August 2023 - openSUSE Factory - openSUSE Mailing Lists

ACTION NEEDED: Understanding the current mood and trends among our contributors
by Lubos Kocman 18 Aug '23

18 Aug '23

Hello openSUSE! In the past few weeks, a couple of different ideas have been proposed to define the future direction of the openSUSE Leap "successor" distribution. We've put together at the openSUSE ALP Leap Replacement Architecture meetings an informative survey to better understand the current mood and trends among our contributors and users. https://survey.opensuse.org/index.php?r=survey/index&sid=277484 We'd appreciate if get feedback from as many contributors as possible. ps. If you feel that you're both project as well as distribution contributor simply pick what you currently focus most at. Thank you very much in advance Best regards Lubos Kocman openSUSE Leap Release Manager

14 19

New package 'lite-xl-plugin-manager' for Factory
by Scott Bradnick 17 Aug '23

17 Aug '23

I'm requesting that editors/lite-xl-plugin-manager [1] be added to openSUSE:Factory. It makes managing colors and plugins for Lite-XL much easier than the point-in-time -colors,-plugins,-widgets packages I put together before it existed. https://github.com/lite-xl/lite-xl-plugin-manager `lpm` will query the associated repos under the lite-xl umbrella and install requested items on demand, for example: lpm repo update lpm plugin install gitstatus lpm color install dracula I've added Obsoletes tags to the lite-xl.spec so lite-xl[-colors,-plugins,- widgets] should be removed when the associated lite-xl update hits Tumbleweed. [1]: https://build.opensuse.org/package/show/editors/lite-xl-plugin-manager -- ~ Scott Bradnick | Windows Subsystem for Linux (WSL) Developer |- Tumbleweed: |-- Beelink SER6 Pro [AMD Rembrandt [Radeon 680M]] (x86_64) |-- Dell Precision 5540 [NVIDIA Quadro T1000] (x86_64) |-- IceWhale ZimaBoard 832 [Intel HD Graphics 500] (x86_64) |-- WinBook TW100 (x86_64) |- MicroOS: |-- O-DROID H2+ [UHD Graphics 600] (x86_64) https://keys.openpgp.org/ :: DBC5AA9A2D2BAEBC

1 0

systemd-boot support in Tumbleweed
by Ludwig Nussel 17 Aug '23

17 Aug '23

Hi! For those who might be interested in using systemd-boot with btrfs snapshots etc instead of grub, Tumbleweed is somewhat ready for that. Well, at least it works on my systems. Your mileage may vary. Don't use in production yet, it's WIP :-) Here are instructions how to convert an existing system to use systemd-boot: https://en.opensuse.org/Systemd-boot#Installation_with_full_BTRFS_snapshot_… cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH; GF: Ivo Totev, Andrew McDonald, Werner Knoblich; HRB 36809 (AG Nürnberg)

4 7

apache2-mod_perl broken
by Uwe Flechsig 17 Aug '23

17 Aug '23

Hello openSUSE, apache2-mod_perl is broken in TW after the perl upgrade to 5.38.0 a couple of days ago. Uwe

2 1

xrdp and sound
by Joe Salmeri 17 Aug '23

17 Aug '23

After Tumbleweed switched from pulseaudio to pipewire, remote desktop sessions ( XRDP ) no longer had sound because that support was based on pulseaudio. The developers have been working on a solution for quite a while now and it appears they have it working again using a new module. https://github.com/matt335672/pipewire-module-xrdp Can we get this new module included in TW ? Thanks! -- Regards, Joe

8 19

New Tumbleweed snapshot 20230816 released!
by Dominique Leuenberger 17 Aug '23

17 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: man (2.10.2 -> 2.11.2) mc (4.8.29 -> 4.8.30) ncurses (6.4.20230715 -> 6.4.20230812) perl-LWP-Protocol-https (6.10 -> 6.110.0) procps python-immutables python-pycups speech-dispatcher (0.11.4 -> 0.11.5) suse-module-tools (16.0.32 -> 16.0.33) yast2-installation (4.6.6 -> 4.6.7) === Details === ==== man ==== Version update (2.10.2 -> 2.11.2) - Update to 2.11.2: * Fix compile and test failures when `troff` is not `groff`. * Fix segfault in typical uses of `man` when `nroff` is not installed. * Fix crash in `mandb` when processing stray cats. * SECURITY: Replace `$` characters in page names with `?` when constructing `less` prompts. * Silence error message when processing an empty manual page hierarchy with a nonexistent cache directory. * `man(1)` now sorts whatis references below real pages, even if the whatis references are from a section with higher priority. * `mandb` now correctly records filters in the database if it uses cached whatis information. * Upgrade Gnulib, fixing syntax error on glibc systems with GCC 11. * The `CATWIDTH` configuration file directive now overrides `MINCATWIDTH` and `MAXCATWIDTH`. * Database entries for links were often incorrectly stored as if they were entries for the ultimate source of the page. They are now stored with the correct type. * Store links in the database using the section and extension of the link rather than of the ultimate source file. * Consider pages for adding to the database even if they seem to already exist; this performance optimization is no longer needed due to caching, and it produced inconsistent results in some unusual cases. * `man` now runs any required preprocessors in the same order that `groff` does, rather than trusting the order of filters in a page's preprocessor string. * Fix building on MinGW. (I haven't been able to test this; help from MinGW experts would be welcome.) Improvements: * Check for stray cats even if no manual pages in a given manpath were changed. * Add section `3type` to the default section list just after `2`. This is used by the Linux man-pages package. * Recognize more Hungarian translations of the `NAME` section. * Add more recognized case variants for localized versions of the `NAME` section. * Maintain multi keys in sorted order, improving database reproducibility. * Pick a more consistent name for the target of a whatis entry in the database. * Extend rules for when to replace one database entry with another, producing more stable behaviour. * Fully reorganize databases after writing them, allowing the reproduction of bitwise-identical databases regardless of scan order (at least with GDBM). - Port patches * man-db-2.6.3-chinese.dif * man-db-2.6.3-listall.dif * man-db-2.7.1-zio.dif * man-db-2.9.4-alternitive.dif * man-db-2.9.4-no-chown.patch * man-db-2.9.4.patch * man-propose-online.patch ==== mc ==== Version update (4.8.29 -> 4.8.30) Subpackages: mc-lang - Update to 4.8.30 - Core * Support PCRE2 as search engine (via ----with-search-engine=pcre2) (#4450) * Implement panelization buffers for both file panels (#4370) - VFS * tar: support extended headers (including long file names and sparse files) (#1952, #2201) * extfs helpers: replace "perl -w" with "use warnings" (MidnightCommander/mc#174) * extfs/patchfs: be more specific in error message (#4485) - Editor * Add syntax highlighting: - Jenkinsfiles (#4469) - B language (#4470) * Improve syntax highlighting: - ECMAScript (MidnightCommander/mc#172) - ECMAScript in TypeScript (MidnightCommander/mc#172) - use diff syntax highlighting for git commit messages (COMMIT_EDITMSG) (MidnightCommander/mc#85) - Misc * Code cleanup (#4426, #4438) * Filehighlight: - recognize vsix files as zip files (MidnightCommander/mc#171) * Skin updates: - julia256 (#4441, #4445) - Fixes * Usage of 'sed' in build system/makefiles is not portable (#4459, #4466) * Unportable '$<' in Makefiles (#4460) * FTBFS if ncurses used without --with-ncurses-includes= configure parameter (#4462) * Ncurses library is duplicated in MCLIBS (#4463, #4465) * FTBFS without ext2fs attributes support (#4464) * Wrong sort order after swapping panels (#4432) * Incorrect time delimiter in the copy/move progress window (#4437) * Incorrect redraw of overlapped file panels (#4408) * Subshell/Command line prompt is empty/missing (#3121) * Find file: relative ignore directory is applied to the start search directory (#4235) * Diff viewer: options are not applied on second run (#4486) * mc.ext.ini: 'Edit' command from 'Default' section is ignored (#4434) * mc.ext.ini: .md files are not recognized as Markdown ones by extension (#4444) * mcedit: off-by-one error in paragraph formatting (#4446) * ftp: incomplete file listing: block and character devices, pipes, sockets are missed (#4472) * Various typos in the source code (MidnightCommander/mc#177, MidnightCommander/mc#178) ==== ncurses ==== Version update (6.4.20230715 -> 6.4.20230812) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230812 + add/use putty+cursor to reflect amending of modified cursor-keys in 2021 -TD + add ecma+strikeout to putty -TD + add functions to query tty-flags in SCREEN (request by Bill Gray). - Add ncurses patch 20230805 + fix a few manpages needing tbl marker, seen by lintian warning. + fixes for compiler-warnings. + minor grammatical fix for manpages (Branden Robinson). - Add ncurses patch 20230729 + improve manpages for wgetnstr() and wget_wnstr(). + modify MinGW configuration to provide for running in MSYS/MSYS2 shells, assuming ConPTY support (patch by Pavel Fedin). + add assignment in CF_MAN_PAGES to fill in value for TERMINFO_DIRS in ncurses, terminfo and tic manpages (patch by Sven Joachim). - Add ncurses patch 20230722 + add "auto" default for --with-xterm-kbs configure option. ==== perl-LWP-Protocol-https ==== Version update (6.10 -> 6.110.0) - Remove CVE-2014-3230.patch, upstream was fixed. CVE-2014-3230, Debian #746576 - Update LWP-Protocol-https-6.09-systemca.diff - updated to 6.11 see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes 6.11 2023-07-09 15:10:30Z - Remove Authority section from dist.ini (GH#64) (Olaf Alders) - Add very basic diagnostic information via test (GH#73) (Olaf Alders) - CVE-2014-3230 - don't disable verification if only hostnames should not (GH#14) (Steffen Ullrich) - Make explicit requirement of Mozilla::CA obsolete (GH#72) (Steffen Ullrich and Olaf Alders) - Remove _in_san and _cn_match. Empty out the _check_sock hook (GH#71) (Chase Whitener) - Use warnings (GH#69) (Pete Houston) ==== procps ==== Subpackages: libprocps8 procps-lang - Add patch CVE-2023-4016.patch * CVE-2023-4016: ps buffer overflow (bsc#1214290) ==== python-immutables ==== - add python312.patch to fix build with python 3.12 ==== python-pycups ==== - build as wheel ==== speech-dispatcher ==== Version update (0.11.4 -> 0.11.5) Subpackages: libspeechd2 python3-speechd - Update to version 0.11.5: * Update CLDR to version 43 and symbols from NVDA. * Fix parsing and emitting space character. * Reduce espeak buffer size to avoid ssml issues. * Add --disable-doc. * Fix spd-conf not being able to set the default module. * Fix pausing without index. ==== suse-module-tools ==== Version update (16.0.32 -> 16.0.33) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.33: * change wording in filesystem blacklist files (gh#openSUSE/suse-module-tools#71) * rpm-script: update bootloader after creating initramfs (boo#1213822) * usrmerge: Drop support for non-usrmerged (boo#1206798) ==== yast2-installation ==== Version update (4.6.6 -> 4.6.7) - Require awk for use in startup scripts (bsc#1214277) - 4.6.7

1 0

New Tumbleweed snapshot 20230813 installs python 3.10 again
by Axel Braun 17 Aug '23

17 Aug '23

Hi, current TW snapshot seems to be a large one again. Strange enough, I had python 3.10 removed from my system weeks ago, and now the latest snapshot wants to install this again. Any indication why? Thx Axel

13 28

Should programs that don't require root permission move out of /usr/sbin?
by xtexChooser＠duck.com 17 Aug '23

17 Aug '23

Hello, Recently, I noticed that the `getcap` program in the `libcap-progs` package is packaged into `/usr/sbin/` directory. However, this program works without root permission. Is this an expected behaviour? or should it be moved? Thanks. -- -- xtex

