April 2023 - openSUSE Factory - openSUSE Mailing Lists

Re: Gimp & Inkscape symbol lookup error
by Gordon Messmer 06 Apr '23

06 Apr '23

On 2023-04-06 07:16, Joe Salmeri wrote: > > On 4/5/23 19:53, Gordon Messmer wrote: >> I don't think there's any evidence of corruption. Just a deficiency >> in rpm's ELF dependency generator that needs to be fixed. (Until it >> is: always apply all available updates when patching, and before >> installing any new packages.) > > Or install tumblewed-cli and pick which of the last 20 builds repos > you want to use. Then you can install new things from that repo and > not have the problem. I'm not familiar with tumbleweed-cli, but I think that still depends on how you use it. If you use "tumbleweed update" and then install gimp and inkscape, then that should work. But I think that's the same as "zypper dup && zypper install gimp inkscape". Whereas if you used "tumbleweed switch && zypper install gimp inkscape" you'd still have a problem. So, the "safe" thing to do doesn't really depend on the tool so much as it depends on always applying all available patches before installing a new application (either with, or without tumbleweed-cli).

1 0

Several disappearing -32bit packages
by David Gow 06 Apr '23

06 Apr '23

It looks like a few of the -32bit packages have disappeared from the repository. These include: alsa-oss-32bit alsa-plugins-pulse-32bit apitrace-wrappers-32bit libLLVM13-32bit libspdlog1_11-32bit mangohud-32bit As well as (though they still exist in the Games repo): libSDL_mixer-1_2-0-32bit libSDL_ttf-2_0-0-32bit libSDL_ttf-devel-32bit Is this a side effect of moving the i586 ports out of the main repos? Is there something special about these packages? Or is it just a coincidence, and they'll be back soon? (Some of them, like the missing alsa-plugins-pulse-32bit, have a pretty good chance of straight-up breaking audio on 32-bit applications, which'd be a pretty nasty regression.) Any ideas? Cheers, — David

6 8

openSUSE Leap 15.5 RC code submission deadline is on 12th April (~20 pending build failures)
by Lubos Kocman 05 Apr '23

05 Apr '23

Hello openSUSE! The RC code submission deadline for openSUSE Leap 15.5 is on 12th April Past that point we will only accept further translations and important bug fixes. Big thanks to many of you who have already submitted fixes for remaining ~20 build failures, which are mostly in python packages. I'd like to ask also devel project reviewers to ensure that fixes are not blocked on their reviews. Any help with these would be highly appreciated. https://bugzilla.opensuse.org/buglist.cgi?f1=tag&list_id=13870346&o1=substr… https://en.opensuse.org/openSUSE:Most_annoying_bugs_15.5 https://en.opensuse.org/openSUSE:Roadmap Best regards Lubos Kocman openSUSE Leap Release Manager

