsof (4.88 -> 4.89) > mdadm (3.3.4 -> 3.4) > milou5 (5.6.2 -> 5.6.3) > openssl (1.0.2g -> 1.0.2h) > oxygen5 (5.6.2 -> 5.6.3) > pixman > plasma-nm5 (5.6.2 -> 5.6.3) > plasma5-addons (5.6.2 -> 5.6.3) > plasma5-desktop (5.6.2 -> 5.6.3) > plasma5-openSUSE > plasma5-pa (5.6.2 -> 5.6.3) > plasma5-session (5.6.2 -> 5.6.3) > plasma5-workspace (5.6.2 -> 5.6.3) > polkit-kde-agent-5 (5.6.2 -> 5.6.3) > postgresql-init > powerdevil5 (5.6.2 -> 5.6.3) > qtcurve-kde4 > samba > systemsettings5 (5.6.2 -> 5.6.3) > taglib (1.10 -> 1.11) > virt-manager > webkit2gtk3 (2.12.1 -> 2.12.2) > wicked (0.6.32 -> 0.6.33) > xf86-input-evdev (2.10.1 -> 2.10.2) > xmlstarlet (1.5.0 -> 1.6.1) > yast2-update (3.1.37 -> 3.1.39) Please be aware that this snapshot breaks VirtualBox as the kernel modules have not been updated for kernel 4.5.3. TW hosts will be unable to start any VMs, and TW guests will not be able to start any of the VirtualBox Guest Additions. There should be a means of specifying that a kernel update should trigger a rebuild of VirtualBox, but I have been unable to find the magic statements to modify the RPM build file. If anyone has any suggestions, please tell me. Larry -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 4

[opensuse-factory] New Tumbleweed snapshot 20160508 released!
by Ludwig Nussel 10 May '16

