May 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240517 released!
by Dominique Leuenberger 18 May '24

18 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (24.0.5 -> 24.0.7) Mesa-drivers (24.0.5 -> 24.0.7) NetworkManager-applet dracut (059+suse.581.g19b7c06c -> 059+suse.588.g528264be) gdk-pixbuf gettext-runtime kernel-firmware malcontent (0.11.1 -> 0.12.0) openldap2 (2.6.6 -> 2.6.7) openldap2-contrib-src (2.6.6 -> 2.6.7) openssh permissions (1699_20240307 -> 1699_20240513) shaderc (2024.0 -> 2024.1) sssd (2.9.4 -> 2.9.5) vim (9.1.0330 -> 9.1.0413) virt-manager vulkan-loader (1.3.280.0 -> 1.3.283.0) vulkan-tools (1.3.280.0 -> 1.3.283.0) === Details === ==== Mesa ==== Version update (24.0.5 -> 24.0.7) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to bugfix release 24.0.7 - -> https://docs.mesa3d.org/relnotes/24.0.7.html - Update to bugfix release 24.0.6 - -> https://docs.mesa3d.org/relnotes/24.0.6.html ==== Mesa-drivers ==== Version update (24.0.5 -> 24.0.7) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 24.0.7 - -> https://docs.mesa3d.org/relnotes/24.0.7.html - Update to bugfix release 24.0.6 - -> https://docs.mesa3d.org/relnotes/24.0.6.html ==== NetworkManager-applet ==== Subpackages: NetworkManager-connection-editor NetworkManager-connection-editor-lang - Swicth to ayatana-appindicator: Replace pkgconfig(appindicator3-0.1) BuildRequires with pkgconfig(ayatana-appindicator3-0.1). The legacy appindicator has been unmaintained for a while already. ==== dracut ==== Version update (059+suse.581.g19b7c06c -> 059+suse.588.g528264be) - Update to version 059+suse.588.g528264be: * fix(install.d): skip if dracut is not the initrd or UKI generator * style(install.d): shfmt reformat * fix(suse-initrd): clean return of installkernel() (bsc#1223467) * fix(dracut.spec): do not check if fillup template exists at %post end ==== gdk-pixbuf ==== Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Enable test suite on x86_64 (other arches seem too flaky for now): + Add %check section and call %meson_test + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for more than 30s, by marking it as a slow test (glgo#GNOME/gdk-pixbuf!174). - Migrate package to a regular obs_scm service, no longer password protecting a zip file. The originally reported bsc#1159337 seems no longer be applicable and we prefer the easier route. - Drop unzip BuildRequires and pre_checkin.sh script. ==== gettext-runtime ==== Subpackages: libtextstyle0 - Require this-is-only-for-build-envs by the -mini packages: ensure those mini packages never find their way onto a system, even when published. ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update aliases from 6.9 TW kernels ==== malcontent ==== Version update (0.11.1 -> 0.12.0) Subpackages: libmalcontent-0-0 libmalcontent-ui-1-1 malcontent-control malcontent-lang typelib-1_0-Malcontent-0 - Update to 0.12.0: * Support searching list of apps to restrict * Keynav focus disappears after GTK4 port * Confusing sentence in user-controls.ui: above, below? * mct_app_filter_is_appinfo_allowed fails when desktop entry is missing Exec key * âAll Agesâ option for Application Suitability is misleading * Updated translations * Add AppInfo support to malcontent-client check-app-filter * update ru.po * data: Update appdata * build: Hide private structs from generated GIR files * Various build and dependency cleanups for GTK 4.12 * malcontent-client: Fix syntax error in appinfo support ==== openldap2 ==== Version update (2.6.6 -> 2.6.7) Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - update to 2.6.7: * Added slapo-dynlist option to disable filter support * Fixed liblber missing newline on long msg * Fixed libldap exit handling with OpenSSL3 * Fixed libldap with TLS and multiple ldap URIs * Fixed libldap OpenSSL cipher suite handling * Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files * Fixed lloadd to work when resolv.conf is missing * Fixed lloadd handling of closing connection * Fixed lloadd tiers to be correctly linked on startup * Fixed slapd to honour disclose in matchedDN handling * Fixed slapd handling of regex testing in ACLs * Fixed slapd sync replication with glued database * Fixed slapd-asyncmeta when remote suffix is empty * Fixed slapo-dynlist so it can't be global * Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath ==== openldap2-contrib-src ==== Version update (2.6.6 -> 2.6.7) - update to 2.6.7: * Added slapo-dynlist option to disable filter support * Fixed liblber missing newline on long msg * Fixed libldap exit handling with OpenSSL3 * Fixed libldap with TLS and multiple ldap URIs * Fixed libldap OpenSSL cipher suite handling * Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files * Fixed lloadd to work when resolv.conf is missing * Fixed lloadd handling of closing connection * Fixed lloadd tiers to be correctly linked on startup * Fixed slapd to honour disclose in matchedDN handling * Fixed slapd handling of regex testing in ACLs * Fixed slapd sync replication with glued database * Fixed slapd-asyncmeta when remote suffix is empty * Fixed slapo-dynlist so it can't be global * Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Remove the recommendation for openssh-server-config-rootlogin from openssh-server. Since the default for that config option was changed in SLE it's not needed anymore in SLE nor in TW (boo#1224392). - Add a warning in %post of openssh-clients, openssh-server and openssh-server-config-disallow-rootlogin to warn the user if the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not being used (bsc#1223486). ==== permissions ==== Version update (1699_20240307 -> 1699_20240513) Subpackages: permissions-config - rename chkstat package to permctl to match the new binary names. Establish Provides/Obsoletes to keep dependencies and old package