February 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240110 released!
by Dominique Leuenberger 01 Jun '24

01 Jun '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: certmonger (0.79.15 -> 0.79.19) eog (45.1 -> 45.2) git gnome-remote-desktop (45.0 -> 45.1) gnome-shell (45.2 -> 45.3) gvfs (1.52.1 -> 1.52.2) hwdata (0.377 -> 0.378) libgxps (0.3.2 -> 0.3.2+5) libstorage-ng (4.5.170 -> 4.5.171) libxkbcommon mutter (45.2 -> 45.3) nodejs21 (21.4.0 -> 21.5.0) publicsuffix (20231213 -> 20240107) redis (7.2.3 -> 7.2.4) sg3_utils (1.48+6.7f43e14 -> 1.48+7.63e63cb) transmission (4.0.4 -> 4.0.5) yast2-packager (5.0.1 -> 5.0.2) === Details === ==== certmonger ==== Version update (0.79.15 -> 0.79.19) - Update to 0.79.19 - Removed 0001-Disable-DSA-in-the-RPM-spec.patch - Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch ==== eog ==== Version update (45.1 -> 45.2) Subpackages: eog-lang - Update to version 45.2: + data: Update appdata. + Updated translations. ==== git ==== Subpackages: git-core git-email git-web perl-Git - gitweb AppArmor profile: allow reading etc/gitweb-common.conf (boo#1218664) ==== gnome-remote-desktop ==== Version update (45.0 -> 45.1) Subpackages: gnome-remote-desktop-lang - Update to version 45.1: + session: - Assert region size to be greater than 0 - Add debug message to also output new EI regions - Scale absolute pointer position with respect to the EI region - Clear all EI related instances before dbus session stop call - Only notify keysym when EI keyboard is available - Add struct for absolute pointer motion events + vnc-pipewire-stream: Don't remove buffer while dequeueing it + rdp-pipewire-stream: Don't remove buffer while dequeueing it + Adapt usage of abs pointer motion events to GrdEventPointerMotionAbs + Updated translations. ==== gnome-shell ==== Version update (45.2 -> 45.3) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 45.3: + Allow any enter key to be used to screenshot. + Fix spinner in light style variant. + Improve formatting of extension errors. + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. - Drop gnome-shell_nb_fix_trans.patch: fixed upstream. ==== gvfs ==== Version update (1.52.1 -> 1.52.2) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update to version 1.52.2: + smb: Fix livelock when mounting share without enough permissions. + smb: Fi moving files across filesystem boundaries. + Updated transltions. ==== hwdata ==== Version update (0.377 -> 0.378) - update to 0.378: * Update pci, usb and vendor ids ==== libgxps ==== Version update (0.3.2 -> 0.3.2+5) - Update to version 0.3.2+5: + DOAP: Fix 'bug-database' value to point to GNOME GitLab Issues + images: - For jpeg images try to get the image resolution from exif first - Add support for jpeg images with CMYK color space + Fix compiler warnings + Fix meson warnings - Switch to git checkout via source service, use explicit commit. - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. - Drop no longer needed libgxps-rpmlintrc. ==== libstorage-ng ==== Version update (4.5.170 -> 4.5.171) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#977 - provide light_probe function with SystemInfo parameter - 4.5.171 ==== libxkbcommon ==== Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - add libxkbregistry-devel to baselibs for use by wine-32bit. (bsc#1218640) ==== mutter ==== Version update (45.2 -> 45.3) Subpackages: mutter-lang - Update to version 45.3: + Fix handling of relative mode for tablets. + Fix forcing EGLStream with NVIDIA proprietary driver. + Sync geometry only when window is mapped. + Improve repick due to transform changes. + wayland/client: Add make_desktop() method. + Fix occasional artifacts at top of X11 fullscreen windows. + background: Fix background color around image. + Fixed crashes. + Plugged leaks. + Misc. bug fixes and cleanups. + Updated translations. ==== nodejs21 ==== Version update (21.4.0 -> 21.5.0) Subpackages: npm21 - Update to 21.5.0: * module: merge config with package_json_reader * src: move package resolver to c++ * doc: + deprecate hash constructor + deprecate dirent.path - linker_lto_jobs.patch: refreshed ==== publicsuffix ==== Version update (20231213 -> 20240107) - Update to version 20240107: * Remove homeoffice.gov.uk (#1909) * util: gTLD data autopull updates for 2024-01-06T15:12:04 UTC (#1918) ==== redis ==== Version update (7.2.3 -> 7.2.4) - redis 7.2.4: (boo#1218646) - Security fixes - (CVE-2023-41056) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. - Bug fixes - Fix crashes of cluster commands clusters with mixed versions of 7.0 and 7.2 (#12805, #12832) - Fix slot ownership not being properly handled when deleting a slot from a node (#12564) - Fix atomicity issues with the RedisModuleEvent_Key module API event (#12733) ==== sg3_utils ==== Version update (1.48+6.7f43e14 -> 1.48+7.63e63cb) Subpackages: libsgutils2-1_48-2 - Fix spurious warning for non-SCSI devices (boo#1218666) ==== transmission ==== Version update (4.0.4 -> 4.0.5) Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Update to version 4.0.5: + Fixed 4.0.0 bug where the IP address field in UDP announces were not encoded in network byte order. + Fixed a bug that incorrectly escaped JSON strings in some locales. + Fixed 4.0.4 decreased download speeds for people who set a low upload bandwidth limit. + Fixed bug that prevented editing trackers on magnet links. + Fixed HTTP tracker announces and scrapes sometimes failing after adding a torrent file by HTTPS URL. + In RPC responses, change the default sort order of torrents to match Transmission 3.00. + Fixed tr_sys_path_copy() behavior on some Synology Devices. + Fix: only append .added suffix to watchdir files. + Fixed crash when opening torrent file from "Recently used" section in GTK 4. ==== yast2-packager ==== Version update (5.0.1 -> 5.0.2) - After installation disable the empty installation repository from the SLE15 Online medium (bsc#1182303) - 5.0.2

7 7

factory@ is now under moderation
by Neal Gompa 28 May '24

28 May '24

Hello all, Due to the recent continuous inappropriate behavior on the factory@ mailing list, we have taken the extraordinary action of moderating the entire mailing list. Each message being submitted will be actively reviewed for approval until the Board works through the necessary and appropriate behavior to resolve this incident. -- Neal Gompa (ID: Pharaoh_Atem)

3 2

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

enabling reproducible builds in Factory and ALP
by Jan Zerebecki 15 Mar '24

15 Mar '24

Hi *, to support https://en.opensuse.org/openSUSE:Reproducible_Builds I plan to get the following project configuration for Factory and ALP enabled: Macros: %source_date_epoch_from_changelog Y %clamp_mtime_to_source_date_epoch Y %use_source_date_epoch_as_buildtime Y %_buildhost reproducible :Macros I'm still waiting to get https://github.com/openSUSE/product-builder/pull/26 merged to prevent a bug with mirrors that will otherwise happen. Afterwards a time of the build is still in the HTTP header Last-Modified when requesting the rpm file. HTTP mtime is a few seconds earlier than end time of the build (seen in OBS web UI only as start + duration). I didn't double check, but it should also be recorded in the Tumbleweed archive Bernhard keeps, which can with a bit of work be looked up by content hash or name including version of the rpm file if its not on the normal mirrors anymore. Both the build time and host can also still be seen in the build log. Comments welcome. -- Best regards, Jan Zerebecki

4 6

Issues with vagrant / libvirt since snapshot from this week Tuesday or Wednesday?
by Johannes Kastl 08 Mar '24

08 Mar '24

Hi all, is anyone else experiencing issues with libvirt since mid of this week? I can no longer start VMs using vagrant. Vagrant hangs at "Waiting for domain to get an IP address..." and never gets anywhere. Existing VMs can be started using virsh or libvirt, so it might be an issue with vagrant itself. But it was working until mid of this week, despite being outdated (due to the licensing change). I noticed some errors regarding missing directories on Feb 8th and today: > Feb 08 13:09:28 baten systemd[1]: Starting libvirt legacy monolithic daemon... > Feb 08 13:09:28 baten libvirtd[7841]: libvirt version: 10.0.0 > Feb 08 13:09:28 baten libvirtd[7841]: hostname: baten > Feb 08 13:09:28 baten libvirtd[7841]: Failed to initialize libnetcontrol. Management of interface devices is disabled > Feb 08 13:09:28 baten systemd[1]: Started libvirt legacy monolithic daemon. > Feb 08 13:09:29 baten libvirtd[7841]: Interner Fehler: failed to query mdevs from mdevctl: Error: Required directory "/usr/lib/mdevctl/scripts.d/callouts" doesn't exist. This may indicate a packaging or installation error > Feb 08 13:11:28 baten systemd[1]: libvirtd.service: Deactivated successfully. or > > Feb 10 18:31:36 baten systemd[1]: Started libvirt legacy monolithic daemon. > Feb 10 18:31:37 baten libvirtd[4420]: Interner Fehler: failed to query mdevs from mdevctl: Error: Required directory "/usr/lib/mdevctl/scripts.d/notifiers" doesn't exist. This may indicate a packaging or installation error And sure enough there are no directories in /usr/lib/mdevctl/scripts.d/ on all of my machines... Kind Regards, Johannes

6 11

Proposal: amend the packaging guidelines for %fillup_only
by Dan Čermák 02 Mar '24

02 Mar '24

Hi list, our packaging guidelines for %fillup_only [1] currently do not suggest anything for the %files section for the files generated in `/etc/sysconfig/`. I would like to suggest that we start adding the newly generated file `/etc/sysconfig/$pkgname` as follows to the %files section: --8<---------------cut here---------------start------------->8--- %files %ghost %config(noreplace) %attr(0600,root,root) /etc/sysconfig/%{name} %dir /etc/sysconfig --8<---------------cut here---------------end--------------->8--- This ensures that rpm is aware of the files as configuration files. Thoughts, opinions? Cheers, Dan Footnotes: [1] https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#%fillup_o… -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstr. 146 90461 Nürnberg Germany www.suse.com Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

3 3

New Tumbleweed snapshot 20240228 released!
by Dominique Leuenberger 29 Feb '24

29 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 apache2-manual apache2-prefork apache2-utils apparmor cpio cups distribution-logos-openSUSE docbook-xsl dracut (059+suse.554.g6144bf71 -> 059+suse.557.g8a62bf73) file fwupd (1.9.13 -> 1.9.14) gdb gle gpsd greybird-geeko-theme gsl guile icewm icewm-theme-branding libapparmor libgpg-error (1.47 -> 1.48) libimobiledevice-glue (1.0.0+git3.20230513 -> 1.1.0+git0.20240222) libixion (0.18.1 -> 0.19.0) liborcus (0.18.1 -> 0.19.2) libstorage-ng (4.5.191 -> 4.5.193) ncurses (6.4.20240210 -> 6.4.20240224) nvidia-open-driver-G06-signed open-vm-tools rubygem-childprocess (4.1.0 -> 5.0.0) setserial slang spamassassin transfig upower (1.90.2 -> 1.90.2+15) xfsdump xmlsec1 zlib (1.3 -> 1.3.1) === Details === ==== apache2 ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== apache2-manual ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== apache2-prefork ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== apache2-utils ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Fix systemd userdb access in unix-chkpwd ==== cpio ==== Subpackages: cpio-lang cpio-mt - Use %autopatch instead of deprecated %patchN. ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - Use %patch -P N instead of deprecated %patchN. ==== distribution-logos-openSUSE ==== Subpackages: distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - Add handling for Leap Micro 6.X and Leap 16.X ==== docbook-xsl ==== - Use %patch -P N instead of deprecated %patchN. ==== dracut ==== Version update (059+suse.554.g6144bf71 -> 059+suse.557.g8a62bf73) - Update to version 059+suse.557.g8a62bf73: * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485) ==== file ==== Subpackages: file-magic libmagic1 - Prepare for RPM 4.20 ==== fwupd ==== Version update (1.9.13 -> 1.9.14) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.14: * Correctly detect ARM32 and RISC-V UEFI binaries. * Correctly migrate the database schema from very old fwupd versions. * Fix DS-20 descriptors by opening the GUsbDevice earlier. * Fix updating the fingerprint reader on the Framework 13 and 16 laptop. * Fix warning when probing devices using the metadata allowlist. * Only recover the version format for specific devices. ==== gdb ==== - Use %patch -P N instead of deprecated %patchN. - Maintenance script qa.sh: * Add PR31214 kfail. * Add kfail for fails in gdb.reverse/solib-precsave.exp / gdb.reverse/solib-reverse.exp fixed by commit fe6356def67 ("PowerPC and aarch64: Fix reverse stepping failure"). * Extend PR31004 kfail. - Don't require %{python}-base for gdb-testresults package. - Fix debuginfod handling: * Enable for sle_version >= 150400 (bsc#1185605, jsc#PED-1149, jsc#PED-1138), SLE15-SP4 and later. * Enable for suse_version >= 1600, ALP and Tumbleweed. * Add back "BuildRequires: libdebuginfod1" to prevent selecting dummy variant. * Add "BuildRequires: debuginfod-client" to prevent unresolved due to conflict with dummy variant. * Add --with-debuginfod=yes to prevent silently dropping support. - Patches added (backport from master): * gdb-testsuite-add-missing-no-prompt-anchor-in-gdb.ba.patch * gdb-testsuite-remove-spurious-in-save_vars.patch ==== gle ==== - Use SRPM base name for subpackages like -devel. - Delete old specfile constructs. - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== gpsd ==== - Use %patch -P N instead of deprecated %patchN. ==== greybird-geeko-theme ==== Subpackages: gtk2-metatheme-greybird-geeko gtk3-metatheme-greybird-geeko gtk4-metatheme-greybird-geeko metatheme-greybird-geeko-common - Use %patch -P N instead of deprecated %patchN. ==== gsl ==== Subpackages: libgsl27 libgslcblas0 - Use %patch -P N instead of deprecated %patchN. ==== guile ==== Subpackages: guile-modules-3_0 libguile-3_0-1 - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== icewm ==== Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Use %patch -P N instead of deprecated %patchN. ==== icewm-theme-branding ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN - Add fix-web-browser-icon.patch: The Adwaita theme does not provide much legacy apps icon now, redirect icewm web-browser icon to the right place. See: https://gitlab.gnome.org/GNOME/adwaita-icon-theme/-/issues/163 https://gitlab.gnome.org/GNOME/adwaita-icon-theme/-/merge_requests/34/ ==== libapparmor ==== - Fix systemd userdb access in unix-chkpwd ==== libgpg-error ==== Version update (1.47 -> 1.48) Subpackages: libgpg-error0 libgpg-error0-32bit - Update to 1.48: * New configure option --with-libtool-modification. [T6619] * New option parser flag to detect commands given without a double dash. There is also the new meta command "command-mode" to set this flag via a config file. [T6978] * Added an es_fopen mode flag "sequential" with support on Windows. [rE7a42ff0ec9] * Added an es_fopen mode flag "wipe" to cleanup internal buffers at close time. [T6954] * New function gpgrt_wipememory. [T6964] * Improvements to setenv on Windows. [rE89e53ad90f] * Fixed call to estream-printf string filters. [T6737] * Many improvements to the yat2m tool. * Updates to the build system. * Interface changes relative to the 1.47 release: - ARGPARSE_FLAG_COMMAND NEW. - gpgrt_wipememory NEW. * Release-info: https://dev.gnupg.org/T6441 * Update upstream libgpg-error.keyring ==== libimobiledevice-glue ==== Version update (1.0.0+git3.20230513 -> 1.1.0+git0.20240222) - Update to version 1.1.0+git0.20240222: - Changes: * socket: Use poll() - when available - instead of select() * socket: Allow NULL as address for socket_create() and socket_connect() * win32: Remove windows.h from public headers * Add version function to interface - Bugfixes: * opack: Fixed 32bit buffer overflow * opack: Fix parsing of 32 and 64 bit packed values - Internal: * Move LIMD_GLUE_API definitions to public headers * socket: Conditionally compile using poll or select based on availability * socket: Fix select failing when the process has many file descriptors by using poll instead * win32: Fix external compilation using libimobiledevice-glue/thread.h ==== libixion ==== Version update (0.18.1 -> 0.19.0) - Update to 0.19.0: * C++ API * added support for renaming sheets after they have been created. * formula interpreter * added support for inline arrays. ==== liborcus ==== Version update (0.18.1 -> 0.19.2) - Update to orcus 0.19.2: * fixed a build issue with gcc 14 due to a missing include for std::find_if and std::for_each. * fixed a segmentation fault with the orcus-test-xml-mapped test which manifested on hppa hardware, as originally reported on https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054376. * fixed a crash when loading a document that includes a style record referencing an unnamed style record as its parent. In Excel-generated documents, styles only reference named styles as their parents. But in 3rd-party generated documents, styles referencing unnamed styles as their parents can occur. * fixed a crash when the document model returned a null pointer when a reference resolver interface was requested. - Update to orcus 0.19.1: * implemented orcus::create_filter() which instantiates a filter object of specified type. The returned object is of type orcus::iface::import_filter. * moved test cases for format detection to the respective filter test files. * fixed a bug where the import filter did not set the formula grammer prior to importing. - Update to orcus 0.19.0: * added support for allowing use of std::filesystem, std::experimental::filesystem or boost::filesystem per build configuration. * refactored styles import to use style indices returned by the document model implementer rather than using the indices stored in the file. This allows the implementer to aggregate some style records and re-use the same index for records that are stored as different records in the original file. * fixed a bug where column styles were not applied to the correct columns when the starting column index was not 0. * overhauled the Gnumeric import filter to fix many bugs and support many missing features relative to the other filters included in orcus. Most notable mentions are: * cell styles * rich-text strings * named ranges * row heights and column widths * merged cells * added partial support for Apache Parquet import filter. This is still heavily experimental. - Remove patches: * 0001-Possibility-to-build-against-a-host-of-filesystem-im.patch (upstreamed) * 0002-Allow-using-older-boost-filesystem.patch ==== libstorage-ng ==== Version update (4.5.191 -> 4.5.193) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#988 - allow more control of environment in SystemCmd class - 4.5.193 - merge gh#openSUSE/libstorage-ng#987 - fixed check in testsuite - 4.5.192 ==== ncurses ==== Version update (6.4.20240210 -> 6.4.20240224) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240217 + add vt100+noapp, vt100+noapp+pc, xterm+app+pc, xterm+decedit from xterm #389 -TD + fix inconsistent description of wmouse_trafo() (Debian #1059778). + modify wenclose() to handle pads (Debian #1059783). + improve manpage discussion of mouseinterval() (Debian #1058560). - Add ncurses patch 20240224 + improve man/curs_mouse.3x style (Brandon Robinson, Sven Joachim). + provide for CCHARW_MAX greater than 1 + eliminate use of PATH_MAX in lib_trace.c + work around misconfiguration of MacPorts gcc13, which exposes invalid definition of MB_LEN_MAX in gcc's fallback copy of limits.h (MacPorts [#69374]). ==== nvidia-open-driver-G06-signed ==== - let's provide/obsolete nvidia-open-driver-G06 instead of nvidia-open-driver-G06-kmp since older versions still had conflicts to nvidia-open-driver-G06-kmp ... ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Use %patch -P N instead of deprecated %patchN. ==== rubygem-childprocess ==== Version update (4.1.0 -> 5.0.0) - ### Version 5.0.0 / 2024-01-06 * [#175](https://github.com/enkessler/childprocess/pull/175): Replace all backends by `Process.spawn` for portability, reliability and simplicity. * [#185](https://github.com/enkessler/childprocess/pull/185): Add support for Ruby 3.x ==== setserial ==== - Use %patch -P N instead of deprecated %patchN. ==== slang ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== spamassassin ==== Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - Use %patch -P N instead of deprecated %patchN. ==== transfig ==== - Use %patch -P N instead of deprecated %patchN ==== upower ==== Version update (1.90.2 -> 1.90.2+15) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 upower-lang - Update to version 1.90.2+15: * Revert "ci: Update last ABI break" * Revert "build: Bump the library soname after recent changes" * Revert "all: Remove Lid handling" * Revert "lib: Remove deprecated up_client_get_devices()" * dbus: org.freedesktop.UPower: EnergyRate is a positive value * linux: Adjust test_bluetooth_le_device for dbusmock 0.30.1 * linux: stop assuming power supply of unknown type as battery * linux: drop f-literals without format string * linux: prefer is not None over != * build: make 'udevrulesdir' and 'udevhwdbdir' as Linux-only - Introduce _service obs_scm and obsinfo files for automated update service via: osc service mr ==== xfsdump ==== - Use %patch -P N instead of deprecated %patchN. ==== xmlsec1 ==== Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - Use %patch -P N instead of deprecated %patchN. ==== zlib ==== Version update (1.3 -> 1.3.1) Subpackages: libminizip1 libminizip1-x86-64-v3 libz1 libz1-32bit libz1-x86-64-v3 - Use %autopatch instead of %patch - Update to 1.3.1: * Reject overflows of zip header fields in minizip * Fix bug in inflateSync() for data held in bit buffer * Add LIT_MEM define to use more memory for a small deflate speedup * Fix decision on the emission of Zip64 end records in minizip * Add bounds checking to ERR_MSG() macro, used by zError() * Neutralize zip file traversal attacks in miniunz * Fix a bug in ZLIB_DEBUG compiles in check_match() - Update pacthes: * CVE-2023-45853.patch * zlib-1.3-IBM-Z-hw-accelerated-deflate-s390x.patch

1 0

openSUSE Release Engineering meeting 28.02.2024
by Lubos Kocman 29 Feb '24

29 Feb '24

!!! HEADS UP WE WILL BE BACK USING JITSI SINCE THE NEXT MEETING !!! https://meet.opensuse.org/ReleaseEngineeringMeeting How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees ana, GuillaumeG, lkocman, DocB, ddemaio, wengel ## Leap Leap 15.6 will have a new build today within few hours (ftp-tree is finishing). update: the build will be released on Friday, we fixed https://bugzilla.opensuse.org/show_bug.cgi?id=1220603 https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Progress on Leap Micro 6.0 building. Focusing on having self-install image built. Few more debranding needed (systemd-presets and related deps). SCC enablement for Leap Micro was questioned. DP was invited to osc2024, he was pleased to see that it's not weekend-only event. I think we should approach him with potential idea for a keynote. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 170 failed 26 unresolvable (last week 189 failed, 26 unresolvable) https://tinyurl.com/ysy4nnnz => Many (>100) are python packages that are still failing to build with Python 3.12 Most relevant updates: * Linux Kernel Longterm 6.6.18 (new in Tumbleweed!) * Linux Kernel 6.7.6 * git 2.44.0 * c-ares 1.27.0 * qemu 8.2.1 * Ruby 3.3 is now the default version * lkocman: should we give headsup to ALP? They're still based on 3.2. (I suppose Agama 7 already uses 3.3 anyway). Updates waiting / work still in progress: * RPM 4.19.11 + 4.20 * RPM 4.19.1.1 (user/group dependencies), Packages not included in rings getting updates, still some more to go, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (currently about 10 missing) * Preparations for RPM 4.20, %patchN won't be supported anymore, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Careful: spec-cleaner 'cleans' this in the wrong direction: https://github.com/rpm-software-management/spec-cleaner/issues/319 (fixed in git, package not yet updated?) * Python: Not everything yet fixed to build with Python 3.12, removal of python 3.9 OK blocked by build failures * KDE Frameworks and Plasma 6 releasing this week, work in progress * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 * systemd 255.3 ( SR#1152118) * update openSUSE-build-key (new suse container key!) SR#1150669 - blocked until key is replaced * libxml 2.12.1 (lots of work to do), on hold, remove from staging to allow security update * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. ## Richard (Aeon+botmaster) Not available ## Max Not available ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) * TW installer seems to have have issues with PAC/BTI - https://bugzilla.suse.com/show_bug.cgi?id=1219717 - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 * Leap 15.6/Backports SP6: - CVE for python-onnx but update impossible because of missing deps and some deps requiring newer python. https://bugzilla.opensuse.org/show_bug.cgi?id=1220313 I'll make the drop sr. * WSL: x86_64 is fetched from Microsoft Store GUI for Tumbleweed image instead of arm64. But `wsl --install openSUSE-Tumbleweed --web-download` works just fine! - https://bugzilla.opensuse.org/show_bug.cgi?id=1219372. Scott Bradnick made the instructions for Windows for Arm into image description for Tumbleweed. I believe we've also updated WSL wiki with the instrucitons. https://en.opensuse.org/openSUSE:WSL ## Sarah - s390x Not available ## Doug * Contribution Workshops * More sign ups at https://etherpad.opensuse.org/p/openSUSE-Contribution-Workshop * Episodes 2 released * Episode 3 postponed * Episode 4 - Language-specific packaging - Rust and Go provided link. Will come in March lkocman: Are we growing on numbers compared to first episode? * Dropping off some additional items to openSUSE booth organizers for Chemnitz Linux Tage * Plan to release next week SD Boot Utils article * Waiting for one more review - https://etherpad.opensuse.org/p/SD_Boot_Util * GSoC * Admins and mentors are being added to this year's session * Will published tw monthly review * Approving some TSPs * Community Summit * 4 Registrations, 4 Submissions, 2 Hours (pre-announcement) * Article published - https://news.opensuse.org/2024/02/26/community-summit-berlin/ lkocman: I was made co-speaker of Sergio's SLE Micro talk, but I'm really afraid I won't be able to make it. * openSUSE Conference * 45 Registrations, 27 Submissions, 16 Hours (4 Open 4 Business Submissions) ** I won't be available the next two weeks Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling No news ## Maintenance team (Marcus or Maurizio (m4u)) Dominique: the new key seems to raise some issues - transition needs to be figured out. Marcus: I did check podman documentation and am looking if we can have temporarily two keys in parallel. Marcus: will we resign all the images on the registry or only new ones? Dominique: for rpm we usually accept both old and new key for about a half a year. lkocman: Leap Micro 6.X update channel setup will have to be done soon (within a few weeks). ## Adrian - OBS Not available lkocman: we need to cleanup accepted / rejected requests in SUSE:SLE-15-SP6:GA in OBS. lkocman doesn't have permissions to do so. Workaround would be to re-add/reject suse-sle-reviewers review. ## Simon (Leap Replacement/Linarite) Not available ## Bernhard Slowroll * kernel-longterm 6.6.18 from Factory * kernel-default should now follow Factory * first openQA test https://openqa.opensuse.org/tests/overview?distri=opensuse&version=Slowroll… * did version bump to 20240213 * OBS now has a Slowroll distribution target, so it is easy to add in devel projects ## Open Floor We'll return back to jitsi on the meeting.

1 0

slowroll is broken
by Larry Len Rainey 29 Feb '24

29 Feb '24

4 7

This RPM is bad - workaround provided
by Larry Len Rainey 29 Feb '24

29 Feb '24

2 1

New Tumbleweed snapshot 20240227 released!
by Dominique Leuenberger 28 Feb '24

28 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (122.0.1 -> 123.0) c-ares (1.26.0 -> 1.27.0) cdparanoia chrony (4.4 -> 4.5) cronie ddskk delayacct-utils dhcp dmidecode docbook_4 drbd drbd-utils dump emacs-jinx (1.2 -> 1.3) fcitx fcitx-chewing fcitx-configtool fcitx-zhuyin fcoe-utils fltk gcin giflib (5.2.1 -> 5.2.2) git (2.43.2 -> 2.44.0) glyr gnutls libksba (1.6.5 -> 1.6.6) libunistring (1.1 -> 1.2) mokutil mozilla-nss multipath-tools (0.9.8~1+82+suse.dcd98a3 -> 0.9.8+83+suse.bcae610) npth (1.6 -> 1.7) openssh (9.3p2 -> 9.6p1) openssh-askpass-gnome (9.3p2 -> 9.6p1) openvpn python-PyYAML rubygem-concurrent-ruby (1.2.2 -> 1.2.3) rubygem-excon (0.104.0 -> 0.109.0) rubygem-google-protobuf (3.25.1 -> 3.25.2) rubygem-googleapis-common-protos-types (1.10.0 -> 1.11.0) rubygem-mime-types (3.5.1 -> 3.5.2) rubygem-mime-types-data (3.2023.1003 -> 3.2023.1205) rubygem-net-ssh (7.2.0 -> 7.2.1) rubygem-parallel (1.23.0 -> 1.24.0) rubygem-parallel_tests (4.3.0 -> 4.4.0) rubygem-public_suffix (5.0.3 -> 5.0.4) rubygem-rack-2.2 (2.2.8 -> 2.2.8.1) rubygem-rack (3.0.8 -> 3.0.9.1) salt sazanami-fonts sbl sendmail sha1collisiondetection sord soundtouch speex splix susepaste syslogd system-config-printer sysvinit thin-provisioning-tools (1.0.11 -> 1.0.12) tigervnc usbutils virtiofsd vlc xauth xdm xf86-input-evdev xf86-input-vmmouse xf86-input-wacom xf86-video-intel xf86-video-nouveau xf86-video-nv xf86-video-vesa xinit xkeyboard-config xorg-x11-server xrandr yast2-trans (84.87.20240219.f6e4117fe0 -> 84.87.20240224.f7ab2886c1) === Details === ==== MozillaFirefox ==== Version update (122.0.1 -> 123.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 123.0 https://www.mozilla.org/en-US/firefox/123.0/releasenotes/ MFSA 2024-05 (bsc#1220048) * CVE-2024-1546 (bmo#1843752) Out-of-bounds memory read in networking channels * CVE-2024-1547 (bmo#1877879) Alert dialog could have been spoofed on another site * CVE-2024-1554 (bmo#1816390) fetch could be used to effect cache poisoning * CVE-2024-1548 (bmo#1832627) Fullscreen Notification could have been hidden by select element * CVE-2024-1549 (bmo#1833814) Custom cursor could obscure the permission dialog * CVE-2024-1550 (bmo#1860065) Mouse cursor re-positioned unexpectedly could have led to unintended permission grants * CVE-2024-1551 (bmo#1864385) Multipart HTTP Responses would accept the Set-Cookie header in response parts * CVE-2024-1555 (bmo#1873223) SameSite cookies were not properly respected when opening a website from an external browser * CVE-2024-1556 (bmo#1870414) Invalid memory access in the built-in profiler * CVE-2024-1552 (bmo#1874502) Incorrect code generation on 32-bit ARM devices * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498, bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597, bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795, bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286) Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 * CVE-2024-1557 (bmo#1746471, bmo#1848829, bmo#1864011, bmo#1869175, bmo#1869455, bmo#1869938, bmo#1871606) Memory safety bugs fixed in Firefox 123 - requires NSS 3.97 ==== c-ares ==== Version update (1.26.0 -> 1.27.0) - c-ares 1.27.0 Security: * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf, /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279) Features: * New function ares_queue_active_queries() to retrieve number of in-flight queries. PR #712 * New function ares_queue_wait_empty() to wait for the number of in-flight queries to reach zero. PR #710 * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if no DNS servers can be found rather than attempting to use 127.0.0.1. This also introduces a new ares status code of ARES_ENOSERVER. PR #713 Changes: * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705 Bugfixes: * Fix warning due to ignoring return code of write(). PR #709 * CMake: don't override target output locations if not top-level. Issue #708 * Fix building c-ares without thread support. PR #700 ==== cdparanoia ==== Subpackages: libcdda_interface0 libcdda_paranoia0 - Use %patch -P N instead of deprecated %patchN. ==== chrony ==== Version update (4.4 -> 4.5) Subpackages: chrony-pool-openSUSE - Use %patch -P N instead of deprecated %patchN. - Update to version 4.5: * Add support for AES-GCM-SIV in GnuTLS * Add support for corrections from PTP transparent clocks * Add support for systemd socket activation * Fix presend in interleaved mode * Fix reloading of modified sources from sourcedir ==== cronie ==== Subpackages: cron - Use %patch -P N instead of deprecated %patchN. ==== ddskk ==== Subpackages: skkdic - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== delayacct-utils ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== dhcp ==== Subpackages: dhcp-relay dhcp-server - Use %patch -P N instead of deprecated %patchN. ==== dmidecode ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== docbook_4 ==== - Use %patch -P N instead of deprecated %patchN. ==== drbd ==== Subpackages: drbd-kmp-default - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== drbd-utils ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== dump ==== - Use %patch -P N instead of deprecated %patchN. ==== emacs-jinx ==== Version update (1.2 -> 1.3) - Depend on emacs-devel to make sure Emacs packaging macros are installed when not building with emacs-eln - Update to version 1.3: * jinx-mode: hack-local-variables - ignore mode variables * README: List packages needed on OpenSUSE * Fix interaction bug with the newest version of AUCTeX, where the major mode got changed unexpectedly. * No need to use hashed symbol as argument for derived-mode-p * Fix deadlock on macOS during Jinx startup (Fix #91, #113) * Revert "Simplify rescheduling" * timer-activate-when-idle: Pass DONT-WAIT=t ==== fcitx ==== Subpackages: fcitx-branding-openSUSE fcitx-gtk2 fcitx-gtk3 fcitx-pinyin fcitx-table fcitx-table-cn-wubi fcitx-table-cn-wubi-pinyin libfcitx-config4 libfcitx-core0 libfcitx-gclient1 libfcitx-utils0 - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== fcitx-chewing ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== fcitx-configtool ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== fcitx-zhuyin ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== fcoe-utils ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== fltk ==== - Use %patch -P N instead of deprecated %patchN. ==== gcin ==== Subpackages: gcin-gtk2 gcin-gtk3 gcin-qt5 libgcin-im-client1 - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== giflib ==== Version update (5.2.1 -> 5.2.2) - Update to version 5.2.2 * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880) * Address SF issue #138 Documentation for obsolete utilities still installed * Address SF issue #139: Typo in "LZW image data" page ("110_2 = 4_10") * Address SF issue #140: Typo in "LZW image data" page ("LWZ") * Address SF issue #141: Typo in "Bits and bytes" page ("filed") * Note as already fixed SF issue #143: cannot compile under mingw * Address SF issue #144: giflib-5.2.1 cannot be build on windows and other platforms using c89 * Address SF issue #145: Remove manual pages installation for binaries that are not installed too * Address SF issue #146: [PATCH] Limit installed man pages to binaries, move giflib to section 7 * Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content * Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB * Declared no-info on SF issue #150: There is a denial of service vulnerability in GIFLIB 5.2.1 * Declared Won't-fix on SF issue 149: Out of source builds no longer possible * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45 * Address SF issue #152: Fix some typos on the html documentation and man pages * Address SF issue #153: Fix segmentation faults due to non correct checking for args * Address SF issue #154: Recover the giffilter manual page * Address SF issue #155: Add gifsponge docs * Address SF issue #157: An OutofMemory-Exception or Memory Leak in gif2rgb * Address SF issue #158: There is a null pointer problem in gif2rgb * Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() in gif2rgb.c:298:45 * Address SF issue #163: detected memory leaks in openbsd_reallocarray giflib/openbsd-reallocarray.c * Address SF issue #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c * Address SF issue #166: a read zero page leads segment fault in getarg.c and memory leaks in gif2rgb.c and gifmalloc.c * Address SF issue #167: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function at Line 321 of gif2rgb.c - Added patch: * giflib-5.2.2-no-imagemagick.patch + do not use ImageMagick to resize one gif file. It creates a build cycle. * 0001-Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch + upstream fix for CVE-2021-40633 (bsc#1200551) - Modified patches: * PIE.patch * reproducible.patch + rediff to changed context ==== git ==== Version update (2.43.2 -> 2.44.0) Subpackages: git-core git-email git-web perl-Git - update to 2.44.0: * "git checkout -B <branch>" now longer allows switching to a branch that is in use on another worktree. The users need to use "--ignore-other-worktrees" option. * Faster server-side rebases with git replay * Faster pack generation with multi-pack reuse * rebase auto-squashing now works in non-interactive mode * pathspec now understands attr, e.g. ':(attr:~binary) for selecting non-binaries, or builtin_objectmode for selecting items by file mode or other properties * Many other cli UI and internal improvements and extensions ==== glyr ==== - Use %patch -P N instead of deprecated %patchN. ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Remove some if..endif that do not affect any result - Split documentation (some 1100 files) to separate subpackage ==== libksba ==== Version update (1.6.5 -> 1.6.6) - Update to 1.6.6: * Fix a possible wrong error return from the DER builder. [T6992] * Release-info: https://dev.gnupg.org/T7009 * Update upstream libksba.keyring ==== libunistring ==== Version update (1.1 -> 1.2) Subpackages: libunistring5 libunistring5-32bit - update to 1.2: * Support Unicode 15.1.0 * Improve UTF-8 decoder Unicode Standard compliance * The *printf functions no longer support the %n directive, for security reasons. * Fixed a bug in the *printf functions: In the %U, %lU, %llU directives, a negative width given as an argument did not trigger left-justification. * The functions u16_strstr and u32_strstr now operate in worst-case linear time. * Useful API function extensions ==== mokutil ==== - Use %patch -P N instead of deprecated %patchN. ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - Use %patch -P N instead of deprecated %patchN. ==== multipath-tools ==== Version update (0.9.8~1+82+suse.dcd98a3 -> 0.9.8+83+suse.bcae610) Subpackages: kpartx libmpath0 - Remove libmpathpersist-example-old.c, which has been obsolete since multipath-tools 0.8.6. - Update to version 0.9.8+83+suse.bcae610 (bsc#1220374) * multipath-tools: added NEWS.md ==== npth ==== Version update (1.6 -> 1.7) - Update to 1.7: * The npth-config command is not installed by default, because it is now replaced by use of pkg-config/gpgrt-config with npth.pc. Supply --enable-install-npth-config configure option, if needed. * Support for legacy systems w/o pthread_rwlock_t support. [T4306] * New functions npth_poll and npth_ppoll for Unix. [T5748] * Fixes to improve support for 64 bit Windows. * Fix declaration conflict using newer mingw versions. [T5889] * Fix build problems on Solaris 11. [T4491] * Fix detecting of the pthread library. [rPTH6629a4b801] * Clean up handling of unsafe semaphores on AIX. [T6947] * Link without -flat_namespace to support macOS 11. [T5610] * Release-info: https://dev.gnupg.org/T7010 * Update spec file * Update upstream npth.keyring ==== openssh ==== Version update (9.3p2 -> 9.6p1) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 9.6p1: = Security * ssh(1), sshd(8): implement protocol extensions to thwart the so-called "Terrapin attack" discovered by Fabian BÃ¤umer, Marcus Brinkmann and JÃ¶rg Schwenk. This attack allows a MITM to effect a limited break of the integrity of the early encrypted SSH transport protocol by sending extra messages prior to the commencement of encryption, and deleting an equal number of consecutive messages immediately after encryption starts. A peer SSH client/server would not be able to detect that messages were deleted. * ssh-agent(1): when adding PKCS#11-hosted private keys while specifying destination constraints, if the PKCS#11 token returned multiple keys then only the first key had the constraints applied. Use of regular private keys, FIDO tokens and unconstrained keys are unaffected. * ssh(1): if an invalid user or hostname that contained shell metacharacters was passed to ssh(1), and a ProxyCommand, LocalCommand directive or "match exec" predicate referenced the user or hostname via %u, %h or similar expansion token, then an attacker who could supply arbitrary user/hostnames to ssh(1) could potentially perform command injection depending on what quoting was present in the user-supplied ssh_config(5) directive. = Potentially incompatible changes * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides a TCP-like window mechanism that limits the amount of data that can be sent without acceptance from the peer. In cases where this limit was exceeded by a non-conforming peer SSH implementation, ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH 9.6, ssh(1)/sshd(8) will now terminate the connection if a peer exceeds the window limit by more than a small grace factor. This change should have no effect of SSH implementations that follow the specification. = New features * ssh(1): add a %j token that expands to the configured ProxyJump hostname (or the empty string if this option is not being used) that can be used in a number of ssh_config(5) keywords. bz3610 * ssh(1): add ChannelTimeout support to the client, mirroring the same option in the server and allowing ssh(1) to terminate quiescent channels. * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for reading ED25519 private keys in PEM PKCS8 format. Previously only the OpenSSH private key format was supported. * ssh(1), sshd(8): introduce a protocol extension to allow renegotiation of acceptable signature algorithms for public key authentication after the server has learned the username being used for authentication. This allows varying sshd_config(5) PubkeyAcceptedAlgorithms in a "Match user" block. * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow specifying certificates when loading PKCS#11 keys. This allows the use of certificates backed by PKCS#11 private keys in all OpenSSH tools that support ssh-agent(1). Previously only ssh(1) supported this use-case. = Bugfixes * ssh(1): when deciding whether to enable the keystroke timing obfuscation, enable it only if a channel with a TTY is active. * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals before checking flags set in signal handler. Avoids potential race condition between signaling ssh to exit and polling. bz3531 * ssh(1): when connecting to a destination with both the AddressFamily and CanonicalizeHostname directives in use, the AddressFamily directive could be ignored. bz5326 * sftp(1): correct handling of the limits(a)openssh.com option when the server returned an unexpected message. * A number of fixes to the PuTTY and Dropbear regress/integration tests. * ssh(1): release GSS OIDs only at end of authentication, avoiding unnecessary init/cleanup cycles. bz2982 * ssh_config(5): mention "none" is a valid argument to IdentityFile in the manual. bz3080 * scp(1): improved debugging for paths from the server rejected for not matching the client's glob(3) pattern in old SCP/RCP protocol mode. * ssh-agent(1): refuse signing operations on destination-constrained keys if a previous session-bind operation has failed. This may prevent a fail-open situation in future if a user uses a mismatched ssh(1) client and ssh-agent(1) where the client supports a key type that the agent does not support. - Update to openssh 9.5p1: = Potentially incompatible changes * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys are very convenient due to their small size. Ed25519 keys are specified in RFC 8709 and OpenSSH has supported them since version 6.5 (January 2014). * sshd(8): the Subsystem directive now accurately preserves quoting of subsystem commands and arguments. This may change behaviour for exotic configurations, but the most common subsystem configuration (sftp-server) is unlikely to be affected. = New features * ssh(1): add keystroke timing obfuscation to the client. This attempts to hide inter-keystroke timings by sending interactive traffic at fixed intervals (default: every 20ms) when there is only a small amount of data being sent. It also sends fake "chaff" keystrokes for a random interval after the last real keystroke. These are controlled by a new ssh_config ObscureKeystrokeTiming keyword. * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to implement a ping capability. These messages use numbers in the "local extensions" number space and are advertised using a "ping(a)openssh.com" ext-info message with a string version number of "0". ... changelog too long, skipping 104 lines ... * openssh-8.0p1-gssapi-keyex.patch ==== openssh-askpass-gnome ==== Version update (9.3p2 -> 9.6p1) - Update to openssh 9.6p1: * No changes for askpass, see main package changelog for details. ==== openvpn ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== python-PyYAML ==== - Switch to pyproject and autosetup macros. - Drop patch setuptools.patch, we can now cope. ==== rubygem-concurrent-ruby ==== Version update (1.2.2 -> 1.2.3) - ## Release v1.2.3 (16 Jan 2024) * See [the GitHub release](https://github.com/ruby-concurrency/concurrent-ruby/releases/tag/v… for details. ==== rubygem-excon ==== Version update (0.104.0 -> 0.109.0) - New upstream release 0.109.0, no changelog found ==== rubygem-google-protobuf ==== Version update (3.25.1 -> 3.25.2) - New upstream release 3.25.2, no changelog found ==== rubygem-googleapis-common-protos-types ==== Version update (1.10.0 -> 1.11.0) - ### 1.11.0 (2023-12-04) [#]### Features * Automated update of googleapis-common-protos-types ([#217](https://github.com/googleapis/common-protos-ruby/issues/217)) ==== rubygem-mime-types ==== Version update (3.5.1 -> 3.5.2) - New upstream release 3.5.2, see bundled History.md ==== rubygem-mime-types-data ==== Version update (3.2023.1003 -> 3.2023.1205) - New upstream release 3.2023.1205, see bundled History.md ==== rubygem-net-ssh ==== Version update (7.2.0 -> 7.2.1) - === 7.2.1 rc1 * feat: allow load of certkey from string [#926] * fix: fix for Socket#recv returning nil on ruby 3.3.0 [#928] ==== rubygem-parallel ==== Version update (1.23.0 -> 1.24.0) - New upstream release 1.24.0, no changelog found ==== rubygem-parallel_tests ==== Version update (4.3.0 -> 4.4.0) - New upstream release 4.4.0, no changelog found ==== rubygem-public_suffix ==== Version update (5.0.3 -> 5.0.4) - ## 5.0.4 [#]## Changed - Reduced .gem file size (GH-259). [Thanks @ybiquitous] - Updated definitions. ==== rubygem-rack-2.2 ==== Version update (2.2.8 -> 2.2.8.1) - update to version 2.2.8.1 * Fixed ReDoS in Accept header parsing [CVE-2024-26146] * Fixed ReDoS in Content Type header parsing [CVE-2024-25126] * Reject Range headers which are too large [CVE-2024-26141] ==== rubygem-rack ==== Version update (3.0.8 -> 3.0.9.1) - version update to 3.0.9.1 * Fixed ReDoS in Accept header parsing [CVE-2024-26146][bsc#1220248] * Fixed ReDoS in Content Type header parsing [CVE-2024-25126][bsc#1220239] * Reject Range headers which are too large [CVE-2024-26141][bsc#1220242] * Fix content-length calcuation in Rack:Response#write #2150 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix problematic tests and allow smooth tests executions on containers - Added: * fix-problematic-tests-and-allow-smooth-tests-executi.patch - Discover Ansible playbook files as "*.yml" or "*.yaml" files (bsc#1211888) - Added: * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch - Extend dependencies for python3-salt-testsuite and python3-salt packages - Improve Salt and testsuite packages multibuild - Enable multibuilld and create test flavor - Additionally we require python-mock just for older Python versions. - Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed - Rename salt-tests to python3-salt-testsuite ==== sazanami-fonts ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== sbl ==== - Use %patch -P N instead of deprecated %patchN. ==== sendmail ==== Subpackages: libmilter1_0 - Use %patch -P N instead of deprecated %patchN. ==== sha1collisiondetection ==== - Use %patch -P N instead of deprecated %patchN. ==== sord ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== soundtouch ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== speex ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== splix ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== susepaste ==== Subpackages: susepaste-screenshot - Use %patch -P N instead of deprecated %patchN. ==== syslogd ==== Subpackages: klogd syslog-service - Use %patch -P N instead of deprecated %patchN. ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-applet system-config-printer-common system-config-printer-common-lang system-config-printer-dbus-service udev-configure-printer - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== sysvinit ==== Subpackages: sysvinit-tools sysvinit-tools-doc - Use %patch -P N instead of deprecated %patchN. ==== thin-provisioning-tools ==== Version update (1.0.11 -> 1.0.12) - Update to version 1.0.12: * [thin_dump] Do not print error messages on BrokenPipe (EPIPE) * Bump version to 1.0.12 * [build] Update dependencies * [commands] Fix version string compatibility issue with LVM * [thin_dump] Do not print error messages on BrokenPipe (EPIPE) * [build] Update license to SPDX identifier ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== usbutils ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== virtiofsd ==== - Spec: We don't want /usr/libexec to be namespaced like it is with /usr/lib (bsc#1220304) ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Add vlc-taglib-2.0.patch: Fix build against taglib 2.0 (based on upstream commit ec29dfca, d2663d6c, ac59d0ba, c404fdb2). - Use %patch -P N instead of deprecated %patchN. ==== xauth ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xdm ==== Subpackages: xdm-xsession - Use %patch -P N instead of deprecated %patchN. ==== xf86-input-evdev ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-input-vmmouse ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-input-wacom ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-video-intel ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-video-nouveau ==== - Use %patch -P N instead of deprecated %patchN. ==== xf86-video-nv ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-video-vesa ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xinit ==== - Use %patch -P N instead of deprecated %patchN. - revert previous change; cpp is not needed for xinit, but only for xdm package - since xrdb no longer requires cpp, it needs to be reqired here now ==== xkeyboard-config ==== Subpackages: xkeyboard-config-lang - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Use %patch -P N instead of deprecated %patchN. ==== xrandr ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== yast2-trans ==== Version update (84.87.20240219.f6e4117fe0 -> 84.87.20240224.f7ab2886c1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240224.f7ab2886c1: * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Spanish)

1 0

[opensuse-factory] reproducible builds status 2024-02
by Bernhard M. Wiedemann 28 Feb '24