1 0

New Tumbleweed snapshot 20230404 released!
by Dominique Leuenberger 05 Apr '23

05 Apr '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (110.0.1 -> 111.0.1) amavisd-new (2.12.2 -> 2.13.0) dmidecode drbd-utils gstreamer-plugins-rs (0.10.4 -> 0.10.5) hwdata (0.368 -> 0.369) libqt5-qtbase (5.15.8+kde183 -> 5.15.8+kde185) mdadm pam-config (2.2 -> 2.4) python-cryptography python-importlib-metadata systemd (253.1 -> 253.2) tigervnc webkit2gtk3 webkit2gtk3-soup2 wsdd (0.7.0 -> 0.7.1) xdm yast2-installation (4.6.1 -> 4.6.2) yast2-storage-ng (4.6.3 -> 4.6.4) yast2-trans (84.87.20230324.a3dfeee0c1 -> 84.87.20230401.d443fd75ae) yast2-users (4.6.0 -> 4.6.1) === Details === ==== MozillaFirefox ==== Version update (110.0.1 -> 111.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 111.0.1 (boo#1209688) * Fixed a crash on macOS while pinch-zooming under some circumstances (bmo#1658986) * Fixed a bug causing Firefox to freeze on startup for some Windows users (bmo#1823159) - fix build on Tumbleweed (mozilla-bmo1807652.patch) - exclude i586/i686 once again because it fails to link libxul due to its size - Mozilla Firefox 111.0 * https://www.mozilla.org/en-US/firefox/111.0/releasenotes MFSA 2023-09 (bsc#1209173) * CVE-2023-28159 (bmo#1783561) Fullscreen Notification could have been hidden by download popups on Android * CVE-2023-25748 (bmo#1798798) Fullscreen Notification could have been hidden by window prompts on Android * CVE-2023-25749 (bmo#1810705) Firefox for Android may have opened third-party apps without a prompt * CVE-2023-25750 (bmo#1814733) Potential ServiceWorker cache leak during private browsing mode * CVE-2023-25751 (bmo#1814899) Incorrect code generation during JIT compilation * CVE-2023-28160 (bmo#1802385) Redirect to Web Extension files may have leaked local path * CVE-2023-28164 (bmo#1809122) URL being dragged from a removed cross-origin iframe into the same tab triggered navigation * CVE-2023-28161 (bmo#1811181) One-time permissions granted to a local file were extended to other local files loaded in the same tab * CVE-2023-28162 (bmo#1811327) Invalid downcast in Worklets * CVE-2023-25752 (bmo#1811627) Potential out-of-bounds when accessing throttled streams * CVE-2023-28163 (bmo#1817768) Windows Save As dialog resolved environment variables * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904, bmo#1817442, bmo#1818674) Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 * CVE-2023-28177 (bmo#1803109, bmo#1808832, bmo#1809542, bmo#1817336) Memory safety bugs fixed in Firefox 111 - ensure gcc11-c++ gets used on Leap 15.5 - requires NSS >= 3.88.1 - removed obsolete patches gcc13-fix.patch mozilla-bmo1810584.patch - rebased patches - update create-tar.sh ==== amavisd-new ==== Version update (2.12.2 -> 2.13.0) Subpackages: amavisd-new-docs - update to version 2.13.0 NEW FEATURES o Add support for new decoder Zstandard o Switch from Net::LibIDN to Net::LibIDN2. As Net::LibIDN (based on GNU libidn) supports only IDNA 2003 (and its upstream declares libidn2 as successor), the newer Net::LibIDN2 (based on GNU libidn2) supporting IDNA 2008 and TR46 is being used preferred, if available. o Recognize 7-Zip.org's command line utility 7zz o Recognize 'ACE archive' file type. o Add file(1) short type mapping for MS Office CDF format. o Add attachment file name information to structured report. o Introduce option to add an extra header containing the Amavis category. o Introduce $ip_repu_score_limit option to define an upper limit for the redis ip reputation score feature. o Make sanity limit inside macro_tests configurable. o Add support for SpamAssassin subjprefix keyword. SpamAssassin 3.4.3 introduced a subjprefix keyword and a _SUBJPREFIX_ template tag which may be used in SpamAssassin rules. The template tag is now also injected into Amavis for usage inside subject_tag related confvars. o Deprecate $daemon_group confvar by @daemon_groups, which allows joining multiple supplementary groups when dropping privileges. The first element of @daemon_groups determines the EGID. If $daemon_group is defined it will be put ahead implicitly. If @daemon_groups are empty, they default to the system-provided groups of $daemon_user. BUG FIXES o Ignore [$@]daemon_group(s) settings during config test when amavis is running unprivileged already. o Resolve "can't obtain a tainted string" warning. o Resolve start_SSL fail to set SSL_verifycn_name. Additionally provide an explicit choice of common names via %smtp_tls_client_verifycn_name_maps. OTHER o Add support for Sophos Protection for Linux on @av_scanners_backup. o Declare Sanesecurity.Foxhole.Mail_tar infection as false positive. o Factor out various Amavis packages into own module files. o Introduce tests via Gitlab CI. o Convert source to CPAN module file structure. o Update example scanners and documentation. o Add IKARUS scan.server configuration example. o Add contribution guideline. o Remove IO::Stringy dependency. o Add a docker-compose testing environment. o Add support for F-Secure Linux Security 64 on @av_scanners. - Rebase and rename patch: amavisd-new-2.10.1-myhostname.patch -> amavisd-new-2.3.0-myhostname.patch - Remove patch. ClamAV is in new version already avtivated activate_virus_scanner.diff - Remove deprecated stuff from spec file. - Use build method provided by amavis ==== dmidecode ==== - dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding of the last field of HPE OEM record type 237 (DIMM Vendor Information). ==== drbd-utils ==== - crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783) * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch ==== gstreamer-plugins-rs ==== Version update (0.10.4 -> 0.10.5) - Update to version 0.10.5: + gtk4: Fix build with OpenGL support on macOS. + threadshare: Fix symbol conflicts when statically linking the plugin. - Enable LTO as it works fine now (use FAT lto objects). ==== hwdata ==== Version update (0.368 -> 0.369) - update to 0.369: * Update pci, usb and vendor ids ==== libqt5-qtbase ==== Version update (5.15.8+kde183 -> 5.15.8+kde185) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.8+kde185: * QFSFileEngine: fix overflow bug when using lseek64 * Add QImage null check when QOpenGLTexture converts - Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364): * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch - Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157): * big-endian-scroll.patch ==== mdadm ==== - sysconfig.mdadm: Remove ServiceRestart line to mdadm since there is not such systemd service. (bsc#1203491) ==== pam-config ==== Version update (2.2 -> 2.4) - Update to version 2.4 - Read postlogin files, too - Update to version 2.3 - Add silent_if option for pam_lastlog2 ==== python-cryptography ==== - rebase patch remove_python_3_6_deprecation_warning.patch ==== python-importlib-metadata ==== - Remove unneeded BuildRequires on pep517. ==== systemd ==== Version update (253.1 -> 253.2) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 03cfbe767327d01d5a71131d91bf06fdc0047ca1 03cfbe7673 test: use setpriv instead of su for user switch from root 857843834c test: wrap mkfs.*/mksquashfs/mkswap binaries when running w/ ASan be7388f8c5 test: do not remove state directory on failure 1b2885bd16 test: fix regexp in testsuite-74.mount.sh 41142f8013 test: drop extraneous bracket in testsuite-74.mount.sh - systemd.spec: add files.coredump - Import commit b63f58661b08037d8cb04ed97b5e39d9bf415fdc (merge of v253.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/8b01686dd20124efc300d21ef38d85c… - Move systemd-fsck stuff to udev sub-package. - Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741) That way "systemd --user" instances get their own session keyring instead of the user default session keyring. For some reasons cifscreds refuses to work with the latter. That's what is expected for every PAM session anyway. - Import commit 8b01686dd20124efc300d21ef38d85c1f75c372f 8b01686dd2 test: don't export $TOOLS_DIR 7a56b1b2f0 test: clean up $STATEDIR too 324bb19eb8 test: $STATEDIR should not point to /usr/lib/systemd/tests when NO_BUILD=1 2251735482 test: install symlinks with valid targets on SUSE and Debian c30905a269 test: on openSUSE install the collection of unit test binaries in the target only for TEST-02-UNITTESTS 797ced15d8 meson: make sure the unit test scripts find testdata/ even if they are not installed in the same directory 04dc5b44b7 meson: define testdata_dir globally 69643c6c96 test: install unit tests in a dedicated subdirectory below '$testsdir' ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Fixes for bsc#1209283 * Drop chown vnc:vnc calls in with-vnc-key.sh * Add TLSNone to -securitytypes to increase security in xvnc@.service ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add fix-gst-crash.patch: Fix crash in webkit_media_stream_src_class_init(). https://bugs.webkit.org/show_bug.cgi?id=254025 - Add reproducibility.patch: Make build more reproducible. Still not there yet though. Inject fixed year in file. ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add fix-gst-crash.patch: Fix crash in webkit_media_stream_src_class_init(). https://bugs.webkit.org/show_bug.cgi?id=254025 - Add reproducibility.patch: Make build more reproducible. Still not there yet though. Inject fixed year in file. ==== wsdd ==== Version update (0.7.0 -> 0.7.1) - Force the use of python 3.10 for openSUSE Leap - Update to version 0.7.1 * GitHub workflow for static analyses added (syntax, format, and type checks are performed). * Added EnvironmentFile and according example for systemd-based distros. * Make wsdd work (again) on MacOS (#139). Thanks to Eugene Gershnik. * Application profile for UFW has been added (#169) * Use of implicitly present async I/O loop instead created one for API servers. Fixes regression due to changed API in Python 3.10 (see #162) * Source code is spiced with type hints now. * man page moved to section 8. ==== xdm ==== Subpackages: xdm-xsession - Create two set of pam configuration files: + *.sle15 are for SLES15 and older + add postlogin-* includes to the others as required by new openSUSE's PAM config policy ==== yast2-installation ==== Version update (4.6.1 -> 4.6.2) - yupdate - improved Live ISO detection, added "--force" option (related to bsc#1206927) - 4.6.2 ==== yast2-storage-ng ==== Version update (4.6.3 -> 4.6.4) - AutoYaST: export thin LVM volumes when cloning (bsc#1209725) - 4.6.4 ==== yast2-trans ==== Version update (84.87.20230324.a3dfeee0c1 -> 84.87.20230401.d443fd75ae) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230401.d443fd75ae: * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) ==== yast2-users ==== Version update (4.6.0 -> 4.6.1) - Stop mangling the value of "Create as Btrfs Subvolume" for new users when clicking on "Edit -> Details" (bsc#1209377). - 4.6.1 - AutoYaST: Fix creation of home for system users (bsc#1202974).