cleanup in working order, see: https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package - add BuildRequires for acl programs for tests to succeed. Still keep %check disabled, because the new ACL test fails without /etc/subuid, /etc/subgid setup. - Update to version 1699_20240513: * chkstat: has been renamed to permctl to better reflect its purpose. A symlink for backward compatibility will remain in place. * documentation: updated man pages * ACL support: permctl (formerly chkstat) now supports an additional `+acl` syntax to support assigning ACLs to files similar to the already existing support for file based capabilities. ==== shaderc ==== Version update (2024.0 -> 2024.1) - Update to release 2024.1 * No changelog was provided ==== sssd ==== Version update (2.9.4 -> 2.9.5) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.9.5 * Added failover_primary_timout configuration option. This can be used to configure how often SSSD tries to reconnect to a primary server after a successful connection to a backup server. This was previously hardcoded to 31 seconds which is kept as the default value. ==== vim ==== Version update (9.1.0330 -> 9.1.0413) Subpackages: vim-data vim-data-common xxd - update to 9.1.0413 * smoothscroll may cause infinite loop * add missing entries for the keys CTRL-W g<Tab> and <C-Tab> * update vi_diff.txt: add default value for 'flash' * typo in regexp_bt.c in DEBUG code * allow indented commands * Fix wrong define regex in ftplugin * Filter out non-Latin-1 characters for syntax tests * prefer scp over pscp * fix typo in usr_52.txt * too long functions in eval.c * warning about uninitialized variable * too many strlen() calls in the regexp engine * E16 fix, async keyword support for define * Stuck with long line and half-page scrolling * Divide by zero with getmousepos() and 'smoothscroll' * update and remove some invalid links * update translation of xxd manpage * Recursively delete directories by default with netrw delete command * Strive to remain compatible for at least Vim 7.0 * tests: xxd buffer overflow fails on 32-bit * Stop handpicking syntax groups for @javaTop * [security] xxd: buffer-overflow with specific flags * Vim9: not able to import file from start dir * filetype: mdd files detected as zsh filetype * filetype: zsh module files are not recognized * Remove hardcoded private.ppk logic from netrw * Vim9: confusing error message for unknown type * block_editing errors out when using del * add new items to scripts section in syntax plugin * Vim9: imported vars are not properly type checked * Wrong display with 'smoothscroll' when changing quickfix list * filetype: jj files are not recognized * getregionpos() may leak memory on error * The CODEOWNERS File is not useful * Remove and cleanup Win9x legacy from netrw * add MsgArea to 'highlight' option description * Cannot get a list of positions describing a region * Fix digit separator in syntax script for octals and floats * Update link to Wikipedia Vi page * clear $MANPAGER in ftplugin before shelling out * Fix typos in help documents * 'viewdir' not respecting $XDG_CONFIG_HOME * tests: Vim9 debug tests may be flaky * correct getscriptinfo() example * Vim9: could improve testing * test_sound fails on macos-12 * update Serbian menu * update Slovak menu * update Slovenian menu * update Portuguese menu * update Dutch menu * update Korean menu * update Icelandic menu * update Czech menu * update Afrikaans menu * update German menu * filetype: inko files are not recognized * filetype: templ files are not recognized * cursor() and getregion() don't handle v:maxcol well * Vim9: null value tests not sufficient * update Catalan menu * filetype: stylus files not recognized * update spanish menu localization * regenerate helptags * Vim9: crash with null_class and null_object * Add tags about lazyloading of menu * tests: vt420 terminfo entry may not be found * filetype: .out files recognized as tex files * filetype: Kbuild files are not recognized * cbuffer and similar commands don't accept a range * Improve the recognition of the "indent" method declarations * Fix a typo in usr_30.txt * remove undefined var s:save_cpoptions and add include setting * missing setlocal in indent plugin * Calculating line height for unnecessary amount of lines * improve syntax file performance * There are a few typos * Vim9: no comments allowed after class vars * CI: remove trailing white space in documentation * Formatting text wrong when 'breakindent' is set * Add oracular (24.10) as Ubuntu release name * Vim9: Trailing commands after class/enum keywords ignored * tests: 1-second delay after Test_BufEnter_botline() * update helptags for jq syntax * include syntax, ftplugin and compiler plugin * fix typo synconcealend -> synconcealed * include a simple comment toggling plugin * wrong botline in BufEnter * clarify syntax vs matching mechanism * fix undefined variable in indent plugin * ops.c code uses too many strlen() calls * Calling CLEAR_FIELD() on the same struct twice * Vim9: compile_def_function() still too long * Update Serbian messages * clarify the effect of setting the shell to powershell * Improve the recognition of the "style" method declarations * Vim9: problem when importing autoloaded scripts * compile_def_function is too long ... changelog too long, skipping 45 lines ... * runtime(doc): fix typos in starting.txt ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Enable mdev tests with the introduction of libvirt 10.3.0 virt-manager.spec ==== vulkan-loader ==== Version update (1.3.280.0 -> 1.3.283.0) - Update to release SDK-1.3.283.0 * Bugfixes for Windows ==== vulkan-tools ==== Version update (1.3.280.0 -> 1.3.283.0) - Update to release SDK-1.3.283.0 * vulkaninfo: Add minImageCount/maxImageCount to VK_EXT_surface_maintenance1 information