10 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: autoyast2 (3.1.125 -> 3.1.126) bluedevil5 (5.6.2 -> 5.6.3) breeze (5.6.2 -> 5.6.3) breeze-gtk (5.6.2 -> 5.6.3) breeze4-style (5.6.2 -> 5.6.3) btrfsprogs (4.5.1 -> 4.5.2) dmidecode hexchat html2text htmldoc joe (4.1 -> 4.2) kactivitymanagerd (5.6.2 -> 5.6.3) kcm_sddm (5.6.2 -> 5.6.3) kde-cli-tools5 (5.6.2 -> 5.6.3) kde-gtk-config5 (5.6.2 -> 5.6.3) kde-user-manager (5.6.2 -> 5.6.3) kernel-source (4.5.2 -> 4.5.3) khotkeys5 (5.6.2 -> 5.6.3) kinfocenter5 (5.6.2 -> 5.6.3) kmenuedit5 (5.6.2 -> 5.6.3) kscreen5 (5.6.2 -> 5.6.3) kscreenlocker (5.6.2 -> 5.6.3) ksshaskpass5 (5.6.2 -> 5.6.3) ksysguard5 (5.6.2 -> 5.6.3) kwayland (5.6.2 -> 5.6.3) kwin5 (5.6.2 -> 5.6.3) libkdecoration2 (5.6.2 -> 5.6.3) libkscreen2 (5.6.2 -> 5.6.3) libksysguard5 (5.6.2 -> 5.6.3) libxml2 liferea (1.10.18 -> 1.10.19) lsof (4.88 -> 4.89) mdadm (3.3.4 -> 3.4) milou5 (5.6.2 -> 5.6.3) openssl (1.0.2g -> 1.0.2h) oxygen5 (5.6.2 -> 5.6.3) pixman plasma-nm5 (5.6.2 -> 5.6.3) plasma5-addons (5.6.2 -> 5.6.3) plasma5-desktop (5.6.2 -> 5.6.3) plasma5-openSUSE plasma5-pa (5.6.2 -> 5.6.3) plasma5-session (5.6.2 -> 5.6.3) plasma5-workspace (5.6.2 -> 5.6.3) polkit-kde-agent-5 (5.6.2 -> 5.6.3) postgresql-init powerdevil5 (5.6.2 -> 5.6.3) qtcurve-kde4 samba systemsettings5 (5.6.2 -> 5.6.3) taglib (1.10 -> 1.11) virt-manager webkit2gtk3 (2.12.1 -> 2.12.2) wicked (0.6.32 -> 0.6.33) xf86-input-evdev (2.10.1 -> 2.10.2) xmlstarlet (1.5.0 -> 1.6.1) yast2-update (3.1.37 -> 3.1.39) === Details === ==== autoyast2 ==== Version update (3.1.125 -> 3.1.126) Subpackages: autoyast2-installation - Media-based AutoUpgrade case for feature: No Recommends in * -release RPMs (FATE#320199) - 3.1.126 ==== bluedevil5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== breeze ==== Version update (5.6.2 -> 5.6.3) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== breeze-gtk ==== Version update (5.6.2 -> 5.6.3) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== breeze4-style ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== btrfsprogs ==== Version update (4.5.1 -> 4.5.2) Subpackages: libbtrfs0 - update to 4.5.2 * new/moved command: btrfs-calc-stats -> btrfs inspect tree-stats * check: fix false alert for metadata blocks crossing stripe boundary * check: catch when qgroup numbers mismatch * check: detect running quota rescan and report mismatches * balance start: add safety delay before doing a full balance * fi sync: is now silent * fi show: don't miss filesystems with partially matching uuids * dev ready: accept only one argument for device * dev stats: print "devid:N" for a missing device instead of "(null)" * other: * lowest supported version of e2fsprogs is 1.41 * minor cleanups, test updates - Removed patch: 2000-btrfs-full-balance-warning.diff ==== dmidecode ==== - dmidecode-01-add-no-sysfs-option-description-to-h-output.patch: Add "--no-sysfs" option description to -h output. - dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch: Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3. - dmidecode-03-let-read_file-return-the-actual-data-size.patch: Let read_file return the actual data size. - dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch: Use read_file() to read the DMI table from sysfs. https://savannah.nongnu.org/bugs/?46176 - dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch: Use DWORD for Structure table maximum size in SMBIOS3. - dmidecode-06-hide-irrelevant-fixup-message.patch: Hide irrelevant fixup message. http://savannah.nongnu.org/support/?109024 ==== hexchat ==== Subpackages: hexchat-lang - Add migrate-configuration-from-xchat.patch Fate#318480:replace xchat with hexchat,automaticly migrate settings from xchat: http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settin… ==== html2text ==== - Cleanup spec file with spec-cleaner - Use macro for configure - Do not ship INSTALL - Remove useless provides/obsoletes - Add gpg signature - Use url for source ==== htmldoc ==== - Cleanup spec file with spec-cleaner - Use macro for configure ==== joe ==== Version update (4.1 -> 4.2) - Update to 4.2: * New or improved syntax files for the following languages: * Dockerfile * Usability Enhancements * The top Google help searches for JOE include: * How do I save and exit? The startup copyright notice has been replaced with basic help for beginners * How do I dismiss the region highlighting? Changed to Ctrl-C will do it. * How do I close all files and exit? Now Ctrl-K Q does this. * Restyle the help screens. * Remove time and "Ctrl-K H for help" message from status bar. * Add ^KH for help to search and replace prompts. * Provide aborthint and helphint options * Enable -noxon by default (disable ^S/^Q flow control). * Document ESC X (command prompt) in the help screens. * "joe --help" now prints all command line options. * Other Enhancements * Tags search now tries to find the tags file in parent directories if it does not exist in the current directory and if the TAGS environment variable was not set. * Built-in calculator can now print and accept numbers in binary, octal and engineering formats: __dec__ 12_345 __eng__ 12.345_0e3 __bin__ 0b11_0000_0011_1001 __oct__ 0o3_0071 __hex__ 0x3039 * Built-in calculator now prints and accepts separating underscores for clarity. * Enhanced calculator statistics functions: * __dev__ computes standard deviation with full population * __samp__ computes standard deviation with sample of population * Linear regression analysis. Select a region of x and y values, then: * __lr__(x) provide estimate of y given x * __rlr__(y) provide estimate of x given y * __Lr__, __lR__, __LR__: log, exponential, power regression * Calculator region functions now assume the entire buffer if no region is set. * Tab completion now works at the calculator prompt (and in all prompts which allow numeric input, such as ^KL- go to line). * Make new regex engine (from JOE 4.1) more compatible with the classic engine. \\y is now shorthand for \$\\.\\\*\$, so that it does what \\\* did in the old engine. Also: * \\. no longer matches newline. * \\\* matches shortest match, not longest match. * Add -left and -right options to control the amount scrolling when the cursor moves past the left or right edge of the screen. * Bugs fixed * Fix use after free bug which shows up as a crash in OpenBSD * Fix bug where indent step value was not shown on ^T menu * Fix bug where setting margin doesn't work on big-endian systems * Fix issue where highest valued unicode character equivalent was not translating to its corresponding 8-bit character. Effect of this was that Delete key was not working in shell windows in ASCII character set. * Standard deviation calculator function was not producing correct results. * Allow koi8r and koi8-r for KOI8-R in joe_getcodeset (which is only used if there is no setlocale). * Guess_crlf forced UNIX line endings for new files even though crlf was set. Now crlf is left alone if guess_crlf can not determine the line ending. * If cursor was at end of a long line and you switched to hex dump display mode, then hex dump was scrolled. Now scroll offset is reset when you switch to hex display mode. - Resynched patches: joe-3.3-warnings.patch joe-3.7-spec_association.patch - Update German translations ==== kactivitymanagerd ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kcm_sddm ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kde-cli-tools5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kde-gtk-config5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kde-user-manager ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kernel-source ==== Version update (4.5.2 -> 4.5.3) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.5.3. - Delete patches.arch/arm64-kvm-fix-hrtimer.patch. - Delete patches.fixes/sched-cgroup-Fix-cleanup-cgroup-teardown-init.patch. - Update config files (BMP085 changed to m). - commit d29747f - sched/cgroup: Fix/cleanup cgroup teardown/init. - commit 4da1329 ==== khotkeys5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: khotkeys5-devel - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kinfocenter5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kmenuedit5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kscreen5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kscreenlocker ==== Version update (5.6.2 -> 5.6.3) Subpackages: libKScreenLocker5 - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== ksshaskpass5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== ksysguard5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kwayland ==== Version update (5.6.2 -> 5.6.3) Subpackages: kwayland-devel - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== kwin5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: kwin5-devel - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== libkdecoration2 ==== Version update (5.6.2 -> 5.6.3) Subpackages: libkdecoration2-devel libkdecorations2-5 libkdecorations2private5 - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== libkscreen2 ==== Version update (5.6.2 -> 5.6.3) Subpackages: libKF5Screen7 libkscreen2-devel libkscreen2-plugin - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== libksysguard5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: libksysguard5-devel libksysguard5-helper - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion while parsing certain XML files in recovery mode (CVE-2016-3627, bnc#972335). - Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch to improve protection against Billion Laughs Attack (bnc#975947). ==== liferea ==== Version update (1.10.18 -> 1.10.19) - Update to version 1.10.19: + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18 release. + Fixes gh#lwindolf/liferea#73: Problem with updating favicons. ==== lsof ==== Version update (4.88 -> 4.89) - Update to version 4.89 * Applied correction from Casper Dik <Casper.Dik(a)oracle.com> to his patch for Solaris 11 that I applied incorrectly in revision 4.88. * Updated for latest version of FreeBSD 11.0-CURRENT. * Compensated for a missing FreeBSD 10.0 typedef of bool on the i386 architecture. Allen Hewes <rallenh(a)hotmail.com> provided a test system. Andrey Chernov <ache(a)freebsd.org> provided useful advice. * Improved tests/Add2TestDB script with a patch from Peter Schiffer <pschiffe(a)redhat.com>. Added patches from Peter to eliminate Linux gcc warnings. Updated Lsof.8 with improvements supplied by Bjarni Ingi Gislason <bjarniig(a)rhi.hi.is>. * Changed FreeBSD global CFLAGS extraction per Terry Kennedy <TERRY(a)tmk.com>. Also made sure -DNEEDS_BOOL_TYPEDEF is [#]define'd when the resulting CFLAGS doesn't contain it. Terry reported that need. * Improved Linux test for tcp.h in response to a report from Cato Auestad <cato(a)cato.ninja>. Cato did the testing. * Fixed Linux UNIX socket search by name bug reported by Stephane Chazelas <stephane.chazelas(a)gmail.com>. * Added Linux display of UNIX socket endpoint information with code provided by Masatake YAMATO <yamato(a)redhat.com>. Peter Schiffer <pschiffe(a)redhat.com> provided a test system. * Insured that type definitions from <vm/vm.h> were again made visible to lsof on FreeBSD 11 after a system header file change hid them. - use spec-cleaner to clean specfile ==== mdadm ==== Version update (3.3.4 -> 3.4) - New upstream release mdadm-3.4 Adds support for clustered-raid1 and journalled raid5 - 0001-super1-Clear-memory-allocated-for-superblock-bitmap-.patch Important upstream bugfix relating to uninialised memory. ==== milou5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== openssl ==== Version update (1.0.2g -> 1.0.2h) Subpackages: libopenssl-devel libopenssl1_0_0 libopenssl1_0_0-32bit - OpenSSL Security Advisory [3rd May 2016] - update to 1.0.2h (boo#977584, boo#977663) * Prevent padding oracle in AES-NI CBC MAC check A MITM attacker can use a padding oracle attack to decrypt traffic when the connection uses an AES CBC cipher and the server support AES-NI. (CVE-2016-2107, boo#977616) * Fix EVP_EncodeUpdate overflow An overflow can occur in the EVP_EncodeUpdate() function which is used for Base64 encoding of binary data. If an attacker is able to supply very large amounts of input data then a length check can overflow resulting in a heap corruption. (CVE-2016-2105, boo#977614) * Fix EVP_EncryptUpdate overflow An overflow can occur in the EVP_EncryptUpdate() function. If an attacker is able to supply very large amounts of input data after a previous call to EVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption. (CVE-2016-2106, boo#977615) * Prevent ASN.1 BIO excessive memory allocation When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio() a short invalid encoding can casuse allocation of large amounts of memory potentially consuming excessive resources or exhausting memory. (CVE-2016-2109, boo#976942) * EBCDIC overread ASN1 Strings that are over 1024 bytes can cause an overread in applications using the X509_NAME_oneline() function on EBCDIC systems. This could result in arbitrary stack data being returned in the buffer. (CVE-2016-2176, boo#978224) * Modify behavior of ALPN to invoke callback after SNI/servername callback, such that updates to the SSL_CTX affect ALPN. * Remove LOW from the DEFAULT cipher list. This removes singles DES from the default. * Only remove the SSLv2 methods with the no-ssl2-method option. When the methods are enabled and ssl2 is disabled the methods return NULL. ==== oxygen5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: oxygen5-cursors oxygen5-decoration oxygen5-devel oxygen5-lang oxygen5-sounds oxygen5-style - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== pixman ==== Subpackages: libpixman-1-0 libpixman-1-0-32bit libpixman-1-0-devel - Add pixman-private-correct-include.patch: pixman-private: include <float.h> only in C code, patch from upstream git. ==== plasma-nm5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== plasma5-addons ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== plasma5-desktop ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== plasma5-openSUSE ==== Subpackages: plasma5-desktop-branding-openSUSE plasma5-workspace-branding-openSUSE - Bump Plasma (Build)Requires to 5.6.3 ==== plasma5-pa ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== plasma5-session ==== Version update (5.6.2 -> 5.6.3) - Reset the DEFAULT_WM value in %post for KDE upgrade compatibility, script taken from kdebase4-session (boo#978454) - Bump to 5.6.3 ==== plasma5-workspace ==== Version update (5.6.2 -> 5.6.3) Subpackages: drkonqi5 plasma5-workspace-devel plasma5-workspace-libs - Add digitalclock-fix-show-seconds.patch: Fixes displaying seconds in the digital clock which was broken with certain locales ("C" e.g.) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== polkit-kde-agent-5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== postgresql-init ==== - fix building on sle11: - guard all systemd related parts with build conditional - do not own fwdir on sle11 - Increase the default timeout for pg_ctl from 60 to 600 seconds and make it configurable (bsc#966285). ==== powerdevil5 ==== Version update (5.6.2 -> 5.6.3) - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== qtcurve-kde4 ==== Subpackages: libqtcurve-cairo1 libqtcurve-utils2 qtcurve-gtk2 qtcurve-qt5 - Added fix-build-with-gcc5.patch: fixes build in Factory ==== samba ==== Subpackages: libdcerpc-binding0 libdcerpc-binding0-32bit libdcerpc0 libdcerpc0-32bit libndr-krb5pac0 libndr-krb5pac0-32bit libndr-nbt0 libndr-nbt0-32bit libndr-standard0 libndr-standard0-32bit libndr0 libndr0-32bit libnetapi0 libnetapi0-32bit libsamba-credentials0 libsamba-credentials0-32bit libsamba-errors0 libsamba-errors0-32bit libsamba-hostconfig0 libsamba-hostconfig0-32bit libsamba-passdb0 libsamba-passdb0-32bit libsamba-util0 libsamba-util0-32bit libsamdb0 libsamdb0-32bit libsmbclient-devel libsmbclient0 libsmbconf0 libsmbconf0-32bit libsmbldap0 libsmbldap0-32bit libtevent-util0 libtevent-util0-32bit libwbclient0 libwbclient0-32bit samba-client samba-client-32bit samba-doc samba-libs samba-libs-32bit samba-winbind samba-winbind-32bit - Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962). - Revert shared library packaging to comply with SLPP - Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862). - Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197). - Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package. - Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223). - Upgrade on-disk FSRVP server state to new version; (bsc#924519). - Only obsolete but do not provide gplv2/3 package names; (bsc#968973). - Relocate existing lock files to /var/lib/samba/lock; (bsc#968963). - Obsolete no longer existing samba-32bit package; (bsc#967625). - Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732). - Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361). - Simplify shared library packaging; (bsc#966956). - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023). - Add quotes around path of update-apparmor-samba-profile; (bnc#962177). - Remove autoconf build-time requirement. - Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659). - Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249). - Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912). - Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972). - Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems. - Remove redundant configure options while adding with-relro. - Relocate the lockdir to the /var/lib/samba/lock directory. - Cleanup and enhance the pidl sub package. - Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage. - Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555). - Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038). - Relocate the tmpfiles.d directory to the client package; (bnc#947552). - Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716). - Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051). - Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502). - Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013). - Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488). - Configure with --bundled-libraries=NONE; (bso#11458). - Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284). - Remove libiniparser-devel build-time requirement. - Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "?PTHREAD_MUTEX_ROBUST? undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371). - Disable rpath usage; (bnc#902421). - Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909). - Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457). - Order winbind.service Before and Want nss-user-lookup target. - Remove fam-devel build-time dependency for post-6 RHEL systems. - Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033). - Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854). - Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf. - Drop redundant doc attribute from man pages. - Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). - Prevent samba package updates from disabling samba kerberos printing. - Add sparse file support for samba; (fate#318424). - Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813). - Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). - Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root. - Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304). - Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo <server>' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127). - Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376). - Fix usage of freed memory on server exit; (bso#11218); (bnc#919309). - Fix tdb_store_flag_to_ntdb() gcc5 build failure. - Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238). - Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). - Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0. - Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059). - Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages. - Enable