28 Feb '24

Hi, Only did a few patches this month. But at least kept the build tests working. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-01/ I uploaded https://rb.zq1.de/compare.factory-20240228/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15256 (+44) build-tried: 15199 (+10) build-failed: 34 (-77) build-n-a: 233 (+3) build-succeeded: 14932 (+84) build-official-failed+na: 198 (+103) build-compare-failed: 179 (+13) build-compare-succeeded: 14753 (+71) verify-failed: 499 (+484) verified-semi-reproducible: 11102 (+11082) verified-bit-identical: 5 (+5) bit-by-bit-identical: 14267 (+185) not-bit-by-bit-identical: 666 (-102) not-bit-by-bit-identicalcheck: 665 (-101) https://rb.zq1.de/compare.factory-20240228/graph.png shows the change over time https://rb.zq1.de/compare.factory-20240228/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 5 were in ring0 31 were in ring1 That makes it 36/3868 => 0.93 % which is below the overall average of 179/14932 => 1.20 % 666/14932 => 4.46 % of packages are not perfectly reproducible patches: SR 1144993 grub2 filesys SR 1150775 latex2html drop latex log #https://github.com/OSGeo/grass/pull/3415 parallelism https://github.com/OSGeo/grass/pull/3417 date https://github.com/openSUSE/obs-build/issues/980 build-tool issue https://github.com/mfontanini/presenterm/pull/202 filesys (rust) https://bugreports.qt.io/browse/QTBUG-122722 qt6-quick3d parallelism package notes: ==> ./FlightGear/.rb.notes <== FTBFS-j1 make[2]: *** No rule to make target 'src/EmbeddedResources/FlightGear-resources.cxx', needed by 'src/Main/CMakeFiles/fgfs_autogen_timestamp_deps'. Stop. ==> ./R-base/.rb.notes <== embedded random tmp path in /usr/lib64/R/library/KernSmooth/help/paths.rds; many other ==> ./Setzer/.rb.notes <== filesys ==> ./aws-c-common/.rb.notes <== FTBFS-j1 osc build --noservice --vm-type=kvm -j1 standard ==> ./aws-sdk-java/.rb.notes <== strip-nd javadoc html+zip ==> ./binutils/.rb.notes <== no problem? ?parallelism+ASLR ==> ./cartridges/.rb.notes <== FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./chezscheme/.rb.notes <== scheme/lisp memory dump ==> ./cmake/.rb.notes <== sqlite /usr/share/doc/packages/cmake/CMake.qch ==> ./cockpit/.rb.notes <== filesys /usr/lib/python3.11/site-packages/cockpit/data/cockpit-bridge.beipack.xz ==> ./contrast/.rb.notes <== rust/llvm ==> ./form/.rb.notes <== FTBFS-j1 : osc build --vm-type=kvm -j1 --noservice standard date in html+pdf from doxygen / latex ==> ./gawk/.rb.notes <== date+PGO no-time / 1d granularity ==> ./grass/.rb.notes <== => https://github.com/OSGeo/grass/pull/3415 parallelism => https://github.com/OSGeo/grass/pull/3417 date ==> ./grub2/.rb.notes <== => SR 1144993 filesys in grub.efi ==> ./himmelblau/.rb.notes <== rust/llvm ==> ./identity/.rb.notes <== rust/llvm ==> ./impression/.rb.notes <== FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./jackson-annotations/.rb.notes <== minor javadoc, jar ==> ./jackson-core/.rb.notes <== javadoc filesys + minor java maven jar strip-nd +++ new//usr/share/java/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.properties 2019-11-01 00:36:26.518271564 +0000 ==> ./joker/.rb.notes <== = https://github.com/candid82/joker/issues/491 hash random order old: # https://github.com/candid82/joker/pull/490 sort, partial ==> ./kraft/.rb.notes <== #=> https://github.com/dragotin/kraft/pull/215 hostname ==> ./kryo/.rb.notes <== strip-nd javadoc html date+time ==> ./lapce/.rb.notes <== rust/LLVM14 ASLR?readdir? ==> ./latex2html/.rb.notes <== => SR 1150775 drop latex log => SR 733232 drop date in latex log ==> ./ldc/.rb.notes <== ASLR from llvm14? order issue ==> ./libcamera/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1217690 random: private key signatures of modules /usr/lib64/libcamera-suse.so.3 differs in ELF section .rodata ==> ./lightcouch/.rb.notes <== minor strip-nd javadoc-html #xmvn random uuid ==> ./llvm15/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1199076 order ==> ./loupe/.rb.notes <== rust/llvm ==> ./mumble/.rb.notes <== => SR 1141433 #=> https://github.com/mumble-voip/mumble/pull/6147 filesys (python listdir) ==> ./nodejs20/.rb.notes <== v8_snapshot_blob_data varies ==> ./nodejs21/.rb.notes <== v8_snapshot_blob_data varies ==> ./objectweb-asm/.rb.notes <== javadoc toolchain filesys readdir order ; strip-nd ==> ./ocaml-dune/.rb.notes <== = https://github.com/ocaml/dune/issues/9507 parallelism ? ==> ./openjfx/.rb.notes <== filesys + stripnd ; other? ==> ./openssl-1_0_0/.rb.notes <== ordering issues in obj_dat.h ==> ./parboiled/.rb.notes <== minor jar javadoc html ==> ./pgloader/.rb.notes <== from sbcl (lisp dump) ==> ./plasma5-workspace/.rb.notes <== parallelism ==> ./presenterm/.rb.notes <== => https://github.com/mfontanini/presenterm/pull/202 filesys (rust) ==> ./python-debugpy/.rb.notes <== filesys low-entropy ==> ./python-grpcio/.rb.notes <== #=> https://github.com/grpc/grpc/pull/35687 sort filesys filesys-FTBFS? ==> ./python-seaborn/.rb.notes <== python3.9 .pyc low-entropy filesys ==> ./python-tornado6/.rb.notes <== FTBFS-SSL ==> ./qt6-declarative/.rb.notes <== /usr/lib64/libQt6QuickDialogs2QuickImpl.so.6.4.2 differs in ELF sections order variation in qtdeclarative-everywhere-src-6.4.2/build/build.ninja , ColorDialog_qml.cpp from qmlcachegen ==> ./qt6-quick3d/.rb.notes <== = https://bugreports.qt.io/browse/QTBUG-122722 /usr/lib64/qt6/examples/quick3d/virtualassistant/QtVirtualAssistant asm diff ==> ./qt6-virtualkeyboard/.rb.notes <== = https://bugreports.qt.io/browse/QTBUG-121643 parallelism ==> ./replacer/.rb.notes <== javadoc html toolchain filesys ==> ./resteasy/.rb.notes <== javadoc toolchain filesys ==> ./scala/.rb.notes <== filesys in /usr/share/java/scala/scala-compiler.jar/scala/tools/nsc/fsc/CompileSocket.class ==> ./shadowsocks-rust/.rb.notes <== #=> https://github.com/AlephAlpha/build-time/pull/5 toolchain date+time +++ new /usr/bin/sslocal (objdump) ==> ./spamassassin/.rb.notes <== FTBFS-j1 osc build --noservice --vm-type=kvm -j1 standard x86_64 ==> ./sundials/.rb.notes <== => https://build.opensuse.org/request/show/1147937 = https://bugzilla.suse.com/show_bug.cgi?id=1201273 FTBFS-j1 ==> ./tbb/.rb.notes <== stuck tests FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./tinyssh/.rb.notes <== FTBFS-j1 tests osc build --noservice --vm-type=kvm -j1 standard ==> ./woodstox-core/.rb.notes <== javadoc toolchain filesys ==> ./wpewebkit/.rb.notes <== copyright year ; varying JSCBytecodeCacheVersion

1 0

Announcing Agama 7
by Imobach Gonzalez Sosa 28 Feb '24

28 Feb '24

Hi all, We are pleased to announce the availability of Agama 7. Among other features, it brings: * Allow choosing localization settings for the installed system (language, keyboard and timezone). * Use zram to reduce memory consumption. * Add support to install MicroOS and MicroOS Desktop. Drop Leap 16.0 support. * Simplified software selection based on a curated list of patterns per product. * Registration support. It is enabled for Dolomite. * Allow to select the file system type selection and to choose a policy to make space. * Support for network bonding in the unattended scenario. If you are interested in the details, please check the announcement on our team's blog: https://yast.opensuse.org/blog/2023-12-22/agama7 Thanks! Regards, Imo

4 15

systemd-based FDE in MicroOS / Tumbleweed
by aplanas 28 Feb '24

28 Feb '24

Hi, Some months ago we announced the support of systemd-boot in MicroOS and in Tumbleweed, using a new tool named sdbootutil, that help us to synchronize the boot loader entries with available snapshots in the system. Today we announce that we supporting the full disk encryption (FDE) tools that systemd bring us via systemd-cryptenroll or cryptsetup. We extended the pcr-oracle to support new PCRs and the generation of authorized policies in JSON format for systemd With this we also propose a new architecture in the distribution that allows the enrollment of the TPM2 (with full measured boot attestation) and the FIDO2 key, using the already available systemd user tools. The MicroOS image[0] was also extended to show all this nice features working together. The long (sorry, maybe too long) explanation is in the news-o-o blog post[1], and the technical details are in the openSUSE Systemd-fde wiki page[2]. Feedback is more than welcome! ... also happy holidays, end of the year and beginning of 2024! [0] http://download.opensuse.org/tumbleweed/appliances/openSUSE-MicroOS.x86_64-… [1] https://news.opensuse.org/2023/12/20/systemd-fde/ [2] https://en.opensuse.org/Systemd-fde

5 11

please provide latest clamav
by mh＠mike.franken.de 27 Feb '24

27 Feb '24

Hi *, can you please provide latest version of clamav for Tumbleweed? 0.103 is really outdated, 1.3.0 would be the latest version. TIA. Bye. Michael.

2 2

After RPM is before RPM - Changes needed for RPM 4.20
by Dominique Leuenberger 27 Feb '24

27 Feb '24

Dear Tumbleweed hackers and packagers, It is just a few days ago that Factory was updated to RPM 4.19 (and we are still missing a few fixes for packages requiring user() symbols and not providing them) The next RPM version will come - for sure (if previous release cycles are any indication, RPM 4.20 should be out around September) So far we have come across one change that will impact a log of packages: RPM 4.20 will no longer support %patchN (e.g %patch0); RPM 4.19 has warned about this during the build already. The preferred way to apply patches are, in order: * %autosetup -p1 * %autosetup -N / %autopatch -p1 * %setup / %patch -P <N> -p 1 (upper case P denotes patch number, lower case is the usual patch -p>num> strip level) * If your package has no patches, best to be prepared for the future and use %autosetup over %setup. Technically, RPM preferred would be %setup / %patch N when not using %autosetup/%autopatch, BUT %patch 1 is only supported properly from RPM 4.18 on, Not behaving as expected on older RPMs, like in Leap 15.x. That's why we switched our packages to the backward compatible form %patch -P 1 I (and some others) have started to go through the openSUSE:Factory packages that apply patches using %patchN (found a total of 2066 packages). About 10% of those have been fixed today with SRs to the development projects. I would appreciate it if you'd take a look at your packages over the next few days/weeks/months and adjust them to use autosetup or, if patches are applied conditionally, use the %patch -P N format. Cheers, Dominique

7 12

New Tumbleweed snapshot 20240226 released!
by Dominique Leuenberger 27 Feb '24

27 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clamav freecell-solver kplotting (5.114.0 -> 5.115.0) rubygem-airbrussh (1.5.0 -> 1.5.1) rubygem-attr_required (1.0.1 -> 1.0.2) rubygem-bootsnap (1.17.0 -> 1.17.1) rubygem-debase-ruby_core_source (3.2.3 -> 3.3.1) rubygem-debug_inspector (1.1.0 -> 1.2.0) rubygem-domain_name (0.6.20231109 -> 0.6.20240107) rubygem-fog-core (2.3.0 -> 2.4.0) rubygem-haml (6.2.3 -> 6.3.0) rubygem-hashdiff (1.0.1 -> 1.1.0) rubygem-hoe (4.1.0 -> 4.2.0) rubygem-importmap-rails (1.2.3 -> 2.0.1) rubygem-json (2.6.3 -> 2.7.1) rubygem-json-jwt (1.16.3 -> 1.16.5) rubygem-json_pure (2.6.3 -> 2.7.1) rubygem-net-ldap (0.18.0 -> 0.19.0) rubygem-nio4r (2.6.1 -> 2.7.0) rubygem-omniauth (2.1.1 -> 2.1.2) rubygem-passenger (6.0.18 -> 6.0.20) rubygem-pdf-reader (2.11.0 -> 2.12.0) rubygem-pg (1.4.5 -> 1.5.4) rubygem-pry-doc (1.4.0 -> 1.5.0) rubygem-puma-5 (5.6.7 -> 5.6.8) rubygem-puma (6.4.0 -> 6.4.2) rubygem-rack-oauth2 (2.2.0 -> 2.2.1) rubygem-rack-protection (3.1.0 -> 4.0.0) rubygem-rake-compiler (1.2.5 -> 1.2.6) rubygem-regexp_parser (2.8.2 -> 2.9.0) rubygem-rice (4.1.0 -> 4.2.1) rubygem-rspec-rails (6.1.0 -> 6.1.1) rubygem-ruby_parser (3.20.3 -> 3.21.0) rubygem-sexp_processor (4.17.0 -> 4.17.1) rubygem-slim (5.2.0 -> 5.2.1) rubygem-sshkit (1.21.6 -> 1.22.0) rubygem-stimulus-rails (1.3.0 -> 1.3.3) rubygem-swd (2.0.2 -> 2.0.3) rubygem-tzinfo-data (1.2023.3 -> 1.2023.4) rubygem-webfinger (2.1.2 -> 2.1.3) spu-tools switcheroo-control xf86-video-mga xf86-video-siliconmotion xinetd === Details === ==== clamav ==== Subpackages: libclamav9 libfreshclam2 - Use %patch -P N instead of deprecated %patchN. ==== freecell-solver ==== Subpackages: freecell-solver-presets libfreecell-solver0 - Set CMAKE_INSTALL_DOCDIR to work around incompatible changes added to macros.cmake. ==== kplotting ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== rubygem-airbrussh ==== Version update (1.5.0 -> 1.5.1) - 1.5.1: This is a gem housekeeping release. No user-facing changes. [#]# ð Housekeeping - Add Ruby 3.3 to CI matrix (#154) @mattbrictson * *Full Changelog:** https://github.com/mattbrictson/airbrussh/compare/v1.5.0...v1.5.1 ==== rubygem-attr_required ==== Version update (1.0.1 -> 1.0.2) - New upstream release 1.0.2, no changelog found ==== rubygem-bootsnap ==== Version update (1.17.0 -> 1.17.1) - New upstream release 1.17.1, see bundled CHANGELOG.md ==== rubygem-debase-ruby_core_source ==== Version update (3.2.3 -> 3.3.1) - ## [3.3.1](https://github.com/ruby-debug/debase-ruby_core_source/compare/3.3.0.… * prism headers added for ruby-3.3.0 [#]# [3.3.0](https://github.com/ruby-debug/debase-ruby_core_source/compare/3.2.3.… * ruby-3.3.0-preview3 sources removed * ruby-3.3.0 sources added ==== rubygem-debug_inspector ==== Version update (1.1.0 -> 1.2.0) - 1.2.0: [#]# What's Changed * Fix CI: MiniTest is no longer defined in minitest 5.20.0 by @eregon in https://github.com/banister/debug_inspector/pull/38 * Rename RubyVM::DebugInspector to DebugInspector and add support for truffleruby by @eregon in https://github.com/banister/debug_inspector/pull/37 * Add MIT license file. by @junaruga in https://github.com/banister/debug_inspector/pull/39 [#]# New Contributors * @eregon made their first contribution in https://github.com/banister/debug_inspector/pull/38 * *Full Changelog**: https://github.com/banister/debug_inspector/compare/v1.1.0...v1.2.0 ==== rubygem-domain_name ==== Version update (0.6.20231109 -> 0.6.20240107) - New upstream release 0.6.20240107, see bundled CHANGELOG.md ==== rubygem-fog-core ==== Version update (2.3.0 -> 2.4.0) - 2.4.0 01/03/2024 - fixes for caching/restoring collection attributes - add explicit CRUD methods to models, make returns more consistent - add filter_attributes method - allow cache loading with aliases - update rubocop config and apply styles/fixes - fix minitest compatibility - remove coveralls - fixes for method delegation for ruby 3.x - update ruby versions in test matrix ==== rubygem-haml ==== Version update (6.2.3 -> 6.3.0) - ## 6.3.0 * Remove `Haml::RailsTemplate#default_format` that was added in v6.1.3 for Turbo [#1152](https://github.com/haml/haml/issues/1152), [#1154](https://github.com/haml/haml/issues/1154) ([discussion](https://github.com/haml/haml/pull/1144#issuecomment-1755088572)) * See [the reference](https://github.com/haml/haml/blob/v6.3.0/REFERENCE.md#turbo) for suggested alternatives. [#]# 6.2.5 * Deprecate `Haml::RailsTemplate#default_format` that was added in v6.1.3 for Turbo ([discussion](https://github.com/haml/haml/pull/1144#issuecomment-1755088572)) * See [the reference](https://github.com/haml/haml/blob/v6.2.5/REFERENCE.md#turbo) for suggested alternatives. [#]# 6.2.4 * Support case-in statement [#1155](https://github.com/haml/haml/issues/1155) ==== rubygem-hashdiff ==== Version update (1.0.1 -> 1.1.0) - ## v1.1.0 2020-02-25 * Add ignore_keys option (#86 @Matzfan) * Remove pinned version of rake < 11 * Bump rspec dep ~> 3.5 * Bump rubocop dep >= 1.52.1 * Bump rubocop-rspec dep > 1.16.0 ==== rubygem-hoe ==== Version update (4.1.0 -> 4.2.0) - New upstream release 4.2.0, see bundled History.rdoc ==== rubygem-importmap-rails ==== Version update (1.2.3 -> 2.0.1) - 2.0.1: [#]# What's Changed * Ensure update only runs when there are outdated packages by @dhh * *Full Changelog**: https://github.com/rails/importmap-rails/compare/v2.0.0...v2.0.1 2.0.0: [#]# What's Changed This major release includes two potentially backwards-incompatible changes: * The compatibility shim is no longer included, since [all major browsers now natively support import maps](https://caniuse.com/import-maps). But if you need to support old browsers, like Safari 15, Firefox 75, Chrome 88, you should continue using the 1.x series of this gem. * Preloading is now the default. So if you have pins that you intend to lazy load, you need to specifically call `preload: false` as part of the pin. All changes: * Drop the bundled shim by @dhh in https://github.com/rails/importmap-rails/pull/216 * Pinning should just always download by @dhh in https://github.com/rails/importmap-rails/pull/217 * Preload all by default by @dhh in https://github.com/rails/importmap-rails/pull/218 * Update Impoortmaps::Command#puts_table to be markdown compatible by @faqndo97 in https://github.com/rails/importmap-rails/pull/222 * bin/importmap update by @botandrose in https://github.com/rails/importmap-rails/pull/214 * *Full Changelog**: https://github.com/rails/importmap-rails/compare/v1.2.3...v2.0.0 ==== rubygem-json ==== Version update (2.6.3 -> 2.7.1) - 2.7.1: [#]# What's Changed [#]## Improved * [DOC] RDoc for additions by @BurdetteLamar in https://github.com/flori/json/pull/557 [#]## Fixed * JSON.dump: handle unenclosed hashes regression by @casperisfine in https://github.com/flori/json/pull/554 * Overload kwargs in JSON.dump by @k0kubun in https://github.com/flori/json/pull/556 * Fix JSON.dump overload combination by @tompng in https://github.com/flori/json/pull/558 [#]## Misc * Remove needless encodings by @hsbt in https://github.com/flori/json/pull/559 * Unify versions by @hsbt in https://github.com/flori/json/pull/560 [#]# New Contributors * @k0kubun made their first contribution in https://github.com/flori/json/pull/556 * @tompng made their first contribution in https://github.com/flori/json/pull/558 * *Full Changelog**: https://github.com/flori/json/compare/v2.7.0...v2.7.1 2.7.0: [#]# What's Changed [#]## Improved * Perf. improvements to Hash#to_json in pure implementation generator. by @vipulnsward in https://github.com/flori/json/pull/203 * Remove unnecessary initialization of create_id in JSON.parse() by @Watson1978 in https://github.com/flori/json/pull/454 [#]## Added * Call `super` in `included` hook by @paracycle in https://github.com/flori/json/pull/486 * Rename escape_slash in script_safe and also escape E+2028 and E+2029 by @casperisfine in https://github.com/flori/json/pull/525 * Add a `strict` option to Generator by @casperisfine in https://github.com/flori/json/pull/519 [#]## Fixed * Fix homepage url in gemspec by @unasuke in https://github.com/flori/json/pull/508 * Fix dead link to Ragel in README by @okuramasafumi in https://github.com/flori/json/pull/509 * [DOC] Fix yet another dead link to Ragel by @nobu in https://github.com/flori/json/pull/510 * Fix "unexpected token" offset for Infinity by @jhawthorn in https://github.com/flori/json/pull/507 * Use ruby_xfree to free buffers by @casperisfine in https://github.com/flori/json/pull/518 [#]## Compatibility changes * JRuby requires a minimum of Java 8 by @headius in https://github.com/flori/json/pull/516 * Rename JSON::ParseError to JSON:ParserError by @dalizard in https://github.com/flori/json/pull/530 * Removed code for Ruby 1.8 by @hsbt in https://github.com/flori/json/pull/540 * alias_method is private on Ruby 2.3 and 2.4 by @hsbt in https://github.com/flori/json/pull/541 * remove_method of Module is private at Ruby 2.3 and 2.4 by @hsbt in https://github.com/flori/json/pull/544 * [jruby] avoid using deprecated BigDecimal.new by @kares in https://github.com/flori/json/pull/546 * Always indent even if empty by @headius in https://github.com/flori/json/pull/517 [#]## Misc * Update CI matrix by @hsbt in https://github.com/flori/json/pull/521 * Add missing changelog entries for 1.8.5 and 1.8.6 by @r7kamura in https://github.com/flori/json/pull/520 * Actions workflow - Add new OS's, Ruby 3.1, Ruby master, Windows by @MSP-Greg in https://github.com/flori/json/pull/491 * Skip unsupported test on JRuby by @nobu in https://github.com/flori/json/pull/532 * Skip BigDecimal tests when it's missing to load by @hsbt in https://github.com/flori/json/pull/533 * Simplify by @nobu in https://github.com/flori/json/pull/531 * Load extension ('json/ext') consistently in test_ext by @aeroastro in https://github.com/flori/json/pull/536 * Use test-unit-ruby-core gem by @hsbt in https://github.com/flori/json/pull/539 * [CI] Add Windows mswin job by @MSP-Greg in https://github.com/flori/json/pull/545 * Exclude truffleruby-head from Actions by @hsbt in https://github.com/flori/json/pull/551 * tests/ractor_test.rb: make assert_separately available by @lucaskanashiro in https://github.com/flori/json/pull/506 * Added changes for 2.7.0 and restore entries to 2.6.3 and 2.6.2 by @hsbt in https://github.com/flori/json/pull/552 [#]# New Contributors * @unasuke made their first contribution in https://github.com/flori/json/pull/508 * @okuramasafumi made their first contribution in https://github.com/flori/json/pull/509 * @r7kamura made their first contribution in https://github.com/flori/json/pull/520 * @MSP-Greg made their first contribution in https://github.com/flori/json/pull/491 * @paracycle made their first contribution in https://github.com/flori/json/pull/486 * @dalizard made their first contribution in https://github.com/flori/json/pull/530 * @aeroastro made their first contribution in https://github.com/flori/json/pull/536 * @jhawthorn made their first contribution in https://github.com/flori/json/pull/507 * @lucaskanashiro made their first contribution in https://github.com/flori/json/pull/506 * @Watson1978 made their first contribution in https://github.com/flori/json/pull/454 * *Full Changelog**: https://github.com/flori/json/compare/v2.6.3...v2.7.0 ==== rubygem-json-jwt ==== Version update (1.16.3 -> 1.16.5) - New upstream release 1.16.5, see bundled CHANGELOG.md ==== rubygem-json_pure ==== Version update (2.6.3 -> 2.7.1) - 2.7.1: [#]# What's Changed [#]## Improved * [DOC] RDoc for additions by @BurdetteLamar in https://github.com/flori/json/pull/557 [#]## Fixed * JSON.dump: handle unenclosed hashes regression by @casperisfine in https://github.com/flori/json/pull/554 * Overload kwargs in JSON.dump by @k0kubun in https://github.com/flori/json/pull/556 * Fix JSON.dump overload combination by @tompng in https://github.com/flori/json/pull/558 [#]## Misc * Remove needless encodings by @hsbt in https://github.com/flori/json/pull/559 * Unify versions by @hsbt in https://github.com/flori/json/pull/560 [#]# New Contributors * @k0kubun made their first contribution in https://github.com/flori/json/pull/556 * @tompng made their first contribution in https://github.com/flori/json/pull/558 * *Full Changelog**: https://github.com/flori/json/compare/v2.7.0...v2.7.1 2.7.0: [#]# What's Changed [#]## Improved * Perf. improvements to Hash#to_json in pure implementation generator. by @vipulnsward in https://github.com/flori/json/pull/203 * Remove unnecessary initialization of create_id in JSON.parse() by @Watson1978 in https://github.com/flori/json/pull/454 [#]## Added * Call `super` in `included` hook by @paracycle in https://github.com/flori/json/pull/486 * Rename escape_slash in script_safe and also escape E+2028 and E+2029 by @casperisfine in https://github.com/flori/json/pull/525 * Add a `strict` option to Generator by @casperisfine in https://github.com/flori/json/pull/519 [#]## Fixed * Fix homepage url in gemspec by @unasuke in https://github.com/flori/json/pull/508 * Fix dead link to Ragel in README by @okuramasafumi in https://github.com/flori/json/pull/509 * [DOC] Fix yet another dead link to Ragel by @nobu in https://github.com/flori/json/pull/510 * Fix "unexpected token" offset for Infinity by @jhawthorn in https://github.com/flori/json/pull/507 * Use ruby_xfree to free buffers by @casperisfine in https://github.com/flori/json/pull/518 [#]## Compatibility changes * JRuby requires a minimum of Java 8 by @headius in https://github.com/flori/json/pull/516 * Rename JSON::ParseError to JSON:ParserError by @dalizard in https://github.com/flori/json/pull/530 * Removed code for Ruby 1.8 by @hsbt in https://github.com/flori/json/pull/540 * alias_method is private on Ruby 2.3 and 2.4 by @hsbt in https://github.com/flori/json/pull/541 * remove_method of Module is private at Ruby 2.3 and 2.4 by @hsbt in https://github.com/flori/json/pull/544 * [jruby] avoid using deprecated BigDecimal.new by @kares in https://github.com/flori/json/pull/546 * Always indent even if empty by @headius in https://github.com/flori/json/pull/517 [#]## Misc * Update CI matrix by @hsbt in https://github.com/flori/json/pull/521 * Add missing changelog entries for 1.8.5 and 1.8.6 by @r7kamura in https://github.com/flori/json/pull/520 * Actions workflow - Add new OS's, Ruby 3.1, Ruby master, Windows by @MSP-Greg in https://github.com/flori/json/pull/491 * Skip unsupported test on JRuby by @nobu in https://github.com/flori/json/pull/532 * Skip BigDecimal tests when it's missing to load by @hsbt in https://github.com/flori/json/pull/533 * Simplify by @nobu in https://github.com/flori/json/pull/531 * Load extension ('json/ext') consistently in test_ext by @aeroastro in https://github.com/flori/json/pull/536 * Use test-unit-ruby-core gem by @hsbt in https://github.com/flori/json/pull/539 * [CI] Add Windows mswin job by @MSP-Greg in https://github.com/flori/json/pull/545 * Exclude truffleruby-head from Actions by @hsbt in https://github.com/flori/json/pull/551 * tests/ractor_test.rb: make assert_separately available by @lucaskanashiro in https://github.com/flori/json/pull/506 * Added changes for 2.7.0 and restore entries to 2.6.3 and 2.6.2 by @hsbt in https://github.com/flori/json/pull/552 [#]# New Contributors * @unasuke made their first contribution in https://github.com/flori/json/pull/508 * @okuramasafumi made their first contribution in https://github.com/flori/json/pull/509 * @r7kamura made their first contribution in https://github.com/flori/json/pull/520 * @MSP-Greg made their first contribution in https://github.com/flori/json/pull/491 * @paracycle made their first contribution in https://github.com/flori/json/pull/486 * @dalizard made their first contribution in https://github.com/flori/json/pull/530 * @aeroastro made their first contribution in https://github.com/flori/json/pull/536 * @jhawthorn made their first contribution in https://github.com/flori/json/pull/507 * @lucaskanashiro made their first contribution in https://github.com/flori/json/pull/506 * @Watson1978 made their first contribution in https://github.com/flori/json/pull/454 * *Full Changelog**: https://github.com/flori/json/compare/v2.6.3...v2.7.0 ==== rubygem-net-ldap ==== Version update (0.18.0 -> 0.19.0) - New upstream release 0.19.0, see bundled History.rdoc ==== rubygem-nio4r ==== Version update (2.6.1 -> 2.7.0) - ## 2.6.2 * Convert NIO objects to TypedData API. [#]# 2.6.1 * Don't update `io` which is subsequently stored. Retain the original. [#]# 2.6.0 * Fix conversion loses int precision. * Avoid direct access to IO internals. * Resolve issue loading both nio and nio4r gems. ==== rubygem-omniauth ==== Version update (2.1.1 -> 2.1.2) - New upstream release 2.1.2, no changelog found ==== rubygem-passenger ==== Version update (6.0.18 -> 6.0.20) Subpackages: ruby3.3-rubygem-passenger rubygem-passenger-apache2 - New upstream release 6.0.20, see bundled CHANGELOG ==== rubygem-pdf-reader ==== Version update (2.11.0 -> 2.12.0) - v2.12.0 (26th December 2023) - Fix a sorbet method signature (http://github.com/yob/pdf-reader/pull/512) - Reduce allocations when parsing PDFs with hex strings (http://github.com/yob/pdf-reader/pull/528) - Fix text extraction of some rare unicode codepoints (http://github.com/yob/pdf-reader/pull/529) ==== rubygem-pg ==== Version update (1.4.5 -> 1.5.4) - New upstream release 1.5.4, see bundled History.md ==== rubygem-pry-doc ==== Version update (1.4.0 -> 1.5.0) - New upstream release 1.5.0, see bundled CHANGELOG.md ==== rubygem-puma-5 ==== Version update (5.6.7 -> 5.6.8) - New upstream release 5.6.8, see bundled History.md ==== rubygem-puma ==== Version update (6.4.0 -> 6.4.2) - 6.4.1: * Bugfixes * DSL#warn_if_in_single_mode - fixup when workers set via CLI ([#3256]) * Fix `idle-timeout` not working in cluster mode ([#3235], [#3228], [#3282], [#3283]) * Fix worker 0 timing out during phased restart ([#3225], [#2786]) * context_builder.rb - require openssl if verify_mode != 'none' ([#3179]) * Make puma cluster process suitable as PID 1 ([#3255]) * Improve Puma::NullIO consistency with real IO ([#3276]) * extconf.rb - fixup to detect openssl info in Ruby build ([#3271], [#3266]) * MiniSSL.java - set serialVersionUID, fix RaiseException deprecation ([#3270]) * dsl.rb - fix warn_if_in_single_mode when WEB_CONCURRENCY is set ([#3265], [#3264]) * Maintenance * LOTS of test refactoring to make tests more stable and easier to write - thanks to @MSP-Greg! * Fix bug in tests re: TestPuma::HOST4 ([#3254]) * Dockerfile for minimal repros: use Ruby 3.2, expect bundler installed ([#3245]) * fix define_method calls, use Symbol parameter instead of String ([#3293]) * Docs * README.md - add the puma-acme plugin ([#3301]) * Remove `--keep-file-descriptors` flag from systemd docs ([#3248]) * Note symlink mechanism in restart documentation for hot restart ([#3298]) ==== rubygem-rack-oauth2 ==== Version update (2.2.0 -> 2.2.1) - ## [2.2.0] - 2022-10-11 [#]## Changed - automatic json response decoding, and remove legacy token support by @nov in https://github.com/nov/rack-oauth2/pull/95 ==== rubygem-rack-protection ==== Version update (3.1.0 -> 4.0.0) - New upstream release 4.0.0, no changelog found ==== rubygem-rake-compiler ==== Version update (1.2.5 -> 1.2.6) - New upstream release 1.2.6, see bundled History.md ==== rubygem-regexp_parser ==== Version update (2.8.2 -> 2.9.0) - New upstream release 2.9.0, no changelog found ==== rubygem-rice ==== Version update (4.1.0 -> 4.2.1) - ## 4.2.1 * Support systems who use `#include <experimental/filesystem>` over `#include<filesystem>`. See [#197](https://github.com/jasonroelofs/rice/issues/197) and [#201](https://github.com/jasonroelofs/rice/pull/201) [#]# 4.2 * Support Ruby 3.3.0. * Split Object.call to an explicit Object.call_kw for calling methods expecting keyword arguments. * Previously, if a wrapper used `keepAlive` on an argument or return value that was itself a Rice type, calling said method would segfault. We've now added an explicit exception to be thrown in this case, prevending the segfault and providing guidance on what was wrong and how to fix it. See [#193](https://github.com/jasonroelofs/rice/pull/193) and [#194](https://github.com/jasonroelofs/rice/pull/194) * Fix wrapping of std::shared_ptr to properly take default arguments into account. ==== rubygem-rspec-rails ==== Version update (6.1.0 -> 6.1.1) - New upstream release 6.1.1, see bundled Changelog.md ==== rubygem-ruby_parser ==== Version update (3.20.3 -> 3.21.0) - New upstream release 3.21.0, see bundled History.rdoc ==== rubygem-sexp_processor ==== Version update (4.17.0 -> 4.17.1) - New upstream release 4.17.1, see bundled History.rdoc ==== rubygem-slim ==== Version update (5.2.0 -> 5.2.1) - 5.2.1 (2024-01-20) * Support Ruby 3.3 * Update Gem metadata ==== rubygem-sshkit ==== Version update (1.21.6 -> 1.22.0) - New upstream release 1.22.0, see bundled CHANGELOG.md ==== rubygem-stimulus-rails ==== Version update (1.3.0 -> 1.3.3) - 1.3.3: [#]# What's Changed * Fix syntax error in stimulus_with_node.rb by @euxx in https://github.com/hotwired/stimulus-rails/pull/134 * *Full Changelog**: https://github.com/hotwired/stimulus-rails/compare/v1.3.2...v1.3.3 1.3.2: [#]# What's Changed * Support for dasherized controller filenames by @adrienpoly in https://github.com/hotwired/stimulus-rails/pull/126 * Describe the two options under stimulus:manifest so they can be found in a rails -T listing (closes #128) by @walterdavis in https://github.com/hotwired/stimulus-rails/pull/129 * Fix duplicate controllers in manifest on update by @nachiket87 in https://github.com/hotwired/stimulus-rails/pull/132 * Rely on import map-rails using preload by default by @dhh * Improve Bun support by @rubys in https://github.com/hotwired/stimulus-rails/pull/127 * *Full Changelog**: https://github.com/hotwired/stimulus-rails/compare/v1.3.0...v1.3.2 ==== rubygem-swd ==== Version update (2.0.2 -> 2.0.3) - ## [2.0.2] - 2022-10-09 [#]## Changed * convert Faraday::Error to SWD::Exception https://github.com/nov/SWD/commit/a5bacba3c0fe740b1e36be220980b29dc50de095 [#]## Fixed * SWD::Resource#to_response_object was needed for openid_connect gem https://github.com/nov/SWD/commit/c4d916d3cd8d4fe076bd27a64403d98dea9b00ef [#]# [2.0.1] - 2022-10-08 [#]## Fixed * typo https://github.com/nov/SWD/commit/3fd7a4fbe8fdf586824edc5d2b4222c43e7a9655 ==== rubygem-tzinfo-data ==== Version update (1.2023.3 -> 1.2023.4) - New upstream release 1.2023.4, no changelog found ==== rubygem-webfinger ==== Version update (2.1.2 -> 2.1.3) - ## [2.1.1] - 2022-10-09 [#]## Changed - convert Faraday::Error to WebFinger::Exception https://github.com/nov/webfinger/commit/a0d8da20f6ce819eea8c2d2c81bcc90d3f4… ==== spu-tools ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== switcheroo-control ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-video-mga ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xf86-video-siliconmotion ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== xinetd ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN.

1 0

New package for factory: daemonize
by alessio.biancalana＠suse.com 27 Feb '24

27 Feb '24

Hey everybody, I created a new package for `daemonize`, and I'd like to submit that to Factory. Quoting the package (and program's) description: daemonize runs a command as a Unix daemon. As defined in W. Richard Stevens'1990 book, Unix Network Programming (Addison-Wesley, 1990), a daemon is "a process that executes 'in the background' (i.e., without an associated terminal or login shell) either waiting for some event to occur, or waiting to perform some specified task on a periodic basis." Upon startup, a typical daemon program will: - Close all open file descriptors (especially standard input, standard output and standard error) - Change its working directory to the root filesystem, to ensure that it doesn’t tie up another filesystem and prevent it from being unmounted - Reset its umask value - Run in the background (i.e., fork) - Disassociate from its process group (usually a shell), to insulate itself from signals (such as HUP) sent to the process group - Ignore all terminal I/O signals - Disassociate from the control terminal (and take steps not to reacquire one) - Handle any SIGCLD signals Most programs that are designed to be run as daemons do that work for themselves. However, you’ll occasionally run across one that does not. When you must run a daemon program that does not properly make itself into a true Unix daemon, you can use daemonize to force it to run as a true daemon. The upstream looks in a healthy state, the program is tiny and it doesn't need further patches, it's quite easy to maintain and I just wanted my distro to have it in its repositories. Thank you so much for the attention, Alessio

2 2

New package for factory: ollama
by Loren Burkholder 26 Feb '24

26 Feb '24

Hi all! I've created a package[0] for Ollama[1], and I'd like to submit it to Factory. Ollama is a wrapper for the llama.cpp LLM inferencing software, and IMO it's the easiest way to get started with running local LLMs. This package does *not* include models; those must be manually downloaded after Ollama is installed. Furthermore, since neither CUDA nor ROCm are in Factory (and CUDA cannot be added as it's nonfree), there is no GPU accelleration in this package. Maintenance of this package should be pretty straightforward; since Ollama is written in Go, it has very minimal dependencies, which reduces the chance of compilation breaking. It does see new releases on approximately a weekly schedule, but most of those releases have very minimal changes or even are simply updating the embedded llama.cpp build. This is my first time seriously packaging and maintaining a package for openSUSE, and I just want to say I'm already enjoying it! Have a lot of fun, Loren [0]: https://build.opensuse.org/package/show/science:machinelearning/ollama [1]: https://ollama.com

1 0

New Tumbleweed snapshot 20240225 released!
by Dominique Leuenberger 26 Feb '24

26 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash-completion (2.11 -> 2.12.0) judy kernel-firmware-nvidia-gspx-G06 (545.29.06 -> 550.54.14) kernel-source (6.7.5 -> 6.7.6) libcaca libvirt mailutils mailx man-pages mariadb mariadb-connector-c mdadm (4.2 -> 4.3) microos-tools (2.21+git11 -> 2.21+git12) mozc nvidia-open-driver-G06-signed (545.29.06_k6.7.5_1 -> 550.54.14_k6.7.6_1) pam pam-full-src pcaudiolib polkit-default-privs (1550+20240207.d833f4b -> 1550+20240223.b0857d7) python-distro rtkit rubygem-gem2rpm speech-dispatcher (0.11.5 -> 0.12.0~rc2) spice wicked (0.6.73 -> 0.6.74) wsdd yast2-bootloader (5.0.4 -> 5.0.5) === Details === ==== bash-completion ==== Version update (2.11 -> 2.12.0) - Remove also patch bash-completion-fix-missing-directory-completion-with-filename-pattern.patch as the problem is fixed upstream - Update to version 2.12.0: Features * _comp_backup_glob: add ucf generated backup files (351be1c) * _comp_backup_glob: require dash in dpkg backup files (59a57f9) * comp_compgen{filedir,set}: define exit status (7920c9d) * _comp_compgen_commands: align return value with other compgens (9d3362e) * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e) * _comp_compgen_commands: include dirs (b9c7b5d) * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0) * _comp_compgen: support -i cmd and -x cmd (39cc200) * _comp_compgen: support -U var to unlocal var (b603535) * _comp_compgen: support option -C (6b3dfa5) * _comp_expand_glob: fail when no paths are generated (6b0a466) * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0) * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953) * add _comp_compgen_split (542bf73) * add _comp_locate_first_arg (0384bd5) * airflow: add fallback 3rd party completion loader (bf5550b) * ansible:* add fallback 3rd party completion loader (5f8384e) * apt-get: prefer apt-cache in same dir as command (a731bfd) * b2sum: new completion (cd985df) * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b) * black,blackd: add fallback 3rd party completion loader (47a1f05) * carton: support exec command completions (0eb3a21) * chezmoi: add 3rd-party completion loader (cobra) (31baa69) * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2) * crc: add 3rd-party completion loader (cobra) (f10866e) * cz: add fallback 3rd party completion loader (b7ba70e) * dot: support filename extension .gv (be0010e) * dprint: add fallback 3rd party completion loader (e201e0e) * eog: add missing extension .heif (9e4a48f) * eog: associate with *.avif and *.webp (#1005) (f1c04b8) * eog: associate with *.heic and *.jxl (20c9cea) * eog: associate with *.pbm (#1006) (5472cc1) * feh: associate with y4m and heic/heif/avif (e252c73) * feh: deassociate with avci/avcs (af46f34) * flask: add fallback 3rd party completion loader (3e0d00d) * hash: new completion (#1013) (4d0bffb) * httpx: add fallback 3rd party completion loader (3f4861c) * ip: Add completion for monitor subcommand (fa696e6) * jungle: add fallback 3rd-party completion loader (c69845a) * keyring: add fallback 3rd party completion loader (8082602) * kontena: add fallback 3rd-party completion loader (5eef0ce) * lefthook: add fallback 3rd party completion loader (dc9650e) * mailman: prefer list_lists in same dir as command (a46ccf1) * mysql: prefer mysqlshow from same dir (643886c) * no empty command completion if no_empty_cmd_completion is on (faab292) * npm: add fallback 3rd-party completion loader (f1c085c) * nvm: add fallback 3rd-party completion loader (dea7e1d) * oc: add 3rd-party completion loader (cobra) (26b5f09) * pip{,3}: add fallback 3rd-party completion loader (e3cbfba) * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd) * pytest: complete new --import-mode value (#1021) (2d636a3) * rtx: add fallback 3rd party completion loader (0628e22) * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6) * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270) * ssh-inscribe: add fallback 3rd party completion loader (7f2c197) * ssh: complete RequiredRSASize (#1064) (de15205) * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604) * tkn: add 3rd-party completion loader (cobra) (161fc5d) * xrandr: comma separated --setmonitor third argument (8a76f3d) Bug Fixes * __load_completion: quoted compspec for variants (#1008) (0a2443e) * _cd_devices: /dev/cdc-* CDC device false positives (5250728) * _comp__init_set_up_service_completions: work around failglob (2529d40) * comp{first_arg,count_args}: count - as argument (e23a79e) * comp{first_arg,count_args}: count any arguments after -- (9bfd760) * _comp_command_offset: Support complete -C (80450ca) * _comp_compgen_fstypes: avoid unexpected expansions (a856d81) * _comp_compgen_help: allow dots to connect names in longopt (79dadfc) * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb) * _comp_compgen_split: work around nounset (f488f96) * _comp_compgen_term: replace completions by default (d3696a3) * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498) * _comp_compgen: do not inherit -a for explicitly specified var (3c20766) * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3) * _comp_count_args: check optarg correctly (874c503) * _comp_count_args: exclude <>& from wordbreaks as _comp_initialize (521d2bb) * _comp_count_args: ignore empty $3 (76eea74) * _comp_count_args: perform optarg check also on $3 (21d3122) * _comp_count_args: skip reassembling cword and words (3127703) * _comp_delimited: treat delimiter as a fixed string (571a0f7) * _comp_deprecate_func: argument order in usage error message (597f62f) * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef) * _comp_initialize: fix completions of redirections without space (da16bf6) * _comp_initialize: protect against "localvar_inherit" (0cc8d83) * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c) * _comp_split: update error message for the correct options (3c4a89c) * _comp_sysvdirs: work around nounset (da26178) * _filedir_xspec: clean up unused variable tmp (67f1189) * _get_cword_at_cursor,cvs: quote array length (201239c) * _get_first_arg: remove invalid doccomment (eb40f56) * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9) * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce) * _service: quote word (c2d7fb7) * _slackpkg: do not scan after cword (ecd1384) ... changelog too long, skipping 144 lines ... as not known how to port and if this is required ==== judy ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== kernel-firmware-nvidia-gspx-G06 ==== Version update (545.29.06 -> 550.54.14) - update firmware to version 550.54.14 ==== kernel-source ==== Version update (6.7.5 -> 6.7.6) - Linux 6.7.6 (bsc#1012628). - work around gcc bugs with 'asm goto' with outputs (bsc#1012628). - update workarounds for gcc "asm goto" issue (bsc#1012628). - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (bsc#1012628). - btrfs: forbid creating subvol qgroups (bsc#1012628). - btrfs: do not ASSERT() if the newly created subvolume already got read (bsc#1012628). - btrfs: forbid deleting live subvol qgroup (bsc#1012628). - btrfs: send: return EOPNOTSUPP on unknown flags (bsc#1012628). - btrfs: don't reserve space for checksums when writing to nocow files (bsc#1012628). - btrfs: reject encoded write if inode has nodatasum flag set (bsc#1012628). - btrfs: don't drop extent_map for free space inode on write error (bsc#1012628). - driver core: Fix device_link_flag_is_sync_state_only() (bsc#1012628). - kselftest: dt: Stop relying on dirname to improve performance (bsc#1012628). - selftests/landlock: Fix net_test build with old libc (bsc#1012628). - selftests/landlock: Fix fs_test build with old libc (bsc#1012628). - of: unittest: Fix compile in the non-dynamic case (bsc#1012628). - drm/msm/gem: Fix double resv lock aquire (bsc#1012628). - selftests/landlock: Fix capability for net_test (bsc#1012628). - ASoC: Intel: avs: Fix pci_probe() error path (bsc#1012628). - spi: imx: fix the burst length at DMA mode and CPU mode (bsc#1012628). - ASoC: Intel: avs: Fix dynamic port assignment when TDM is set (bsc#1012628). - wifi: iwlwifi: clear link_id in time_event (bsc#1012628). - wifi: iwlwifi: Fix some error codes (bsc#1012628). - wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (bsc#1012628). - ASoC: SOF: ipc3-topology: Fix pipeline tear down logic (bsc#1012628). - dpll: fix possible deadlock during netlink dump operation (bsc#1012628). - net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers (bsc#1012628). - net/handshake: Fix handshake_req_destroy_test1 (bsc#1012628). - bonding: do not report NETDEV_XDP_ACT_XSK_ZEROCOPY (bsc#1012628). - devlink: Fix command annotation documentation (bsc#1012628). - of: property: Improve finding the consumer of a remote-endpoint property (bsc#1012628). - of: property: Improve finding the supplier of a remote-endpoint property (bsc#1012628). - ALSA: hda/cs35l56: select intended config FW_CS_DSP (bsc#1012628). - perf: CXL: fix mismatched cpmu event opcode (bsc#1012628). - selftests/net: convert test_bridge_backup_port.sh to run it in unique namespace (bsc#1012628). - selftests: net: Fix bridge backup port test flakiness (bsc#1012628). - selftests: forwarding: Fix layer 2 miss test flakiness (bsc#1012628). - selftests: forwarding: Fix bridge MDB test flakiness (bsc#1012628). - selftests: forwarding: Suppress grep warnings (bsc#1012628). - selftests: forwarding: Fix bridge locked port test flakiness (bsc#1012628). - net: openvswitch: limit the number of recursions from action sets (bsc#1012628). - lan966x: Fix crash when adding interface under a lag (bsc#1012628). - net: tls: factor out tls_*crypt_async_wait() (bsc#1012628). - tls: fix race between async notify and socket close (bsc#1012628). - tls: fix race between tx work scheduling and socket close (bsc#1012628). - net: tls: handle backlogging of crypto requests (bsc#1012628). - net: tls: fix use-after-free with partial reads and async decrypt (bsc#1012628). - net: tls: fix returned read length with async decrypt (bsc#1012628). - spi: ppc4xx: Drop write-only variable (bsc#1012628). - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (bsc#1012628). - drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address (bsc#1012628). - net: sysfs: Fix /sys/class/net/<iface> path for statistics (bsc#1012628). - nouveau/svm: fix kvcalloc() argument order (bsc#1012628). - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (bsc#1012628). - ptrace: Introduce exception_ip arch hook (bsc#1012628). - mm/memory: Use exception ip to search exception tables (bsc#1012628). - i40e: Do not allow untrusted VF to remove administratively set MAC (bsc#1012628). - i40e: Fix waiting for queues of all VSIs to be disabled (bsc#1012628). - mm: thp_get_unmapped_area must honour topdown preference (bsc#1012628). - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (bsc#1012628). - selftests/mm: ksm_tests should only MADV_HUGEPAGE valid memory ... changelog too long, skipping 457 lines ... - commit 8ef8383 ==== libcaca ==== - Use %autosetup, prepare for RPM 4.20. * Rewrote patches so that they are applied uniformly via %autosetup. * Correctly reorder the patches in specfile declaration. ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Add SLE virtiofsd path to apparmor profiles bsc#1219772 - Fix return value when libnetcontrol fails to initialize boo#1219986 ==== mailutils ==== Subpackages: libmailutils9 - Use %patch -P N instead of deprecated %patchN. ==== mailx ==== - Use %patch -P N instead of deprecated %patchN. ==== man-pages ==== - use %autosetup macro ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Use %patch -P N instead of deprecated %patchN. ==== mariadb-connector-c ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== mdadm ==== Version update (4.2 -> 4.3) - Update mdadm-4.3 to latest status (jsc#PED-7542) - Remove hardcoded checkpoint interval checking 0001-Remove-hardcoded-checkpoint-interval-checking.patch - monitor: refactor checkpoint update 0002-monitor-refactor-checkpoint-update.patch - Super-intel: Fix first checkpoint restart 0003-Super-intel-Fix-first-checkpoint-restart.patch - Grow: Move update_tail assign to Grow_reshape() 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch - Add understanding output section in man 0005-Add-understanding-output-section-in-man.patch - Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back ported patches, mdadm-4.3 has the following extra changes since last update upto commit 582945c2d3bb, - Fix null pointer for incremental in mdadm. - Super1: fix truncation check for journal device. - Fix some cases eyesore formatting. - Bump minimum kernel version to 2.6.32. - Remove the config files in mdcheck_start|continue service. - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(), ident_set_devname(). - Enable RAID for SATA under VMD. - Imsm: Fix possible segfault in check_no_platform() - Imsm refactor on imsm_get_free_size(), merge_extents(). - Imsm: return free space after volume for expand. - Imsm: fix free space calculations. - Add secure gethostname() wrapper. - mdadm: Stop mdcheck_continue timer when mdcheck_start service can finish check. - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c. - Fix unsafe string functions. - platform-intel: limit guid length. - Imsm: Add reading vmd register for finding imsm capability. - Add compiler defenses flags. - Assemble: fix redundant memory free. - More regression test cases added into tests. - Mdadm: set ident.devname if applicable. - Mdadm: refactor ident->name handling. - Mdadm: Follow POSIX Portable Character Set. - Incremental: remove obsoleted calls to udisks. - Fix race of "mdadm --add" and "mdadm --incremental". - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf. - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel>=5.4. - Fix assembling RAID volume by using incremental. - Mdmonitor: Improve udev event handling. - Udev: Move udev_block() and udev_unblock() into udev.c. - Manage: adjust checking subarray state in update_subarray. - Super1: remove support for name= in config. - Mdadm: fix update=resync regression. - Rebase to keep consistent behavior for current code base. - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch - The following patches are moved from package because they are all included in mdadm-4.3, - 0001-Unify-error-message.patch - 0002-mdadm-Fix-double-free.patch - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch - 0004-udev-adapt-rules-to-systemd-v247.patch - 0005-Replace-error-prone-signal-with-sigaction.patch - 0006-mdadm-Respect-config-file-location-in-man.patch - 0007-mdadm-Update-ReadMe.patch - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch - 0009-mdadm-Update-config-manual.patch - 0010-Create-Build-use-default_layout.patch - 0011-mdadm-add-map_num_s.patch - 0012-mdmon-Stop-parsing-duplicate-options.patch - 0013-Grow-block-n-on-external-volumes.patch - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch - 0015-Mdmonitor-Fix-segfault.patch - 0016-Mdmonitor-Improve-logging-method.patch - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch - 0020-util-replace-ioctl-use-with-function.patch - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch - 0022-imsm-introduce-get_disk_slot_in_dev.patch - 0023-imsm-use-same-slot-across-container.patch - 0024-imsm-block-changing-slots-during-creation.patch - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch - 0029-Monitor-use-snprintf-to-fill-device-name.patch - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch - 0036-mdadm-Fix-optional-write-behind-parameter.patch - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch - 0038-mdadm-remove-symlink-option.patch - 0039-mdadm-move-data_offset-to-struct-shape.patch - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch - 0041-Grow-Split-Grow_reshape-into-helper-function.patch - 0042-Assemble-check-if-device-is-container-before-schedul.patch - 0043-super1-report-truncated-device.patch - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch - 0046-Monitor-Fix-statelist-memory-leaks.patch - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch ... changelog too long, skipping 55 lines ... - 0103-Create-Fix-checking-for-container-in-update_metadata.patch ==== microos-tools ==== Version update (2.21+git11 -> 2.21+git12) - Update to version 2.21+git12: * 98selinux-microos: Avoid "/sysroot-selinux: not mounted" on new util-linux - Switch _service to use mode="manual" instead of "disabled" ==== mozc ==== Subpackages: fcitx-mozc ibus-mozc ibus-mozc-candidate-window mozc-gui-tools - Use %patch -P N instead of deprecated %patchN. ==== nvidia-open-driver-G06-signed ==== Version update (545.29.06_k6.7.5_1 -> 550.54.14_k6.7.6_1) - Update to 550.54.14 * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more details. - supersedes the following patches: * 0001-Don-t-override-INSTALL_MOD_DIR.patch * kernel-6.7.patch ==== pam ==== Subpackages: pam-32bit - Use autosetup to prepare for RPM 4.20. ==== pam-full-src ==== - Use autosetup to prepare for RPM 4.20. ==== pcaudiolib ==== - Use %autosetup in %prep section. ==== polkit-default-privs ==== Version update (1550+20240207.d833f4b -> 1550+20240223.b0857d7) - Update to version 1550+20240223.b0857d7: * profiles: add new tuned actions (bsc#1220081) ==== python-distro ==== - Switch to autosetup macro. ==== rtkit ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== rubygem-gem2rpm ==== - Added 0034-plugin-dir.patch - also own the new gem plugin dir - Added 0035-fix-patch-syntax.patch: Fix patch syntax for the upcoming rpm 4.20 ==== speech-dispatcher ==== Version update (0.11.5 -> 0.12.0~rc2) Subpackages: libspeechd2 speech-dispatcher-module-espeak - Update to version 0.12.0~rc2: * Add openjtalk module. * Fix splitting long UTF-8 sequences. * Update CLDR to version 44 and symbols from NVDA. * Add spd_fd function to C api. - Use _multibuild to build also a python311 flavor in SLE15 (jsc#PED-68) - Rename the python3-speechd package to %{primary_python}-speechd in TW/ALP so that it follows the python package naming policy. - Fix %_datadir which is now included in the main speech-dispatcher package instead of in -configure. - Only provide python3-speechd from python311-speechd in TW/ALP, otherwise the python 3.11 flavor might be selected instead of the real python3-speechd package in SLE15. - Only require python-speechd for the -configure package. The base package does not require it to be installed. - Update to version 0.12.0~rc1: * Add socket activation * libspeechd: Simplify buffer management. * Add language and variant parameters to "list voice" command. - Add pkgconfig(libsystemd) to BuildRequires. ==== spice ==== - do not require six https://trello.com/c/MO53MocR/143-remove-python3-six - added patches https://gitlab.freedesktop.org/spice/spice-common/-/commit/29dacb5f53f5183f… + spice-no-six.patch ==== wicked ==== Version update (0.6.73 -> 0.6.74) Subpackages: wicked-service - update to version 0.6.74 + team: add new options like link_watch_policy (jsc#PED-7183) + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001) + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999) + vxlan: don't format unknown rtnl attrs (bsc#1219751) - removed patches included in the source archive: [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch] [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch] [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch] [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch] [- 0005-duid-fix-comment-for-v6time.patch] [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch] [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch] [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch] [- 0001-fix_arp_notify_loop_and_burst_sending.patch] ==== wsdd ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== yast2-bootloader ==== Version update (5.0.4 -> 5.0.5) - Proposal: Trying to take the bootloader which has been defined in the product description file (entry globals/prefered_bootloader) (jsc#PED-1906) - 5.0.5