5 7

New Tumbleweed snapshot 20230815 released!
by Dominique Leuenberger 16 Aug '23

16 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.4.0~git18.37ec5cd -> 2.4.0~git74.4297d88) bluez busybox-links ca-certificates-mozilla (2.60 -> 2.62) gdm gnome-disk-utility gtk3 gtk4 (4.10.5 -> 4.12.0) kmod mozjs102 (102.12.0 -> 102.14.0) ndctl (76 -> 78) postgresql15 (15.3 -> 15.4) python-M2Crypto python-PyYAML (6.0 -> 6.0.1) python-alembic (1.11.1 -> 1.11.2) python-cryptography (41.0.2 -> 41.0.3) python-gevent (22.10.2 -> 23.7.0) python-lxml (4.9.2 -> 4.9.3) python-typing_extensions (4.5.0 -> 4.7.1) w3m yast2-trans (84.87.20230729.64eca7e0a1 -> 84.87.20230811.13616e3be9) === Details === ==== 389-ds ==== Version update (2.4.0~git18.37ec5cd -> 2.4.0~git74.4297d88) Subpackages: lib389 libsvrcore0 - Update to version 2.4.0~git74.4297d88: * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897) * Issue i5846 - Crash when lmdb import is aborted (#5881) * Issue 5894 - lmdb import error fails with Could not store the entry (#5895) * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891) * Issue 5082 - slugify: ModuleNotFoundError when running test cases - Update to version 2.4.0~git69.89c2de5: * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888) * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866) * Issue 5872 - part 2 - fix is_dbi regression (#5887) * Issue 4758 - Add tests for WebUI * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849) * Issue 5883 - Remove connection mutex contention risk on autobind (#5886) * Issue 5872 - `dbscan()` in lib389 can return bytes * Bump version to 2.4.3 * Issue 5729 - Memory leak in factory_create_extension (#5814) * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871) ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log: (jsc#PED-5599) - The avrcp-Fix-crash-while-handling-unsupported-events.patch be merged to bluez-5.67 since 2023. (bsc#1210398)(CVE-2023-27349) ==== busybox-links ==== Subpackages: busybox-bzip2 busybox-coreutils busybox-ed busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-misc busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-which busybox-xz - Check in filelists instead of buildrequiring all non-busybox utils ==== ca-certificates-mozilla ==== Version update (2.60 -> 2.62) - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248) Added: - Atos TrustedRoot Root CA ECC G2 2020 - Atos TrustedRoot Root CA ECC TLS 2021 - Atos TrustedRoot Root CA RSA G2 2020 - Atos TrustedRoot Root CA RSA TLS 2021 - BJCA Global Root CA1 - BJCA Global Root CA2 - LAWtrust Root CA2 (4096) - Sectigo Public Email Protection Root E46 - Sectigo Public Email Protection Root R46 - Sectigo Public Server Authentication Root E46 - Sectigo Public Server Authentication Root R46 - SSL.com Client ECC Root CA 2022 - SSL.com Client RSA Root CA 2022 - SSL.com TLS ECC Root CA 2022 - SSL.com TLS RSA Root CA 2022 Removed CAs: - Chambers of Commerce Root - E-Tugra Certification Authority - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. ==== gnome-disk-utility ==== Subpackages: gnome-disk-utility-lang - Support build environments like SLE 15 SP5 and Leap 15.5 which had %{_distconfdir) not defined yet. ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. ==== gtk4 ==== Version update (4.10.5 -> 4.12.0) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.0: + List widgets: Add scroll_to APIs + GtkFileLauncher: Add an always-ask property + GtkTextView: Make backspace behavior match GtkEntry + gsk: Fix handling of luminance in mask nodes + Text rendering: Automate the setting of gtk-hint-font-metrics from the scale factor. This improves font rendering in flatpaks + Wayland: - Fix behavior of stylus buttons - Support suspended window state + Vulkan: Many improvements + Tools: Add gtk4-rendernode-tool + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag + Build: Some build options have been renamed: - gtk_doc -> documentation - update_screenshots -> screenshots - The old names still work + Updated translations. - Update option passed to meson following upstream changes. - Update to version 4.11.4: + GtkFileChooser: - Default to sorting folders first - Fix a crash when visiting recent files + GtkTextView: Fix corner cases in word navigation + GtkMenuButton: Normalize label layout + GtkDropDown: Add support for sections + GtkVideo: Make the overlay icon clickable + GtkWindow: Clear the resize cursors to avoid artifacts + GtkFileDialog: Always set initial-folder + GtkDropDown: Update on expression changes + GtkMapListModel: Implement GtkSectionModel + Accessibility: - Improvements all over the place: GtkButton, GtkPasswordEntry, GtkFontChooserDialog, GtkColorChooserDialog, GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog, GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher, GtkMediaControls, GtkColorDialogButton, GtkDropDown, GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton - Make name computation follow the ARIA spec more closely - Adapt name computation for the common 'nested button' scenario - Change many containers to use `generic` instead of `group` - Use `generic` as the default role - Use `application` instead of `window` for windows - Add properties for accessible names of not directly exposed widgets in GtkListView, GtkGridView and GtkColumnView + DND: Fix criticals when drops are rejected + X11: Fix regressions in GLX setup + Windows: Center newly created transient windows + Vulkan: - Add antialising for gradients - Do less work on clipped away nodes - Redo image uploading - Support different image depths and formats - Add a pipeline cache + Demos: - gtk4-demo: Improve window sizing - gtk4-demo: Improve focus behavior - gtk4-demo: Add many missing a11y properties + Tools: gtk4-builder-tool: Make render an alias screenshot + Inspector: - Show more information in the a11y tab - Add an accessibility overlay with warnings and recommendations - Limit the width of the a11y tab + Build: - Require GLib 2.76 - Make asan builds work again - Fix the build if ld is not ld.bdf + Updated translations. ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Remove compatibility patches, add README.usrmerge (boo#1212835). * Delete Provide-fallback-for-successfully-running-make-modules_install.patch * Delete compat-module_directory-module_prefix.patch ==== mozjs102 ==== Version update (102.12.0 -> 102.14.0) - Update to version 102.14.0: + Various security fixes and other quality improvements. + CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions. + CVE-2023-4046: Incorrect value used during WASM compilation. + CVE-2023-4047: Potential permissions request bypass via clickjacking. + CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions. + CVE-2023-4049: Fix potential race conditions when releasing platform objects. + CVE-2023-4050: Stack buffer overflow in StorageManager. + CVE-2023-4054: Lack of warning when opening appref-ms files. + CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state. + CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14. - Changes from version 102.13.0: + Various security fixes and other quality improvements. + CVE-2023-37201: Use-after-free in WebRTC certificate generation + CVE-2023-37202: Potential use-after-free from compartment mismatch in SpiderMonkey + CVE-2023-37207: Fullscreen notification obscured + CVE-2023-37208: Lack of warning when opening Diagcab files + CVE-2023-37211: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 ==== ndctl ==== Version update (76 -> 78) - Update to version 78 * Improved CXL support (jsc#PED-5804, jsc#PED-6162) - Remove upstreamed patches - cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch - cxl-event-trace-use-the-wrapped-util_json_new_u64.patch ==== postgresql15 ==== Version update (15.3 -> 15.4) Subpackages: libpq5 postgresql15-contrib postgresql15-server - Update to 15.4: * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or owner name into an extension script if the name contains a quote, backslash, or dollar sign. * bsc#1214061, CVE-2023-39418: Fix MERGE to enforce row security policies properly. * https://www.postgresql.org/docs/15/release-15-4.html - Restore the independence of mini builds from the main build after the -mini name change from April 4, 2023. - Adjust icu handling to prepare for PostgreSQL 16. - Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. - Change the unix domain socket location from /var/run to /run. ==== python-M2Crypto ==== - Make tests running again. ==== python-PyYAML ==== Version update (6.0 -> 6.0.1) - update to 6.0.1: * pin Cython to < 3.0 ==== python-alembic ==== Version update (1.11.1 -> 1.11.2) - update to 1.11.2: * Added typing to the default script mako templates. * Added support in autogenerate for NULLS NOT DISTINCT in * the PostgreSQL dialect. * Fixed format string logged when running a post write hook * Added parameters if_exists and if_not_exists for index operations. ==== python-cryptography ==== Version update (41.0.2 -> 41.0.3) - update to 41.0.3: * Fixed performance regression loading DH public keys. * Fixed a memory leak when using * :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20 Poly1305`. ==== python-gevent ==== Version update (22.10.2 -> 23.7.0) - update to 23.7.0: * Add preliminary support for Python 3.12, using greenlet 3.0a1. * Update the bundled c-ares version to 1.19.1. * Fix an edge case connecting a non-blocking ``SSLSocket`` that could result in an AttributeError. In a change to match the standard library, calling ``sock.connect_ex()`` on a subclass of ``socket`` no longer calls the subclass's ``connect`` method. * Make gevent's ``FileObjectThread`` (mostly used on Windows) implement ``readinto`` cooperatively. * Work around an ``AttributeError`` during cyclic garbage collection when Python finalizers (``__del__`` and the like) attempt to use gevent APIs. This is not a recommended practice, and it is unclear if catching this ``AttributeError`` will fix any problems or just shift them. * Remove support for obsolete Python versions. This is everything prior to 3.8. * Stop using ``pkg_resources`` to find entry points (plugins). Instead, use ``importlib.metadata``. * Honor ``sys.unraisablehook`` when a callback function produces an exception, and handling the exception in the hub * also* produces an exception. - drop skip-tests-in-leap.patch handle-python-ssl-changes.patch (obsolete) ==== python-lxml ==== Version update (4.9.2 -> 4.9.3) - update to 4.9.3: * ``lxml.objectify`` accepted non-decimal numbers like ``Â²Â²Â²`` as integers. * A memory leak in ``lxml.html.clean`` was resolved by switching to Cython 0.29.34+. * GH#348: URL checking in the HTML cleaner was improved. * GH#371, GH#373: Some regex strings were changed to raw strings to fix Python warnings. * Built with Cython 0.29.36 to adapt to changes in Python 3.12. ==== python-typing_extensions ==== Version update (4.5.0 -> 4.7.1) - update to version 4.7.1: - Fix support for `TypedDict`, `NamedTuple` and `is_protocol` on PyPy-3.7 and PyPy-3.8. Patch by Alex Waygood. Note that PyPy-3.7 and PyPy-3.8 are unsupported by the PyPy project. The next feature release of typing-extensions will drop support for PyPy-3.7 and may also drop support for PyPy-3.8. - update to version 4.7.0: - This is expected to be the last feature release supporting Python 3.7, which reaches its end of life on June 27, 2023. Version 4.8.0 will support only Python 3.8.0 and up. - Fix bug where a `typing_extensions.Protocol` class that had one or more non-callable members would raise `TypeError` when `issubclass()` was called against it, even if it defined a custom `__subclasshook__` method. The correct behaviour -- which has now been restored -- is not to raise `TypeError` in these situations if a custom `__subclasshook__` method is defined. Patch by Alex Waygood (backporting https://github.com/python/cpython/pull/105976). - update to version 4.7.0rc1: - Add `typing_extensions.get_protocol_members` and `typing_extensions.is_protocol` (backport of CPython PR #104878). Patch by Jelle Zijlstra. - `typing_extensions` now re-exports all names in the standard library's `typing` module, except the deprecated `ByteString`. Patch by Jelle Zijlstra. - Due to changes in the implementation of `typing_extensions.Protocol`, `typing.runtime_checkable` can now be used on `typing_extensions.Protocol` (previously, users had to use `typing_extensions.runtime_checkable` if they were using `typing_extensions.Protocol`). - Align the implementation of `TypedDict` with the implementation in the standard library on Python 3.9 and higher. `typing_extensions.TypedDict` is now a function instead of a class. The private functions `_check_fails`, `_dict_new`, and `_typeddict_new` have been removed. `is_typeddict` now returns `False` when called with `TypedDict` itself as the argument. Patch by Jelle Zijlstra. - Declare support for Python 3.12. Patch by Jelle Zijlstra. - Fix tests on Python 3.13, which removes support for creating `TypedDict` classes through the keyword-argument syntax. Patch by Jelle Zijlstra. - Fix a regression introduced in v4.6.3 that meant that ``issubclass(object, typing_extensions.Protocol)`` would erroneously raise ``TypeError``. Patch by Alex Waygood (backporting the CPython PR https://github.com/python/cpython/pull/105239). - Allow `Protocol` classes to inherit from `typing_extensions.Buffer` or `collections.abc.Buffer`. Patch by Alex Waygood (backporting https://github.com/python/cpython/pull/104827, by Jelle Zijlstra). - Allow classes to inherit from both `typing.Protocol` and `typing_extensions.Protocol` simultaneously. Since v4.6.0, this caused `TypeError` to be raised due to a metaclass conflict. Patch by Alex Waygood. - Backport several deprecations from CPython relating to unusual ways to create `TypedDict`s and `NamedTuple`s. CPython PRs #105609 and #105780 by Alex Waygood; `typing_extensions` backport by Jelle Zijlstra. - Creating a `NamedTuple` using the functional syntax with keyword arguments (`NT = NamedTuple("NT", a=int)`) is now deprecated. - Creating a `NamedTuple` with zero fields using the syntax `NT = NamedTuple("NT")` or `NT = NamedTuple("NT", None)` is now deprecated. - Creating a `TypedDict` with zero fields using the syntax `TD = TypedDict("TD")` or `TD = TypedDict("TD", None)` is now deprecated. - Fix bug on Python 3.7 where a protocol `X` that had a member `a` would not be considered an implicit subclass of an unrelated protocol `Y` that only has a member `a`. Where the members of `X` are a superset of the members of `Y`, `X` should always be considered a subclass of `Y` iff `Y` is a runtime-checkable protocol that only has callable members. Patch by Alex Waygood (backporting CPython PR https://github.com/python/cpython/pull/105835). - update to version 4.6.3 (June 1, 2023) - Fix a regression introduced in v4.6.0 in the implementation of runtime-checkable protocols. The regression meant that doing `class Foo(X, typing_extensions.Protocol)`, where `X` was a class that had `abc.ABCMeta` as its metaclass, would then cause subsequent `isinstance(1, X)` calls to erroneously raise `TypeError`. Patch by Alex Waygood (backporting the CPython PR https://github.com/python/cpython/pull/105152). - Sync the repository's LICENSE file with that of CPython. `typing_extensions` is distributed under the same license as CPython itself. - Skip a problematic test on Python 3.12.0b1. The test fails on 3.12.0b1 due to a bug in CPython, which will be fixed in 3.12.0b2. The `typing_extensions` test suite now passes on 3.12.0b1. - update to version 4.6.2: - Fix use of `@deprecated` on classes with `__new__` but no `__init__`. Patch by Jelle Zijlstra. - Fix regression in version 4.6.1 where comparing a generic class against a runtime-checkable protocol using `isinstance()` would cause `AttributeError` to be raised if using Python 3.7. - update to version 4.6.1: - Change deprecated `@runtime` to formal API `@runtime_checkable` in the error message. Patch by Xuehai Pan. - Fix regression in 4.6.0 where attempting to define a `Protocol` that was generic over a `ParamSpec` or a `TypeVarTuple` would cause `TypeError` to be raised. Patch by Alex Waygood. - update to version 4.6.0: - `typing_extensions` is now documented at https://typing-extensions.readthedocs.io/en/latest/. Patch by Jelle Zijlstra. - Add `typing_extensions.Buffer`, a marker class for buffer types, as proposed by PEP 688. Equivalent to `collections.abc.Buffer` in Python 3.12. Patch by Jelle Zijlstra. - Backport two CPython PRs fixing various issues with `typing.Literal`: https://github.com/python/cpython/pull/23294 and https://github.com/python/cpython/pull/23383. Both CPython PRs were originally by Yurii Karabas, and both were backported to Python >=3.9.1, but ... changelog too long, skipping 69 lines ... https://github.com/python/cpython/pull/104048). Patch by Alex Waygood. ==== w3m ==== - CVE-2023-38253: out-of-bounds read in growbuf_to_Str() at w3m/indep.c (bsc#1213323) - CVE-2023-38252 out-of-bounds read in Strnew_size() at w3m/Str.c (bsc#1213324) - add 0001-Fix-OOB-access-due-to-multiple-backspaces.patch ==== yast2-trans ==== Version update (84.87.20230729.64eca7e0a1 -> 84.87.20230811.13616e3be9) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230811.13616e3be9: * Translated using Weblate (Georgian) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * New POT for text domain 'users'. * New POT for text domain 'storage'. * New POT for text domain 'sap-installation-wizard'. * New POT for text domain 'qt-pkg'. * New POT for text domain 'qt'. * New POT for text domain 'pam'. * New POT for text domain 'ncurses'. * New POT for text domain 'migration_sle'. * New POT for text domain 'kdump'. * New POT for text domain 'installation'. * New POT for text domain 'control'.

1 0

openSUSE Release Engineering meeting 16.08.2023
by Lubos Kocman 16 Aug '23

16 Aug '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar, lkocman, Sarah, Ana, ddemaio, wengel, Richard ## Leap lkocman is on vacation on Thursday The Leap replacement survey for contributors is open till 31st Aug https://survey.opensuse.org/ All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features 15.6 the second build is already in openQA, first build had beta identification issues https://openqa.opensuse.org/group_overview/50 openSUSE-repos Discussion regarding slow fetch of repodata via http were resolved issues with duplicate service repo entries in zypper workaround: https://bugzilla.suse.com/show_bug.cgi?id=1214135 https://github.com/openSUSE/openSUSE-repos/pull/36 LeapMicro 5.5 pending openqa setup https://github.com/os-autoinst/openqa-trigger-from-obs/pull/223 15.6 heads up for the packman team to ensure they're aware of the 15.6 roadmap https://code.opensuse.org/leap/features/issue/118 It is ready for download since a few weeks: https://ftp.fau.de/packman/suse/ ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 63 failed 3 unresolvable (last week: 46 failed, 4 unresolvable) https://tinyurl.com/ysy4nnnz * glibc 2.38 was checked in for snapshot 0812; That snapshot was built using rebuild=direct (resulting in a larger snapshot); things take care of the new glibc features if applicable * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 ## Richard (Aeon) Richard's been needing to focus on SUSE ALP topics more than Aeon Not much news this week, more fun with systemd-homed; trying to find a route to making it the default lkocman: If this would be a success we should definitely talk to SUSE IT, to consider home-encryption only as acceptable. As of now it's only FDE on Linux. New aeon-check concept being discussed https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts ## Richard (ALP Architecture) No progress, waiting for the results of the poll https://etherpad.opensuse.org/p/alp-poll ## Max Not available * newer re2 was in, re2-10 got accepted to Backports as well after newer re2, as providing the backward compatibility to build qtwebengine and chromium * s390x build is still a problem, I disabled s390x build in Backports and did a package-groups adjustment to decrease required packages on s390x dvd in order to get a snapshot for testing * openqa jobgroups and sync setup is pending until we have a complete snapshot Wolfgang: LinuxOne was moved to PRG datacenter but it's not yet running. And the current machine in NUE can't keep up with the load. (Technically the LinuxOne is running but it only can be used when the production buildservice OBS/IBS from Nuernberg is switched to Prague. No cross-location support in buildservice yet ;) ) Adrian believes that the situation will be solved until end of the month. For time being we'll have to skip the architecture. "There is a light". Wolfgang: Storage is already there (LinuxOne was upgraded before the move). Max: we could use increased priority for Backport-15-SP6 and openSUSE:Leap:15.6 ## Guillaume - Arm Not available Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - A fix is available in master branch of GCC and need to be backported to GCC13 - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server Note: I will miss all next meetings in August. See you in September. ## Sarah - s390x Tumbleweed * no new releases because of missing build nodes for building -> data center move required. Wolfgang: the date of the final move is unfortunatelly not fixed yet. Physical installation issues such as network installation, and IBS/OBS setup in PRG. Definitely not before August. Leap: * running Enablement topics: * MPI is enabled for LLVM (IBMer has forgotten his enablement stuff on the PC) * luajit enablement for s390x available as PR patches (result of Linux Foundation mentorship) -> next step: integration into our packages 1) https://github.com/LuaJIT/LuaJIT/pull/891 2) https://github.com/LuaJIT/LuaJIT/pull/855 ## Doug * Created form template for code.o.o./coc https://code.opensuse.org/project/coc/new_issue * Project Clarity draft still needs some refinement * Background: Establishing a clear understanding of projects the are and are not part of the openSUSE Project * openSUSE.Asia Summit * Checking status of openSUSE.Asia Summit payment * Registrations 16, Submissions 18 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * storage * Returned some items in marketing storage area * Reengaged with facilities on them making a decision * GSoC * Final evaluations due by Sept. 4 by 18:00 UTC * mentors notified * One was extended Static * Checking on FOSDEM stand & devroom - Annoucements likely to come in September * Still need future storage location * AI topics (static) * Nothing new ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling finish Package Hub SLE-15-SP6 product setup this week on IBS to proceed with SCC and CDN availability we need to check orphaned packages that can be removed from Backports before publishing to CDN ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of August AC problems in Nüremberg with openQA servers Wolfgang: The current issue in Server room 1 (OBS/IBS is located there) is a failing A/C unit. We can keep the current number of workers to keep with the current load but we can't enable more workers. ## Open Floor

1 0

New Tumbleweed snapshot 20230814 released!
by Dominique Leuenberger 15 Aug '23

15 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-Pygments (2.15.1 -> 2.16.1) python-ldap === Details === ==== python-Pygments ==== Version update (2.15.1 -> 2.16.1) - update to version 2.16.1: * Fix native style missing from style list (#2484) - additional changes from version 2.16.0: * New lexers: + ASN.1 (#2462) + Blueprint (#2434) + BQN (#2472) + DNS zone files (#2464) + GraphQL (#2428) + Linux desktop files (following the specification of the Freedesktop group, formerly known as XDG) (#2470) + NVIDIA PTX (#2432) + OpenSCAD (#2449) + systemd (#2470) + TLS presentation language (#2455) + Verifpal (#2430) + YARA (#2453) * Updated lexers: + ASC: Add application/pem-certificate-chain mimetype (#2471) + C/C++: Refine keyword lists (#2421, #2422) + Carbon: Fix long processing times on invalid input, fix number lexing (#2454, #2456) + Elpi: Handle quotations (#2419) + Go: Support additional built-ins (#2481) + HTTP: Support empty headers (#2461), support more general methods (#2460), also recognize responses in analyse_text implementation (#2460), and highlight URL encoded data (#2465, #1620) + Igor Pro: Update to Igor Pro 9 (#2482) + lean: Recognize expressions nested within attributes (#1817) + Macaulay2: Update builtins (#2457) + Markdown: Allow extra characters after language name in code blocks (#2437) + NestedText: Update to version 3 (#2459) + scdoc: Improve language guessing implementation (#2402) + Spice: Update to latest version (#2476) + Transact SQL: Add Pre-sorted Group keyword (#2417) + Uxntal: Update for current runes (#2424) + Wikitext: Fix templates in wiki links; fix a language converter false positive; add bold italic markup (#2447) * Add Generic.EmphStrong token for bold italic markup (#2444) * Add Lightbulb style (#2474) * Improve contrast in Monokai style (#2448) * Add documentation how to create terminal code highlighting commands (#2131, #2425) * Add support for loading TrueType fonts to the ImageFormatter (#1960) ==== python-ldap ==== - Re-run source download due to file differences.

1 0

Re: [RFC] Switching to drop-in files (systemd)
by Patrick Schaaf 14 Aug '23

14 Aug '23

You wrote: > Does not look like journalctl can do it. I know that my override is working because it is for the max retention of the journal and the older logs are purged according to my schedule. Try this: systemd-analyze cat-config /etc/systemd/journald.conf best regards Patrick

2 1

New Tumbleweed snapshot 20230813 released!
by Dominique Leuenberger 14 Aug '23

14 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gdbm python-pexpect python-pyzmq (25.0.2 -> 25.1.1) rpm telepathy-logger === Details === ==== gdbm ==== Subpackages: gdbm-lang libgdbm6 libgdbm_compat4 - Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if run without arguments bsc1209583.patch ==== python-pexpect ==== - Fix failing test when no alias in bash is defined * add fix-fail-no-alias.patch ==== python-pyzmq ==== Version update (25.0.2 -> 25.1.1) - update to version 25.1.1: * Changes: + Allow Cython 0.29.35 to build Python 3.12 wheels (no longer require Cython 3) * Bugs fixed: + Fix builds on Solaris by including generated platform.hpp + Cleanup futures in Socket.poll() that are cancelled and never return + Fix builds with -j when numpy is present in the build env - update to version 25.1.0: * Enhancements: + Include address in error message when bind/connect fail. * Packaging changes: + Fix inclusion of some test files in source distributions. + Add Cython as a build-time dependency in build-system.requires metadata, following current recommendations of the Cython maintainers. We still ship generated Cython sources in source distributions, so it is not a strict dependency for packagers using --no-build-isolation, but pip will install Cython as part of building pyzmq from source. This makes it more likely that past pyzmq releases will install on future Python releases, which often require an update to Cython but not pyzmq itself. For Python 3.12, Cython >=3.0.0b3 is required. ==== rpm ==== Subpackages: librpmbuild9 - add remove-awk-dependency.patch to be able to drop awk dependency from containers ==== telepathy-logger ==== Subpackages: libtelepathy-logger3 typelib-1_0-TelepathyLogger-0_2 - Split the gsettings schema to a separate package + The telepathy-logger library has an hard dependency on the schema, and if it's missing (before this change it has been part of the telepathy-logger daemon) it will cause the loading application to crash. + The library does now require the schema package - Drop dangling %glib2_gsettings_schema_requires macro.