avahi support on post-12.2 systems. - Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034). - yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922). - Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627). - Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175). - Fix spoolss error response marshalling; (bso#10984). - Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942). - Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312). - Use the upstream tar ball, as signature verification is now able to handle compressed archives. - Fix leak when closing file descriptor returned from dirfd; (bso#10918). - Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898). - Remove dependency on gpg-offline as signature checking is implemented in the source validator. - Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860). - Update to 4.2.0rc2. - Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346). - Backport upstream master fixes for samba-regedit; (bnc#896536). - BuildRequire python-xml on SUSE systems only. - BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page. - Update to 4.2.0rc1. - Fix small memory-leak in the background print process; (bnc#899558). - Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536). - Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script. - Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969). - Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794). - Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175). - Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464). - Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912). - fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774). - Remove pre-11.2 patch which by default uses the smbpasswd passdb backend. - build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356). - Create the cups smb backend as sym link pointing to smbspool; (bnc#891220). - Fix winbind service parameter usage; (bnc#890005). - lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008). - Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429). - Fix "net time" segfault; (bso#10728); (bnc#889539). - Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N <numprocs> is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c. - Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed. - Add missing newline to debug message in daemon_ready(); (bnc#865627). - BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627). - Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). - Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758). - BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case. - BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems. - Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612). - examples/libsmbclient: avoid some compiler warnings; (bso#10624). - Fix printer job purging; (bso#10612); (bnc#879390). - Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17. - Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701). - Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180). - Clone the base share security descriptor when exposing a snapshot share; (bnc#874656). - Use appropriate HRESULT return codes; (bnc#875046). - Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu(). - Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354). - Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658). - Fix minor compiler warnings in snapshot code-path; (bnc#873177). - Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary. - Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396). - User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927). - Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957). - Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files. - Extend vfs_snapper man page to cover permissions; (bnc#870570). - Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707). - Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586). - Depend only on %version with all manual Provides and Requires; (bnc#844307). - Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866). - Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). - Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665). - samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866). - Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095). - Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641). - Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771). - Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561). - Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397). - Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135). - Depend on %version-%release with all manual Provides and Requires; (bnc#844307). - Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442). - Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293). - Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation. - Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677). - Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370). - Streamline the vendor suffix handling and add support for SLE 12. - Fix zero length server-side copy request handling; (bso#10424); (bnc#862558). - Set the PID directory to /run/samba on post-12.2 systems. - Make use of the tmpfilesdir macro while calling systemd-tmpfiles. - Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937). - Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832). - Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809). - Ensure ndr table initialization; (bnc#860648). - Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346). - s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384) - s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677). - Default sysconfig daemon options to -D; (bso#10388); (bnc#857454). - Add /var/cache/samba to the client file list; (bnc#846586). - Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454). - Correct sysconfig variable names by adding the missing D char; (bnc#857454). - Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311). - Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454). - BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems. - smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337). - Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454). - Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759). - Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759). - Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time. - Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345). - Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment. - Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347). - Make use of the full gpg pub key file name including the key ID. - Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks. - Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770). - Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021). - BuildRequire systemd on post-12.2 systems. - Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269). - Let gpg verify execution condition not fail on non SUSE systems. - Add systemd support for post-12.2 systems. - Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474). - Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656). - Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103). - Private key in key.pem world readable; CVE-2013-4476; (bnc#848103). - ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). - Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178). - Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode. - Verify source tar ball gpg signature. - Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162). - Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel. - Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf. - Add or polish the shared library package summaries and descriptions. - Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121). - Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129). - Define the source URL differently in the case of a release candidate. - Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064). - BuildRequire pyldb-devel. - Add libnetapi0 and samba-libs to baselibs.conf. - Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073). - Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969). - Require krb5 and not the non existing krb5-libs package. - Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration - BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only. - Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage. - Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support. - Remove unused ccache switch from the spec file. - BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again. - Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems. - Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir. - Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968). - Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build. - Remove ldapsmb from the main spec file. - Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man. - Don't bzip2 the main tar ball, use the upstream gziped one instead. - Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel. - Fix libreplace license ambiguity; (bso#8997); (bnc#765270). - Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868). - Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches. - Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624). - Fix periodic printcap cache reloads; (bso#9650); (bnc#807334). - No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889). - Shift the smbfs init script nfs dependency from Required to Should. - Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031). - Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems. - Explicitly configure --with-ads. - Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350). - Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string. - Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782). - Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610). - Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries. - Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line. - Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage. - Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2. - Disable SWAT during configure and don't package it any longer. - Remove dangling references to Heimdal from the spec file. - Remove /lib/samba prefix from the localstatedir configure option. - Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364). - Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375). - Use the version macro while definition of the branch macro. - Remove references to no longer used devel macros. - Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481). - netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481). - SEGV when using second vfs module; (bso#9471). - Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390). - s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462). - Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460). - Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package. - On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340). - BuildRequire libnscd-devel once. - Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294). - Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems. - Don't clutter the spec file diff view; (bnc#783384). - Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677). - Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183). - Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package. - ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402). - s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of <smbconfoption> tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386). - Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available. - Ensure adding the winbind group never can fail. - Create ntadmin group only if it doesn't yet exist. - Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218). - quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280). - Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719). - Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601). - Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293). - Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135). - Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150). - NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056). - Remove backup files caused by running configure in examples/VFS. - Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062). - Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build. - Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options. - Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package. - BuildRequire gcc, make, and patch; (bnc#771516). - ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262). - Fix shell syntax in dhcpcd hook script; (bnc#769957). - Add missing int declaration to the net kdc lookup patch. - Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package. - Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983). - resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995). - Call autogen.sh even on post-12.1 SUSE systems. - Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case. - BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems. - Install talloc.pc only on pre-12.2 and non SUSE systems. - BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems. - s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882). - Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems. - Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731). - docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826). - Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576). - Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080). - Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797). - s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797). - s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784). - Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454). - Remove obsoleted Authors lines from spec file for post-11.2 systems. - Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems. - Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934). - Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854). - s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825). - s3:winbindd fix a return code check; (bso#8406). - s3: Add rmdir operation to streams_depot; (bso#8733). - s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975). - s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739). - s3:client: ignore SMBecho errors (the server may not support it); (bso#8139). - Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734). - smbclient fails with posix large reads; (bso#8727). - Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614). - s3: Compile IDL files in autogen, some configure tests need this. - Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395). - Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986). - Use spdx.org compliant license names for all packages. - Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710). - s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504). - Use correct license, LGPLv3+ for libwbclient packages. - When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). - Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885). - Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504). - Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710). - Renaming a symlink fails if the symlink target is outside of the share; (bso#8664). - Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). - net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419). - Fix incorrect perfcount array length calculations; (bnc#739258). - BuildRequire autoconf to avoid implicit dependency for post-11.4 systems. - Remove call to suse_update_config macro for post-11.4 systems. - Use samba.org for the ldapsmb source location. - Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516). - Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572). - Add ldap to Should-Start and Stop of the smb init script; (bnc#730046). - Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571). - Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564). - Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145). - Fix typo in net ads join output; (bnc#713135). - Ignore a potentially missing AppArmor snippet helper script; (bnc#725256). - Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521). - s3/doc: add man page for aio_fork vfs module. - Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). - s3: Samba PDC is looking up only primary user group; (bso#8455). - Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040). - Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261). - Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724). - Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598). - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473). - Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515). - winbindd cache timeout expiry test was reversed; (bso#8521). - Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). - s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518). - SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). - s3-docs: Fix bug (bso#7908) and typo. - Return error of cli_push when 'put - /some/file' is used; (bso#7551). - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). - smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). - Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443). - smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). - Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458). - DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). - s3-docs: Fix typos. - s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). - Remove "experimental" label on VFS ACL modules; (bso#8494). - acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). - s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476). - s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465). - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). - s3-netapi: allow to use default krb5 credential cache for libnetapi users. - s3-docs: document -k switch in net manpage. - Map to guest can return uninitialized blob of data; (bso#8477). - s3-registry: registry/reg_format.c must include includes.h; (bso#8401). - smbclient segfaults when option -m is used for legacy dialects; (bso#8453). - Fix 'widelinks' regression intro'd in 3.2; (bso#8229). - Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). - s3-spoolss: Fix bug forms migration; (bso#8351). - s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452). - s3: Do not fork the echo handler for smb2; (bso#8334). - s3-spoolss: Fix bug empty notify servername; (bso#8236). - SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). - Remove smb child crash fix. The issue had been fixed upstream differently. - BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems. - Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208). - Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721). - Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines. - Remove %release from all Provides. - Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433). - Use /var/run for the cifs state file in the init script too; (bnc#710304). - Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412). - Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409). - Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428). - Fix infinite loop in ACL module code; (bso#8422). - Fix getent group if trusted domains are not reachable; (bso#8420). - smbclient can't access a NT4 share since 3.6.0; (bso#8385). - Optimize serverid_exists() for