1 0

Snapshot 20240514 causing problems with Firefox
by Oliver Schwabedissen 18 May '24

18 May '24

Hello, I updated from 20240512 to 20240514 this morning, rebooted and logged in. I started Thunderbird and Firefox (125.0.3) and after reloading 3-4 tabs the screen went black, I saw the text console and then got the login prompt again. After logging in again I only started Firefox. It reported a crash. I reloaded some tabs and.. Firefox crashes again, taking X11 with it again. I logged in once more and was able to reproduce the problem. I'm using saved sessions in Firefox, the tabs I opened were the same I open every day. As I need the system for work I decided to roll back to the latest snapshot before the update. Now everything works fine again. No idea what in snapshot 20240514 causes the problem, I will not be able to look at it before Friday evening. When looking at the updated packages in 20240514 I have no idea what might cause these crashes. Cheers, Oliver -- PGP Public Key available at https://pgp.mit.edu/ Key fingerprint = 3264 280C 05B1 572F 3F0B 42B8 1E7B 2D9D 063B D507

3 6

Strange crashes after snapshot 20240514
by Oliver Schwabedissen 18 May '24

18 May '24

Hello, the problems with snapshot 20240514 are increasing: At first only Firefox crashed (when opening a special website showing some graphics). Now I found that I can't open PDF files from Dolphin anymore, as Okular crashes with a core dump. The same happens when starting Okular from system menu. Starting Okular from command line works, though. When I tried to write this reply also Thunderbird crashed with a core dump. When I tried do write this reply the second time Thunderbird crashed when I tried to send it., So this is my third try... I also found several core dump messages for kioworker in /var/log/warn.Except for the Firefox crashes I noticed that all crash messages in /var/log/war mention radeonsi_dri.so. Meanwhile I can't start Kate or Konsole anymore, they also crash. I also noticed that after logging off and on again the problems disappear. Okular can be started from Dolphin, Konsole starts, Kate starts. I will check if the problems re-appear when I leave this session open for some time. But I guess I have to go back to snapshot 20240512 as I can't live with all these crashes. I think it's time for a bug report now. But for what package? Regards, Oliver -- PGP Public Key available at https://pgp.mit.edu/ Key fingerprint = 3264 280C 05B1 572F 3F0B 42B8 1E7B 2D9D 063B D507

3 3

Slowroll: package stats + thoughts
by Bernhard M. Wiedemann 17 May '24

17 May '24

Dear fellow Geekos, You might have seen my https://en.opensuse.org/File:Slowroll-vs-tumbleweed-updates.svg that I drew up before development of Slowroll even started. And now I was wondering how it looks in reality, so I wrote a munin plugin script [1] to graph http://stage3.opensuse.org:17080/munin/opensuse.org/stage3.opensuse.org/slo… (today's snapshot img at) https://www.zq1.de/~bernhard/images/share/slowroll/slowrollstats-day-202405… The blue line is counting the packages in Tumbleweed that got updates since the last version bump (2024-04-29). That increased by ~120 yesterday around 14:40 - there were actually 154 updates and the difference is from packages that have previously been updated since the version bump. Then we have the green area representing src-packages in the Slowroll update repo. If something receives multiple updates, it will count multiple times here, so that number could theoretically get higher than Tumbleweed's. But it does not atm. It increased by 72/d over the last two days. Mostly around 08:00 when updates go out (bunched together to not need multiple repo-metadata updates). In that number, we have two components: the bigger part are packages where Tumbleweed binaries are re-used, because our own build was found to be equivalent (per build-compare) - that is the red line in the graph. +42/d here. The second part (yellow) is Slowroll-specific builds (+30/d) this number could be lower, if we had more reproducible-builds (e.g. for python3). As divergence between Factory and Slowroll grows after a version-bump, this number is expected to get a larger share. It would be beneficial to keep this number low, because at the next version bump, we need to discard these builds and then zypper needs to pull more updates. One conclusion from this graph is that there is room to improve the time until we get CVE-fixes from Tumbleweed into Slowroll. [2] Currently it is ~18h delayed and I think, we could get it down to 3h (for packages that don't take long to build). Another conclusion is that more reproducible builds will help reduce the amount of undesirable Slowroll-specific builds. Maybe I should reduce the rate of updates for unreproducible packages... Ciao Bernhard M. [1] https://github.com/openSUSE/slowroll-tools/blob/devel/extra/munin-slowrolls… [2] https://trello.com/c/2nj0UPHL/31-event-driven-updates