1 0

New Tumbleweed snapshot 20240223 released!
by Dominique Leuenberger 24 Feb '24

24 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: babl (0.1.106 -> 0.1.108) bc binutils busybox-links dcraw djvulibre dnsmasq (2.89 -> 2.90) e2fsprogs ebook-tools ed (1.20 -> 1.20.1) efont-unicode-bitmap-fonts elilo gcc gd gegl (0.4.46 -> 0.4.48) graphviz grub2 hdparm hfsutils hplip hyper-v ibus ibus_gtk4 intlfonts iso_ent jfsutils kColorPicker-Qt5 kernel-firmware (20240201 -> 20240220) keyutils libHX (4.21 -> 4.23) libjxl-gtk (0.9.2 -> 0.10.0) libphonenumber (8.13.23 -> 8.13.30) libstorage-ng (4.5.190 -> 4.5.191) make mtools musepack neon nvidia-open-driver-G06-signed parted pcr-oracle pcre2 (10.42 -> 10.43) potrace prctl python-cryptography (41.0.7 -> 42.0.4) qemu rzip samba (4.19.4+git.339.acf1ccaa020 -> 4.19.5+git.342.57620c4f7e) sane-backends spacenavd systemd tigervnc transmission unzip virtiofsd xdp-tools xml-commons-apis xorg-x11-server xwayland yast2-perl-bindings (5.0.0 -> 5.0.1) zchunk zlib === Details === ==== babl ==== Version update (0.1.106 -> 0.1.108) Subpackages: libbabl-0_1-0 libbabl-0_1-0-x86-64-v3 - disable gi-docgen docs for now - Update to 0.1.108: - "double" and "half" support in cli-tool, build fixes. ==== bc ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if symbol is local when no-relax ==== busybox-links ==== Subpackages: busybox-bzip2 busybox-coreutils busybox-diffutils busybox-ed busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-misc busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-which busybox-xz - busybox-udhcpc conflicts with udhcp. ==== dcraw ==== Subpackages: dcraw-lang - Use %patch -P N instead of deprecated %patchN. ==== djvulibre ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== dnsmasq ==== Version update (2.89 -> 2.90) - update to 2.90: * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826: Denial Of Service while trying to validate specially crafted DNSSEC responses * Fix reversion in --rev-server introduced in 2.88 which caused breakage if the prefix length is not exactly divisible by 8 (IPv4) or 4 (IPv6). * Fix possible SEGV when there server(s) for a particular domain are configured, but no server which is not qualified for a particular domain. * Set the default maximum DNS UDP packet sice to 1232. Obsoletes: dnsmasq-CVE-2023-28450.patch * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better control over which inetrfaces are providing DHCP service. * Fix issue with stale caching * Add configurable caching for arbitrary RR-types. * Add --filter-rr option, to filter arbitrary RR-types. ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - Use %patch -P N instead of deprecated %patchN. ==== ebook-tools ==== - Use %patch -P N instead of deprecated %patchN. ==== ed ==== Version update (1.20 -> 1.20.1) - GNU ed 1.20.1: * New command-line options '+line', '+/RE', and '+?RE' have been implemented to set the current line to the line number specified or to the first or last line matching the regular expression 'RE'. * File names containing control characters 1 to 31 are now rejected unless they are allowed with the command-line option '--unsafe-names'. * File names containing control characters 1 to 31 are now printed using octal escape sequences. * Ed now rejects file names ending with a slash. * Intervening commands that don't set the modified flag no longer make a second 'e' or 'q' command fail with a 'buffer modified' warning. * Tilde expansion is now performed on file names supplied to commands; if a file name starts with '~/', the tilde (~) is expanded to the contents of the variable HOME. * Ed now warns the first time that a command modifies a buffer loaded from a read-only file. * It has been documented that 'e' creates an empty buffer if file does not exist. * It has been documented that 'f' sets the default filename, whether or not its argument names an existing file. * The description of the exit status has been improved in '--help' and in the manual. ==== efont-unicode-bitmap-fonts ==== - Use %patch -P N instead of deprecated %patchN. ==== elilo ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== gcc ==== - Add gcc-build flavor for building ALP packages, but disabled for openSUSE. - Support building suffixed packages, but only allow installing one variant at the same time. - Remove obsolete obsoletes. ==== gd ==== Subpackages: libgd3 - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== gegl ==== Version update (0.4.46 -> 0.4.48) Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Update to version 0.4.48: + Core: - GeglColor extended with GBytes API, and space aware accesors for RGB and CMYK. Better runtime handling of mismatched GEGL ops in graphs. + Build: - Use gi-docgen - Updated vendored libraries - ctx has been updated from upstream. + Operations: - dropshadow: Fix shrinking with negative-grow radius. - mantiuk: opt out of OpenMP when building with clang. - voroni: fix crash. - shuffle-search: in progress (in workshop, not built by default) brute-force dither optimizer. - prepare gi-docgen documentation. disabled for now. ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - Use %patch -P N instead of deprecated %patchN. - Update graphviz-rpmlintrc ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg (bsc#1219248) (bsc#1181762) * grub2-xen-pv-firmware.cfg * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch ==== hdparm ==== - Use %patch -P N instead of deprecated %patchN. ==== hfsutils ==== - Use %patch -P N instead of deprecated %patchN. ==== hplip ==== Subpackages: hplip-hpijs hplip-sane hplip-udev-rules - Use %patch -P N instead of deprecated %patchN. ==== hyper-v ==== - Use %patch -P N instead of deprecated %patchN. ==== ibus ==== Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - Use %patch -P N instead of deprecated %patchN. ==== ibus_gtk4 ==== - Use %patch -P N instead of deprecated %patchN. ==== intlfonts ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== iso_ent ==== - Use %patch -P N instead of deprecated %patchN. ==== jfsutils ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== kColorPicker-Qt5 ==== - Fix build on Leap. The Qt6 packaging macros set the minimum compiler version - Change %post/%postun to %ldconfig_scriptlets ==== kernel-firmware ==== Version update (20240201 -> 20240220) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240220 (git commit 73b4429fae36): * linux-firmware: update firmware for en8811h 2.5G ethernet phy * linux-firmware: add firmware for MT7996 * xe: First GuC release for LNL and Xe * i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL * linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) * brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet * ice: update ice DDP package to 1.3.36.0 * Intel IPU3 ImgU: Move firmware file under intel/ipu * Intel IPU6: Move firmware binaries under ipu/ * check_whence: Add a check for duplicate link entries * WHENCE: Clean up section separators * linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models * panthor: Add initial firmware for Gen10 Arm Mali GPUs * amdgpu: DMCUB Updates for DCN321: 7.0.38.0 * amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 * qcom: update venus firmware file for v5.4 * Montage: add firmware for Mont-TSSE * amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 * linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware * linux-firmware: Fix filenames for some CS35L41 firmwares for HP - Use patch macro -P option for RPM 4.20 ==== keyutils ==== Subpackages: libkeyutils1 libkeyutils1-32bit - Use %patch -P N instead of deprecated %patchN. ==== libHX ==== Version update (4.21 -> 4.23) - Update to release 4.23 * io: use smaller chunks with sendfile(2) to work around unusual API behavior * io: make HX_copy_file() utilize copy_file_range when available ==== libjxl-gtk ==== Version update (0.9.2 -> 0.10.0) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update to release 0.10 * decoder: added ``JxlDecoderGetBoxSizeContents`` for getting the size of the content of a box without the headers. * encoder: implemented new API functions for streaming encoding. ==== libphonenumber ==== Version update (8.13.23 -> 8.13.30) - Update to version 8.13.30: * Update alternate formatting data, phone metadata, geocoding data, carrier data * Updated / refreshed time zone meta data. * New geocoding data - Add patch submitted to upstream at gh#google/libphonenumber#3394 to fix building with protobuf 3.25.1: * 0001-Add-support-to-protobuf-3.25.1.patch - Add patch submitted in gh#sergiomb2/libphonenumber#1 by Fabian Vogt: * 0002-Avoid-intermediate-proto-object-library.patch ==== libstorage-ng ==== Version update (4.5.190 -> 4.5.191) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Finnish) (bsc#1149754) - 4.5.191 ==== make ==== Subpackages: make-lang - Use %patch -P ==== mtools ==== - Use %autosetup macro. ==== musepack ==== - Use %patch -P N instead of deprecated %patchN. ==== neon ==== - Use %patch -P N instead of deprecated %patchN. ==== nvidia-open-driver-G06-signed ==== - re-enable build of -azure kernel flavor; syntax check was wrong ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 parted-lang - avoid deprecated rpm syntax ==== pcr-oracle ==== - Add fix_loader_conf.patch to measure the systemd-boot loader.conf file ==== pcre2 ==== Version update (10.42 -> 10.43) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit - pcre2 10.43: * The JIT code no longer supports ARMv5 architecture. * A new function pcre2_get_match_data_heapframes_size() for finer heap control. * New option flags to restrict the interaction between ASCII and non-ASCII characters for caseless matching and \d and friends. There are also new pattern constructs to control these flags from within a pattern. * Upgrade to Unicode 15.0.0. * Treat a NULL pattern with zero length as an empty string. * Added support for limited-length variable-length lookbehind assertions, with a default maximum length of 255 characters (same as Perl) but with a function to adjust the limit. * Perl changed the meaning of (for example) {,3} which did not used to be recognized as a quantifier. Now it means {0,3} and PCRE2 has also changed. Note that {,} is still not a quantifier. * Following Perl, allow spaces and tabs after { and before } in all Perl- compatible items that use braces, and also around commas in quantifiers. The one exception in PCRE2 is \u{...}, which is from ECMAScript, not Perl, and PCRE2 follows ECMAScript usage. * Changed the meaning of \w and its synonyms and derivatives (\b and \B) in UCP mode to follow Perl. It now matches characters whose general categories are L or N or whose particular categories are Mn (non-spacing mark) or Pc (combining punctuation). * Changed the default meaning of [:xdigit:] in UCP mode to follow Perl. It now matches the "fullwidth" versions of hex digits. PCRE2_EXTRA_ASCII_DIGIT can be used to keep it ASCII only. * Make PCRE2_UCP the default in UTF mode in pcre2grep and add - no_ucp, --case-restrict and --posix-digit. * Add --group-separator and --no-group-separator to pcre2grep. ==== potrace ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== prctl ==== - Use %patch -P N instead of deprecated %patchN. - Move license to %license section ==== python-cryptography ==== Version update (41.0.7 -> 42.0.4) - update to 42.0.4 (bsc#1220210, CVE-2024-26130): * Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130 * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370. - update to 42.0.3: * Fixed an initialization issue that caused key loading failures for some users. - Drop patch skip_openssl_memleak_test.patch not needed anymore. - update to 42.0.2: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1. * Fixed an issue that prevented the use of Python buffer protocol objects in sign and verify methods on asymmetric keys. * Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:`~cryptography.hazmat.primitive s.asymmetric.ec.EllipticCurvePrivateKey.exchange`, X25519PrivateKey :meth:`~cryptography.hazmat.primitives.asymm etric.x25519.X25519PrivateKey.exchange`, X448PrivateKey :meth :`~cryptography.hazmat.primitives.asymmetric.x448.X448Private Key.exchange`, and DHPrivateKey :meth:`~cryptography.hazmat.p rimitives.asymmetric.dh.DHPrivateKey.exchange`. - update to 42.0.1: * Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:`~cryptography.hazmat.primitive s.asymmetric.ec.EllipticCurvePrivateKey.sign`. * Resolved compatibility issue with loading certain RSA public keys in :func:`~cryptography.hazmat.primitives.serialization. load_pem_public_key`. * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.7. * BACKWARDS INCOMPATIBLE: Loading a PKCS7 with no content field using :func:`~cryptography.hazmat.primitives.serialization.pk cs7.load_pem_pkcs7_certificates` or :func:`~cryptography.hazm at.primitives.serialization.pkcs7.load_der_pkcs7_certificates ` will now raise a ValueError rather than return an empty list. * Parsing SSH certificates no longer permits malformed critical options with values, as documented in the 41.0.2 release notes. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0. * Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0. * We now publish both py37 and py39 abi3 wheels. This should resolve some errors relating to initializing a module multiple times per process. * Support :class:`~cryptography.hazmat.primitives.asymmetric.pa dding.PSS` for X.509 certificate signing requests and certificate revocation lists with the keyword-only argument rsa_padding on the sign methods for :class:`~cryptography.x509.CertificateSigningRequestBuilder` and :class:`~cryptography.x509.CertificateRevocationListBuilder`. * Added support for obtaining X.509 certificate signing request signature algorithm parameters (including PSS) via :meth:`~cr yptography.x509.CertificateSigningRequest.signature_algorithm _parameters`. * Added support for obtaining X.509 certificate revocation list signature algorithm parameters (including PSS) via :meth:`~cr yptography.x509.CertificateRevocationList.signature_algorithm _parameters`. * Added mgf property to :class:`~cryptography.hazmat.primitives .asymmetric.padding.PSS`. * Added algorithm and mgf properties to :class:`~cryptography.h azmat.primitives.asymmetric.padding.OAEP`. * Added the following properties that return timezone-aware datetime objects: :meth:`~cryptography.x509.Certificate.not_valid_before_utc`, :meth:`~cryptography.x509.Certificate.not_valid_after_utc`, : meth:`~cryptography.x509.RevokedCertificate.revocation_date_u tc`, :meth:`~cryptography.x509.CertificateRevocationList.next _update_utc`, :meth:`~cryptography.x509.CertificateRevocation List.last_update_utc`. These are timezone-aware variants of existing properties that return naÃ¯ve datetime objects. * Deprecated the following properties that return naÃ¯ve datetime objects: :meth:`~cryptography.x509.Certificate.not_valid_before`, :meth:`~cryptography.x509.Certificate.not_valid_after`, :meth :`~cryptography.x509.RevokedCertificate.revocation_date`, :me th:`~cryptography.x509.CertificateRevocationList.next_update` , :meth:`~cryptography.x509.CertificateRevocationList.last_up date` in favor of the new timezone-aware variants mentioned above. * Added support for :class:`~cryptography.hazmat.primitives.cip hers.algorithms.ChaCha20` on LibreSSL. * Added support for RSA PSS signatures in PKCS7 with :meth:`~cr yptography.hazmat.primitives.serialization.pkcs7.PKCS7Signatu reBuilder.add_signer`. * In the next release (43.0.0) of cryptography, loading an X.509 certificate with a negative serial number will raise an exception. This has been deprecated since 36.0.0. * Added support for :class:`~cryptography.hazmat.primitives.cip hers.aead.AESGCMSIV` when using OpenSSL 3.2.0+. * Added the :mod:`X.509 path validation <cryptography.x509.verification>` APIs for ... changelog too long, skipping 9 lines ... - switch to new cargo-vendor ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Just "prettify" the spec files a little: * [openSUSE][RPM] Cosmetic fixes to spec files (copyright, sorting, etc) - Patchqueue shrinking and bugfixing (actually, more of a temporary workaround, until a proper solution is found upstream): * [openSUSE] roms/seabios: revert some upstream commits that break a lot of use-cases * [openSUSE] roms/seabios: Drop an old (and no longer necessary) downstream patch (bsc#1219977) ==== rzip ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== samba ==== Version update (4.19.4+git.339.acf1ccaa020 -> 4.19.5+git.342.57620c4f7e) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555). ==== sane-backends ==== Subpackages: libsane1 sane-backends-autoconfig - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. - Add BuildArch noarch to autoconfig subpackage ==== spacenavd ==== - Replace %patchN with %autosetup ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Import commit 31f1148f75a1155d3eb37fd1a450096d669ec65b 31f1148f75 seccomp: include `fchmodat2` in `@file-system` (bsc#1219766) 001f349c57 service: Demote log level of NotifyAccess= messages to debug (bsc#1210113 jsc#PED-6214) - Add a new %upstream macro to support building from upstream sources. This will allow upstream to build systemd rpms using the opensuse systemd packaging specs. These rpms will be built and used in upstream's mkosi based hacking and testing environment to test changes and in the future to run integration tests as well. By building the rpms using the opensuse packaging specs, the idea is to catch more issues ahead of time as the mkosi environment will behave more like a regular opensuse system. - Add new %version_override and %version_release macros to allow overriding the version and release of the rpm respectively. ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Set the URL at Source0. - patches have been renamed * u_build_libXvnc_as_separate_library.patch --> u_tigervnc-Build-libXvnc-as-separate-library.patch * n_vncserver.patch --> n_tigervnc-Vncserver.patch * n_correct_path_in_desktop_file.patch --> n_tigervnc-Correct-path-in-desktop-file.patch * n_tigervnc-date-time.patch --> n_tigervnc-Date-time.patch * u_change-button-layout-in-ServerDialog.patch --> u_tigervnc-Change-button-layout-in-ServerDialog.patch * n_dont_sign_java_client.patch --> n_tigervnc-Dont-sign-java-client.patch * u_tigervnc-add-autoaccept-parameter.patch --> u_tigervnc-Add-autoaccept-parameter.patch * u_tigervnc-ignore-epipe-on-write.patch u_tigervnc-Ignore-epipe-on-write.patch - Cleanup specfile * Use the same format for all the patches. * Use autosetup to apply all the patches with -p1. * Clean number of sources. - buildrequire xorg-x11-server-source/-sdk >= 21.1.11 and trigger rebuild with newer xorg-x11-server-source package (bsc#1219311, bsc#1219205) ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Fix build with recent cmake macro change (DOCDIR): do not install the documentation using cmake, as we already do so using %doc. Change if(INSTALL_DOC) to if(FALSE) in CMakeLists.txt. The more obvious option of passing -DINSTALL_DOC=OFF is ot viable, as that also disables installing the man pages. ==== unzip ==== Subpackages: unzip-doc - Use %patch -P N instead of deprecated %patchN. ==== virtiofsd ==== - Spec: Adjust libvirt/virtiofsd interop config file to handle differences in the definition of libexecdir macro on SLE and Tumbleweed (bsc#1219772) ==== xdp-tools ==== - Remove kernel-devel Runtime dependency from libxdp1. ==== xml-commons-apis ==== - Clean the spec file and simplify it a bit ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - fix permissions of files in xorg-x11-server-source for tigervnc build later (needed since latest autoconf) - Provide again xorg-x11-server-source * xwayland sources are not meant for a generic server. * https://github.com/TigerVNC/tigervnc/issues/1728 - Stop providing xorg-x11-server-source from xorg-x11-server * Now the sources are provided by xwayland because it is more updated. * Fixes bsc#1219892. ==== xwayland ==== - Don't provide xorg-x11-server-source * xwayland sources are not meant for a generic server. * https://github.com/TigerVNC/tigervnc/issues/1728 - Provide xorg-x11-server-source from xwayland * xwayland will be more updated than xorg-x11-server, so the server sources will be more updated too if are provided by xwayland. * Fixes bsc#1219892. ==== yast2-perl-bindings ==== Version update (5.0.0 -> 5.0.1) - Fix the locale after initializing embedded Perl interpreter (bsc#1216689) - 5.0.1 ==== zchunk ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== zlib ==== Subpackages: libminizip1 libminizip1-x86-64-v3 libz1 libz1-32bit libz1-x86-64-v3 - Use %patch -P N instead of deprecated %patchN.

1 0

Tumbleweed - Review of the week 2024/08
by Dominique Leuenberger 23 Feb '24

23 Feb '24

Dear Tumbleweed users and hackers, This week, we had once again openQA blocking the release of one snapshot and protecting some of our users (using the experimental sdboot/disk-encryption). openQA has identified an inconsistency in snapshot 0215 and found that systems with this update would fail to unlock their disks. The fix landed in snapshot 0216. openQA confirmed the fix and the five snapshots 0216, 0218, 0220, 0221, and 0222 have been published. The most relevant changes in those releases were: * Mozilla Firefox 122.0.1 * bind 9.18.24 * dav1d 1.4.0 * PHP 8.2.16 * Poppler 24.02.0 * Shadow 4.14.5 * Mesa 23.3.6 * Meson 1.3.2 * binutils 2.42 * GCC 14 is now the libgcc provider. GCC 13 is still the default compiler being used * Linux kernel 6.7.5 * pkgconf 2.1.1 * Node.JS 21.6.2 * Qt 6.6.2 * Systemd 254.9 * perl-Bootloader 1.12: no longer written in perl (package name change to happen later) * Qemu 8.2.1 * Lots of packages preparing for RPM 4.20 (%patchN no longer supported) (~ 600 out of 2000 packages fixed this week) * RPM: enable reproducible builds by default (bsc#1148824) In my opinion, that’s quite an impressive list. Soon (and a bit more distant) we will be shipping these changes: * Ruby 3.2 deprecation: ruby3.2 all ruby3.2-rubygem packages will be removed from Tumbleweed * python 3.9 deprecation: all python39-* packages are scheduled for removal. We still have Python 3.10, Python 3.11 (the default interpreter), and Python 3.12 in Tumbleweed. Unfortunately, this road will be bumpy, as many Python packages still do not build for Python 3.12 – and unless the builds succeed, the pytho39-XXX packages will stay lingering in the repository. * Systemd 255 * Many more package fixes to prepare for RPM 4.20 * KDE Frameworks and Plasma 6 * dbus-broker: a big step forward; upgrades seem to be an issue that needs to be addressed * libxml 2.12.x: slow progress * GCC 14: phase 2: use gcc14 as default compiler Cheers, Dominique

1 0

New Tumbleweed snapshot 20240222 released!
by Dominique Leuenberger 23 Feb '24

23 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_dnssd argon2 boost-base boost-extra eekboard emacs-flim epson-inkjet-printer-escpr espeak expat gdm gnome-shell gpgme gpgmeqt hp2xx kcm5-fcitx kvm_stat nvidia-open-driver-G06-signed rpm tmux (3.3a -> 3.4) vde2 vim vsftpd wmctrl xdg-menu xtermset === Details === ==== apache2-mod_dnssd ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== argon2 ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== boost-base ==== Subpackages: boost-license1_84_0 libboost_filesystem1_84_0 libboost_filesystem1_84_0-x86-64-v3 libboost_iostreams1_84_0 libboost_iostreams1_84_0-x86-64-v3 libboost_locale1_84_0 libboost_locale1_84_0-x86-64-v3 libboost_thread1_84_0 libboost_thread1_84_0-x86-64-v3 - avoid obsolete rpm syntax ==== boost-extra ==== Subpackages: libboost_python-py3-1_84_0 libboost_python-py3-1_84_0-x86-64-v3 - avoid obsolete rpm syntax ==== eekboard ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== emacs-flim ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== epson-inkjet-printer-escpr ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== espeak ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== expat ==== Subpackages: libexpat1 - Fix handling of xmlwf.1 to avoid workarounds in specfile: * Added libxml2-fix-xmlwf.1-handling.patch - Call buildconf.sh to avoid (future) issues with expat_config.h.in ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Drop gdm-disable-wayland-on-mgag200-chipsets.patch: fixed upstream since version 43.0. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Add gjs Requires, because ScreenSaver DBus daemon is a gjs script. (bsc#1219359) ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 - Update gpgme-D545-obsolete-distutils.patch with upstream's changes (but use pip instead of python-build for wheel building) - Change from in-place build to out-of-place build in order to reflect upstream's build setup (See D545) - Don't replace distutils in 15.X ==== gpgmeqt ==== - Update gpgme-D545-obsolete-distutils.patch with upstream's changes (but use pip instead of python-build for wheel building) - Change from in-place build to out-of-place build in order to reflect upstream's build setup (See D545) - Don't replace distutils in 15.X ==== hp2xx ==== - Use %patch -P N instead of deprecated %patchN. ==== kcm5-fcitx ==== Subpackages: kf5-kcm-fcitx kf5-kcm-fcitx-icons - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== kvm_stat ==== - Use %patch -P N instead of deprecated %patchN. ==== nvidia-open-driver-G06-signed ==== - remove conflicts to nvidia-open-driver-G06-kmp, since it's now provided instead (OMG!); add obsoletes to it as well to make sure it gets replaced (bsc#1220196) - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== rpm ==== Subpackages: librpmbuild10 - Add patches to enable reproducible builds by default (bsc#1148824). For upstream versions see: https://github.com/rpm-software-management/rpm/pull/2880 0001-Add-option-to-set-mtime-of-files-in-rpms.patch 0002-log-build-time-if-it-is-set-from-SOURCE_DATE_EPOCH.patch 0003-Error-out-on-a-missing-changelog-date.patch ==== tmux ==== Version update (3.3a -> 3.4) - tmux 3.4 * Improve handling of newer Unicode combined characters * Add basic support for SIXEL images * Add support for spawning panes in separate cgroups with systemd * Add support for OSC 8 hyperlinks. * Expanded configuration options * Improved detection and support of terminal options * Tweaks to UI and behavior - drop patches: * ncurses.patch * tmux-CVE-2022-47016.patch ==== vde2 ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== vim ==== Subpackages: vim-data vim-data-common xxd - Use %patch -P N instead of deprecated %patchN. ==== vsftpd ==== - Use %patch -P N instead of deprecated %patchN. ==== wmctrl ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== xdg-menu ==== - Use %patch -P N instead of deprecated %patchN. ==== xtermset ==== - Use %patch -P N instead of deprecated %patchN.

1 0

Leap 15.6 Alpha repo metadata outdated
by Jim Henderson 22 Feb '24

22 Feb '24

A user in the forums reported this, and I was able to duplicate it - wondering if there's an issue that needs to be handled, or if I missed something explaining this. Forum thread: https://forums.opensuse.org/t/leap-15-6-alpha-beta- repositories/172602/4 The update repos for backports and non-OSS show that they have expired metadata since last September. The user in the thread noticed this with download.opensuse.org URLs; I changed mine to cdn.opensuse.org and got the same results (before and after the change). Is this intentional, or is there an issue on the backend? -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

2 2

A seemingly basic xfs_grow question
by Greg Freemyer 22 Feb '24

22 Feb '24

All, I'm creating a 30TB xfs filesystem that I want to ensure can grow to 120TB via xfs_grow. This is a pure SSD environment (Using 30TB Micron 6500 ION drives -- https://www.mouser.com/ProductDetail/Micron/MTFDKCC30T7TGR-1BK1DFCYY?qs=ulE…) so I don't need to worry about RAID layout etc. I'm am worried about setting the AGcount and AGsize settings in mkfs.xfs By default, I get 29 for AGcount and the corresponding AGsize of ~1TB. Supposedly neither are adjustable, but that can't be true during xfs_grow. My (uninformed) guess is that if I quadruple the size of my xfs filesystem (from 30TB to 120TB), then the number of aggregation groups will also quadruple. Do I have that right? Or do I need to be careful in laying out my original aggregation group layout. Thanks, Greg -- Greg Freemyer Advances are made by answering questions. Discoveries are made by questioning answers. — Bernard Haisch

3 6

New Tumbleweed snapshot 20240221 released!
by Dominique Leuenberger 22 Feb '24

22 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aalib acpid alsa-utils amarok apache-commons-logging apparmor argyllcms arj autofs (5.1.8 -> 5.1.9) autotrace awesfx bolt (0.9.6 -> 0.9.7) branding-openSUSE ell (0.61 -> 0.62) fde-tools gegl git (2.43.1 -> 2.43.2) grub2 highway (1.0.7 -> 1.1.0) jasper (4.2.0 -> 4.2.1) java-21-openjdk libapparmor libdbusmenu-qt5 libdecor libpng16 (1.6.40 -> 1.6.42) libqt5-qtwebengine libstorage-ng (4.5.189 -> 4.5.190) man mozilla-nss (3.96.1 -> 3.97) obex-data-server patterns-server perl-Bootloader (1.11 -> 1.12) pipewire qalculate (4.8.1 -> 4.9.0) qemu (8.2.0 -> 8.2.1) sdbootutil (1+git20240214.ba81e0e -> 1+git20240215.cb7e392) signon-plugin-oauth2 unison (2.53.3 -> 2.53.4) unixODBC utempter vacation vid_stab virtualbox virtualbox-kmp vorbis-tools vpnc webrtc-audio-processing wget wqy-zenhei-fonts wsdd yast2-trans (84.87.20240210.1383f689ba -> 84.87.20240219.f6e4117fe0) zip zvbi === Details === ==== aalib ==== - Use %patch -P N instead of deprecated %patchN. ==== acpid ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== alsa-utils ==== - Use %patch -P N instead of deprecated %patchN. ==== amarok ==== - Remove the taglib-extras dependency, it fails to build with taglib 2 and will be dropped. - Add patch to support taglib 2: * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch ==== apache-commons-logging ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Use %patch -P N instead of deprecated %patchN. ==== argyllcms ==== - Use %patch -P N instead of deprecated %patchN. ==== arj ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== autofs ==== Version update (5.1.8 -> 5.1.9) - Use %patch -P N instead of deprecated %patchN. - update to 5.1.9 (bsc#1219508) * fix kernel mount status notification. * fix fedfs build flags. * fix set open file limit. * improve descriptor open error reporting. * fix root offset error handling. * fix fix root offset error handling. * fix nonstrict fail handling of last offset mount. * dont fail on duplicate offset entry tree add. * fix loop under run in cache_get_offset_parent(). * bailout on rpc systemerror. * fix nfsv4 only mounts should not use rpcbind. * simplify cache_add() a little. * fix use after free in tree_mapent_delete_offset_tree(). * fix memory leak in xdr_exports(). * avoid calling pthread_getspecific() with NULL key_thread_attempt_id. * fix sysconf(3) return handling. * remove nonstrict parameter from tree_mapent_umount_offsets(). * fix handling of incorrect return from umount_ent(). * dont use initgroups() at spawn. * fix bashism in configure. * musl: fix missing include in hash.h. * musl: define fallback dummy NSS config path * musl: avoid internal stat.h definitions. * musl: add missing include to hash.h for _WORDSIZE. * musl: add missing include to log.h for pid_t. * musl: define _SWORD_TYPE. * add autofs_strerror_r() helper for musl. * update configure. * handle innetgr() not present in musl. * fix missing unlock in sasl_do_kinit_ext_cc(). * fix a couple of null cache locking problems. * restore gcc flags after autoconf Kerberos 5 check. * prepare for OpenLDAP SASL binding. * let OpenLDAP handle SASL binding. * configure: LDAP function checks ignore implicit declarations. * improve debug logging of LDAP binds. * improve debug logging of SASL binds. * internal SASL logging only in debug log mode. * more comprehensive verbose logging for LDAP maps. * fix invalid tsv access. * support SCRAM for SASL binding. * ldap_sasl_interactive_bind() needs credentials for auto-detection. * fix autofs regression due to positive_timeout. * fix parse module instance mutex naming. * serialise lookup module open and reinit. * coverity fix for invalid access. * fix hosts map deadlock on restart. * fix deadlock with hosts map reload. * fix memory leak in update_hosts_mounts(). * fix minus only option handling in concat_options(). * fix incorrect path for is_mounted() in try_remount(). * fix additional tsv invalid access. * fix use_ignore_mount_option description. * include addtional log info for mounts. * fail on empty replicated host name. * improve handling of ENOENT in sss setautomntent(). * don't immediately call function when waiting. * define LDAP_DEPRECATED during LDAP configure check. * fix return status of mount_autofs(). * don't close lookup at umount. * fix deadlock in lookups. * dont delay expire. * make amd mapent search function name clear. * rename statemachine() to signal_handler(). * make signal handling consistent. * eliminate last remaining state_pipe usage. * add function master_find_mapent_by_devid(). * use device id to locate autofs_point when setting log priotity. * add command pipe handling functions. * switch to application wide command pipe. * get rid of unused field submnt_count. * fix mount tree startup reconnect. * fix unterminated read in handle_cmd_pipe_fifo_message(). * fix memory leak in sasl_do_kinit() * fix fix mount tree startup reconnect. * fix amd selector function matching. * get rid entry thid field. * continue expire immediately after submount check. * eliminate realpath from mount of submount. * eliminate root param from autofs mount and umount. * remove redundant fstat from do_mount_direct(). * get rid of strlen call in handle_packet_missing_direct(). * remove redundant stat call in lookup_ghost(). * set mapent dev and ino before adding to index. * change to use printf functions in amd parser. * dont call umount_subtree_mounts() on parent at umount. * dont take parent source lock at mount shutdown. * fix possible use after free in handle_mounts_exit(). * make submount cleanup the same as top level mounts. * add soucre parameter to module functions. * add ioctlfd open helper. * make open files limit configurable. * use correct reference for IN6 macro call. * dont probe interface that cant send packet. * fix some sss error return cases. * fix incorrect matching of cached wildcard key. * fix expire retry looping. ... changelog too long, skipping 18 lines ... ("autofs-5.1.8 - add soucre parameter to module functions") ==== autotrace ==== Subpackages: libautotrace3 - Use %patch -P N instead of deprecated %patchN. ==== awesfx ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== bolt ==== Version update (0.9.6 -> 0.9.7) - update to 0.9.7: * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt is disabled through BIOS setting. * Markdown lint styling is used for documents. ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Remove update-alternatives usage, we don't have dynamic wallpapers anymore which were using that (bsc#1219919). ==== ell ==== Version update (0.61 -> 0.62) - Update to version 0.62 * Add support for cleanup functions and macros. * Add support for setting DHCP max attempts. ==== fde-tools ==== Subpackages: fde-tools-bash-completion fde-tpm-helper - Add fde-tools-bsc1213945-set-rsa-key-size.patch to set the highest supported RSA key size (bsc#1213945) ==== gegl ==== Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Replace BuildRequires libSDL2-devel with pkgconfig(sdl2) which fixes building in SLE where both libSDL2-devel and a newer SDL2-devel packages are available. ==== git ==== Version update (2.43.1 -> 2.43.2) Subpackages: git-core git-email git-web perl-Git - Do not replace apparmor configuration, fixes bsc#1216545 - update to 2.43.2: * https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.4… * Update to a new feature recently added, "git show-ref --exists". * Rename detection logic ignored the final line of a file if it is an incomplete line. * "git diff --no-rename A B" did not disable rename detection but did not trigger an error from the command line parser. * "git diff --no-index file1 file2" segfaulted while invoking the external diff driver, which has been corrected. * A failed "git tag -s" did not necessarily result in an error depending on the crypto backend, which has been corrected. * "git stash" sometimes was silent even when it failed due to unwritable index file, which has been corrected. * Recent conversion to allow more than 0/1 in GIT_FLUSH broke the mechanism by flipping what yes/no means by mistake, which has been corrected. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to SLE-15-SP2 (bsc#1217102) * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch * add 0002-ofdisk-add-early_log-support.patch ==== highway ==== Version update (1.0.7 -> 1.1.0) - Update to release 1.1.0 * Add BitCastScalar, DispatchedTarget, Foreach * Add Div/Mod and MaskedDiv/ModOr, SaturatedAbs, SaturatedNeg * Add InterleaveWholeLower/Upper, Dup128VecFromValues * Add IsInteger, IsIntegerLaneType, RemoveVolatile, RemoveCvRef * Add MaskedAdd/Sub/Mul/Div/Gather/Min/Max/SatAdd/SatSubOr * Add MaskFalse, IfNegativeThenNegOrUndefIfZero, PromoteEven/OddTo * Add ReduceMin/Max, 8-bit reductions, f16 <-> f64 conversions * Add Span, AlignedArray, matrix-vector mul * Add SumsOf2/4, I8 SumsOf8, SumsOfAdjQuadAbsDiff, SumsOfShuffledQuadAbsDiff * Extend Dot to f32*bf16, FMA to integer * Fix: RVV 8-bit overflow, UB in vqsort, big-endian bugs, PPC HTM * New targets: HWY_Z14, HWY_Z15 ==== jasper ==== Version update (4.2.0 -> 4.2.1) - Update to 4.2.1: * Fix a build problem for the DJGPP/MS-DOS environment (#372). ==== java-21-openjdk ==== Subpackages: java-21-openjdk-devel java-21-openjdk-headless - Use %patch -P N instead of deprecated %patchN. ==== libapparmor ==== - Use %patch -P N instead of deprecated %patchN. ==== libdbusmenu-qt5 ==== - Switch to %autosetup - Drop obsolete patch: * full_include_dir.patch ==== libdecor ==== Subpackages: libdecor-0-0 - Remove the -devel package from baselibs.conf ==== libpng16 ==== Version update (1.6.40 -> 1.6.42) Subpackages: libpng16-16 libpng16-16-x86-64-v3 - Update to version 1.6.42: * Fixed the implementation of the macro function "png_check_sig". This was an API regression, introduced in libpng-1.6.41. (Reported by Matthieu Darbois) ==== libqt5-qtwebengine ==== - Switch to '%patch -P' - Build with python 3.11 on Leap ==== libstorage-ng ==== Version update (4.5.189 -> 4.5.190) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.190 ==== man ==== - We don't need anymore systemd-tmpfiles (boo#1219370#c13) ==== mozilla-nss ==== Version update (3.96.1 -> 3.97) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - update to NSS 3.97 * bmo#1875506 - make Xyber768d00 opt-in by policy * bmo#1871631 - add libssl support for xyber768d00 * bmo#1871630 - add PK11_ConcatSymKeys * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken * bmo#1871152 - add a FreeBL API for Kyber * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo * bmo#1835828 - Removing the calls to RSA Blind from loader.* * bmo#1874111 - fix worker type for level3 mac tasks * bmo#1835828 - RSA Blind implementation * bmo#1869642 - Remove DSA selftests * bmo#1873296 - read KWP testvectors from JSON * bmo#1822450 - Backed out changeset dcb174139e4f * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation * bmo#1871219 - Wrap CC shell commands in gyp expansions ==== obex-data-server ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. - Clean spec file ==== patterns-server ==== Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-kvm_server patterns-server-kvm_tools patterns-server-lamp_server patterns-server-mail_server patterns-server-printing patterns-server-xen_server - Do not recommend mailman: pulls a 2nd python stack. ==== perl-Bootloader ==== Version update (1.11 -> 1.12) - merge gh#openSUSE/perl-bootloader#163 - validate test output for each shell individually - update and extend tests - reworked default-settings command - add test case for default-settings - rework get-option command - add test case for get-option - rework del-option command - add test case for del-option - rework add-option command - add test case for add-option - rework grub2-efi install - adjust some tests - systemd-boot test adjusted - rework remove-kernel option and add tests - rework add-kernel option and add tests - adjust kexec-bootloader and add tests - remove support for dash - remove ancient perl library code from master branch - updated git2log script - adjust spec file - rewrite grub2 install to be more compatible (bsc#1214361) - 1.12 ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Force using doxygen-1_10 in SLE where the default doxygen is too old and generates broken docs (boo#1217886) - Add a conflict in -pulseaudio with pipewire-modules-%{apiver} < 1.0.0 since the libpipewire-module-protocol-pulse.so module was included in - modules before 1.0.0 so we should avoid a file conflict. ==== qalculate ==== Version update (4.8.1 -> 4.9.0) Subpackages: libqalculate22 qalculate-data - update to v4.9.0: * Support for specifying a fixed denominator for display of fractions (e.g. "0.3 ft â 1/8 â (3 + 5/8) in") * Return gcd of numerators divided by lcm of denominators in gcd() with non-integer rational numbers, and vice versa for lcm() * Add units for mean Gregorian and tropical years * Ignore underscore in number * Replace defunct exchange rates source and fix bitcoin exchange rate * Fix asin(x)=a, acos(x)=a, and atan(x)=a, when a contains an angle unit and default angle unit is set * Fix output of value converted to unit expression with numerical multiplier in denominator, e.g. "â L/(100 km)" * Fix segfault when trying to solve "(xsqrt(x)-ysqrt(y))/(sqrt(x)-sqrt(y))=x+sqrt(x*y)+y" * Fix parsing of case insensitive object name ending with Unicode character when followed by another Unicode character in expression, e.g. "Ð¼Ð¸ÐºÑÐ¾Ð¼ÐµÑÑ" * Add history command, listing expression history * Display all exponents 0-9 using Unicode superscript characters if these are the only exponents in the expression ==== qemu ==== Version update (8.2.0 -> 8.2.1) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 Update to latest stable version (8.2.1) - Downstream changes: * [openSUSE][RPM]: Install the VGA module "more often" (bsc#1219164) * [openSUSE][RPM] Fix handling of qemu-kvm legacy package for RISCV * [openSUSE][RPM] factor common definitions between qemu and qemu-linux-user spec files - Upstream backports: * target/arm: Fix incorrect aa64_tidcp1 feature check * target/arm: Fix A64 scalar SQSHRN and SQRSHRN * target/xtensa: fix OOB TLB entry access * qtest: bump aspeed_smc-test timeout to 6 minutes * monitor: only run coroutine commands in qemu_aio_context * iotests: port 141 to Python for reliable QMP testing * iotests: add filter_qmp_generated_node_ids() * block/blklogwrites: Fix a bug when logging "write zeroes" operations. * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693) * tcg/arm: Fix SIGILL in tcg_out_qemu_st_direct * linux-user/riscv: Adjust vdso signal frame cfa offsets * linux-user: Fixed cpu restore with pc 0 on SIGBUS * block/io: clear BDRV_BLOCK_RECURSE flag after recursing in bdrv_co_block_status * coroutine-ucontext: Save fake stack for pooled coroutine * tcg/s390x: Fix encoding of VRIc, VRSa, VRSc insns * accel/tcg: Revert mapping of PCREL translation block to multiple virtual addresses * acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM * s390x/pci: drive ISM reset from subsystem reset * s390x/pci: refresh fh before disabling aif * s390x/pci: avoid double enable/disable of aif * hw/scsi/esp-pci: set DMA_STAT_BCMBLT when BLAST command issued * hw/scsi/esp-pci: synchronise setting of DMA_STAT_DONE with ESP completion interrupt * hw/scsi/esp-pci: generate PCI interrupt from separate ESP and PCI sources * hw/scsi/esp-pci: use correct address register for PCI DMA transfers * migration/rdma: define htonll/ntohll only if not predefined * hw/pflash: implement update buffer for block writes * hw/pflash: use ldn_{be,le}_p and stn_{be,le}_p * hw/pflash: refactor pflash_data_write() * backends/cryptodev: Do not ignore throttle/backends Errors * target/i386: pcrel: store low bits of physical address in data[0] * target/i386: fix incorrect EIP in PC-relative translation blocks * target/i386: Do not re-compute new pc with CF_PCREL * load_elf: fix iterator's type for elf file processing * target/hppa: Update SeaBIOS-hppa to version 15 * target/hppa: Fix IOR and ISR on error in probe * target/hppa: Fix IOR and ISR on unaligned access trap * target/hppa: Export function hppa_set_ior_and_isr() * target/hppa: Avoid accessing %gr0 when raising exception * hw/hppa: Move software power button address back into PDC * target/hppa: Fix PDC address translation on PA2.0 with PSW.W=0 * hw/pci-host/astro: Add missing astro & elroy registers for NetBSD * hw/hppa/machine: Disable default devices with --nodefaults option * hw/hppa/machine: Allow up to 3840 MB total memory * readthodocs: fully specify a build environment * .gitlab-ci.d/buildtest.yml: Work around htags bug when environment is large * target/s390x: Fix LAE setting a wrong access register * tests/qtest/virtio-ccw: Fix device presence checking * tests/acpi: disallow tests/data/acpi/virt/SSDT.memhp changes * tests/acpi: update expected data files * edk2: update binaries to git snapshot * edk2: update build config, set PcdUninstallMemAttrProtocol = TRUE. * edk2: update to git snapshot * tests/acpi: allow tests/data/acpi/virt/SSDT.memhp changes * util: fix build with musl libc on ppc64le * tcg/ppc: Use new registers for LQ destination * hw/intc/arm_gicv3_cpuif: handle LPIs in in the list registers * hw/vfio: fix iteration over global VFIODevice list * vfio/container: Replace basename with g_path_get_basename * edu: fix DMA range upper bound check * hw/net: cadence_gem: Fix MDIO_OP_xxx values * audio/audio.c: remove trailing newline in error_setg * chardev/char.c: fix "abstract device type" error message * target/riscv: Fix mcycle/minstret increment behavior * hw/net/can/sja1000: fix bug for single acceptance filter and standard frame * target/i386: the sgx_epc_get_section stub is reachable * configure: use a native non-cross compiler for linux-user * include/ui/rect.h: fix qemu_rect_init() mis-assignment * target/riscv/kvm: do not use non-portable strerrorname_np() * iotests: Basic tests for internal snapshots * vl: Improve error message for conflicting -incoming and -loadvm * block: Fix crash when loading snapshot on inactive node - Fixes: * bsc#1218484 (CVE-2023-6693) - Try to solve the qemu-kvm dependency issues on all arches (see, e.g., bsc#1218684) * [openSUSE][RPM] Create the legacy qemu-kvm symlink for all arches ==== sdbootutil ==== Version update (1+git20240214.ba81e0e -> 1+git20240215.cb7e392) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240215.cb7e392: * Add --no-random-seed argument ==== signon-plugin-oauth2 ==== - Switch to %autosetup ==== unison ==== Version update (2.53.3 -> 2.53.4) - Update to version 2.53.4 * Preferences "force", "prefer" and related "partial" preferences now work slightly differently with values "newer" and "older". Previously, if mtimes in both replicas were equal then always the second root propagated to the first root (possibly reverting user changes). It is now made explicit that "newer" and "older" only work when mtimes are different. * Bugfixes, minor improvements, cleanups. ==== unixODBC ==== - Use %patch -P N instead of deprecated %patchN. ==== utempter ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== vacation ==== - Install german manual page as well - Use %patch -P N instead of deprecated %patchN. ==== vid_stab ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== virtualbox ==== - Use %patch -P N instead of deprecated %patchN. ==== virtualbox-kmp ==== - Use %patch -P N instead of deprecated %patchN. ==== vorbis-tools ==== Subpackages: vorbis-tools-lang - Use %patch -P N instead of deprecated %patchN. ==== vpnc ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== webrtc-audio-processing ==== - Use %patch -P N instead of deprecated %patchN. ==== wget ==== Subpackages: wget-lang - Use %patch -P N instead of deprecated %patchN. ==== wqy-zenhei-fonts ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== wsdd ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== yast2-trans ==== Version update (84.87.20240210.1383f689ba -> 84.87.20240219.f6e4117fe0) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240219.f6e4117fe0: * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * Translated using Weblate (Czech) * New POT for text domain 'packager'. * New POT for text domain 'installation'. * New POT for text domain 'hana-ha'. * New POT for text domain 'control'. ==== zip ==== - Use %patch -P N instead of deprecated %patchN. ==== zvbi ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN.