1 0

New kernel-6.2.9-1.1 does not panic on TW SATA SSD
by Fritz Hudnut 05 Apr '23

05 Apr '23

> > Common to all my systems is they are all Intel based and use an NVME > > boot disk. I'll try to capture the console logs next, but thought I'd > > check if anybody can confirm this failure. > > > FWIW, the kernel from Kernel:stable shows the same, while the same 6.2.9 > > kernel from Kernel:stable:Backport boots happily on Leap 15.4... > > I have 3 TW that boot from NVME. I just upgraded to 20230403 & 6.2.9 on the first > to find no problem booting to multi-user: > > # inxi -CSM > System: > Host: ab560 Kernel: 6.2.9-1-default arch: x86_64 bits: 64 Console: pty pts/0 > Distro: openSUSE Tumbleweed 20230403 > Machine: > Type: Desktop System: ASUS product: N/A v: N/A serial: N/A > Mobo: ASUSTeK model: PRIME B560M-A v: Rev 1.xx serial: 210787670000384 > UEFI: American Megatrends v: 1601 date: 05/07/2022 > CPU: > Info: 6-core model: 11th Gen Intel Core i5-11400 bits: 64 type: MT MCP > cache: L2: 3 MiB > Speed (MHz): avg: 2600 min/max: 800/4400 cores: 1: 2600 2: 2600 3: 2600 > 4: 2600 5: 2600 6: 2600 7: 2600 8: 2600 9: 2600 10: 2600 11: 2600 12: 2600 > > Booting to graphical.target, however, takes too long to get started, with X > running on /dev/dri/card1 instead of /dev/dri/card0: > # systemd-analyze > Startup finished in 12.553s (firmware) + 12.289s (loader) + 1.441s (kernel) + > 1.935s (initrd) + 1min 30.849s (userspace) = 1min 59.068s > graphical.target reached after 1min 30.778s in userspace. > https://bugzilla.opensuse.org/show_bug.cgi?id=1206316 > -- > Evolution as taught in public schools is, like religion, > based on faith, not based on science. > > Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! > > Felix Miata ] > > > > > > <https://bugzilla.suse.com/show_bug.cgi?id=1210146> > > > > This appears to be caused by having "retbleed=stuff" on the kernel > > command line. Up to 6.2.9 it never made any problems. > > > > Cheers. > > > > l8er > > manfred > > I got a kernel panic on 6.2.9 even earlier than that, and I don't have > retbleed parameters on my kernel command line. > > My bootloader kernel command line is: > idewait=10 plymouth.enable=0 splash quiet showopts nvidia-drm.modeset=1 > elevator=cfq > > I'm also not booting from NVMe but from a SATA SDD. ================================================================================================================== > Rodney Baker > rodney.baker(a)iinet.net.au I'm also running TW on SATA SSD and had no issue on cold booting back into it after upgrading to 6.2.9.1-default on '12 Mac Pro . . . booting from grub, essentially box stock boot params, but just one user of it. I would concur with Mr Miata's comment about "slowness" of booting, compared today to my Sid install, which was very quick; TW seems to take its time when waking up from a nights slumber, checking over the to-do list before getting to it, etc.

3 2

x86-64-v3
by Joe Salmeri 04 Apr '23

04 Apr '23

It appears that more modules are being compiled for v3 support. The following files in /usr/lib64/glibc-hwcaps/x86-64-v3/ compare to the versions in /usr/lib64: libpng16.so.16.39.0 liblzo2.so.2.0.0 libboost_date_time.so.1.81.0 libboost_filesystem.so.1.81.0 libboost_iostreams.so.1.81.0 libboost_locale.so.1.81.0 libboost_thread.so.1.81.0 libbrotlicommon.so.1.0.9 libbrotlidec.so.1.0.9 libbrotlienc.so.1.0.9 This is as of TW 20230331. Doesn't that indicate that they were not compiled with v3 support ? -- Regards, Joe

2 1

New Tumbleweed snapshot 20230403 released!
by Dominique Leuenberger 04 Apr '23

04 Apr '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc) libcap (2.67 -> 2.68) systemd-rpm-macros (19 -> 20) === Details === ==== aaa_base ==== Version update (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc) Subpackages: aaa_base-extras - Update to version 84.87+git20230329.b39efbc: * Fix glibc requirement - Update to version 84.87+git20230309.04eae92: * Add conditional glibc requirement back * Keep owning /etc/sysctl.conf to avoid rpmsave - Update to version 84.87+git20230220.2991cfd: * Add instructions to build in place * Remove pre scriptlet * Don't create mtab symlink * Don't create /root/.bash_history * Don't enable lastlog by default * Fix #91: do not accidental unset shell functions * Prepare more /etc cleanup ==== libcap ==== Version update (2.67 -> 2.68) Subpackages: libcap2 libcap2-32bit - update to 2.68: * Force libcap internal functions to be hidden outside the library * Expanded the list of man page (links) to all of the supported API functions. * fixed some formatting issues with the libpsx(3) manpage. * Add support for a markdown preamble and postscript when generating .md versions of the man pages (Bug 217007) * psx package clean up * fix some copy-paste errors with TestShared() * added a more complete psx testing into this test as well * cap package clean up * drop an unnecessary use of ", _" in the sources * cleaned up cap.NamedCount documentation * Converted goapps/web/README to .md format and fixed the instructions to indicate go mod tidy is needed. * cap_compare test binary now cleans up after itself (Bug 217018) * Figured out how to cross compile Go programs for arm (i.e. RPi) that use C code, don't use cgo but do use the psx package * Eliminate use of vendor directory ==== systemd-rpm-macros ==== Version update (19 -> 20) - Bump to version 20 - %service_del_postun: make sure to restart services if /etc/sysconfig/service is not present. - Drop support for -n/-f options in %service_del_postun These options have been deprecated since a long time and the last package relying on them (drkonqi5) in the Factory repository has been updated.