3 2

New Tumbleweed snapshot 20240516 released!
by Dominique Leuenberger 17 May '24

17 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bolt (0.9.7 -> 0.9.8) gdk-pixbuf (2.42.11 -> 2.42.12) git (2.45.0 -> 2.45.1) glib2 (2.80.0 -> 2.80.2) grub2 hwdata (0.380 -> 0.382) iproute2 (6.8 -> 6.9) libbpf (1.4.1 -> 1.4.2) libmodulemd libressl (3.9.1 -> 3.9.2) libxml2 (2.12.6 -> 2.12.7) libxml2-python (2.12.6 -> 2.12.7) makedumpfile (1.7.4 -> 1.7.5) mozilla-nss (3.99 -> 3.100) openSUSE-release (20240515 -> 20240516) ovmf (202308 -> 202311) patterns-base perl-Crypt-OpenSSL-Random (0.15 -> 0.160.0) perl-GD (2.78 -> 2.810.0) perl-Net-DNS (1.420.0 -> 1.450.0) perl-URI (5.270.0 -> 5.280.0) pipewire powerdevil6 python-pyudev (0.24.1 -> 0.24.3) python-zope.interface (6.2 -> 6.3) sdbootutil (1+git20240506.573a6a4 -> 1+git20240514.56dc89c) soundtouch (2.3.2 -> 2.3.3) strace (6.8 -> 6.9) wicked xwayland (23.2.6 -> 24.1.0) === Details === ==== bolt ==== Version update (0.9.7 -> 0.9.8) - update to 0.9.8: * A new NHI for REMBRANDT. * CI fixes. * Don't install an empty DB directory. * Fixed: Determine the string length before writing file. * Fixed: Free on error to prevent resource leak. ==== gdk-pixbuf ==== Version update (2.42.11 -> 2.42.12) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks (CVE-2022-48622), + ani: validate chunk size, + Updated translations. - Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed upstream. ==== git ==== Version update (2.45.0 -> 2.45.1) Subpackages: git-core git-email git-svn git-web perl-Git - update to 2.45.1: * CVE-2024-32002: recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (boo#1224168) * CVE-2024-32004: arbitrary code execution during local clones (boo#1224170) * CVE-2024-32020: file overwriting vulnerability during local clones (boo#1224171) * CVE-2024-32021: git may create hardlinks to arbitrary user- readable files (boo#1224172) * CVE-2024-32465: arbitrary code execution during clone operations (boo#1224173) ==== glib2 ==== Version update (2.80.0 -> 2.80.2) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Update to version 2.80.2: + Fix a regression with IBus caused by the fix for CVE-2024-34397. + Fix installation directory of the GVariant specification. + Bugs fixed: - GVariant specification installed in wrong directory. - Backport "gdbusconnection: Fix test signal subscription ordering" to glib-2-80. - Backport âCorrect installation directory of GVariant specificationâ to glib-2-80. - Backport âgdbusconnection: Allow name owners to have the syntax of a well-known nameâ to glib-2-80. - Changes from version 2.80.1 + Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing. + Updated translations. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Update to the latest upstreaming TPM2 patches * 0001-key_protector-Add-key-protectors-framework.patch - Replace 0001-protectors-Add-key-protectors-framework.patch * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch - Merge other TSS patches * 0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch * 0002-tpm2-Add-more-marshal-unmarshal-functions.patch * 0003-tpm2-Implement-more-TPM2-commands.patch * 0003-key_protector-Add-TPM2-Key-Protector.patch - Replace 0003-protectors-Add-TPM2-Key-Protector.patch * 0004-cryptodisk-Support-key-protectors.patch * 0005-util-grub-protect-Add-new-tool.patch * 0001-tpm2-Support-authorized-policy.patch - Replace 0004-tpm2-Support-authorized-policy.patch * 0001-tpm2-Add-extra-RSA-SRK-types.patch * 0001-tpm2-Implement-NV-index.patch - Replace 0001-protectors-Implement-NV-index.patch * 0002-cryptodisk-Fallback-to-passphrase.patch * 0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch * 0004-diskfilter-look-up-cryptodisk-devices-first.patch - Refresh affected patches * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch * grub2-bsc1220338-key_protector-implement-the-blocklist.patch - New manpage for grub2-protect - Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to file_is_not_xen_garbage (bsc#1224226) * grub2-fix-menu-in-xen-host-server.patch ==== hwdata ==== Version update (0.380 -> 0.382) - update to 0.382: * Update pci, usb and vendor ids ==== iproute2 ==== Version update (6.8 -> 6.9) Subpackages: iproute2-bash-completion - Update to release 6.9 * ss: add option to suppress queue columns * m_mirred: allow mirred to block * tc: add NLM_F_ECHO support for actions and filters * ip/bond: add coupled_control support * ss: add support for BPF socket-local storage * ip: ioam6: add monitor command ==== libbpf ==== Version update (1.4.1 -> 1.4.2) - update to 1.4.2: * Another struct_ops-focused bug fix release. It addresses a few more corner cases when dealing with SEC("struct_ops") programs. * It also improves error messaging around common use case of declaring struct_ops BPF program and not referencing it from SEC(".struct_ops") variable (backed by struct_ops BPF map). * This release should improve overall experience of using BPF struct_ops functionality. ==== libmodulemd ==== - Add glib-2.80.2-glibdoc-path.patch: Fix GLib documentation path for GLib 2.80.2 (https://github.com/fedora-modularity/libmodulemd/pull/618). ==== libressl ==== Version update (3.9.1 -> 3.9.2) - Update to release 3.9.2 * A missing bounds check could lead to a crash due to dereferencing a zero-sized allocation. ==== libxml2 ==== Version update (2.12.6 -> 2.12.7) Subpackages: libxml2-2 libxml2-tools - Update to version 2.12.7: + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459). + xmllint: Fix --pedantic option. + save: Handle invalid parent pointers in xhtmlNodeDumpOutput. ==== libxml2-python ==== Version update (2.12.6 -> 2.12.7) - Update to version 2.12.7: + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459). + xmllint: Fix --pedantic option. + save: Handle invalid parent pointers in xhtmlNodeDumpOutput. ==== makedumpfile ==== Version update (1.7.4 -> 1.7.5) - Update to 1.7.5: * Support for kernels up to v6.8 (x86_64) * Support for printk caller_id by --dump-dmesg option * [PATCH] ppc64: get vmalloc start address from vmcoreinfo * [PATCH] ppc64: read cur_mmu_type from vmcoreinfo * [PATCH] add PRINTK_CALLER id support to --dump-dmesg option * [PATCH v2 2/2] s390x: uncouple virtual and physical address spaces * [PATCH 1/2] s390x: fix virtual vs physical address confusion Regenerated the