1 0

New Tumbleweed snapshot 20230812 released!
by Dominique Leuenberger 13 Aug '23

13 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick MozillaFirefox (115.0.3 -> 116.0.2) NetworkManager (1.42.8 -> 1.44.0) amavisd-new bluez (5.66 -> 5.68) catfish (4.16.4 -> 4.18.0) dcraw dracut (059+suse.488.g81715832 -> 059+suse.491.g87f19c22) glibc (2.37 -> 2.38) gspell (1.12.1 -> 1.12.2) java-11-openjdk libcloudproviders (0.3.1 -> 0.3.2) libgweather4 (4.2.0 -> 4.3.2) liborcus opensuse-welcome (0.1.9+git.0.66be0d8 -> 0.1.9+git.35.4b9444a) perl-Image-ExifTool (12.64 -> 12.65) signon (8.60 -> 8.61) systemd (253.7 -> 253.8) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - add strlcpy-wrong-sizing.patch: fix incorrect usages of strlcpy and strlcat detected by glibc 2.38's fortify ==== MozillaFirefox ==== Version update (115.0.3 -> 116.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 116.0.2 * fixes for other platforms - Fix OOM when linking on 32-bit - Mozilla Firefox 116.0.1 * fixes for other platforms - ship vaapitest binary for supported archs - re-enable ppc64le - ship v4l2test binary for supported archs - drop obsolete mozilla-bmo1775202.patch - Mozilla Firefox 116.0 * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/ MFSA 2023-29 (bsc#1213746) * CVE-2023-4045 (bmo#1833876) Offscreen Canvas could have bypassed cross-origin restrictions * CVE-2023-4046 (bmo#1837686) Incorrect value used during WASM compilation * CVE-2023-4047 (bmo#1839073) Potential permissions request bypass via clickjacking * CVE-2023-4048 (bmo#1841368) Crash in DOMParser due to out-of-memory conditions * CVE-2023-4049 (bmo#1842658) Fix potential race conditions when releasing platform objects * CVE-2023-4050 (bmo#1843038) Stack buffer overflow in StorageManager * CVE-2023-4051 (bmo#1821884) Full screen notification obscured by file open dialog * CVE-2023-4052 (bmo#1824420) File deletion and privilege escalation through Firefox uninstaller * CVE-2023-4053 (bmo#1839079) Full screen notification obscured by external program * CVE-2023-4054 (bmo#1840777) Lack of warning when opening appref-ms files * CVE-2023-4055 (bmo#1782561) Cookie jar overflow caused unexpected cookie jar state * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 * CVE-2023-4057 (bmo#1841682) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 * CVE-2023-4058 (bmo#1819160, bmo#1828024) Memory safety bugs fixed in Firefox 116 - require NSS 3.91 - remove obsolete mozilla-fix-top-level-asm.patch - re-enable LTO ==== NetworkManager ==== Version update (1.42.8 -> 1.44.0) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.44.0: + Introduce a new "link" setting that holds properties related to the kernel link such as "tx-queue-length", "gso-max-size", "gso-max-segments", "gro-max-size". + Support sending a DHCPv6 prefix delegation hint via the "ipv6.dhcp-pd-hint" connection property. + Support new bond options: "arp_missed_max", "lacp_active", "ns_ip6_target". + Add new "initial-eps-bearer-configure" and "initial-eps-bearer-apn" properties in the GSM setting. + Setting "connection.stable-id=default${CONNECTION}" changed behavior to be identical to the built-in default value when the stable-id is not set. + Add a "[keyfile].rename" option to NetworkManager.conf to force renaming profiles on disk when their name changes. + The ifcfg-rh plugin is deprecated; it will only receive bugfixes and no new features. A warning is emitted the log when a connection in ifcfg-rh format is found. + To automatically migrate existing ifcfg-rh connections to the keyfile format, a new configuration option "main.migrate-ifcfg-rh" is provided. Migration is disabled by default, but the default value can be changed at build time via "--with-config-migrate-ifcfg-rh-default=yes". + When configuring hostnames in non-public TLD (like "example.local"), use the TLD as default search domain instead of the full hostname. + Always apply DNS options from the [global-dns] configuration section + The NetworkManager daemon now acquires the D-Bus name only after populating the D-Bus tree. This can add a delay during startup but it is required to avoid race conditions with other services depending on NM. + Add a "version-id" argument to the Update2() D-Bus call to guard against concurrent modifications of profiles. + Don't use tentative IPv6 addresses to resolve the system hostname via DNS. + Track the number of autoconnect retries left for each device and connection. Previously it was tracked only per connection and this lead to unexpected behaviors in case of multiconnect profiles. + Set VLAN filtering options on bridge via netlink instead of sysfs. + nm-cloud-setup now supports IMDSv2 on Amazon EC2. + nmtui now allows to enable or disable Wi-Fi and WWAN radios. + Honor ignore-carrier=no for bond/bridge/team devices. + Add version mismatch warning when running nmcli commands. - Rebase patches with quilt. ==== amavisd-new ==== Subpackages: amavisd-new-docs - Package failed to rebuild on Perl version changes due to missing %{perl_requires} ==== bluez ==== Version update (5.66 -> 5.68) Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch be removed by Timo Jyrinki when updating to 5.68. I saw some reasons: - Upstream didn't take this patch: https://www.spinics.net/lists/linux-bluetooth/msg40136.html - Fedora also marked this patch in bluez.spec since bluez-5.68-2.fc39 https://src.fedoraproject.org/rpms/bluez/blob/2b133d795f4f823c8b22ef5a07569… We didn't put any bug number of this patch when it be introduced to bluez.spec since Nov 23, 2021. So, let's remove this patch unless upstream or Fedora add it back. - update to 5.68 * Fix issue with A2DP and handling of Transport.Acquire. * Fix issue with BAP and initiating QoS and Enable procedures. * Fix issue with BAP and detaching streams when PAC is removed. * Fix issue with BAP and reading all instances of PAC. * Fix issue with BAP and not being able to reconfigure. * Fix issue with BAP and transport configuration changes. * Fix issue with BAP and handling unexpected disconnect. * Fix issue with GATT and not removing pending services. * Fix issue with GATT and client ready handling. * Fix issue with handling fallback to transient hostname. * Add support for SecureConnections configuration option. * Add support for Mesh Remove Provisioning. * Add support for Mesh Private Beacons. - Remove patches that are not needed with the new upstream. ==== catfish ==== Version update (4.16.4 -> 4.18.0) Subpackages: catfish-lang - Update to version 4.18.0 * Filters: Add Archives, Other, update Apps * Use Gio to open files, fix "no default app" issue * Add symlink emblem to thumbnails in thumbnail mode * config: Prefer plocate over mlocate if available * window: Avoid IndexError on right click when selection is empty * Create shared filetype lists for searching and filtering * Ensure site-packages directory is prepended to sys.path * Fix double border between sidebar and results area * window: Fix and refactor new_column() * window: Fix markup warnings in thumbnail view * Fix GtkBuilder warnings * Revert "Suppress the various GTK warnings GtkBuilder outputs" * Fix crash and translations when install prefix != /usr * Update `.gitignore` * Remove generated file po/catfish.pot * Performance improvements (fix #79) * Translation Updates - Refresh 0001-Force-disable-Zeitgeist-support.patch - Remove _service file ==== dcraw ==== Subpackages: dcraw-lang - add dcraw-glibc-2.38.patch to fix prototype clash on memmem with glibc 2.38+ ==== dracut ==== Version update (059+suse.488.g81715832 -> 059+suse.491.g87f19c22) - Update to version 059+suse.491.g87f19c22: * fix(dracut-install): protect against broken links pointing to themselves * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081) ==== glibc ==== Version update (2.37 -> 2.38) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Update to glibc 2.38 * When C2X features are enabled and the base argument is 0 or 2, the following functions support binary integers prefixed by 0b or 0B as input * PRIb*, PRIB* and SCNb* macros from C2X have been added to <inttypes.h>. * printf-family functions now support the wN format length modifiers for arguments of type intN_t, int_leastN_t, uintN_t or uint_leastN_t and the wfN format length modifiers for arguments of type int_fastN_t or uint_fastN_t, as specified in draft ISO C2X * A new tunable, glibc.pthread.stack_hugetlb, can be used to disable Transparent Huge Pages (THP) in stack allocation at pthread_create * Vector math library libmvec support has been added to AArch64 * The strlcpy and strlcat functions have been added * CVE-2023-25139: When the printf family of functions is called with a format specifier that uses an <apostrophe> (enable grouping) and a minimum width specifier, the resulting output could be larger than reasonably expected by a caller that computed a tight bound on the buffer size - Enable build with _FORTIFY_SOURCE - glibc-2.3.90-langpackdir.diff: avoid reference to __strcpy_chk - iconv-error-verbosity.patch: iconv: restore verbosity with unrecognized encoding names (BZ #30694) - printf-grouping.patch, strftime-time64.patch, getlogin-no-loginuid.patch, fix-locking-in-_IO_cleanup.patch, gshadow-erange-rhandling.patch, system-sigchld-block.patch, gmon-buffer-alloc.patch, check-pf-cancel-handler.patch, powerpc64-fcntl-lock.patch, realloc-limit-chunk-reuse.patch, dl-find-object-return.patch; Removed ==== gspell ==== Version update (1.12.1 -> 1.12.2) Subpackages: gspell-lang libgspell-1-2 typelib-1_0-Gspell-1 - Update to version 1.12.2: + Small code maintenance: don't use g_slice_*(). ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Added patch: * reproducible-javadoc-timestamp.patch + use SOURCE_DATE_EPOCH in javadoc and make the javadoc generation more reproducible ==== libcloudproviders ==== Version update (0.3.1 -> 0.3.2) - Update to version 0.3.2: + No upstream changes provided. ==== libgweather4 ==== Version update (4.2.0 -> 4.3.2) Subpackages: gweather4-data libgweather-4-0 libgweather4-lang typelib-1_0-GWeather-4_0 - Update to version 4.3.2: + Fix fallback metric unit detection logic + Documentation fixes + Performance improvements for nearest location lookups + Location database changes + Updated translations. ==== liborcus ==== - Removed patches: * liborcus-filesystem.patch * liborcus-tests.patch + reworked in order to send them upstream - Added patches: * 0001-Possibility-to-build-against-a-host-of-filesystem-im.patch * 0003-Allow-running-tests-with-python-3.4.patch * 0002-Allow-using-older-boost-filesystem.patch + split into chunks per topic so that upsteam can decide what to do ==== opensuse-welcome ==== Version update (0.1.9+git.0.66be0d8 -> 0.1.9+git.35.4b9444a) - Update to version 0.1.9+git.35.4b9444a: * panellayouter: use QTemporaryFile for applyLayout() (bsc#1213708, CVE-2023-32184). * Translation updates. ==== perl-Image-ExifTool ==== Version update (12.64 -> 12.65) Subpackages: exiftool perl-File-RandomAccess - Update to 12.65: * Added a new QuickTime Keys tag * Added a new CanonModelID * Added a new Canon LensType * Added number in brackets to converted Samsung MCCData value * Decode a number of new Sony tags * Decode a few new FlashPix tags (github #217) * Improved decoding of Nikon Z9 firmware 4.0 tags * Improved parsing of PDF:Keywords to support semicolon-separated lists * Enhanced -api option to show list of available options if no argument is provided * Lowered priority of IFD1 tags in ARW images so IFD0/SubIFD take precedence * Changed QuickTime tag names for atID (AlbumTitleID to ArtistID) and plID (PlayListID to AlbumID) (github issue #216), and added cmID (ComposerID) * Changed Apple:MediaGroupUUID tag name back to ContentIdentifier * Patched the -d option to handle the %s format code internally when writing (avoids problems due to inconsistent behaviour of this format code in the strptime function on different systems) * Patched patch of version 12.32 to restore ability to read from named pipes * Fixed bug which could cause a hang when processing a corrupt BigTIFF image * Fixed document number for auxiliary image metadata in HEIC files * Fixed misspelt Apple tag name * API Changes: + Added AvailableOptions method ==== signon ==== Version update (8.60 -> 8.61) Subpackages: libsignon-qt5-1 signon-plugins signond signond-libs - Update to 8.61 * Port away from QHash::unite * Don't emit QObject::destroyed() within Identity::destroy() * Build: remove unnecessary qmake options * Don't use -fno-rtti * Run test script with Busybox compatible mktemp * Fix typos in logs * Tests: add missing parameter to mkdir command * Fix deprecation warning * signond: register the adaptors in SignonDaemonAdaptor * signond: get appId of peer in SignonIdentityAdapter * signond: add Error class * signond: add ErrorAdaptor class * signond: use ErrorAdaptor in SignonSessionCore * signond: reduce usage of D-Bus in SignonIdentity class * signond: introduce PeerContext class * signond: reduce D-Bus usage in SignonAuthSession * signond: register the adaptors, not the object itself * signond: destroy adapter when Identity gets unregistered * Fix Unicode $HOME dir - Drop patch, merged upstream: * 0001-Don-t-use-fno-rtti.patch - Drop the unneeded baselibs.conf ==== systemd ==== Version update (253.7 -> 253.8) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit fcdb2dd2c921db3c6b7c28465dbda314f4469d17 (merge of v253.8) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/2dac0aff9ced1eca0cd11c24e264b33…

1 0

New Tumbleweed snapshot 20230811 released!
by Dominique Leuenberger 12 Aug '23

12 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: liborcus libsemanage nodejs20 (20.3.1 -> 20.5.1) openSUSE-repos-Tumbleweed (20230804.41e41a9 -> 20230810.a7534f6) python-semanage python311 python311-core qtkeychain-qt5 (0.13.2 -> 0.14.1) re2c (3.0 -> 3.1) salt virtualbox virtualbox-kmp xen (4.17.1_06 -> 4.17.2_02) xz (5.4.3 -> 5.4.4) yast2-country (4.6.2 -> 4.6.3) === Details === ==== liborcus ==== - Clean up the spec file and require gcc-c++ >= 7, since that is the first version that supports C++17 - Run tests on all distributions and architectures * Allow disabling them on command line by specifying "--without tests" - Changed patch: * no-std-filesystem.patch -> liborcus-filesystem.patch + rework the patch to detect std::filesystem, std::experimental::filesystem and boost::filesystem (in that order, and use them if found) - Added patch: * liborcus-tests.patch + fix tests on all platforms + do not use C++20 features with the boost::filesystem::directory_iterator + do not assume that pathlib integrates seamlessly with open and do not use f-string formating, both being python 3.6+ features ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO - Enable LTO now (boo#1138812). ==== nodejs20 ==== Version update (20.3.1 -> 20.5.1) Subpackages: npm20 - Update to version 20.5.1: * (CVE-2023-32002, bsc#1214150): Policies can be bypassed via Module._load (High) * (CVE-2023-32558, bsc#1214155): process.binding() can bypass the permission model through path traversal (High) * (CVE-2023-32004, bsc#1214152): Permission model can be bypassed by specifying a path traversal sequence in a Buffer (High) * (CVE-2023-32006, bsc#1214156): Policies can be bypassed by module.constructor.createRequire (Medium) * (CVE-2023-32559, bsc#1214154): Policies can be bypassed via process.binding (Medium) * (CVE-2023-32005, bsc#1214153): fs.statfs can bypass the permission model (Low) * (CVE-2023-32003, bsc#1214151): fs.mkdtemp() and fs.mkdtempSync() can bypass the permission model (Low) - Changes in 20.5.0: * events: allow safely adding listener to abortSignal * fs: add a fast-path for readFileSync utf-8 * test_runner: add shards support - Changes in 20.4.0: * tls: add ALPNCallback server option for dynamic ALPN negotiation * adds support for ECMAScript Explicit Resource Management * adds Mock Timer support to test module For details see, https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md#20… versioned.patch: refreshed ==== openSUSE-repos-Tumbleweed ==== Version update (20230804.41e41a9 -> 20230810.a7534f6) - Update to version 20230810.a7534f6: * Disable NVIDIA pkg building on LeapMicro. Fixes #34 PM confirmed that NVIDIA related deployments are expected to have all drivers/tools inside of container. * Fix incorrect with_nvidia usage ==== python-semanage ==== - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO - Enable LTO now (boo#1138812). ==== python311 ==== Subpackages: python311-curses python311-dbm - restrict PEP668 to ALP/Tumbleweed - add externally_managed.in to label this build as PEP-668 managed ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - restrict PEP668 to ALP/Tumbleweed - add externally_managed.in to label this build as PEP-668 managed ==== qtkeychain-qt5 ==== Version update (0.13.2 -> 0.14.1) Subpackages: libqt5keychain1 libqt5keychain1-lang - Update to 0.14.1: * Many build system fixes and build fixes for recent Qt 6 releases * Add QtQuick client example * Added Dutch translation * Add API to check whether a secure backend is available at all * Export QKeychain::isAvailable() to make it usable in a shared build * Protect against creating the QtKeychain::QtKeychain alias target twice - Drop patch, merged upstream: * 0001-Define-a-poper-exported-CMake-target-instead-of-intr.patch - Add missing dependency to the -devel packages ==== re2c ==== Version update (3.0 -> 3.1) - Update to 3.1: * new options --leftmost-captures option and re2c:leftmost-captures on capturing groups * new syntax (! ...) for non-capturing groups * It is also possible to flip defaults with --invert-captures option or re2c:invert_captures configuration, so that (...) is a capturing group and (! ...) is a non-capturing one * TDFA paper and removal of experimental algorithms * internal codebase , build system and CI improvements see details at https://re2c.org/releases/release_notes.html#release-3-1 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Create minion_id with reproducible mtime - Fix detection of Salt codename by "salt_version" execution module - Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844) - Fix the regression of user.present state when group is unset (bsc#1212855) - Fix zypper repositories always being reconfigured - Fix utf8 handling in 'pass' renderer and make it more robust - Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994) - Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591) - tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Added: * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch * fix-the-regression-of-user.present-state-when-group-.patch * make-master_tops-compatible-with-salt-3000-and-older.patch * avoid-conflicts-with-dependencies-versions-bsc-12116.patch * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch * fix-regression-multiple-values-for-keyword-argument-.patch * zypper-pkgrepo-alreadyconfigured-585.patch * mark-salt-3006-as-released-586.patch * fix-some-issues-detected-in-salt-support-cli-module-.patch * define-__virtualname__-for-transactional_update-modu.patch * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch ==== virtualbox ==== - Fix build for kernel 6.5 Add file "fixes_for_6.5.patch" Reworked patches for various Leap versions: Added file "fixes_for_leap.patch" Deleted file "fixes_for_leap15.2.patch" Deleted file "fixes_for_leap15.3.patch" Deleted file "fixes_for_leap15.4.patch" Deleted file "fixes_for_leap15.5.patch" ==== virtualbox-kmp ==== - Fix build for kernel 6.5 Add file "fixes_for_6.5.patch" Reworked patches for various Leap versions: Added file "fixes_for_leap.patch" Deleted file "fixes_for_leap15.2.patch" Deleted file "fixes_for_leap15.3.patch" Deleted file "fixes_for_leap15.4.patch" Deleted file "fixes_for_leap15.5.patch" ==== xen ==== Version update (4.17.1_06 -> 4.17.2_02) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1212684 - xentop fails with long interface name 64d33a57-libxenstat-Linux-nul-terminate-string.patch - Update to Xen 4.17.2 bug fix release (bsc#1027519) xen-4.17.2-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434) - bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435) - Dropped patches contained in new tarball 64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch 645dec48-AMD-IOMMU-assert-boolean-enum.patch 64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch 646b782b-PCI-pci_get_pdev-respect-segment.patch 647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch 648863fc-AMD-IOMMU-Invalidate-All-check.patch 64bea1b2-x86-AMD-Zenbleed.patch - Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch A bit is an index in bitmap, while bits is the allocated size of the bitmap. ==== xz ==== Version update (5.4.3 -> 5.4.4) Subpackages: liblzma5 liblzma5-32bit xz-lang - Update to version 5.4.4: * liblzma and xzdec can now build against WASI SDK when threading support is disabled. xz and tests don't build yet. * documentation update * translations update ==== yast2-country ==== Version update (4.6.2 -> 4.6.3) Subpackages: yast2-country-data - Allow changing date to a later year than 2032 (bsc#1214144) - 4.6.3