1 0

wine and zlib
by Joe Salmeri 22 Feb '24

22 Feb '24

I did a fresh install of TW 20230222 on a new PC. My main desktop which was installed back in 2021 has also been updated ( zypper dup ) to 20230222. I found something odd when comparing packages between the 2 machines. Both PC's have wine installed, however... On my main desktop when the original install in 2021 of wine was done it installed libz1-32bit ( as per the zypper history logs ) and it still has that installed after it was updated to 20230222. On the new PC fresh install of 20230222 when wine was installed it installed libz-ng-compat1-32bit. The libz-ng-compat1-32bit version looks like it was forked in 2021, just after my main machine was originally built so that would explain why it has libz1-32bit but shouldn't it have been updated by zypper dup ??? Is this a bug that I should report? If so, which system is wrong / which version should be used? Thanks!

5 6

Recent e2fsprogs update flag changes
by Patrick Schaaf 22 Feb '24

22 Feb '24

Hi, as I haven't found discussion by searching, I thought I bring up a gotcha I ran into today, on a host recently updated to tumbleweed 20230801 level. With a somewhat recent update to e2fsprogs, now at 1.47.0 compared to May '23 at 1.46.5, the set of mkfs flags has changed: --- /root/mke2fs.conf.20230512 2023-08-09 12:00:14.379476597 +0200 +++ /etc/mke2fs.conf 2023-06-14 19:20:22.000000000 +0200 @@ -14 +14 @@ - features = has_journal,extent,huge_file,flex_bg,metadata_csum,64bit,dir_nlink,extra_isize + features = has_journal,extent,huge_file,flex_bg,metadata_csum,metadata_csum_seed,64bit,dir_nlink,extra_isize,orphan_file For me, this resulted in an otherwise fine virtual machine with 20230512 userlevel, not booting after an "rsync copy migration" into a fresh root filesystem mkfs'ed with these new flags. Reason being that 3 months older fsck - the sytemd boot time rootfs service actually - goes "failed". I guess I'll need just use flag override options going forward, to cope with that, but thought I'd bring it to attention here at least. best regards Patrick

3 4

openSUSE Release Engineering meeting 21.02.2024
by Lubos Kocman 22 Feb '24

22 Feb '24

!!! HEADS UP PLEASE USE https://meet.google.com/fud-xeti-hvn for a few upcoming meetings instead of jitsi, as we're experiencing a lot of issues with it. https://progress.opensuse.org/issues/155185 I did update calendar-o-o to reflect this https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees lkocman, DimStar, bittin, bmwiedemann, DocB, ddemaio, wengel,maxlin, ana ## Leap Reminder that we have check in deadline for Leap 15.6 Beta was originally today 21st February. Followed by a Beta build next week. However, SLES 15 SP6 Public Beta will be postponed by a week. SLES claims that the amount of changes since Beta 3 is huge. They would like to use additional week for testing. We would like to use the time to make progress on Leap 15.6 changes that were blocked on SLES (e.g. GNU Health). There we'd be aiming on having Leap 15.6 Beta build in the first week of March in case that no further slips are announced from SUSE side. SDL was merged to SLES 15 SP6 yesterday, unfortunatelly after the snapshot update of SP6 changes. (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 python-related stagings, including GNUHealth, are mostly blocked on SLES 15 SP6's Staging:G, which will be accepted "hopefully this week". Thanks to Antonio for helping on this! Several issues under wayland https://bugzilla.suse.com/show_bug.cgi?id=1219505 - input methods in chrome under Wayland https://bugzilla.suse.com/show_bug.cgi?id=1219486 - memory leak in Evolution (workaround uninstall evolution) https://bugzilla.opensuse.org/show_bug.cgi?id=1219858 - coredump in gnome-control-settings sharing https://bugzilla.suse.com/show_bug.cgi?id=1219718 - wayland-only google-chrome-stable blinks/flashes on scrolling/type libedataserver-1.2.so.26 issue with upgrade from older releases (15.2/15.3) https://bugzilla.opensuse.org/show_bug.cgi?id=1219833 We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress Guardener partership with SUSE + Rancher. Guardener is a new startup focused on government solutions ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 189 failed 53 unresolvable (last week 203 failed, 60 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates: * Linux Kernel 6.7.5 * GCC 14 provides the base libraries since snapshot 0218 * cmake, macro change (docdir) is merged. All ring packages had been addressed. More are likely failing in Factory * Mesa 23.3.6 * Qt6 6.6.2 Updates waiting / work still in progress: * RPM 4.19.1.1 (user/group dependencies), Packages not included in rings getting updates, still some more to go, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (currently about 10 - 15 missing) * Preparations for RPM 4.20, %patchN won't be supported anymore, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Careful: spec-cleaner 'cleans' this in the wrong direction: https://github.com/rpm-software-management/spec-cleaner/issues/319 (and python coder volunteering to fix this?) * Not everything yet fixed for Python 3.12, beginning to prepare removal of python 3.9 * GCC 14 as default compiler (long-lasting staging) started in :Gcc7 * libxml 2.12.1 (lots of work to do), on hold, remove from staging to allow security update * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * KDE Frameworks and Plasma 6 RC 2, work in progress * kernel-longterm in staging, still some issues to work out such as KMPs ## Richard (Aeon+botmaster) Not available ## Max Leap 15.6 - build stats in Backports: 65 failed, 57 unresolvable * lxqt and budgie desktop got updated * Dealing with python application package: more package renaming, adding 3.6 version build for the backward compatible, etc. * Try to update cinnamon to Factory's version, but cinnamon maintainer seems inactive in recent, like my sr to cjs has not got reviewed, and package in cinnamon project is a bit out of date than upstream * The next leap snapshot have to wait until some python package problems to be solved at some point, as we as new changes from SLE15-SP6 to be integrated in Backports ## Guillaume - Arm Not available ## Sarah - s390x Not available ## Doug * Contribution Workshops * More sign ups at https://etherpad.opensuse.org/p/openSUSE-Contribution-Workshop * Episodes 2 & 3 informed about upload location * More than 450 views from live-stream and recording upload https://youtu.be/8DVEZR_YodA * Discussions with openSUSE booth organizers at Chemnitz Linux Tage * Waiting on response for SD Boot Utils article * Need to rework the article with SMEs a bit - https://etherpad.opensuse.org/p/SD_Boot_Util * Agama republishing on news.o.o provides more coverage. * GSoC * Notification today on openSUSE being an mentoring org * Community Summit * 1 Registrations, 2 Submissions, 1 Hours (pre-announcement) * Meeting planned with robert on Friday * Article written & will be released after meeting * Page up for registration and cfp submissions * We have a logo. Big thanks to Tamar G * Cfp in article * openSUSE Conference * 33 Registrations, 22 Submissions, 12 Hours (2 Open 4 Business Submissions) * Food ordered, PO requested * Processing of visa invitation letter Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling No News. Subpackages currently kind of broken because of released versions of packages (e.g. dependencies for KDE Plasma 5) ## Maintenance team (Marcus or Maurizio (m4u)) Not available Dicsussion about unit tests for Leap 15.X maintenance setup. Probably not worth it. ## Adrian - OBS Not available ## Simon (Leap Replacement/Linarite) Not available ## Bernhard Slowroll * kernel-longterm 6.6.16 preview added * first openQA test https://openqa.opensuse.org/tests/overview?distri=opensuse&version=Slowroll… * did version bump to 20240213 * OBS now has a Slowroll distribution target, so it is easy to add in devel projects ## Open Floor Adrian: the issue with jitsi is only with change from 2-3 people. No update https://progress.opensuse.org/issues/155185 Python Packaging discussion how to package python3.6 and python3.11 together without doubling the amount of packages that need to be supported (vs 3.6 / 3.11 handling inside single spec).

1 0

openSUSE MicroOS on FLOSS Weekly Next week
by Luna Jernberg 22 Feb '24

22 Feb '24

Hey! https://hackaday.com/2024/02/14/floss-weekly-episode-769-10-more-internet/ listening to this weeks FLOSS Weekly and MicroOS is on next week live on Wednesday 21th February and recording uploaded on Thursday 22th February

1 1

New package for factory: decker
by absolutely.vivid＠fastmail.org 22 Feb '24

22 Feb '24

I've created the decker and decker-doc packages in games:tools and I want to introduce them to Factory. https://build.opensuse.org/package/show/games:tools/decker https://build.opensuse.org/package/show/games:tools/decker-doc Decker (http://beyondloom.com/decker/) is a platform for creating interactive documents, like a modern recreation of HyperCard or other hypermedia applications. Decker can be used to create e-zines, interactive fiction, applications, and games. I chose games:tools for the devel project because games seem to be the most common thing created with Decker. I don't think this package will require much downstream maintenance. Decker is written in ~4100 lines of C, and the upstream maintainer has expressed a desire to avoid adding more complex features to the codebase, so I think Decker having any openSUSE-specific bugs is unlikely. Some maintenance will be necessary for Decker's build system, I've had to patch the install script for a smoother package-building process. I haven't submitted this patch upstream yet, and I plan on submitting it after gathering any package feedback here. Comments, questions, and suggestions for the package are all welcome! Vivid

1 0

Testers Wanted: longterm kernel
by Robert Frohl 21 Feb '24

21 Feb '24

Hi all, I am looking for feedback on a side project that I have been working on the last couple of months: Introducing a rolling longterm kernel package to Factory. # Motivation The previous distribution I used as my daily driver offered a LTS variant of the kernel and that always served me well, if some change in kernel development broke a feature that I was relying on. When I moved to Tumbleweed I felt that this was missing, but because of snapper and file system rollback, the impact was never so severe. With the announcement of slowroll I had the feeling that having a longterm kernel might fill a gap, for more stable workloads or software packages that have a dependency onto the kernel, but can not keep up with new kernel versions. Therefor I started to look into how feasible it would be to have a longterm kernel in Factory. # General vision Having a longterm kernel package that follows the rolling release model and will track the latest longterm kernel, once the stable kernel has moved to a higher version number. The configuration should be as similar as possible to the stable kernel. The kernel packaging should use existing infrastructure and processes that are used for the stable kernel, to avoid re-inventing the wheel. # Current state and open points I have a longterm kernel version (6.1.68) available for x86_64 under [0]. This version is using the existing systems and processes. I am now at a state where I think further feedback would be helpful. Known open points that I want to take care of before trying to get into Factory: - Move to the new longterm version (6.6) to get a grasp of the process and see what potential fallout the update might have for users - Find out if external kernel modules would have a problem with different kernel versions and if so find a solution [1] Where this will go is not clear at the moment, I talked with Bernhard and dimstar if there is general interest for a longterm kernel in Factory. It might be an option as a base for slowroll. But there has been no decision on how to proceed. Currently just evaluating if the longterm kernel is feasible for Factory, if openSUSE users would be interested and if a community maintainer can handle the workload, as I am not a kernel developer in my day job. If someone has a use case that does not depend on external kernel modules and some time over the holidays, I would really appreciate feedback, be it improvements or any other type (also if things work out ok and there are no complaints ;) ). Cheers, Robert p.s: without the help and support of others, this little experiment would have been impossible to do, I would like to specifically thank a couple of people for their support and patience with my questions: Michal, Takashi, Jiri and Marcus. I would also like to thank SUSE for the time they make available during hackweek, as I spend some of my time on the longterm kernel. p.p.s: you can install the longterm kernel by: > zypper addrepo http://download.opensuse.org/repositories/Kernel:/slowroll/standard/Kernel:… > zypper refresh > zypper install kernel-longterm [0] http://download.opensuse.org/repositories/Kernel:/slowroll/standard/ [1] https://bugzilla.suse.com/show_bug.cgi?id=1217824 -- Security Engineer, SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany, GF: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) GPG: D29F 82AA 9FD5 9D6E 74B1 6370 089E DB3D 230A 2404

4 9

New Tumbleweed snapshot 20240220 released!
by Dominique Leuenberger 21 Feb '24

21 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: appstream-glib autoyast2 (5.0.1 -> 5.0.2) ibus-libpinyin (1.15.5 -> 1.15.7) libzypp-plugin-appdata (1.0.1+git.20230117 -> 1.0.1+git.20240209) mpg123 (1.32.4 -> 1.32.5) nvidia-open-driver-G06-signed systemd (254.8 -> 254.9) yast2 (5.0.5 -> 5.0.6) yast2-storage-ng (5.0.5 -> 5.0.6) === Details === ==== appstream-glib ==== Subpackages: appstream-glib-lang libappstream-glib8 - Add asglib(swcatalog) provides: allow other packages to declare that they need swcatalog support. - Add patch for interoperability with newer AppStream spec (boo#1218427): * 0001-Move-from-app-info-to-swcatalog-locations.patch ==== autoyast2 ==== Version update (5.0.1 -> 5.0.2) Subpackages: autoyast2-installation - Install standard SLES when the AY XML profile selects SLE_HPC, it has been dropped in SP6 (jsc#PED-7841) - 5.0.2 - jsc#PED-6407 - enabled lvm_vg_reuse to be used in general/storage/proposal section ==== ibus-libpinyin ==== Version update (1.15.5 -> 1.15.7) - Update version to 1.15.7 * Fix bugs ==== libzypp-plugin-appdata ==== Version update (1.0.1+git.20230117 -> 1.0.1+git.20240209) - Update to version 1.0.1+git.20240209: * Move to /var/cache/swcatalog * Remove Google Plus web app * make google-chrome.xml pass appstream validation * Add a type=remote icon for google-chrome * Use application-x-addon for codec icons * Add screenshots for Chromium * Wings3d apddata file merged upstream * Tag the web-apps with the correct license IDs * Add Telegram web app * added screenshot for IQMol * added screenshot for FBReader * Updated Cmake screenshot to a HighDPI version * Ensure all the webapps have valid icons * Fix the list of webapps to be a single XML document * Merge the webapps into one file * Convert the codec AppData files to 0.6 format * Upgrade the IBus AppData files to 0.6 format * Add the licence changes for the GStreamer packages * Add the GStreamer AppStream descriptions for gstreamer1-libav - Require appstream-glib with the asglib(swcatalog) symbol: ensure we support the new location. ==== mpg123 ==== Version update (1.32.4 -> 1.32.5) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.5 build: * CMake port uses CFLAGS for pulse/jack/tinyalsa properly now (bug 366). * CMake port links libsyn123 with libm now (bug 370). libmpg123: * Fix --enable-portable (no usage of LFS_WRAP_NONE, bug 368). * Fix dct36 wrapper usage for x86-64 and NEON. Stupid (bug 367) and also avoid returning void. * Make ARM builds work with nagging (missing feature macros for std=c99). ==== nvidia-open-driver-G06-signed ==== - kernel-syms-azure is not available on ALP ==== systemd ==== Version update (254.8 -> 254.9) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Import commit 53e2aaaf9d69fb1c8f6ae2c9f8a99b02d70d318f 53e2aaaf9d vconsole-setup: don't fail if the only found vc is already used by plymouth (bsc#1218618) 22c4878430 vconsole-setup: port to main-func.h boilerplate - systemd-testsuite: depend on "qemu" instead of "qemu-kvm", the latter is obsolete. (bsc#1218684) - Import commit fbf9f32eb774ba6ec54e0d5d53b36baaf3e6b146 fbf9f32eb7 test/test-shutdown.py: optionally display the test I/Os in a dedicated log file cd012774df test-69: send SIGTERM to ask systemd-nspawn to properly stop the container d883b83244 man: Document ranges for distributions config files and local config files - Import commit fa94ab006d09686cef121aaa3baa10cf5ca95e19 (merge of v254.9) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/67a5ac1043417d900bf417a884372ae… - Update the version of libbpf dlopened by systemd (weak dependency) (bsc#1219440) ==== yast2 ==== Version update (5.0.5 -> 5.0.6) Subpackages: yast2-logs - Allow host/domain names starting with an underscore (bsc#1219920) - 5.0.6 ==== yast2-storage-ng ==== Version update (5.0.5 -> 5.0.6) - jsc#PED-6407 - new env variable YAST_REUSE_LVM for reusing LVM in new installation. It can be used as linuxrc boot param. - 5.0.6

1 0

New Tumbleweed snapshot 20240218 released!
by Dominique Leuenberger 20 Feb '24

20 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.3.5 -> 23.3.6) Mesa-drivers (23.3.5 -> 23.3.6) acl (2.3.1 -> 2.3.2) apparmor attr (2.5.1 -> 2.5.2) binutils (2.41 -> 2.42) expat (2.5.0 -> 2.6.0) gcc14 (13.2.1+git8285 -> 14.0.1+git8957) gnome-maps ibus-m17n (1.4.27 -> 1.4.28) kernel-source (6.7.4 -> 6.7.5) libapparmor libshumate libstorage-ng (4.5.188 -> 4.5.189) mariadb (11.2.2 -> 11.2.3) nodejs21 (21.6.1 -> 21.6.2) python311 python311-core qemu qt6-base (6.6.1 -> 6.6.2) qt6-declarative (6.6.1 -> 6.6.2) qt6-imageformats (6.6.1 -> 6.6.2) qt6-translations (6.6.1 -> 6.6.2) qt6-wayland (6.6.1 -> 6.6.2) rpm-config-SUSE (20240118 -> 20240214) webkit2gtk3 webkit2gtk3-soup2 === Details === ==== Mesa ==== Version update (23.3.5 -> 23.3.6) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.3.6 - -> https://docs.mesa3d.org/relnotes/23.3.6.html ==== Mesa-drivers ==== Version update (23.3.5 -> 23.3.6) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.3.6 - -> https://docs.mesa3d.org/relnotes/23.3.6.html ==== acl ==== Version update (2.3.1 -> 2.3.2) Subpackages: libacl1 libacl1-32bit - Update to version 2.3.2: + libobj: declare s_str directly in string_obj_tag. + Use thread-safe getpwnam_r and getgrnam_r. + setfacl: preserve the failed status when processing multiple files. + man: Document pitfall with negative permissions and user namespaces. + tools: mark long_options static & const. ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Add apparmor-abstractions-openssl-allow-version-specific-en.patch to allow version specific engdef & engines openssl paths (boo#1219571) ==== attr ==== Version update (2.5.1 -> 2.5.2) Subpackages: libattr1 - update to 2.5.2: * attr: eliminate a dead store in attr_copy_action() * libattr: Set symbol versions for legacy syscalls via attribute or asm * exports: use LGPL for library code * documentation updates * translation updates (Polish, Dutch, Gregorian, French) * build system updates ==== binutils ==== Version update (2.41 -> 2.42) Subpackages: libctf-nobfd0 libctf0 - Add binutils-disable-code-arch-error.diff to demote an error about swapped .arch/.code directives to a warning. It happens in the wild. - Update to version 2.42: * Add support for many aarch64 extensions: SVE2.1, SME2.1, B16B16, RASv2, LSE128, GCS, CHK, SPECRES2, LRCPC3, THE, ITE, D128, XS and flags to enable them: '+fcma', '+jscvt', '+frintts', '+flagm2', '+rcpc2' and '+wfxt' * Add experimantal support for GAS to synthesize call-frame-info for some hand-written asm (--scfi=experimental) on x86-64. * Add support for more x86-64 extensions: APX: 32 GPRs, NDD, PUSH2/POP2, PUSHP/POPP; USER_MSR, AVX10.1, PBNDKB, SM4, SM3, SHA512, AVX-VNNI-INT16. * Add support for more RISC-V extensions: T-Head v2.3.0, CORE-V v1.0, SiFive VCIX v1.0. * BPF assembler: ';' separates statements now, and does not introduce line comments anymore (use '#' or '//' for this). * x86-64 ld: Add '-z mark-plt/-z nomark-plt' to mark PLT entries with dynamic tags. * risc-v ld: Add '--[no-]check-uleb128'. * New linker script directive: REVERSE, to be combined with SORT_BY_NAME or SORT_BY_INIT_PRIORITY, reverses the generated order. * New linker options --warn-execstack-objects (warn only about execstack when input object files request it), and --error-execstack plus - -error-rxw-segments to convert the existing warnings into errors. * objdump: Add -Z/--decompress to be used with -s/--full-contents to decompress section contents before displaying. * readelf: Add --extra-sym-info to be used with --symbols (currently prints section name of references section index). * objcopy: Add --set-section-flags for x86_64 to include SHF_X86_64_LARGE. * s390 disassembly: add target-specific disasm option 'insndesc', as in "objdump -M insndesc" to display an instruction description as comment along with the disassembly. - Add binutils-2.42-branch.diff.gz. - Rebased s390-biarch.diff. - Adjusted binutils-revert-hlasm-insns.diff, binutils-revert-plt32-in-branches.diff and binutils-revert-rela.diff for upstream changes. - Removed binutils-2.41-branch.diff.gz, binutils-2.41.tar.bz2, binutils-2.41-branch.diff.gz. - Removed binutils-use-less-memory.diff, binutils-old-makeinfo.diff and riscv-relro.patch (all upstreamed). - Removed add-ulp-section.diff, we use a different mechanism for live patching since a long time. ==== expat ==== Version update (2.5.0 -> 2.6.0) Subpackages: libexpat1 - Update keyring automatically from keyserver during OBS service run. - Explicitly use --without-docbook (before it was implicit). - Include missing files for documentation and examples. - Add manpage for xmlwf, which is not available in the release tarball. - Clean the spec file a bit. - Update to 2.6.0: * Security fixes: - CVE-2023-52425 (boo#1219559) - - Fix quadratic runtime issues with big tokens that can cause denial of service, in partial where dealing with compressed XML input. Applications that parsed a document in one go -- a single call to functions XML_Parse or XML_ParseBuffer -- were not affected. The smaller the chunks/buffers you use for parsing previously, the bigger the problem prior to the fix. Backporters should be careful to no omit parts of pull request #789 and to include earlier pull request #771, in order to not break the fix. - CVE-2023-52426 (boo#1219561) - - Fix billion laughs attacks for users compiling *without* XML_DTD defined (which is not common). Users with XML_DTD defined have been protected since Expat >=2.4.0 (and that was CVE-2013-0340 back then). * Bug fixes: - Fix parse-size-dependent "invalid token" error for external entities that start with a byte order mark - Fix NULL pointer dereference in setContext via XML_ExternalEntityParserCreate for compilation with XML_DTD undefined - Protect against closing entities out of order * Other changes: - Improve support for arc4random/arc4random_buf - Improve buffer growth in XML_GetBuffer and XML_Parse - xmlwf: Support --help and --version - xmlwf: Support custom buffer size for XML_GetBuffer and read - xmlwf: Improve language and URL clickability in help output - examples: Add new example "element_declarations.c" - Be stricter about macro XML_CONTEXT_BYTES at build time - Make inclusion to expat_config.h consistent - Autotools: configure.ac: Support --disable-maintainer-mode - Autotools: Sync CMake templates with CMake 3.26 - Autotools: Make installation of shipped man page doc/xmlwf.1 independent of docbook2man availability - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file section "Cflags.private" in order to fix compilation against static libexpat using pkg-config on Windows - Autotools|CMake: Require a C99 compiler (a de-facto requirement already since Expat 2.2.2 of 2017) - Autotools|CMake: Fix PACKAGE_BUGREPORT variable - Autotools|CMake: Make test suite require a C++11 compiler - CMake: Require CMake >=3.5.0 - CMake: Lowercase off_t and size_t to help a bug in Meson - CMake: Sort xmlwf sources alphabetically - CMake|Windows: Fix generation of DLL file version info - CMake: Build tests/benchmark/benchmark.c as well for a build with -DEXPAT_BUILD_TESTS=ON - docs: Document the importance of isFinal + adjust tests accordingly - docs: Improve use of "NULL" and "null" - docs: Be specific about version of XML (XML 1.0r4) and version of C (C99); (XML 1.0r5 will need a sponsor.) - docs: reference.html: Promote function XML_ParseBuffer more - docs: reference.html: Add HTML anchors to XML_* macros - docs: reference.html: Upgrade to OK.css 1.2.0 - docs: Fix typos - docs|CI: Use HTTPS URLs instead of HTTP at various places - Address compiler warnings - Address clang-tidy warnings - Version info bumped from 9:10:8 (libexpat*.so.1.8.10) to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/ for what these numbers do ==== gcc14 ==== Version update (13.2.1+git8285 -> 14.0.1+git8957) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to trunk head, 4a1cd5560b9b545eb848eb1d1e06d345fb, git8957 * bumps libgphobos and libgdrundime SONAME - Use %patch -P N instead of %patchN - Refresh gcc44-rename-info-files.patch ==== gnome-maps ==== Subpackages: gnome-maps-lang - Update license based on legaldb review ==== ibus-m17n ==== Version update (1.4.27 -> 1.4.28) - Update to 1.4.28 * Add Russian translations ==== kernel-source ==== Version update (6.7.4 -> 6.7.5) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-macros - Linux 6.7.5 (bsc#1012628). - ext4: regenerate buddy after block freeing failed if under fc replay (bsc#1012628). - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (bsc#1012628). - dmaengine: ti: k3-udma: Report short packet errors (bsc#1012628). - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (bsc#1012628). - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (bsc#1012628). - phy: qcom-qmp-usb: fix register offsets for ipq8074/ipq6018 (bsc#1012628). - phy: qcom-qmp-usb: fix serdes init sequence for IPQ6018 (bsc#1012628). - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (bsc#1012628). - perf tests: Add perf script test (bsc#1012628). - perf test: Fix 'perf script' tests on s390 (bsc#1012628). - perf evlist: Fix evlist__new_default() for > 1 core PMU (bsc#1012628). - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (bsc#1012628). - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (bsc#1012628). - cifs: avoid redundant calls to disable multichannel (bsc#1012628). - cifs: failure to add channel on iface should bump up weight (bsc#1012628). - drm/msms/dp: fixed link clock divider bits be over written in BPC unknown case (bsc#1012628). - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case (bsc#1012628). - drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (bsc#1012628). - wifi: iwlwifi: mvm: skip adding debugfs symlink for reconfig (bsc#1012628). - x86/efistub: Give up if memory attribute protocol returns an error (bsc#1012628). - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (bsc#1012628). - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (bsc#1012628). - wifi: cfg80211: consume both probe response and beacon IEs (bsc#1012628). - wifi: mac80211: fix RCU use in TDLS fast-xmit (bsc#1012628). - wifi: mac80211: fix unsolicited broadcast probe config (bsc#1012628). - wifi: mac80211: fix waiting for beacons logic (bsc#1012628). - wifi: iwlwifi: exit eSR only after the FW does (bsc#1012628). - wifi: brcmfmac: Adjust n_channels usage for __counted_by (bsc#1012628). - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (bsc#1012628). - net: atlantic: Fix DMA mapping for PTP hwts ring (bsc#1012628). - selftests: net: cut more slack for gro fwd tests (bsc#1012628). - selftests/net: convert unicast_extensions.sh to run it in unique namespace (bsc#1012628). - selftests/net: convert pmtu.sh to run it in unique namespace (bsc#1012628). - selftests/net: change shebang to bash to support "source" (bsc#1012628). - selftests: net: fix tcp listener handling in pmtu.sh (bsc#1012628). - selftests: net: avoid just another constant wait (bsc#1012628). - tsnep: Fix mapping for zero copy XDP_TX action (bsc#1012628). - tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1012628). - atm: idt77252: fix a memleak in open_card_ubr0 (bsc#1012628). - octeontx2-pf: Fix a memleak otx2_sq_init (bsc#1012628). - hwmon: (aspeed-pwm-tacho) mutex for tach reading (bsc#1012628). - hwmon: (coretemp) Fix out-of-bounds memory access (bsc#1012628). - hwmon: (coretemp) Fix bogus core_id to attr name mapping (bsc#1012628). - inet: read sk->sk_family once in inet_recv_error() (bsc#1012628). - drm/i915/gvt: Fix uninitialized variable in handle_mmio() (bsc#1012628). - x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section (bsc#1012628). - rxrpc: Fix generation of serial numbers to skip zero (bsc#1012628). - rxrpc: Fix delayed ACKs to not set the reference serial number (bsc#1012628). - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (bsc#1012628). - rxrpc: Fix counting of new acks and nacks (bsc#1012628). - selftests: net: let big_tcp test cope with slow env (bsc#1012628). - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1012628). - af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC (bsc#1012628). - devlink: avoid potential loop in devlink_rel_nested_in_notify_work() (bsc#1012628). - ppp_async: limit MRU to 64K (bsc#1012628). - selftests: cmsg_ipv6: repeat the exact packet (bsc#1012628). - netfilter: nft_compat: narrow down revision to unsigned 8-bits (bsc#1012628). ... changelog too long, skipping 163 lines ... - commit 1dccf2a ==== libapparmor ==== - Add apparmor-abstractions-openssl-allow-version-specific-en.patch to allow version specific engdef & engines openssl paths (boo#1219571) ==== libshumate ==== Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update licenses based on legaldb review ==== libstorage-ng ==== Version update (4.5.188 -> 4.5.189) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#986 - log textdomain codeset - 4.5.189 ==== mariadb ==== Version update (11.2.2 -> 11.2.3) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 11.2.3: https://mariadb.com/kb/en/mariadb-11-2-3-release-notes/ https://mariadb.com/kb/en/mariadb-11-2-3-changelog/ - Update list of skipped tests ==== nodejs21 ==== Version update (21.6.1 -> 21.6.2) Subpackages: npm21 - Update to 21.6.2: (security updates) * (CVE-2024-21892, bsc#1219992) - Code injection and privilege escalation through Linux capabilities- (High) * (CVE-2024-22019, bsc#1219993) - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High) * (CVE-2024-21896, bsc#1219994) - Path traversal by monkey-patching Buffer internals- (High) * (CVE-2024-22017, bsc#1219995) - setuid() does not drop all privileges due to io_uring - (High) * (CVE-2023-46809, bsc#1219997) - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium) * (CVE-2024-21891, bsc#1219998) - Multiple permission model bypasses due to improper path traversal sequence sanitization - (Medium) * (CVE-2024-21890, bsc#1219999) - Improper handling of wildcards in --allow-fs-read and --allow-fs-write (Medium) * (CVE-2024-22025, bsc#1220014) - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium) * undici version 5.28.3 (CVE-2024-24758, bsc#1220017) * libuv version 1.48.0 ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Add upstream patch libexpat260.patch, Fix tests for XMLPullParser with Expat 2.6.0, gh#python/cpython#115289 ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Add upstream patch libexpat260.patch, Fix tests for XMLPullParser with Expat 2.6.0, gh#python/cpython#115289 ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update the service file to use OBS-scm (by fvogt) - Various fixes: * [openSUSE][RPM] Fix enabling features on non-x86_64 * [openSUSE][RPM] Disable test-crypto-secret in linux-user build * [openSUSE] Update ipxe submodule reference (bsc#1219733, bsc#1219722) * [openSUSE][RPM] spec: allow building without spice ==== qt6-base ==== Version update (6.6.1 -> 6.6.2) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 - Update to 6.6.2 * https://www.qt.io/blog/qt-6.6.2-released - Drop patches, merged upstream: * 0001-QMimeDatabase-handle-buggy-type-definitions.patch * 0001-QMimeDatabase-collect-glob-patterns-from.patch * 0001-HPack-fix-a-Yoda-Condition.patch * 0002-HPack-fix-incorrect-integer-overflow-check.patch * 0001-Http2-fix-potential-overflow-in-assemble_hpack_block.patch ==== qt6-declarative ==== Version update (6.6.1 -> 6.6.2) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.6.2 * https://www.qt.io/blog/qt-6.6.2-released - Add upstream changes to make build reproducible: * 0001-QuickControls-Link-the-impl-libraries-into-the-base-.patch * 0001-Dialogs-Depend-on-controls-styles-in-QuickDialogs2Qu.patch ==== qt6-imageformats ==== Version update (6.6.1 -> 6.6.2) - Update to 6.6.2 * https://www.qt.io/blog/qt-6.6.2-released ==== qt6-translations ==== Version update (6.6.1 -> 6.6.2) - Update to 6.6.2 * https://www.qt.io/blog/qt-6.6.2-released ==== qt6-wayland ==== Version update (6.6.1 -> 6.6.2) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.6.2 * https://www.qt.io/blog/qt-6.6.2-released - Drop patch, merged upstream: * client-avoid-creating-decorations-in-the-render-thread.patch ==== rpm-config-SUSE ==== Version update (20240118 -> 20240214) - Update to version 20240214: * set_permissions: handle chkstat failure more grateful (bsc#1219736) ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Increase mem_per_process again to match what is in SLE. The build was sporadically failing there (bsc#1198743). - Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Increase mem_per_process again to match what is in SLE. The build was sporadically failing there (bsc#1198743). - Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072).

1 0

Nvidia repos outdated
by Axel Braun 19 Feb '24

19 Feb '24

Hi, The Nvidia builds in https://download.nvidia.com/opensuse/tumbleweed are ~3 month old for x86-64. Kernel modules do not match current 6.7 Kernel. Has anyone information why they stopped building? Or whom we can contact? Cheers Axel