content of the makedumpfile-ppc64-VA-range-SUSE.patch file based on version 1.7.5 of the code ==== mozilla-nss ==== Version update (3.99 -> 3.100) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - update to NSS 3.100 - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for faster Xyber operations. - bmo#1893752 - remove ckcapi. - bmo#1893162 - avoid a potential PK11GenericObject memory leak. - bmo#671060 - Remove incomplete ESDH code. - bmo#215997 - Decrypt RSA OAEP encrypted messages. - bmo#1887996 - Fix certutil CRLDP URI code. - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys. - bmo#676118 - Add ability to encrypt and decrypt CMS messages using ECDH. - bmo#676100 - Correct Templates for key agreement in smime/cmsasn.c. - bmo#1548723 - Moving the decodedCert allocation to NSS. - bmo#1885404 - Allow developers to speed up repeated local execution of NSS tests that depend on certificates. ==== openSUSE-release ==== Version update (20240515 -> 20240516) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Version update (202308 -> 202311) Subpackages: qemu-ovmf-x86_64 - Removed ovmf-UefiCpuPkg-BaseXApicX2ApicLib-fix-CPUID_V2_EXTENDED_.patch file which is merged to edk2-stable202311: - 170d4ce8e90a UefiCpuPkg/BaseXApicX2ApicLib: fix CPUID_V2_EXTENDED_TOPOLOGY detection ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - add procps into the base pattern as recommended together with zypper (which dropped the dependency) ==== perl-Crypt-OpenSSL-Random ==== Version update (0.15 -> 0.160.0) - updated to 0.16 see /usr/share/doc/packages/perl-Crypt-OpenSSL-Random/Changes 0.16 2024-04-13 rurban - add github actions, travis and appveyor. - Many patches by Takumi Akiyama. - Fix broken github image for strawberry perl by stripping its PATH. their new mingw is incompatible to their old strawberry 5.32 - minor documentation fixes. ==== perl-GD ==== Version update (2.78 -> 2.810.0) - updated to 2.81 see /usr/share/doc/packages/perl-GD/ChangeLog 2.81 * Change GD::Polygon::transform to match old demos (RT #140043), and GD::Polyline. Add GD::Polygon::rotate(cw-radian) helper. Allow GD::Polygon::scale(2.0). 2.80 * Fix broken copyTranspose and copyReverseTranspose (RT #153300) by Yuriy Yevtukhov. * Add transformation tests * Fix wrong WBMP name and detection * Fix wrong filename extension auto-detection for gd,gd2,wbmp * Fix wrong filename extension auto-detection for xpm, newFromXpm needs the filename, not handle. * Fix wrong libgd doc link (PR #52) by Tsuyoshi Watanabe 2.79 * Improve image type autodetection (RT #153212), add a test * Fix Avif without Heif config * Improve gdlib.pc reader for supported library features ==== perl-Net-DNS ==== Version update (1.420.0 -> 1.450.0) - updated to 1.45 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== perl-URI ==== Version update (5.270.0 -> 5.280.0) - updated to 5.28 see /usr/share/doc/packages/perl-URI/Changes 5.28 2024-03-27 01:49:44Z - Using Scalar::Util::reftype instead of just ref(), but mindful this time about definedness to avoid warnings (GH#140) (Jacques Deguest) ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Move modules jack-tunnel and jackdbus-detect to the pipewire-spa-plugins-0_2-jack since those modules should only be used when the real jack server is running. This fixes pipewire starting jackdbus on start. ==== powerdevil6 ==== Subpackages: powerdevil6-lang - Recommend ddcutil-i2c-udev-rules (boo#1224197) ==== python-pyudev ==== Version update (0.24.1 -> 0.24.3) - Update to 0.24.3: * Tidies and Maintenance fixes - Switch to pyproject macros. - No more greedy globs in %files. - Add patch support-pytest-8.patch: * Support pytest 8 changes. ==== python-zope.interface ==== Version update (6.2 -> 6.3) - update to 6.3: * Add preliminary support for Python 3.13 as of 3.13a6. ==== sdbootutil ==== Version update (1+git20240506.573a6a4 -> 1+git20240514.56dc89c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240514.56dc89c: * Add show-entry command * Add SYSTEMD_COLORS flag * Add byte order mark to boot.csv ==== soundtouch ==== Version update (2.3.2 -> 2.3.3) - Update to 2.3.3: * Fixing compiler warnings, maintenance fixes to make/build files for various systems - Refresh disable-ffast-math.patch ==== strace ==== Version update (6.8 -> 6.9) - Update to strace 6.9 * Implemented --always-show-pid option. * The --user|-u option has learned to recognize numeric UID:GID pair, allowing e.g. statically-built strace to be used without invoking nss plugins. * Implemented decoding of IORING_REGISTER_SYNC_CANCEL, IORING_REGISTER_FILE_ALLOC_RANGE, IORING_REGISTER_PBUF_STATUS, IORING_REGISTER_NAPI, and IORING_UNREGISTER_NAPI opcodes of io_uring_register syscall. * Implemented decoding of BPF_TOKEN_CREATE bpf syscall command. * Updated decoding of io_uring_register and pidfd_send_signal syscalls. * Updated lists of BPF_*, CAN_*, IORING_*, KEY_*, LSM_*, MPOL_*, NT_*, RWF_*, PIDFD_*, PTP_*, TCP_*, and *_MAGIC constants. * Updated lists of ioctl commands from Linux 6.9. ==== wicked ==== Subpackages: wicked-service - client: fix ifreload to pull UP ports/links again when the config of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014). [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch] ==== xwayland ==== Version update (23.2.6 -> 24.1.0) - Update to feature release 24.1.0 * This fixes a couple of regressions introduced in the previous release candidate versions along with a fix for XTEST emulation with EI. + xwayland: Send ei_device_frame on device_scroll_discrete + xwayland: Restore the ResizeWindow handler + xwayland: Handle rootful resize in ResizeWindow + xwayland: Move XRandR emulation to the ResizeWindow hook + xwayland: Use correct xwl_window lookup function in xwl_set_shape - eglstreams has been dropped - Update to bug fix relesae 23.2.7 * m4: drop autoconf leftovers * xwayland: Send ei_device_frame on device_scroll_discrete * xwayland: Call drmFreeDevice for dma-buf default feedback * xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done * dri3: Free formats in cache_formats_and_modifiers * xwayland/glamor: Handle depth 15 in gbm_format_for_depth * Revert "xwayland/glamor: Avoid implicit redirection with depth 32 parent windows" * xwayland: Check for outputs before lease devices * xwayland: Do not remove output on withdraw if leased