1 0

Tumbleweed - Review of the week 2023/32
by Dominique Leuenberger 11 Aug '23

11 Aug '23

Dear Tumbleweed users and hackers, At least over here where I live, the last few days we had slightly less summery time and more rain – and bad weather means more work in front of the screen. The same thing likely happened to other contributors, looking at the things we passed through staging or are still there. This week has seen 7 snapshots (0804..0810). The most relevant changes during this week were: * Mesa 23.1.5 * openSSL 3.1.2 * Linux kernel 6.4.8 & 6.4.9 * Libvirt 9.6.0 * Perl 5.38 (incl all perl modules rebuilt) * GCC 13.2 * LibreOffice 7.6.0.1 & 7.6.0.2 * QEmu 8.0.4 Staging projects are currently testing these changes: * Meson 1.2.1 * Python 3.11, configured for PEP-0688 (externally managed system tree) * Node.JS 20.5.1 * glibc 2.38 * NetworkManager 1.44.0 * systemd 253.8 * Mozilla Firefox 116.x * FMT 10: breaks mariadb boo#1213219 and ceph boo#1213217; help welcome * libxml2 2.11.x * oxygen 1.9.7 – breaks wxPython build Cheers, Dominique

2 1

New Tumbleweed snapshot 20230810 released!
by Dominique Leuenberger 11 Aug '23

11 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: accountsservice kernel-firmware kernel-source (6.4.8 -> 6.4.9) libreoffice-share-linker lsb-release pentaho-libxml (1.1.3 -> 1.1.6) procmail (3.22 -> 3.24) python-certifi (2023.5.7 -> 2023.7.22) qemu (8.0.3 -> 8.0.4) tracker-miners wtmpdb (0.7.1 -> 0.8.0) zxing-cpp === Details === ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Rebase as-fate318433-prevent-same-account-multi-logins.patch: (bsc#1213884). ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569) amd-ucode-CVE-2023-20569.patch ==== kernel-source ==== Version update (6.4.8 -> 6.4.9) - Linux 6.4.9 (bsc#1012628). - Update config files. Set: * CONFIG_GDS_FORCE_MITIGATION=n * CONFIG_CPU_SRSO=y as per default. - x86: fix backwards merge of GDS/SRSO bit (bsc#1012628). - xen/netback: Fix buffer overrun triggered by unusual packet (bsc#1012628). - x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1012628). - x86/srso: Add a forgotten NOENDBR annotation (bsc#1012628). - x86/srso: Fix return thunks in generated code (bsc#1012628). - x86/srso: Add IBPB on VMEXIT (bsc#1012628). - x86/srso: Add IBPB (bsc#1012628). - x86/srso: Add SRSO_NO support (bsc#1012628). - x86/srso: Add IBPB_BRTYPE support (bsc#1012628). - x86/srso: Add a Speculative RAS Overflow mitigation (bsc#1012628 bsc#1213287 CVE-2023-20569). - x86/bugs: Increase the x86 bugs vector size to two u32s (bsc#1012628). - Documentation/x86: Fix backwards on/off logic about YMM support (bsc#1012628). - x86/xen: Fix secondary processors' FPU initialization (bsc#1012628). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (bsc#1012628). - KVM: Add GDS_NO support to KVM (bsc#1012628). - x86/speculation: Add Kconfig option for GDS (bsc#1012628). - x86/speculation: Add force option to GDS mitigation (bsc#1012628). - x86/speculation: Add Gather Data Sampling mitigation (bsc#1012628 bsc#1206418 CVE-2022-40982). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1012628). - x86/fpu: Mark init functions __init (bsc#1012628). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1012628). - x86/init: Initialize signal frame size late (bsc#1012628). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1012628). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1012628). - init: Remove check_bugs() leftovers (bsc#1012628). - um/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - sparc/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - sh/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - mips/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - m68k/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - loongarch/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - ia64/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - init: Provide arch_cpu_finalize_init() (bsc#1012628). - commit 5b9ad20 - tpm/tpm_tis: Disable interrupts for Lenovo Thinkpad E14 Gen 2 and 13s-IML (bsc#1213779). - commit c4adffc - drm/amd/display: Fix a regression on Polaris cards (bsc#1212874). - commit 9764e05 - rpm/config.sh: remove IBS repos completely The commit 21cafd1f (rpm/config.sh: switch to openSUSE.org repos for IBS) duplicated the OBS repos in openSUSE.org: space. But this is done automatically in MyBS.pm. So drop all of them instead of duplicating. - commit 294d541 - rpm/config.sh: switch to openSUSE.org repos for IBS SUSE:Factory:HEAD is currently (and often) broken. Switch to openSUSE.org: repositories. They are up-to-date and provide the same archs plus armv6. - commit 21cafd1 ==== libreoffice-share-linker ==== - Do not format using f-strings, since it is python 3.6+ feature and SLE12-SP5 has python 3.4 ==== lsb-release ==== - add util-linux dependency for getopt to avoid: /usr/bin/lsb_release: line 123: getopt: command not found ==== pentaho-libxml ==== Version update (1.1.3 -> 1.1.6) - Update to upstream version 1.1.6. * no structured changelog available starting from 2008 - Rebased and updated patches: * libxml-1.1.2-build.patch -> pentaho-libxml-1.1.6-build.patch * pentaho-libxml-1.1.3-sourcetarget.patch -> pentaho-libxml-1.1.6-sourcetarget.patch ==== procmail ==== Version update (3.22 -> 3.24) - Update to procmail 3.24 (New Upstream) - Don't coredump in comsat code if interrupted early - Correctly handle COMSAT=on - Once used, the 'H' and 'r' flags would never be cleared - Fix possible buffer overflow in variable-capture actions - Fix up the parsing of variable-capture actions - LMTP code assumed sizeof(long)==sizeof(int) - SHELL is now always preset to /bin/sh. USER_SHELL contains the shell from the user's passwd entry - When HOST is mismatched, reset it for the next rcfile - Always read in a new, global rcfile (/etc/procmail.conf) to allow runtime configuration of variables like DEFAULT. This rcfile cannot deliver or filter messages - Mismatched HOST in /etc/procmailrc didn't discard the message - backquote expansion in a condition disabled header concatenation for that condition - LMTP didn't correctly handle quoted localparts - Removed SIZE extension from LMTP (unsupportable semantics) - Don't coredump if unable to exec /bin/sh - Enable "+detail" processing in LMTP mode by passing the delimiter (e.g., "+") as an optional argument after -z - In LMTP mode, save the domain of the recipient in PROCMAIL_DOMAIN - Set PROCMAIL_MODE to one of "d", "m", "z", or "" to reflect the mode option it was invoked with, if any - Fixed all bugs collected by Debian and others during the past 21 years. See the git commit history for detailed descriptions. - Port patches * procmail-3.22-autoconf.dif * procmail-3.22-headerconcat.dif * procmail-3.22-ipv6.patch * procmail-3.22-mailstat.patch * procmail-3.22-owl-truncate.dif * procmail-3.22.dif * procmail-cflags.dif - Remove former Debian and SUSE patches from procmail-3.22-patches.tar.bz2 * 04 * 06 * 10 * 11 * 12 * 13 * 14 * 15 * 16 * 17 * 18 * 19 * 22 * 23 * 24 * 25 * 26 * 27 * 28 * 29 * 30 - Collect and port our patches from old procmail-3.22-patches.tar.bz2 into new procmail-3.24-patches.tar.bz2 * 01 * 02 * 03 * 05 * 07 * 08 * 09 * 20 * 21 ==== python-certifi ==== Version update (2023.5.7 -> 2023.7.22) - update to 2023.7.22: Added certs: [#] CN=Sectigo Public Server Authentication Root E46 O=Sectigo Limited [#] CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited [#] CN=SSL.com TLS RSA Root CA 2022 O=SSL Corporation [#] CN=SSL.com TLS ECC Root CA 2022 O=SSL Corporation [#] CN=Atos TrustedRoot Root CA ECC TLS 2021 O=Atos [#] CN=Atos TrustedRoot Root CA RSA TLS 2021 O=Atos Removed certs: [#] CN=Hongkong Post Root CA 1 O=Hongkong Post [#] CN=E-Tugra Certification Authority O=E-Tu\u011fra EBG Bili\u015fim Teknolojileri ve Hizmetleri A.\u015e. OU=E-Tugra Sertifikasyon Merkezi [#] CN=E-Tugra Global Root CA RSA v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center [#] CN=E-Tugra Global Root CA ECC v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center ==== qemu ==== Version update (8.0.3 -> 8.0.4) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - perl-Text-Markdown is not available in all distros and for all arch-es. Use discount instead - Patches added: * [openSUSE][spec] Use discount instead of perl-Text-Markdown - Update to version 8.0.4: * Official changelog not released on the mailing list yet * Security issues fixed: - bsc#1212850 (CVE-2023-3354) - bsc#1213001 (CVE-2023-3255) - bsc#1213925 (CVE-2023-3180) - bsc#1207205 (CVE-2023-0330) ==== tracker-miners ==== Subpackages: tracker-miner-files tracker-miners-lang -Rebase patch: tracker-miners-drop-syscalls-in-seccomp.patch. ==== wtmpdb ==== Version update (0.7.1 -> 0.8.0) Subpackages: libwtmpdb0 - Update to version 0.8.0 - wtmpdb boottime: print boot time ==== zxing-cpp ==== - Restore support for building on SLE12 - Build with gcc7-c++ or gcc-c++ >= 7 because of C++17 requirements - Added patch: * cmake.patch + allow building with cmake 3.5 on SLE12SP5

1 0

Subject: Re: 20230809 wrong permissions error and unsure how to report the problem
by Patrick Schaaf 11 Aug '23

11 Aug '23

>>> 1. the package updates and the permissions get set to 0750 (because >>> these are the permissions inside the rpm) >>> 2. the scripts checks, complains that its wrong and corrects it >>> 3. repeat >> >> Right, that's how it works, since ever. > > And that won't change, really. > > System administrators can *choose and change* the permission strictness > level of their installation, which can either be more strict or more > lenient compared to the file permissions in an RPM package Speaking purely hypothetically... fixing this properly, could be done from inside rpm. It'd need to read the configured permission policy "database" up-front, and on the fly, and modify the packaged permissions in case they are overridden by the policy, before actually setting them. The way things are, there **is** a very short window in time where permissions (from view of what the system administrator desires), will be **wrong**, during the update. And the messages shown, as annoying as they are, point that out. best regards Patrick

1 0

New Tumbleweed snapshot 20230809 released!
by Dominique Leuenberger 10 Aug '23

10 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fixmath fuse3 (3.15.1 -> 3.16.1) gcc13 (13.1.1+git7597 -> 13.2.1+git7683) gnome-settings-daemon gnome-terminal (3.48.1 -> 3.48.2) gtk4 (4.10.4 -> 4.10.5) libadwaita (1.3.3 -> 1.3.4) libreoffice (7.6.0.1 -> 7.6.0.2) libselinux libstorage-ng (4.5.135 -> 4.5.136) osinfo-db (20230518 -> 20230719) pam pam-full-src perl-Convert-ASN1 (0.33 -> 0.340.0) python-importlib-resources (5.12.0 -> 6.0.1) unixODBC (2.3.11 -> 2.3.12) upower (1.90.1 -> 1.90.2) xmlsec1 yast2-packager (4.6.1 -> 4.6.2) === Details === ==== fixmath ==== - Build with g++ >= 7 in order to be able to use C++17 features - Added patch: * cmake-tests-old-cmake.patch + allow building with cmake >= 3.5 + conditionally applied on SLE12-SP5 whose cmake is old ==== fuse3 ==== Version update (3.15.1 -> 3.16.1) Subpackages: libfuse3-3 - Update to release 3.16.1 * Readdir kernel cache can be enabled from high-level API. ==== gcc13 ==== Version update (13.1.1+git7597 -> 13.2.1+git7683) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-devel-gcc13 libstdc++6-locale libstdc++6-pp libtsan2 libubsan1 - Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683 * Includes GCC 13.2 release * Includes patch to fix broken testcase in libbacktrace, fixing build problems on SLES 12 - gdcflags.patch: Use substituted GDCFLAGS - Filter out -Werror=return-type from D compile flags ==== gnome-settings-daemon ==== Subpackages: gnome-settings-daemon-lang - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. - Drop patch gnome-settings-daemon-bnc873545-hide-warnings.patch: the relevant color management has been moved to mutter. ==== gnome-terminal ==== Version update (3.48.1 -> 3.48.2) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.48.2: + build: Bump vte req version. + Updated translations. ==== gtk4 ==== Version update (4.10.4 -> 4.10.5) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.10.5: + Fix ordering problems with filter model signals + Avoid lingering resize cursors + Fix alignment issues on sparc + Fix a problem with CSS corner values + Updated translations. ==== libadwaita ==== Version update (1.3.3 -> 1.3.4) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.4: + AdwAboutWindow: Fix :translator-credits property + AdwComboRow: Fix accessible role on the dropdown arrow + AdwEntryRow: Fix accessibility + AdwLeaflet: Fix back/forward mouse button handling + AdwTabBar: Fix accessibility + AdwTabThumbnail: - Fix duplicate thumbnail during transitions - Fix the transition curve + AdwViewSwitcher: Set correct accessible role for icons + AdwWindowTitle: Fix initial title visibility + Stylesheet: - Fix .card buttons within .osd - Fix single-item menu height ==== libreoffice ==== Version update (7.6.0.1 -> 7.6.0.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.6.0.2: https://wiki.documentfoundation.org/ReleaseNotes/7.6 https://wiki.documentfoundation.org/Releases/7.6.0/RC1 - Update bundled dependencies: * boost_1_80_0.tar.xz - > boost_1_82_0.tar.xz * curl-8.0.1.tar.xz -> curl-8.1.2.tar.xz * icu4c-72_1-data.zip -> icu4c-73_2-data.zip * icu4c-72_1-src.tgz -> icu4c-73_2-src.tgz * libassuan-2.5.5.tar.bz2 -> libassuan-2.5.6.tar.bz2 * poppler-22.12.0.tar.xz -> poppler-23.06.0.tar.xz * poppler-data-0.4.11.tar.gz -> poppler-data-0.4.12.tar.gz - New bundled dependencies: * graphite2-minimal-1.3.14.tgz * harfbuzz-8.0.0.tar.xz + needed for SLE12-SP2, where harfbuzz is really old - Removed patches: * atklistener-32bit-type-mismatch.patch + integrated upstream * fix_harfbuzz_on_sle12_sp5.patch + not needed, since SLE12-SP5 uses now the bundled harfbuzz - Added patch: * python34-no-f-strings.patch + Applied on SLE12-SP5 + Do not format using F-strings, since it is python 3.6+ feature and SLE12-SP5 has python 3.4 - Refreshed patch: * 0002-Revert-Require-HarfBuzz-5.1.0.patch ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Do not BuildRequire swig and ruby-devel in the main build phase: those are only needed for the bindings. - (bsc#1212618) Divide libselinux and libselinux-bindings again. libselinux itself is in Ring0 so it has to have absolutely minimal dependencies, so it is better to separate libselinux-bindings into a separate pacakge. - Fix python packaging by setting the name to a fixed value - Remove separate libselinux-bindings SPEC file (bsc#1212618). - Add explicit BuildRequires for python3-pip and python3-wheel on 15.5, currently the macros don't do the right thing - allow building this with different python versions, to make this usable for the new sle15 macro (using python3.11) - Add python-wheel build dependency to build correctly with latest python-pip version. ==== libstorage-ng ==== Version update (4.5.135 -> 4.5.136) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.136 ==== osinfo-db ==== Version update (20230518 -> 20230719) - Update to database version 20230719 osinfo-db-20230719.tar.xz - Add support for SLE 15-SP6 add-sle15sp6-support.patch - Add support for SLE Micro 5.5 add-slem5.5-support.patch - Drop patches contained in new tarball add-opensuse-leap-15.5-support.patch add-sle15sp5-support.patch add-slem5.3-support.patch add-slem5.4-support.patch ==== pam ==== Subpackages: pam-32bit - pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don't print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don't build examples ==== pam-full-src ==== - pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don't print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don't build examples ==== perl-Convert-ASN1 ==== Version update (0.33 -> 0.340.0) - updated to 0.34 see /usr/share/doc/packages/perl-Convert-ASN1/ChangeLog 0.34 -- Mon Aug 07 19:46:22 ADT 2023 Bug Fixes Thanks to chrisridd and fschlich for these bug fixes * Fixes: #47 2nd - Debug output using print instead of printf * Fixes #47 Debug output using print instead of printf * ASN1.pod: fix minor typo ==== python-importlib-resources ==== Version update (5.12.0 -> 6.0.1) - update to 6.0.1: * Bugfixes * Restored Apache license. (#285) * Deprecations and Removals * Removed legacy functions deprecated in 5.3. (#80) * Features * Require Python 3.8 or later ==== unixODBC ==== Version update (2.3.11 -> 2.3.12) - Update to 2.3.12: * Makefile.am: Do not install config.h #108 * DriverManager/drivermanager.h: fix build without threads #112 * DriverManager/_info.c: Get locale encoding on Windows. #115 * Fixed Connection String #127 * Allow diagnostics to be retrieved on SQL_NO_DATA #137 * Avoid implicit function declarations, for C99 compatibility #138 * Remove self-reference #140 * isql.1: Add information about handling passwords containing semicolons #126 - Remove unixODBC-gccwarnings.patch, unixODBC-2.3.6-declarations.patch: Changes have been done in https://github.com/lurcher/unixODBC/pull/138 - Update unixODC-etc-location.patch ==== upower ==== Version update (1.90.1 -> 1.90.2) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 upower-lang - update to 1.90.2: * Note that this is the last release of UPower with lid handling. OS components that rely on the lid status should get it from logind instead. * Fix wireless devices not disappearing from Settings when disconnected * Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes * Add installed-tests files for use with gnome-desktop-testing * Fix integration test to work with system installed upower binary and under jhbuild - add skip-tests-install.patch to skip installation of test-only assets ==== xmlsec1 ==== Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - Added patch: * xmlsec1-ui_null.patch + fix build with older versions of openssl that don't have UI_null() method ==== yast2-packager ==== Version update (4.6.1 -> 4.6.2) - Move loading the Pkg module to fix a failing unit test (bsc#1214069) - 4.6.2