6 10

New Tumbleweed snapshot 20240216 released!
by Dominique Leuenberger 17 Feb '24

17 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (122.0 -> 122.0.1) aaa_base (84.87+git20231023.f347d36 -> 84.87+git20240202.9526d46) accountsservice acpica (20230331 -> 20230628) apache2-mod_php8 (8.2.15 -> 8.2.16) bind (9.18.21 -> 9.18.24) btrfsprogs (6.7 -> 6.7.1) curl dav1d (1.3.0 -> 1.4.0) dracut (059+suse.549.gc9f63878 -> 059+suse.554.g6144bf71) git (2.43.0 -> 2.43.1) gnome-control-center (45.2 -> 45.3) gnome-music (45.0 -> 45.1) grub2 hwdata (0.378 -> 0.379) lastlog2 (1.2.0 -> 1.3.1) libadwaita (1.4.2 -> 1.4.3) libblockdev (3.0.4 -> 3.1.0) libei libgusb libjpeg-turbo liblangtag (0.6.4 -> 0.6.7) libnvme (1.7.1+0.g13ba383 -> 1.8+0.gbff7dda) libpaper (2.1.2 -> 2.1.3) libqt5-qtbase (5.15.12+kde147 -> 5.15.12+kde151) libstorage-ng (4.5.176 -> 4.5.188) libunwind man mdevctl multipath-tools (0.9.7+93+suse.e2f2272 -> 0.9.8~1+82+suse.dcd98a3) ncurses (6.4.20240120 -> 6.4.20240210) nvme-cli (2.7.1 -> 2.8) openssl-1_1 openvpn (2.6.8 -> 2.6.9) orc (0.4.34 -> 0.4.37) osinfo-db pam-config (2.10 -> 2.11) patterns-server php8 (8.2.15 -> 8.2.16) pkcs11-helper (1.29.0 -> 1.30.0) pkgconf (1.8.0 -> 2.1.1) poppler (23.12.0 -> 24.02.0) poppler-qt5 (23.12.0 -> 24.02.0) pulseaudio python-linux-procfs python-lxml rdma-core rubygem-vagrant_cloud (3.0.5 -> 3.1.1) sdbootutil (1+git20240122.c0d8f76 -> 1+git20240214.ba81e0e) sg3_utils (1.48+7.63e63cb -> 1.48+8.37ca384) shadow (4.14.3 -> 4.14.5) shared-mime-info spice-gtk suseconnect-ng (1.3.0~git0.ae8ba1e -> 1.7.0~git2.21ba08e) tecla-keyboard-layout-viewer (45.rc -> 45.0) transmission util-linux util-linux-systemd vim (9.1.0000 -> 9.1.0111) virt-manager vmaf webkit2gtk3 webkit2gtk3-soup2 wpa_supplicant xfsprogs (6.5.0 -> 6.6.0) yast2-packager (5.0.2 -> 5.0.4) yast2-storage-ng (5.0.4 -> 5.0.5) === Details === ==== MozillaFirefox ==== Version update (122.0 -> 122.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 122.0.1 https://www.mozilla.org/en-US/firefox/122.0.1/releasenotes/ * Fixed the Library and Sidebar context menus only displaying Multi-Account Containers icons in the "Open in New Container Tab" menu. (bmo#1876518) * Fixed an issue when clicking the Dismiss button in notification pop-ups on Windows causing a webpage in a new tab. (bmo#1848801) * Fixed the yaru-remix system theme not applying correctly on Linux. (bmo#1877002) * Fixed adding an extra new line to a rule in the Developer Tools' Inspector when copying it to the clipboard. (bmo#1876220) * Rolled back a keyboard behavior change made to the Developer Tools' Rules view when validating a property name or input with the Enter key. This moves the focus to the next input, as was the behavior in Firefox 121. (bmo#1877457) ==== aaa_base ==== Version update (84.87+git20231023.f347d36 -> 84.87+git20240202.9526d46) Subpackages: aaa_base-extras - Update to version 84.87+git20240202.9526d46: * properly shorten the variable when setting JAVA_HOME and JRE_HOME * silence output of alljava * Restrict ptrace with Yama LSM by default * patch alljava.sh and alljava.csh, use the links from update alternatives ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - First part to fix build with GCC 14: + Inject patched mocklibc-1.0.tar.gz: only some header modifications to address implicit declaration of print_indent. + Add accountsservice-mocklib-gcc14.patch: patch meson' subproject definition to validate the injected tarball. ==== acpica ==== Version update (20230331 -> 20230628) - Update to version 20230628 * IASL/RHCT: Enable dumping and compiling newly added nodes * RHCT: Add flags, CMO and MMU nodes * MADT: Add dump and compile support for RISC-V APICs * MADT: Add RISC-V external interrupt controllers * Add AML_NO_OPERAND_RESOLVE flag to Timer * Add a define for size of acpi_srat_generic_affinity DeviceHandle * Slightly simplify an error message in acpi_ds_result_push() * Add port definitions for CDAT SSLBIS * Fix misspelled CDAT DSMAS define * Add interrupt command to acpiexec * Detect GED device and keep track of _EVT * ACPICA: Modify ACPI_STATE_COMMON * Manually revert after resolving conflicts PR #757 commit 32d875705c8ee8f99fd8b78dbed48633486a7640 * fix for conflict macro definition on zephyr interface * Fix ACPI_FUNCTION_ENTRY() * Revert "Fixes for ACPI_FLEX_ARRAY, to eliminate warnings on MSVC" * Revert "Events: Use spaces instead of tabs to fix indentation" * Add support for _DSC as per ACPI 6.5 * exserial.c: replace ternary operator with ACPI_MIN() * ACPICA: Modify ACPI_STATE_COMMON * Fix GCC 12 dangling-pointer warning * build: added module name for zephyr build system * Revert "Move ACPI_FUNCTION_ENTRY to function entry" * Move ACPI_FUNCTION_ENTRY to function entry * iASL/MADT: Add dump and compile support for LoongArch APICs * iasl: check Offset before Subtable dereference ==== apache2-mod_php8 ==== Version update (8.2.15 -> 8.2.16) - version update to 8.2.16 * This is a bug fix release. - modified patches % php-build-reproducible-phar.patch (refreshed) ==== bind ==== Version update (9.18.21 -> 9.18.24) Subpackages: bind-doc bind-utils - Update to release 9.18.24 Security Fixes: * Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50387) [bsc#1219823] * Preparing an NSEC3 closest encloser proof could cause excessiv CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50868) [bsc#1219826] * Parsing DNS messages with many different names could cause excessive CPU load. This has been fixed. (CVE-2023-4408) [bsc#1219851] * Specific queries could cause named to crash with an assertion failure when nxdomain-redirect was enabled. This has been fixed. (CVE-2023-5517) [bsc#1219852] * A bad interaction between DNS64 and serve-stale could cause named to crash with an assertion failure, when both of these features were enabled. This has been fixed. (CVE-2023-5679) [bsc#1219853] * Query patterns that continuously triggered cache database maintenance could cause an excessive amount of memory to be allocated, exceeding max-cache-size and potentially leading to all available memory on the host running named being exhausted This has been fixed. (CVE-2023-6516) [bsc#1219854] * Under certain circumstances, the DNS-over-TLS client code incorrectly attempted to process more than one DNS message at a time, which could cause named to crash with an assertion failure. This has been fixed. Bug Fixes: * The counters exported via the statistics channel were changed back to 64-bit signed values; they were being inadvertently truncated to unsigned 32-bit values since BIND 9.15.0. ==== btrfsprogs ==== Version update (6.7 -> 6.7.1) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.7.1 * convert: raid-stripe-tree can be now enabled for the target filesystem * mkfs: * handle lifetime of open file descriptors so it does not trigger udev that could miss to create the UUID symlinks in /dev * update warning when CPU page size does not match sector size * merge features in summary, no more distinction of incompat and runtime to match the semantics of option -O * fi show: fix recognizing raw device mapper paths * other: * documentation updates, fix links to labels in included directories ==== curl ==== Subpackages: libcurl4 - Add patch to fix various TLS related issues including FTP over SSL transmission timeouts: * 0001-vtls-revert-receive-max-buffer-add-test-case.patch - Switch to %autosetup ==== dav1d ==== Version update (1.3.0 -> 1.4.0) - Update to version 1.4.0 * AVX-512 optimizations for z1, z2, z3 in 8bit and high-bitdepth * New architecture supported: loongarch * Loongarch optimizations for 8bit * New architecture supported: RISC-V * RISC-V optimizations for itx * Misc improvements in threading and in reducing binary size * Fix potential integer overflow with extremely large frame sizes ==== dracut ==== Version update (059+suse.549.gc9f63878 -> 059+suse.554.g6144bf71) - Update to version 059+suse.554.g6144bf71: * fix(dracut.spec): update dracut-fips requirements (bsc#1219869) - Update to version 059+suse.552.g4610ef1b: * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841) ==== git ==== Version update (2.43.0 -> 2.43.1) Subpackages: git-core git-email git-web perl-Git - update to 2.43.1: * https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.4… ==== gnome-control-center ==== Version update (45.2 -> 45.3) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 45.3: + Datetime: Fix build with -Wincompatible-pointer-types. + Region: Prevent preview crash from accessing invalid pointer. + Wifi: Fix build with -Wincompatible-pointer-types. - Drop gnome-control-center-fix-region-preview-crash.patch: fixed upstream. ==== gnome-music ==== Version update (45.0 -> 45.1) Subpackages: gnome-music-lang - Update to version 45.1: + Tracker queries improvements. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Sort tar file order for reproducible builds ==== hwdata ==== Version update (0.378 -> 0.379) - update to 0.379: * Update pci, usb and vendor ids ==== lastlog2 ==== Version update (1.2.0 -> 1.3.1) Subpackages: liblastlog2-1 - Verson 1.3.1 - pam_lastlog2: improve ll2_read_entry error handling [bsc#1220000] - Version 1.3.0 - fix sqlite3_step error handling ==== libadwaita ==== Version update (1.4.2 -> 1.4.3) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.4.3: + AdwAboutWindow: Don't pre-select the first section on the Legal page. + AdwHeaderBar: Fix visibility after changing :show-back-button. + AdwPreferencesWindow: Fix :visible-page and :visible-page-name docs. + AdwViewSwitcherBar: Fix a warning when empty. + Updated translations. ==== libblockdev ==== Version update (3.0.4 -> 3.1.0) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to 3.1.0: * Add BDPluginSpec constructor and use it in plugin_specs_from_names * overrides: Remove unused 'sys' import * swap: Add support for checking label and UUID format * fs: Add a function to check label format for F2FS * fs: Add a generic function to check for fs info availability * fs: Fix allowed UUID for generic mkfs with VFAT * fs: Add support for getting filesystem min size for NTFS and Ext * Mark NVDIMM plugin as deprecated since 3.1 * part: Fix potential double free when getting parttype * Fix missing progress initialization in bd_crypto_luks_add_key * lvm-dbus: Fix leaking error * lvm-dbus: Avoid using already-freed memory * utils: Add expected printf string annotation * fs: Report reason for open() and ioctl() failures ==== libei ==== - Add baselibs.conf: GNOME 46's at-spi2-core newly linkes libei, and the at-spi stack is made available bi-arch. ==== libgusb ==== - Explicitly require python311-packaging if python 3.11 is being used. On SLE, python 3.6 is still the default, but 3.11 is used by meson. Drop python3-base from BuildRequires: it is not needed, since python will be pulled in by meson. ==== libjpeg-turbo ==== Subpackages: libjpeg8 libjpeg8-x86-64-v3 - Update to version 3.0.2 * Fixed a signed integer overflow in the tj3CompressFromYUV8(), tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8() functions, detected by the Clang and GCC undefined behavior sanitizers, that could be triggered by setting the align parameter to an unreasonably large value. This issue did not pose a security threat, but removing the warning made it easier to detect actual security issues, should they arise in the future. * Introduced a new parameter (TJPARAM_MAXMEMORY in the TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java API) and a corresponding TJBench option (-maxmemory) for specifying the maximum amount of memory (in megabytes) that will be allocated for intermediate buffers, which are used with progressive JPEG compression and decompression, optimized baseline entropy coding, lossless JPEG compression, and lossless transformation. The new parameter and option serve the same purpose as the max_memory_to_use field in the jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM environment variable, and the cjpeg/djpeg/jpegtran -maxmemory option. * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a corresponding TJBench option (-maxpixels) for specifying the maximum number of pixels that the decompression, lossless transformation, and packed-pixel image loading functions/methods will process. * Fixed an error ("Unsupported color conversion request") that occurred when attempting to decompress a 3-component lossless JPEG image without an Adobe APP14 marker. The decompressor now assumes that a 3-component lossless JPEG image without an Adobe APP14 marker uses the RGB colorspace if its component IDs are 1, 2, and 3. ==== liblangtag ==== Version update (0.6.4 -> 0.6.7) - version update to 0.6.7 0.6.6 -> 0.6.7 ================= Akira TAGOH (1): Add missing header 0.6.5 -> 0.6.6 ================= Akira TAGOH (2): Do not use variable array of bash-ism. Fix more compile warnings - deleted patches - 0001-ro-MD-ro-to-get-make-check-to-succeed.patch (upstreamed) ==== libnvme ==== Version update (1.7.1+0.g13ba383 -> 1.8+0.gbff7dda) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.8+0.gbff7dda: * linux: Explicitly initialize auto-cleanup variables * example: fix mi identify failed with error cntid * tree: do not issue an error when subsys lookup fails during scanning * types: Add controller properties CMBEBS, CMBSWTP and NSSD * tests: Add sample NBFT table from Dell PowerEdge R660 * tests: Add sample NBFT table from Dell PowerEdge R760 * tests: Fix diffs output for duplicate HFI entries * nbft: avoid duplicate entries in ssns->hfis * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one * test: read and dump sysfs tar file * nvme: allow to overwrite hostnqn and hostid * nvme: allow to overwrite base sysfs path * json: dump the output to the user selected filedescriptor * libnvme: export nvme_dump_tree * fabrics: add 'concat' option * mi: set correct rc and errno when crc mismatch * tree: use logical block size for lba * json-schema: add keyring and tls_key details (bsc#1219086) * build: checkout full repo for checkpatch * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086) * meson.build: fixup 'join' syntax * util: Explicitly initialize auto-cleanup variables * tree: Explicitly initialize auto-cleanup variables * linux: Explicitly initialize auto-cleanup variables * fabrics: Explicitly initialize auto-cleanup variables * util: Added function to find specific UUID in UUID list. * build: fix release python tag match - Disable new unit test which is not running stable in OSB * add 0001-build-disable-sysfs-test.patch ==== libpaper ==== Version update (2.1.2 -> 2.1.3) Subpackages: libpaper-tools libpaper2 - Update 2.1.3: * This release fixes a small problem with the paperspecs(5) man page, and ensures that the name of the âpaperâ program is always set, even in a non-relocatable build. ==== libqt5-qtbase ==== Version update (5.15.12+kde147 -> 5.15.12+kde151) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.12+kde151: * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996) * Revert "xcb: only set base size when it's valid" * Fix potential leak of QPropertyAnimation in QLineEditIconButton * QBitArray: correct inline keyword ==== libstorage-ng ==== Version update (4.5.176 -> 4.5.188) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#985 - log locale - 4.5.188 - merge gh#openSUSE/libstorage-ng#984 - log some languange environmant variables - log some language environment variables - 4.5.187 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.186 - Translated using Weblate (Swedish) (bsc#1149754) - 4.5.185 - Translated using Weblate (Czech) (bsc#1149754) - 4.5.184 - Translated using Weblate (Slovak) (bsc#1149754) - 4.5.183 - merge gh#openSUSE/libstorage-ng#983 - fixed typo - 4.5.182 - Translated using Weblate (Dutch) (bsc#1149754) - 4.5.181 - Translated using Weblate (Japanese) (bsc#1149754) - Translated using Weblate (Catalan) (bsc#1149754) - merge gh#openSUSE/libstorage-ng#982 - updated pot and po files - 4.5.180 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.179 - merge gh#openSUSE/libstorage-ng#981 - fix reusing volume group name (bsc#1219266) - 4.5.178 - merge gh#openSUSE/libstorage-ng#980 - added experimental support for bcachefs - 4.5.177 ==== libunwind ==== - Disable LTO on aarch64 until upstream fix the issue: https://github.com/libunwind/libunwind/issues/693 ==== man ==== - Move creation of /var/cache/man into %pre scriplet (boo#1219370) ==== mdevctl ==== - Add /usr/lib/mdevctl/scripts.d/{callouts,notifiers} directories ==== multipath-tools ==== Version update (0.9.7+93+suse.e2f2272 -> 0.9.8~1+82+suse.dcd98a3) Subpackages: kpartx libmpath0 - Update to version 0.9.8~1+82+suse.dcd98a3: * Adapt package version such that it shows as a 0.9.8 prerelease * Add missing udev rules file - Update to version 0.9.7+148+suse.9780ae0: * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142) - Update to version 0.9.7+148+suse.7d9953e.obscpio * This is a multipath-tools 0.9.8 pre-release * fix fast_io_fail for Infinibox (bsc#1219348) * Fix activation of LVM volume groups during coldplug (bsc#1219142) - Update to version 0.9.7+140+suse.2d78457: * This is a multipath-tools 0.9.8 pre-release * Socket activation via multipathd.socket has been disabled by default because it has undesirable side effects on systems without multipath. Users with multipath hardware should enable multipathd.service * The restorequeueing CLI command now only enables queueing if disablequeueing had been sent before * Avoid multipathd hang during map flush * multipathd now tracks the queueing mode of maps in its internal features string * Improve error messages in 'multipathd -k' * Fix segfault in autoresize code (bsc#1219289) * Fix missing map reloads (bsc#1219796) * Documentation fixes, spelling fixes, minor code fixes ==== ncurses ==== Version update (6.4.20240120 -> 6.4.20240210) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240210 + compiler-warning fixes, while investigating an optimizer bug in "gcc (MacPorts gcc13 13.2.0_4+stdlib_flag) 13.2.0" which results in only the first byte of a multibyte character being printed to the screen. - Change order of use=vt100+4bsd and use=rxvt+pcfkeys in rxvt-basic to get correct arrow keys back (boo#1219626) - Add ncurses patch 20240203 + minor changes to tracing and locale-checks. - Add ncurses patch 20240127 + amend change to z39-a (report by Sven Joachim). + use xterm+nopcfkeys, vt52-basic, dec+pp, dec+sl, vt52+arrows, hp+pfk+cr, klone+acs, klone+color, klone+sgr, ncr160wy50+pp to trim -TD + NetBSD-related fixes for x68k and wsvt52 (patch by Thomas Klausner) ==== nvme-cli ==== Version update (2.7.1 -> 2.8) Subpackages: nvme-cli-bash-completion - Update to version 2.8: * nvme-print-json: append array object in json_support_log * sed: Add plugin for basic SED Opal operations (jsc#PED-5061) * don't include newlines in already wrapped text * nvme: do not include meta data for PRACT=1 and MD=8 (version 2) * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes * doc: Fix config-schema.json's URL * plugins/solidigm: Compressing vs-internal-log log files into zip file. * nbft: do not issue an error if ACPI tables are missing * nbft: fixup include for libnvme * doc: Fix short option name for cfg-file * completions: added Solidigm plugin to autocomplete scripts * nvme: Remove unused cfg argument from NVME_ARGS() macro * nvme: fix directive receive identify offsets * nvme-fabrics: enable option 'concat' * build: Update libnvme wrap * plugins/wdc: Add Debug Log Collection Support * nbft: fix tcp/dhcp address fallback retry (bsc#1218873) * nvme: use correct telemetry log size * nvme-print: fix typo in list verbose output (bsc#1219086) * nvme: print inserted tls key for check-tls-key (bsc#1219086) * plugins/wdc: Plugin fixes and updates * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086) ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Enable running the regression tests in FIPS mode. ==== openvpn ==== Version update (2.6.8 -> 2.6.9) - update to 2.6.9: * Remove unused function prototype crypto_adjust_frame_parameters * Log SSL alerts more prominently * Document tls-exit option mainly as test option * Remove TEST_GET_DEFAULT_GATEWAY as it duplicates --show-gateway * Fix check_session_buf_not_used using wrong index * Add missing check for nl_socket_alloc failure * Add check for nice in cmake config * Remove compat versionhelpers.h and remove cmake/configure check for it * Extend the error message when TLS 1.0 PRF fails * Fix unaligned access in macOS, FreeBSD, Solaris hwaddr * Check PRF availability on initialisation and add --force-tls-key-material-export * Make it more explicit and visible when pkg-config is not found * Clarify that the tls-crypt-v2-verify has a very limited env set * Implement the --tls-export-cert feature * Remove conditional text for Apache2 linking exception * Remove --tls-export-cert * Remove superfluous x509_write_pem() * sample-keys: renew for the next 10 years * GHA: clean up libressl builds with newer libressl * configure.ac: Remove unused AC_TYPE_SIGNAL macro * documentation: remove reference to removed option --show-proxy-settings * unit_tests: remove includes for mock_msg.h * documentation: improve documentation of --x509-track * NTLM: add length check to add_security_buffer * NTLM: increase size of phase 2 response we can handle * proxy-options.rst: Add proper documentation for --http-proxy-user-pass * buf_string_match_head_str: Fix Coverity issue 'Unsigned compared against 0' * --http-proxy-user-pass: allow to specify in either order with --http-proxy * README.cmake.md: Document minimum required CMake version for --preset * documentation: Update and fix documentation for --push-peer-info * documentation: Fixes for previous fixes to --push-peer-info * OpenBSD: repair --show-gateway * get_default_gateway() HWADDR overhaul * fix uncrustify complaints about previous patch * preparing release 2.6.9 * dco-freebsd: dynamically re-allocate buffer if it's too small * tun.c: don't attempt to delete DNS and WINS servers if they're not set * vcpkg-ports/pkcs11-helper: bump to version 1.30 * Add support for mbedtls 3.X.Y * Update README.mbedtls * Disable TLS 1.3 support with mbed TLS * Enable key export with mbed TLS 3.x.y * protocol_dump: tls-crypt support * Fix IPv6 route add/delete message log level * fix(ssl): init peer_id when init tls_multi ==== orc ==== Version update (0.4.34 -> 0.4.37) - version update to 0.4.37 0.4.37 ====== - enable neon instructions on Apple ARM64 (Aleix Conchillo FlaquÃ©) - orcc: Fix regression, was hard-coded to use "sse" as default target (Sebastian DrÃ¶ge) - MMX backend fixes (L. E. Segovia, Jorge Zapata) - testsuite: Build fixes for Clang (L. E. Segovia) - testsuite, tools: Fix warning caused by inserting unneeded source operands (L. E. Segovia) - orccompiler: call sys_icache_invalidate() to invalidate macos inst cache (Aleix Conchillo FlaquÃ©) - macOS/iOS version/target check build fixes (Aleix Conchillo FlaquÃ©) 0.4.36 ====== - Only use AVX / AVX2 instructions on CPUs that support both AVX and AVX2 (fixes crash on machines that only support AVX) (L. E. Segovia) 0.4.35 ====== - Add support for AVX / AVX2 (L. E. Segovia) - SSE backend improvements (L. E. Segovia) - New `orf` and `andf` opcodes for bitwise AND and OR for single precision floats (Jorge Zapata) - Add support for `convwf`, int16 to float conversion (Jorge Zapata) - Allow backend selection through ORC_TARGET environment variable (L. E. Segovia) - Documentation improvements (Jorge Zapata, L. E. Segovia, Tim-Philipp MÃ¼ller) - orconce: Use Win32 once implementation with MSVC (Seungha Yang, L. E. Segovia) - orcc: add --binary option to output raw machine code for functions (L. E. Segovia) - orcprofile: Implement Windows high-resolution timestamp for MSVC to allow benchmarking on MSVC builds (L. E. Segovia) ==== osinfo-db ==== - Add support for SLE Micro 6.0 (jsc#PED-6305) add-slem6.0-support.patch - Add support for openSUSE Leap 15.6 (jsc#PED-6305) add-opensuse-leap-15.6-support.patch ==== pam-config ==== Version update (2.10 -> 2.11) - Update to version 2.11 - pam_gnome_keyring: use options in AUTH [bsc#1219767] ==== patterns-server ==== Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-kvm_server patterns-server-kvm_tools patterns-server-lamp_server patterns-server-mail_server patterns-server-printing patterns-server-xen_server - kvm_server pattern: - stop Recommending tigervnc and virt-install as they're 100% client tools. In fact, it is the kvm_tools pattern that does Require them (leave them as Suggested, for now, just to leave a record of them... but only temporarily). Note that this will result in a different behavior, wrt to the current one. I.e., anyone installing _only_ the kvm_server pattern, will not get those two packages automatically. ==== php8 ==== Version update (8.2.15 -> 8.2.16) Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.16 * This is a bug fix release. - modified patches % php-build-reproducible-phar.patch (refreshed) ==== pkcs11-helper ==== Version update (1.29.0 -> 1.30.0) - update to 1.30.0: * core: add dynamic loader provider attribute * openssl: support DSA in libressl-3.5.0 * openssl: fix openssl_ex_data_dup prototype - get rid of almost empty pkcs11-helper package ==== pkgconf ==== Version update (1.8.0 -> 2.1.1) Subpackages: pkgconf-m4 pkgconf-pkg-config - update to 2.1.1: * Fix --modversion with constraints * Reintroduce an optimization to the dependency graph walker which avoids revisiting already visited nodes * Add a regression test to check that the dependency flattener is working as expected - update to 2.1.0: * new solver for higher performance with complicated graphs * Add --license selector to the pkgconf CLI * Add flag --verbose and --solution to CLI * Changes and fixes to --modversion * bug fixes and developer visible changes - drop pkgconf-CVE-2023-24056.patch, now included ==== poppler ==== Version update (23.12.0 -> 24.02.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - version update to 24.02.0 Release 24.02.0: core: * Fix reading some JBIG2 streams. Issue #1319 * Fix saving some annotation interior color when it's empty * Make searching for fonts when adding annotations a bit faster * Make sure images are compressed when adding them * Small internal code cleanup utils: * pdfimages: return exit code 2 when error opening output files Release 24.01.0: core: * Don't crash on certain documents on the NSS signature backend * Fix infinite loop in some annotation code if there's not space for even one character * Fix build on Android with generic font configuration * Small internal code cleanup ==== poppler-qt5 ==== Version update (23.12.0 -> 24.02.0) - version update to 24.02.0 Release 24.02.0: core: * Fix reading some JBIG2 streams. Issue #1319 * Fix saving some annotation interior color when it's empty * Make searching for fonts when adding annotations a bit faster * Make sure images are compressed when adding them * Small internal code cleanup utils: * pdfimages: return exit code 2 when error opening output files Release 24.01.0: core: * Don't crash on certain documents on the NSS signature backend * Fix infinite loop in some annotation code if there's not space for even one character * Fix build on Android with generic font configuration * Small internal code cleanup ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse - Add cherry-picks to fix UCM crashes * pulseaudio-replace-port-device-UCM-context-assertion-with-an-error.patch * pulseaudio-check-UCM-verb-before-working-with-device-status.patch ==== python-linux-procfs ==== - align license tag with COPYING ==== python-lxml ==== - Add skip-test-under-libexpat-2.6.0.patch to skip broken test with expat 2.6.0, gh#python/cpython#115133 ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Add kernel-boot-do-not-load-module-unsupported-on-s390.patch to prevent autoload of module not supported on s390. (bsc#1219805) ==== rubygem-vagrant_cloud ==== Version update (3.0.5 -> 3.1.1) - update to 3.1.1: * Update path prefixing behavior on request [GH-85] - update to 3.1.0: * Add support for architecture in providers [GH-82] ==== sdbootutil ==== Version update (1+git20240122.c0d8f76 -> 1+git20240214.ba81e0e) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240214.ba81e0e: * Fix pcr-oracle use * Add device when generating initrd for snapshots * Use systemd-pcrlock * Pre-built initrd support * Add subvolumes_prefix support ==== sg3_utils ==== Version update (1.48+7.63e63cb -> 1.48+8.37ca384) Subpackages: libsgutils2-1_48-2 - Fix missing SCSI_MODEL and other fields for "sg_inq --export" (bsc#1219874) ==== shadow ==== Version update (4.14.3 -> 4.14.5) Subpackages: libsubid4 login_defs - Update to 4.14.5: * Build system: + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had been deleted from a Makefile variable, but it should have been chpasswd. - Remove shadow-4.14.4-chgpasswd-typo.patch - Update to 4.14.4: * Build system: + Link correctly with libdl. + Install pam configs for chpasswd(8) and newusers(8) when using ./configure --with-libpam --disable-account-tools-setuid. * libshadow: + Fix build error (parameter name omitted). + Fix off-by-one bug. + Remove warning. - Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926 - Update patch macro `patchN` -> `patch -P N` ==== shared-mime-info ==== Subpackages: shared-mime-info-lang - Explicitly use gcc 13 on SLE. ==== spice-gtk ==== Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - do not require six (https://trello.com/c/MO53MocR/143-remove-python3-six) - added patches fix https://gitlab.freedesktop.org/spice/spice-common/-/commit/29dacb5f53f5183f… + spice-gtk-no-six.patch ==== suseconnect-ng ==== Version update (1.3.0~git0.ae8ba1e -> 1.7.0~git2.21ba08e) Subpackages: libsuseconnect suseconnect-ruby-bindings - Update to version 1.7.0~git2.21ba08e * Allow SUSEConnect on read write transactional systems (bsc#1219425) - Update to version 1.6.0 * Disable EULA display for addons (bsc#1218649 and bsc#1217961) - Update to version 1.5.0 * Configure docker credentials for registry authentication * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364) * Add --json output option - Update to version 1.4.0 * Added EULA display for addons (bsc#1170267) * Fix zypper argument for auto-agreeing licenses (bsc#1214781) * Enable building on SLE12 SP5 (jsc#PED-3179) ==== tecla-keyboard-layout-viewer ==== Version update (45.rc -> 45.0) Subpackages: tecla-keyboard-layout-viewer-lang - Update to version 45.0: + Added shortcuts to exit the dialog + Fix UI in RTL environments + Fix a11y initialization + Updated translations. ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Migrate from update-alternatives to libalternatives (bsc#1219107). ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Add file conflict of util-linux-tty-tools and busybox-util-linux. ==== util-linux-systemd ==== - Add file conflict of util-linux-tty-tools and busybox-util-linux. ==== vim ==== Version update (9.1.0000 -> 9.1.0111) Subpackages: vim-data vim-data-common xxd - update to 9.1.0111: * filetype: no support for bats files * filetype: add 'Config.in' filetype detection * runtime(asciidoc): include basic ftplugin * filetype: no support for its files * runtime(vim): Update base-syntax, remove unused vimString region * runtime(vim): Update base-syntax, fix :behave highlighting * runtime(vim): update Vim Syntax generator * filetype: no support for dtso files * Visual highlight hard to read with 'termguicolors' * runtime(vim): include Vim Syntax generator * Style: typos found * Linking fails with -lto because of PERL_CFLAGS * 'breakindentopt' "min" not correct with 'signcolumn' * settabvar() may change the last accessed tabpage * upper-case of German sharp s should be U+1E9E * Redrawing can be improved with undo and 'spell' * Not able to use diff() with 'diffexpr' * runtime(gpg): Mark dangerous use-embedded-filename with WarningMsg * CompletionChanged not triggered when new leader added without matches * 'breakindent' behaves inconsistently with 'list' and splits * runtime(vim): Update syntax file * diff() function uses 'diffexpr' * tests: test_restricted() fails * xxd: buffer-overflow when writing color output * Still a qsort() comparison function that returns result of subtraction * Compiler warning for missing type in scroll_event() * Syntax test fails when run with non C locale * Assigning wrong colors when parsing terminal OSC response * runtime(vim): Fix indent after line with literal dict * qsort() comparison functions should be transitive * TextChanged not triggered for :norm! commands * Restoring lastused_tabpage too early in do_arg_all() * Problem when scrolling using slow touchpads scroll event * X11 scroll size changes after accessing clipboard * Visual hl wrong when it ends before multibyte 'showbreak' * Redrawing can be improved when deleting lines with 'number' * Redrawing can be improved when deleting lines with 'cursorline' * runtime(doc): further improve docs about List/Blob += operator * X11 mouse-scrolling stutters * runtime(doc): Clarify list-concatenation a bit more * unexpected error for modifying final list using += * LineNrAbove/Below highlighting wrong on wrapped lines * runtime(dosbatch): improve '::' comment highlighting * GTK3: using wrong style for pre-edit area * Unnecessary call to redraw_for_cursorline() in nv_mousescroll() * runtime(colors): color names in the v:colornames dict should be lower cased * luau config file not detected * runtime(vim): Update syntax file * insert completion not correct when adding new leader * did_set_breakat() should be in optionstr.c * Looping over modifier_keys_table unnecessarily * Not able to build without FEAT_DIFF * translation(ca): Fixe typos in Catalan translation * Need a diff() Vim script function * translation(ru): Updated Russian translation of messages * runtime(vim): Update syntax file * runtime(fortran): update syntax * ScreenLines may not be correctly initialized, causing hang * Visual highlighting can still be improved * gcc still complains about use of uninitialized var * runtime(racket): add missing space to b:undo_indent var * runtime(Filelist): include README_vimlogo.txt * gcc complains about use of uninitialized var * runtime(vimlogo): Include and modernize vimlogo.svg * runtime(netrw): fixing remote file removal via ssh * runtime(doc): correct Vim patch for Wayland support * runtime(racket): undo some indent options only when vim9script is available * runtime(doc): Update help for Wayland support * Segfault with CompleteChanged autocommand * No Wayland support * GTK code can be improved * Internal error when :luado/perldo/pydo etc delete lines * UX of visual highlighting can be improved * runtime(netrw): Use :exec norm! <leftmouse> before :call mapping in netrw * Recorded register cannot be translated using keytrans() * runtime(vim): Highlight string interpolation * runtime(vim): Update syntax and ftplugin files * runtime(ant): Update syntax file * runtime(hurl): add hurl filetype plugin * runtime(vim): Update syntax file * runtime(doc): style fixes in vim9.txt * No event triggered before creating a window * Cannot map Super Keys in GTK UI * wrong number of trailing spaces inserted after blockwise put * formatting long lines is slow * 'linebreak' may still apply to leading whitespace * Patch 9.1.0041 causes regressions for users * runtime(mail): fix #13913 * runtime(netrw): Don't change global options * runtime(fortran): update syntax and documentation * Win32 Keyboard handling is sub-optimal * Make "[Command Line]" a special buffer name * Abort opening cmdwin if autocmds screw things up * issues with temp curwin/buf while cmdwin is open * runtime(c): Highlight user defined functions * :drop does not re-use empty buffer * --remote-* does not ignore `wilidignore` * runtime(doc): change "VIsual mode" to "Visual mode" in :h SafeState ... changelog too long, skipping 75 lines ... * Add support for `syntax foldlevel` command ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1219791 - [virt-manager][aarch64] Error launching details: name 'log' is not defined virtinst-enable-video-virtio-for-arm.patch ==== vmaf ==== - fix dependency on xxd ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Fix package names for v6, and obsolete old packages. - Use gcc 11 on SLE, to match what is currently used on SP4, and adjust version check to include SP6. Also, use system malloc there; the build currently fails without this (webkit#243535). - Require gcc >= 10.2 to match the current cmake test. - Disable jpegxl on SLE; it isn't currently available there. ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Fix package names for v6, and obsolete old packages. - Use gcc 11 on SLE, to match what is currently used on SP4, and adjust version check to include SP6. Also, use system malloc there; the build currently fails without this (webkit#243535). - Require gcc >= 10.2 to match the current cmake test. - Disable jpegxl on SLE; it isn't currently available there. ==== wpa_supplicant ==== - Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975) ==== xfsprogs ==== Version update (6.5.0 -> 6.6.0) Subpackages: libhandle1 xfsprogs-scrub - update to 6.6.0 - xfs_scrub: add missing license and copyright information - xfs_db: report the device associated with each io cursor - libxfs: Fix UAF in a requeued EFI - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2 - xfs_db: Add upport to read from external log device - metadump: New metadump format - xfs_quota: fix missing mount point warning ==== yast2-packager ==== Version update (5.0.2 -> 5.0.4) - SLE HPC is not a base product anymore, it is replaced by SLES + HPC module, added migration mapping (jsc#PED-7841) - 5.0.4 - Fixed ERB template loading in self update, if the template cannot be found using a relative path then fallback to the absolute path (bsc#1219174) - 5.0.3 ==== yast2-storage-ng ==== Version update (5.0.4 -> 5.0.5) - Added new libstorage enum value UF_BCACHEFS to fix build failure (bsc#1219804) - 5.0.5

1 0

Tumbleweed - Review of the week 2024/07
by Dominique Leuenberger 16 Feb '24

16 Feb '24

Dear Tumbleweed users and hackers, This week we have released 5 snapshots (0209, 0211, 0212, 0213, and 0214). With 5 snapshots, this is quite a normal week. The most relevant changes in those snapshots were: * SDL 2.30.0 * c-ares 1.26.0 (after a lengthy staging phase) * fwupd 1.9.13 * PostgreSQL 16.2 * Pulseaudio 17.0 * GTK 4.12.5 * Python 3.11.8 * KDE Frameworks 5.115.0 * RPM 4.19.1.1 * Node.JS 21.6.1 The list of things currently being tested remained largely unchanged: * Meson 1.3.2 * Shadow 4.14.5 * pkgconf 2.1.1 * RPM: enable reproducible builds by default (bsc#1148824). For upstream versions see: https://github.com/rpm-software-management/rpm/pull/2880 * A bunch of cleanup work to eliminate more of python2 (boo#1219306) * dbus-broker: a big step forward; upgrades seem to be an issue that needs to be addressed * libxml 2.12.x: slow progress * GCC 14: our usual 2-phase approach to introduce it. Currently working on phase 1, meaning GCC14 will be providing the base libraries (libgcc_s1, libstdc++…). The compiler itself will stay at version 13 for now. Only one issue left: qemu fails to build Cheers, Dominique

1 0

New Tumbleweed snapshot 20240214 released!
by Dominique Leuenberger 15 Feb '24

15 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kmozillahelper libdeflate nodejs21 (21.5.0 -> 21.6.1) publicsuffix (20240123 -> 20240212) thin-provisioning-tools (1.0.10 -> 1.0.11) === Details === ==== kmozillahelper ==== - Remove rpm_macro(cmake_kf5) BR, not supported on Leap and extra-cmke-modules already takes care of that. ==== libdeflate ==== - baselibs for tools and devel reportedly not needed - modified sources % baselibs.conf - introduce baselibs.conf for openexr https://build.opensuse.org/request/show/1144873 - added sources + baselibs.conf ==== nodejs21 ==== Version update (21.5.0 -> 21.6.1) Subpackages: npm21 - Update to 21.6.1: * Revert "stream: fix cloned webstreams not being unref'd" - Changes in 21.6.0: * New connection attempt events * --allow-addons to enable addon usage when using the Permission Model. * Support configurable snapshot through --build-snapshot-config flag - fix_ci_tests.patch: refreshed ==== publicsuffix ==== Version update (20240123 -> 20240212) - Update to version 20240212: * Add cprapid.com suffix to private section (#1892) * util: gTLD data autopull updates for 2024-02-08T15:13:14 UTC (#1932) * Added Cyclic Software (#1737) * Update public_suffix_list.dat for scw.cloud subdomains (#1740) * Update public_suffix_list.dat (#1926) * Add ZAP-Hosting cloud domain (#1907) * Add `flutterflow.app` (#1666) * Update public_suffix_list.dat (#1614) * Brave Submissions to the Public Suffix List - Q4 2023 (#1872) * Add pley.games (#1881) * Add panel.dev (#1916) * add 12CHARS to private domains (#1915) * Azure updates for Microsoft Corporate Domains (#1891) * Remove blog.kg from private section (#1840) * AWS Submissions to the Public Suffix List - Q4 2023 (#1876) * Homebase requested the addition of id.pub kin.one kin.pub (#1768) * Replace run.app and a.run.app with *.run.app (#1928) * Add pages.gay (#1920) * Update Platform.sh domains (#1792) * fix(adobe): add aem.live and aem.page domains (#1874) * Update code builder domains with the canary (#1802) * Add atmeta.com to PSL and consolidate Meta entries (#1736) * util: gTLD data autopull updates for 2024-01-24T15:14:29 UTC (#1923) ==== thin-provisioning-tools ==== Version update (1.0.10 -> 1.0.11) - Update to version 1.0.11: * Bump version nr to 1.0.11 * [thin/cache_check] Print suggestive hints for improving error resolution * [tests] Fix a typo in command name * [cache_check] Fix boundary check on the bitset for cached blocks

1 0

openSUSE Release Engineering meeting 14.02.2024
by Lubos Kocman 15 Feb '24

15 Feb '24

!!! HEADS UP PLEASE USE https://meet.google.com/fud-xeti-hvn for a few upcoming meetings instead of jitsi, as we're experiencing lot of issues with it. https://progress.opensuse.org/issues/155185 I did update calendar-o-o to reflect this https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees lkocman, GuillaumeG, Sarah, ana, ddemaio, DimStar, DocB, wengel ## Leap Reminder that we have check in deadline for Leap 15.6 Beta on 21st February. (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Leap 15.6 Build604.1 was published yesterday. The build containing changes from Friday+Monday containing new kernel is blocked on s390x rebuild progress. Adrian increased priority of backports, so we get at least some build jobs. as there were zero "running" jobs yesterday morning. python-related stagings, including GNUHealth, are mostly blocked on SLES 15 SP6's Staging:G, which will be accepted "hopefully this week". Thanks to Antonio for helping on this! Several issues under wayland https://bugzilla.suse.com/show_bug.cgi?id=1219505 - input methods in chrome under Wayland https://bugzilla.suse.com/show_bug.cgi?id=1219486 - memory leak in Evolution (workaround uninstall evolution) https://bugzilla.opensuse.org/show_bug.cgi?id=1219858 - coredump in gnome-control-settings sharing https://bugzilla.suse.com/show_bug.cgi?id=1219718 - wayland-only google-chrome-stable blinks/flashes on scrolling/type libedataserver-1.2.so.26 issue with upgrade from older releases (15.2/15.3) https://bugzilla.opensuse.org/show_bug.cgi?id=1219833 We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 203 failed 60 unresolvable (last week 294 failed, 166 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates: * RPM 4.19.1.1, Packages not included in rings getting updates updates, still some more to go, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * A lot of more updates for Python 3.12.1 enablement * c-ares was fixed and finally 1.26.0 was accepted. * KDE Frameworks 5.115.0 * Linux kernel 6.7.4 & 6.7.3 & networking CVE fixes & other fixes * pulseaudio 17.0 * minor point updates python: python311 3.11.8 / python312 3.12.2 * xorg-x11-server 21.1.11 * OpenJDK 21.0.2 with OpenJ9 0.43.0 virtual machine + updates for OpenJDK 17.0.10 + OpenJDK 11.0.21 Updates waiting / work still in progress: * More fixes for Python 3.12 * GCC 14 (only for runtime libraries), waiting fix for QEMU * GCC 14 as default compiler (long-lasting staging) started in :Gcc7 * libxml 2.12.1 (lots of work to do), on hold, remove from staging to allow security update * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * cmake, macro changes (DOCDIR MANDIR INFODIR), all packages update, will be accepted soon * KDE Frameworks and Plasma 6 RC 2, work in progress ## Richard (Aeon+botmaster) tik development progressing slowly, discussions about getting some contributions from SUSE engineers. Aiming to deploy new aeondesktop.org website this week ## Bernhard (Slowroll) Not available * kernel-longterm expected around March * first openQA test WIP * next major version bump expected in 2-3 weeks (mid February) * Vacation 2024-02-05 to 09 ## Max Not available Leap 15.6 - build stats in Backports: 52(was 59) faild, 67 unresolvable(was 63) * Build597.1 has been published * The remaining qt5/qt6 applications got merged for adapt to the Qt5 5.15.12 and Qt6 6.6.1 from SLE15 * Merged many python application update or deleterequests, but still, most of unresolvables were python applications, and still has many were pending in staging * The tweak of skippkg-finder and 000package-groups works, the noarch ones has been selected to ftp-tree instead of the arch-dependent ones(with an unmatched version number) * Vacation: Feb. 7-14 ## Guillaume - Arm Heads-up: Having some vacation. I will be back on 26th of Feb. * Tumbleweed: - Rolling, but: * qemu lost kvm support for non-x86_64 because of a bug in spec file. Fixed with https://github.com/openSUSE/qemu/pull/51 (waiting for update to reach devel project and then Factory) - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) * TW installer seems to have have issues with PAC/BTI - https://bugzilla.suse.com/show_bug.cgi?id=1219717 - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Store GUI for Tumbleweed image instead of arm64. But `wsl --install openSUSE-Tumbleweed --web-download` works just fine! - https://bugzilla.opensuse.org/show_bug.cgi?id=1219372. This is what team agreed to advertise. We just need to update our wiki and perhaps image description in Windows Store. lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... lkocman to ensure that we have discussion with MS on the download issue ## Sarah - s390x * You can not release anything without the second mainframe Tumbleweed: * too less build nodes: waiting for Compilers to be finished with builds lkocman will ping Marcela && Moroni && Martin Piala. * Improved kernel performance for kernel 6.8 from IBM side: https://www.phoronix.com/news/Linux-6.8-s390-Syscall-Perf ## Doug * Contribution Workshops * First one tomorrow * Sign up at https://etherpad.opensuse.org/p/openSUSE-Contribution-Workshop * Will publish article today lkocman reached out to Kristyna's team (we have a slack channel regarding packaging ideas). we could probably reach out to translations(a)lists.opensuse.org regarding weblate. * Chemnitz Linux Tage * Sent items for booth orgs * Meeting with some orgs today about device to be used at CLT * Received thank you letter from Geeko Foundation about forthcoming donation * GSoC * Org announcement on Feb. 21 * Community Summit * Plan to have it on last day of SUSECON * June 19 * Marketing team looking to replace temp-logo image * Meeting planned for next week with co-organizer lkocman: this might be tricky as there is devconf.cz literally righ before. * openSUSE Conference * 29 Registrations, 21 Submissions, 12 Hours * Video team set for presentation Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk - various python 3.12 fallout preparations - tried to split egrep/fgrep from "grep" into a separate subpackage, reducing fallout - drop overlays over python311 on Backports SP6 is in progress Dirk: it would help if we could have all the drops in a single staging as they have common build failure root causes. Dirk did a lot of work on the python cleanup over the week, following issue is blocking "green-ness" of related stagings. Issue reported on behalf of dirk https://github.com/openSUSE/openSUSE-release-tools/issues/3057 ## Wolfgang (Package Hub), Scott Bahling Current state Package Hub for SLE-15-SP6 Subpackages (x86_64): 447 packages Backports (x86_64) not installables: 3417 packages Mostly because of missing dependencies. Working on getting those solved. ## Maintenance team (Marcus or Maurizio (m4u)) Leap 15.6 - working on switching the default of openssl 1 -> 3. SLES 15 SP6 openssl acceptance should be today QAM scheduled 15.6 Beta openQA setup for the next sprint, so it should be ready in mid-February according to the plan. ## Adrian - OBS Not available The new composer/product builder discussion was covered in Max's section. Heads up: a first SR related to the composer is on the way. This is done to setup new products. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor Adrian: the issue with jitsi is only with change from 2-3 people. No update https://progress.opensuse.org/issues/155185r

1 0

Fwd: openSUSE MicroOS on FLOSS Weekly Next week
by Luna Jernberg 15 Feb '24

15 Feb '24

---------- Forwarded message --------- Från: Luna Jernberg <droidbittin(a)gmail.com> Date: tors 15 feb. 2024 kl 05:47 Subject: Fwd: openSUSE MicroOS on FLOSS Weekly Next week To: Luna Jernberg <droidbittin(a)gmail.com> ---------- Forwarded message --------- Från: Luna Jernberg <droidbittin(a)gmail.com> Date: tors 15 feb. 2024 kl 05:47 Subject: openSUSE MicroOS on FLOSS Weekly Next week To: <microos(a)lists.opensuse.org>, bittin <bittin(a)opensuse.org>, factory <factory(a)lists.opensuse.org>, opensuse-project <opensuse-project(a)opensuse.org>, <project(a)lists.opensuse.org>, project <project(a)opensuse.org> Hey! https://hackaday.com/2024/02/14/floss-weekly-episode-769-10-more-internet/ listening to this weeks FLOSS Weekly and MicroOS is on next week live on Wednesday 21th February and recording uploaded on Thursday 22th February

1 0

Slowroll RFE support and multimedia codecs
by Terje J. Hanssen 15 Feb '24

15 Feb '24

Hello list, I don't know if this is the correct location for this topic. Even that Slowroll may be in a test phase, it would be wishable to have somewhere to communicate and route specific requests for support and enhancements. For example Product name 'Slowroll' in bugzilla, possibly mailing list and forum. So far I have used product name Tumbleweed in bugzilla regarding ffmpeg-6-6.1.1 https://bugzilla.suse.com/show_bug.cgi?id=1219259 To do real test of Slowroll on desktops as I want, we need to use it as a full time replacement for Leap 15.5 or Tumbleweed. That is, we need optional access to all additional package repositories for multimedia:/libs, codecs enabled tools and applications from OBS and All from Packman. And corresponding installation support for Slowroll using OPI, Zypper, YaST https://en.opensuse.org/Additional_package_repositories https://opensuse-guide.org/codecs.php https://ostechnix.com/how-to-install-multimedia-codecs-in-opensuse/ Rgds Terje J. Hanssen

10 13

New Tumbleweed snapshot 20240213 released!
by Dominique Leuenberger 14 Feb '24

14 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libguestfs python-rpm (4.19.1 -> 4.19.1.1) rpm (4.19.1 -> 4.19.1.1) xfce4-notifyd (0.9.3 -> 0.9.4) xfce4-terminal (1.1.1 -> 1.1.2) === Details === ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - bsc#1206361 - SLES 15 SP5 Beta2 - virt-customize ssh-inject fails (s390x/kvm/libvirt) (-> Server-Applications module) use-rtc-driftfix-slew-for-x86-only.patch ==== python-rpm ==== Version update (4.19.1 -> 4.19.1.1) - update to rpm-4.19.1.1 ==== rpm ==== Version update (4.19.1 -> 4.19.1.1) Subpackages: librpmbuild10 - update to rpm-4.19.1.1 * don't warn about missing user/group on skipped files * make user/group lookup caching thread-safe * fix regression in Lua scriptlet runaway child detection * restore readline support as an explicit option - refreshed patches: * rpmqpack.diff - fix _host_cpu being wrong on arm and ppc - fix %_host not containing the abi suffix on arm [bnc#1219627] updated patch: canongnu.diff ==== xfce4-notifyd ==== Version update (0.9.3 -> 0.9.4) Subpackages: xfce4-notifyd-lang - update to 0.9.4: * Clarify why the symbolic icons don't go in symbolic/status * Fix icons directory names * Fall back to monitor 0 if no primary monitor set * Add a fallback for drawing the unread notification emblem * Remove redundant icon embleming code * Fix opacity on notification hover * Translation Updates ==== xfce4-terminal ==== Version update (1.1.1 -> 1.1.2) Subpackages: xfce4-terminal-lang - Update to version 1.1.2 * Update copyright year * Update tooltip when hovering over a hyperlink * build: Align CFLAGS with LDADD * prefs-dialog: Add missing strings to translate (#222) * dropdown: Default dropdown-toggle-focus to false * Add runtime guard for XfceSMClient * build: Restrict XfceSMClient to X11 * Determine cwd on FreeBSD in a native way instead of using linprocfs * window: Remove weak ref on prefs dialog in finalize() * build: Get rid of #ifdef G_ENABLE_DEBUG * Do not reconnect accels when closing last tab * build: Lower xfce4-dev-tools requirements to stable version * search-dialog: Use xfce_titled_dialog_set_default_response() * Translation Updates - Update gxo-282.patch - Add gxo-299.patch * backport fix for "paste unsafe text" dialog not popping up (gxo#apps/xfce4-terminal#299)

1 0

[Slowroll] base version bump and kernel-longterm
by Bernhard M. Wiedemann 14 Feb '24

14 Feb '24

Dear Slowroll users, I plan to bump the base snapshot version of Slowroll tomorrow to the 20240212 snapshot. With this, we inherit the known issue that around 20 packages were not updated yet to work with rpm 4.19 which makes them uninstallable. Since the last base snapshot from 2023-12-19, Tumbleweed has seen a major rebuild, so expect a large download size for the next update. Also in the news: I added the kernel-longterm 6.6.16 packages from my colleague and fellow geeko Robert Frohl. Thanks a lot for packaging it. Known issue here is that it does not yet work with secure boot and 3rd party kernel module packages (kmps) don't yet build for it. This affects CoreFreq bbswitch crash dpdk drbd facetimehd gasket-driver hdjmod lttng-modules mhvtl msr-safe nvidia-open-driver-G06-signed openafs pcfclock rtl8812au rtl88x2bu tp_smapi v4l2loopback vendor-reset vhba-kmp xtables-addons that are not yet usable with kernel-longterm. Ciao Bernhard M.

1 0

20240209 systemd-vconsole-setup[1201]: No usable source console found: Device or resource busy
by Joe Salmeri 14 Feb '24

14 Feb '24

After rebooting systemd-vconsole-setup does not start and gives the following error systemd-vconsole-setup[1201]: No usable source console found: Device or resource busy Manually restarting the service after reboot fixes the issue Someone else already submitted a bug report on this a while back but looks like it is still broke -- Regards, Joe

2 1

New Tumbleweed snapshot 20240212 released!
by Dominique Leuenberger 13 Feb '24

13 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.114.0 -> 5.115.0) baloo5 (5.114.0 -> 5.115.0) bluez-qt (5.114.0 -> 5.115.0) breeze5-icons (5.114.0 -> 5.115.0) frameworkintegration (5.114.0 -> 5.115.0) kImageAnnotator-Qt5 kactivities-stats (5.114.0 -> 5.115.0) kactivities5 (5.114.0 -> 5.115.0) karchive (5.114.0 -> 5.115.0) kauth (5.114.0 -> 5.115.0) kbookmarks (5.114.0 -> 5.115.0) kcalendarcore (5.114.0 -> 5.115.0) kcmutils (5.114.0 -> 5.115.0) kcodecs (5.114.0 -> 5.115.0) kcompletion (5.114.0 -> 5.115.0) kconfig (5.114.0 -> 5.115.0) kconfigwidgets (5.114.0 -> 5.115.0) kcontacts (5.114.0 -> 5.115.0) kcoreaddons (5.114.0 -> 5.115.0) kcrash (5.114.0 -> 5.115.0) kdav (5.114.0 -> 5.115.0) kdbusaddons (5.114.0 -> 5.115.0) kdeclarative (5.114.0 -> 5.115.0) kded (5.114.0 -> 5.115.0) kdelibs4support (5.114.0 -> 5.115.0) kdesu (5.114.0 -> 5.115.0) kdnssd-framework (5.114.0 -> 5.115.0) kdoctools (5.114.0 -> 5.115.0) kfilemetadata5 (5.114.0 -> 5.115.0) kglobalaccel (5.114.0 -> 5.115.0) kguiaddons (5.114.0 -> 5.115.0) kholidays (5.114.0 -> 5.115.0) khtml (5.114.0 -> 5.115.0) ki18n (5.114.0 -> 5.115.0) kiconthemes (5.114.0 -> 5.115.0) kidletime (5.114.0 -> 5.115.0) kimageformats (5.114.0 -> 5.115.0) kinit (5.114.0 -> 5.115.0) kio (5.114.0 -> 5.115.0) kirigami2 (5.114.0 -> 5.115.0) kitemmodels (5.114.0 -> 5.115.0) kitemviews (5.114.0 -> 5.115.0) kjobwidgets (5.114.0 -> 5.115.0) kjs (5.114.0 -> 5.115.0) knewstuff (5.114.0 -> 5.115.0) knotifications (5.114.0 -> 5.115.0) knotifyconfig (5.114.0 -> 5.115.0) kpackage (5.114.0 -> 5.115.0) kparts (5.114.0 -> 5.115.0) kpeople5 (5.114.0 -> 5.115.0) kpty (5.114.0 -> 5.115.0) kquickcharts (5.114.0 -> 5.115.0) kross (5.114.0 -> 5.115.0) krunner (5.114.0 -> 5.115.0) kservice (5.114.0 -> 5.115.0) ktexteditor (5.114.0 -> 5.115.0) ktextwidgets (5.114.0 -> 5.115.0) kunitconversion (5.114.0 -> 5.115.0) kwallet (5.114.0 -> 5.115.0) kwayland (5.114.0 -> 5.115.0) kwidgetsaddons (5.114.0 -> 5.115.0) kwindowsystem (5.114.0 -> 5.115.0) kxmlgui (5.114.0 -> 5.115.0) libKF5ModemManagerQt (5.114.0 -> 5.115.0) libKF5NetworkManagerQt (5.114.0 -> 5.115.0) libxml2 libxml2-python mcelog (196 -> 197) plasma-framework (5.114.0 -> 5.115.0) prison-qt5 (5.114.0 -> 5.115.0) purpose (5.114.0 -> 5.115.0) qqc2-desktop-style (5.114.0 -> 5.115.0) solid (5.114.0 -> 5.115.0) sonnet (5.114.0 -> 5.115.0) syndication (5.114.0 -> 5.115.0) syntax-highlighting (5.114.0 -> 5.115.0) threadweaver (5.114.0 -> 5.115.0) xorg-x11-server yast2-trans (84.87.20240205.897f2593b3 -> 84.87.20240210.1383f689ba) === Details === ==== attica-qt5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Attica5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== baloo5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== bluez-qt ==== Version update (5.114.0 -> 5.115.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== breeze5-icons ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Update Google icon (kde#462165) ==== frameworkintegration ==== Version update (5.114.0 -> 5.115.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kImageAnnotator-Qt5 ==== - Fix build on Leap. The Qt6 packaging macros set the minimum compiler version - Change %post/%postun to %ldconfig_scriptlets - Rename the library to libkImageAnnotator-Qt$ver-0 to fix rpmlint errors on Leap ==== kactivities-stats ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kactivities5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== karchive ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kauth ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kbookmarks ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kcalendarcore ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * src/incidence.cpp - fix infinite looping ==== kcmutils ==== Version update (5.114.0 -> 5.115.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kcodecs ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kcompletion ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kconfig ==== Version update (5.114.0 -> 5.115.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kconfigwidgets ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kcontacts ==== Version update (5.114.0 -> 5.115.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kcoreaddons ==== Version update (5.114.0 -> 5.115.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Add isProcExists func to check if /proc exists * Determine UNIX process if "/proc" does not exist ==== kcrash ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdav ==== Version update (5.114.0 -> 5.115.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdbusaddons ==== Version update (5.114.0 -> 5.115.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdeclarative ==== Version update (5.114.0 -> 5.115.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Show GridDelegate labels as plaintext (kde#480106) ==== kded ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdelibs4support ==== Version update (5.114.0 -> 5.115.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdesu ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdnssd-framework ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kdoctools ==== Version update (5.114.0 -> 5.115.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kfilemetadata5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: kfilemetadata5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Fix compilation with latest TagLib git master * Fix build with taglib 2 ==== kglobalaccel ==== Version update (5.114.0 -> 5.115.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kguiaddons ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5GuiAddons5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kholidays ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * holiday_ie_en-gb - Add St Brigid's Day (kde#479832) ==== khtml ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== ki18n ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 - Add upstream change: * 0001-KCountrySubdivision-unbreak-support-of-iso-codes-4.1.patch ==== kiconthemes ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * CI: Don't require Windows test to pass ==== kidletime ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kimageformats ==== Version update (5.114.0 -> 5.115.0) Subpackages: kimageformats-eps - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kinit ==== Version update (5.114.0 -> 5.115.0) Subpackages: kinit-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kio ==== Version update (5.114.0 -> 5.115.0) Subpackages: kio-core kio-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * KDirModel: Consider invalid roots are local fs (kde#477039) * slavebase: abort mimetype emission when the worker was terminated (kde#474909, boo#1217175) * KDirModel: Allow expanding network directories in file picker again (kde#479531) * KCoreDirLister: updateDirectory: update parent folder if it is listed (kde#440712) * copyjob: Fix implicitly skipping files when copying (kde#479082) ==== kirigami2 ==== Version update (5.114.0 -> 5.115.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== kitemmodels ==== Version update (5.114.0 -> 5.115.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kitemviews ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kjobwidgets ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kjs ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== knewstuff ==== Version update (5.114.0 -> 5.115.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== knotifications ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== knotifyconfig ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kpackage ==== Version update (5.114.0 -> 5.115.0) Subpackages: kpackage-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kparts ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kpeople5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: kpeople5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kpty ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kquickcharts ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * CI: Don't require FreeBSD test to pass ==== kross ==== Version update (5.114.0 -> 5.115.0) Subpackages: kross-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== krunner ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kservice ==== Version update (5.114.0 -> 5.115.0) Subpackages: kservice-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== ktexteditor ==== Version update (5.114.0 -> 5.115.0) Subpackages: ktexteditor-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Add parent widget for diff dialogs ==== ktextwidgets ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kunitconversion ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kwallet ==== Version update (5.114.0 -> 5.115.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Emit the walletCreated signal in the KWalletD::pamOpen function if a new wallet is created during its call ==== kwayland ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kwidgetsaddons ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kwindowsystem ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== kxmlgui ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== libKF5ModemManagerQt ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== libKF5NetworkManagerQt ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader * Added libxml2-CVE-2024-25062.patch ==== libxml2-python ==== - Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader * Added libxml2-CVE-2024-25062.patch ==== mcelog ==== Version update (196 -> 197) - Update to version 197: * mcelog: Add kernel CONFIG message if /dev/mcelog isn't found * address comments * update mcelog manual * add --ping option to mcelog client * assign freed pointers to NULL pointer * mcelog: Fix two parsing issues ==== plasma-framework ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-desktoptheme plasma-framework-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== prison-qt5 ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - Changes since 5.114.0: * Enable exceptions for videoscannerworker.cpp ==== purpose ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== qqc2-desktop-style ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== solid ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== sonnet ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== syndication ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== syntax-highlighting ==== Version update (5.114.0 -> 5.115.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== threadweaver ==== Version update (5.114.0 -> 5.115.0) - Update to 5.115.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.115.0 - No code change since 5.114.0 ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Release 21.1.11 also covers fixes for security issue CVE-2022-46340 and bug numbers bsc#1205874, bsc#1217765 - Release 21.1.11 covers fixes for the following bug numbers, which are not mentioned in this changelog before: bsc#1218845, bsc#1218846, bsc#1216261, bsc#1216133, bsc#1216135 - Release 21.1.11 supersedes the following patches still used with xorg-x11-server 21.1.4 on sle15-sp5/Leap 15.5 and not mentioned in this changelog as superseded before: * U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch * U_bsc1216133-mi-reset-the-PointerWindows-reference-on-screen-swit.patch * U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch * U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch * U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch * U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch * bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch * bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch * bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch * bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch * bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch * bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch * bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patch * U_bsc1218845-glx-Call-XACE-hooks-on-the-GLX-buffer.patch * U_bsc1218846-ephyr-xwayland-Use-the-proper-private-key-for-cursor.patch - xserver sources of this release fixes segfault in Xvnc (bsc#1219311) ==== yast2-trans ==== Version update (84.87.20240205.897f2593b3 -> 84.87.20240210.1383f689ba) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240210.1383f689ba: * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Czech) * New POT for text domain 'control'. * Translated using Weblate (Slovak) * Translated using Weblate (Indonesian) * Translated using Weblate (Catalan) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Czech) * Translated using Weblate (Catalan)