1 0

Tumbleweed - Review of the weeks 2024/19 & 20
by Dominique Leuenberger 17 May '24

17 May '24

Dear Tumbleweed users and hackers, Last week, there was a public holiday on Thursday in some parts of the world (Ascension Day). Unsurprisingly, many devs, including myself and Ana, took Friday off to enjoy a longer weekend (and I can tell you: the weather was fantastic). As a result, I have to span two weeks of changes to Tumbleweed here once again. We have published 12 snapshots since my last review (0502…0515, snapshots 0504 and 0513 were not built due to weekends) The most relevant changes delivered as part of those snapshots were: * Mozilla Firefox 125.0.3 * LibreOffice 24.2.3.2 * GNOME 46.1 * GIMP 2.10.38 * LLVM 18.1.5 * GCC 14.1 * KDE Frameworks 6.2.0 * PHP 8.3.7 * PostgreSQL 16.3 * Systemd 255.5 & 255.6 * Linux kernel 6.8.9 (with linux-glibc-devel already prepared at 6.9) * Ruby 3.3.1 * QEmu 8.2.3 * util-linux 2.40.1 Snapshot 0515 contained an openssh update, that mistakenly recommended installation of the subpackage openssh-server-config-rootlogin; this package has existed since the default configuration of openSSH was changed to not permit root login anymore, so admins could easily switch it back on. Due to an error, this had been triggered for automatic installation. This has since been corrected and a version of openssh- server was published to the update channel, which is NOT recommended. Please check your installation and remove the package again, should it be installed and you don’t need it (we can’t auto-remove it without breaking users that explicitly wanted it) The following things are known to be worked on at the moment and are reaching you in some upcoming snapshot: * chkstat package being renamed to permctl * Rust 1.78 * Mesa 24.0.7 * Linux kernel 6.9.1 * Ninja 1.12 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

Agama 8 is out
by Ancor Gonzalez Sosa 17 May '24

17 May '24

Agama just switched to a more lightweight architecture which no longer depends on Cockpit. Agama 8 is the first pre-release to take advantage of it. This version may be a big rough around the edges, so feedback would be appreciated. See more details at the YaST Team blog: https://yast.opensuse.org/blog/2024-05-17/agama-8 Enjoy -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0

lastlog: command not found
by Miika Alikirri 17 May '24

17 May '24

Hi everyone! When Tumbleweed first replaced lastlog with lastlog2, lastlog still existed as a symlink to lastlog2. Which made it possible for programs to keep calling lastlog like nothing was changed. Now it seems that the symlink is no longer set. Is this intentional? And if yes, is there a good reason for not having lastlog as a symlink to lastlog2? Best regards, Miika