1 0

New build counter sync (bcnsynctag) mechanic for Factory
by Adrian Schröter 10 Aug '23

10 Aug '23

Hi, short version: New mechanic will be used, I will submit updates for the critical packages to factory, no one needs to do anything on their own. Longer version: While debugging an issue with too many rebuilds we noticed that we need a more flexible way to set the bcntsynctag. This tag is so far set in OBS package meta for a few packages to enforce the same build numbers in otherwise independend builds. Eg. due to _multibuild or local links. (check osc meta pkg openSUSE:Factory glibc for an example). Since this information belongs actually to the sources and not to the package meta, we introduced a new additional mechanic. This will also solve the issue when working in git projects using pbuild or OBS. For spec files this can be done via #!BcntSyncTag: $TAG syntax 1). The advantage is that it can be done only for selected multibuild flavors, architectures or other conditions. As long the package meta defines the bcntsynctag this has no effect though. But the goal is to get rid of it. You may want to check a real life example: # osc ldiff home:adrianSuSE:branches:Base:System glibc Index: glibc.changes =================================================================== --- glibc.changes (revision 7fb767958d0f7a75bb7cf9f8a6648dc3) +++ glibc.changes (revision 0dcf7cbdf7fbe3fc9d58f0c1b31a50fa) @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Thu Aug 10 08:20:26 UTC 2023 - Adrian Schröter <adrian(a)suse.de> + +- Enforce the name build counter (release number) between x86_64 and i686 build + Other flavors are allowed to divert to avoid triggering a new + bootstrap rebuild + +------------------------------------------------------------------- Wed Aug 2 10:50:32 UTC 2023 - Andreas Schwab <schwab(a)suse.de> - Update to glibc 2.38 Index: glibc.spec =================================================================== --- glibc.spec (revision 7fb767958d0f7a75bb7cf9f8a6648dc3) +++ glibc.spec (revision 0dcf7cbdf7fbe3fc9d58f0c1b31a50fa) @@ -232,6 +232,8 @@ %if "%flavor" == "i686" ExclusiveArch: i586 i686 BuildArch: i686 +# Enforce the name build counter (release number) between x86_64 and i686 build +#!BcntSyncTag: glibc %endif ### 1) Documentation for the different package formats will appear here when the cloud job picks it up: https://open-build-service.org/help/manuals/obs-user-guide/cha.obs.package_… -- Adrian Schroeter <adrian(a)suse.de> Build Infrastructure Project Manager SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

Firefox/i586 needs help: FF 116 fails to build
by Dominique Leuenberger 09 Aug '23

09 Aug '23

Dear TW hackers, Firefox 116 has just been sent for inclusion into Tumbleweed - with a note that it fails to build on i586. Looking into the devel prj, the picture looks even worse, as aarch64 and armv7l are also failing to build. https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox Can you all please help out the maintainer to get the failing archs building too? (i586 is mandatory in Staging - and I still hope to get aarch64 and ppc64le on that level too one day) Cheers, Dominique

9 13

New Tumbleweed snapshot 20230808 released!
by Dominique Leuenberger 09 Aug '23

09 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs libetonyek libreoffice (7.5.4.2 -> 7.6.0.1) okteta (0.26.12 -> 0.26.13) pipewire (0.3.76 -> 0.3.77) === Details === ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Extend patch pdump.patch * Make various emacs flavours find their pdmp files even if first argument is simply named "emacs" (slack message, boo#1214008) ==== libetonyek ==== - Build against mdds-2.1 - Added patch: * stdcxx17.patch + require C++17, since newer mdds needs it ==== libreoffice ==== Version update (7.5.4.2 -> 7.6.0.1) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Added patch: * atklistener-32bit-type-mismatch.patch + fix type mismatch on i586 - Add missing dependencies on jre-64 for riscv64 - Update to 7.6.0.1: https://wiki.documentfoundation.org/ReleaseNotes/7.6 https://wiki.documentfoundation.org/Releases/7.6.0/RC1 - Update bundled dependencies: * pdfium-5408.tar.bz2 -> pdfium-5778.tar.bz2 * skia-m103-b301ff025004c9cd82816c86c547588e6c24b466.tar.xz -> skia-m111-a31e897fb3dcbc96b2b40999751611d029bf5404.tar.xz - Removed upstreamed patches: * bsc1198666.patch * bsc1200085.patch * bsc1204040.patch ==== okteta ==== Version update (0.26.12 -> 0.26.13) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data - Update to 0.26.13 * Improved: translations * Improved: Decoding table now displays some control chars as escaped terms * Improved: Decoding table now supports editing some chars as escaped terms * Improved: Structures tool now feeds some chars as escaped terms to editor * Improved: CMake Unity builds now possible * Fixed: Structures tool stored edited primitive array elements on bad offset * Fixed: Structures tool now displays chars only as the supported 7-bit ASCII ==== pipewire ==== Version update (0.3.76 -> 0.3.77) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.77: * Highlights - Fix a bug in ALSA source where the available number of samples was miscaluclated and resulted in xruns in some cases. - A new L permission was added to make it possible to force a link between nodes even when the nodes can't see eachother. - The VBAN module now supports midi send and receive as well. - Many cleanups and small fixes. * PipeWire - Global objects now only show permissions that apply to them. The permissions required to perform various API calls are documented. - A new L permission was added to make it possible to force a link between nodes even when the nodes can't see eachother. - Config files need to end with .conf. - The client.api is added the to global properties of a node. * modules - The VBAN module now supports midi send and receive as well. - Fix module-profiler alignment and make sure we don't overrun our buffers with many nodes. - Protect libcanberra calls with a mutex because it is not thread safe. * SPA - Support older compilers for spa_clear_ptr(). - Fix a bug in ALSA source where the available number of samples was miscaluclated and resulted in xruns. - Don't set inotify on /dev but on the videoX devices directly. Setting inotify on /dev would cause a lot of spurious wakeups and lock contention in the fsnotify subsystem on some benchmarks. - Audioconvert now rate limits the warnings when it runs out of buffers. * pulse-server - Some bugs and inconsistencies were fixed in device lookup. - Improve subscribe event emission, detect changes to the sink or the monitor and send the right sink/source event. * JACK - The libjack.so now has a minor version of 3 and a micro version of the pipewire version. - JACK clients will now see portregistration from other jack clients when they activate/deactivate like real JACK. * bluetooth - Use some more autoptr cleanups, fix some leaks.

1 0

Warning about file conflict
by Larry Finger 09 Aug '23

09 Aug '23

Hi, If you generate and install your own kernels, beware of the following conflict: Checking for file conflicts: ...........................................................................................................................................................[error] Detected 1 file conflict: File /usr/sbin/installkernel from install of grubby-20230221.8656bfd-Virt.1699.33.1.x86_64 (Virtualization (openSUSE_Tumbleweed)) conflicts with file from package kernel-install-tools-0.3.0-2.2.x86_64 (@System) The grubby package fails a 'sudo make install' of the kernel. You must have the kernel-install-tools package. I discovered this problem "The Hard Way". :) Larry

3 3

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 08 Aug '23

08 Aug '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - msr-safe: Uninstallable: nothing provides kernel-uname-r = 6.3.9-1-default needed by msr-safe-kmp-default-1.7.0_k6.3.9_1.x86_64 - python-oslo.log: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20230807 released!
by Dominique Leuenberger 08 Aug '23

08 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: at-spi2-core gnome-software (44.3 -> 44.4) libsoup2 libstorage-ng (4.5.134 -> 4.5.135) perl (5.36.1 -> 5.38.0) plasma5-workspace python-Pillow python-alembic (1.10.4 -> 1.11.1) util-linux util-linux-systemd === Details === ==== at-spi2-core ==== Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Support build environments like SLE 15 SP5 and Leap 15.5 which had %{_distconfdir) not defined yet. ==== gnome-software ==== Version update (44.3 -> 44.4) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 44.4: + Improve error notifications from failed GPG checks. + Disable animations in the UI according to the userâs accessibility settings. + Fix applying updates which require some packages to be removed to satisfy dependencies. + Updated translations. ==== libsoup2 ==== Subpackages: libsoup-2_4-1 libsoup2-lang - Add upstream bug fixes: + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere + 48b3b611.patch: lib: Add names to various GSources - Drop no longer valid translation-update-upstream BuildRequires and macro. - Use ldconfig_scriptlets macro for post(un) handling. ==== libstorage-ng ==== Version update (4.5.134 -> 4.5.135) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.135 ==== perl ==== Version update (5.36.1 -> 5.38.0) Subpackages: perl-base perl-doc - Update to perl 5.38.0 * new "class" feature * support for unicode 15.0 * defined-or and logical-or assignment default expressions in signatures * optimistic eval in patterns * readline() no longer clears the stream error and eof flags * "INIT" blocks no longer run after an "exit()" in "BEGIN" * utf8::upgrade() keeps the undef value * deprecation of ' as package name separator * deprecation of the smart match operator * PERL_USE_SAFE_PUTENV is now the default - Rebase perl-5.36.0.diff to perl-5.38.0.diff - Refresh perl_skip_flaky_tests_powerpc.patch ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix crash when closing popup on Wayland (kde#473054) * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch ==== python-Pillow ==== - Add Provides for python-PIL ==== python-alembic ==== Version update (1.10.4 -> 1.11.1) - update to 1.11.1: * As Alembic 1.11.0 is considered a major release (Alembic does not use semver, nor does its parent project SQLAlchemy; this has been `clarified <versioning_scheme>` in the documentation), * :ticket:`1130` modified calling signatures for most operations to consider all optional keyword parameters to be keyword-only arguments, to match what was always documented and generated by autogenerate. However, two of these changes were identified as possibly problematic without a more formal deprecation warning being emitted which were the ``table_name`` parameter to :meth:`.Operations.drop_index`, which was generated positionally by autogenerate prior to version 0.6.3 released in 2014, and ``type_`` in :meth:`.Operations.drop_constraint` and :meth:`.BatchOperations.drop_constraint`, which was documented positionally in one example in the batch documentation. * Fixed typing use of :class:`~sqlalchemy.schema.Column` and other generic SQLAlchemy classes. * Restored the output type of :meth:`.Config.get_section` to include ``Dict[str, str]`` as a potential return type, which had been changed to immutable ``Mapping[str, str]``. When a section is returned and the default is not used, a mutable dictionary is returned. * Added placeholder classes for :class:`~.sqla.Computed` and * :class:`~.sqla.Identity` when older 1.x SQLAlchemy versions are in use, namely prior to SQLAlchemy 1.3.11 when the :class:`~.sqla.Computed` construct was introduced. Previously these were set to None, however this could cause issues with certain codepaths that were using ``isinstance()`` such as one within "batch mode". * Correctly pass previously ignored arguments ``insert_before`` and ``insert_after`` in ``batch_alter_column`` * Argument signatures of Alembic operations now enforce keyword-only arguments as passed as keyword and not positionally, such as Operations.create_table.schema .Operations.add_column.type_, etc. * Fix autogenerate issue with PostgreSQL :class:`.ExcludeConstraint` that included sqlalchemy functions. The function text was previously rendered as a plain string without surrounding with ``text()``. * Fixed regression caused by :ticket:`1166` released in version 1.10.0 which caused MySQL unique constraints with multiple columns to not compare correctly within autogenerate, due to different sorting rules on unique constraints vs. indexes, which in MySQL are shared constructs. * Repaired the return signatures for :class:`.Operations` that mostly return ``None``, and were erroneously referring to ``Optional[Table]`` in many cases. * Modified the autogenerate implementation for comparing "server default" values from user-defined metadata to not apply any quoting to the value before comparing it to the server-reported default, except for within dialect-specific routines as needed. This change will affect the format of the server default as passed to the :paramref:`.EnvironmentContext.configure.compare_server_defau lt` hook, as well as for third party dialects that implement a custom ``compare_server_default`` hook in their alembic impl, to be passed "as is" and not including additional quoting. Custom implementations which rely on this quoting should adjust their approach based on observed formatting. * allow running async functions in the ``upgrade`` or ``downgrade`` migration function when running alembic using an async dialect. This function will receive as first argument an :class:`~sqlalchemy.ext.asyncio.AsyncConnection` sharing the transaction used in the migration context. ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Re-add util-linux-fix-tests-with-64k-pagesize.patch because it is not in 2.39.1 ==== util-linux-systemd ==== - Re-add util-linux-fix-tests-with-64k-pagesize.patch because it is not in 2.39.1

1 0

New Tumbleweed snapshot 20230806 released!
by Dominique Leuenberger 07 Aug '23

07 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libssh libvirt (9.5.0 -> 9.6.0) libzypp (17.31.17 -> 17.31.18) plasma5-desktop (5.27.7 -> 5.27.7.1) python-libvirt-python (9.5.0 -> 9.6.0) python311 python311-core webkit2gtk3 (2.40.4 -> 2.40.5) webkit2gtk3-soup2 (2.40.4 -> 2.40.5) xen === Details === ==== libssh ==== Subpackages: libssh-config libssh4 - Add fix to spec file for the incorrect include path as a result of the default openSSH move to /usr/etc, (boo#1211718). ==== libvirt ==== Version update (9.5.0 -> 9.6.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Add upstream commit 3d2f3fb72b to fix max file limits in systemd services - Update to libvirt 9.6.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-6-0-2023-08-01 - jsc#PED-3725 - spec: Unconditionally enable modular daemons - spec: Remove logic handling package upgrade from old libvirtd ==== libzypp ==== Version update (17.31.17 -> 17.31.18) - SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the zypp-rpm lock (fixes openSUSE/openSUSE-repos#29) - version 17.31.18 (22) ==== plasma5-desktop ==== Version update (5.27.7 -> 5.27.7.1) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.7.1: * Panel: fix applet not returning focus after pressing applet shortcut (kde#472909) * Migrate missing key handling/accessibility features from default CompactRepresentation ==== python-libvirt-python ==== Version update (9.5.0 -> 9.6.0) - Update to 9.6.0 - Add all new APIs and constants in libvirt 9.6.0 - jsc#PED-3725 ==== python311 ==== Subpackages: python311-curses python311-dbm - IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED! - Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941) partially reverting CVE-2023-27043-email-parsing-errors.patch, because of the regression in gh#python/cpython#106669. - (bsc#1210638, CVE-2023-27043) Add CVE-2023-27043-email-parsing-errors.patch, which detects email address parsing errors and returns empty tuple to indicate the parsing error (old API). (The patch is faulty, gh#python/cpython#106669, but upstream decided not to just revert it). ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED! - Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941) partially reverting CVE-2023-27043-email-parsing-errors.patch, because of the regression in gh#python/cpython#106669. - (bsc#1210638, CVE-2023-27043) Add CVE-2023-27043-email-parsing-errors.patch, which detects email address parsing errors and returns empty tuple to indicate the parsing error (old API). (The patch is faulty, gh#python/cpython#106669, but upstream decided not to just revert it). ==== webkit2gtk3 ==== Version update (2.40.4 -> 2.40.5) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.40.5 (boo#1213905): + Fix several crashes and rendering issues. + Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595, CVE-2023-38597,, CVE-2023-38599,, CVE-2023-38600, CVE-2023-38611. ==== webkit2gtk3-soup2 ==== Version update (2.40.4 -> 2.40.5) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.40.5 (boo#1213905): + Fix several crashes and rendering issues. + Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595, CVE-2023-38597,, CVE-2023-38599,, CVE-2023-38600, CVE-2023-38611. ==== xen ==== Subpackages: xen-libs xen-tools xen-tools-domU - Add more debug to libxc-sr-track-migration-time.patch This is supposed to help with doing the math in case xl restore fails with ERANGE as reported in bug#1209311 - bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed (XSA-433) 64bea1b2-x86-AMD-Zenbleed.patch

1 0

Announcement list for new TW snapshots?
by Pablo Sanchez 07 Aug '23

07 Aug '23

Hi everyone, Perhaps my mailing list searching -fu is not up to snuff .. I'm searching for an announcement-only mailing list for new Tumbleweed snapshots. If no such list exists, can we create one? The list would only allow the following posts (from Dimstar .. :): * New Tumbleweed snapshot ... * Tumbleweed - Review of the week .. What do people think? --- Pablo