Solaris; (bso#8395). - talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free. - vfs_chown_fsp returned in the wrong directory; (bso#8370). - Remove irritating "." targets when recent system libs exist; (bso#8369). - Correctly initialize "idmap config * : script" with NULL; (bso#8368). - Add missing include to suppress compiler warnings; (bso#8365). - Point the chain offset beyond the current request; (bso#8360). - Fix gpfs vfs module build; (bso#8364). - Make vfs_prealloc even build on older systems; (bso#8363). - Do central cli_set_error and return the actual NTSTATUS; (bso#7864). - Add a fallback for missing open&x support in OS/X Lion; (bso#8338). - Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems. - Remove references to disabled vscan build. - Add missing define, includes, and initialization to get_printing_ticket. - Use /var/run for the cifs state file; (bnc#710304). - Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303). - File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335). - Fix reload of the configuration and also reload activated registry shares; (bso#8327). - WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326). - smbclient cannot list directories from a big-endian machine; (bso#8324). - Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated. - The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503). - The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241). - Fixed the DFS referral response for msdfs root; (bnc#703655). - Fix CUPS print job IDs; (bso#7288); (bnc#701257). - Make use of the actual library version as part of the package name on post-11.3 systems only. - Fix winbind internal error; (bso#7636); (bnc#659424). - Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170). - Specify nmbdsocketdir at configure time; (bnc#700953). - Build the tdb, talloc, and tevent libraries ahead of anything else. - Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out. - Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209). - Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461). - Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836). - Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026). - Don't lockout users while offline; (bso#8166); (bnc#692607). - Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins. - Fix to renew the kerberos ticket in samba after expiry; (bnc#669949). - Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945). - Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969). - Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946). - Package static libraries with 0644 permissions. - Add Requires libtalloc-devel to libldb-devel and libtevent-devel. - Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf. - Don't call the suse_update_config macro before building lib ldb and tevent. - Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs. - Add PreReq permissions to the krb-printing package. - Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build. - Always use the actual library version as part of the package name. - Exclude shared python modules. - Fix printing from Windows 7 clients; (bso#7567); (bnc#687535). - Update pidl and always compile IDL at build time; (bnc#688810). - Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files. - Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978). - Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913). - Replace jobs by _smp_mflags macro while calling make on post-11.4 systems. - Don't crash when publishing a single printer; (bnc#643119). - Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478). - Define the libwbclient packages ahead of packages with a different version. - Use %_smp_mflags for parallel building. - Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950). - Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility. - Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773). - Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431). - Disable separate build of samba-doc for post-11.1 systems. - Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431). - Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460). - Do not require a particular library version if the major version is part of the package name. - Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems. - Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353). - Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936). - No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should. - Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845). - Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842). - Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936). - Fix race in cups async printer services reload; (bso#7836); (bnc#625936). - Don't tweak with baselibs.conf during %post if not present; (bnc#652620). - Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620). - Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620). - vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). - Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620). - Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112). - Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620). - Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620). - Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620). - Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620). - Add Provides samba-client to the samba-gplv3-client package; (bnc#652620). - Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620). - Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620). - Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719). - Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4. - Add the _build_arch at the end of the vendor version suffix. - Provide and Obsolete samba-gplv3 to replace potentially installed packages. - Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes. - Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715). - Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036). - Include the reviewed french translation for pam_winbind; (bnc#499233). - Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755). - Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870). - Fix baselibs.conf for libtalloc. - Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218). - Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304). - Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS. - Complete fix for trusts with Windows 2008R2 DCs. - Fix authentication dialogs when connecting to older systems; (bnc#632055). - Adjust position of conditional ldapsmb %package and %files definition. - Create the /var/run/samba directory on the fly and package it as %ghost. - Fix preexec scripts; (bso#7104); (bnc#632852). - Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770). - BuildRequire python-devel for post-9.3 systems. - Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets. - Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file. - Fix printers not auto loading with registry config; (bso#7280); (bnc#617153). - Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added. - Intilize workgroup of nmblookup as empty string. - Fix net ads join when using parent domain users; (bso#6364); (bnc#630812). - cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246). - Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787). - Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517). - Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product. - Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935). - Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927). - Update of the SMB Traffic Analyzer v2 VFS module - Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697). - Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341). - Honor "interfaces" list in net ad dns register; (bnc#606947). - Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049). - Enable the build of the idmap tdb2 module; (bnc#600822). - BuildRequire keyutils-libs-devel for Fedora and post-RHEL4. - BuildRequire pkg-config for post-10.2 systems and else pkgconfig. - Add "net conf import" error messages; (bso#7378, bnc#598189). - Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544). - Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316). - Add SMB Traffic Analyzer v2 VFS module. - Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868). - Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215). - Fix tdb validation for offline auth; (bnc#587014). - Fix "printer admin" functionality; (bso#7255). - An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642. - Ensure to have a valid talloc stackframe; (bso#7251). - _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237). - Merge missing pam_winbind message translations; (bnc#499233). - Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package. - Fix join of Windows 2008 domains; (bnc#567013). - Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683). - Fixed libldb.so link in libldb-devel. - Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253). - Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182). - Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches. - Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings. - Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002). - Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925). - Don't invalidate cache for uninitialized domains; (bnc#538923). - Signals are processed twice in child; (bnc#538923). - Allow forced pw change even with min pw age; (bnc#561894). - Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868). - Fix enumerate domain local groups for primary domain; (bnc#573813). - Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106). - Normalize "Changing password for" msg IDs and STRs; (bnc#499233). - Build libtevent and libldb and put them into separate subpackages. - Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do. - Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server. - Free unused memory after a packet got processed; (bso#7020). - Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923). - Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline. - Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server. - Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603). - Add BuildRequires to fam-devel; (bnc#564260). - Prevent winbind crash; (bso#7014); (bnc#566119). - Fix processing of open modes in POSIX open; (bnc#530683). - Add baselibs.conf as a source. - Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon. - Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems. - Prevent cifstab from being overwritten while upgrade on post-11.2 systems. - Give the user a chance to change password when password will expire soon; (FATE#302414). - Rename smbfs init script to cifs for post-11.2 systems. - Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680). - Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622). - Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only. - Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2. - Fix kerberos refresh chain; (bnc#546162); (bso#6872). - Hardlink duplicate files on post-11.1 systems. - Add BuildArch noarch to samba-doc on post-11.1 systems. - Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811). - Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages. - Let smbclient show special characters properly; (bso#6829); (bnc#544204). - Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826). - Allow winbind to ignore certain domains; (bnc#539506). - Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150). - Fix potential denial of service; CVE-2009-2906; (bnc#543115). - Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150). - Fix unresolved home path; CVE-2009-2813; (bnc#539517). - Don't overwrite password in pam_winbind; (bnc#515444). - mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged - Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page. - Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579). - Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal. - Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array. - Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615). - check in .po files for pam_winbind; (bnc#499233); (bso#6602). - Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629). - Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg. - Use a conditional suse_version macro in front of the SUSE_ASNEEDED export. - lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560). - Don't link with --as-needed flag on post-11.1 systems. - Stop the smbfs service if an interface goes down; (bnc#517768). - Disable build of static libraries on post-11.1 systems; (bnc#509945). - Fix missing zlibs for cifs.upcall and test_shlibs. - Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name. - Package /etc/samba/smbpasswd as %ghost on post-11.1 systems. - Fix net ads leave; (bnc#511695). - Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164). - Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478). - Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479). - Uninitialized read of a data value; CVE-2009-1888 (bnc#515479). - Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions. - Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360). - Fix a bad memleak in vfs_full_audit; (bnc#510035). - Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array. - Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases. - Default with passdb backend to smbpasswd for SUSE products older than 11.2. - Explicitly use 'tdbsam' as passdb backend in the default smb.conf file. - Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds. - Enable cifs.upcall on versions newer than SUSE 10.0. - Add BuildRequires to keyutils-devel. - Remove redundant Requires to keyutils-libs for cifs-mount. - Detect tight loop in tdb_find(); (bnc#450974). - Fix lp printing with kerberos; (bnc#476913). - Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets. - Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory. - Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes". - Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root. - Don't lookup local user for remote password changes; (bnc#493507). - Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update. - Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic. - BUG 6195: Fix crash on passdb conversion. - Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise. - Obsolete change from 2008-03-05 by removing the needless examples cleanup. - Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status. - Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc. - Ignore return value from subshell to fix build. ==== systemsettings5 ==== Version update (5.6.2 -> 5.6.3) Subpackages: systemsettings5-devel - Update to 5.6.3 * New bugfix release * For more details please see: https://www.kde.org/announcements/plasma-5.6.3.php ==== taglib ==== Version update (1.10 -> 1.11) Subpackages: libtag-devel libtag1 libtag_c0 - Update to 1.11 * Fixed reading APE items with long keys. * Fixed reading ID3v2 SYLT frames when description is empty. 1.11 BETA 2: * Better handling of PCM WAV files with a 'fact' chunk. * Better handling of corrupted APE tags. * Efficient decoding of unsynchronized ID3v2 frames. * Fixed text encoding when saving certain frames in ID3v2.3 tags. * Fixed updating the size of RIFF files when removing chunks. * Several smaller bug fixes and performance improvements. 1.11 BETA: * New API for creating FileRef from IOStream. * Added support for ID3v2 PCST and WFED frames. * Added support for pictures in XiphComment. * Added String::clear(). * Added FLAC::File::strip() for removing non-standard tags. * Added alternative functions to XiphComment::removeField(). * Added BUILD_BINDINGS build option. * Added ENABLE_CCACHE build option. * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS. * Better handling of duplicate ID3v2 tags in all kinds of files. * Better handling of duplicate tag chunks in WAV files. * Better handling of duplicate tag chunks in AIFF files. * Better handling of duplicate Vorbis comment blocks in FLAC files. * Better handling of broken MPEG audio frames. * Fixed crash when calling File::properties() after strip(). * Fixed crash when parsing certain MPEG files. * Fixed crash when saving Ogg files. * Fixed possible file corruptions when saving ASF files. * Fixed possible file corruptions when saving FLAC files. * Fixed possible file corruptions when saving MP4 files. * Fixed possible file corruptions when saving MPEG files. * Fixed possible file corruptions when saving APE files. * Fixed possible file corruptions when saving Musepack files. * Fixed possible file corruptions when saving WavPack files. * Fixed updating the comment field of Vorbis comments. * Fixed reading date and time in ID3v2.3 tags. * Marked ByteVector::null and ByteVector::isNull() deprecated. * Marked String::null and String::isNull() deprecated. * Marked XiphComment::removeField() deprecated. * Marked Ogg::Page::getCopyWithNewPageSequenceNumber() deprecated. It returns null. * Marked custom integer types deprecated. * Many smaller bug fixes and performance improvements. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#975219 - virt-manager interface is broken (Tumbleweed-20160417) virt-manager.spec ==== webkit2gtk3 ==== Version update (2.12.1 -> 2.12.2) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Refresh webkitgtk-disable-gcc-version-checks.patch for latest version. - Update to version 2.12.2: + Fix rendering of scrollbars with GTK themes using stepper buttons. + Fix compatibility issue with 2.12.1 regarding local storage access from file URLs. + Make menu list buttons use the text color from the theme. + Do not show resize grip in non-resizable text fields. + Fix accessibility events causing Orca to echo key presses instead of speaking the inserted characters in password fields. + Fix an off by one error in hyphenation. + Fix several crashes and rendering issues. + Fix the build with libjpeg v9. + Updated translations. - Drop pkgconfig(gtk+-2.0) BuildRequires and pass - DENABLE_PLUGIN_PROCESS_GTK2=OFF to configure. We do no longer ship the flash-plugin in openSUSE, and it were the last consumer of this functionality. This also have the added bonus of freeing zenity and dependant packages of gtk2 dependencies. ==== wicked ==== Version update (0.6.32 -> 0.6.33) Subpackages: libwicked-0-6 wicked-service - version 0.6.33 - route: initial routing policy rules support (fate#312217) ==== xf86-input-evdev ==== Version update (2.10.1 -> 2.10.2) - u_01-Add-a-kiosk-mode-for-touch-screens.patch u_02-Add-delay-between-button-press-and-release-to-kiosk-mode.patch Add click on touch (FATE#320263). - Update to version 2.10.2 This release restores wheel emulation on absolute devices and drops the forced direction locking for scroll buildup during wheel emulation since it made it almost impossible to actually scroll in both directions. Since horizontal scrolling is disabled by default anyway, we don't need this lock. ==== xmlstarlet ==== Version update (1.5.0 -> 1.6.1) - Update to 1.6.1: * handle unicode arguments under Windows - Changes for 1.6.0: * get rid of "helpful" message about namespaces * update user guide * Enhancements: + add --stop option to val + add global option --no-doc-namespace * Build: + let the make install target succeed even if docs aren't built. - Cleanup spec file with spec-cleaner - Cleanup dependencies - Refresh xmlstarlet-xml_depyx.c.diff ==== yast2-update ==== Version update (3.1.37 -> 3.1.39) - Updated yast2-packager dependency (FATE#320199) - 3.1.39 - Select the default product patterns in the pattern based upgrade (FATE#320199) - 3.1.38 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Re: openSUSE Tumbleweed – Review of the Weeks 2016/17 & 18
by André Verwijs 10 May '16