1 0

20240209 update leaves /var/tmp/rpm-tmp.* files
by Joe Salmeri 13 Feb '24

13 Feb '24

Today I updated 3 different TW machines to 20240209 and after the update all 3 machines had left a bunch of files in /var/tmp -rw------- 1 root root 171 Feb 12 16:18 rpm-tmp.01nGYs -rw------- 1 root root 162 Feb 12 16:18 rpm-tmp.0F9SKk -rw------- 1 root root 584 Feb 12 16:18 rpm-tmp.0HRekP -rw------- 1 root root 144 Feb 12 16:18 rpm-tmp.0Jypl0 -rw------- 1 root root 189 Feb 12 16:18 rpm-tmp.0RjI2T -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.2xB1Y6 -rw------- 1 root root 323 Feb 12 16:18 rpm-tmp.32PHlX -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.32h0dA -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.3bKAhk -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.3ddfcm -rw------- 1 root root 179 Feb 12 16:18 rpm-tmp.4Telv8 -rw------- 1 root root 380 Feb 12 16:18 rpm-tmp.5Cv9y8 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.5Ydws8 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.645opu -rw------- 1 root root 325 Feb 12 16:18 rpm-tmp.6s5FVH -rw------- 1 root root 38 Feb 12 16:18 rpm-tmp.7S80ua -rw------- 1 root root 479 Feb 12 16:18 rpm-tmp.88jeF7 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.9ROL53 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.A1VJ1V -rw------- 1 root root 165 Feb 12 16:18 rpm-tmp.A6Nr26 -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.BwhXr0 -rw------- 1 root root 349 Feb 12 16:18 rpm-tmp.ChsDcv -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.DJF4kQ -rw------- 1 root root 239 Feb 12 16:17 rpm-tmp.DdHDoG -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.EUKCmc -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.EeQkFN -rw------- 1 root root 1.7K Feb 12 16:18 rpm-tmp.FfKVv8 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.GfMj9Y -rw------- 1 root root 188 Feb 12 16:18 rpm-tmp.GmaVhl -rw------- 1 root root 238 Feb 12 16:18 rpm-tmp.GzS1dI -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.HDXyF4 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.HHkRay -rw------- 1 root root 256 Feb 12 16:18 rpm-tmp.HMDScF -rw------- 1 root root 246 Feb 12 16:18 rpm-tmp.HSpmGn -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.Hru0EE -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.ICRTkV -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.IEYy9E -rw------- 1 root root 391 Feb 12 16:18 rpm-tmp.IL0NR7 -rw------- 1 root root 199 Feb 12 16:18 rpm-tmp.IN2sr5 -rw------- 1 root root 1.1K Feb 12 16:18 rpm-tmp.IQIXoq -rw------- 1 root root 171 Feb 12 16:18 rpm-tmp.JlMbdh -rw------- 1 root root 213 Feb 12 16:18 rpm-tmp.LPdSOd -rw------- 1 root root 128 Feb 12 16:18 rpm-tmp.McGZaQ -rw------- 1 root root 176 Feb 12 16:18 rpm-tmp.MiPDev -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.NFDtC8 -rw------- 1 root root 648 Feb 12 16:18 rpm-tmp.NQXReR -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.NU3mu7 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.Nla6pk -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.O8yOt0 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.OXNnzE -rw------- 1 root root 1011 Feb 12 16:18 rpm-tmp.OdRCaZ -rw------- 1 root root 385 Feb 12 16:18 rpm-tmp.OiLMv3 -rw------- 1 root root 77 Feb 12 16:18 rpm-tmp.PQNnsb -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.PyxMpE -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.Q7DE2q -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.QJqOpJ -rw------- 1 root root 221 Feb 12 16:17 rpm-tmp.RVlfPO -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.RvG30k -rw------- 1 root root 170 Feb 12 16:18 rpm-tmp.SXdLLB -rw------- 1 root root 157 Feb 12 16:18 rpm-tmp.Tegcec -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.UNJbqP -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.Uclk9f -rw------- 1 root root 162 Feb 12 16:18 rpm-tmp.V23nRN -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.VJpyV4 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.WQNOS6 -rw------- 1 root root 250 Feb 12 16:18 rpm-tmp.X3VQGe -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.XI8Z1A -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.XbniHV -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.Xgzzgy -rw------- 1 root root 226 Feb 12 16:18 rpm-tmp.ZXspiB -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.acZFfN -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.b9Eo2u -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.bVBv3V -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.cBtKPr -rw------- 1 root root 407 Feb 12 16:18 rpm-tmp.cpwVxQ -rw------- 1 root root 177 Feb 12 16:18 rpm-tmp.deXqRQ -rw------- 1 root root 473 Feb 12 16:18 rpm-tmp.eXKNa3 -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.ebkgdy -rw------- 1 root root 282 Feb 12 16:18 rpm-tmp.enKoqa -rw------- 1 root root 281 Feb 12 16:18 rpm-tmp.fLnsV6 -rw------- 1 root root 253 Feb 12 16:18 rpm-tmp.fPOAik -rw------- 1 root root 311 Feb 12 16:18 rpm-tmp.gCXEmA -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.gYLWMw -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.gZ1D4y -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.gtA1mi -rw------- 1 root root 1.1K Feb 12 16:18 rpm-tmp.iKT3wZ -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.iN6MBe -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.ihSqrS -rw------- 1 root root 58 Feb 12 16:18 rpm-tmp.jhJnuB -rw------- 1 root root 216 Feb 12 16:18 rpm-tmp.jvC295 -rw------- 1 root root 177 Feb 12 16:18 rpm-tmp.kdqEDK -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.lAtzd4 -rw------- 1 root root 37 Feb 12 16:18 rpm-tmp.m7XoST -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.mAhNxZ -rw------- 1 root root 342 Feb 12 16:18 rpm-tmp.mPnikk -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.mgzu25 -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.miR5wj -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.nxZMrN -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.oLlJv7 -rw------- 1 root root 233 Feb 12 16:18 rpm-tmp.oNq5XM -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.oPBK7r -rw------- 1 root root 1.2K Feb 12 16:18 rpm-tmp.oo69iv -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.pulrxy -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.qLSMkH -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.qYO9x9 -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.r4Xg8m -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.rcapz2 -rw------- 1 root root 249 Feb 12 16:18 rpm-tmp.rcyIeK -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.rqjfkL -rw------- 1 root root 213 Feb 12 16:18 rpm-tmp.rrSIOM -rw------- 1 root root 177 Feb 12 16:18 rpm-tmp.s1tD2u -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.seHiiV -rw------- 1 root root 405 Feb 12 16:18 rpm-tmp.soOnqV -rw------- 1 root root 638 Feb 12 16:18 rpm-tmp.us1iPc -rw------- 1 root root 194 Feb 12 16:18 rpm-tmp.v6Ntka -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.vBybPw -rw------- 1 root root 1.5K Feb 12 16:18 rpm-tmp.vOuhhF -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.vPTUsK -rw------- 1 root root 736 Feb 12 16:18 rpm-tmp.vuDMk2 -rw------- 1 root root 176 Feb 12 16:18 rpm-tmp.wDzk6a -rw------- 1 root root 176 Feb 12 16:18 rpm-tmp.wZbjGw -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.wkfVEx -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.x7BLUX -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.x9ikp0 -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.xN1FUj -rw------- 1 root root 479 Feb 12 16:18 rpm-tmp.xk12uC -rw------- 1 root root 546 Feb 12 16:18 rpm-tmp.yAFUij -rw------- 1 root root 166 Feb 12 16:18 rpm-tmp.ycAdgc -rw------- 1 root root 169 Feb 12 16:18 rpm-tmp.ygJPgG -rw------- 1 root root 134 Feb 12 16:18 rpm-tmp.zTQTPu Looks like they were part of the posttrans processing Do you want a bug report on this ? -- Regards, Joe

7 10

New Tumbleweed snapshot 20240211 released!
by Dominique Leuenberger 13 Feb '24

13 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (059+suse.538.ge7a5cff9 -> 059+suse.549.gc9f63878) freeipmi (1.6.11 -> 1.6.14) gcc13 (13.2.1+git8250 -> 13.2.1+git8285) glibc gtk4 (4.12.4 -> 4.12.5) ibus ibus_gtk4 pam pam-full-src python311 (3.11.7 -> 3.11.8) python311-core (3.11.7 -> 3.11.8) virt-manager === Details === ==== dracut ==== Version update (059+suse.538.ge7a5cff9 -> 059+suse.549.gc9f63878) - Update to version 059+suse.549.gc9f63878: * fix(overlayfs): split overlayfs mount in two steps (bsc#1219778) * fix(dracut-init.sh): handle decompress with `--sysroot` * fix(i18n): handle keymap includes with `--sysroot` * fix(dracut-systemd): replace `rd.udev.log-priority` with `rd.udev.log_level` * fix(i18n): handle symlinked keymap ==== freeipmi ==== Version update (1.6.11 -> 1.6.14) Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 - freeipmi 1.6.14 * Fix build issue common to non-x86 systems. - freeipmi 1.6.13 * Fix build issues on systems where inb/outb are declared with inline assembly. * Add additional sensor/event interpretations. - freeipmi 1.6.12 * Use poll() over select() to avoid fd limit in openipmi driver. * Fix potential portability problems on systems without cbrt(). * Minor documentation updates. ==== gcc13 ==== Version update (13.2.1+git8250 -> 13.2.1+git8285) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Add gcc13-sanitizer-remove-crypt-interception.patch to remove crypt and crypt_r interceptors. The crypt API change in SLE15 SP3 breaks them. [bsc#1219520] - Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285 - Add gcc13-pr88345-min-func-alignment.diff to add support for - fmin-function-alignment. [bsc#1214934] ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Add libnsl1 to baselibs.conf (bsc#1219640) - arm-dl-start-user.patch: arm: Remove wrong ldr from _dl_start_user (BZ [#31339]) ==== gtk4 ==== Version update (4.12.4 -> 4.12.5) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.5: + GtkColumnView: Fix a crash on dispose. + GtkEmojiChooser: - Update to CLDR v44. - Add more translations. + GtkFileDialog: - Return an error if no file is selected. - Make closing the portal file chooser work. + GtkDropDown: Fix display of the initial checkmark. + GtkShortcutsWindow: Reduce the minimum width. + GDK: Make the png loader safer against overflow. + Wayland: Fix cursor handling with graphics tablets. ==== ibus ==== Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - Fix dead keys with non-English keyboard in some applications (MAME, Wine) (boo#1218135) ibus-complete-preedit-signals-for-postprocesskeyevent.patch ibus-enginesimple-dont-commit-any-characters.patch ==== ibus_gtk4 ==== - Fix dead keys with non-English keyboard in some applications (MAME, Wine) (boo#1218135) ibus-complete-preedit-signals-for-postprocesskeyevent.patch ibus-enginesimple-dont-commit-any-characters.patch ==== pam ==== Subpackages: pam-32bit - pam.tmpfiles: Make sure the content of the /run directories get removed in case of a soft-reboot ==== pam-full-src ==== - pam.tmpfiles: Make sure the content of the /run directories get removed in case of a soft-reboot ==== python311 ==== Version update (3.11.7 -> 3.11.8) Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Update to 3.11.8: - Security - gh-113659: Skip .pth files with names starting with a dot or hidden file attribute. - Core and Builtins - gh-114887: Changed socket type validation in create_datagram_endpoint() to accept all non-stream sockets. This fixes a regression in compatibility with raw sockets. - gh-114388: Fix a RuntimeWarning emitted when assign an integer-like value that is not an instance of int to an attribute that corresponds to a C struct member of type T_UINT and T_ULONG. Fix a double RuntimeWarning emitted when assign a negative integer value to an attribute that corresponds to a C struct member of type T_UINT. - gh-89811: Check for a valid tp_version_tag before performing bytecode specializations that rely on this value being usable. - gh-113602: Fix an error that was causing the parser to try to overwrite existing errors and crashing in the process. Patch by Pablo Galindo - gh-113566: Fix a 3.11-specific crash when the repr of a Future is requested after the module has already been garbage-collected. - gh-106905: Use per AST-parser state rather than global state to track recursion depth within the AST parser to prevent potential race condition due to simultaneous parsing. - The issue primarily showed up in 3.11 by multithreaded users of ast.parse(). In 3.12 a change to when garbage collection can be triggered prevented the race condition from occurring. - gh-112716: Fix SystemError in the import statement and in __reduce__() methods of builtin types when __builtins__ is not a dict. - gh-105967: Workaround a bug in Appleâs macOS platform zlib library where zlib.crc32() and binascii.crc32() could produce incorrect results on multi-gigabyte inputs. Including when using zipfile on zips containing large data. - gh-94606: Fix UnicodeEncodeError when email.message.get_payload() reads a message with a Unicode surrogate character and the message content is not well-formed for surrogateescape encoding. Patch by Sidney Markowitz. - Library - gh-114965: Update bundled pip to 24.0 - gh-114959: tarfile no longer ignores errors when trying to extract a directory on top of a file. - gh-109475: Fix support of explicit option value âââ in argparse (e.g. --option=--). - gh-110190: Fix ctypes structs with array on Windows ARM64 platform by setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo - gh-113280: Fix a leak of open socket in rare cases when error occurred in ssl.SSLSocket creation. - gh-77749: email.policy.EmailPolicy.fold() now always encodes non-ASCII characters in headers if utf8 is false. - gh-114492: Make the result of termios.tcgetattr() reproducible on Alpine Linux. Previously it could leave a random garbage in some fields. - gh-75128: Ignore an OSError in asyncio.BaseEventLoop.create_server() when IPv6 is available but the interface cannot actually support it. - gh-114257: Dismiss the FileNotFound error in ctypes.util.find_library() and just return None on Linux. - gh-101438: Avoid reference cycle in ElementTree.iterparse. The iterator returned by ElementTree.iterparse may hold on to a file descriptor. The reference cycle prevented prompt clean-up of the file descriptor if the returned iterator was not exhausted. - gh-104522: OSError raised when run a subprocess now only has filename attribute set to cwd if the error was caused by a failed attempt to change the current directory. - gh-109534: Fix a reference leak in asyncio.selector_events.BaseSelectorEventLoop when SSL handshakes fail. Patch contributed by Jamie Phan. - gh-114077: Fix possible OverflowError in socket.socket.sendfile() when pass count larger than 2 GiB on 32-bit platform. - gh-114014: Fixed a bug in fractions.Fraction where an invalid string using d in the decimals part creates a different error compared to other invalid letters/characters. Patch by Jeremiah Gabriel Pascual. - gh-113951: Fix the behavior of tag_unbind() methods of tkinter.Text and tkinter.Canvas classes with three arguments. Previously, widget.tag_unbind(tag, sequence, funcid) destroyed the current binding for sequence, leaving sequence unbound, and deleted the funcid command. Now it removes only funcid from the binding for sequence, keeping other commands, and deletes the funcid command. It leaves sequence unbound only if funcid was the last bound command. - gh-113877: Fix tkinter method winfo_pathname() on 64-bit Windows. - gh-113781: Silence unraisable AttributeError when warnings are emitted during Python finalization. - gh-113594: Fix UnicodeEncodeError in email when re-fold lines that contain unknown-8bit encoded part followed by non-unknown-8bit encoded part. - gh-113538: In asyncio.StreamReaderProtocol.connection_made(), there is callback that logs an error if the task wrapping the âconnected callbackâ fails. This callback would itself fail if the task was cancelled. Prevent this by checking whether the task was cancelled first. If so, close the transport but donât log an error. - gh-85567: Fix resource warnings for unclosed files in pickle and ... changelog too long, skipping 159 lines ... - support-expat-CVE-2022-25236-patched.patch ==== python311-core ==== Version update (3.11.7 -> 3.11.8) Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Update to 3.11.8: - Security - gh-113659: Skip .pth files with names starting with a dot or hidden file attribute. - Core and Builtins - gh-114887: Changed socket type validation in create_datagram_endpoint() to accept all non-stream sockets. This fixes a regression in compatibility with raw sockets. - gh-114388: Fix a RuntimeWarning emitted when assign an integer-like value that is not an instance of int to an attribute that corresponds to a C struct member of type T_UINT and T_ULONG. Fix a double RuntimeWarning emitted when assign a negative integer value to an attribute that corresponds to a C struct member of type T_UINT. - gh-89811: Check for a valid tp_version_tag before performing bytecode specializations that rely on this value being usable. - gh-113602: Fix an error that was causing the parser to try to overwrite existing errors and crashing in the process. Patch by Pablo Galindo - gh-113566: Fix a 3.11-specific crash when the repr of a Future is requested after the module has already been garbage-collected. - gh-106905: Use per AST-parser state rather than global state to track recursion depth within the AST parser to prevent potential race condition due to simultaneous parsing. - The issue primarily showed up in 3.11 by multithreaded users of ast.parse(). In 3.12 a change to when garbage collection can be triggered prevented the race condition from occurring. - gh-112716: Fix SystemError in the import statement and in __reduce__() methods of builtin types when __builtins__ is not a dict. - gh-105967: Workaround a bug in Appleâs macOS platform zlib library where zlib.crc32() and binascii.crc32() could produce incorrect results on multi-gigabyte inputs. Including when using zipfile on zips containing large data. - gh-94606: Fix UnicodeEncodeError when email.message.get_payload() reads a message with a Unicode surrogate character and the message content is not well-formed for surrogateescape encoding. Patch by Sidney Markowitz. - Library - gh-114965: Update bundled pip to 24.0 - gh-114959: tarfile no longer ignores errors when trying to extract a directory on top of a file. - gh-109475: Fix support of explicit option value âââ in argparse (e.g. --option=--). - gh-110190: Fix ctypes structs with array on Windows ARM64 platform by setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo - gh-113280: Fix a leak of open socket in rare cases when error occurred in ssl.SSLSocket creation. - gh-77749: email.policy.EmailPolicy.fold() now always encodes non-ASCII characters in headers if utf8 is false. - gh-114492: Make the result of termios.tcgetattr() reproducible on Alpine Linux. Previously it could leave a random garbage in some fields. - gh-75128: Ignore an OSError in asyncio.BaseEventLoop.create_server() when IPv6 is available but the interface cannot actually support it. - gh-114257: Dismiss the FileNotFound error in ctypes.util.find_library() and just return None on Linux. - gh-101438: Avoid reference cycle in ElementTree.iterparse. The iterator returned by ElementTree.iterparse may hold on to a file descriptor. The reference cycle prevented prompt clean-up of the file descriptor if the returned iterator was not exhausted. - gh-104522: OSError raised when run a subprocess now only has filename attribute set to cwd if the error was caused by a failed attempt to change the current directory. - gh-109534: Fix a reference leak in asyncio.selector_events.BaseSelectorEventLoop when SSL handshakes fail. Patch contributed by Jamie Phan. - gh-114077: Fix possible OverflowError in socket.socket.sendfile() when pass count larger than 2 GiB on 32-bit platform. - gh-114014: Fixed a bug in fractions.Fraction where an invalid string using d in the decimals part creates a different error compared to other invalid letters/characters. Patch by Jeremiah Gabriel Pascual. - gh-113951: Fix the behavior of tag_unbind() methods of tkinter.Text and tkinter.Canvas classes with three arguments. Previously, widget.tag_unbind(tag, sequence, funcid) destroyed the current binding for sequence, leaving sequence unbound, and deleted the funcid command. Now it removes only funcid from the binding for sequence, keeping other commands, and deletes the funcid command. It leaves sequence unbound only if funcid was the last bound command. - gh-113877: Fix tkinter method winfo_pathname() on 64-bit Windows. - gh-113781: Silence unraisable AttributeError when warnings are emitted during Python finalization. - gh-113594: Fix UnicodeEncodeError in email when re-fold lines that contain unknown-8bit encoded part followed by non-unknown-8bit encoded part. - gh-113538: In asyncio.StreamReaderProtocol.connection_made(), there is callback that logs an error if the task wrapping the âconnected callbackâ fails. This callback would itself fail if the task was cancelled. Prevent this by checking whether the task was cancelled first. If so, close the transport but donât log an error. - gh-85567: Fix resource warnings for unclosed files in pickle and ... changelog too long, skipping 159 lines ... - support-expat-CVE-2022-25236-patched.patch ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Handle case where vm-install no longer exists on the host. This is related to bsc#1219133. virt-install.rb

1 0

20240209 postfix.service broken
by Joe Salmeri 12 Feb '24

12 Feb '24

postfix.service fails to start after update to 20240209 /usr/bin/systemd-sysusers --replace=/usr/lib/sysusers.d/postfix-user.conf - Executing upgrade-configuration. postfix: fatal: bad string length 0 < 1: myhostname = Updating /etc/sysconfig/postfix ... Updating /etc/sysconfig/mail ... I do not have any custom changes to the default configuration systemctl start postfix.service Job for postfix.service failed because the control process exited with error code. See "systemctl status postfix.service" and "journalctl -xeu postfix.service" for details. systemctl status postfix.service × postfix.service - Postfix Mail Transport Agent Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; preset: enabled) Active: failed (Result: exit-code) since Mon 2024-02-12 18:01:09 EST; 7s ago Process: 15425 ExecStartPre=/bin/echo Starting mail service (Postfix) (code=exited, status=0/SUCCESS) Process: 15430 ExecStartPre=/usr/bin/touch /var/spool/postfix/pid/master.pid (code=exited, status=0/SUCCESS) Process: 15433 ExecStartPre=/sbin/restorecon -Rv /var/spool/postfix/pid/master.pid (code=exited, status=0/SUCCESS) Process: 15436 ExecStartPre=/usr/lib/postfix/systemd/config_postfix (code=exited, status=0/SUCCESS) Process: 15441 ExecStartPre=/usr/lib/postfix/systemd/update_chroot (code=exited, status=0/SUCCESS) Process: 15445 ExecStartPre=/usr/lib/postfix/systemd/update_postmaps (code=exited, status=0/SUCCESS) Process: 15471 ExecStart=/usr/sbin/postfix start (code=exited, status=1/FAILURE) Process: 15472 ExecStopPost=/usr/lib/postfix/systemd/cond_slp deregister (code=exited, status=0/SUCCESS) CPU: 319ms postfix/postmap[15457]: fatal: bad string length 0 < 1: myhostname = update_postmaps[15464]: postalias: fatal: bad string length 0 < 1: myhostname = postfix/postalias[15464]: fatal: bad string length 0 < 1: myhostname = update_postmaps[15467]: postalias: fatal: bad string length 0 < 1: myhostname = postfix/postalias[15467]: fatal: bad string length 0 < 1: myhostname = postfix[15471]: postfix: fatal: bad string length 0 < 1: myhostname = postfix[15471]: fatal: bad string length 0 < 1: myhostname = systemd[1]: postfix.service: Control process exited, code=exited, status=1/FAILU> systemd[1]: postfix.service: Failed with result 'exit-code'. systemd[1]: Failed to start Postfix Mail Transport Agent. Do you want a bug report ? -- Regards, Joe

1 0

Tighten permissions for DRM render nodes (/dev/dri/renderD128)
by Wolfgang Frisch 11 Feb '24

11 Feb '24

Hi, DRM render nodes [1] provide an interface for unprivileged GPU operations such as video encoding or off-screen rendering. They are currently world-writable in Factory: > crw-rw-rw- root:render /dev/dri/renderD128 This configuration allows every user, even `nobody`, to access the GPU drivers, cause load on the hardware and exploit hypothetical driver bugs. To our *current knowledge* this does not represent a security vulnerability. But given enough time and energy it very well might. It certainly does increase a local attack surface unnecessarily. Given the complexity of graphics drivers, maintaining such open permissions seems imprudent. While mode 0666 is the default [2], upstream has also been supporting an alternative configuration with mode 0660 and uaccess ACLs [3]. For context, here's how other distributions manage this: > Debian: mode 660 with uaccess > Ubuntu: mode 660 with uaccess > Fedora: mode 666 A submission [4] is underway to switch openSUSE Factory to this alternative configuration. This will result in Factory having these permissions: > crw-rw----+ root:render /dev/dri/renderD128 The impact of this change is likely to be zero for most users. If you have any workloads that depend on unprivileged GPU operations, you can simply add your user to the `render` group. Specific scenarios include: - Remote GPU access via ssh - Local GPU access by non-interactive users that aren't part of the render group yet, e.g. system users, cron jobs or `su` to another user. Best regards Wolfgang [1] https://dri.freedesktop.org/docs/drm/gpu/drm-uapi.html#render-nodes [2] https://github.com/systemd/systemd/blob/a3f5976ded023257f6299ca07b9749fd148… [3] https://github.com/systemd/systemd/blob/a3f5976ded023257f6299ca07b9749fd148… [4] https://build.opensuse.org/request/show/1128161 -- Wolfgang Frisch <wolfgang.frisch(a)suse.com> Security Engineer OpenPGP fingerprint: A2E6 B7D4 53E9 544F BC13 D26B D9B3 56BD 4D4A 2D15 SUSE Software Solutions Germany GmbH Maxfeldstr. 5, 90409 Nuremberg, Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

6 10

New Tumbleweed snapshot 20240209 released!
by Dominique Leuenberger 11 Feb '24

11 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.28.5 -> 2.30.0) c-ares (1.20.1 -> 1.26.0) distribution-logos-openSUSE (20230921 -> 20240207) fwupd (1.9.12 -> 1.9.13) gstreamer-plugins-bad libzypp (17.31.28 -> 17.31.31) lzip (1.23 -> 1.24) man numactl (2.0.17.8.g67984e5 -> 2.0.18.0.g3871b1c) polkit-default-privs (1550+20231213.09963a4 -> 1550+20240207.d833f4b) postgresql postgresql16 (16.1 -> 16.2) pulseaudio (16.1 -> 17.0) python-mysqlclient (2.2.1 -> 2.2.4) python-typing_extensions selinux-policy (20240116 -> 20240205) yast2-network (5.0.1 -> 5.0.2) === Details === ==== SDL2 ==== Version update (2.28.5 -> 2.30.0) - Update to release 2.30 * Added support for 2 bits-per-pixel indexed surface formats. * Added the function SDL_GameControllerGetSteamHandle() to get the Steam API handle for a controller, if available. * Added the event SDL_CONTROLLERSTEAMHANDLEUPDATED which is sent when the Steam API handle for a controller changes. This could also change the name, VID, and PID of the controller. * Added the environment variable SDL_LOGGING to control default log output. ==== c-ares ==== Version update (1.20.1 -> 1.26.0) - Ensure multibuild flavors result in different src names. - c-ares 1.26.0: * Event Thread support. Integrators are no longer required to monitor the file descriptors registered by c-ares for events and call ares_process() when enabling the event thread feature via ARES_OPT_EVENT_THREAD passed to ares_init_options(). * Added flags to are_dns_parse() to force RAW packet parsing * Mark ares_fds() as deprecated * Bug fixes - move tests into a build flavor to avoid gtest/gmock build loop - Update to version 1.25 Changes: o Rewrite ares_strsplit() as a wrapper for ares__buf_split() for memory safety reasons. o The ahost utility now uses ares_getaddrinfo() and returns both IPv4 and IPv6 addresses by default. Bug Fixes: o Tests: Live reverse lookups for Google's public DNS servers no longer return results, replace with CloudFlare pubic DNS servers. o Connection failures should increment the server failure count first or a retry might be enqueued to the same server o On systems that don't implement the ability to enumerate network interfaces the stubs used the wrong prototype. o Fix minor warnings and documentation typos o Fix support for older GoogleTest versions o getrandom() may require sys/random.h on some systems. o Fix building tests with symbol hiding enabled. - 0001-Use-RPM-compiler-options.patch: dropped, obsolete - Update to version 1.24 Features: * Add support for IPv6 link-local DNS servers. Nameserver formats can now accept the 0face suffix, and a new ares_get_servers_csv() function was added to return servers that can contain the link-local interface name. Changes: * Unbundle GoogleTest for test cases. Package maintainers will now need torequire GoogleTest (GMock) as a build dependency if building tests. New GoogleTest versions require C++14 or later. * Replace nameserver parsing code to use new memory-safe functions. * Replace the sortlist parser with new memory-safe functions. * Various warning fixes and dead code removal. Bugfixes: * Old Linux versions require POSIX_C_SOURCE or _GNU_SOURCE to compile with thread safety support * A non-responsive DNS server that caused timeouts wouldn't increment thefailure count, this would lead to other servers not being tried. Regression introduced in 1.22.0 * Some projects that depend on c-ares expect invalid parameter option valuespassed into ares_init_options() to simply be ignored. This behavior has been restored * getrandom() can fail if the kernel doesn't support the syscall, fall back to another random source * ares_cancel() when performing ares_gethostbyname() or ares_getaddrinfo()with AF_UNSPEC, if called after one address class was returned but before the other address class, it would return ARES_SUCCESS rather than ARES_ECANCELLED - disable-live-tests.patch: dropped, not needed - Update to version 1.23 Features: Introduce optional (but on by default) thread-safety for the c-ares library. This has no API nor ABI implications. resolv.conf in modern systems uses attempts and timeouts options instead of the old retrans and retry options. Query caching support based on TTL of responses. Can be enabled via ares_init_options() with ARES_OPT_QUERY_CACHE. Bugfixes: ares_init_options() for ARES_OPT_UDP_PORT and ARES_OPT_TCP_PORT accept theport in host byte order, but it was reading it as network byte order. Regression introduced in 1.20.0. ares_init_options() for ARES_FLAG_NOSEARCH was not being honored forares_getaddrinfo() or ares_gethostbyname(). Regression introduced in 1.16.0. Autotools MacOS and iOS version check was failing Environment variables passed to c-ares are meant to be an override for system configuration. Regression introduced in 1.22.0. Spelling fixes as detected by codespell. The timeout returned by ares_timeout() was truncated to milliseconds butvalidated to microseconds which could cause a user to attempt to process timeouts prior to the timeout actually expiring. CMake was not honoring CXXFLAGS passed in via the environment which couldcause compile and link errors with distribution hardening flags during packaging. Fix Windows UWP and Cygwin compilation. ares_set_servers_*() for legacy reasons needs to accept an empty server listand zero out all servers. This results in an inoperable channel and thus is only used in simulation testing, but we don't want to break users. Regression introduced in 1.21.0. Changes in version 1.22.1 Bugfixes: Fix /etc/hosts processing performance with all entries using same IPaddress. Large hosts files using the same IP address for all entries could use exponential time. Fix typos in manpages Fix OpenWatcom building Changes in version 1.22.0 Features: ares_reinit() is now implemented to re-read any system configuration and immediately apply to an existing ares channel The adig command line program has been rewritten and its format now more closely matches that of BIND's dig utility The new DNS message parser and writer functions have now been made public RFC9460 HTTPS and SVCB records are now supported RFC6698 TLSA records are now supported The server list is now internally dynamic and can be changed without impacting existing queries Hosts file processing is now cached until the file is detected to be changed to speed up repetitive lookups of large hosts files Changes: Internally all DNS messages are now written using the new DNS writing functions EDNS is now enabled by default Internal cleanups in function prototypes Bugfixes: Randomize retry penalties to prevent thundering herd issues when dns servers throttle requests Fix Windows build error for missing if_indextoname() - update to 1.21.0: * Replace multiple DNS hand-made parsers with new memory-safe DNS message parser * developer visible changes and bug fixes ==== distribution-logos-openSUSE ==== Version update (20230921 -> 20240207) Subpackages: distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - switch to a service using zstd - list the source url - Update Leap 15.6 branding poo#131666 ==== fwupd ==== Version update (1.9.12 -> 1.9.13) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.13: + This release adds the following features: - Add a timer inhibit if the daemon took a long time to startup. - Add a concept of 'Test Mode' rather than enabling specific plugins. - Do not idle-quit the daemon if there is a connected D-Bus client. + This release fixes the following bugs: - Allow plugins to opt-out of the child-device first depsolve. - Allow setting multiple flags in LVFS::DeviceFlags. - Do not migrate config comments for removed keys. - Do not request the Advantech BMC to reboot. - Do not warn the user about ESP when using MBR. - Fix a critical warning when adding a PixArt wireless device. - Fix migration of legacy config files. - Only save config values to the mutable config file. - Parse DS-20 descriptors earlier in device setup. - Store the version format in the history database to fix offline reports. - Use the correct GUID for matching realtek-mst and parade-lspcon. + This release adds support for the following hardware: - GoodWay Acer Dock. ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Require libvpl only on supported architectures (x86_64 and aarch64) ==== libzypp ==== Version update (17.31.28 -> 17.31.31) - tui: allow to access the underlying ostream of out::Info. - Add MLSep: Helper to produce not-NL-terminated multi line output. - version 17.31.31 (22) - applydeltaprm: Create target directory if it does not exist (bsc#1219442) - Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514) - Fix problems with EINTR in ExternalDataSource::getline (fixes bsc#1215698) - version 17.31.30 (22) - CheckAccessDeleted: fix running_in_container detection (bsc#1218782) - Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime (bsc#1218831) - Make Wakeup class EINTR safe. - Add a way to cancel media operations on shutdown (openSUSE/zypper#522) This patch adds a mechanism to signal libzypp that a shutdown was requested, usually when CTRL+C was pressed by the user. Currently only the media backend will utilize this, but can be extended to all code paths that use g_poll() to wait for events. - Manually poll fds for curl in MediaCurl. Using curl_easy_perform does not give us the required control on when we want to cancel a download. Switching to the MultiCurl implementation with a external poll() event loop will give us much more freedom and helps us to improve our Ctrl+C handling. - Move reusable curl poll code to curlhelper.h. - version 17.31.29 (22) ==== lzip ==== Version update (1.23 -> 1.24) - Update to release 1.24 * Added the command-line switches --empty-error and - -marking-error * The option -o/--output now preserves dates, permissions, and ownership of the file when (de)compressing exactly one file. * The option -o/--output now creates missing intermediate directories when writing to a file. ==== man ==== - Make lua scriplets more failsafe (boo#1219370) ==== numactl ==== Version update (2.0.17.8.g67984e5 -> 2.0.18.0.g3871b1c) Subpackages: libnuma1 - Update to version 2.0.18.0.g3871b1c: * Increase version number to 2.0.18 * man pages: fix table include preprocessor ==== polkit-default-privs ==== Version update (1550+20231213.09963a4 -> 1550+20240207.d833f4b) - Update to version 1550+20240207.d833f4b: * profiles: remove no longer used device-rebind action ==== postgresql ==== Subpackages: postgresql-contrib postgresql-server - bsc#1219340: Require fillup. ==== postgresql16 ==== Version update (16.1 -> 16.2) Subpackages: libpq5 postgresql16-contrib postgresql16-server - Upgrade to 16.2: * bsc#1219679, CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY. One step of a concurrent refresh command was run under weak security restrictions. If a materialized view's owner could persuade a superuser or other high-privileged user to perform a concurrent refresh on that view, the view's owner could control code executed with the privileges of the user running REFRESH. Fix things so that all user-determined code is run as the view's owner, as expected * If you use GIN indexes, you may need to reindex after updating to this release. * LLVM 18 is now supported. * https://www.postgresql.org/docs/release/16.2/ ==== pulseaudio ==== Version update (16.1 -> 17.0) Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse - Update to version 17.0: * Updates to ALSA UCM-based setups * Battery level indication to Bluetooth devices * Support for the Bluetooth FastStream codec * webrtc-audio-processing dependency updated * Trigger role groups added to module-role-cork * XDG base directory spec for profile-set loading * PA_RATE_MAX increased * webrtc-audio-processing dependency updated For details, see: https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/17.0/ - Drop obsoleted patches: echo-cancel-add-webrtc-AEC3-support.patch build-sys-Bump-cpp_std-to-c-17.patch build-sys-Bump-webrtc-audio-processing-dependency.patch ==== python-mysqlclient ==== Version update (2.2.1 -> 2.2.4) - update to 2.2.4: * Support ssl=True in connect(). ==== python-typing_extensions ==== - Add backport-recent-implementation-of-protocol.patch upstream patch gh#python/typing_extensions@004b893ddce2 ==== selinux-policy ==== Version update (20240116 -> 20240205) Subpackages: selinux-policy-targeted - Update to version 20240205: * Allow gpg manage rpm cache * Allow login_userdomain name_bind to howl and xmsg udp ports * Allow rules for confined users logged in plasma * Label /dev/iommu with iommu_device_t * Remove duplicate file context entries in /run * Dontaudit getty and plymouth the checkpoint_restore capability * Allow su domains write login records * Revert "Allow su domains write login records" * Allow login_userdomain delete session dbusd tmp socket files * Allow unix dgram sendto between exim processes * Allow su domains write login records * Allow smbd_t to watch user_home_dir_t if samba_enable_home_dirs is on * Allow chronyd-restricted read chronyd key files * Allow conntrackd_t to use bpf capability2 * Allow systemd-networkd manage its runtime socket files * Allow init_t nnp domain transition to colord_t * Allow polkit status systemd services * nova: Fix duplicate declarations * Allow httpd work with PrivateTmp * Add interfaces for watching and reading ifconfig_var_run_t * Allow collectd read raw fixed disk device * Allow collectd read udev pid files * Set correct label on /etc/pki/pki-tomcat/kra * Allow systemd domains watch system dbus pid socket files * Allow certmonger read network sysctls * Allow mdadm list stratisd data directories * Allow syslog to run unconfined scripts conditionally * Allow syslogd_t nnp_transition to syslogd_unconfined_script_t * Allow qatlib set attributes of vfio device files * Allow systemd-sleep set attributes of efivarfs files * Allow samba-dcerpcd read public files * Allow spamd_update_t the sys_ptrace capability in user namespace * Allow bluetooth devices work with alsa * Allow alsa get attributes filesystems with extended attributes * Allow hypervkvp_t write access to NetworkManager_etc_rw_t * Add interface for write-only access to NetworkManager rw conf * Allow systemd-sleep send a message to syslog over a unix dgram socket * Allow init create and use netlink netfilter socket * Allow qatlib load kernel modules * Allow qatlib run lspci * Allow qatlib manage its private runtime socket files * Allow qatlib read/write vfio devices * Label /etc/redis.conf with redis_conf_t * Remove the lockdown-class rules from the policy * Allow init read all non-security socket files * Replace redundant dnsmasq pattern macros * Remove unneeded symlink perms in dnsmasq.if * Add additions to dnsmasq interface * Allow nvme_stas_t create and use netlink kobject uevent socket * Allow collectd connect to statsd port * Allow keepalived_t to use sys_ptrace of cap_userns * Allow dovecot_auth_t connect to postgresql using UNIX socket * Make named_zone_t and named_var_run_t a part of the mountpoint attribute * Allow sysadm execute traceroute in sysadm_t domain using sudo * Allow sysadm execute tcpdump in sysadm_t domain using sudo * Allow opafm search nfs directories * Add support for syslogd unconfined scripts * Allow gpsd use /dev/gnss devices * Allow gpg read rpm cache * Allow virtqemud additional permissions * Allow virtqemud manage its private lock files * Allow virtqemud use the io_uring api * Allow ddclient send e-mail notifications * Allow postfix_master_t map postfix data files * Allow init create and use vsock sockets * Allow thumb_t append to init unix domain stream sockets * Label /dev/vas with vas_device_t * Create interface selinux_watch_config and add it to SELinux users * Update cifs interfaces to include fs_search_auto_mountpoints() * Allow sudodomain read var auth files * Allow spamd_update_t read hardware state information * Allow virtnetworkd domain transition on tc command execution * Allow sendmail MTA connect to sendmail LDA * Allow auditd read all domains process state * Allow rsync read network sysctls * Add dhcpcd bpf capability to run bpf programs * Dontaudit systemd-hwdb dac_override capability * Allow systemd-sleep create efivarfs files * Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on * Allow graphical applications work in Wayland * Allow kdump work with PrivateTmp * Allow dovecot-auth work with PrivateTmp * Allow nfsd get attributes of all filesystems * Allow unconfined_domain_type use io_uring cmd on domain * ci: Only run Rawhide revdeps tests on the rawhide branch * Label /var/run/auditd.state as auditd_var_run_t * Allow fido-device-onboard (FDO) read the crack database * Allow ip an explicit domain transition to other domains * Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t * Allow winbind_rpcd_t processes access when samba_export_all_* is on * Enable NetworkManager and dhclient to use initramfs-configured DHCP connection * Allow ntp to bind and connect to ntske port. ==== yast2-network ==== Version update (5.0.1 -> 5.0.2) - Consider firmware configured interfaces as non bridgeable (bsc#1218595). - 5.0.2

1 0

BOINC and NVIDIA
by Ed Goforth 11 Feb '24

11 Feb '24

Since the latest Tumbleweed update, BOINC is no longer recognizing my NVIDIA card. farmville:~ # cat /etc/os-release NAME="openSUSE Tumbleweed" # VERSION="20240209" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20240209" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" # CPE 2.3 format, boo#1217921 CPE_NAME="cpe:2.3:o:opensuse:tumbleweed:20240209:*:*:*:*:*:*:*" #CPE 2.2 format #CPE_NAME="cpe:/o:opensuse:tumbleweed:20240209" BUG_REPORT_URL="https://bugzilla.opensuse.org" SUPPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo-Tumbleweed" I have not yet tried doing a rollback because there were several thousand package updates as part of that last zypper dup. The card is definitely seen and utilized by the system, and nvidia-smi, nvidia-settings and clinfo can see it. Even boinc --detect_cpus sees it, though there is a<warning>[coproc] cuMemGetInfo(0) returned 201</warning> Any suggestions?Thanks,Ed

1 0

Bug in glibc 2.39
by Larry Finger 09 Feb '24

09 Feb '24

Hi, Since the 20240202 TW snapshot, glibc 2.38 was replaced with 2.39. Since then, USB passthrou for VirtualBox has failed. This was verified by reinstalling 2.38 from the Slowroll repos to a fully updated TW system. None of the listed changes leap out as a probable cause, but I hope that this will jog the memory of one or more of the devs. The bug report is at boo#1219766. Thanks, Larry

1 0

Tumbleweed - Review of the week 2024/06
by Dominique Leuenberger 09 Feb '24

09 Feb '24

Dear Tumbleweed users and hackers, Last week’s report was written on Friday, but it was only published on Monday by accident. As it nonetheless only covered changes to Friday, I will include changes to Tumbleweed since I last WROTE a review – not since I last published one. This means this weekly review covers the six snapshots 0202, 0204…0208. This week, glibc was updated to version 2.39, and Python modules are newly also built for Python 3.12. For this kind of change, we had to give the control to rebuild the dependency chains to OBS, which in turn resulted in larger snapshots. As those updates were done, the rebuild strategy was reset to ‘rebuild packages with local source changes plus things identified by our bot needing a rebuild’ The most interesting changes of this week were: * glibc 2.39 * Python 3.12 (python modules built for it, but /usr/bin/python3 will still point to Python 3.11 for now) * Gstreamer 1.22.9 * QEmu 8.2.0 * timezone 2024a * Mesa 23.3.5 * AppArmor 3.1.7 * Linux kernel 6.7.4 With glibc and python off the queue, some of the larger changes are gone from our todo. But we’re far from done with the list – and new things keep on appearing. Just the way we like it. We are currently testing the integration of these changes: * Python 3.12.2 * A bunch of cleanup work to eliminate more of python2 (boo#1219306) * dbus-broker: a big step forward; upgrades seem to be an issue that needs to be addressed * libxml 2.12.x: slow progress * c-ares 1.26.0: The release cycle could be addressed (splitting tests out into a 2nd run). We expect to ship this soon. * GCC 14: our usual 2-phase approach to introduce it. Currently working on phase 1, meaning GCC14 will be providing the base libraries (libgcc_s1, libstdc++…). The compiler itself will stay at version 13 for now. Only one issue left: qemu fails to build; phase 2 testing has started, but will take several weeks Cheers, Dominique

1 0

Including packages in main repositories vs additional
by Michal Suchánek 09 Feb '24

09 Feb '24

maintainer-specific repositories Reply-To: In-Reply-To: <CAEg-Je8NafVZu2QUPCFKQKAEYrbjSV+oRJ40d9QSFCWXY5TDvA(a)mail.gmail.com> Hello, On Fri, Feb 09, 2024 at 08:54:18AM -0500, Neal Gompa wrote: > We also should be striving for things to be integrated in the main > repositories rather than telling people to activate random extra OBS > projects, because random repos on people's systems are just asking for > trouble in a whole new way. Should we? Apparently the Calibre maintainer wants to direct users to his repository rather than accept package changes that would make it possible to include Calibre in Leap: https://bugzilla.opensuse.org/show_bug.cgi?id=1218707 SLE is slow in taking the packages that are *really* required by Calibre (eg. there is cmake update pending) so it's not possible to include yet, anyway. Still with how the package is maintained it's not really feasible at all. If there is a goal to itegrate things into the main repositories how to tackle problems like this? Thanks Michal

2 1

New Tumbleweed snapshot 20240208 released!
by Dominique Leuenberger 09 Feb '24

09 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gwenview5 inxi (3.3.32 -> 3.3.33) kdsoap libgit2 (1.7.1 -> 1.7.2) libidn2 (2.3.4 -> 2.3.7) libjxl (0.9.0 -> 0.9.2) libjxl-gtk (0.9.0 -> 0.9.2) libxfce4ui (4.18.4 -> 4.18.5) libxfce4util (4.18.1 -> 4.18.2) nvidia-open-driver-G06-signed openssl-1_1 openssl-3 permissions (1699_20230602 -> 1699_20240206) qt6-wayland rebootmgr (2.1 -> 2.2) spectacle systemd transmission === Details === ==== gwenview5 ==== Subpackages: gwenview5-lang - Add patch to support newer kImageAnnotator: * 0001-Support-building-against-kImageAnnotator-Qt5-as-well.patch ==== inxi ==== Version update (3.3.32 -> 3.3.33) - Updated to version 3.3.33: + /usr/share/doc/packages/inxi/inxi.changelog. ==== kdsoap ==== - Fix package docs - Fix build to handle changes in (open)SUSE specific cmake macros, no user visible changes ==== libgit2 ==== Version update (1.7.1 -> 1.7.2) - update to 1.7.2: * CVE-2024-24574: infinite loop condition given specially crafted inputs (boo#1219664) * CVE-2024-24577: arbitrary code execution due to heap corruption in git_index_add (boo#1219660) * Fix a bug in the smart transport negotiation could have caused an out-of-bounds read when a remote server did not advertise capabilities. ==== libidn2 ==== Version update (2.3.4 -> 2.3.7) Subpackages: libidn2-0 libidn2-0-32bit libidn2-lang - update to 2.3.7: * Un-deprecate idn2_to_ascii_4i and make it NUL terminate output * Export punycode APIs * Developer visible code maintenance ==== libjxl ==== Version update (0.9.0 -> 0.9.2) Subpackages: libjxl0_9 libjxl0_9-x86-64-v3 - Update to release 0.9.2 * Fixed some unspecified bugs in the gdk-pixbuf plugin ==== libjxl-gtk ==== Version update (0.9.0 -> 0.9.2) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update to release 0.9.2 * Fixed some unspecified bugs in the gdk-pixbuf plugin ==== libxfce4ui ==== Version update (4.18.4 -> 4.18.5) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.18.5 * Update copyright year * build: Search for bind_textdomain_codeset in libintl too * sm-client: Reset SmcConnection when IceConnection is closed on error * docs: Improve xfce_sm_client_get() * shortcuts-grabber: Fix filtering by level * shortcuts-grabber: Simplify filtering by group * shortcuts-grabber: Variable renaming * shortcuts-grabber: Filter grabbing by key level * Detect keyboard shortcuts with only single modifier keys on key release * Translation Updates ==== libxfce4util ==== Version update (4.18.1 -> 4.18.2) Subpackages: libxfce4util-lang libxfce4util7 typelib-1_0-Libxfce4util-1_0 - Update to version 4.18.2 * Update copyright year * Search for bind_textdomain_codeset in libintl too * xfce-rc: Add support for the LANGUAGE environment variable * Add missing config.h includes * Improve checksum calculation (#17) * xfce-rc: Document the fact that delimiter escaping is not supported * xfce-rc: Properly write translated entries when available * Update bug report address ==== nvidia-open-driver-G06-signed ==== - provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117) * this makes it easy to replace the package from nVidia's CUDA repository with this presigned package ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Rename engines directories to the same name like in SLE: /etc/ssl/engines1_1.d -> /etc/ssl/engines1.1.d /etc/ssl/engdef1_1.d -> /etc/ssl/engdef1.1.d * Add migration script to move files (bsc#1219562) /etc/ssl/engines.d/* -> /etc/ssl/engines1.1.d /etc/ssl/engdef.d/* -> /etc/ssl/engdef1.1.d - Security fix: [bsc#1219243, CVE-2024-0727] * Add NULL checks where ContentInfo data can be NULL * Add openssl-CVE-2024-0727.patch ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Add migration script to move old files (bsc#1219562) /etc/ssl/engines.d/* -> /etc/ssl/engines1.1.d.rpmsave /etc/ssl/engdef.d/* -> /etc/ssl/engdef1.1.d.rpmsave They will be later restored by openssl-1_1 package to engines1.1.d and engdef1.1.d - Security fix: [bsc#1219243, CVE-2024-0727] * Add NULL checks where ContentInfo data can be NULL * Add openssl-CVE-2024-0727.patch ==== permissions ==== Version update (1699_20230602 -> 1699_20240206) Subpackages: chkstat permissions-config - Drop superfluous mkdir /usr/share/permissions/permissions.d This is now created by the Makefile. See also commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c - Update to version 20240206: * Whitelisting libgtop_server2 (bsc#1218921) * Removing bogus whitespaces * chkstat: harmonize and transform to a more compact coding and doc style * gitignore: also ignore hidden ctags * build: Create /usr/share/permissions/permissions.d for packagers * profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory * profiles: drop /etc/ftpusers which is no longer shipped in netcfg ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Add patch to fix a frequent crash (kde#479302) * client-avoid-creating-decorations-in-the-render-thread.patch ==== rebootmgr ==== Version update (2.1 -> 2.2) - Update to version 2.2 - Make sure /run/reboot-needed get's deleted after a soft-reboot ==== spectacle ==== Subpackages: spectacle-lang - Drop meanwhile unneeeded BuildReqs on kColorPicker and kImageAnnotator ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Drop python3-pefile dependency from the experimental package. MicroOs is fond of the experimental stuff but OTOH it doesn't ship python3. Let's drop the dependency for now, users of ukify are invited to install python3-pe manually. - Move systemd-reboot.service from udev to the main package as this service is useful in containers. ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Add correct creation of the transmission user/group (needed by the latest RPM 4.19). - Remove now useless Provides in the daemon subpackage.