17 32

New Tumbleweed snapshot 20230805 released!
by Dominique Leuenberger 06 Aug '23

06 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-vpnc a52dec (0.7.5+svn613 -> 0.8.0) glu gmp (6.2.1 -> 6.3.0) gpgme gpgmeqt gupnp (1.6.4 -> 1.6.5) harfbuzz (8.0.1 -> 8.1.1) kernel-source (6.4.6 -> 6.4.8) liblc3 (1.0.3 -> 1.0.4) libplacebo (6.292.0 -> 6.292.1) libstorage-ng (4.5.133 -> 4.5.134) rdma-core wpebackend-fdo (1.14.0 -> 1.14.2) xdg-desktop-portal-gnome (44.1 -> 44.2) yast2-installation (4.6.5 -> 4.6.6) === Details === ==== NetworkManager-vpnc ==== Subpackages: NetworkManager-vpnc-gnome NetworkManager-vpnc-lang - Add nm-vpnc-editor-interface-name.patch: properties: Don't set interface name as empty string by default (glgo#GNOME/NetworkManager-vpnc/commit/f4df2db6c, bsc#1213769). ==== a52dec ==== Version update (0.7.5+svn613 -> 0.8.0) - Minor spec cleaning, use ldconfig_scriptlets macro, be more explicit in listing of files (use less globs). - Update to release 0.8.0 * Build system modernization - Drop altivec.patch (inapplicable) - Remove obsolete Groups tag (fate#326485) ==== glu ==== - devel package: added missing dep to Mesa GL devel package (boo#1213976) ==== gmp ==== Version update (6.2.1 -> 6.3.0) Subpackages: libgmp10 libgmp10-32bit - GMP 6.3.0 * A possible overflow of type int is avoided for mpz_cmp on huge operands. * A possible error condition when a malformed file is read with mpz_inp_raw is now correctly handled. * New public function mpz_prevprime, companion of the existing mpz_nextprime. * New documented pointer types mpz_ptr, mpz_srcptr, and similar for other GMP types. Refer to the manual for full list and suggested usage. These types have been present in gmp.h at least since GMP-4.0, but previously not advertised to users. * Support for 64-bit Arm under Macos. * Support for the loongarch64 CPU family. * Support for building with LTO, link-time optimisations. * New special code for base = 2 in mpz_powm reduces the average time for the functions that test primality. * Speedup for the function mpz_nextprime on large operands. * Speedup for multiplications (some sizes only) thanks to new internal functions to compute small negacyclic products. * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting in a huge speedup. * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm. - Removed gmp-6.2.1-CVE-2021-43618.patch which is included in the new release. ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 - Run testsuite in qemu build ==== gpgmeqt ==== - Run testsuite in qemu build ==== gupnp ==== Version update (1.6.4 -> 1.6.5) - Update to version 1.6.5: + Fix build with meson 1.2 - Drop patches fixed upstream: + a10c57bd.patch + 884639bd.patch ==== harfbuzz ==== Version update (8.0.1 -> 8.1.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 8.1.1: + Fix shaping of contextual rules at the end of string, introduced in 8.1.0. + Fix stack-overflow in repacker with malicious fonts. + 30% speed up loading Noto Duployan font. - Update to version 8.1.0: + Fix long-standing build issue with the AIX compiler and older Apple clang. + Revert optimization that could cause timeout during subsetting with malicious fonts. + More optimization work: - 45% speed up in shaping Noto Duployan font. - 10% speed up in subsetting Noto Duployan font. - Another 8% speed up in shaping Gulzar. - 5% speed up in loading Roboto. + New API: +hb_ot_layout_collect_features_map(). ==== kernel-source ==== Version update (6.4.6 -> 6.4.8) - Linux 6.4.8 (bsc#1012628). - platform/x86/amd/pmf: Notify OS power slider update (bsc#1012628). - platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params (bsc#1012628). - drm/amd: Move helper for dynamic speed switch check out of smu13 (bsc#1012628). - drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 (bsc#1012628). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1012628). - KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm (bsc#1012628). - blk-mq: Fix stall due to recursive flush plug (bsc#1012628). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (bsc#1012628). - KVM: s390: pv: simplify shutdown and fix race (bsc#1012628). - KVM: s390: pv: fix index value of replaced ASCE (bsc#1012628). - s390/mm: fix per vma lock fault handling (bsc#1012628). - io_uring: don't audit the capability check in io_uring_create() (bsc#1012628). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (bsc#1012628). - gpio: mvebu: Make use of devm_pwmchip_add (bsc#1012628). - gpio: mvebu: fix irq domain leak (bsc#1012628). - regmap: Disable locking for RBTREE and MAPLE unit tests (bsc#1012628). - btrfs: factor out a btrfs_verify_page helper (bsc#1012628). - btrfs: fix fsverify read error handling in end_page_read (bsc#1012628). - btrfs: fix race between quota disable and relocation (bsc#1012628). - i2c: Delete error messages for failed memory allocations (bsc#1012628). - i2c: Improve size determinations (bsc#1012628). - i2c: nomadik: Remove unnecessary goto label (bsc#1012628). - i2c: nomadik: Use devm_clk_get_enabled() (bsc#1012628). - i2c: nomadik: Remove a useless call in the remove function (bsc#1012628). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (bsc#1012628). - PCI/ASPM: Factor out pcie_wait_for_retrain() (bsc#1012628). - PCI/ASPM: Avoid link retraining race (bsc#1012628). - PCI: rockchip: Remove writes to unused registers (bsc#1012628). - PCI: rockchip: Fix window mapping and address translation for endpoint (bsc#1012628). - PCI: rockchip: Don't advertise MSI-X in PCIe capabilities (bsc#1012628). - drm/amd/display: Convert Delaying Aux-I Disable To Monitor Patch (bsc#1012628). - drm/amd/display: Keep disable aux-i delay as 0 (bsc#1012628). - drm/amd/display: add pixel rate based CRB allocation support (bsc#1012628). - drm/amd/display: fix dcn315 single stream crb allocation (bsc#1012628). - drm/amd/display: Update correct DCN314 register header (bsc#1012628). - drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt (bsc#1012628). - drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix (bsc#1012628). - drm/ttm: never consider pinned BOs for eviction&swap (bsc#1012628). - maple_tree: add __init and __exit to test module (bsc#1012628). - maple_tree: fix 32 bit mas_next testing (bsc#1012628). - drm/amd/display: Add FAMS validation before trying to use it (bsc#1012628). - drm/amd/display: update extended blank for dcn314 onwards (bsc#1012628). - drm/amd/display: Fix possible underflow for displays with large vblank (bsc#1012628). - drm/amd/display: Prevent vtotal from being set to 0 (bsc#1012628). - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (bsc#1012628). - ext4: mballoc: Remove useless setting of ac_criteria (bsc#1012628). - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (bsc#1012628). - phy: phy-mtk-dp: Fix an error code in probe() (bsc#1012628). - phy: mediatek: hdmi: mt8195: fix prediv bad upper limit test (bsc#1012628). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (bsc#1012628). - phy: qcom-snps-femto-v2: properly enable ref clock (bsc#1012628). - soundwire: qcom: update status correctly with mask (bsc#1012628). - soundwire: amd: Fix a check for errors in probe() (bsc#1012628). - media: tc358746: Address compiler warnings (bsc#1012628). - media: staging: atomisp: select V4L2_FWNODE (bsc#1012628). - media: amphion: Fix firmware path to match linux-firmware (bsc#1012628). - media: mtk-jpeg: move data/code inside CONFIG_OF blocks (bsc#1012628). - media: mtk_jpeg_core: avoid unused-variable warning (bsc#1012628). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (bsc#1012628). ... changelog too long, skipping 714 lines ... - commit 02597d2 ==== liblc3 ==== Version update (1.0.3 -> 1.0.4) - Update to version 1.0.4: + Enhancement: Add fuzzing test harness. + Fixes: Gain adjustment during second quantization phase can exceed minimum gain (introduce distortion at high bitrate). ==== libplacebo ==== Version update (6.292.0 -> 6.292.1) - Update libplacebo to version 6.292.1. See details in: https://code.videolan.org/videolan/libplacebo/-/tags/v6.292.1 ==== libstorage-ng ==== Version update (4.5.133 -> 4.5.134) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Catalan) (bsc#1149754) - 4.5.134 ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5) - cxgb3-fix-declaration-of-free_context.patch - cxgb3-fix-support-for-new-uquery-API.patch - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch - Revert-Update-kernel-headers.patch - Update baselibs=.conf accordingly ==== wpebackend-fdo ==== Version update (1.14.0 -> 1.14.2) - Update to version 1.14.2 + Reverted a change introduced in 1.14.1 which introduced crashes both with WebKitGTK and WPE running under Wayland in some configurations. + Fix a crash caused by wrong assertion, which was typically triggered in debug builds when using the NVidia drivers. - Update to version 1.14.1: + Fix WebKit no longer repainting after provisional navigation wit PSON enabled. + Fix graphics buffer leaks by always freeing them in buffer destroy listener callbacks. ==== xdg-desktop-portal-gnome ==== Version update (44.1 -> 44.2) Subpackages: xdg-desktop-portal-gnome-lang - Update to version 44.2: + Expose settings backend when running outside of GNOME. + Updated translations. ==== yast2-installation ==== Version update (4.6.5 -> 4.6.6) - bsc#1213959 - Change status label properly when toggling status in the "Previousy used repositories" dialog. - 4.6.6

1 0

IkkeKernel - a new Linux fork
by Andreas Røsdal 05 Aug '23

05 Aug '23

IkkeKernel is a new Linux kernel fork: https://github.com/ikkje/ikkekernel I would be interested in the feedback from the openSUSE community about a new Linux kernel, and what you would like to see in such a new kernel. Maybe one day this kernel could be included in the openSUSE distribution. Regards, Andreas R.

1 0

New Tumbleweed snapshot 20230804 released!
by Dominique Leuenberger 05 Aug '23

05 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.1.4 -> 23.1.5) Mesa-drivers (23.1.4 -> 23.1.5) SDL2 (2.28.1 -> 2.28.2) colord dracut (059+suse.476.g5e324584 -> 059+suse.488.g81715832) grub2 ibus-m17n (1.4.19 -> 1.4.20) openSUSE-repos-Tumbleweed (20230731.a018a46 -> 20230804.41e41a9) openssl-3 (3.1.1 -> 3.1.2) openssl (3.1.1 -> 3.1.2) setools (4.4.2 -> 4.4.3) tar util-linux util-linux-systemd zsh === Details === ==== Mesa ==== Version update (23.1.4 -> 23.1.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.1.5 - -> https://docs.mesa3d.org/relnotes/23.1.4.html ==== Mesa-drivers ==== Version update (23.1.4 -> 23.1.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.1.5 - -> https://docs.mesa3d.org/relnotes/23.1.4.html ==== SDL2 ==== Version update (2.28.1 -> 2.28.2) - Update to release 2.28.2 * Fixed 8BitDo gamepad mapping when in XInput mode on Linux * Fixed controller lockup initializing some unofficial PS4 replica controllers * Fixed video initialization on headless Linux systems using VNC ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Reduce memory constraints for riscv64 ==== dracut ==== Version update (059+suse.476.g5e324584 -> 059+suse.488.g81715832) - Update to version 059+suse.488.g81715832: This is the 3rd backport of the most important fixes and features from the upstream master branch, while the release date of version 060 is still undefined. * fix(systemd-udevd): add missing override paths * fix(systemd-journald): add systemd-sysusers dependency * fix(base): correct handling of quiet in loginit * chore(suse): require gawk instead of awk * refactor(install): log about missing firmware only once * fix(integrity): do not require ls * fix(dracut-init.sh): `module_check` method ignores `forced` option * fix(man): add missing initrd-root-device.target to flow chart * fix(dracut-init.sh): use the local _ret variable * fix(dracut.sh): use gawk for strtonum * fix(man): remove duplicate entry ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Change the bash-completion directory (bsc#1213855) * grub2-change-bash-completion-dir.patch ==== ibus-m17n ==== Version update (1.4.19 -> 1.4.20) - Update to 1.4.20 * Reduce preedit flicker * Remove xml:lang="en" from the screenshot in appdata.xml * Use ibus_text_new_from_string (string) instead of ibus_text_new_from_static_string (string) in ibus_m17n_engine_commit_string() * Add missing g_free (buf) in ibus_m17n_mtext_to_utf8() ==== openSUSE-repos-Tumbleweed ==== Version update (20230731.a018a46 -> 20230804.41e41a9) - Update to version 20230804.41e41a9: * Add NVIDIA repo. Issue #28 * Add supplements for all NVIDIA cards * Add NVIDIA obsoletes for migration from Leap 15 * Add spec comment about suggests in release package * Add download.opensuse.org-non-oss.repo in legacy backup list ==== openssl-3 ==== Version update (3.1.1 -> 3.1.2) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.2: * Fix excessive time spent checking DH q parameter value (bsc#1213853, CVE-2023-3817). The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped. * Fix DH_check() excessive time with over sized modulus (bsc#1213487, CVE-2023-3446). The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Do not ignore empty associated data entries with AES-SIV (bsc#1213383, CVE-2023-2975). The AES-SIV algorithm allows for authentication of multiple associated data entries along with the encryption. To authenticate empty data the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL just returns success for such call instead of performing the associated data authentication operation. The empty data thus will not be authenticated. The fix changes the authentication tag value and the ciphertext for applications that use empty associated data entries with AES-SIV. To decrypt data encrypted with previous versions of OpenSSL the application has to skip calls to EVP_DecryptUpdate() for empty associated data entries. * When building with the enable-fips option and using the resulting FIPS provider, TLS 1.2 will, by default, mandate the use of an extended master secret (FIPS 140-3 IG G.Q) and the Hash and HMAC DRBGs will not operate with truncated digests (FIPS 140-3 IG G.R). * Update openssl.keyring with the OTC members that sign releases * Remove openssl-z16-s390x.patch fixed upstream in https://github.com/openssl/openssl/pull/21284 * Remove security patches fixed upstream: - openssl-CVE-2023-2975.patch - openssl-CVE-2023-3446.patch - openssl-CVE-2023-3446-test.patch ==== openssl ==== Version update (3.1.1 -> 3.1.2) - Update to 3.1.2 ==== setools ==== Version update (4.4.2 -> 4.4.3) Subpackages: python311-setools setools-console - Update to version 4.4.3: * Fix compilation with Cython 3.0.0. * Improve man pages. * Remove neverallow options in sediff. * Add -r option to seinfoflow to get flows into the source type. * Reject a rule with no permissions as invalid policy. ==== tar ==== Subpackages: tar-lang tar-rmt - Run testsuite also on qemu build ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Disable last and lastb for ALP, too. ==== util-linux-systemd ==== - Disable last and lastb for ALP, too. ==== zsh ==== - Enable testsuite in qemu build

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 04 Aug '23

04 Aug '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - bloaty: Fails to build - cura-engine-lulzbot: Fails to build - krunvm: Fails to build - libprotobuf-mutator: Fails to build - linphone: Fails to build - linphoneqt: Fails to build - mumble: Fails to build - mysql-connector-cpp: Fails to build - netdata: Fails to build - nsjail: Fails to build - openrct2: Fails to build - python-Flask-Security-Too: Fails to build - python-seaborn: Fails to build - scidavis: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20230803 released!
by Dominique Leuenberger 04 Aug '23

04 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs (28.2 -> 29.1) kernel-firmware (20230724 -> 20230731) liblangtag (0.6.3 -> 0.6.4) libpaper (2.1.0 -> 2.1.1) python-click (8.1.3 -> 8.1.6) python-passlib srt (1.5.1 -> 1.5.2) system-config-printer === Details === ==== emacs ==== Version update (28.2 -> 29.1) Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Update to GNU Emacs version 29.1 * Official tree-sitter support * EGlot, the Language Server Client * Use-package a declarative configuration tool finally in * Better long line support * Native SQLite Support * Changing the init directory You can now instruct Emacs to read its initialization from another directory from the command line. - Use natively compiled lisp files only for GTK variant as every binary has its own hash keys for the eln location as well as for the eln native compiled lisp files - Port rmailgen.el and .gnu-emacs to 29.1 - Remove the old patches now upstream * 01a4035c.patch * 3c1693d0.patch * CVE-2022-48338.patch * CVE-2022-48339.patch * d3209119.patch * d48bb487.patch - Port and rename patch emacs-28.1.dif which is now emacs-29.1.dif - Port the patches * emacs-24.1-ps-mule.patch * emacs-24.3-iconic.patch * emacs-24.3-x11r7.patch * emacs-24.4-glibc.patch * emacs-24.4-nonvoid.patch * emacs-24.4-ps-bdf.patch * emacs-25.1-custom-fonts.patch * emacs-25.2-ImageMagick7.patch * emacs-26.1-xft4x11.patch * emacs-27.1-Xauthority4server.patch * emacs-27.1-pdftex.patch * pdump.patch - Re-enable ImageMagick usage ==== kernel-firmware ==== Version update (20230724 -> 20230731) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230731 (git commit 253cc179d849): * amdgpu: Update DMCUB for DCN314 & Yellow Carp * ice: add LAG-supporting DDP package * i915: Update MTL DMC to v2.13 * i915: Update ADLP DMC to v2.20 * cirrus: Add CS35L41 firmware for Dell Oasis Models * copy-firmware: Fix linking directories when using compression * copy-firmware: Fix test: unexpected operator * qcom: sc8280xp: LENOVO: remove directory sym link * qcom: sc8280xp: LENOVO: Remove execute bits ==== liblangtag ==== Version update (0.6.3 -> 0.6.4) - Fix check-tag test failled [0001-ro-MD-ro-to-get-make-check-to-succeed.patch] - Version update to 0.6.4 Replace the word of 'master' to 'primary' trivial update Stop shipping ChangeLog Fix build issue for docs ==== libpaper ==== Version update (2.1.0 -> 2.1.1) Subpackages: libpaper-tools libpaper2 - Update to 2.1.1: * This release fixes the -N flag of paperconf. ==== python-click ==== Version update (8.1.3 -> 8.1.6) - Update to 8.1.6 * Replace all typing.Dict occurrences to typing.MutableMapping for parameter hints. #2255 * Improve type hinting for decorators and give all generic types parameters. * Fix return value and type signature of shell_completion.add_completion_class function. #2421 * Bash version detection doesnât fail on Windows. #2461 * Completion works if there is a dot (.) in the program name. #2166 * Improve type annotations for pyright type checker. #2268 * Improve responsiveness of click.clear(). #2284 * Improve command name detection when using Shiv or PEX. #2332 * Avoid showing empty lines if command help text is empty. #2368 * ZSH completion script works when loaded from fpath. #2344. * EOFError and KeyboardInterrupt tracebacks are not suppressed when standalone_mode is disabled. #2380 * @group.command does not fail if the group was created with a custom command_class. #2416 * multiple=True is allowed for flag options again and does not require setting default=(). #2246, #2292, #2295 * Make the decorators returned by @argument() and @option() reusable when the cls parameter is used. #2294 * Donât fail when writing filenames to streams with strict errors. Replace invalid bytes with the replacement character (ï¿½). #2395 * Remove unnecessary attempt to detect MSYS2 environment. #2355 * Remove outdated and unnecessary detection of App Engine environment. #2554 * echo() does not fail when no streams are attached, such as with pythonw on Windows. #2415 * Argument with expose_value=False do not cause completion to fail. #2336 * Fix an issue with type hints for @click.command(), @click.option(), and other decorators. Introduce typing tests. #2558 * Fix an issue with type hints for @click.group(). #2558 - Drop fix-tests.patch ==== python-passlib ==== - Add patch no-pkg_resources.patch: * Stop using pkg_resources. - Switch to pyproject macros. ==== srt ==== Version update (1.5.1 -> 1.5.2) - Update to 1.5.2: * API - 41c4b1f Fixed #ifdef ENABLE_AEAD_API_PREVIEW (#2603). - b3a21e1 SRT version raised to 1.5.2. - c0d9fcd Restored resetlogfa(..) in udt.h. Reverting #2558, although udt.h is not the official SRT API. - 87de405 Added ENABLE_AEAD_API_PREVIEW build option to enable AEAD API. - 60d1237 Crypto mode 'auto' implemented for listener (#2574). - 27e7d8d Socket Options: do not allow AES GCM if TSBPD is disabled. - 3e4561e Add GCM to the SRT API. * Core Functionality - 3cefede Correct remaining endianness issues - 30e7ccd Minor fix of variable shadowing. - 6fcff6d Fixed various compiler warnings on various platforms (#2679). - 59cde53 Fixed FEC Emergency resize crash (#2717). - 2fcd3d4 Fix crypto mode auto for listener sender (#2711). - b010763 Fixed typos in MBedTLS where it referred to GnuTLS (#2699). - a991767 Fix peer filter config being rejected because of endianness - 1cffd2f Added rejection handshake sent to the peer in rendezvous mode (#2667). - f57ba89 Added missing thread watchdog ticks in 3 thread loop (#2669). - e8d0533 Fixed old ENABLE_AEAD_PREVIEW. - 599c1fb Reworked the CRcvBuffer::dropMessage(..) function (#2661). - 7948772 Removed duplicate lines (#2660). - 3ffc93f Fixed CRcvBuffer::dropMessage (#2657). - e9a3955 Fixed guard for rcv-rexmit fields (#1859). - 22e97f8 Fixed warnings and removed redundant includes (#2658). - c83c31b Reduce frequency of the decryption failure log (#2602). - 21b55a2 Disabled warnings various platforms and fixed C++20 Windows build (#2411). - 65bef37 Set CLOSING state when closing a socket (#2643). - 02cba9e Drop undecrypted packet based on sequence number (#2654). - 6d774dd Fixed invalid ASSERT checking outdated object in haicrypt (#2652). - 8db35de Refaxed and fixed multiplexer reusage (#2608). - 6c92a13 Fix crash when enable heavy log and socket id less than 10 (#2619). - 64dedef CodeQL: operation requires 22 bytes. - 0c583f8 CodeQL warning: checking NULL after new. - b8962b4 Fixed PKTINFO case that was failing for IPv4+IPv6 bound sockets (#2630). - a42a39f Fixed wrong null-safety condition check in haicrypt (#2616). - 30f6f6b Removed extra redundant condition checks (#2615). - 5f02310 Fix negative id when wrap around - f533716 Fixed reject reason by a caller if connection is UNSECURE (#2622). - 04e8dbc Fixed default reject reason for a listener callback (#2605). - 0b9d583 AEAD: don't break a connection on decrypt failure. - 6db28dc RCV Buffer Refax: added some utils and simplifications (#2522). - 5889a2c AES-GCM payload length check (#2591). - 45232ad Allow fileCC in group mode - 98b1b00 Added extraction of IP_PKTINFO when reading (#456). - de9fc45 Fix CRcvBuffer last position in getTimespan_ms (#2579). - 38b4211 Remove use variable length array (#2279). - 78dd987 Fixed missing DROPREQ for LOSSREPORT that partially predates ACK (#2498). - 4090b25 Reject caller to caller connection (#2562). - 0a835ea Refax: moved removal of one seq from fresh loss list to a separate function (#2521). - 19af5d1 Obtain ConnectionLock while sending crypto keys. - 3d517cf Fixed a warning: member referenced before initialized (#2433). - fc82eac Refax: remove usage of LOGF/HLOGF (#2566). - 637d439 Refax: removed m_iRcvLastSkipAck and its dependencies (#2546). - 6c52f2d Pass std::string by const ref where possible. - 6d62096 Applied clang-format on md5.cpp and md5.h. - 2c48cba MD5: Removed null pointer subtraction (may have undefined behavior). - ae39052 Fixed rendezvous connection in the Non Blocking Mode (#2548). - 0138898 Fixed cloning the RX crypto context (AEAD) - be1ccf5 Moved KM refresh in packUniqueData() (#2541). - f864cec Fixed TARGET_OS_MAC not defined. Wrong include order. - 432f2d8 fix CSndBuffer parameter incorrect in AES GCM mode - cbfa812 Refax/postfix: further fixes after last refax changes (#2528) - e082f30 Fixed validation of input parameters in srt_connect (#2520). - 932e5bd Cleanup of bonding conditionals and unused code (#2525). - f477b51 Fixed connected peer address recording (#2526) - b76c8b2 Fixed CRcvBuffer::getAvailSize() may jump around. (#2490) - 71c3e40 Refax: safety improvements for RCV loss list and closing state (#2517) - 491e6e8 Extract RCV buffer insertion handling to a separate function (#2500). - 258a858 Refax: added size cache to the group container (#2510). - 2fd1363 Refax: improve logging and code readability around specific logging (#2511). - f7a024a Refax: removed the synconmsg property and its handling in the group (#2509) - 53735e1 Don't consider tool old ACK as IPE, it' may caused by network. - d26bbf7 Fixed a false alarm: ACK ERROR...(diff -1) - 0f6e7c7 Fixed the inconsistency between getFirstLostSeq() and ackDataUpTo() (#2488) - ea86302 Reduced calls to steady_clock::now() from two to one. - 8e9958a Reject if SRT_MAGIC_CODE is not set in the HS induction response. - 8e67aa7 Tune logs of group members adding and removing. - c01c646 Fixed AES-GCM support check. ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-applet system-config-printer-common system-config-printer-common-lang system-config-printer-dbus-service udev-configure-printer - Explicitly use --with-cups-serverbin-dir to find SERVERBIN when cups.pc is not provided by older cups (boo#1213883).