10 May '16

Tumbleweed devs should also create a whole new installation DVD for TW, from scratch..!!! Really rebuild all scripts and packages, i'm still getting crash with choosing installation mirrors during setup... or make this a separate project to make installation a smooth process... if devs want i could upload log files for debugging.. .. ______________________________________________________________________________________ La Ventura (heavy metal band) Tumblr page: http://laventurafan.tumblr.com My Twitter Page: http://twitter.com/OpenSimFan My Facebook page (be my friend, please ) http://www.facebook.com/andre.verwijs My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] paving the road for Leap 42.2
by Ludwig Nussel 09 May '16

09 May '16

Hi, As some have already noticed, we have an openSUSE:Leap:42.2 project in OBS which deserves some explanation. There's not much to see there yet though. I've just finished to bootstrap ring 0 (Boostrap), 1 (X) and 2 (Desktops). My next goal is to prepare openQA to get working tests again. Starting with a green openQA is always easier than having everything broken. So assuming 42.1 passed openQA just fine the copy that is called 42.2 should be comparatively easy to get to a testable state again. After that I'll set up staging projects and start integrating the maintenance updates from 42.1. From there on we should be ready to integrate the SLE12SP2 sources once they are available in OBS. Meanwhile also some work has been going on with the translations. https://l10n.opensuse.org/ was updated to Weblate 2.5 which includes features requested by various openSUSE translators. Weblate works best when it can work with git directly. So the translation files that were so far hosted on svn.opensuse.org need to be moved to git repos. That work usually requires some programming and packaging skills to clean up and improve the tools and packages involved. Help is appreciated there. I've opened a set up tasks in redmine to keep track of the progress: https://progress.opensuse.org/issues/11334 Feel free to jump in where you see fit. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

6 9

[opensuse-factory] after latest update - Nvidia driver broken
by André Verwijs 09 May '16

09 May '16

after latest update - Nvidia driver is broken, there's a problem with OpenGL 2 ?? anyone having this? -- View this message in context: http://opensuse.14.x6.nabble.com/after-latest-update-Nvidia-driver-broken-t… Sent from the opensuse-factory mailing list archive at Nabble.com. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] openSUSE Tumbleweed – Review of the Weeks 2016/17 & 18
by Dominique Leuenberger / DimStar 09 May '16

09 May '16

Dear Tumbleweed users and hackers, During the last two weeks, we could publish 5 snapshots, of which 0422 had been pre-announced as being ‘huge’. The other snapshots covered are 0430, 0502, 0503, 0504 and 0505. The gap from 0422 up to 0430 was due to the full rebuild of the distribution based on glibc 2.23. What else did those two weeks bring us: * glibc 2.23 * Linux Kernel 4.5.2 * GStreamer 1.8.1 * LibreOffice 5.1.3 * Mozilla Firefox 46 * Many of the goodies the YaST Blog post [0] Things currently in the makings are: * GCC 6 is to become the new default compiler. * Qt 5.6 is still pending Are you interested to work on openSUSE, help improve the workflows and the tooling? SUSE is looking for an openSUSE Release Engineer to extend the team. Curious? Feel free to get in touch with me or apply directly at SUSE Careers – openSUSE Release Engineer [1] Cheers, Dominique [0] https://lizards.opensuse.org/author/yast-team/ [1] https://goo.gl/1RZGT6 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] request in general: with (security) updates also build new .debuginfo package...
by André Verwijs 09 May '16

09 May '16

request in general: with (security) updates also build new .debuginfo package (if possible) for debugging or reporting.... ______________________________________________________________________________________ Ꙫ My Twitter Page: http://twitter.com/OpenSimFan Ꙫ My Instagram page: http://instagram.com/dutchglory Ꙫ My Facebook page (be my friend, please )* http://www.facebook.com/andre.verwijs Ꙫ My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992 Ꙫ My Tumblr Page (La Ventura): http://laventurafan.tumblr.com -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] Tumbleweed Update Success
by Peter Linnell 09 May '16

09 May '16

HI Folks, Just wanted to let the list know, I decided to fire up an older netbook (MSI Wind) for opening some old documents I had stored there. It was running TW from April 2015. So, as an experiment, I ran zypper dup to see if it could cope with such a dramatic difference in versions etc. Short answer: It worked. Longer answer, I had to disable one extra repo. It came up on the first reboot without any error messages or visible issues. I still need to do some more in depth testing, but the fact it upgrade so smoothly and without initial issues is a good sign of the cleanliness of our TW packages and QA testing. Cheers, Peter Linnell SUSE Sales Engineer openSUSE member -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 2

Re: [opensuse-factory] New Tumbleweed snapshot 20160505 released!
by Vit Pelcak 09 May '16

09 May '16

> hunspell (1.3.4 -> 1.4.0) This version bump causes dependency conflict. https://bugzilla.suse.com/show_bug.cgi?id=978991 -- Vit Pelcak vpelcak(a)suse.cz Team Lead in QA/L3/Maintenance SUSE LINUX, s.r.o. Lihovarska 1060/12 190 00 Prague Czech Republic

1 0

[opensuse-factory] New Tumbleweed snapshot 20160505 released!
by Ludwig Nussel 08 May '16