1 0

Issues with Leap / Tumbleweed VMWare images?
by Johannes Kastl 09 Feb '24

09 Feb '24

Hi all, short question, are the Leap and Tumbleweed VMWare disk images (VMDK) tested automatically in some way? Are there any regressions known? For a customer I tried to get something deployed in their vSphere, but as soon as I try some automatic configuration (cloud-init), Terraform/OpenTofu spits out an issue and the machine neither gets an IP address and no user configuration. So unfortunately I cannot log in to troubleshoot... :-( When launching without cloud-init configuration the VM boots fine and shows the interactive setup screen. I also gets an IP address via DHCP. I do not want to pollute the factory list with something that is more of a support question, but the people in the know regarding openQA testing might be on this list... :-) Have a nice evening/day everyone! Johannes

2 1

New Tumbleweed snapshot 20240207 released!
by Dominique Leuenberger 08 Feb '24

08 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor (3.1.6 -> 3.1.7) gcc13 imlib2 (1.12.1 -> 1.12.2) kernel-source (6.7.2 -> 6.7.4) libapparmor (3.1.6 -> 3.1.7) libgarcon (4.18.1 -> 4.18.2) microos-tools (2.21+git9 -> 2.21+git11) numactl (2.0.17.4.g63befa8 -> 2.0.17.8.g67984e5) virtualbox virtualbox-kmp (7.0.14_k6.7.2_1 -> 7.0.14_k6.7.4_1) webkit2gtk3 (2.42.4 -> 2.42.5) webkit2gtk3-soup2 (2.42.4 -> 2.42.5) yast2-installation (5.0.5 -> 5.0.6) === Details === ==== apparmor ==== Version update (3.1.6 -> 3.1.7) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Update to AppArmor 3.1.7 - aa-logprof: don't skip exec events in hats - fix aa-cleanprof to work with named profiles - add permissions in various abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7 for the full list of changes - drop upstreamed apparmor-systemd-sessions.patch ==== gcc13 ==== Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Use %{_target_cpu} to determine host and build. ==== imlib2 ==== Version update (1.12.1 -> 1.12.2) Subpackages: imlib2-loaders libImlib2-1 - update to 1.12.2: * Fixes for Y4M, ANI, PNG and JPG loaders ==== kernel-source ==== Version update (6.7.2 -> 6.7.4) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-macros - Linux 6.7.4 (bsc#1012628). - asm-generic: make sparse happy with odd-sized put_unaligned_*() (bsc#1012628). - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (bsc#1012628). - arm64: irq: set the correct node for VMAP stack (bsc#1012628). - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs (bsc#1012628). - powerpc: Fix build error due to is_valid_bugaddr() (bsc#1012628). - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (bsc#1012628). - powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() (bsc#1012628). - x86/boot: Ignore NMIs during very early boot (bsc#1012628). - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (bsc#1012628). - powerpc/lib: Validate size for vector operations (bsc#1012628). - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (bsc#1012628). - sched/numa: Fix mm numa_scan_seq based unconditional scan (bsc#1012628). - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (bsc#1012628). - debugobjects: Stop accessing objects after releasing hash bucket lock (bsc#1012628). - sched/fair: Fix tg->load when offlining a CPU (bsc#1012628). - regulator: core: Only increment use_count when enable_count changes (bsc#1012628). - audit: Send netlink ACK before setting connection in auditd_set (bsc#1012628). - ACPI: tables: Correct and clean up the logic of acpi_parse_entries_array() (bsc#1012628). - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (bsc#1012628). - PNP: ACPI: fix fortify warning (bsc#1012628). - ACPI: extlog: fix NULL pointer dereference check (bsc#1012628). - selftests/nolibc: fix testcase status alignment (bsc#1012628). - ACPI: NUMA: Fix the logic of getting the fake_pxm value (bsc#1012628). - kunit: tool: fix parsing of test attributes (bsc#1012628). - kunit: Reset test->priv after each param iteration (bsc#1012628). - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (bsc#1012628). - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (bsc#1012628). - OPP: The level field is always of unsigned int type (bsc#1012628). - thermal: core: Fix thermal zone suspend-resume synchronization (bsc#1012628). - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (bsc#1012628). - UBSAN: array-index-out-of-bounds in dtSplitRoot (bsc#1012628). - jfs: fix slab-out-of-bounds Read in dtSearch (bsc#1012628). - jfs: fix array-index-out-of-bounds in dbAdjTree (bsc#1012628). - jfs: fix uaf in jfs_evict_inode (bsc#1012628). - hwrng: starfive - Fix dev_err_probe return error (bsc#1012628). - crypto: p10-aes-gcm - Avoid -Wstringop-overflow warnings (bsc#1012628). - pstore/ram: Fix crash when setting number of cpus to an odd number (bsc#1012628). - erofs: fix up compacted indexes for block size < 4096 (bsc#1012628). - crypto: starfive - Fix dev_err_probe return error (bsc#1012628). - crypto: octeontx2 - Fix cptvf driver cleanup (bsc#1012628). - erofs: fix ztailpacking for subpage compressed blocks (bsc#1012628). - crypto: stm32/crc32 - fix parsing list of devices (bsc#1012628). - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (bsc#1012628). - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (bsc#1012628). - jfs: fix array-index-out-of-bounds in diNewExt (bsc#1012628). - s390/boot: always align vmalloc area on segment boundary (bsc#1012628). - arch: consolidate arch_irq_work_raise prototypes (bsc#1012628). - arch: fix asm-offsets.c building with -Wmissing-prototypes (bsc#1012628). - s390/vfio-ap: fix sysfs status attribute for AP queue devices (bsc#1012628). - s390/ptrace: handle setting of fpc register correctly (bsc#1012628). - KVM: s390: fix setting of fpc register (bsc#1012628). - sysctl: Fix out of bounds access for empty sysctl registers (bsc#1012628). - SUNRPC: Fix a suspicious RCU usage warning (bsc#1012628). - ext4: treat end of range as exclusive in ext4_zero_range() (bsc#1012628). - smb: client: fix renaming of reparse points (bsc#1012628). - smb: client: fix hardlinking of reparse points (bsc#1012628). - cifs: fix in logging in cifs_chan_update_iface (bsc#1012628). - ecryptfs: Reject casefold directory inodes (bsc#1012628). - ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1012628). - ext4: unify the type of flexbg_size to unsigned int (bsc#1012628). - ext4: remove unnecessary check from alloc_flex_gd() (bsc#1012628). ... changelog too long, skipping 1153 lines ... - commit f71b395 ==== libapparmor ==== Version update (3.1.6 -> 3.1.7) - Update to AppArmor 3.1.7 - aa-logprof: don't skip exec events in hats - fix aa-cleanprof to work with named profiles - add permissions in various abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7 for the full list of changes - drop upstreamed apparmor-systemd-sessions.patch ==== libgarcon ==== Version update (4.18.1 -> 4.18.2) Subpackages: libgarcon-1-0 libgarcon-data libgarcon-lang - Update to version 4.18.2 * Update copyright year * garcon-gtk: Remove weak ref on GarconMenu on finalize() * Use target desktop files instead of symlinks (Fixes #1) * garcon-gtk: Avoid populating a wrong menu * garcon-gtk: Prevent use-after-free when loading garcon menu * Add icon at 64px, clean up SVG metadata * Translation Updates ==== microos-tools ==== Version update (2.21+git9 -> 2.21+git11) - Update to version 2.21+git11: * Install man-online alias only for bash ==== numactl ==== Version update (2.0.17.4.g63befa8 -> 2.0.17.8.g67984e5) Subpackages: libnuma1 - Update to version 2.0.17.8.g67984e5: * numastat: Print package version number instead of own. * numastat: Remove commented out perl code * Check for MPOL_PREFERRED_MANY lazily * libnuma: add numa_set_mempolicy_home_node API ==== virtualbox ==== - Fix build on Leap 15.6. ==== virtualbox-kmp ==== Version update (7.0.14_k6.7.2_1 -> 7.0.14_k6.7.4_1) - Fix build on Leap 15.6. ==== webkit2gtk3 ==== Version update (2.42.4 -> 2.42.5) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.42.5 (boo#1219604): + Fix webkit_web_context_allow_tls_certificate_for_host to handle IPv6 URIs produced by SoupURI. + Ignore stops with offset zero before last one when rendering gradients with cairo. + Write bwrapinfo.json to disk for xdg-desktop-portal. + Fix gamepads detection by correctly handling focused window in GTK4. + Fix several crashes and rendering issues. + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213. - Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream. - Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86 architectures. ==== webkit2gtk3-soup2 ==== Version update (2.42.4 -> 2.42.5) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.42.5 (boo#1219604): + Fix webkit_web_context_allow_tls_certificate_for_host to handle IPv6 URIs produced by SoupURI. + Ignore stops with offset zero before last one when rendering gradients with cairo. + Write bwrapinfo.json to disk for xdg-desktop-portal. + Fix gamepads detection by correctly handling focused window in GTK4. + Fix several crashes and rendering issues. + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213. - Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream. - Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86 architectures. ==== yast2-installation ==== Version update (5.0.5 -> 5.0.6) - Restore the selected products after reloading the package manager, properly install all products for new modules and extensions when upgrading from SLE12 (bsc#1218391) - 5.0.6

1 0

Re: Something in the latest dup breaks USB virtualization.
by Pablo Sanchez 08 Feb '24

08 Feb '24

On 2024-02-08 14:25, Larry Len Rainey wrote: > Are you sure it is not greyed out - mine still is with today's zypper dup. > > On 2/8/24 11:32, Pablo Sanchez wrote: >> On 2024-02-08 12:20, Larry Len Rainey wrote: >>> >>> I have gone back 5 kernels and it does it on every TW kernel. >>> >>> Some library had to change - I put back an older VirtualBox with no >>> USB (all greyed out) the same. >>> >>> They all worked fine last Thusrday. >>> >>> Others have reported that QEMU has the same issue. >>> >>> https://forums.opensuse.org/t/usb-grayed-out-cant-add-usb-devices-in-virtua… >>> >> Hi Larry, >> >> I had a similar issue. As I had a pending 7.0.14 VBox upgrade, I >> applied it and USB became functional. >> Hi Larry, I'm sending my response to the list as I think it's good to keep conversations on the list. I have some interesting data. If I reboot my rig, VBox now longer has USB access. I have to run through its installation to regain it. While it's not a solution, have you tried to re-install VBox? Does that offer temporary relief? Thx! -pablo

1 0

Something in the latest dup breaks USB virtualization.
by Larry Len Rainey 08 Feb '24

08 Feb '24

3 2

Blog post: Agama future plans
by Ancor Gonzalez Sosa 08 Feb '24

08 Feb '24

Will 2024 be the year for Agama (the new installer based on YaST internals) to finally take off? Find more about the YaST Teams plans at the new blog post https://yast.opensuse.org/blog/2024-02-08/year-of-agama Cheers. -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0

openSUSE Release Engineering meeting 07.02.2024 (we're temporarily using google meet)
by Lubos Kocman 08 Feb '24

08 Feb '24

!!! HEADS UP PLEASE USE https://meet.google.com/fud-xeti-hvn for a few upcoming meetings instead of jitsi, as we're experiencing lot of issues with it. I did update calendar-o-o to reflect this https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees rbrown, lkocman, dimstar, Sarah, ana,GuillaumeG, DocB, ddemaio ## Leap Leap 15.6 with Gnome 45 was published yesterday Several issues under wayland https://bugzilla.suse.com/show_bug.cgi?id=1219505 - input methods in chrome under Wayland https://bugzilla.suse.com/show_bug.cgi?id=1219486 - memory leak in Evolution (workaround uninstall evolution) We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input Reminder that we have check in deadline for Leap 15.6 beta on 21st February (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress In person discussion with Granite PM, on Thursday Data driven decision for migration (re-use binaries vs rebuild sources etc). PM is not keen on keeping identical packages with buildroot-only SLES/ALP packages. Desktop component awareness in ALP No data yet GnuHealth 4.4 - tracking of sr against SLES python311* https://etherpad.opensuse.org/p/gnuhealth Idea from yesterday's community meeting for OSC2024 "Lowering threshold for contributions" 5 workshops to: package basic software, write an openqa test, translate something in weblate, contribute with artwork, distribution/image spin. Each video could be 15 minutes. Could be hosted in a single focus room ... ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 294 failed 166 unresolvable (last week 65 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates: * RPM 4.19.1, Packages not included in rings still need updates, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Python 3.12.1 enablement + setuptools support * glibc 2.39 + security update ( CVE-2023-6246, CVE-2023-6779, CVE-2023-6780) * Alsa 1.2.11 * cpio 2.15 * emacs 29.2 * gstreamer 1.22.9 * kubernetes 1.29 (new default version) * QEMU 8.2.0 * syslog-ng 4.6.0 Updates waiting / work still in progress: * Linux kernel 6.7.4 & 6.7.3 & networking CVE fixes & other fixes * Fixes for Python 3.12 * GCC 14 (only for runtime libraries) * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * c-ares: after nodejs updates, there is an issues with a new package cycle (fix waiting for devel project https://build.opensuse.org/request/show/1143773 ) * cmake, macro changes (DOCDIR MANDIR INFODIR) make a few packages FBTFS, no progress ## Richard (Aeon+botmaster) Another brief botmaster outage on Monday, caused by an automated package update triggering update-alternatives for java, which confused goCD as to its location of java. It would be really nice to have the system as a MicroOS host instead of the more fragile SLE/Leap. Been experimenting with a seamless migration from legacy MicroOS Desktop patterns to correct Aeon patterns. However these experiments look to be infeasible. Invisible migrations will either need some new tooling or manual instructions. (lkocman: Could you suggest an update/upgrade via the parallel install, I recall your mod_install experiment? This would cover at least user data) tik development progressing slowly, discussions about getting some contributions from SUSE engineers. Aiming to deploy new aeondesktop.org website this week ## Bernhard (Slowroll) Not available * kernel-longterm expected around March * first openQA test WIP * next major version bump expected in 2-3 weeks (mid February) * Vacation 2024-02-05 to 09 ## Max Not available Leap 15.6 - build stats in Backports: 52(was 59) faild, 67 unresolvable(was 63) * Build597.1 has been published * The remaining qt5/qt6 applications got merged for adapt to the Qt5 5.15.12 and Qt6 6.6.1 from SLE15 * Merged many python application update or deleterequests, but still, most of unresolvables were python applications, and still has many were pending in staging * The tweak of skippkg-finder and 000package-groups works, the noarch ones has been selected to ftp-tree instead of the arch-dependent ones(with an unmatched version number) * Vacation: Feb. 7-14 ## Guillaume - Arm * Tumbleweed: - Rolling again, after the glitch in prjconf which dropped python 3.9 support for some time during the week-end. - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Store GUI for Tumbleweed image instead of arm64. But `wsl --install openSUSE-Tumbleweed --web-download` works just fine! - https://bugzilla.opensuse.org/show_bug.cgi?id=1219372. This is what team agreed to advertise. We just need to update our wiki and perhaps image description in Windows Store. lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Tumbleweed: * too less build nodes: waiting for Compilers to be finished with builds lkocman will ping Marcela && Moroni && Martin Piala. * Improved kernel performance for kernel 6.8 from IBM side: https://www.phoronix.com/news/Linux-6.8-s390-Syscall-Perf Z Training material (recommendations at IBM TechXChange in Barcelona): * Z Assembler (incl. exercises): http://zseries.marist.edu/enterprisesystemseducation/assemblerlanguageresou… * Books about Z Architecture and Assembler: https://idcp.marist.edu/assembler-resources Yesterday was the new release of the LinuxONE 4 Express (rackmount system): https://www.ibm.com/products/linuxone-4/sustainability ## Doug * FOSDEM * Geeko Foundation provide some items with good response * Likely to submit three booths for next year * Project * Open Build Service * openQA Rich: and an Aeon one? * GSoC * Application submitted * Two former mentees are now mentoring * Waiting on site visit feedback for Community-Summit at SUSECON * openSUSE Conference * 23 Registrations, 20 Submissions, 11 Hours * Contract caterer * Travel info article published Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available - various python 3.12 fallout preparations - tried to split egrep/fgrep from "grep" into a separate subpackage, reducing fallout - drop overlays over python311 on Backports SP6 is in progress Dirk: it would help if we could have all the drops in a single staging as they have common build failure root causes. ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) No big news QAM scheduled 15.6 Beta openQA setup for the next sprint, so it should be ready in mid-February according to the plan. ## Adrian - OBS No update The new composer/product builder discussion was covered in Max's section. Heads up: a first SR related to the composer is on the way. This is done to setup new products. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor Adrian: the issue with jitsi is only with change from 2-3 people.

3 3

New Tumbleweed snapshot 20240206 released!
by Dominique Leuenberger 07 Feb '24

07 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.3.4 -> 23.3.5) Mesa-drivers (23.3.4 -> 23.3.5) catfish cpio (2.14 -> 2.15) ethtool (6.6 -> 6.7) gc (8.2.4 -> 8.2.6) grub2 jasper (4.1.2 -> 4.2.0) libXext (1.3.5 -> 1.3.6) libXvMC (1.0.13 -> 1.0.14) libei (1.2.0 -> 1.2.1) libgsf (1.14.51 -> 1.14.52) libpciaccess (0.17 -> 0.18) libvpl libxcb libxkbfile (1.1.2 -> 1.1.3) menulibre mousepad (0.6.1 -> 0.6.2) netpbm pipewire (1.0.2 -> 1.0.3) python-MarkupSafe (2.1.4 -> 2.1.5) python-h11 python-msgpack (1.0.5 -> 1.0.7) python-pip qemu (8.1.3 -> 8.2.0) ristretto (0.13.1 -> 0.13.2) rp-pppoe rpm sendmail (8.17.2 -> 8.18.1) wireplumber xfce4-screenshooter (1.10.4 -> 1.10.5) xkbcomp (1.4.6 -> 1.4.7) xprop (1.2.6 -> 1.2.7) yast2-trans (84.87.20240126.9c7185e3f6 -> 84.87.20240205.897f2593b3) === Details === ==== Mesa ==== Version update (23.3.4 -> 23.3.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.3.5 - -> https://docs.mesa3d.org/relnotes/23.3.5.html - re-enabled rusticl on sle15-sp6 after linkpac'ing rust-bindgen in X11:XOrg project ==== Mesa-drivers ==== Version update (23.3.4 -> 23.3.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.3.5 - -> https://docs.mesa3d.org/relnotes/23.3.5.html - re-enabled rusticl on sle15-sp6 after linkpac'ing rust-bindgen in X11:XOrg project ==== catfish ==== Subpackages: catfish-lang - As long as a new Python version does not ship a broken python3-distutils, like python311 did in its early days, there is no need to deal with or skip a specific python version at all. Disable all %%{python_module ...} and skip_python... stuff again. - Don't use %%{python_module ...} as we only build for the default Python interpreter. python312 still needs to be skipped due to python3-distutils! - Skip python312 for now until all required Python modules have been built. - Use %%{python_module ...} to specify required Python modules to build this package. ==== cpio ==== Version update (2.14 -> 2.15) Subpackages: cpio-lang cpio-mt - Update to 2.15: * Fix the operation of --no-absolute-filenames --make-directories. * Restore access and modification times of symlinks in copy-in and copy-pass modes. - Remove fix-operation-no-absolute-filenames.patch ==== ethtool ==== Version update (6.6 -> 6.7) Subpackages: ethtool-bash-completion - update to upstream release 6.7 * Feature: support for setting TCP data split * Fix: fix new gcc14 warning * Fix: fix SFF-8472 transceiver module identification (-m) ==== gc ==== Version update (8.2.4 -> 8.2.6) - Update to release 8.2.6 * Compiler warning fixes on various non-Linux platforms * Fix null dereference in check_finalizer_nested if redirecting malloc on Linux * Fix race in init_lib_bounds on Linux/glibc-2.34+ if redirecting malloc ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix build error on gcc-14 (bsc#1218949) * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch ==== jasper ==== Version update (4.1.2 -> 4.2.0) - Update to 4.2.0: * Add the JAS_PACKAGING option to the CMake build in an attempt to allow easier control over rpath settings by packagers of JasPer. * Remove a number of obsolete scripts. * Make some cosmetic changes to the code for the JPC codec in order to improve readability (#371). * Fix a portability bug related to threads/atomics. * Replace some lingering uses of strtok in the JPC coder with jas_strtok, since the use of strtok is problematic in multithreading contexts. ==== libXext ==== Version update (1.3.5 -> 1.3.6) - Update to version 1.3.6 * Wrap Xext*CheckExtension() in do { ... } while(0) * configure: raise minimum autoconf requirement to 2.70 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * _xgeGetExtensionVersion should not free info on failure * Check for malloc failure in _xgeGetExtensionVersion * _xgeDpyClose: handle NULL return from _xgeFindDisplay * XEVI: fix -Walloc-size ==== libXvMC ==== Version update (1.0.13 -> 1.0.14) - Update to version 1.0.14 * Make doc install path from meson match autotools * gitlab CI: add a basic build test * gitlab CI: Add libtool to required packages * gitlab CI: stop requiring Signed-off-by in commits * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Convert to X.Org standard code style * Variable scope reductions as recommended by cppcheck * Replace custom copy of GetReq macro with call to Xlib 1.5's _XGetRequest * Handle implicit conversion warnings from clang - switched to meson build system ==== libei ==== Version update (1.2.0 -> 1.2.1) - Update to release 1.2.1 * Previously, using OEFFIS_DEVICE_ALL_DEVICES in oeffis_create_session() would erroneously result in the portal selecting no devices instead of all. ==== libgsf ==== Version update (1.14.51 -> 1.14.52) Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Update to version 1.14.52: + xml: Fix build with libxml2 2.12. ==== libpciaccess ==== Version update (0.17 -> 0.18) - Update to version 0.18 * Remove "All rights reserved" from Oracle copyright notices * Try fopen(".../pci.ids", "re") on Solarish systems as well * Remove autotools build * gitlab-ci: use `meson setup` * gitlab-ci: don't bother to configure meson for the version check * gitlab-ci: remove unnecessary call to `meson configure` * FreeBSD: Fallback to /usr/share/misc/pci_vendors * FreeBSD: Remove sparc64 code * Fix compilation warnings when building against hurd-amd64. ==== libvpl ==== - Re-enable build on aarch64 ==== libxcb ==== Subpackages: libxcb-composite0 libxcb-damage0 libxcb-dpms0 libxcb-dri2-0 libxcb-dri3-0 libxcb-glx0 libxcb-present0 libxcb-randr0 libxcb-record0 libxcb-render0 libxcb-res0 libxcb-shape0 libxcb-shm0 libxcb-sync1 libxcb-xfixes0 libxcb-xinerama0 libxcb-xinput0 libxcb-xkb1 libxcb-xv0 libxcb1 - devel package: added missing Requires to libxcb-dbe0 (boo#1219572) ==== libxkbfile ==== Version update (1.1.2 -> 1.1.3) - update to 1.1.3 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Set close-on-exec when opening files * _XkbMakeAtom: remove check for impossible case * _XkbInitAtoms: check for malloc() failure * XkbChangeAtomDisplay: stop leaking atom name * XkbCFReportError: avoid -Wformat-nonliteral warning * XkbWriteCFile: stop leaking header file ifdef name * DefaultParser: avoid -Wimplicit-fallthrough warnings * xkbtext.c: Add tbGetBufferString helper function * XkbIndentText: Fix -Wsign-compare warning * Fix -Wsign-compare warnings in xkbtext.c & xkmread.c * Add a meson build system - switched to meson build system ==== menulibre ==== - As long as a new Python version does not ship a broken python3-distutils, like python311 did in its early days, there is no need to deal with or skip a specific python version at all. Disable all %%{python_module ...} and skip_python... stuff again. - Don't use %%{python_module ...} as we only build for the default Python interpreter. python312 still needs to be skipped due to python3-distutils! - Skip python312 for now until all required Python modules have been built. - Use %%{python_module ...} to specify required Python modules to build this package. ==== mousepad ==== Version update (0.6.1 -> 0.6.2) Subpackages: libmousepad0 mousepad-lang - Update to version 0.6.2 * Update copyright year * history: Default to yes when user is asked to restore previous session * build: Search for bind_textdomain_codeset in libintl too * tests: Increase timeout a bit * tests: Check for pwait/pidwait * dialogs: Do not reuse text buffer to test encoding in save-as dialog * history: Remove dead code * history: Rework paste menu * Move paste history to mousepad-history.c * window: Fix GVariant management * Do not scroll text view when zooming in or out * file-monitoring: Delay emission of "externaly-modified" signal * Fix a typo in a comment, additionnal â additional. * Add icons at missing sizes, clean up SVG metadata * search: Properly reset current match * Translation Updates ==== netpbm ==== Subpackages: libnetpbm11 - added patches fix CVE-2017-5849 [bsc#1022790], CVE-2017-5849 [bsc#1022791] + netpbm-use-byrow-when-needed.patch ==== pipewire ==== Version update (1.0.2 -> 1.0.3) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.3: * Highlights - Fix ALSA version check. This should allow the alsa plugin to work again. - Some small fixes and improvements. * PipeWire - Escape @DEFAULT_SINK@ in the conf files. * Modules - Improve logging in module-pipe-tunnel. * SPA - Always recheck rate matching in ALSA when moving drivers. This fixes a potential issue where the adaptive resampler would not be activated in some cases. * ALSA - Fix ALSA version check. This should allow the alsa plugin to work again. ==== python-MarkupSafe ==== Version update (2.1.4 -> 2.1.5) - update to 2.1.5: * Fix striptags not collapsing spaces. :issue:`417` ==== python-h11 ==== - spec cleanup ==== python-msgpack ==== Version update (1.0.5 -> 1.0.7) - update to 1.0.7: * remove inline macro for msvc * do not fallback on build error * fix: build status badge * Drop python2 support * Drop Python 3.6 support * try Cython 3.0 * sphinx-related work ==== python-pip ==== - Fix shebang path for "pip3.XX" binaries ==== qemu ==== Version update (8.1.3 -> 8.2.0) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fix a build issue of OVMF caused by https://gitlab.com/qemu-project/qemu/-/issues/2064: * target/i386: fix incorrect EIP in PC-relative translation blocks * target/i386: Do not re-compute new pc with CF_PCREL - Update to latest upstream release, 8.2.0: The full list of changes are available at: https://wiki.qemu.org/ChangeLog/8.2 Highlights include: * New virtio-sound device emulation * New virtio-gpu rutabaga device emulation used by Android emulator * New hv-balloon for dynamic memory protocol device for Hyper-V guests * New Universal Flash Storage device emulation * Network Block Device (NBD) 64-bit offsets for improved performance * dump-guest-memory now supports the standard kdump format * ARM: Xilinx Versal board now models the CFU/CFI, and the TRNG device * ARM: CPU emulation support for cortex-a710 and neoverse-n2 * ARM: architectural feature support for PACQARMA3, EPAC, Pauth2, FPAC, FPACCOMBINE, TIDCP1, MOPS, HBC, and HPMN0 * HPPA: CPU emulation support for 64-bit PA-RISC 2.0 * HPPA: machine emulation support for C3700, including Astro memory controller and four Elroy PCI bridges * LoongArch: ISA support for LASX extension and PRELDX instruction * LoongArch: CPU emulation support for la132 * RISC-V: ISA/extension support for AIA virtualization support via KVM, and vector cryptographic instructions * RISC-V: Numerous extension/instruction cleanups, fixes, and reworks * s390x: support for vfio-ap passthrough of crypto adapter for protected virtualization guests * Tricore: support for TC37x CPU which implements ISA v1.6.2 * Tricore: support for CRCN, FTOU, FTOHP, and HPTOF instructions * x86: Zen support for PV console and network devices - Patch added (from upstream stable tree): * include/ui/rect.h: fix qemu_rect_init() mis-assignment - Some packaging and dependencies fixes: * [openSUSE] rpm: restrict canokey to openSUSE only * [openSUSE] rpm: fix virtiofsd dependency on 32 bit systems * [openSUSE] rpm: add support for canokeys (boo#1217520) - Rearrange dependencies and subpackages and filter features for ALP * [openSUSE] rpm: disable Xen support in ALP-based distros * [openSUSE] rpm: some more refinements of inter-subpackage dependencies - Fix boo#1084909 and create a new qemu-spice metapackage: * [openSUSE] rpm: normalize hostname, for reproducible builds (#44) * [openSUSE] rpm: new subpackage, for SPICE ==== ristretto ==== Version update (0.13.1 -> 0.13.2) Subpackages: ristretto-lang - Update to version 0.13.2 * Update copyright year * Fix duplicate mnemonic in File menu * image_viewer: Add missing sanity check * Fix criticals about unset GIO attributes * viewer: Fix possible crash when closing while an image is loading * Ensure that file manager proxy creation is non-blocking * Add icons at missing sizes, clean up SVG metadata * Translation Updates ==== rp-pppoe ==== - Removed rcpppoe and rcpppoe-server rudiments. ==== rpm ==== Subpackages: librpmbuild10 - Need to mention the changed patches for the python-setuptools to cmake migration: * Drop python_setup.diff * Add cmake_python_version.diff ==== sendmail ==== Version update (8.17.2 -> 8.18.1) Subpackages: libmilter1_0 - Update to version sendmail 8.18.1 2024/01/31 * sendmail is now stricter in following the RFCs and rejects some invalid input with respect to line endings and pipelining: - Prevent transaction stuffing by ensuring SMTP clients wait for the HELO/EHLO and DATA response before sending further SMTP commands. This can be disabled using the new srv_features option 'F'. Issue reported by Yepeng Pan and Christian Rossow from CISPA Helmholtz Center for Information Security. - Accept only CRLF . CRLF as end of an SMTP message as required by the RFCs, which can disabled by the new srv_features option 'O'. - Do not accept a CR or LF except in the combination CRLF (as required by the RFCs). These checks can be disabled by the new srv_features options 'U' and 'G', respectively. In this case it is suggested to use 'u2' and 'g2' instead so the server replaces offending bare CR or bare LF with a space. It is recommended to only turn these protections off for trusted networks due to the potential for abuse. * Full DANE support is available if OpenSSL versions 1.1.1 or 3.x are used, i.e., TLSA RR 2-x-y and 3-x-y are supported as required by RFC 7672. * OpenSSL version 3.0.x is supported. Note: OpenSSL 3 loads by default an openssl.cnf file from a location specified in the library which may cause unwanted behaviour in sendmail. Hence sendmail sets the environment variable OPENSSL_CONF to /etc/mail/sendmail.ossl to override the default. The file name can be changed by defining confOPENSSL_CNF in the mc file; using an empty value prevents setting OPENSSL_CONF. Note: referring to a file which does not exist does not cause an an error. * Two new values have been added for {verify}: "DANE_TEMP": DANE verification failed temporarily. "DANE_NOTLS": DANE was required but STARTTLS was not offered by the server. The default rules return a temporary error for these cases, so delivery is not attempted. * If the TLS setup code in the client fails and DANE requirements exist then {verify} will be set to "DANE_TEMP" thus preventing delivery by default. * DANE related logging has been slightly changed for clarification: "DANE configured in DNS but no STARTTLS available" changed to "DANE configured in DNS but STARTTLS not offered" * When the compile time option USE_EAI is enabled, vacation could fail to respond when it should (the code change in 8.17.2 was incomplete). Problem reported by Alex Hautequest. * If SMTPUTF8 BODY=7BIT are used as parameters for the MAIL command the parsing of UTF8 addresses could fail (USE_EAI). * If a reply to a previous RCPT was received while sending another RCPT in pipelining mode then parts of the reply could have been assigned to the wrong RCPT. * New DontBlameSendmail option CertOwner to relax requirement for certificate public and private key ownership. Based on suggestion from Marius Strobl of the FreeBSD project. * clt_features was not checked for connections via Unix domain sockets. * CONFIG: FEATURE(`enhdnsbl') did not handle multiple replies from DNS lookups thus potentially causing random "false negatives". Note: the fix creates an incompatibility: the arguments must not have a trailing dot anymore because the -a. option has been removed (as it only applies to the entire result, not individual values). * CONFIG: New FEATURE(`fips3') for basic FIPS support in OpenSSL 3. * VACATION: Add support for Return-Path header to set sender to match OpenBSD and NetBSD functionality. * VACATION: Honor RFC3834 and avoid an auto-reply if 'Auto-Submitted: no' is found in the headers to match OpenBSD and NetBSD functionality. * VACATION: Avoid an auto-reply if a 'List-Id:' is found in the headers to match OpenBSD functionality. * VACATION: Add support for $SUBJECT in .vacation.msg which is replaced with the first line of the subject of the original message to match OpenBSD and NetBSD functionality. * New Files: cf/feature/fips3.m4 devtools/OS/Darwin.23.x - This release fixes CVE-2023-51765 (bsc#1218351) - Port and rename patch sendmail-8.17.2.dif which is now sendmail-8.18.1.dif ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Add patch to only enable bluetooth when audio support is enabled by installing wireplumber-audio (bsc#1219411): * fix-bsc1219411.patch ==== xfce4-screenshooter ==== Version update (1.10.4 -> 1.10.5) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to 1.10.5 * Add imgur support as custom action (!51) * Translation Updates - Recommend curl, jq and zenity for the new script imgur.sh ==== xkbcomp ==== Version update (1.4.6 -> 1.4.7) - update to 1.4.7 * This release mainly focuses on code cleanup and improving maintainability and making static analysis work better on this code base. It also fixes a bug that could cause build failures with gcc when the -ftracer option was used. ==== xprop ==== Version update (1.2.6 -> 1.2.7) - Update to version 1.2.7 * This release fixes a failure to build with C23 compilers. ==== yast2-trans ==== Version update (84.87.20240126.9c7185e3f6 -> 84.87.20240205.897f2593b3) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240205.897f2593b3: * New POT for text domain 'control'. * Translated using Weblate (Russian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * New POT for text domain 'installation'.

1 0

Reminder: Leap 15.6 Beta code submission deadline is on Feb 21st
by Lubos Kocman 07 Feb '24

07 Feb '24

Hello openSUSE! Just a friendly reminder that the code submission deadline for Leap 15.6 Beta is on February 21st. This corresponds with SLES 15 SP6 Public Beta code drop deadline. If your 15.6 contributions still require an update of a SLES package past this deadline please make sure that it has a corresponding feature in https://code.opensuse.org/leap/features o Deadline is at 15:00 UTC o Deadline for any package removals from Leap. o Deadline corresponds with SLE 15 SP6 late feature cutoff deadline o Every feature with a code delivery for SUSE Linux Enterprise after this date requires an ECO and may be targeted post FCS date. Does not apply for Leap code-drops. o After this date only P1 bugfixes, important security fixes and pre-agreed important P2 fixes are accepted in SUSE Linux Enterprise. This does not apply for Leap code-drops. -- Best regards Luboš Kocman openSUSE Leap Release Manager

1 0

New package for Factory: python-hypercorn
by vivid 07 Feb '24

07 Feb '24

I'd like to introduce python-hypercorn into Factory: https://build.opensuse.org/package/show/devel:languages:python/python-hyper… Hypercorn (https://pypi.org/project/Hypercorn/) is a Python ASGI webserver supporting HTTP/1, HTTP/2, and HTTP/3. Hypercorn is primarily used in by the Quart package (https://pypi.org/project/Hypercorn/) and can be used to deploy ASGI python applications. It has active upstream development with a fair amount of contributors, so I don't think it will have any maintainability issues. Please let me know if there are any questions, concerns, or comments about introducing this package into Factory! Vivid

1 1

python setuptools
by Peter Czanik 06 Feb '24

06 Feb '24

Hi, I submitted syslog-ng to Base:System and then to Factory. It compiled successfully in my home project, then in Base:System, and also while it was under review for Factory. Today I updated my Tumbleweed installation and was surprised to see that syslog-ng is still at the old version. I checked, and it failed to build in Factory, missing "setuptools": [ 164s] (cd ./modules/python-modules && /usr/bin/python3 setup.py \ [ 164s] build --build-base="/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/build" \ [ 164s] egg_info --egg-base="/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules" \ [ 164s] install --record=/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/install-manifest.txt --root="/home/abuild/rpmbuild/BUILDROOT/syslog-ng-4.6.0-218.3.x86_64" --install-lib="/usr/lib64/syslog-ng/python") [ 164s] Traceback (most recent call last): [ 164s] File "/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/setup.py", line 24, in <module> [ 164s] from setuptools import setup [ 164s] ModuleNotFoundError: No module named 'setuptools' [ 164s] make[4]: *** [Makefile:34010: pymodules-install] Error 1 [ 164s] make[3]: *** [Makefile:32461: install-exec-am] Error 2 [ 164s] make[2]: *** [Makefile:30970: install-am] Error 2 [ 164s] make[1]: *** [Makefile:29058: install-recursive] Error 1 [ 164s] make: *** [Makefile:30963: install] Error 2 [ 164s] error: Bad exit status from /var/tmp/rpm-tmp.bxkktG (%install) (full logs at https://build.opensuse.org/package/live_build_log/Base:System/syslog-ng/sta…) What changed during the weekend? :-) Is there a workaround / fix for this problem? Peter

3 3

RPM 4.19 "fallout" : group(opendkim) provide missing
by Patrick Schaaf 06 Feb '24

06 Feb '24

Just FYI, I notice opendkim package also needs the group provide fix. Just created https://bugzilla.opensuse.org/show_bug.cgi?id=1219638 also.

1 0

New Tumbleweed snapshot 20240205 released!
by Dominique Leuenberger 06 Feb '24

06 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fcitx5-gtk (5.1.0 -> 5.1.1) === Details === ==== fcitx5-gtk ==== Version update (5.1.0 -> 5.1.1) - update to 5.1.1 * add delete surrounding to process batch

1 0

RPM 4.19 soon in Factory (packaging changes inside)
by Ana Guerrero Lopez 06 Feb '24

06 Feb '24

Dear Tumbleweed hackers and packagers, After a lengthy staging period, RPM 4.19 is shaping up and all issues noticed in the rings (packages guaranteed to build/be installable) have been addressed or have fixes pending. As you are all aware, the rings cover only about 20% of the packages in Factory. The release notes for RPM 4.19 are at https://rpm.org/wiki/Releases/4.19.0 Out of the RPM release notes (https://rpm.org/wiki/Releases/4.19.0) the two most noteworthy bullets are: * Any non-root ownership in the %files section (through %attr() or %defattr()) now generates an automatic dependency on the named user and/or group. This dependency can be satisfied by another package shipping a sysusers.d(5) file or the /etc/passwd and /etc/group files themselves. Existing packages shipping any of these files will have to be rebuilt with RPM 4.19 in order for them to carry the respective user and/or group provides. This may require distro-level coordination to ensure proper installation of all the affected packages. For more information, please consult the manual. * %patch without arguments (previously an alias to %patch 0) is now a build error (use %patch N instead) The %patch one is rather simple and results in a build failure; monitoring your devel packages should give you hints very soon if your package is impacted. We created submit requests for most, if not all, packages affected by that in the last months. The story around the users can be trickier to be identified, as the build might succeed, but the package not being installable at the end due to missing dependencies reported. This usually happens when users are generated in %pre scripts using useradd. Either convert those packages to use sysusers.d ( https://en.opensuse.org/openSUSE:Packaging_guidelines#Users_and_Groups) or, as a quickest measure, usually helpful if no other package relies on the same users, manually add the respective Provides: user(USERNAME) and Provides: group(GROUPNAME) to the package generating the relevant user (as done for example in cluster-glue, https://build.opensuse.org/request/show/1138101 for reference) If you have any questions or need with your package, the opensuse-packaging mailing list is always at your disposal. Ana, on behalf of the Release Team

18 30

[factory] [15.6] dracut requires wicked?!?!
by Felix Miata 06 Feb '24

06 Feb '24

# zypper rm wicked Reading installed packages... Resolving package dependencies... The following 2 packages are going to be REMOVED: dracut wicked 2 packages to remove. After the operation, 5.7 MiB will be freed. Continue? [y/n/v/...? shows all options] (y): n Why? Is this Leap dracut dependency on wicked real? TW doesn't have such need. This was a fresh minimalist NET installation this AM: # grep onlyR /etc/zypp/zypp.conf ## OEM=solver.onlyRequires = false solver.onlyRequires = true # inxi -Snz --vs inxi 3.3.32-00 (2024-01-30) System: Kernel: 6.4.0-150600.4-default arch: x86_64 bits: 64 Console: pty pts/0 Distro: openSUSE Leap 15.6 Alpha Network: Device-1: Intel Ethernet I219-V driver: e1000e IF: enp0s31f6 state: up speed: 1000 Mbps duplex: full mac: <filter> # zypper se -si NetworkManager wicked wicked-service systemd-network | grep 86 i+ | systemd-network | package | 254.5-150600.2.8 | x86_64 | OSS i+ | wicked | package | 0.6.73-150500.3.10.1 | x86_64 | OSS i | wicked-service | package | 0.6.73-150500.3.10.1 | x86_64 | OSS # systemctl list-unit-files | egrep 'd-net|solv|wick' systemd-network-generator.service disabled disabled systemd-networkd-wait-online.service disabled disabled systemd-networkd-wait-online@.service disabled disabled systemd-networkd.service disabled disabled systemd-resolved.service masked disabled wicked.service disabled disabled wickedd-auto4.service disabled disabled wickedd-dhcp4.service disabled disabled wickedd-dhcp6.service disabled disabled wickedd-nanny.service disabled disabled wickedd-pppd@.service static - wickedd.service indirect disabled systemd-networkd.socket enabled disabled # Should I make a bug report? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

3 5

New Tumbleweed snapshot 20240204 released!
by Dominique Leuenberger 06 Feb '24

06 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa (1.2.10 -> 1.2.11) alsa-ucm-conf (1.2.10 -> 1.2.11) alsa-utils (1.2.10 -> 1.2.11) cups cups-filters ffmpeg-4 gstreamer-plugins-bad kernel-firmware (20240126 -> 20240201) libgooglepinyin pam pam-full-src pragha timezone (2023d -> 2024a) timezone-java (2023d -> 2024a) transmission vlc wicked === Details === ==== alsa ==== Version update (1.2.10 -> 1.2.11) Subpackages: libasound2 libatopology2 - Updated to alsa-lib 1.2.11: * auto-tools fixes, versioned symbol fixes * support dB TLVs for single controls * various PCM updates, including subformat extensions * UMP and sequencer API fixes For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib - Dropped obsoleted patches: 0001-control.h-Fix-ump-header-file-detection.patch 0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch 0003-pcm-Fix-segfault-with-32bit-libs.patch 0004-reshuffle-included-files-to-include-config.h-as-firs.patch 0005-seq-Fix-typos-in-symbol-version-definitions.patch 0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch 0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch 0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch 0009-seq-Simplify-snd_seq_extract_output.patch 0010-seq-Check-protocol-compatibility-with-the-current-ve.patch ==== alsa-ucm-conf ==== Version update (1.2.10 -> 1.2.11) - Update to version 1.2.11: * Qualcomm, Mediatek, SOF soundwire, and various USB-audio profiles For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-ucm-conf - Drop obsoleted patch: 0001-SplitPCM-Device-argument-may-not-be-set.patch ==== alsa-utils ==== Version update (1.2.10 -> 1.2.11) - Update to alsa-utils 1.2.11: * alsactl buffer overflow fix * alsatplg updates, NHLT ACPI parser updates * use smaller periods for speaker-test * add bandwidth-limited pink noise for speaker-test * aplay updates, including subformat extensions * compile warning fixes For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-utils - Drop obsoleted patches: 0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch 0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch 0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch 0008-topology-include-locale.h.patch 0009-nhlt-dmic-info.c-include-sys-types.h.patch 0010-topology-pre-processor-Add-support-for-enum-controls.patch 0011-configure.ac-fix-UMP-support-detection.patch 0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch 0013-topology-add-include-for-ENABLE_NLS-on-musl.patch 0014-nhlt-use-stdint.h-types.patch 0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch 0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch 0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch 0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch 0019-alsactl-fix-potential-buffer-overwrite.patch 0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch 0021-misc-fix-incorrect-usages-of-strerror.patch 0022-aplay-Add-option-for-specifying-subformat.patch 0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch 0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch 0025-aplay-enable-timestamps-by-default.patch 0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch 0027-aplaymidi-Set-event-completely-for-tempo-event.patch ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - Removed outdated ntadmin stuff from cups.spec (boo#1219503) ==== cups-filters ==== - Removed outdated and obsoleted "Requires: cups > 1.5.4" which was used to require a sufficient CUPS version at times when also CUPS <= 1.5.4 was available but it was not meant to require CUPS (boo#1216560) ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - drop support for libmfx, which is no longer supported upstream at all (boo#1219494) ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - drop support for libmfx, which is no longer supported upstream at all (boo#1219494) - added support for oneVPL ==== kernel-firmware ==== Version update (20240126 -> 20240201) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - More update on version 20240201 (git commit 3677750467cb): * linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 * rtl_nic: add firmware for RTL8126A (bsc#1217417) * qcom: Add Audio firmware for SM8550 HDK - Update to version 20240201 (git commit 1b24d7d3379b): * linux-firmware: intel: Add IPU6 firmware binaries * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 * Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" * amdgpu: update SMU 13.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet * amdgpu: DMCUB updates for various AMDGPU ASICs ==== libgooglepinyin ==== - Drop bogus dependency on python-base from the devel project: there seems to be no indicaton in the code that this would be real. ==== pam ==== Subpackages: pam-32bit - Enable pam_canonicalize_user.so ==== pam-full-src ==== - Enable pam_canonicalize_user.so ==== pragha ==== Subpackages: pragha-lang pragha-plugins - Fix build for Leap 15.6 * Build with pkgconfig(gupnp-1.6) on 15.6 ==== timezone ==== Version update (2023d -> 2024a) - Update to 2024a: * Kazakhstan unifies on UTC+5 beginning 2024-03-01 * Palestine springs forward a week later after Ramadan * zic no longer pretends to support indefinite-past DST * localtime no longer mishandles Ciudad JuÃ¡rez in 2422 ==== timezone-java ==== Version update (2023d -> 2024a) - Update to 2024a: * Kazakhstan unifies on UTC+5 beginning 2024-03-01 * Palestine springs forward a week later after Ramadan * zic no longer pretends to support indefinite-past DST * localtime no longer mishandles Ciudad JuÃ¡rez in 2422 - update to 2023d: * Ittoqqortoormiit, Greenland changes time zones on 2024-03-31. * Vostok, Antarctica changed time zones on 2023-12-18. * Casey, Antarctica changed time zones five times since 2020. * Code and data fixes for Palestine timestamps starting in 2072. * A new data file zonenow.tab for timestamps starting now. * Fix predictions for DST transitions in Palestine in 2072-2075, correcting a typo introduced in 2023a. * Vostok, Antarctica changed to +05 on 2023-12-18. It had been at +07 (not +06) for years. * Change data for Casey, Antarctica to agree with timeanddate.com, by adding five time zone changes since 2020. Casey is now at +08 instead of +11. * Much of Greenland, represented by America/Nuuk, changed its standard time from -03 to -02 on 2023-03-25, not on 2023-10-28. * localtime.c no longer mishandles TZif files that contain a single transition into a DST regime. Previously, it incorrectly assumed DST was in effect before the transition too. * tzselect no longer creates temporary files. * tzselect no longer mishandles the following: * Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. * TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/. * ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments. * Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension. * zic no longer mishandles data for Palestine after the year 2075. ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Have transmission-daemon provide user(transmission) and group(transmission): the user/group are generated in the pre scriptlet using useradd/groupadd. ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - drop support for libmfx, which is no longer supported upstream at all (boo#1219494) ==== wicked ==== Subpackages: wicked-service - ifreload: VLAN changes require device deletion (bsc#1218927) [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch] - ifcheck: fix config changed check (bsc#1218926) [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch] - client: fix exit code for no-carrier status (bsc#1219265) [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch] - dhcp6: omit the SO_REUSEPORT option (bsc#1215692) [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch] - duid: fix comment for v6time (https://github.com/openSUSE/wicked/pull/989) [+ 0005-duid-fix-comment-for-v6time.patch] - rtnl: fix peer address parsing for non ptp-interfaces (https://github.com/openSUSE/wicked/pull/987, https://github.com/openSUSE/wicked/pull/988) [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch] [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch] - system-updater: Parse updater format from XML configuration to ensure install calls can run. (https://github.com/openSUSE/wicked/pull/985) [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]

1 0

Add binary blob driver to Factory
by Joan Torres 05 Feb '24

05 Feb '24

Hi folks, I hope everything goes well. I would like to add a DisplayLink driver to the Factory repository. This driver is split into: * An open source part: https://github.com/DisplayLink/evdi * A private part: a binary blob I've been able to package it and make it work. I've already added the open source part to Factory. My question is if I can add the binary part although it's a private binary. Also, what license should be the right one in this case? Here is the (private part) package at obs: https://build.opensuse.org/package/show/home:jtorres:displaylink/displaylin…. Here is the license that comes when extracting the private part: https://paste.opensuse.org/pastes/12fa620d3e13 Thank you. Joan.