1 0

Tumbleweed - Review of the weeks 2023/30 & 31
by Dominique Leuenberger 04 Aug '23

04 Aug '23

Dear Tumbleweed users and hackers, As so often during the vacation season, I take some Fridays off and am punished for it by having to do reviews spanning more than one week. The same thing happened this time, so you had to wait an extra week again to find out what happened in Tumbleweed. A total of 10 snapshots have been published since my last review (0719, 0724, 0727..0731, 0801, 0802, and 0803). Between 0719 and 0724, there was a more significant gap due to SUSE moving some infrastructure between data centers. The most relevant changes delivered during the last two weeks include: * Qemu 8.0.3 * systemd 253.7 * Linux kernel 6.4.4 & 6.4.6 * openSSH 9.3p2 * PHP 8.2.8 * Mesa 23.1.4 * cURL 8.2.0 & 8.2.1 * GStreamer 1.22.5 * Samba 4.18.5 * Mozilla Firefox 115.0.3 * KDE Plasma 5.27.7 * Inkscape 1.3 Staging projects are well used, and we have the following changes in the queue for testing: * glibc 2.38 * Mesa 23.1.5 * Mozilla Firefox 116 (fails to build on i586, aarch64, armv7l – inclusion blocked) * Linux kernel 6.4.8 * Perl 5.38.0 * Python Sphinx 7.1.x Cheers, Dominique

1 0

Ideas requested about surrounding information on a new improved version of the mail module of YaST2
by Freek de Kruijf 03 Aug '23

03 Aug '23

I designed an improved version of /usr/sbin/config.postfix. The improvements are: 1. support for SPF checking on incoming email in port 25 of postfix 2. support for DKIM checking on incoming email 3. support for complying to DMARC settings of the sender of an email For legitimate email these all should succeed, but it should keep illegitimate email either preventing coming in or give a high score as spam. However it only generates a private and public key to sign outgoing email with the DKIM-key. It also generates self-signed certificates for the postfix server and if you select dovecot as the authentication service, to submit messages from everywhere to outgoing destinations, also for dovecot as the IMAP server. It is all meant for users who want to have these servers for simple environments, like your home or small business, but with all the protection these systems can offer withou much knowledge about how to configure this. Parameters needed for this generation will be asked for in the mail module of YaST2, which need yet to be finished. A bash script for this is available, but publishing it might not be done. All in all it does not explain and put the SPF, DKIM and DMARC TXT records in the DNS, nor does it enter AAAA and/or A records in the Domain Name Server of your domain. The ideas, which are asked for, are about the best way to support what is needed to put in a proper way in the DNS to support your outgoing email. -- fr.gr. member openSUSE Freek de Kruijf

1 0

New Tumbleweed snapshot 20230802 released!
by Dominique Leuenberger 03 Aug '23

03 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluedevil5 (5.27.6 -> 5.27.7) breeze (5.27.6 -> 5.27.7) breeze-gtk (5.27.6 -> 5.27.7) discover (5.27.6 -> 5.27.7) drkonqi5 (5.27.6 -> 5.27.7) ffmpeg-6 file (5.44 -> 5.45) inkscape (1.2.2 -> 1.3) kactivitymanagerd (5.27.6 -> 5.27.7) kcm_flatpak (5.27.6 -> 5.27.7) kcm_sddm (5.27.6 -> 5.27.7) kde-cli-tools5 (5.27.6 -> 5.27.7) kde-gtk-config5 (5.27.6 -> 5.27.7) kgamma5 (5.27.6 -> 5.27.7) khotkeys5 (5.27.6 -> 5.27.7) kinfocenter5 (5.27.6 -> 5.27.7) kirigami-addons (0.9.0 -> 0.10.0) kmenuedit5 (5.27.6 -> 5.27.7) kpipewire (5.27.6 -> 5.27.7) kscreen5 (5.27.6 -> 5.27.7) kscreenlocker (5.27.6 -> 5.27.7) ksshaskpass5 (5.27.6 -> 5.27.7) ksystemstats5 (5.27.6 -> 5.27.7) kwayland-integration (5.27.6 -> 5.27.7) kwin5 (5.27.6 -> 5.27.7) kwrited5 (5.27.6 -> 5.27.7) layer-shell-qt (5.27.6 -> 5.27.7) libkdecoration2 (5.27.6 -> 5.27.7) libkscreen2 (5.27.6 -> 5.27.7) libksysguard5 (5.27.6 -> 5.27.7) libopenraw (0.3.4 -> 0.3.7) libplacebo5 libstorage-ng (4.5.127 -> 4.5.133) libuv (1.44.2 -> 1.46.0) milou5 (5.27.6 -> 5.27.7) mozilla-nss (3.90 -> 3.91) openssl-1_1 (1.1.1u -> 1.1.1v) oxygen5-sounds (5.27.6 -> 5.27.7) pam_kwallet (5.27.6 -> 5.27.7) patterns-kde (20230403 -> 20230801) plasma-browser-integration (5.27.6 -> 5.27.7) plasma-nm5 (5.27.6 -> 5.27.7) plasma5-addons (5.27.6 -> 5.27.7) plasma5-desktop (5.27.6 -> 5.27.7) plasma5-disks (5.27.6 -> 5.27.7) plasma5-integration (5.27.6 -> 5.27.7) plasma5-openSUSE plasma5-pa (5.27.6 -> 5.27.7) plasma5-systemmonitor (5.27.6 -> 5.27.7) plasma5-thunderbolt (5.27.6 -> 5.27.7) plasma5-workspace (5.27.6 -> 5.27.7) polkit-kde-agent-5 (5.27.6 -> 5.27.7) powerdevil5 (5.27.6 -> 5.27.7) python-pexpect systemsettings5 (5.27.6 -> 5.27.7) virt-manager xdg-desktop-portal-kde (5.27.6 -> 5.27.7) === Details === ==== bluedevil5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: bluedevil5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== breeze ==== Version update (5.27.6 -> 5.27.7) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== breeze-gtk ==== Version update (5.27.6 -> 5.27.7) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== discover ==== Version update (5.27.6 -> 5.27.7) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * rpm-ostree: Improve search and filter logic (kde#468162) * Fix SteamOS dbus path ==== drkonqi5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: drkonqi5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * coredump-gui: don't delete qprocess in a slot that connects to it ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavdevice60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Bump required libplacebo version to v6.292.0 or newer for TW - Temporarily demote deprecation errors to deprecation warnings for vf_libplacebo - Add upstream patches to fix build with libplacebo v6: * 0001-avfilter-vf_libplacebo-remove-deprecated-field.diff ==== file ==== Version update (5.44 -> 5.45) Subpackages: file-magic libmagic1 - Add patch file-5.45-type_t.dif * Partly upstream check of type_t is wide on 32bit systems * Extend (auto)configure to enable wide type_t type if possible - On 32bit systems define _TIME_BITS=64 to make it build - Update to 5.45: * PR/465: psrok1: Avoid muslc asctime_r crash * add SIMH tape format support * bump the max size of the elf section notes to be read to 128K and make it configurable * PR/415: Fix decompression with program returning empty * PR/408: fix -p with seccomp * PR/412: fix MinGW compilation - Remove upstream patch dc71304b.patch - Modify patches * file-5.17-option.dif * file-5.19-biorad.dif * file-5.19-zip2.0.dif * file-5.22-elf.dif * file-secure_getenv.patch - Port and rename patch file-5.44.dif now file-5.45.dif ==== inkscape ==== Version update (1.2.2 -> 1.3) Subpackages: inkscape-extensions-extra inkscape-extensions-fig inkscape-extensions-gimp inkscape-lang - Update to version 1.3: + Shape Builder Tool for building up shapes on canvas + Font Collections + Pattern Editor + Document Resources Dialog + Improved performance thanks to fully asynchronous, multithreaded rendering + LPE dialog redesigned + Improved On-Canvas Pattern Editing + Better PDF import + Page margins & bleed + Return of Search, opacity & blend modes in Layers & Objects dialog and of an optional persistent snap bar + Syntax highlighting in XML Editor + See the full release notes https://inkscape.org/doc/release_notes/1.3/Inkscape_1.3.html - Drop patch 0001-Fix-build-with-GCC13.patch, fixed upstream ==== kactivitymanagerd ==== Version update (5.27.6 -> 5.27.7) Subpackages: kactivitymanagerd-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kcm_flatpak ==== Version update (5.27.6 -> 5.27.7) Subpackages: kcm_flatpak-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kcm_sddm ==== Version update (5.27.6 -> 5.27.7) Subpackages: kcm_sddm-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Fix loading theme.conf.user (kde#436272) * Fix multi-line strings in QML file ==== kde-cli-tools5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kde-cli-tools5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kde-gtk-config5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kgamma5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kgamma5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== khotkeys5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: khotkeys5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kinfocenter5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kinfocenter5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kirigami-addons ==== Version update (0.9.0 -> 0.10.0) Subpackages: kirigami-addons-lang - Update to 0.10.0. No changelog. ==== kmenuedit5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kmenuedit5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kpipewire ==== Version update (5.27.6 -> 5.27.7) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * PipeWireSourceItem: proceed itemChange in QQuickItem ==== kscreen5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kscreenlocker ==== Version update (5.27.6 -> 5.27.7) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== ksshaskpass5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksshaskpass5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== ksystemstats5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksystemstats5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * gpu/nvidia: Discover data fields based on headers (kde#470474) ==== kwayland-integration ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kwin5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kwin5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Add closed window checks in restacking requests * Add closed window checks in some window activation code paths * x11: Sync frame extents in X11 native pixels (kde#471132) * backends/drm: handle mismatching stride with CPU copying (kde#471517) * scene: Pad damage if scale factor is fractional * locale1: fix use-after-free in xkb_keymap creation * effects: Make OpenGL context current before deleting framebuffer (kde#444665,kde#471139) * plugins/backgroundcontrast,blur: ensure the effect is only applied behind the window (kde#469625) * input: don't crash if the internal handle is nullptr (kde#471285) ==== kwrited5 ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== layer-shell-qt ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== libkdecoration2 ==== Version update (5.27.6 -> 5.27.7) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== libkscreen2 ==== Version update (5.27.6 -> 5.27.7) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * make sure kscreen-doctor exits when using --dpms * Guard the deprecated Output::setPrimary (kde#471195) ==== libksysguard5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Fix typo ==== libopenraw ==== Version update (0.3.4 -> 0.3.7) Subpackages: gdk-pixbuf-loader-libopenraw libopenraw9 - Update to version 0.3.7 and remove incorporated patch: 03f8270d6bb255ca6618505e83169ab9d95ccef1.patch - Fix build using %prep from Gentoo and autoconf - Upstream changes: * Bug fixes: Fix a crash when rendering Leica M Monochron DNG files. Preserve the raw data photometric interpretation when decompressing raw data. Properly decode uncompressed big endian 16 bit raw data from Pentax PEF. Issue #2. Including PENTAX *ist DS. #2 Added missing MPL-2.0 license to tarball. #15 Fix build issue with Rust 1.70. Fix offline Rust build from tarball. Fix a missing include with gcc 13. Issue #12. * New features: The Rust crates are vendored for the tarball. Note: resulting tarball is bigger. * Camera support: [ a * denote that static WB coefficients have been included, unless DNG ] Added Leica M11 Monochrom, Q3. [ a * denote that static WB coefficients have been included, unless DNG ] Added coefficients for Canon R8* and R50*. Added coefficients for Panasonic S5M2*. Added Panasonic GF8*. Added Sony ZV-E1*, ILME-FX30*. * Other: Updated Exif tags. ==== libplacebo5 ==== - Fix libplacebo5-devel and plplay5 conflict with libplacebo-devel and plplay, respectively ==== libstorage-ng ==== Version update (4.5.127 -> 4.5.133) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Czech) (bsc#1149754) - 4.5.133 - Translated using Weblate (Japanese) (bsc#1149754) - 4.5.132 - Translated using Weblate (Slovak) (bsc#1149754) - 4.5.131 - Translated using Weblate (Dutch) (bsc#1149754) - 4.5.130 - merge gh#openSUSE/libstorage-ng#943 - updated pot and po files - 4.5.129 - merge gh#openSUSE/libstorage-ng#942 - support no-automount partition flag - fixed include guard - 4.5.128 ==== libuv ==== Version update (1.44.2 -> 1.46.0) - Switched keyring from Jameson Nash (vtjnash) to Santiago Gimeno (santigimeno) - Update to 1.46.0: * Add some more iouring backend fs ops * work around io_uring IORING_OP_CLOSE bug - Updates in version 1.45.0: * introduce io_uring support * give thread pool threads an 8 MB stack * change execution order of timers ==== milou5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: milou5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== mozilla-nss ==== Version update (3.90 -> 3.91) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.91 * bmo#1837431 - Implementation of the HW support check for ADX instruction * bmo#1836925 - Removing the support of Curve25519 * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData * bmo#1839327 - Adding args to enable-legacy-db build * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit default trust flags" * bmo#1837617 - Initialize flags in slot structures * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow * bmo#1829112 - Followup Fixes * bmo#1784253 - avoid processing unexpected inputs by checking for m_exptmod base sign * bmo#1826652 - add a limit check on order_k to avoid infinite loop * bmo#1834851 - Update HACL* to commit 5f6051d2 * bmo#1753026 - add SHA3 to cryptohi and softoken * bmo#1753026 - HACL SHA3 * bmo#1836781 - Disabling ASM C25519 for A but X86_64 - removed upstreamed patch nss-fix-bmo1836925.patch ==== openssl-1_1 ==== Version update (1.1.1u -> 1.1.1v) Subpackages: libopenssl1_1 - Update to 1.1.1v: * Fix excessive time spent checking DH q parameter value (bsc#1213853, CVE-2023-3817). The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped. * Fix DH_check() excessive time with over sized modulus (bsc#1213487, CVE-2023-3446). The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Update openssl.keyring with the OTC members that sign releases * Rebase openssl-1_1-openssl-config.patch * Remove security patches fixed upstream: - openssl-CVE-2023-3446.patch - openssl-CVE-2023-3446-test.patch - Dont pass zero length input to EVP_Cipher because assembler optimized AES cannot handle zero size. [bsc#1213517] * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch ==== oxygen5-sounds ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== pam_kwallet ==== Version update (5.27.6 -> 5.27.7) Subpackages: pam_kwallet-32bit pam_kwallet-common - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== patterns-kde ==== Version update (20230403 -> 20230801) Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Drop the telepathy pattern. The telepathy modules are now officially unmaintained upstream and won't be released anymore. ==== plasma-browser-integration ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma-browser-integration-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma-nm5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Avoid double delete of TabWidget ==== plasma5-addons ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-addons-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * wallpapers/potd: use https in apodprovider ==== plasma5-desktop ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * applets/kickoff: add blocker to prevent focus change in search view (kde#466192) * Kickoff: Fix grid view key nav in mirrored layout * Update Unicode data for emojier to 15.0 * applets/taskmanager: use hardcoded value * applets/taskmanager: make PauseAnimation wait longer (kde#470135) * desktoppackage: activate panel on "Activate Panel Widget" shortcut pressed (kde#455398) * kaccess: Use kcfg files of kcm * kcms/access: Match kcfg default values to old defaults/kaccess ==== plasma5-disks ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-disks-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-integration ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.7 ==== plasma5-pa ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-pa-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Put volume change logic centrally in VolumeSlider * Make setGenericVolume keep balance between channels (kde#435840) ==== plasma5-systemmonitor ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-systemmonitor-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-thunderbolt ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-thunderbolt-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-workspace ==== Version update (5.27.6 -> 5.27.7) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix line wrapping of "100 %" in OSDs (kde#469576): * 0001-OSD-Fix-size-calculation-for-progress-value.patch - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * libtaskmanager: fix unable to change order of launchers (kde#472812) * Reorder removals to ensure launcher url is deallocated after last use * Fix crash in LauncherTasksModel::Private::requestRemoveLauncherFromActivities (kde#472378) * libtaskmanager: skip empty appId when matching '*.appId.desktop' (kde#472576,kde#428559) * Do not write empty path to desktop file (kde#433304) * Fix crash in TasksModel::move (kde#472524) * kcm/region_language: fix enum order (kde#472108) * kcms/region_language: Read from $LANGUAGE in options model * kcms/region_language: Improve isSupportedLanguage detection * kcms/region_language: Chop off the UTF-8 codepoint again * kcms/region_language: Check if the language setting is default as well * kcms/region_language: Simplify the language settings read * kcms/region_language: Read the LANGUAGE environment variable for the default language value * TriangleMouseFilter: remove unnecessary return * TriangleMouseFilter: make `resendHoverEvents` actually work * TriangleMouseFilter: fix incorrect handling of hover events and inactive state (kde#467426) * TriangularMouseFilter: Filter event everytime when there was no movement at all * Improve responsiveness of triangular filter * shell: move `forceActiveFocus` to `PanelView` * applets/mediacontroller: use PauseAnimation to delay showing busy indicator * applets/mediacontroller: remove duplicate opacity animation * applets/notifications: add workaround for QTBUG-100392 (kde#468180) * Notifications: Also try X-SnapInstanceName for desktop file resolution * libtaskmanager: fix a potential leak ==== polkit-kde-agent-5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: polkit-kde-agent-5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== powerdevil5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: powerdevil5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== python-pexpect ==== - Clean up the SPEC file ==== systemsettings5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: systemsettings5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Properly show the custom header widget when started with non-QML KCMs ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1213790 - Application tab in virt-manager is collapsed, therefore I can't read anything virtman-fix-inspection-apps-window.patch ==== xdg-desktop-portal-kde ==== Version update (5.27.6 -> 5.27.7) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6