08 May '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: MozillaFirefox (45.0.2 -> 46.0) PackageKit (1.1.0 -> 1.1.1) accerciser adwaita-icon-theme appstream-glib (0.5.13 -> 0.5.14) build (20160331 -> 20160427) enchant epiphany-branding-openSUSE evolution gcc6 (6.0.0+r234449 -> 6.1.1+r235696) gconfmm gdlmm gdm (3.20.0 -> 3.20.1) git (2.8.1 -> 2.8.2) glib-networking (2.48.0 -> 2.48.1) gnome-software (3.20.1 -> 3.20.2) grub2 gssdp (0.14.14 -> 0.14.15) gtkmm2 gtksourceview (3.20.1 -> 3.20.2) gupnp (0.20.16 -> 0.20.17) gvfs hunspell (1.3.4 -> 1.4.0) imlib2 (1.4.8 -> 1.4.9) installation-images-openSUSE (14.239 -> 14.240) libatasmart libglademm libgpg-error (1.21 -> 1.22) libproxy (0.4.12 -> 0.4.13) libproxy-plugins (0.4.12 -> 0.4.13) libqmi (1.12.8 -> 1.14.2) librest (0.7.93 -> 0.8.0) libtasn1 (4.7 -> 4.8) llvm nautilus (3.20.0 -> 3.20.1) openssh orca (3.20.0 -> 3.20.1) ostree (2015.9 -> 2016.5) pciutils-ids (2016.04.04 -> 20160428) polari (3.20.0 -> 3.20.1) poppler (0.42.0 -> 0.43.0) poppler-qt (0.42.0 -> 0.43.0) poppler-qt5 (0.42.0 -> 0.43.0) python-gobject (3.20.0 -> 3.20.1) python3-gobject (3.20.0 -> 3.20.1) quagga rpm rtkit (0.11_git201205151338 -> 0.11+git.20130926) sonnet sudo suse-xsl-stylesheets (2.0.4 -> 2.0.5) tracker tracker-extras vim (7.4.1635 -> 7.4.1816) yast2-dns-server (3.1.19 -> 3.1.20) zypper === Details === ==== MozillaFirefox ==== Version update (45.0.2 -> 46.0) Subpackages: MozillaFirefox-translations-common - add mozilla-jit_branch64.patch to avoid PowerPC build failure (from bmo#1266366) - Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest version from Fedora). - update to Firefox 46.0 (boo#977333) * Improved security of the JavaScript Just In Time (JIT) Compiler * WebRTC fixes to improve performance and stability * Added support for document.elementsFromPoint * Added HKDF support for Web Crypto API * requires NSPR 4.12 and NSS 3.22.3 * added patch to fix unchecked return value mozilla-check_return.patch * Gtk3 builds not supported at the moment security fixes: * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807 (boo#977373, boo#977375, boo#977376) Miscellaneous memory safety hazards * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377) Privilege escalation through file deletion by Maintenance Service updater (Windows only) * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378) Content provider permission bypass allows malicious application to access data (Android only) * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812 (bmo#1252330, bmo#1261776, boo#977379) Use-after-free and buffer overflow in Service Workers * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380) Disclosure of user actions through JavaScript with motion and orientation sensors (only affects mobile variants) * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381) Buffer overflow in libstagefright with CENC offsets * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382) CSP not applied to pages sent with multipart/x-mixed-replace * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384) Elevation of privilege with chrome.tabs.update API in web extensions * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386) Write to invalid HashMap entry through JavaScript.watch() * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388) Firefox Health Reports could accept events from untrusted domains - Update mozilla-gtk3_20.patch to fix scrollbar appearance under gtk >= 3.20 (patch synced to Fedora's version). - Compile against gtk3 depending on whether the macro %firefox_use_gtk3 is defined or not (e.g., at the prjconf level); macro is undefined by default and so gtk2 is used as the default toolkit. - Add BuildRequires for additional packages needed when building against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0) >= 3.4.0, pkgconfig(gtk+-unix-print-3.0). - Add firefox-gtk3_20.patch to fix appearance with gtk3 >= 3.20; patch taken from Fedora (bmo#1230955). ==== PackageKit ==== Version update (1.1.0 -> 1.1.1) Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Update to version 1.1.1: + Backends: - alpm: port to g_autoptr(). - hif: Set ALLOW_DOWNGRADE flag for all transactions. - zypp: Enforce formatting input as string. + New Features: - Add UpdateTriggered / UpgradeTriggered DBus properties. - Add TriggerUpgrade DBus method handling. + Bugfixes: - Emit UpdatesChanges when installing packages. - Fix GIR annotations for progress callbacks. - Increase the number of packages that can be resolved. - Point offline update/upgrade trigger to the prepared update. - Unlink any existing offline update triggers before creating. ==== accerciser ==== Subpackages: accerciser-lang - Require python3-gobject-Gdk instead of python3-gobject: pygobject was further split in order to be able to install it without X-dependencies. ==== adwaita-icon-theme ==== - Add adwaita-symbolic-fixes.patch: Add two upstream commits fixing symbolic icons. ==== appstream-glib ==== Version update (0.5.13 -> 0.5.14) Subpackages: libappstream-builder8 libappstream-glib8 - Update to version 0.5.14: + Ignore desktop files with X-AppStream-Ignore. + Add search-pkgname to appstream-glib. + Add AS_APP_QUIRK_NEEDS_REBOOT. + Fall back to searching in as_store_get_app_by_pkgname(). + Add AS_APP_QUIRK_NOT_REVIEWABLE. + Search /usr/share/metainfo for local files. + trivial: Fix critical warning when validing broken AppStream files. + Add the Audio+Video categories from AppStream XML too. + Add as_screenshot_get_image_for_locale(). - Require the main-package by the -devel package: the AS-utils are expected to be available to a developer. ==== build ==== Version update (20160331 -> 20160427) Subpackages: build-mkbaselibs build-mkdrpms - fix build on armv7hl - run debtransform after buildtime source services - Handle also aarch32* and armv8 cases for kvm cpu switches - add support for LXC 1.0.8 - added DoD for aarch64 repositories on Debian ==== enchant ==== Subpackages: enchant-devel libenchant1 - Add enchant-hunspell-1.4.0.patch: Fix build against hunspell 1.4.0, where MAXWORDLEN is no longer exported. ==== epiphany-branding-openSUSE ==== - Drop epiphany-branding-SLED subpackage: + Remove sled-bookmarks.patch, pre_checkin.sh, epiphany-branding-SLED.changes, epiphany-branding.changes.in and epiphany-branding-SLED.spec. + Clean epiphany-branding-openSUSE.spec for all references to the previous package. ==== evolution ==== Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin - Drop pkgconfig(geoclue) BuildRequires: evolution stopped depending on it in version 3.12.8. ==== gcc6 ==== Version update (6.0.0+r234449 -> 6.1.1+r235696) - Fix HSA build conditional for crosses. - Update to gcc-6-branch head (r235696). * Fixes libgcj_bc1 version check issue. - Update to GCC 6.1.0 release (r235473). * Includes fix for python3 miscompile [bnc#976024] - Enable profiledbootstrap, but not if building libjava where also disable bootstrap - Add gcc6-hsa-enablement.patch and enable HSA offloading target. - Update to SVN trunk head (r234970). - Enable Ada on ppc64le and aarch64. ==== gconfmm ==== - Stop exporting CFLAGS and CXXFLAGS, no longer needed due to changes in libsigc++. ==== gdlmm ==== - Stop exporting CFLAGS and CXXFLAGS, no longer needed due to changes in libsigc++. ==== gdm ==== Version update (3.20.0 -> 3.20.1) Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Update to version 3.20.1: + Fix passwordless logins on Debian/Ubuntu. + Don't allow passwordless XDMCP logins. + Fix redhat pam configuration. + Updated translations. ==== git ==== Version update (2.8.1 -> 2.8.2) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk - git 2.8.2: * "index-pack --keep=<msg>" was broken since v2.1.0 timeframe. * "git config --get-urlmatch", unlike other variants of the "git config --get" family, did not signal error with its exit status when there was no matching configuration. * The "--local-env-vars" and "--resolve-git-dir" options of "git rev-parse" failed to work outside a repository when the command's option parsing was rewritten in 1.8.5 era. * Fetching of history by naming a commit object name directly didn't work across remote-curl transport. * A small memory leak in an error codepath has been plugged in xdiff code. * "git mergetool" did not work well with conflicts that both sides deleted. * "git send-email" had trouble parsing alias file in mailrc format when lines in it had trailing whitespaces on them. * When "git merge --squash" stopped due to conflict, the concluding "git commit" failed to read in the SQUASH_MSG that shows the log messages from all the squashed commits. * "git merge FETCH_HEAD" dereferenced NULL pointer when merging nothing into an unborn history (which is arguably unusual usage, which perhaps was the reason why nobody noticed it). * "git diff -M" used to work better when two originally identical files A and B got renamed to X/A and X/B by pairing A to X/A and B to X/B, but this was broken in the 2.0 timeframe. * "git send-pack --all <there>" was broken when its command line option parsing was written in the 2.6 timeframe. * When running "git blame $path" with unnormalized data in the index for the path, the data in the working tree was blamed, even though "git add" would not have changed what is already in the index, due to "safe crlf" that disables the line-end conversion. It has been corrected. ==== glib-networking ==== Version update (2.48.0 -> 2.48.1) - Update to version 2.48.1: + Fixed translations in non-UTF-8 domains (bgo#765466). + Fixed bash-ism in configure (bgo#765396). + Updated translations. - Stop passing V=1 to make, we do debugging locally. - Add default http://www.gnome.org as Url: Silence rpmlint. ==== gnome-software ==== Version update (3.20.1 -> 3.20.2) - Update to version 3.20.2: + Allow popular and featured apps to match any plugin. + Do not make the ODRS plugin depend on xdg-app. + Fix many of the os-upgrade issues and implement the latest mockups. + Fix several issues when running on Unity. + Make all the plugins more threadsafe. + Return all update descriptions newer than the installed version. + Show some non-fatal error messages if installing fails. + Use a background PackageKit transaction when downloading upgrades. + Updated translations. - Add gs-compile-against-old-appstream-glib.patch: Fix build against the appstream-glib we currently have, patch from upstream git. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Remove xen-devel from BuildRequires required headers are included in grub-2.0.2 - Add support for "t" hotkey to switch to text mode (bsc#976836) * added grub2-SUSE-Add-the-t-hotkey.patch - Add support for hidden menu entries (bsc#976836) * added grub2-Add-hidden-menu-entries.patch - Correct show user defined comments in menu for snapshots (bsc#956698) * modified grub2-snapper-plugin.sh ==== gssdp ==== Version update (0.14.14 -> 0.14.15) - Update to version 0.14.15: + Actually use the TTL that was set by the user. + Use if_nametoindex instead of IOCTL when available. + Implement a User Agent cache based on SSDP packages. + Fix potential strncpy overflow. + Add missing m4 macros. + Disable PKTINFO on OS X. + Do not leak host_addr in clients. + Bugs fixed: bgo#653894, bgo#762324, bgo#764677. ==== gtkmm2 ==== - Stop exporting CFLAGS and CXXFLAGS, no longer needed due to changes in libsigc++. ==== gtksourceview ==== Version update (3.20.1 -> 3.20.2) Subpackages: glade-catalog-gtksourceview gtksourceview-devel libgtksourceview-3_0-1 typelib-1_0-GtkSource-3_0 - Update to version 3.20.2: + Drawing optimizations. + Updated translations. ==== gupnp ==== Version update (0.20.16 -> 0.20.17) - Update to version 0.20.17: + Update autogen.sh from GNOME template. + Cache user agents by IP. + Remove intltool. + Use newTargetValue in light example. + Bugs fixed: bgo#653894, bgo#763945, bgo#764050. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backends gvfs-fuse - Enable pkgconfig(libnfs) BuildRequires, we now have it in openSUSE, also package the new nfs support. ==== hunspell ==== Version update (1.3.4 -> 1.4.0) Subpackages: hunspell-devel hunspell-tools - Update to 1.4.0 * New release that strips out fixed length buffers from large parts of the library * Note: dictmgr.hxx header is dropped - Drop upstreamed hunspell-grep2.24.patch ==== imlib2 ==== Version update (1.4.8 -> 1.4.9) - Update to 1.4.9 * Fix cross-endianness for masks (1-bit depth images) * gif: fix oob reads w/bad colormaps * Fix "assuming signed overflow does not occur" warning. * Fix some "variable set but not used" warnings. * Fix some "variable might be clobbered" warnings. * Fix off-by-one OOB read in __imlib_MergeUpdate(). * Revert "gif: fix oob reads w/bad colormaps" * GIF loader: Fix out-of-bound reads from colormap. * GIF loader: Remove check made redundant by previous commit. * GIF loader: Reduce progress checks from per-pixel to per-row. * GIF loader: Indent. * Fix potential divide-by-zero in imlib_image_draw_ellipse(). * Make a number of functions static. * Eliminate pImlibExternalFilter type. * Trivial file function cleanups. * Move __imlib_ItemInList() to file.c. * Fix various potential OOM crashes. * Fix integer overflow resulting in insufficient heap allocation * loader_xpm: remove nonsense/impossible/broken condition * Harden API and internals against overly large images ==== installation-images-openSUSE ==== Version update (14.239 -> 14.240) - adjust config to new 'hiddenmenu' feature (bsc#976836) - 14.240 ==== libatasmart ==== - Adding "xz" as BuildRequires since it's not default on SLES11 and using a bigger description. ==== libglademm ==== Subpackages: libglademm-2_4-1 - Stop exporting CFLAGS and CXXFLAGS, no longer needed due to changes in libsigc++. ==== libgpg-error ==== Version update (1.21 -> 1.22) Subpackages: libgpg-error-devel libgpg-error0 libgpg-error0-32bit - update to 1.22: * Support for LeakSanitizer with the gpgrt_annotate_leaked_object inline function. * Interface changes relative to the 1.21 release: GPG_ERR_DB_CORRUPTED NEW. gpgrt_annotate_leaked_object NEW inline func. GPGRT_ENABLE_W32_ICONV_MACROS NEW. gpgrt_w32_iconv_open NEW. gpgrt_w32_iconv_close NEW. gpgrt_w32_iconv NEW. ==== libproxy ==== Version update (0.4.12 -> 0.4.13) Subpackages: libproxy-devel libproxy1 - Update to version 0.4.13: + Allow linking webkit pacrunner against javascriptcore-4.0 (webkit2). + Allow to disable building of the KDE module (-DWITH_KDE=ON/OFF). + Fix compilation errors with CLang on MacOSX. + bindings: perl: Add an option to explicitly link against libperl.so. Some distributions want to do it, other prefer not to, the library is anyway in context of perl. + config_kde: Add a basic cache and invalidation: performance improvement for the KDE module. - Pass -DWITH_KDE=OFF to cmake when building core. - Replace pkgconfig(webkitgtk-3.0) BuildRequires with pkgconfig(javascriptcoregtk-4.0): make use of the WebKit2 port. - Disable building libproxy-config-kde on SLE. ==== libproxy-plugins ==== Version update (0.4.12 -> 0.4.13) Subpackages: libproxy1-config-gnome3 libproxy1-config-kde libproxy1-networkmanager libproxy1-pacrunner-webkit - Update to version 0.4.13: + Allow linking webkit pacrunner against javascriptcore-4.0 (webkit2). + Allow to disable building of the KDE module (-DWITH_KDE=ON/OFF). + Fix compilation errors with CLang on MacOSX. + bindings: perl: Add an option to explicitly link against libperl.so. Some distributions want to do it, other prefer not to, the library is anyway in context of perl. + config_kde: Add a basic cache and invalidation: performance improvement for the KDE module. - Pass -DWITH_KDE=OFF to cmake when building core. - Replace pkgconfig(webkitgtk-3.0) BuildRequires with pkgconfig(javascriptcoregtk-4.0): make use of the WebKit2 port. - Disable building libproxy-config-kde on SLE. ==== libqmi ==== Version update (1.12.8 -> 1.14.2) - Update to version 1.14.2: + Added compatibility symbols for some API breaks introduced in 1.14.0: + This release will recover the old names and still keep the new ones around for compatibility. + libqmi-glib: Fixed QMI_DMS_BAND_CAPABILITY_BC_15 enum value so that it isn't treated as a negative value. This may actually be treated as a minor ABI break. + qmicli: Fixed --dms-get-band-capabilities output on 32-bit platforms. + Fixed license text of the voice service implementation. - Changes from version 1.14.0: + This version comes with a couple of small API breaks: + ECIO value type in "NAS Event Report Indication" is given as unsigned. + ECIO value in ECIO List array type in "NAS Get Signal Strenght" is given as unsigned. + QMI_NAS_SIM_REJECT_STATE_SIM_AVAILABLE enum name was fixed. + The library and tools now support working with modems which only implement raw IP (i.e. no ethernet headers) in the WWAN interface. This relies on the kernel to expose '/sys/class/net/<WWAN>/qmi/raw_ip' sysfs files for each WWAN network interface (available since Linux 4.5-rc1). + New initial support for the 'Voice' service. + The qmicli tool has been updated with several new functionalities. + The qmi-network helper script has been updated with several new features. + Added command completion support in qmicli. + Other bugfixes and minor improvements. - Bump soname following upstream changes, and as a result: rename subpackage to libqmi-glib5. ==== librest ==== Version update (0.7.93 -> 0.8.0) Subpackages: librest0 typelib-1_0-Rest-0_7 - Update to version 0.8.0: + build-sys: Set version to 0.8.0. + tests: Fix lastfm test. + tests/proxy-continuous: - Simplify the code. - Server chunks can be different from client ones. + oauth: Don't leak temp data in steal_oauth_params. + rest-xml-parser: Ignore text content at the top-level of a document. + rest-proxy-auth: Add rest_proxy_auth_cancel for cancelling authentication. ==== libtasn1 ==== Version update (4.7 -> 4.8) Subpackages: libtasn1-6 libtasn1-6-32bit libtasn1-devel - Update to 4.8 * Fixes to avoid reliance on C undefined behavior. * Fixes to avoid an infinite recursion when decoding without the ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq. * Combined all the BER octet string decoding functions to a single one based on asn1_decode_simple_ber(). ==== llvm ==== Subpackages: libLLVM libLLVM-32bit - Update rpmlintrc to whitelist libLTO.so ==== nautilus ==== Version update (3.20.0 -> 3.20.