1 0

New Tumbleweed snapshot 20230402 released!
by Dominique Leuenberger 03 Apr '23

03 Apr '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libnvme (1.3 -> 1.4) libstorage-ng (4.5.91 -> 4.5.92) libxfce4ui (4.18.2 -> 4.18.3) nvme-cli (2.3 -> 2.4) xorg-x11-server (21.1.7 -> 21.1.8) xwayland (23.1.0 -> 23.1.1) yast2-storage-ng (4.6.2 -> 4.6.3) === Details === ==== libnvme ==== Version update (1.3 -> 1.4) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.4: * fabrics: Filter out invalid UUIDs from DMI * fabrics: Add define for DMI sysinfo * Print out correct TREQ strings for discovery * tree: fix generic device open failure * fabrics: add configuration option 'tls_key' * fabrics: add configuration option 'keyring' * linux: add key helper functions * nvme: add 'nvme_insert_tls_key()' function * linux: add nvme_lookup_keyring() * python: Change python option from combo to feature * types: add opcode field to error log page (TP4113) * python: Add setter property for controller DHCHAP Key * python: Remove redundant host.set_key() method * build, meson: Print option summary * Python: Add support for setting/getting Host DHCHAP key * Python: Add hostnqn_from_file() and hostid_from_file() * types: Update position of elbatm in struct nvme_copy_range{_f1} * doc: fix kernel-doc-check warning * python, meson: Assert that deps are present for -Dpython=true * python: Reformat SWIG input file * python test: Check there is no SIGSEGV during garbage collection * python: Return PyObject* from __str__() instead of a static char[] * python: Fix segmentation fault during garbage collection * build: Enable test in muon minimal build * build: Streamline workflows with nvme-cli * mi: Add nvme_mi_admin_get_log_page * ioctl: Set file descriptor in nvme_get_log_page() * fix endians * fabrics: Do not ignore one char whitespace when string sanitizing ==== libstorage-ng ==== Version update (4.5.91 -> 4.5.92) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Portuguese (Brazil)) (bsc#1149754) - 4.5.92 ==== libxfce4ui ==== Version update (4.18.2 -> 4.18.3) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.18.3 * Add comment about the need for gtk_widget_destroy() * Fix memory management in Vala generated code * Add annotation "(nullable)" where appropriate * Replace deprecated annotation: "(allow-none)" * Harden xfce_gtk_handle_tab_accels (thunar#1067) * screensaver: Avoid Xfconf warning * shortcuts-grabber: Ignore keyboard layout change * screensaver: Fix Xfconf memory management ==== nvme-cli ==== Version update (2.3 -> 2.4) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.4: * plugins/ocp: Add SMART cloud log to solidigm plugin * nvme-print: Unify number base format for nsid * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key' * nvme-connect: enable option '--tls' * nvme-check-tls-key: add options to derive a 'retained' TLS key * nvme-gen-tls-key: add options to derive a TLS key * plugins/ocp: Move SMART cloud log methods to separate file for reusability * nvme: validate storage tag size correctly * nvme-print-json: Add json output status function * util: Cleanup argconfig parse function * nvme: Fix format command function indentation errors * util: Use argconfig commandline options pointer directly * nvme-print: Fix nvme show status function indentation errors * nvme: Check fw-commit command support MUD * print: print csi and opcode in error log (TP4113) * plugins/inspur: Cast vendor specific smart log value * nvme: Use correct ABORT type for self abort test * plugins/solidigm: Do not overwrite previously initialized variable * nvme-print: sanitize supported-log-pages output * nvme: Enforce length to a multiple of 4 in get_log_page * nvme: fix block count and data size logic * util: Introduce argconfig simple helper to check seen condition * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option * plugins/ocp: Refactor to clear feature identifier C1h and C3h * plugins/ocp: Add support for clear PCIe correctable error counters feature * nvme-doc: update man page for supported-log-pages * plugins/ocp: OCP 2.0 field updates for SMART cloud log * nvme: Fix parameter limit range * fdp: Fix wrong Reclaim Unit Handle Status size * plugins/ocp: Add support for EOL/PLP failure mode feature * nvme-print: Fix printing of u32 values * nvme: Fix invalid memory access in show_registers * util: Add argconfig seen flag parameter to check if feature NSID set * nvme-print: fix segfault in supported-log-pages json output * fabrics: Fix ordering for auto connect services * nvme.c: Check Firmware Update Granularity in fwdl * log: high latency timestamp issue * nvme: Align get feature data buffer length by page size to allocate * nvme: Continue get feature on invalid NS error to get multiple feature ids * plugins/ocp: SMART cloud log bug fixes. * Made temperature readouts in line with the SI. * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM. * plugins/ocp: Fix whitespace and style issues * util: Revert JSON output to plain numbers * nvme: Add rae argument to telemetry-log command * nvme: Refactor get telemetry log page helper * nvme: Factor out parse telemetry log da element * nvme: Fix type in error message * unit: Add test-argconfig-parse * nvme: Use chunked read in get_log() * nvme: Use fprintf for error message logging in get_log() * nvme: fix /dev/spkd/ typo * doc: --storage-tag-check doesn't take any arguments * fabrics: Ensure host-traddr/iface consistency for "connect-all" * nvme-print: print the nvme generic name in json output as well * plugins/innogrit: modify command opcode for eventlog and cdump * completion: fix typo, add missing args * plugins/wdc: Fix data Formatting for Latency Monitor Log Page * nvme: Make json-c optional again * nvme-print: Move JSON printing function into a new file * plugins/solidigm: Use json_create_object wrapper * plugins/solidigm: Use struct json_object instead of typedef * fabrics: No need to sanitize trsvcid and traddr * docs: Fixed typos and missing options * util: Numbers without any suffix are also valid * util: Update suffix_binary_parse API * util: Reimplement suffix_si_parse * nvme: Filter out status flags for get feature command * util: Add crc32 implementation * nvme-print: Use attrs_info as key for Zone Attributes Information * nvme: Support effects-log for fabrics ctrl * plugins/solidigm: Add uuid index resolution * plugins/ocp: Use network byte order for OCP UUID value ==== xorg-x11-server ==== Version update (21.1.7 -> 21.1.8) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version 21.1.8 (CVE-2023-1393): * This release contains the fix for CVE-2023-1393 * composite: Fix use-after-free of the COW * xkbUtils: use existing symbol names instead of deleted deprecated ones - Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch: Fixed upstream - Switch back to tarball release, drop source service, add keyring and sig files. ==== xwayland ==== Version update (23.1.0 -> 23.1.1) - Update to version 23.1.1 (CVE-2023-1393): + This release contains the fix for CVE-2023-1393. + xkbUtils: use existing symbol names instead of deleted deprecated ones + glamor: Don't glFlush/ctx switch unless any work has been performed + xwayland: - Refactor xwl_present_for_each_frame_callback helper - Prevent nested xwl_present_for_each_frame_callback calls + composite: Fix use-after-free of the COW - Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch: Fixed upstream. - U_xserver-composite-Fix-use-after-free-of-the-COW.patch * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866, bsc#1209543) ==== yast2-storage-ng ==== Version update (4.6.2 -> 4.6.3) - Fix the translation of widgets titles in the dialog to select a partitioning scheme (bsc#1209697). - 4.6.3