1 0

Re: Disk auto-unlocking with TPM 2.0
by Thiago Macieira 03 Aug '23

03 Aug '23

Gary Lin wrote: > Next, reboot your system. If everything is setup correctly, the system will > boot without showing the passphrase prompt. Hello Gary Thank you for this. I am planning to test the functionality, but I am slightly wary of doing so because only my main laptop has TPM2. My back-up one, which is where I usually do tests and also keep as a hot-standby of TW, does not. I may not do this at all because I don't want to have two different configurations. So, what are the failure modes here? Assuming the set up didn't corrupt the grub configuration files, what happens if the TPM2 unlocking fails to work? Will I be simply prompted to enter my boot password like I do today? Is this also what happens if grub2 or shim change? On the technical side, how does the initrd image get checked? Grub, the kernel and the shim are stored unencrypted, but they are signed so they can be verified. The initrd image is also unencrypted and since it is created during zypper dup (half a dozen times), it can't be signed with SUSE's key. Will dracut/mkinitrd now use the TPM2 to sign/seal it? Finally, does this re-enable hibernation? I Understand from upstream developers that hibernation gets disabled because they couldn't otherwise verify that the hibernation image wasn't tampered with by the user. That is, the hibernation image contains a valid state for the current kernel, but that state is not what a securely-booted kernel wrote. If it does enable hibernation, do I understand correctly that such hibernation will still be disabled if the TPM boot fails and I have to type the password? If it's not enabled, do you have a timeline for when that will be supported? PS: would be nice to have a toggle for re-enabling hibernation even without TPM2, such my old laptop or with the current set ups. In order to attack the system as described above, one needs to know the swap password. AFAIU, the functionality exists to prevent the user from attacking the system, but that is only possible if the root filesystem and kernel are also dm-verity and thus unmodifiable by the admin. -- Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org Software Architect - Intel DCAI Cloud Engineering

4 7

New Tumbleweed snapshot 20230801 released!
by Dominique Leuenberger 02 Aug '23

02 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: iio-sensor-proxy (3.4 -> 3.5) rsync rubygem-rack-2.2 (2.2.7 -> 2.2.8) yast2-trans (84.87.20230720.09601d9b28 -> 84.87.20230729.64eca7e0a1) === Details === ==== iio-sensor-proxy ==== Version update (3.4 -> 3.5) - Update to version 3.5: * Fix sensor hotplugging * Fix some sensors not working when they were assigned a sampling frequency they did not support. * Add more tests. * Correct the location of the D-Bus policy file. ==== rsync ==== - Add support directory to %docdir. Includes some upstream provided scripts such as rrsync. (bsc#1212198) ==== rubygem-rack-2.2 ==== Version update (2.2.7 -> 2.2.8) - update to version 2.2.8 * Limit file extension length of multipart tempfiles (https://github.com/rack/rack/pull/2069) * Fix inefficient assert pattern in Rack::Lint (https://github.com/rack/rack/pull/2101) ==== yast2-trans ==== Version update (84.87.20230720.09601d9b28 -> 84.87.20230729.64eca7e0a1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230729.64eca7e0a1: * Translated using Weblate (Kurdish) * Translated using Weblate (Czech)

1 0

openSUSE Release Engineering meeting 02.08.2023
by Lubos Kocman 02 Aug '23

02 Aug '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar,Guillaume_G, Eugenio, Sarah, RBrown, Lubos, Max Special Guest: Eugenio regarding xcdchk replacement ## Eugenio (xcdchk replacement in SLE) xcdchk is a tool that looks at the RPMs in built installation medias in order to gather infos and differences between two (or more) builds. Although it has been decided to keep using it for SLE15-SP6, a question arose on whether to switch to something like openSUSE's factory- package-news in future. So I would like to ask about known limitations (like support for retrieving differences between past builds) and if you would be open to contributions from the SLE side to perhaps make the output more in line with the current xcdchk. Might be a fun hackweek project :) dimstar: we could add second parameter to diff against different BASE version and a target should be easy. lkocman: side-note dmach wrote a very nice "compose-diff" tool working based on productmd/json metadata. OBS team has obsgendiff. Somebody already has to scan builds and upload data to repology, I think that working with single json/yaml rather, than keep on scanning the tree would make it easeier for everyone. Dimstar: I think that the current script takes the metadata from DVD. Dirk: I don't see that current xcdchk does not scan trees. lkocman: Perhaps other extensions have media too. DimStar: obsgendiff was disabled as it delayed builds by at least 30minutes on all arches. Max: I believe that it was in the end enabled only on Leap. Dirk: xcdchk does not mask email addresses while factory-news does. Perhaps we need an option for that too. ## Leap The next hackweek will take place in the week of 6th November. All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features Filed several tasks regarding remaining setup of 15.6 (for QA, IT, autobuild, etc). So we give team enough heads up to e.g. plan for the openqa/maint setup around Beta timeframe, especially with all the work on ALP. openSUSE-repos https://news.opensuse.org/2023/07/31/try-out-cdn-with-opensuse-repos/ was published Big thanks to Michael Andres and Dirk for the review I'd like to integrate nvidia repo with it, but I'm not sure if there is an good way to handle transition correctly. But then nobody so far complained about manual revert for the old-style repos https://github.com/openSUSE/openSUSE-repos/issues/28 Aside from that Dirk and Andrii suggested to go http by default. There was some pushback from Darix etc. Dirk: It is an intermediate problem. There is only a very few mirrors left which are http-only. There are some mirrors that are ipv6 only. Dirk the end goal is that we should switch to https. Dirk: The adoption went quite up thanks to the effort (currently ~ 10k hits/minute) LeapMicro 5.5 built setup basically done, everything is building. changes were synced from SLEM5.5 Alpha2 A little change is needed to use the 15 SP5 install-images without further changes https://github.com/openSUSE/installation-images/pull/651 Need to work on the QA setup and later get-o-o ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 67 failed 0 unresolvable (last week: 87 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz * kernel 6.4.6 (with ZenBleed fix) was part of snapshot 0727 * KDE Plasma 5.27.7 in Staging * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 Max: Trouble with the new product-builder update. Adrian announced change, however, there were still some issues as expected. Bug reports were opened https://bugzilla.opensuse.org/show_bug.cgi?id=1213893. ppc64 has issue with qemu/aggregate. Check was disabled in product- builder everywhere so we can get a new snapshot. duplicate packagelist: https://paste.opensuse.org/pastes/406636eb2b3a particular issue with noarch binary: THE package in Factory:NonFree has different noarch version binary package in i586/x86_64 buil Dimstar: the situation with qemu got a lot more complex. We do import binaries etc. Dirk: I would really not recommend to disable it, it will cause issues with mirrors. Is this issue only with TW or Leap too? Max: it's only on TW. Dirk: Is chromium the only thing that we need to fix before re-enabling the flag? Dirk: the issue is only with noarch packages that have the same release number. Max: if you disable the release check it will ignore only the lower version ones. ## Richard (Aeon) Richard's been needing to focus on SUSE ALP topics more than Aeon Really wants to get Aeon's own media out soon, likely to throw it into openSUSE:Factory as openSUSE:ALP will need more time Researching using systemd-homed which would likely be ideal for Aeon, but gnome-initial-setup will need some patches CSL Concept as documented here is likely to be incorporated going forward https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts Discussions with possioble new Aeon security maintainer to basically augment the SUSE Security team so Aeon can diverge in limited areas (eg more Desktop-friendly SELinux booleans) lkocman: we have some features for home-only encryption. systemd-homed would be a big help in that direction. https://code.opensuse.org/leap/features/issue/113 ## Richard (ALP Architecture) ALP-Leap-Replacement meeting minutes - https://etherpad.opensuse.org/p/weeklymeeting20230725 Planning on releasing the poll discussed last week shortly ## Max * Re-enabled all archs build, but s390x build power is quite low * Merged more package update from 15.5:Update and Backports:SLE-15- SP5:Update I believe 15-SP6 is still not open for SRs. Or at least it was mentioned on Monday's standup. ## Guillaume - Arm Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - A fix is available in master branch of GCC and need to be backported to GCC13 - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server Note: I will miss all next meetings in August. See you in September. ## Sarah - s390x Tumbleweed * running Leap: * running Enablement topics: * MPI is enabled for LLVM (IBMer has forgotten his enablement stuff on the PC) * package calc is running on s390x * package adios2 has required an additional build dependency for libffi-devel * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1098832 (SR edited and waiting for approval again) https://bugzilla.opensuse.org/show_bug.cgi?id=1209438 Information about builds: * less build nodes available because of data center migration -> longer waiting time for successful builds ## Doug Not available * Sponsorship of LinuxFest NorthWest from previous pre-covid sponsorship carries forward this year * Contact ddemaio if plan to attend or want to run a booth * https://linuxfestnorthwest.org/ * openSUSE Conference 2023 videos complete * Thank you c3voc & openSUSE Video Team * Scheduling video posts on social media * Project Clarity * Establishing a clear understanding of projects within the openSUSE Project umbrella and how new project will be identified, verified to be part of the openSUSE Project * Board will be taking this on (Rancher and Uyuni/SUSE Manager) was discussed in the board meeting earlier this week) * openSUSE.Asia Summit * Registrations 4, Submissions 5 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * openALT / Fall 2023 (invoice based) sponsorship approved by Anicka (10k CZK) - Dirk reminded us about OSCC still having some budget available * Trying to troubleshoot one TSP payments * Community meeting * Worked on project clarity & enhancing info on https://en.opensuse.org/openSUSE:How_to_contribute_to_Factory * EL Collaboration Meeting changed to once a month. Next is August 31 * GSoC * Mid-term evaluations complete with 100% Friday, July 14, by 18:00 UTC * openSUSE Boxes * Two companies are thinking about restarting with Start-Up Booklet * Stakeholders informed * Need to schedule followup meeting w/netitwork Static * Still need future storage location * AI topics (static) * Scraping of info & how it might affect costs is being dicussed by board * Dirk: There is a OSCC meetup today touching the topic * Board looking into using AI to help with possible moderation *** ddemaio will be unavailable for this meeting until the August 9 meeting starting next week ## Dirk Further troubleshooting and tuning of CDN configuration. Currently enabled in NA, SA and Africa. ## Wolfgang (Package Hub), Scott Bahling Not available Project openSUSE:Backpors:SLE-15-SP6 created in OBS (currently build disabled because of AC issues in SRV1, more build workers will be added latest tomorrow) Creating release package for SP6 (SUSE:Backports:SLE-15-SP6) today in IBS ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of July AC problems in Nüremberg with openQA servers ## Open Floor

1 0

New Laptop
by Leandro Almeida 02 Aug '23

02 Aug '23

Hello, I wanted to ask openSUSE to add the drivers of my new laptop in the distribution, to get full performance, last longer battery etc I also wanted to suggest to OpenSUSE, to add better general support in hardware acceleration, audio, GPU, av1, vp9, avc, etc Also OpenSUSE adds by default vm.max_map_count 2147483642 (MAX_INT – 5), for proton steam play vulkan to flow better, games with huge maps to flow better, fps increase etc. And better Steam support from snap packages, official steam too 👍👍😄 Lenovo IdeaPad 3 15ITL6 Intel Core i3 1115g4 (4) 4100GHz Intel Tiger Lake-LP GT2 (UHD Graphics G4) 1920x1080p 60Hz KDE Plasma Wayland PTBR UTF8 ABNT2 with numeric keypad OpenSUSE Tumbleweed 👍👍😄

8 11

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 02 Aug '23

02 Aug '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - nomacs: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by nomacs-3.16.224.x86_64 - pix: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by pix-2.8.0.x86_64 - python-exiv2: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by python310-exiv2-0.11.0.x86_64 - ufraw: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by gimp-ufraw-0.22.x86_64 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

New Tumbleweed snapshot 20230731 released!
by Dominique Leuenberger 01 Aug '23

01 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: util-linux (2.39 -> 2.39.1) util-linux-systemd (2.39 -> 2.39.1) vala-panel-appmenu === Details === ==== util-linux ==== Version update (2.39 -> 2.39.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Re-add 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch because the patch is not in 2.39.1 - Upgrade to version 2.39.1 (bsc#1213328) Various bug fixes including problem with parsing mount options. - Dropped upstreamed patches: 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch 0001-libmount-fix-sync-options-between-context-and-fs-str.patch util-linux-fix-tests-with-64k-pagesize.patch ==== util-linux-systemd ==== Version update (2.39 -> 2.39.1) - Re-add 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch because the patch is not in 2.39.1 - Upgrade to version 2.39.1 (bsc#1213328) Various bug fixes including problem with parsing mount options. - Dropped upstreamed patches: 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch 0001-libmount-fix-sync-options-between-context-and-fs-str.patch util-linux-fix-tests-with-64k-pagesize.patch ==== vala-panel-appmenu ==== Subpackages: appmenu-gtk-module-common appmenu-gtk2-module appmenu-gtk3-module libappmenu-gtk2-parser0 libappmenu-gtk3-parser0 - Fix systemd_user_post macro use. - Spec clean-up.

1 0

Re: missing Tumbleweed snapshot release announcements
by Eric Schwarzenbach 01 Aug '23

01 Aug '23

On 7/31/23 14:12, Jan Engelhardt wrote: > On Monday 2023-07-31 18:34, Bernhard M. Wiedemann via openSUSE Factory wrote: > >> On 31/07/2023 18.17, Eric Schwarzenbach wrote: >>> Are these snapshot release announcements also posted anywhere on the web? >> You can get the missing ones with >> >> curl https://download.opensuse.org/tumbleweed/iso/Changes.20230727.txt >> curl https://download.opensuse.org/tumbleweed/iso/Changes.20230728.txt > https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/ Yes, I referred to these archives in my first message. The archive shows a gap between July 28 and 31 and has no notifications for the two snapshots that Bernhard kindly gave links for.

2 1

Re: Disk auto-unlocking with TPM 2.0
by Georg Schukat 01 Aug '23

01 Aug '23

> Am 31.07.2023 um 15:35 schrieb factory-request(a)lists.opensuse.org: > > Re: Disk auto-unlocking with TPM 2.0 > I set up a few remotely managed servers by moving all of the important > data to LUKS encrypted filesystems. These filesystems aren't in /etc/fstab > so they don't get mounted after a reboot. Once rebooted I remotely > SSH in and run a script that mounts the encrypted filesystem that prompts > for the password. It then starts the appropriate daemons (Postgresql, etc) > and everything is fine. I know there's a possibility of data leakage > via /tmp and swap, but I think the risk is minimal and the servers are in > a protected space anyway. I wonder if swap and /tmp could be encrypted > this way too, it might be fun to fiddle with it someday? > > So the basic idea is to set up a server so that it partially boots, but boots > far enough to set up the network and start the SSH daemon. Then, log > in remotely to finish the rest of the boot after entering the LUKS password. > Could something like this be added to the Leap install process to make it > easier to set up? > > Regards, > Lew > You can go further, a sshd can be started from grub. I have 2 servers running in that mode. My logs how I did set that up are not 100% complete so I can only give hints. Core component is the package dracut-sshd For documentation see: https://github.com/gsauthof/dracut-sshd It shows you several options how to setup your remote server. In general either use early networkd or setup your network in the initrd command line. Further documentation about network configuration within initrd can be found at the "other Linux" site: https://www.redhat.com/sysadmin/network-confi-initrd Would be then similar to: in `/etc/default/grub` modify `GRUB_CMDLINE_LINUX` to include network configs: E.g. GRUB_CMDLINE_LINUX="rd.neednet=1 ip=..." Furtheron you have to create ssh client keyfiles and integrate the public key file into the servers list of known client keys. Details see above mentioned docs That way all partitions besides boot and boot/efi can be encrypted at boot and you get this nice boot prompt when you ssh into that server at boot: Welcome to the early boot SSH environment. You may type systemd-tty-ask-password-agent (or press "arrow up") to unlock your disks. This shell will terminate automatically a few seconds after the unlocking process has succeeded and when the boot proceeds. If you do so you will be prompted for the password of one encrypted disk, more if they have different ones. Grub will decrypt now the disks the same way if you would have entered the passwords sitting at the console.

3 2