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1 - Update to version 3.20.1: + Fix crash if using scripts. + Fix shortcuts to change views mode. + Do not switch focus to created tabs. + Fix margins on sidebar context popover. + Fix the empty states icons blocking clicks for activating context menus. + Show same name in the path bar as in other locations when using mounts. + Make more dialogs modal. + Allow "move to" action in network locations. + Fix crash when searching and closing with multiple windows. + Fix path bar not updating to the new location when finalizing search. + Show an error dialog on falied connection to servers in the other locations view. + Fix odd empty operations popover. + Fix hamburguer menu action not being available when closing a tab. + Select first item in the views only when searching. + Fix crash when creating a new window of nautilus from the shell when the application was not running. + Allow more applications to be set as default in network locations. + Make renamed or created files scroll the view to the position of the files + Updated translations. ==== openssh ==== Subpackages: openssh-helpers - update seccomp sandbox that broke after OpenSSL update (bsc#912436, bsc#977812) [openssh-6.6p1-seccomp_stat.patch] ==== orca ==== Version update (3.20.0 -> 3.20.1) - Update to version 3.20.1: + Gecko: - Fix presentation of title bar in Gecko apps. - Work around Google Maps killing the focused widget. - Fix offset used when evaluating text selection in content with embedded objects. - Don't set new focus to context object if context object is zombie. - Only update locusOfFocus to context replicant if locusOfFocus is a zombie. - Don't use generated text as name for web content which exposes a name, unless it's a combo box or spin button. - Cache label-related information for web content for performance. - Ignore events from Mozilla's self-repair hidden page. - Don't do SayAll for page fragments. - Prevent locusOfFocus change when navigating in SeaMonkey message list. + Unity Panel Service: - Work around labels reporting an index in parent of -1. - Work around label descriptions containing unwanted content. - Fall back on name when labels fail to implement the text interface. + Gtk+: - Handle changes in Gtk+ 3.20 combo boxes. - Only treat cells with non-whitespace chars as real active descendants. - Ignore row-reordered event spam. + General: - Fix a false positive with clipboard messages. - Don't re-present description if it was used as name fallback. - Handle unhandled case of objects becoming defunct. - Fix syntax error in Bulgarian help file. + Updated translations. - Add python3-brlapi BuildRequires: Needed for braille support now. ==== ostree ==== Version update (2015.9 -> 2016.5) - Update to version 2016.5: + Add a stub .travis.yml. + tests: Add a test-abi. + pull: Add OSTREE_REPO_PULL_FLAGS_UNTRUSTED flag. + Add --untrusted option to pull and pull-local. + OstreeSePolicy: add ostree_sepolicy_get_csum(). + core: Add verbose messages for pruning. + core: Add debug messages for traversing. + build: Set G_LOG_DOMAIN to OSTree. + main: Set log handler for OSTree domain. + packaging: fix bashism in dist-snapshot target. + docs: Add a section on repository management. + commit: Support generating commits with no parent, or a custom one. + commit: Support writing orphans. + commit: support editor for orphan commits. + docs/CONTRIBUTING.md: Update for github move, Homu etc. + test-xattrs: use TAP syntax to skip test. + various tests: skip if temp directory lacks xattr support. + Symlink libreaddir-rand.so into tests directory. + tap-test: clean up temporary test directories as intended. + In tests that use gpg, terminate the gpg-agent after testing. + Load g-i bindings from builddir during build-time testing. + tests/admin-test.sh: this is a bash script, not a POSIX sh script. + Force libreaddir-rand to be a shared library. + Skip tests that run rofiles-fuse if /dev/fuse or /etc/mtab unavailable. + test-pull-untrusted.sh: always corrupt a regular file, not a symlink. + basic-test: commit with a non-empty subject. + Probe for GNU parallel more accurately. + tests: Make failing to kill the GPG agent non-fatal. + libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources. + test-abi: use G_TEST_SRCDIR, G_TEST_BUILDDIR. + test-xattrs: sync how this is skipped with test-rofiles-fuse. + libtest.sh: only check whether $(pwd) is empty once. + manual: Fix a bunch of typos and docbookisms. + Introducing ostree-grub-generator. + pull: Don't try to cache summaries for pull-local. + Fix local-pull test. + pull-local: Support --gpg-verify and --gpg-verify-summary. + build: Find grub2-mkconfig a bit more automagically. + build: Make tests/libreaddir-rand.so rule use AM_V_GEN. + tests: add libostreetest.h to EXTRA_DIST. + tests: add missing ${CMD_PREFIX} before ostree. + contrib: indent golang code using only tabs instead of both tabs and spaces. + Remove empty new lines at the EOF. + docs: Prefer the form "cannot" to "can not". + Use git.mk. + Support pathnames for --subpath=... + Export ostree_repo_get_remote_option* functions. + Inherit remotes and remote options from parent repo. + Add test case for inheriting remote options. + cfg.mk: ignore syntax-check for git.mk. + Add support for ostree static-delta delete. + small cleanups. + Fix the symbol versions for ostree_repo_get_remote_*option. + ostree-repo-pull: always initialize flags_i. + pull: More consistently use remote_repo_local for local repos. + build: Move grub2-15_ostree back to pkglibexecdir. + Fix AS_HELP_STRING for builtin grub2 mkconfig. + fetcher: Initialize output_stream_set_lock mutex. + commit: Fix crash if dfd_iter is NULL. + Add cache_dir_fd to OstreeRepo. + Add OstreeRepo option for an out-of-band cache dir. + man: Elaborate on per-remote GPG. + Add remotes-config-dir to OstreeRepo. + Look for $remotename.trustedkeys.gpg in remotes.d dir. + refs: Add g_prefix_error around opendir for easier debugging. + static-delta: Put temp files in /var/tmp. + static-delta: Initialize read_source_fd to -1. - Stop passing --with-grub2 to configure, no longer recognized. - Update to version 2016.4: + fetcher: Remove message_to_request table + fetcher: Convert from GSimpleAsyncResult to GTask + fetcher: Rework reference counting + fetcher: Track outstanding requests with a table + sysroot: Cleanup refs and prune even on last undeployment + pull: Recover from missing commits in recursive pulls + doc: Note that refs --delete does not prune + tests: Add a test for pull+deploy of specific "bare" commit + static-delta: Handle LZMA_BUF_ERROR returned by zlib + static-delta: Don't run bspatch when output object already exists + static-delta: Set error on bsdiff failure + commit: Improve variable name + Don't require /boot/uEnv.txt for u-boot support + tests: fix LZMA test to really compress/decompress + upgrader: Add ostree_sysroot_upgrader_dup_origin() + upgrader: Allow overriding the commit to pull + upgrade: Add --override-commit=CHECKSUM option + prepare-root: set up /boot bind-mount for single partition systems + static-delta: Fix annotation on ostree_repo_list_static_delta_names + sysroot: Write symlinks before calling fsync(), then rename after + init-fs: Explicitly set /tmp to 01777 + core: use OSTREE_OBJECT_TYPE_LAST instead of OSTREE_OBJECT_TYPE_COMMIT + pull: add support for tombstone commits + repo: create a tombstone commit when deleting a commit + fsck: add argument --add-tombstones + tests: add tests for prune and tombstones commits + docs: Note not to put private keys in /usr/share/ostree + generate-static-delta: Support min-fallback-size 0 to disable fallbacks + static deltas: Add support for inline-parts + static-deltas generate: Add --inline option to CLI tool + Add tests for inline static deltas + deltas: Make apply-offline only read the parts once + delta: Ensure the from commit exists when applying static delta + static-delta apply-offline: Don't skip validation + Add _ostree_repo_open|commit_untrusted_content_bare + deltas: Verify checksums in apply-offline unless skip_validate is TRUE + deltas: Make min-fallback-size 0 actually disable fallbacks + deltas: Support passing filename to delta generator + deltas: Support passing filename to ostree_repo_static_delta_execute_offline + pull: Verify checksums from static deltas unless gpg signed summary + deltas: Support including detached metadata in static deltas + libostree: Fix a couple compiler warnings + prune: add --delete-commit + fsck: create a tombstone when the parent is missing + tests: add test for ostree prune --delete-commit + prune: add --keep-younger-than=DATE + pull: make slightly clearer when failing for missing xattrs support + ostree: do not print the usage on each G_IO_ERROR_NOT_SUPPORTED + libostree: add new API ostree_repo_write_commit_with_time + commit: add --timestamp=TIMESTAMP + tests: add tests for prune --keep-younger-than=DATE + tests: prefix invocation of ostree with where missing + repo: Validate checksums have correct length + repo: Never delete .commitmeta files + trivial-httpd: Avoid SoupBuffer when there's no content + glnx: Update from master + fetcher: Remove "sending_messages" hash table + fetcher: Remove "total_requests" counter + remote: Print full refspec in "ostree remote refs" + repo: Fix backwards timestamp in ostree_repo_write_commit() + gpg-verifier: Fix compiler warning + Release 2015.11 + parse-datetime: use the module from gnulib + tests: add missing ${CMD_PREFIX} + cmdline: Fatally error if the timestamp in a commit is invalid + build: Delete generated parse-datetime.c file, use AM_V_GEN + build: Also add a configure check for YACC/bison + Update to latest libglnx + repo: Add _ostree_repo_allocate_tmpdir helper + repo: Use per-transaction staging dir + repo: Allocate a tmpdir for each OstreeFetcher to isolate concurrent downloads + fetcher: Add "config-flags" construct-only property + fetcher: Move the SoupSession to a separate thread + pull: Push a temporary main context for sync requests + build: Fix srcdir != builddir + repo: Add ostree_repo_verify_summary() + remote: Add "ostree remote summary" command + repo: new function ostree_repo_prune_static_deltas + prune: add new flag --static-deltas-only + tests: add tests for prune --static-deltas-only + deploy: Find kernel/initramfs consistently from filesystem + bootconfig: Add ostree_bootconfig_parser_write_at + deploy: Change large parts to be fd-relative, drop fsync + fetcher: Lazily create tmp directory + grub2_generate: load sysroot before using it + repo: Expose dfd-relative mtree writes as public API + repo: Add APIs for devino optimization between checkout -> commit + Release 2016.1 + repo: Note global transaction resume is legacy + sysroot: Don't individually fsync dirs in checkout, rely on syncfs + diff: do not traverse parent commits + Add a checkout option to skip fsync + refs: Add a missing `goto out` for error handling + grub2: Don't delete grub2.cfg.old file we just copied + tests: Use "bash strict mode" + build: Move man pages into man/ + build: Rename doc/ -> apidoc/ + Rewrite manual in mkdocs + apidoc: Remove unnecessary srcdir != builddir workaround + repo: Port -refs.c to openat() + build: Add --disable-man + lib: Add a #define OSTREE_SHA256_DIGEST_LEN 32 + build: Hoist man conditional higher + static-delta: Add `show` subcommand + packaging: Sync spec file with Fedora + build: 'make clean' removes parse-datetime.c + docs-md: Delete (obsoleted by docs/) + README.md: Update to link to Read The Docs, describe a bit better + build: Remove --disable-static-deltas option + lib: Create an internal static delta parsing/opening function + lib: Expand `ostree static-delta show` to show part stats + fetcher: Fix hung GTlsInteraction + Import rofiles-fuse + Add an `export` builtin, and API to write to libarchive + pull: Support specifying exact commit to pull via branch@commit + manual-tests: New static-delta-generate-crosscheck.sh + man/ostree-export.xml: Add to git + Support Docker-style whiteouts + packaging: Add a fuse subpackage + rofiles-fuse: Fix truncate call to not use O_CREAT + manual: Note that the bare-user mode exists + Rename libarchive write API to "export", matching command line + repo: Add ostree_repo_import_archive_to_mtree + ostree-sysroot: add debug option to help testing + pull: Add require-static-deltas pull option + pull: Add a --dry-run option for static deltas + build: Link ostree with libarchive + docs: Add a new formats section, move static deltas in there + libarchive: Make autocreate_parents imply autocreating root dir + build: Use threadsafe GPGME + gpg: Use gpg_strerror_r for threadsafety + Release 2016.2 + libarchive: Fix a 32 bit format warning + lib: Two more compiler warning fixes + deltas: Fix some more 32 bit warnings + deltas: Fix regression in ostree_repo_static_delta_execute_offline + rofiles-fuse: Handle operations on the root + deltas: Include an endianness marker + deltas: Use endianness marker when parsing + deltas: Heuristically detect endianness for older deltas + deltas: Add a compression size heuristic for endianness detection + Release 2016.3 + docs: Add a blurb on the summary file + Fix make syntax-check + test-rofiles-fuse: skip when fusermount is not present + lib: Introduce versioned symbols + repo: Add ostree_repo_get_dfd() + Add a missing #include to fix "make check" + ostree-repo: new public function `ostree_repo_list_refs_ext` + refs: allow to specify multiple refs as args + refs: add tests + libostree: Adjust `cleanup_ref_prefix` to use ostree_repo_list_refs_ext + refs: Add argument --list to print the full ref name + tests: Port to glib-tap.mk, make `make check` run all of the tests + deploy: Bump the mtime on ostree/deploy after deployments finish + tests: Convert two more exit 77 instances into TAP-compatible SKIP + docs/introduction: Note VMs vs baremetal + lib: Add ostree_sysroot_init_osname() API, bump mtime + tests: More TAP fixups + tests: Unify some tmpdir code, add ability for C to use libtest.sh + lib: Add ostree_sysroot_load_if_changed() API + tests/basic: Fix race in timestamp test + build: Don't install test data without --enable-installed-tests + docs: Reference the git docs on references + libotutil: new function ot_openat_ignore_enoent + pull: cache summary and summary.sig + repo: use the skip summary download optimization for repo_remote_fetch_summary + prune: delete all cached summaries files + tests: add test for summary file caching + repo: Fix the skip-summary-if-summary.sig-is-same cache + rofiles-fuse: Fix permission comparison + docs: Cleanup Markdown + docs: Add a section on writing buildsystems + contrib/golang: Initial golang bindings + tests: Strengthen test tmpdir sanity check, be compat with ginsttest saving + libglnx porting: gs_fd_close -> glnx_fd_close + libglnx porting: gs_free -> g_autofree + libglnx porting: xattr calls + libglnx porting: gs_transfer_out_value -> g_steal_pointer + Don't fail "ostree remote refs" if writing the summary cache is not permitted + manual: Migrate related projects wiki page into manual + deploy: Handle a read-only /boot + mkdocs: Fix the site name + tests/admin-test.sh: add #!