1 0

[opensuse-factory] reproducible builds status 2023-02
by Bernhard M. Wiedemann 02 Apr '23

02 Apr '23

Hi, Did some patches this month. Nothing spectacular. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2023-01/ I uploaded https://rb.zq1.de/compare.factory-20230301/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14802 (+61) build-tried: 14744 (+63) build-failed: 30 (+3) build-n-a: 255 (+29) build-succeeded: 14459 (+30) build-official-failed+na: 173 (+67) build-compare-failed: 468 (-6) build-compare-succeeded: 13991 (+36) verify-failed: 182 (+74) verified-semi-reproducible: 10913 (+246) bit-by-bit-identical: 13849 (+154) not-bit-by-bit-identical: 615 (-119) not-bit-by-bit-identicalcheck: 610 (-124) https://rb.zq1.de/compare.factory-20230301/graph.png shows the change over time https://rb.zq1.de/compare.factory-20230301/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 5 were in ring0 53 were in ring1 That makes it 58/3316 => 1.75 % which is below the overall average of 468/14459 => 3.24 % 615/14459 => 4.25 % of packages are not perfectly reproducible package notes: ==> ./boost/.rb.notes <== = https://github.com/boostorg/boost/issues/741 2038-date influences order +++ new /usr/lib64/libboost_log.so.1.81.0 (objdump) ==> ./buildkit/.rb.notes <== go1.19 toolchain parallelism ==> ./dnscrypt-proxy/.rb.notes <== .src.rpm captures randomness from %vendored_licenses_packager_prep -vendored_licenses_packager install "/tmp/tmp_vendored_dir_6bSEoMWEIw" /home/abuild/rpmbuild/BUILDROOT/dnscrypt-proxy-2.1.3-0.0.x86_64""/usr/share/licenses/dnscrypt-proxy/vendored"" ==> ./docker-compose/.rb.notes <== go1.19 toolchain build-id parallelism ==> ./dpdk/.rb.notes <== parallelism in /usr/share/doc/packages/dpdk/dpdk/html/searchindex.js => SR 1067125 dpdk clean Sphinx leftover files ==> ./ebumeter/.rb.notes <== => SR 1066747 CPU: -march=native from source/Makefile:CXXFLAGS += -march=native ==> ./elementary-xfce-icon-theme/.rb.notes <== = https://gitlab.gnome.org/GNOME/pango/-/issues/729 toolchain pango ASLR+readdir order --- old /usr/share/icons/elementary-xfce/apps/24/accessories-dictionary.png (hex) ==> ./findbugs/.rb.notes <== date+time gets injected into docs and .jar: ==> ./firecracker/.rb.notes <== => https://github.com/firecracker-microvm/firecracker/pull/3445 = https://github.com/firecracker-microvm/firecracker/issues/3439 hashmap order ==> ./galera-4/.rb.notes <== FTBFS-2037 found range good=2179559341 bad=2179561266 (2039-01-25T09:41:06) ==> ./gnutls/.rb.notes <== date in man - probably because patch updates mtime # filterdiff zcat R*/usr/share/man/man1/gnutls-cli.1.gz ==> ./jhead/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1208386 gcc12 toolchain random tmpdir from LTO /usr/bin/jhead differs in ELF sections ==> ./ldas-tools-framecpp/.rb.notes <== doxygen doc toolchain, filesys ==> ./libhugetlbfs/.rb.notes <== => SR 1068331 libhugetlbfs drop unreproducible unused file = https://bugzilla.opensuse.org/show_bug.cgi?id=1159558 report unreproducible .ldscript file ==> ./nut/.rb.notes <== date in /usr/share/doc/packages/nut/cables/Makefile ==> ./ongres-stringprep/.rb.notes <== xmvn toolchain random UUID, javadoc ==> ./openEMS/.rb.notes <== octave debuginfo, toolchain issue? ==> ./osgi-service-log/.rb.notes <== java date+time +++ new//usr/share/java/osgi-service-log/org.osgi.service.log.jar/META-INF/maven/org.osgi/org.osgi.service.log/pom.properties 2023-01-29 07:14:54.625684100 +0000 ==> ./pentaho-libxml/.rb.notes <== javadoc toolchain ==> ./perl-DBD-MariaDB/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1203310 mariadb toolchain FTBFS-2038 strings /usr/sbin/mariadbd|grep dates.later ==> ./postfish/.rb.notes <== postfish-wisdomrc random order from ==> ./prosody/.rb.notes <== => SR 1066043 /etc/prosody/certs/example.com.crt and other random key+certs - still in version 0.12.2 ==> ./python-aiohttp/.rb.notes <== => https://github.com/aio-libs/aiohttp/pull/7191 FTBFS-2039 found range good=2177495253 bad=2177497178 (2039-01-01T12:19:38) ==> ./python-azure-agent/.rb.notes <== python3.10 toolchain .pyc ASLR ==> ./python-azure-ai-ml/.rb.notes <== python3.10 toolchain .pyc ASLR ==> ./python-dtaidistance/.rb.notes <== SR 1068462 drop unreproducible unnecessary file ==> ./python-future/.rb.notes <== python3 toolchain ASLR ==> ./python-pyinstaller-hooks-contrib/.rb.notes <== python3.10 toolchain .pyc ASLR ==> ./python-quantities/.rb.notes <== date+time in /usr/lib/python3.9/site-packages/quantities/constants/_codata.py ==> ./python-sqlalchemy-migrate/.rb.notes <== => SR 1067129 python-sqlalchemy-migrate clean Sphinx leftover files ==> ./python-sunpy/.rb.notes <== = https://github.com/sunpy/sunpy/issues/6030 FTBFS-2023 found range good=1687994158 bad=1687997370 (2023-06-29T00:09:30) ==> ./qca/.rb.notes <== FTBFS-2031 found range good=1924935388 bad=1924937313 (2030-12-31T08:48:33) ==> ./qt6-declarative/.rb.notes <== /usr/lib64/libQt6QuickDialogs2QuickImpl.so.6.4.2 differs in ELF sections order variation in qtdeclarative-everywhere-src-6.4.2/build/build.ninja , ColorDialog_qml.cpp from qmlcachegen ==> ./qt6-quick3d/.rb.notes <== TODO /usr/lib64/libQt6Quick3DHelpers.so.6.4.2 differs in ELF sections ==> ./qt6-webengine/.rb.notes <== Qt toolchain issue ; hard to debug because of slow compile time ==> ./smuxi/.rb.notes <== = https://github.com/mono/mono/issues/20172 mono mdb ==> ./spotifyd/.rb.notes <== = https://github.com/Spotifyd/spotifyd/issues/1167 => https://github.com/librespot-org/librespot/commit/9de1f38e926de827cf2f05b4d… random ==> ./tigervnc/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1208478 RSA key ==> ./transfig/.rb.notes <== = https://bugs.ghostscript.com/show_bug.cgi?id=696765 date+time from ghostscript toolchain /usr/share/doc/packages/transfig/fig2mpdf/sample-presentation.pdf differs at offset '13201' (PDF document, version 1.5) ==> ./velociraptor/.rb.notes <== #= https://bugzilla.opensuse.org/show_bug.cgi?id=1207369 report date filterdiff strings RPMS*/usr/bin/velociraptor ==> ./xemacs-packages/.rb.notes <== date+time in .elc date+time from psgml ==> ./zellij/.rb.notes <== reproducible again for unknown reason. was: /usr/bin/zellij differs in ELF sections from LTO? random?