5 6

Tumbleweed - REview of the weeks 2024/04 & 05
by Dominique Leuenberger 05 Feb '24

05 Feb '24

(seems this did not actually go out on Friday as it should have) Dear Tumbleweed users and hackers, Once again I dared not to be at my desk last Friday, which resulted in me having to cover two weeks of Tumbleweed updates again. Quite a few larger things are happening, and you certainly want to know what has been coming – and will be coming – your way. The review covers the 12 snapshots released since my last ‘weekly review’ (0119, 0121…0126, 0128…0201) The most relevant changes to your Tumbleweed system have been: * rpm-config-SUSE: enable full ksym() dependencies in Tumbleweed * libvirt 10.0.0 * PHP 8.2.15 * NetworkManager-applet 1.36.0 * Linux kernel 6.7.1 & 6.7.2. During the 6.7.1 lifetime, there were some package layout changes, which unfortunately resulted in build counters being reused; this had shown as ‘file conflicts’ in some cases. The later update to 6.7.2 solved this again for good. * PAM 1.6.0 * Mesa 23.3.3 & 23.3.4 * Ruby 3.3 (rebuild, to get all ruby3.3-rubygem packages built). Ruby 3.3 is the new system default. Ruby 3.2 is still in the repos, which in turn means zypper dup will not clean it up from your system. If you have Ruby mostly for yast, you can likely uninstall ruby3.2 without loss of functionality (make sure to carefully check the packages to be removed – if in doubt, week it installed) * Mozilla Firefox 122.0 * Postfix 3.8.5 * Ghostscript 10.02.1 * cURL 8.6.0 * RPM 4.19.1: some stricter spec file parsing. As a packager, make sure to read https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… These things are currently being staged and being prepared for future inclusion into Tumbleweed: * glibc 2.39 * Python 3.12 (python modules built for it, but /usr/bin/python3 will still point to Python 3.11 for now) * GStreamer 1.22.9 * QEmu 8.2.0: causes build failures of ovmf * dbus-broker: a big step forward; upgrades seem to be an issue that needs to be addressed * libxml 2.12.x: slow progress * openSSL 3.2.0 * c-ares 1.21.0: nA new cycle has formed: appstream-glib, c-ares, curl, googletest, nghttp2, python311. This should be eliminated, as cycles cause massive trouble when branching new code streams * GCC 14: our usual 2-phase approach to introduce it. Currently working on phase 1, meaning GCC14 will be providing the base libraries (libgcc_s1, libstdc++…). The compiler itself will stay at version 13 for now. Once we integrate glibc 2.39 plus the python 3.12 changes, we will let OBS sort the dep chain for the new Python 3.12 modules, as this task is not handled by our external bot that usually takes care of the rebuild strategy. This will result in a huge snapshot, likely to be published early next week. Cheers, Dominique

1 0

Re: Wrong dependency for powerline-2.8.3-3.4.x86_64
by daniel.garcia＠suse.com 05 Feb '24

05 Feb '24

On lun, 2024-02-05 at 00:31 +0100, Berthold Höllmann wrote: > > Executing "zypper dup" today I came across: > > Problem: nothing provides '/usr/bin/python3.11.11' needed by the to be > installed powerline-2.8.3-3.4.x86_64 > > which I am sure is wrong, the latest version of python 3.11 is 3.11.7. > Looks like the shebang for the python scripts is not replaced correctly and rpm injects the wrong requirement. The %python3_install macro is doing the shebang replacement automatically now, so the manual fix in the spec file can be removed. I've created a request that should fix the issue: https://build.opensuse.org/request/show/1144111 Regards.

1 0

Wrong dependency for powerline-2.8.3-3.4.x86_64
by Berthold Höllmann 04 Feb '24

04 Feb '24

Executing "zypper dup" today I came across: Problem: nothing provides '/usr/bin/python3.11.11' needed by the to be installed powerline-2.8.3-3.4.x86_64 which I am sure is wrong, the latest version of python 3.11 is 3.11.7. Cheers Berthold

1 0

Got this error on today's zypper dup
by Larry Len Rainey 04 Feb '24

04 Feb '24

4 3

New Tumbleweed snapshot 20240202 released!
by Dominique Leuenberger 04 Feb '24

04 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.4.0~git126.5936946 -> 3.0.1~git1.1f95b57) crypto-policies emacs (29.1 -> 29.2) glibc (2.38 -> 2.39) gstreamer (1.22.8 -> 1.22.9) gstreamer-plugins-bad (1.22.8 -> 1.22.9) gstreamer-plugins-base (1.22.8 -> 1.22.9) gstreamer-plugins-good (1.22.8 -> 1.22.9) gstreamer-plugins-libav (1.22.8 -> 1.22.9) gstreamer-plugins-ugly (1.22.8 -> 1.22.9) inxi (3.3.31 -> 3.3.32) libusb-1_0 (1.0.26 -> 1.0.27) libzio (1.08 -> 1.09) netpbm (11.2.0 -> 11.5.2) perl-gettext python-jmespath python-pip python-pytz (2023.3.post1 -> 2023.4) python-rpm python-setuptools (69.0.2 -> 69.0.3) salt strace systemd-presets-common-SUSE virt-v2v xen (4.18.0_04 -> 4.18.0_06) === Details === ==== 389-ds ==== Version update (2.4.0~git126.5936946 -> 3.0.1~git1.1f95b57) Subpackages: lib389 libsvrcore0 - Update to version 3.0.1~git1.1f95b57: * Issue 6061 - Certificate lifetime displayed as NaN * Bump version to 3.0.1 * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045) * Issue 3555 - Remove audit-ci from dependencies (#6056) * Issue 6052 - Paged results test sets hostname to `localhost` on test collection * Issue 6051 - Drop unused pytest markers * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050) * Issue 6047 - Add a check for tagged commits * Issue 6041 - dscreate ds-root - accepts relative path (#6042) * Switch default backend to lmdb and bump version to 3.0 (#6013) * Issue 6032 - Replication broken after backup restore (#6035) * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038) * Issue 6034 - Change replica_id from str to int ==== crypto-policies ==== Subpackages: crypto-policies-scripts - avoid the cycle rpm/cmake/crypto-policies/python-rpm-macros: we only need python3-base here, we don't need the python macros as no module is being built ==== emacs ==== Version update (29.1 -> 29.2) Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Update to GNU Emacs version 29.2 * Startup Changes in Emacs 29.2 On GNU/Linux, Emacs is now the default application for 'org-protocol'. Org mode provides a way to quickly capture bookmarks, notes, and links using 'emacsclient': emacsclient "org-protocol://store-link?url=URL&title=TITLE" * This is a bug-fix release with no new features. * Changes in Specialized Modes and Packages in Emacs 29.2 - Tramp New user option 'tramp-show-ad-hoc-proxies'. When non-nil, ad-hoc definitions are kept in remote file names instead of showing the shortcuts. * Incompatible Lisp Changes in Emacs 29.2 'with-sqlite-transaction' rolls back changes if its BODY fails. If the BODY of the macro signals an error, or committing the results of the transaction fails, the changes will now be rolled back. - Port patches mainly by correcting hunk offsets * emacs-24.1-ps-mule.patch * emacs-24.4-ps-bdf.patch * emacs-25.2-ImageMagick7.patch * emacs-27.1-Xauthority4server.patch * emacs-27.1-pdftex.patch * emacs-29.1.dif * pdump.patch ==== glibc ==== Version update (2.38 -> 2.39) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Update to glibc 2.39 * A new tunable, glibc.cpu.plt_rewrite, can be used to enable PLT rewrite on x86-64 * Sync with Linux kernel 6.6 shadow stack interface * struct statvfs now has an f_type member, equal to the f_type statfs member * On Linux, the functions posix_spawnattr_getcgroup_np and posix_spawnattr_setcgroup_np have been added, along with the POSIX_SPAWN_SETCGROUP flag * On Linux, the pidfd_spawn and pidfd_spawp functions have been added * On Linux, the pidfd_getpid function has been added * scanf-family functions now support the wN format length modifiers for arguments pointing to types intN_t, int_leastN_t, uintN_t or uint_leastN_t * A new tunable, glibc.mem.decorate_maps, can be used to add additional information on underlying memory allocated by the glibc * The <stdbit.h> header has been added from ISO C2X * On AArch64 new symbols were added to libmvec * The ldconfig program now skips file names containing ';' or ending in ".dpkg.tmp" or ".dpkg.new" * The dynamic linker calls the malloc and free functions in more cases during TLS access if a shared object with dynamic TLS is loaded and unloaded - aarch64-rawmemchr-unwind.patch, cache-amd-legacy.patch, cache-intel-shared.patch, call-init-proxy-objects.patch, fstat-implementation.patch, gb18030-2022.patch, getaddrinfo-eai-memory.patch, getaddrinfo-memory-leak.patch, getcanonname-use-after-free.patch, iconv-error-verbosity.patch, intl-c-utf-8-like-c-locale.patch, ldconfig-process-elf-file.patch, libio-io-vtables.patch, libio-wdo-write.patch, no-aaaa-read-overflow.patch, posix-memalign-fragmentation.patch, ppc64-flock-fob64.patch, qsort-invalid-cmp.patch, sem-open-o-creat.patch, setxid-propagate-glibc-tunables.patch, syslog-buffer-overflow.patch, tls-modid-reuse.patch, tunables-string-parsing.patch: Removed - syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780, bsc#1218863, bsc#1218867, bsc#1218868) - qsort-invalid-cmp.patch: qsort: handle degenerated compare function (bsc#1218866) - Change minimum GCC to 13 - Split off libnsl.so.1 into a separate package ==== gstreamer ==== Version update (1.22.8 -> 1.22.9) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.22.9: + Highlighted bugfixes in 1.22.9 - More Security fixes for the AV1 video codec parser - va: fixes for Mesa Gallium drivers in Mesa versions older than v23.2 - v4l2src: Consider framerate during caps selection - v4l2codec: decoder fixes - rtspsrc: multicast fixes - camerabin viewfinder fixes - various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements + gstreamer - aggregator: fix use-after-free in queries processing - multiqueue: Ignore queue fullness for most events - Rebase reduce-required-meson.patch ==== gstreamer-plugins-bad ==== Version update (1.22.8 -> 1.22.9) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.22.9: + av1parser: Fix potential stack overflow during tile list parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300) + camerabin: Correctly relink viewfinderbin_queue + GstPlay: Fix error details parsing + h264decoder: Handle malformed avc/avc3 packets + h264decoder: h265decoder: Align with wraparound fix + vp8decoder: vp9decoder: av1decoder: mpeg2decoder: Fix multiplication wraparound + vah264enc/vah264dec issues after recent upgrade to 1.22.8 from 1.22.7 + va: fixes for Mesa Gallium drivers in Mesa versions older than v23.2 + vp9parse: Fix critical warning during caps negotiation - Rebase reduce-required-meson.patch ==== gstreamer-plugins-base ==== Version update (1.22.8 -> 1.22.9) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.22.9: + audiobasesink: Don't wait on gap events + audioconvert: change gst_audio_convert_get_unit_size() log levels + glcolorconvert: Correct transform_caps direction + gloverlay: Apply updated overlay coordinates correctly + videorate: keep pool if max_buffers is unlimited - Rebase reduce-required-meson.patch ==== gstreamer-plugins-good ==== Version update (1.22.8 -> 1.22.9) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.22.9: + rtpsession: Only warn once if configured latency needs to be known but isn't yet + rtphdrext-clientaudiolevel: Fix level value being written by the extension + rtspsrc: set multicast-iface on udpsinks and fix RTCP sink TTL + v4l2object: clear old fds when initializing poll during opening v4l2 device + v4l2src: Consider framerate during caps selection + vpxdec: Use appropriate domain and code for decoding errors - Rebase reduce-required-meson.patch ==== gstreamer-plugins-libav ==== Version update (1.22.8 -> 1.22.9) - Update to version 1.22.9: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-ugly ==== Version update (1.22.8 -> 1.22.9) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.22.9: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== inxi ==== Version update (3.3.31 -> 3.3.32) - - Updated to version 3.3.32: + /usr/share/doc/packages/inxi/inxi.changelog. ==== libusb-1_0 ==== Version update (1.0.26 -> 1.0.27) - Update to version 1.0.27 * New libusb_init_context API to replace libusb_init * New libusb_get_max_alt_packet_size API * New libusb_get_platform_descriptor API (BOS) * Allow setting log callback with libusb_set_option/libusb_init_context * New WebAssembly + WebUSB backend using Emscripten * Fix regression in libusb_set_interface_alt_setting * Fix sync transfer completion race and use-after-free * Fix hotplug exit ordering * Linux: NO_DEVICE_DISCOVERY option set per context - added signature and keyring. (key received via keyserver) ==== libzio ==== Version update (1.08 -> 1.09) - Version 1.09: Allow to create files without suffix as well ==== netpbm ==== Version update (11.2.0 -> 11.5.2) Subpackages: libnetpbm11 - version update to 11.5.2 Release 11.05.02 + ppmtowinicon: fix array overrun with 4 and 8 bits per pixel. Release 11.05.01 Fix typo in ppmforge test case. Release 11.05.00 + pnmpad: Add -color, -promote, -extend-edge, -detect-background . + pnmconvol: Restore ability of convolution matrix to be a pseudo-plain-PNM with samples that exceed the maxval. Lost in 10.30 (October 2005) because maxval-checking code was added to libnetpbm. (Was fixed in 10.47.08 in November 2010, but only in the 10.47 series). + pnmindex: Improve failure mode when -size or -across is zero. + pnmindex: Make -plain work. + pnmpad: fix behavior with -left, -right, and -width together or - top, -bottom, -height together: ignores -width where it should fail. Broken in Netpbm 10.72 (September 2015). + pamtosvg: fix "zero determinant" failure. Introduced in Netpbm 11.04 (September 2023). + pjtoppm: fix crash based on uninitialized variable. Introduced in Netpbm 11.04 (September 2023). + ppmtopcxl: fix incorrect output with > 256 colors. Always broken. (Program was added in primordial Netpbm in 1990). + pbmtext: fix buffer overrun with insanely large input. + picttoppm: fix buffer overrun with insanely wide input. + ppmtoxpm: fix incorrect output with insanely large number of colors. + pnmscalefixed: fix incorrect output with really big image and - pixels option. + ppmdither: fix buffer overrun with insanely large dithering matrix. + pnmpad: no longer accept old-style options (e.g. -t50). + libnetpbm: Add pm_feed_from_file, pm_accept_to_files, pm_accept_to_filestream Standard Input feeder, Output accepter for pm_system. + libnetpbm, programs that use color maps: fix buffer overrun with insanely deep images. + merge build: Fix 'pnmcat'. Introduced in Netpbm 11.00 (September 2023). Release 11.04.00 + pamaddnoise: add -salt. + pamaddnoise: reject options that aren't meaningful for the type of noise specified rather than just ignore them. + ppmtosixel: Add -7bit, so it works on more terminals, including xterms. Thanks Scott Pakin. + g3topbm: Add -correctlong + pnmtojpeg: minor improvement to error messages about bad files. + pammixmulti: Remove disclaimer of patent license. + pamstack: Fix bug: acts like -firstmaxval specified when it wasn't. Introduced in Netpbm 11.03 (June 2023). + pamstack: Fix -lcmmaxval: chooses wrong maxval. Always broken (-lcmmaxval was new in Netpbm 11.03 (June 2023)). + pamstack: Fail gracefully when total number of planes is too large for unsigned integer. Always broken (Pamstack was new in Netpbm 10.0 (June 2002). + pamtosvg: fix hang. + ppmfade: fix "file not found" crash for most fade modes. Introduced in Netpbm 10.98 (March 2022). + ppmfade: fix incorrect block mode fade. Always broken (ppmfade was new in Netpbm 8.4 (April 2000)). + pamaddnoise: fix very incorrect noise added for all types. Introduced in Netpbm 10.94 (March 2021). + ppmrough: fix buffer overrun. Always broken (Ppmrough was new in Netpbm 10.9 (September 2002). ppmrough: fix excessive roughness. Introduced in Netpbm 10.94 (March 2021). + pgmtexture: Fix buffer overflow with maxval > 255. Always broken. Maxvals > 255 were possible starting in Netpbm 9.0 (April 2000). + pgmtexture: Fix bug: ignores -d. Introduced in Netpbm 10.56 (September 2011). + xwdtopnm Fix spurious output with really wide/deep rows. + imgtoppm: Fix spurious output with really wide/deep rows. + pbmtopgm: Fix error message for excessive -width. + pbmtoxbm: Fix spurious output with really wide rows. + tifftopnm: Fix incorrect output with insanely wide/deep rows. + thinkjettopbm: Fix incorrect output with insanely wide rows. + ybmtopbm: Fix incorrect output with insanely wide rows. + pjtoppm: Fix incorrect output with insanely large number of rows. + library: add check of maxval for computable size. + Build: Include LDFLAGS in link of shared library. * Release 11.03.00 + pamstack: Add -firstmaxval, -lcmmaxval + pnmcolormap: make result independent of how system's qsort orders records with equal keys. Affects pnmquant. + pamtopng: fix typo in error message about -chroma option. + pamtopng, pnmtopng, pngtopam: fix error message when something fails in libpng. Always broken (the programs were new in Netpbm 8.1 (March 2000)). - modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed) ==== perl-gettext ==== - Run testsuite with locale LANG=en_US.UTF. It fails otherwise with glibc 2.39 ==== python-jmespath ==== - switch to PEP517 / wheel build ==== python-pip ==== - Drop deprecated setup.py installmethod, bootstrap PEP517 with built-in pip instead - python3XX-pip-wheel can now be a regular subpackage - Drop obsolete python2 directives in specfile ==== python-pytz ==== Version update (2023.3.post1 -> 2023.4) - update to 2023.4: * Update olson to 2023d ==== python-rpm ==== - buildrequire setuptools ==== python-setuptools ==== Version update (69.0.2 -> 69.0.3) - update to 69.0.3: * Bugfixes - Retain valid names with underscores in egg_info. ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Prevent directory traversal when creating syndic cache directory on the master (CVE-2024-22231, bsc#1219430) - Prevent directory traversal attacks in the master's serve_file method (CVE-2024-22232, bsc#1219431) - Added: * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch ==== strace ==== - Enable SELinux Context Printing (--secontext). ==== systemd-presets-common-SUSE ==== - Split hcn-init.service to hcn-init-NetworkManager and hcn-init-wicked (bsc#1200731 ltc#198485 https://github.com/ibm-power-utilities/powerpc-utils/pull/84) Support both the old and new service to avoid complex version interdependency. ==== virt-v2v ==== Subpackages: virt-v2v-bash-completion - Relax the openssh requirement. Options passed to scp are known by openssh 8.4 - Move autoreconf from prep to build, to simplify quilt setup. ==== xen ==== Version update (4.18.0_04 -> 4.18.0_06) Subpackages: xen-libs xen-tools xen-tools-domU - Upstream bug fixes (bsc#1027519) 6566fef3-x86-vLAPIC-x2APIC-derive-LDR-from-APIC-ID.patch 6569ad03-libxg-mem-leak-in-cpu-policy-get-set.patch 656ee5e1-x86emul-avoid-triggering-event-assertions.patch 656ee602-cpupool-adding-offline-CPU.patch 656ee6c3-domain_create-error-path.patch 6571ca95-fix-sched_move_domain.patch 6578598c-Arm-avoid-pointer-overflow-on-invalidate.patch 65842d5c-x86-AMD-extend-CPU-erratum-1474-fix.patch 65a7a0a4-x86-Intel-GPCC-setup.patch 65a9911a-VMX-IRQ-handling-for-EXIT_REASON_INIT.patch 65b27990-x86-p2m-pt-off-by-1-in-entry-check.patch 65b29e91-x86-ucode-stability-of-raw-policy-rescan.patch - bsc#1218851 - VUL-0: CVE-2023-46839: xen: phantom functions assigned to incorrect contexts (XSA-449) 65b8f961-PCI-fail-dev-assign-if-phantom-functions.patch - bsc#1219080 - VUL-0: CVE-2023-46840: xen: VT-d: Failure to quarantine devices in !HVM builds (XSA-450) 65b8f9ab-VT-d-else-vs-endif-misplacement.patch - Patches dropped / replaced by newer upstream versions xsa449.patch xsa450.patch - bsc#1219080 - VUL-0: CVE-2023-46840: xen: VT-d: Failure to quarantine devices in !HVM builds (XSA-450) xsa450.patch - bsc#1218851 - VUL-0: CVE-2023-46839: xen: phantom functions assigned to incorrect contexts (XSA-449) xsa449.patch

1 0

New Tumbleweed snapshot 20240201 released!
by Dominique Leuenberger 02 Feb '24

02 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (1.0.0 -> 1.0.1) MozillaFirefox cups-filters (1.28.15 -> 1.28.17) drkonqi5 gnome-remote-desktop iproute2 (6.6 -> 6.7) kio kio-extras5 ksystemstats5 kwin5 libguestfs libksysguard5 mutter parted (3.5 -> 3.6) pipewire (1.0.1 -> 1.0.2) plasma5-addons plasma5-workspace python-Mako (1.3.0 -> 1.3.2) python-Twisted sddm sendmail xdg-utils === Details === ==== AppStream ==== Version update (1.0.0 -> 1.0.1) Subpackages: libAppStreamQt5-3 libappstream5 - Update to 1.0.1 Bugfixes: * Fix lib name for Qt5 link target * meson: Pass -D_DARWIN_C_SOURCE on darwin * Fix macOS build * stemmer: Resolve potential issue where stemmer may never be initialized * cli: Don't fail what-provides if components were found * Fix query element order for what-provides queries * validator: Demote developer-name-tag-deprecated to info severity for now * content-rating: Fix missing or wrong value descriptions for rating IDs * curl: Add transfer speed timeouts for HTTP downloads * curl: Retry operations on potentially transient errors Miscellaneous: * validator: Improve hint for content-attribute-value-invalid * Allow building without zstd temporarily - Drop patches, merged upstream: * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch * 0001-Fix-lib-name-for-Qt5-link-target.patch - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== MozillaFirefox ==== Subpackages: MozillaFirefox-translations-common - Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272) ==== cups-filters ==== Version update (1.28.15 -> 1.28.17) - Version upgrade to 1.28.17 See https://github.com/OpenPrinting/cups-filters/releases Bug fix release, to more reliably discover all printer capablities from driverless printers, especially borderless printing, and to preferably use Apple Raster instead of PWG Raster or PCLM. * libcupsfilters: In PPD generator create only one *cupsFilter2: line for raster. Only use the most desirable/reliable format, usually Apple Raster (Issue #498). * libcupsfilters: In get_printer_attributes() poll media-col-database separately if needed. On some printers one gets media-col-database only this way. Often it reveals important functionality, like for example borderless printing (Issue #492). * libcupsfilters: Let PPD generator also parse media-col-ready IPP attribute. media-col-ready lists the loaded media, in contrary to media-ready, as list of complete descriptions of the media (media-col data structure). This often lists also variants like borderless (it is the same physical paper). Especially useful when media-col-database is not available (Issue #492). * libcupsfilters: In generate_sizes() consider all margin alternatives. When generating the PPD file for a driverless printer, and in the media-{left,right,top,bottom}-margin-supported printer IPP attributes there was more than 1 value, the first value (which often was the 0 for borderless printing) was not considered, leaving the borderless functionality of many printers undiscovered (Issue #492). Issues are those at https://github.com/OpenPrinting/cups-filters/issues - Version upgrade to 1.28.16 See https://github.com/OpenPrinting/cups-filters/releases Bug fix release, to make images be printed in their original size with "print-scaling=none" and to not use deprecated data types for reading TIFF images. * imagetoraster, imagetopdf, libcupsfilters: Added support for reading the resolution of an image from its EXIF data when loading it. This way we get the image reproduced in its original size with "print-scaling=none" (Issue #362). * libcupsfilters: Replaced deprecated data types uint16 and uint32. The function to read TIFF image files via libtiff in cupsfilters/image-tiff.c uses the deprecated types uint16 and uint32. The replacements for these types are uint16_t and uint32_t. Issues are those at https://github.com/OpenPrinting/cups-filters/issues ==== drkonqi5 ==== Subpackages: drkonqi5-lang - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== gnome-remote-desktop ==== Subpackages: gnome-remote-desktop-lang - Explict require higher version of gcc on SLE/Leap. ==== iproute2 ==== Version update (6.6 -> 6.7) Subpackages: iproute2-bash-completion - Update to release 6.7 * devlink: Support setting port function ipsec_crypto cap and ipsec_packet cap * iplink: bridge: Add support for bridge FDB learning limits * bridge: fdb: support match on source VNI, nexthop ID, destination VNI, destination port, destination IP address and [no]router flag in the flush command * bridge: mdb: Add get support ==== kio ==== Subpackages: kio-core kio-lang - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== kio-extras5 ==== Subpackages: kio-extras5-lang libkioarchive5 - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== ksystemstats5 ==== Subpackages: ksystemstats5-lang - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== kwin5 ==== Subpackages: kwin5-lang - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - BuildRequire pkgconfig(libzstd) additionaly to zstd: we need the devel package. In the past, it was pulled in by indirect deps. ==== libksysguard5 ==== Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== mutter ==== Subpackages: mutter-lang - Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD apps with GNOME 45, and the latest LTS Oracle Installer works fine without it, the original bug is not a problem (bsc#1218935). ==== parted ==== Version update (3.5 -> 3.6) Subpackages: libparted-fs-resize0 libparted2 parted-lang - update to version 3.6: - Support GPT partition attribute bit 63 as no_automount flag - Add type commands to set type-id on MS-DOS and type-uuid on GPT - Add swap flag support to the dasd disklabel - Add display of GPT disk and partition UUIDs in JSON output refreshed patches: - parted-mac.patch - libparted-dasd-implicit-partition-disk-flag.patch - tests-disable.patch removed patches: - direct-handling-of-partition-type-id-and-uuid.patch - type-command.patch - libparted-dasd-improve-lvm-raid-flag-handling.patch - libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch ==== pipewire ==== Version update (1.0.1 -> 1.0.2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.2: * Highlights - Fix v4l2 enumeration with filter. This should fix negotiation in some GStreamer pipelines with capsfilter. Also probe for EXPBUF support before using it. - Fix max-latency property and Buffer param when dealing with small ALSA device buffers. This should fix stuttering with some AMD based soundcards. - More small cleanups an improvements. * Modules - Improve netjack2 channel positions. - Improve RAOP module state after suspend/resume. (#3778) - Avoid crash in some LV2 plugins by configuring the Atom ports. (#3815) * SPA - Bump libcamera requirements to 0.2.0. - Try to avoid unaligned load exceptions. (#3790) - Fix v4l2 enumeration with filter. (#1793) - Fix max-latency property and Buffer param when dealing with small ALSA device buffers. This should fix stuttering with some AMD based soundcards. (#3744,#3622) - Add a resync.ms option to node.driver to make it possible to resync fast to clock jumps. - Probe for EXPBUF support in v4l2 before using it. (#3821) * pulse-server - Also emit change events when the port list change. * Bluetooth - Log a more verbose explanation when other soundservers seem to be interfering with bluetooth. - Add quirks for Rockbox Brick. (#3786) - Add quirks for SoundCore mini2. (#2927) * JACK - Improve check for the running state of clients. (#3794) - Drop patches already included by upstream: * 0001-spa-libcamera-use-CameraConfigurationorientation.patch * 0002-spa-libcamera-bump-minimum-supported-version-to-0.2.0.patch ==== plasma5-addons ==== Subpackages: plasma5-addons-lang - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== python-Mako ==== Version update (1.3.0 -> 1.3.2) - update to 1.3.2: * Fixed parsing issue where attempting to render a single percent sign % using an escaped percent %% would not function correctly if the escaped percent were not the first character on a line. Note that this is a revised version of a similar change made in Mako 1.3.1 which caused unexpected parsing regressions, resulting in the release being yanked. ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - Add stop-using-3-arg-throw.patch: * Avoid 3-arg throw to fix a DeprecationWarning in Python 3.12. ==== sddm ==== Subpackages: sddm-branding-openSUSE sddm-greeter-qt5 - Switch to the latest GCC version available in Leap for packages that can't build with the default compiler ==== sendmail ==== Subpackages: libmilter1_0 - Correct permisson files path to /usr/share/permissions/permissions.d/ (boo#1219339) - Fix file provides of openssl and timeout - Avoid error messages of chkstat as this tools does not accept slashes at the end of directory paths! - Move sendmails permissions files to /usr/share/permissions/ - Work on certificates usage of smart and relay host - Work on certificates for running sendmail ==== xdg-utils ==== - Update to version 1.2.0+20240130: * xdg-icon-resource: unbreak syntax by removing stray grave accent (boo#1219420)

1 0

New Tumbleweed snapshot 20240131 released!
by Dominique Leuenberger 01 Feb '24

01 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cups (2.4.2 -> 2.4.7) curl (8.5.0 -> 8.6.0) fillup kexec-tools libbs2b libssh (0.10.5 -> 0.10.6) libunwind (1.7.2 -> 1.8.0) patterns-base permissions python-pygit2 (1.13.3 -> 1.14.0) python-rpm (4.18.0 -> 4.19.1) qt6-base rpm (4.18.0 -> 4.19.1) suse-module-tools (16.0.42 -> 16.0.43) vala-panel-appmenu virtiofsd (1.7.2 -> 1.10.1) vsftpd xz (5.4.5 -> 5.4.6) === Details === ==== cups ==== Version update (2.4.2 -> 2.4.7) Subpackages: cups-client cups-config libcups2 libcupsimage2 - Version upgrade to 2.4.7: See https://github.com/openprinting/cups/releases CUPS 2.4.7 is released to ship the fix for CVE-2023-4504 and several other changes, among them it is adding OpenSSL support for cupsHashData function and bug fixes. Detailed list: * CVE-2023-4504 - Fixed Heap-based buffer overflow when reading Postscript in PPD files * Added OpenSSL support for cupsHashData (Issue #762) * Fixed delays in lpd backend (Issue #741) * Fixed extensive logging in scheduler (Issue #604) * Fixed hanging of lpstat on IBM AIX (Issue #773) * Fixed hanging of lpstat on Solaris (Issue #156) * Fixed printing to stderr if we can't open cups-files.conf (Issue #777) * Fixed purging job files via cancel -x (Issue #742) * Fixed RFC 1179 port reserving behavior in LPD backend (Issue #743) * Fixed a bug in the PPD command interpretation code (Issue #768) Issues are those at https://github.com/OpenPrinting/cups/issues - Version upgrade to 2.4.6: See https://github.com/openprinting/cups/releases CUPS 2.4.6 is released to ship the fix for CVE-2023-34241 and two other bug fixes. Detailed list: * Fix linking error on old MacOS (Issue #715) * Fix printing multiple files on specific printers (Issue #643) * Fix use-after-free when logging warnings in case of failures in cupsdAcceptClient() (fixes CVE-2023-34241) Issues are those at https://github.com/OpenPrinting/cups/issues - Version upgrade to 2.4.5: See https://github.com/openprinting/cups/releases CUPS 2.4.5 is a hotfix release for a bug which corrupted locally saved certificates, which broke secured printing via TLS after the first print job. - Version upgrade to 2.4.4: See https://github.com/openprinting/cups/releases CUPS 2.4.4 release is created as a hotfix for segfault in cupsGetNamedDest(), when caller tries to find the default destination and the default destination is not set on the machine. - Version upgrade to 2.4.3: See https://github.com/openprinting/cups/releases CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements and many bug fixes. CUPS now implements fallback for printers with broken firmware, which is not capable of answering to IPP request get-printer-attributes with all, media-col-database - this enables driverless support for bunch of printers which don't follow IPP Everywhere standard. Aside from the CVE fix the most important fixes are around color settings, printer application support fixes and OpenSSL support. Detailed list of changes: * Added a title with device uri for found network printers (Issues #402, #393) * Added new media sizes defined by IANA (Issues #501) * Added quirk for GoDEX label printers (Issue #440) * Fixed --enable-libtool-unsupported (Issue #394) * Fixed configuration on RISC-V machines (Issue #404) * Fixed the device_uri invalid pointer for driverless printers with .local hostname (Issue #419) * Fixed an OpenSSL crash bug (Issue #409) * Fixed a potential SNMP OID value overflow issue (Issue #431) * Fixed an OpenSSL certificate loading issue (Issue #465) * Fixed Brazilian Portuguese translations (Issue #288) * Fixed cupsd default keychain location when building with OpenSSL (Issue #529) * Fixed default color settings for CMYK printers as well (Issue #500) * Fixed duplicate PPD2IPP media-type names (Issue #688) * Fixed possible heap buffer overflow in _cups_strlcpy() (fixes CVE-2023-32324) * Fixed InputSlot heuristic for photo sizes smaller than 5x7" if there is no media-source in the request (Issue #569) * Fixed invalid memory access during generating IPP Everywhere queue (Issue #466) * Fixed lprm if no destination is provided (Issue #457) * Fixed memory leaks in create_local_bg_thread() (Issue #466) * Fixed media size tolerance in ippeveprinter (Issue #487) * Fixed passing command name without path into ippeveprinter (Issue #629) * Fixed saving strings file path in printers.conf (Issue #710) * Fixed TLS certificate generation bugs (Issue #652) * ippDeleteValues would not delete the last value (Issue #556) * Ignore some of IPP defaults if the application sends its PPD alternative (Issue #484) * Make Letter the default size in ippevepcl (Issue #543) * Now accessing Admin page in Web UI requires authentication (Issue #518) * Now look for default printer on network if needed (Issue #452) * Now we poll media-col-database separately if we fail at first (Issue #599) * Now report fax attributes and values as needed (Issue #459) * Now localize HTTP responses using the Content-Language value (Issue #426) * Raised file size limit for importing PPD via Web UI (Issue #433) * Raised maximum listen backlog size to INT MAX (Issue #626) * Update print-color-mode if the printer is modified ... changelog too long, skipping 14 lines ... see the above CUPS 2.4.3 changes ==== curl ==== Version update (8.5.0 -> 8.6.0) Subpackages: libcurl4 - Update to 8.6.0: [bsc#1219149, CVE-2024-0853] * Security fixes: - CVE-2024-0853: OCSP verification bypass with TLS session reuse * Changes: - add CURLE_TOO_LARGE, CURLINFO_QUEUE_TIME_T * Bugfixes: - altsvc: free 'as' when returning error - asyn-ares: with modern c-ares, use its default timeout - cf-socket: show errno in tcpkeepalive error messages - cmdline-opts: update availability for the *-ca-native options - configure: when enabling QUIC, check that TLS supports QUIC - content_encoding: change return code to typedef'ed enum - curl: show ipfs and ipns as supported "protocols" - CURLINFO_REFERER.3: clarify that it is the *request* header - dist: add tests/errorcodes.pl to the tarball - gen.pl: support ## for doing .IP in table-like lists - GHA: bump ngtcp2, gnutls, mod_h2, quiche - hostip: return error immediately when Curl_ip2addr() fails - http3/quiche: fix result code on a stream reset - http3: initial support for OpenSSL 3.2 QUIC stack - http: check for "Host:" case insensitively - http: fix off-by-one error in request method length check - http: only act on 101 responses when they are HTTP/1.1 - lib: add debug log outputs for CURLE_BAD_FUNCTION_ARGUMENT - lib: error out on multissl + http3 - lib: fix variable undeclared error caused by `infof` changes - lib: rename Curl_strndup to Curl_memdup0 to avoid misunderstanding - lib: strndup/memdup instead of malloc, memcpy and null-terminate - libssh2: use `libssh2_session_callback_set2()` with v1.11.1 - ngtcp2: put h3 at the front of alpn - openldap: fix an LDAP crash - openldap: fix STARTTLS - openssl: re-match LibreSSL deinit with init - rtsp: deal with borked server responses - sasl: make login option string override http auth - tool: prepend output_dir in header callback - tool_getparam: stop supporting `@filename` style for --cookie - transfer: fix upload rate limiting, add test cases - url: don't set default CA paths for Secure Transport backend - url: for disabled protocols, mention if found in redirect - vquic: extract TLS setup into own source - websockets: check for negative payload lengths * Remove patches fixed upstream: - curl-adjust-pollset-fix.patch - curl-tests-errorcodes.patch * Rebase dont-mess-with-rpmoptflags.patch ==== fillup ==== - remove bin symlink for non-suse distributions ==== kexec-tools ==== - add kexec-dont-use-kexec_file_load-on-xen.patch: kexec: don't use kexec_file_load on xen (bsc#1218590) ==== libbs2b ==== - Add libbs2b-clipping.patch to remove clipping of overloaded samples. Patch is taken from: https://github.com/alexmarsev/libbs2b For more details see: https://github.com/strawberrymusicplayer/strawberry/issues/1320 ==== libssh ==== Version update (0.10.5 -> 0.10.6) Subpackages: libssh-config libssh4 - Fix regression parsing IPv6 addresses provided as hostname * Added libssh-fix-ipv6-hostname-regression.patch - Update to version 0.10.6 https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-r… - Fix CVE-2023-6004: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (bsc#1218209) - Fix CVE-2023-48795: prefix truncation breaking ssh channel integrity (bsc#1218126) - Fix CVE-2023-6918: Added Missing checks for return values for digests (bsc#1218186) ==== libunwind ==== Version update (1.7.2 -> 1.8.0) - Update to 1.8.0: * Improve unwinding through a bad function pointer on x86_64 * Fix UMRs indicated by valgrind (x86_64) * fix byte_order_is_valid function logic * Use size_t to match R.H.S * Move get_proc_info_in_range under dwarf/ * Bump actions/checkout@v2 to @V3 * dwarf_find_unwind_table: Find load_base correctly when current segment does not start at segbase * Add introspection for march=armv8-a+sve * Linux: Make get_elf_image guaranteed AS-safe * Provide syscall wrappers for mmap and munmap * Allow to use a custom dl_iterate_phdr implementation * aarch64: unw_step() validates address before calling dwarf_get * Provide AS-safe allocator to LZMA * Rework register load in aarch64_local_resume() * Fix arm postdecrement * Added support for unwinding through PPC64 PLT entries * Fix array indexing bug in dwarf_search_unwind_table * Fix unaligned memory accesses in */Ginit.c * Get filename and offset from ip * Fix maps leak if caller's pathlen is too small * Adjust DYNAMIC addrs in loaded image * Fix crash in elf_w(valid_object) * Fix segfault on QNX ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - patterns-base-fips: Require openssl-fips-provider when libopenssl is installed (meta package and libopenssl3) (boo#1219384). ==== permissions ==== Subpackages: chkstat permissions-config - Create directory /usr/share/permissions/permissions.d for packages to place their drop-ins. ==== python-pygit2 ==== Version update (1.13.3 -> 1.14.0) - update to 1.14.0: * Drop support for Python 3.8 * New `Repository.submodules` namespace * New `Repository.listall_mergeheads()`, `Repository.message`, `Repository.raw_message` and `Repository.remove_message()` * New `pygit2.enums` supersedes the `GIT_` constants * Now `Repository.status()`, `Repository.status_file()`, `Repository.merge_analysis()`, `DiffFile.flags`, `DiffFile.mode`, `DiffDelta.flags` and `DiffDelta.status` return enums * Now repository\'s `merge()`, `merge_commits()` and `merge_trees()` take enums/flags for their `favor`, `flags` and `file_flags` arguments. * Fix crash in filter cleanup * Documentation fixes * Remove deprecated `Repository.create_remote(...)` function, use instead `Repository.remotes.create(...)` * Deprecate `Repository.add_submodule(...)`, use `Repository.submodules.add(...)` * Deprecate `Repository.lookup_submodule(...)`, use `Repository.submodules[...]` * Deprecate `Repository.init_submodules(...)`, use `Repository.submodules.init(...)` * Deprecate `Repository.update_submodule(...)`, use `Repository.submodules.update(...)` * Deprecate `GIT_*` constants, use `pygit2.enums` * Passign dicts to repository\'s `merge(...)`, `merge_commits(...)` and `merge_trees(...)` is deprecated. Instead pass `MergeFavor` for the `favor` argument, `MergeFlag` for `flags`, and `MergeFileFlag` for `file_flags`. ==== python-rpm ==== Version update (4.18.0 -> 4.19.1) - Modernize python-rpm.spec to stop using deprecated macros (%python_build and %python_install). - update to rpm-4.19.1 ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 - Switch to the latest GCC version available in Leap - Replace 0001-Require-GCC-12.patch with 0001-Use-newer-GCC-on-Leap.patch ==== rpm ==== Version update (4.18.0 -> 4.19.1) - fix Source url to match what is listed on https://rpm.org/download.html - disable sysusers handling for now - update to rpm-4.19.1 * new spec snippet support for dynamic spec generation * new sysusers.d integration for automated user and group handling * new CMake build system * removal of various deprecated and/or unused APIs * various internal code cleanups - refreshed patches: * brp-compress-no-img.patch * brp.diff * brpcompress.diff * build.diff * enable-postin-scripts-error.diff * fileattrs.diff * findlang.diff * findsupplements.diff * langnoc.diff * macrosin.diff * platformin.diff * posttrans.diff * refreshtestarch.diff * rpm-findlang-inject-metainfo.patch * rpmqpack.diff * rpmrc.diff * selinux_transactional_update.patch * localetag.diff * weakdepscompat.diff * zstdpool.diff - deleted patches: * cpuid_lzcnt.patch * libmagic-exceptions.patch * remove-awk-dependency.patch * whatrequires-doc.diff * x86_64-microarchitectures.patch - new patches: * python_setup.diff * rpmsort_reverse.diff * canongnu.diff - new file: * build-aux.tar.bz2 (taken from rpm-4.18) - fix --runposttrans not working correctly with the --root option [bnc#1216091] ==== suse-module-tools ==== Version update (16.0.42 -> 16.0.43) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.43: * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable (boo#1217979) * Don't rebuild existing initramfs imagees if the environment variable SKIP_REGENERATE_ALL=1 is set (boo#1192014) * README: Update blacklist description (gh#openSUSE/suse-module-tools#71) ==== vala-panel-appmenu ==== Subpackages: appmenu-gtk-module-common appmenu-gtk2-module appmenu-gtk3-module libappmenu-gtk2-parser0 libappmenu-gtk3-parser0 - Fix CFLAGS and CXXFLAGS to use distro flags ==== virtiofsd ==== Version update (1.7.2 -> 1.10.1) - Fix CVE-2023-50711: vmm-sys-util: out of bounds memory accesses (bsc#1218502, bsc#1218500) - Update to version 1.10.1: * Bump version to v1.10.1 * Fix mandatory user namespaces * Don't drop supplemental groups in unprivileged user namespace * Bump version to v1.10.0 * Update rust-vmm dependencies (bsc#1218500) * Bump version to v1.9.0 - Spec: switch to using the upstream virtio-fs config file for qemu - Spec: switch back to greedy cargo updates of vendored dependencies ==== vsftpd ==== - Fix location of ftpusers in /usr/lib/pam.d/vsftpd (boo#1219362) ==== xz ==== Version update (5.4.5 -> 5.4.6) Subpackages: liblzma5 liblzma5-32bit liblzma5-x86-64-v3 xz-lang - Build static library on SLE - update to 5.4.6: * Fixed a bug involving internal function pointers in liblzma not being initialized to NULL. The bug can only be triggered if lzma_filters_update() is called on a LZMA1 encoder, so it does not affect xz or any application known to us that uses liblzma. * Fixed a regression introduced in 5.4.2 that caused encoding in the raw format to unnecessarily fail if --suffix was not used. For instance, the following command no longer reports that --suffix must be used: echo foo | xz --format=raw --lzma2 | wc -c * Fixed an issue on MinGW-w64 builds that prevented reading from or writing to non-terminal character devices like NUL. * Added a new test.

1 0

snmp dependency problem
by Peter Czanik 01 Feb '24

01 Feb '24

Hi, While trying to update syslog-ng, I ran into az snmp dependency problem: # osc build standard [...] Getting buildinfo from server and store to /root/home:czanik:branches:Base:System/syslog-ng/.osc/_buildinfo-standard-x86_64.xml buildinfo is broken... it says: unresolvable: nothing provides librpmio.so.9()(64bit) needed by libsnmp40 nothing provides librpm.so.9()(64bit) needed by libsnmp40 If I remove snmp support, syslog-ng compiles just fine as there are no other dependecy problems. Also, builds on armv7l, ppc64le, riscv64 seem to be OK, but builds on s390x, i586, x86_64 and aarch64 fail with the above message. Anything I can do? Or I should just wait? Peter

3 2

Installation without import previous user data
by Obs Geeko 01 Feb '24

01 Feb '24

Hello everyone, When install TW/Leap, I don't want to import previous user ssh keys. In "Local Uesers" step, the "Import User Data from a Previous Installation" is un-checked as default. But in installation summary step, "import SSH Host Keys and Configuration" is checked as default. So if we do not de-select it, it will import previous ssh keys. Does it conflict with "Local Uesers" step? "Import User Data" means not include ssh keys? I found this is not only happens recently in Tumbleweed, Leap 15.4, 15.5 also have this problem. Thank you. Best regards.

4 3