2 4

about quality of openSUSE-repos
by Lubos Kocman 17 May '24

17 May '24

Hello openSUSE! We've recently received a few complaints about https://github.com/openSUSE/openSUSE-repos, which provides an alternative handling of repository paths by *RIS. Here is a little summary of the issues and our actions. *Mixing NVIDIA subpackage flavors (MicroOS one installed on TW etc) boo#1224184 *Breakage of Leap 15.6 repo paths (by removal of tailing / in a variable) boo#1224185 (please be aware that 15.6 is still a pre-release and the change did not get to 15.5:Update) Regarding the Mixing of flavors I've quickly fixed the flavor mixing problem by adding conflicts https://build.opensuse.org/package/rdiff/Base:System/openSUSE-repos?linkrev… and opened https://github.com/openSUSE/openSUSE-repos/issues/54 to track our QA efforts. Regarding the breakage of Leap repo paths I implemented a little CI that checks repository definitions by variable substitution and curl https://github.com/openSUSE/openSUSE-repos/actions This already found boo#1224217 (issue with source and debug repo in Leap armv7hl) and similar Slowroll issues that Bernhard already addressed. Many thanks to Andrii who is working on a CI that tests intel repo definitions with zypper on an available Ubuntu container https://github.com/andrii-suse/openSUSE-repos/actions This adds another level of testing and involves zypper for proper variable substitution. The last remaining step in #54 is openQA coverage where I'd like to ask for help. https://progress.opensuse.org/issues/160340 The fact that we build Slowroll/TW/MicroOS in a single project adds a space for human packaging error where people can potentially end up with mixed flavors. I suppose we could be partially testing it with Adris's zypper in the Ubuntu container approach, but I think it should also be a part of openQA for TW (and its flavors) as we have Suggests in release packages that will not be present on ubuntu. **Any help on the openQA part (poo#160340) would be highly welcome.** I only wish we'd done these steps towards increased quality sooner. As breaking repo paths ends up basically by cutting off systems from any further updates. This should not be tolerable in anything post-Alpha quality, even when it's not the default. [0] https://en.opensuse.org/openSUSE:Standards_Repository_Index_Service Relevant Reddit threads https://www.reddit.com/r/openSUSE/comments/1cdhjzg/comment/l1e6ppv/ and https://www.reddit.com/r/openSUSE/comments/1cpbfry/tw_opensusereposmicroosn… -- Thank you for your understanding Luboš Kocman openSUSE Leap Release Manager