2 2

[opensuse-factory] reproducible builds status 2023-03
by Bernhard M. Wiedemann 02 Apr '23

02 Apr '23

Hi, I did some nice patches again this month. I was also able to resume verification builds after the full rebuild 20230319. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2023-02/ I uploaded https://rb.zq1.de/compare.factory-20230402/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14744 (-58) build-tried: 14690 (-54) build-failed: 48 (+18) build-n-a: 202 (-53) build-succeeded: 14440 (-19) build-official-failed+na: 167 (-6) build-compare-failed: 483 (+15) build-compare-succeeded: 13957 (-34) verify-failed: 398 (+216) verified-semi-reproducible: 12642 (+1729) bit-by-bit-identical: 13764 (-85) not-bit-by-bit-identical: 673 (+58) not-bit-by-bit-identicalcheck: 676 (+66) https://rb.zq1.de/compare.factory-20230402/graph.png shows the change over time https://rb.zq1.de/compare.factory-20230402/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 5 were in ring0 56 were in ring1 That makes it 61/3316 => 1.84 % which is below the overall average of 483/14440 => 3.34 % 673/14440 => 4.66 % of packages are not perfectly reproducible package notes: ==> ./crmsh/.rb.notes <== => SR 1072113 by mcepl = https://bugzilla.suse.com/show_bug.cgi?id=1209353 ==> ./curl/.rb.notes <== => https://github.com/curl/curl/pull/7512 FTBFS-2030 https://github.com/curl/curl/pull/3443 FTBFS-2028 ==> ./docker-buildx/.rb.notes <== go1.19 toolchain parallelism ==> ./fs-uae-launcher/.rb.notes <== python310 toolchain pyc ASLR/readdir ==> ./golangci-lint/.rb.notes <== => SR 1073618 date 17fdb90 6c64092d 636f6d70 696c6572 3d67630a ld.-compiler=gc. ==> ./guestfs-tools/.rb.notes <== => SR 1072597 minor gzip mtime ./RPMS/usr/share/doc/packages/guestfs-tools/example-debian.xml.gz ==> ./kanku/.rb.notes <== date /etc/bash_completion.d/kanku.sh differs (Bourne-Again shell script, ASCII text executable) ==> ./kubernetes1.24/.rb.notes <== = https://github.com/kubernetes/kubernetes/issues/110928 random tmpdir unknown/random ==> ./kubescape/.rb.notes <== go1.19 toolchain parallelism 1-bit entropy ==> ./lwjgl3/.rb.notes <== xmvn random uuid ==> ./memcached/.rb.notes <== => https://github.com/memcached/memcached/pull/927 FTBFS-2038 #=> https://github.com/memcached/memcached/pull/934 split ==> ./perf/.rb.notes <== => https://lore.kernel.org/linux-perf-users/20230320201841.1133-1-bwiedemann@s… = https://bugzilla.opensuse.org/show_bug.cgi?id=1180882 ==> ./perl-Date-Calc/.rb.notes <== => SR 1072525 FTBFS-2038 = https://rt.cpan.org/Public/Bug/Display.html?id=102495 FTBFS-2038 ==> ./policycoreutils/.rb.notes <== python310 pyc toolchain => https://github.com/SELinuxProject/selinux/pull/268 toolchain, date ==> ./pw3270/.rb.notes <== => SR 1074457 => https://github.com/PerryWerneck/pw3270/pull/50 date ==> ./python-azure-mgmt-datashare/.rb.notes <== python310 toolchain pyc ==> ./python-blosc2/.rb.notes <== FTBFS-j1 osc build --vm-type=kvm -j1 --clean --noservice standard ==> ./python-cx_Freeze/.rb.notes <== => https://github.com/marcelotduarte/cx_Freeze/pull/1860 FTBFS-2038 --build-opt=--vm-custom-opt=-rtc base=2038-01-25T00:00:00 failed ==> ./python-fsspec/.rb.notes <== python310 pyc toolchain ASLR ==> ./python-gpstime/.rb.notes <== FTBFS-2023-06-28 found range good=1687910021 bad=1687911946 (2023-06-28T00:25:46) ==> ./python-hotdoc/.rb.notes <== python3.10 toolchain pyc ASLR ==> ./python-limnoria/.rb.notes <== date+time => https://github.com/ProgVal/Limnoria/pull/1338 +++ new//usr/lib/python3.6/site-packages/supybot/version.py 2018-05-10 12:00:00.000000000 +0000 ==> ./python-logreduce/.rb.notes <== python3.10 toolchain pyc ALSR ==> ./python-pexpect/.rb.notes <== = flaky test https://github.com/pexpect/pexpect/issues/749 1 test fails with -j2 - wrote email to Jeff Quast <contact(a)jeffquast.com> ==> ./python-pycryptodome/.rb.notes <== python310 toolchain pyc ==> ./python-setuptools-git-versioning/.rb.notes <== flaky test [ 825s] FAILED tests/test_integration/test_version_file.py::test_version_file_dirty[create_setup_py-True-None-1.0.0.post{ccount}+git.{sha}.dirty] ==> ./rage-encryption/.rb.notes <== rust/llvm asm diff from unknown source ==> ./rnp/.rb.notes <== = https://github.com/rnpgp/rnp/issues/1961 FTBFS-2024-01-19 from src/lib/sec_profile.cpp SHA-1 depecation osc build --vm-type=kvm --noservice --clean --build-opt=--vm-custom-opt="-rtc base=2024-01-19T12:00:00" standard ==> ./rsign2/.rb.notes <== rpm %{?_smp_mflags} embedded in .src.rpm does not build without /dev/random ==> ./sonic-pi/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1208969 FTBFS-2038 from app/server/beam/tau/test/erlang_tau_osc_test.exs ErlangTauOSCTest ==> ./spack/.rb.notes <== => https://github.com/spack/spack/pull/36064 parallelism => https://github.com/spack/spack/pull/20629 parallelism ==> ./swipl/.rb.notes <== date;FTBFS-2029 swipl found range good=1867791402 bad=1867793326 (2029-03-09T23:28:46) ==> ./tesseract-ocr/.rb.notes <== = https://github.com/tesseract-ocr/tesseract/issues/4030 -march=native => https://github.com/tesseract-ocr/tesseract/pull/3864 ==> ./woodstox-core/.rb.notes <== xmvn maven timestamp from org.apache.felix.bundleplugin ; others? /usr/share/java/META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties differs (ASCII text) ==> ./zlib/.rb.notes <== FTBFS-j1 osc build --noservice --vm-type=kvm -j1 --clean standard