/bin/sh + Skip test_libarchive_ignore_device_file if we cannot write xattrs + test-libarchive: fix underlinking + admin-switch: Add missing reboot argument + Use GSubprocess instead of GSSubprocess (libgsystem removal) + libglnx porting: Use glnx_set_error_from_errno + libglnx porting: Use glnx_shutil_rm_rf_at() + libglnx porting: Use glnx_opendirat() + admin: Add an `unlock` command, and libostree API + Fix building without libarchive + pull local: Don't import objects we already have + prune: Don't fail on partial commits + tests: Add a commitpartial + prune test + traverse: Require variant when traversing dirtree + Release 2016.4 - Add bison, pkgconfig(fuse) and pkgconfig(mount) BuildRequires: New dependencies. ==== pciutils-ids ==== Version update (2016.04.04 -> 20160428) - Update to version 20160428 - Add _service and use it to fetch sources from github ==== polari ==== Version update (3.20.0 -> 3.20.1) Subpackages: typelib-1_0-Polari-1_0 - Update to version 3.20.1: + Update roomList header popover on name changes (bgo#763178). + Prioritize popular networks (bgo#762733). + Fall back to alternative servers on connection failures (bgo#762335). + Misc. bug fixes (bgo#765124). + Updated translations. ==== poppler ==== Version update (0.42.0 -> 0.43.0) Subpackages: libpoppler-cpp0 libpoppler-devel libpoppler-glib8 poppler-tools - Update to version 0.43.0: + core: - Implement sanity check for linearization usage (fdo#92482). - Add SymbolMT as an alias for the Symbol font (fdo#93168). - Fix some blank files (fdo#94756). - cairo: . Fix fillToStrokePathClip crash and rendering (fdo#62905). . Check if PDF knows the width of 'm' in case of substituted font (fdo#94054). . Save mask state and don't extend image mask (fdo#94234). - SplashOuputDev: Compile with C++11 compilers that don't define isinfinite (fdo#94761). - Typo fixes. + utils: pdftocairo: Calculate rotation before scaling (fdo#94655). + qt4: Fix crash on certain PDF form item activation actions (fdo#94873). + qt5: Fix crash on certain PDF form item activation actions (fdo#94873). - Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream. - Bump soname following upstream changes. ==== poppler-qt ==== Version update (0.42.0 -> 0.43.0) - Update to version 0.43.0: + core: - Implement sanity check for linearization usage (fdo#92482). - Add SymbolMT as an alias for the Symbol font (fdo#93168). - Fix some blank files (fdo#94756). - cairo: . Fix fillToStrokePathClip crash and rendering (fdo#62905). . Check if PDF knows the width of 'm' in case of substituted font (fdo#94054). . Save mask state and don't extend image mask (fdo#94234). - SplashOuputDev: Compile with C++11 compilers that don't define isinfinite (fdo#94761). - Typo fixes. + utils: pdftocairo: Calculate rotation before scaling (fdo#94655). + qt4: Fix crash on certain PDF form item activation actions (fdo#94873). + qt5: Fix crash on certain PDF form item activation actions (fdo#94873). - Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream. - Bump soname following upstream changes. ==== poppler-qt5 ==== Version update (0.42.0 -> 0.43.0) Subpackages: libpoppler-qt5-1 libpoppler-qt5-devel - Update to version 0.43.0: + core: - Implement sanity check for linearization usage (fdo#92482). - Add SymbolMT as an alias for the Symbol font (fdo#93168). - Fix some blank files (fdo#94756). - cairo: . Fix fillToStrokePathClip crash and rendering (fdo#62905). . Check if PDF knows the width of 'm' in case of substituted font (fdo#94054). . Save mask state and don't extend image mask (fdo#94234). - SplashOuputDev: Compile with C++11 compilers that don't define isinfinite (fdo#94761). - Typo fixes. + utils: pdftocairo: Calculate rotation before scaling (fdo#94655). + qt4: Fix crash on certain PDF form item activation actions (fdo#94873). + qt5: Fix crash on certain PDF form item activation actions (fdo#94873). - Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream. - Bump soname following upstream changes. ==== python-gobject ==== Version update (3.20.0 -> 3.20.1) Subpackages: python-gobject-Gdk python-gobject-cairo python-gobject-devel - Move gi/overrides/keysyms.* also to the -Gdk subpackage: Keysyms is mapped to Gdk symbols and is only usable in GUI apps. - Update to version 3.20.1: + test_gerror_novalue: Don't assign the error to a variable (bgo#764165). ==== python3-gobject ==== Version update (3.20.0 -> 3.20.1) Subpackages: python3-gobject-Gdk python3-gobject-cairo - Move gi/overrides/keysyms.* also to the -Gdk subpackage: Keysyms is mapped to Gdk symbols and is only usable in GUI apps. - Update to version 3.20.1: + test_gerror_novalue: Don't assign the error to a variable (bgo#764165). ==== quagga ==== - Add quagga-CVE-2016-4049-fix-buf-ovflow-bgp-dump-routes.patch Fix for a buffer overflow error in bgp_dump_routes_func. (CVE-2016-4049, bsc#977012) ==== rpm ==== Subpackages: rpm-32bit rpm-build rpm-devel - work around bug in rpm's macro expandsion [bnc#969381] - tweak rpm-4.12.0.1-lua-5.3.patch so that it does not need the -p1 option - add option to make postinstall scriptlet errors fatal [bnc#967728] new patch: enable-postin-scripts-error.diff - rework nfs-blocksize-free.patch to always normalize big blocksizes to 4096 bytes [bnc#894610] [bnc#829717] [bnc#965322] removed patch: nfs-blocksize-free.patch new patch: normalize_blocksize.diff - drop service_del_preun, service_del_postun macros, they are provided by the systemd package - change restart_on_update and stop_on_removal macros to use service_del_preun and service_del_postun [bnc#968405] [bnc#969381] ==== rtkit ==== Version update (0.11_git201205151338 -> 0.11+git.20130926) - Update to version 0.11+git.20130926: * Pass uid of caller to polkit * build-sys: since clock_gettime() moved to libc use mq_open to check for librt * systemd: update sd-daemon.[ch] - Drop upstreamed patches * rtkit-bnc836939.patch * rtkit-use-system-sd-daemon.patch - Add _service - Cleanup spec file with spec-cleaner - Drop support for pre systemd ditributions - Add rc symlink for service - Use more strict ldflags ==== sonnet ==== Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 sonnet-devel - Add sonnet-hunspell-1.4.patch: detect hunspell 1.4.x. ==== sudo ==== - add sudo-1.8.16-pam_groups.patch to do group setup in policy_init_session() before calling out to the plugin. This makes it possible for the pam_group module to change the group in pam_setcred() [fate#318850] ==== suse-xsl-stylesheets ==== Version update (2.0.4 -> 2.0.5) Stable release DAPS 2.0.5: Find issues in our GitHub tracker at https://github.com/openSUSE/suse-xsl/issues/NUMBER * Schema - Add flat SUSEDoc schema for RNC and RNG - Fix NovDoc/DB4 incompatibility: Phrase is only allowed in productname, but not in productnumber * Spelling - Fix trailing whitespace * Stylesheets (PDF) - Added missing procedure, itemizedlist, and orderedlist for intra.title.markup mode (suse-xsl #162, ec0cb3d6) - Fix Ulink/Link template for DB 5 - Specifically check for @role='abbrev' - Fix for vertical spaces on nested lists (#221) - Question and answers - Make an answer closer to a question - Make consistent use of sans-stack for questions - Use all paras in question consistently - Italic for question label and first para (#200) - Clean up web links - Specifically check for @role='abbrev' - Fix Ulink/Link template for DB 5 * Stylesheets (XHTML) - Add GitHub URL in titlepage of book and article (suse-xsl #35) - Fix functionality of "dm:version" - xref handling - Improve xref and is.xref.in.samebook template - Fix xref resolution when $rootid is empty - Implement vcs.url to fix, remove add.github.url and bibliosource (suse-xsl #35) - add actual book title to HTML pages again (suse-xsl #208) - Fix formatting for intraxref (provides final fix suse-xsl #162) * Stylesheets (EPUB) - Build EPUBs by default without comments * Common Stylesheet Changes - allow intra xref linking for tables, figures, admons (suse-xsl #155) - Added missing procedure, itemizedlist, and orderedlist for intra.title.markup mode (suse-xsl #162) * Packaging - Update Requires/Recommends (also fixes suse-xsl #220) - suse_beta => suse2013 - Improve package description in Spec file ==== tracker ==== Subpackages: libtracker-common-1_0 libtracker-control-1_0-0 libtracker-miner-1_0-0 libtracker-sparql-1_0-0 tracker-devel tracker-miner-files typelib-1_0-Tracker-1_0 typelib-1_0-TrackerControl-1_0 typelib-1_0-TrackerMiner-1_0 - Add tracker-fix-memory-leak.patch: Fix a memory leak, patch from upstream git (bgo#765172). ==== tracker-extras ==== Subpackages: nautilus-extension-tracker-tags tracker-gui - Add tracker-fix-memory-leak.patch: Fix a memory leak, patch from upstream git (bgo#765172). ==== vim ==== Version update (7.4.1635 -> 7.4.1816) Subpackages: gvim vim-data - Updated to revision 1816, fixes the following problems * 'guicolors' is a confusing option name. * Quickfix doesn't handle long lines well, they are split. * GTK3 doesn't handle menu separaters properly. * Can't use Vim as MANPAGER. * Running tests in shadow dir fails. * 'termguicolors' option missing from the options window. * Test_out_close_cb sometimes fails. * Using wrong feature name to check for 'termguicolors'. * Using wrong short option name for 'termguicolors'. * Sending DETACH after a channel was closed isn't useful. * Netbeans channel gets garbage collected. * Memory access error when running test_quickfix. * A channel may be garbage collected while it's still being used by a job. * Looping over a null list throws an error. - Refresh vim-7.4-filetype_mine.patch - Updated to revision 1796, fixes the following problems * Cannot use ch_read() in the close callback. * Leading white space in a job command matters. * Channel could be garbage collected too early. * Color name decoding is implemented several times. * Some character classes may differ between systems. - Updated to revision 1786, fixes the following problems * When using the term truecolor feature, the t_8f and t_8b termcap options are not set by default. * Using negative index in strcharpart(). * Warnings reported by cppcheck. * synIDattr() does not respect 'guicolors'. * strcharpart() does not work properly with some multi-byte characters. * The old regexp engine doesn't handle character classes correctly. * Compiled-in colors do not match rgb.txt. - Updated to revision 1778, fixes the following problems * When using complete() it may set 'modified' even though nothing was inserted. * When using feedkeys() in a timer the inserted characters are not used right away. * Undo options are not together in the options window. * Arguments of setqflist() are not checked properly. * No "closed", "errors" and "encoding" attribute on Python output. * Cannot use true color in the terminal. * Newly added features can escape the sandbox. * When using the term truecolor feature, the t_8f and t_8b termcap options are not set by default. - Updated to revision 1754, fixes the following problems * When a buffer gets updated while in command line mode, the screen may be messed up. * Crash when 'tagstack' is off. (Dominique Pelle) * When adding to the quickfix list the current position is reset. * "noinsert" in 'completeopt' is sometimes ignored * syntax not set when using ":buf" and 'filetype' set manually - Updated to revision 1749, fixes the following problems * Cannot detect a crash in tests when caused by garbagecollect(). * The help for functions require a space after the "(". * The Perl interface cannot use 'print' operator for writing directly in standard IO. * It is not easy to get a character out of a string. * Python: turns partial into simple funcref. * Folds may close when using autocomplete. * Test fails when not using utf-8. * It is not possible to only see part of the message history. It is not possible to clear messages. * Count for ":messages" depends on number of lines. * syn-cchar defined with matchadd() does not appear if there are no other syntax definitions which matches buffer text. * Not testing utf-8 characters. * strgetchar() does not work correctly. * Clang warns for uninitialzed variable. (Michael Jarvis) * Python: Converting a sequence may leak memory. * Memory leak in Perl. * Coverity: missing check for NULL pointer. * "gD" does not find match in first column of first line. * When using GTK 3.20 there are a few warnings. - Updated to revision 1726, fixes the following problems * Crash when calling garbagecollect() after starting a job. * When using try/catch in 'tabline' it is still considered an error and the tabline will be disabled. * Tabline test fails in GUI. * Compiler errors for non-ANSI compilers. * ANSI compiler complains about string length. - Updated to revision 1721, fixes the following problems * Leaking memory when opening a channel fails. * Coverity: not using return value of set_ref_in_item(). * Leaking memory when there is a cycle involving a job and a partial. * Tests fail without the job feature. - Updated to revision 1716, fixes the following problems * When using try/catch in 'statusline' it is still considered an error and the status line will be disabled. * For plugins in packages, plugin authors need to take care of all dependencies. * GTK GUI doesn't work on Wayland. * Non-GUI specific settings in the gvimrc_example file. * Double free when a partial is in a cycle with a list or dict. * 'autochdir' doesn't work for the first file. - Updated to revision 1710, fixes the following problems * feedkeys('i', 'x') gets stuck, waits for a character to be typed. * Building the Perl interface gives compiler warnings. * ":syn reset" clears the effect ":syn iskeyword". (James McCoy) * When using :stopinsert in a silent mapping the "INSERT" message isn't cleared. * Display problems when the 'ambiwidth' and 'emoji' options are not set properly or the terminal doesn't behave as expected. * :packadd does not work the same when used early or late. * Using freed memory when parsing 'printoptions' fails. * Using freed memory with "wincmd p". (Dominique Pelle) * Cannot use empty dictionary key, even though it can be useful. * New regexp engine does not work properly with EBCDIC. * Not all output of an external command is read. - Updated to revision 1691, fixes the following problems * When reading JSON from a channel all readahead is used. * channel_get_all() does multiple allocations. * When writing buffer lines to a pipe Vim may block. * Completion doesn't work well for a variable containing "#". * When help exists in multiple languages, adding @ab while "ab" is the default help language is unnecessary. * The Dvorak support is a bit difficult to install. * The justify plugin has to be copied or sourced to be used. * The editexisting plugin has to be copied or sourced to be used. * The swapmous plugin has to be copied or sourced to be used. * The shellmenu plugin has to be copied or sourced to be used. * A reference to the removed file_select plugin remains. * Coverity: copying value of v_lock without initializing it. * Coverity warns for not checking name length (false positive). * Coverity warns for fixed size buffer length (false positive). * Coverity: no check for NULL. * README text is slightly outdated. * There is no easy way to get all the information about a match. * When running tests $HOME/.viminfo is written. * The channel close_cb option does not work. * MzScheme does not support partial. * Ruby interface has inconsistent coding style. * Can't compile with the conceal feature but without multi-byte. * When switching to a new buffer and an autocommand applies syntax highlighting an ml_get error may occur. - Updated to revision 1665, fixes the following problems * When 'F' is in 'shortmess' the prompt for the encryption key isn't displayed. * When binding a function to a dict the reference count is wrong. * Invoking garbage collection may cause a double free. * Crash when an autocommand changes a quickfix list. * Handling emoji characters as full width has problems with backwards compatibility. * Terminating file name has side effects. * Using string() on a partial that exists in the dictionary it binds results in an error. * When a dict contains a partial it can't be redefined as a function. * Using Python vim.bindeval() on a partial doesn't work. * Using freed memory after setqflist() and ":caddbuffer". * Compiler has a problem copying a string into di_key[]. * The matchit plugin needs to be copied to be used. * Quickfix test fails. * Old style test for fnamemodify(). * Users who loaded matchit.vim manually have to change their startup. * Crash when using expand('%:S') in a buffer without a name. * remote_expr() hangs. * Crash when using partial with a timer. * On Unix in a terminal: channel messages are not handled right away. * A plugin does not know when VimEnter autocommands were already triggered. * has('patch-7.4.1') doesn't work. * No test for special characters in channel eval command. * No test for an invalid Ex command on a channel. * Crash in :cgetexpr. * Crash when calling job_start() with a NULL string. ==== yast2-dns-server ==== Version update (3.1.19 -> 3.1.20) - Fix handling of trailing spaces in named.conf (bsc#976643) - 3.1.20 ==== zypper ==== Subpackages: zypper-aptitude zypper-log - Update zypper-po.tar.bz2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] request in general: with (security) updates also build new .debuginfo package..
by André Verwijs 06 May '16

06 May '16

request in general: with (security) updates also build new .debuginfo package (if possible) for debugging or reporting.... ______________________________________________________________________________________ Ꙫ My Twitter Page: http://twitter.com/OpenSimFan Ꙫ My Instagram page: http://instagram.com/dutchglory Ꙫ My Facebook page (be my friend, please )* http://www.facebook.com/andre.verwijs Ꙫ My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992 Ꙫ My Tumblr Page (La Ventura): http://laventurafan.tumblr.com -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] Gnome apps do not start in KDE, any idea how this can be resolved?
by Howard Guo 06 May '16

06 May '16

Hello fellow tumbleweed users. i have a freshly installed tumbleweed, choosing kde as default desktop while also having gnome applications/desktop installed. Now that I'm in KDE, and none of the gnome application will launch, they only give error: 11:17:00.0224 (null)[13743]: WARNING: Unrecognized image file format Gtk:ERROR:gtkiconhelper.c:491:ensure_surface_for_gicon: assertion failed: (destination) Any idea how to get gnome apps back to work? Much appreciated. Kind Regards, Howard -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1