5 6

New Tumbleweed snapshot 20240515 released!
by Dominique Leuenberger 16 May '24

16 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (1.0.2 -> 1.0.3) AppStream-qt6 (1.0.2 -> 1.0.3) Mesa Mesa-drivers WindowMaker file-roller (44.1 -> 44.2) gnome-browser-connector gnome-control-center gnome-maps (46.0 -> 46.11) gnome-text-editor (46.1 -> 46.3) gucharmap (15.1.3 -> 15.1.4) krb5 libstorage-ng (4.5.203 -> 4.5.204) libzypp (17.33.4 -> 17.34.0) mcelog (197 -> 198) openSUSE-release (20240514 -> 20240515) openssh perl-MIME-tools (5.514.0 -> 5.515.0) systemd (255.5 -> 255.6) vlc vorbis-tools zvbi === Details === ==== AppStream ==== Version update (1.0.2 -> 1.0.3) - Update to version 1.0.3: + Features: * validator: Check that description lists don't get translated * validator: Improve translation checks for descriptions * cli: compose: Allow to propagate selected custom entries to catalog output * validator: Check for common typo of "scheme_preference" branding property * xml: Generate a developer_name compat tag for older 3rd-party parsers * validator: Flag duplicate branding colors as invalid * Add Plasma Mobile as recognized desktop-style + Specification: * docs: Clarify a developer element is not allowed to exist multiple times * docs: Explicitly clarify a developer/name element must not be repeated * docs: Clarify metainfo translation rules a bit + Bugfixes: * qt: Fix relocation of Config.cmake files * cli: check-syscompat: Recognize available required controls as available * validator: Guard issue emission functions with G_GNUC_PRINTF * validator: Always use secure string formatting for issue emit function * utils: Explicitly set format style when installing catalog metadata * Suppress static-analyzer drawing wrong conclusions on GCC 14 + Miscellaneous: * docs: List AppStreamCompose as related to AppStream * docs: Add manpages back * validator: Mark developer-id-missing as info-priority again ==== AppStream-qt6 ==== Version update (1.0.2 -> 1.0.3) - Update to version 1.0.3: + Features: * validator: Check that description lists don't get translated * validator: Improve translation checks for descriptions * cli: compose: Allow to propagate selected custom entries to catalog output * validator: Check for common typo of "scheme_preference" branding property * xml: Generate a developer_name compat tag for older 3rd-party parsers * validator: Flag duplicate branding colors as invalid * Add Plasma Mobile as recognized desktop-style + Specification: * docs: Clarify a developer element is not allowed to exist multiple times * docs: Explicitly clarify a developer/name element must not be repeated * docs: Clarify metainfo translation rules a bit + Bugfixes: * qt: Fix relocation of Config.cmake files * cli: check-syscompat: Recognize available required controls as available * validator: Guard issue emission functions with G_GNUC_PRINTF * validator: Always use secure string formatting for issue emit function * utils: Explicitly set format style when installing catalog metadata * Suppress static-analyzer drawing wrong conclusions on GCC 14 + Miscellaneous: * docs: List AppStreamCompose as related to AppStream * docs: Add manpages back * validator: Mark developer-id-missing as info-priority again ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Enable libvulkan_intel on arm ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Enable libvulkan_intel on arm ==== WindowMaker ==== - Use %patch -P N format to eliminate usage of deprecated %patchN. ==== file-roller ==== Version update (44.1 -> 44.2) Subpackages: file-roller-lang - Update to version 44.2: + Features: Added expanders to the tree view. + Bugfixes: - Fixed crash opening some rar files. - Do not crash if the loaded file is empty. + Updated translations. ==== gnome-browser-connector ==== - Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902): python36.patch. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Re-Enable location-services support: + Pass -Dlocation-services=enabled to meson. * * Support had been disabled by upstream as the mozilla location service will shut down. which in turn means location service will not be very accurate anymore. ==== gnome-maps ==== Version update (46.0 -> 46.11) Subpackages: gnome-maps-lang - Update to version 46.11: + Fix crash on startup when unnamed favorites where previously saved. + Don't show OSM edit dialog if the user previously reclined signing in. + Don't show stored routes in the search results when searching for destinations. - changes from version 46.10: + Due to a typo in the version number in the metadata for 46.0 (being 46.9) make this release version number 46.10 + Fix current location marker not moving when updating location. + Updated translations. - Update to version 46.11: * Release 46.11 * placeListRow: Use fallback when place has no title * Update Hindi translation * Update Brazilian Portuguese translation * Update Portuguese translation * mapView: Check the signed in status after showing the OSM account dialog * placeButtons: Check the signed in status after showing the OSM account dialog * Update Greek translation * placeEntry: Fix filtering out stored routes for routing entries * Post-release version bump * Release 46.10 * shields: Fix shields with OMT update * place: Make location a GObject property * Update Kabyle translation * meson: Bump next version to 46.10 * appdata: Fix typo in release version number * Post-release version bump ==== gnome-text-editor ==== Version update (46.1 -> 46.3) Subpackages: gnome-text-editor-lang - Update to version 46.3: + Fix a trivial build error when - Werror=implicit-function-declaration is specified. - Changes from version 46.2: + Fix an issue with cancellation of closing a page. + Try harder to ensure a buffer disposes associated resources when the page is closed. + Updated translations. ==== gucharmap ==== Version update (15.1.3 -> 15.1.4) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 15.1.4: + Updated translations. ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Enable the LMDB backend for KDB ==== libstorage-ng ==== Version update (4.5.203 -> 4.5.204) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#993 - added sorting of network block devices - 4.5.204 ==== libzypp ==== Version update (17.33.4 -> 17.34.0) - version 17.34.0 (34) - Fix versioning scheme ==== mcelog ==== Version update (197 -> 198) - Update to version 198: * Remove obsolete on disk dimm database code * page.c: Disable gcc warnings * page.c: Remove obsolete comment * mcelog: Fix clang warnings * mcelog: mempage_replace missing initialization of mempage fields * mcelog: Add third model number for Arrowlake - Refresh patches according to mainline: M add-f10h-support.patch M email.patch M fix_setgroups_missing_call.patch M mcelog_invert_prefill_db_warning.patch ==== openSUSE-release ==== Version update (20240514 -> 20240515) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Only for SLE15, restore the patch file removed in Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour from SP5 of having root password login allowed by default (fixes bsc#1223486, related to bsc#1173067): * openssh-7.7p1-allow_root_password_login.patch - Since the default value for this config option is now set to permit root to use password logins in SLE15, the openssh-server-config-rootlogin subpackage isn't useful there so we now create an openssh-server-config-disallow-rootlogin subpackage that sets the configuration the other way around than openssh-server-config-rootlogin. ==== perl-MIME-tools ==== Version update (5.514.0 -> 5.515.0) - updated to 5.515 see /usr/share/doc/packages/perl-MIME-tools/ChangeLog 5.515 2024-04-24 Dianne Skoll <dianne(a)skoll.ca> * VERSION 5.514 RELEASED * Fix the "version" setting in META.yml. There are no other changes since 5.514. ==== systemd ==== Version update (255.5 -> 255.6) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-experimental systemd-lang udev - Import commit a3dccacb97e94ed91f1c41ce82ef13bfe8fa1a79 (merge of v255.6) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/49fb09fa18a7b81f6b3c3c15aca47fd… ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Address build failures with GCC 14 (boo#1223909): + Add 4645.patch: fix incompatible-pointer-types assignment on Linux. ==== vorbis-tools ==== Subpackages: vorbis-tools-lang - vorbis-tools-gcc14.patch: fix gcc14 build issues ==== zvbi ==== - added patches fix build with gcc14 https://github.com/zapping-vbi/zvbi/commit/ae74ae513714f81b9b8abdb12e1b235d… + zvbi-gcc14.patch

1 0