1 0

New Tumbleweed snapshot 20230331 released!
by Dominique Leuenberger 01 Apr '23

01 Apr '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.3 -> 7.1.1.5) Mesa-demo (8.5.0 -> 9.0.0) SVT-AV1 container-selinux (2.198.0 -> 2.206.0) gegl (0.4.42 -> 0.4.44) gnome-characters gnome-weather libstorage-ng (4.5.88 -> 4.5.91) libupnp (1.14.15 -> 1.14.16) open-vm-tools (12.1.5 -> 12.2.0) perl-Image-ExifTool (12.58 -> 12.59) polkit python-numpy (1.24.1 -> 1.24.2) python-setuptools (65.6.3 -> 67.6.0) ruby3.2 (3.2.1 -> 3.2.2) shared-mime-info vulkan-loader (1.3.239.0 -> 1.3.243.0) vulkan-tools (1.3.239.0 -> 1.3.243.0) === Details === ==== ImageMagick ==== Version update (7.1.1.3 -> 7.1.1.5) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update to 7.1.1.5: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-5---2023-… ==== Mesa-demo ==== Version update (8.5.0 -> 9.0.0) Subpackages: Mesa-demo-egl Mesa-demo-es Mesa-demo-x - enabled osmesa and libdrm support - enabled vulkan support (first Vulkan demo: vkgears!) - Update to version 9.0.0 - supersedes n_install-more-egl-binaries.patch ==== SVT-AV1 ==== - Enable build on aarch64 ==== container-selinux ==== Version update (2.198.0 -> 2.206.0) - Update to version 2.206.0: * Allow unconfined domains to transition to container_runtime_t * Allow container domains to transition to install_t * Allow avirt_sandbox_domain to manage container_file_t types * Allow containers to watch sysfs_t directories * Allow spc_t to transption to rpm_script_t * Add support to new user_namespace access check * Smaller permission changes for container_init_t - Drop spc.patch, is now included ==== gegl ==== Version update (0.4.42 -> 0.4.44) Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Update to version 0.4.44: + This release fixes a crashing bug what is umasked by GLib 2.75.3 and newer. Never-allocated data were being passed to g_slice_free, in GeglBufferâs handling of copy-on-write tiles. + ctx: Updated vendored library from upstream. ==== gnome-characters ==== Subpackages: gnome-characters-lang gnome-shell-search-provider-gnome-characters - Replace noto-coloremoji-fonts with google-noto-coloremoji-fonts Recommends, font package was renamed. ==== gnome-weather ==== Subpackages: gnome-shell-search-provider-gnome-weather gnome-weather-lang - Add gnome-weather-BackgroundService-service-fails-to-start.patch: org.gnome.Weather.BackgroundService fails to start (bsc#1209391 glgo#GNOME/gnome-weather!132). ==== libstorage-ng ==== Version update (4.5.88 -> 4.5.91) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#922 - add PCIe as disk transport - 4.5.91 - merge gh#openSUSE/libstorage-ng#921 - fixed setting sysfs-name for partitions on nvme disks - 4.5.90 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.89 ==== libupnp ==== Version update (1.14.15 -> 1.14.16) Subpackages: libixml11 libupnp17 - Update to release 1.14.16 * Fix memory leak and ActionExAsync ==== open-vm-tools ==== Version update (12.1.5 -> 12.2.0) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.2.0 (build 21223074) (boo#1209128) - There are no new features in the open-vm-tools 12.2.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - Linux quiesced snapshots have been updated to avoid intermittent hangs of the vmtoolsd process. - Updated the guestOps to handle some edge cases when File_GetSize() fails or returns -1. - A number of Coverity reported issues have been addressed. - Detect the proto files for the containerd grpc client in alternate locations. Pull request #626 - FreeBSD: Support newer releases and code clean-up for earlier versions. Pull request #584 - Please refer to the release notes at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md - The granular changes that have gone into the 12.2.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ open-vm-tools/ChangeLog - Update detect-suse-location.patch to remove upstream accepted portion of the patch (jsc-PED-1344). ==== perl-Image-ExifTool ==== Version update (12.58 -> 12.59) Subpackages: exiftool perl-File-RandomAccess - Update to 12.59: * COMPATIBILITY WARNING: Changed the calculated ImageDataMD5 for JPEG images to include all data from the SOS to the EOI (including the SOS marker but not the EOI marker) * Added new -fileNUM option to load tags from alternate files * Added family 8 groups for accessing tags from alternate files * Added new XMP-et:OriginalImageMD5 tag for storing ImageDataMD5 value * Added verbose ImageDataMD5 message for JPEG files * Added a new Nikon LensID (thanks Warren Hatch) * Decode a new Olympus tag and improved decoding of another (thanks Herb) * Decode a couple of new PanasonicRaw tags * Decode image coordinates for a couple more VNT object types * Enhanced ImageDataMD5 to also support MRW, CR3, PNG, MOV/MP4 and RIFF-based files * Improved verbose messages when deleting NikonApp trailer * Patched to avoid structure warnings when copying tags from Nikon files containing NKSC metadata * Fixed %-C filename format code to work properly with the -fileOrder and - progress options * Fixed new ImageDataMD5 tag to work properly with PhaseOne IIQ files * Fixed potential ValueConv warning when reading LIF files * API Changes: - Added SetAlternateFile method ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0 - Change permissions for rules folders (bsc#1209282) ==== python-numpy ==== Version update (1.24.1 -> 1.24.2) - Add patch ignore-pkg_resources-deprecation.patch: * Ignore DeprecationWarning from pkg_resources. - update to 1.24.2: just bugfixes, see https://github.com/numpy/numpy/releases/tag/v1.24.2 for details ==== python-setuptools ==== Version update (65.6.3 -> 67.6.0) - Update to 67.6.0: * Deprecations + #3434: Added deprecation warning for pkg_resources.declare_namespace. * Breaking Changes + #3741: Removed patching of distutils._msvccompiler.gen_lib_options for compatibility with Numpy < 1.11.2 -- by :user:`mgorny` + #2497: Support for PEP 440 non-conforming versions has been removed. * Changes + #3804: Added caching for supported wheel tags. + #3846: Added pruning heuristics to PackageFinder based on exclude. + #3843: Although pkg_resources has been discouraged for use, some projects still consider pkg_resources viable for usage. This change makes it clear that pkg_resources should not be used, emitting a DeprecationWarning when imported. + #3809: Merge with distutils@8c3c3d29, including fix for sysconfig.get_python_inc() (pypa/distutils#178), fix for segfault on MinGW (pypa/distutils#196), and better has_function support (pypa/distutils#195, #3648). + #3795: Ensured that __file__ is an absolute path when executing setup.py as part of setuptools.build_meta. + #3685: Fix improper usage of deprecated/removed pkgutil APIs in Python 3.12+. + #3769: Replace 'appdirs' with 'platformdirs'. * Misc + #3838: Improved error messages for pyproject.toml validations. + #3839: Fixed pkg_resources errors caused when parsing metadata of packages that are already installed but do not conform with PEP 440. + #3823: Fixes egg_info code path triggered during integration with pip. + #3782: Fixed problem with file directive in tool.setuptools.dynamic when value is a simple string instead of list. ==== ruby3.2 ==== Version update (3.2.1 -> 3.2.2) Subpackages: libruby3_2-3_2 - update to 3.2.2 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756) https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/ https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-2-2-released/ - drop ruby-3.1.3-remove-timezone-test.patch solved differently upstream ==== shared-mime-info ==== Subpackages: shared-mime-info-lang - Filter out dependency on /usr/bin/pkg-config: this package is installed on basically all systems, but it also contains a .pc file. Splitting this into a -devel package seems not reasonable. ==== vulkan-loader ==== Version update (1.3.239.0 -> 1.3.243.0) - Update to release SDK-1.3.243.0 * Log when VK_LAYER_PATH is ignored * Implement VK_LUNARG_direct_driver_loading ==== vulkan-tools ==== Version update (1.3.239.0 -> 1.3.243.0) - Update to release SDK-1.3.243.0 * mockicd: Add Support for testing Ray Tracing * mockicd: Add Support for testing Video decoding * vulkaninfo: Dont enable Direct Driver Loading Ext

1 0

Re: So Leap is transitioning to a 16 variation?
by Andreas Vögele 01 Apr '23

01 Apr '23

Am 31.03.23 um 22:13 schrieb Lew Wolfgang: > On 3/31/23 12:28, Joe Salmeri wrote: >> >>> MicroOS comes with SELinux in enforcing mode and without AppArmor. >> >> Do you think that TW will transitioin to SELinux and stop using >> AppArmor ? > > I read a study years ago comparing SELinux and AppArmor. It basically said > that while SELinux is technically superior, it's very difficult to > configure. > AppArmor on the other hand was much easier to get right. The net effect > was that AppArmor gave superior performance in most cases due to the > problems getting SELinux configured correctly. AppArmor might become stackable: https://lwn.net/Articles/912775/ I switched to Fedora two years ago. I still use SELinux in permissive mode. Configuring SELinux is a full-time job. This message to the fedora-devel mailing list by Sam Varshavchik sums up the problems in Fedora: https://marc.info/?l=fedora-devel-list&m=163076934919588&w=2 The book "SELinux System Administration" by Sven Vermeulen is quite good. But I think that your time is better spent on securing and sandboxing software with systemd. See the manual pages systemd.exec(5) and systemd.resource-control(5) for details. The setroubleshootd, which helps you to adjust your systems, crashed from Fedora 34 to 36. It took Red Hat more than a year to fix the problem, which shows how much effort Red Hat puts into making SELinux usable.

1 0