August 2021 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20210804 released!
by Dominique Leuenberger 06 Aug '21

06 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.32.4 -> 1.32.6) avahi busybox-links ceph (16.2.5.111+ga5b472dfcf8 -> 16.2.5.113+g8b5bda7684e) cfitsio (3.490 -> 4.0.0) freetype2 (2.10.4 -> 2.11.0) gtk3 kde-gtk-config5 libXfont2 (2.0.4 -> 2.0.5) libXft (2.3.3 -> 2.3.4) libstorage-ng (4.4.30 -> 4.4.32) qalculate (3.19.0 -> 3.20.1) radvd schily snappy (1.1.8 -> 1.1.9) systemd yast2-trans (84.87.20210723.6ea31dfcf1 -> 84.87.20210802.da4df69bfc) === Details === ==== NetworkManager ==== Version update (1.32.4 -> 1.32.6) Subpackages: NetworkManager-lang libnm0 typelib-1_0-NM-1_0 - Update to version 1.32.6: + core: - Fix adding stale local routes when address changes. - Introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. - Introduce "keep-configuration" device option to forcefully activate a profile on start. + initrd: - Tag generated profiles with origin in user data. - Add "ib.pkey=" command line option. + dhcp: Handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec. ==== busybox-links ==== Subpackages: busybox-coreutils busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-sed busybox-sendmail busybox-util-linux busybox-xz - Add shadow as BuildRequires ==== ceph ==== Version update (16.2.5.111+ga5b472dfcf8 -> 16.2.5.113+g8b5bda7684e) Subpackages: librados2 librbd1 - Update to 16.2.5-113-g8b5bda7684e: + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9 improved version of patch that did not work as intended ==== cfitsio ==== Version update (3.490 -> 4.0.0) - Update to version 4.0.0: - Removed separate directory for zlib/gzip code, and updated configuration to check for zlib on the user's system (required). When use of cURL is enabled, it may also pull in zlib such that user applications may not need to link with it separately. - Changed version numbering to 3-field format. - Added new calculator functions SETNULL(x,y) to allow substitution of NULL values into tables, and GTIOVERLAP() for calculating the amount of GTI overlap exposure for a time bin. - Fix added for proper handling of string columns with zero repeat count. - Fix to column filtering expressions which write #NULL values to columns of type (J) format. - Fix to memory clearing when using polygon shapes in region files. - Fix to fits_str2time function so that it now flags a particular case of bad syntax which was previously getting through. - In ffgclb and ffpclb (read/write byte columns), the "undocumented" feature of being able to transfer columns 'A' string columnss as byte arrays is now handled correctly, with improved error checking via updates to ffgcprll. More documentation on string handling is in cfitsio.tex. - Fix bug in 'colfilter' functionality. When performing a column deletion of the form -COLNAM*, and multiple matches existed, then none of the matches got deleted. Now the first is deleted as expected. - Improved handling of corner case in ffpkn functions. - In ffgky, modified TULONG case to allow it to read unsigned values greater than the 8-byte signed limit. - Fix to parsing of corner case of extended file syntax. - Major updates to CMake configuration. - Removed cfitsio-zlib.patch (not needed anynore). ==== freetype2 ==== Version update (2.10.4 -> 2.11.0) Subpackages: freetype2-devel libfreetype6 libfreetype6-32bit - Update to version 2.11.0 * A new rendering module has been added to create 8-bit Signed Distance Field (SDF) bitmaps for both outline and bitmap glyphs. * A new, experimental API is now available for surfacing properties of 'COLR' v1 color fonts. * A new function `FT_Get_Transform` returns the values set by FT_Set_Transform. * The legacy Type 1 and CFF engines are further demoted due to lack of CFF2 charstring support. * The experimental 'warp' mode (AF_CONFIG_OPTION_USE_WARPER) for the auto-hinter has been removed. * The smooth rasterizer performance has been improved by >10%. * PCF bitmap fonts compressed with LZW (these are usually files with the extension .pcf.Z) are now handled correctly. ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Drop patch fixed upstream on SLE and Leap 15.4: gtk3-x11-fix-menu-touch-by-pointer-emulation.patch ==== kde-gtk-config5 ==== Subpackages: kde-gtk-config5-gtk3 - Add patch to drop gtk-2.0 dependency and adjust BuildRequires: * 0001-Drop-unused-dependency-on-gtk-2.0.patch - Add patch to fix setting the default GTK theme on first login: * 0001-Make-sure-to-actually-commit-GSettings-changes.patch ==== libXfont2 ==== Version update (2.0.4 -> 2.0.5) - Update to version 2.0.5 * README: Remove mention of libXfont 1.5 * Fix out-of-bounds read in FontFileMakeDir() * configure: define HAVE_LIBBSD when libbsd was found * Fix Win32 build since c4ed2e06 "Add some unit testing utilities" * Fix crash when font server connection lost * Fix use after free when font server connection lost ==== libXft ==== Version update (2.3.3 -> 2.3.4) Subpackages: libXft2 libXft2-32bit - Update to version 2.3.4 * This release handles the deprecation of the FcNameRegisterObjectTypes API by fontconfig, and provides minor cleanups for compiler warnings and man pages. ==== libstorage-ng ==== Version update (4.4.30 -> 4.4.32) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#826 - allow to attach userdata to pools - 4.4.32 - merge gh#openSUSE/libstorage-ng#825 - run blkdiscard when creating/removing partition tables and partitions - 4.4.31 ==== qalculate ==== Version update (3.19.0 -> 3.20.1) - Update to 3.20.1: * Save answer to dot and temperature questions in non-interactive mode and do not show the questions in non-interactive terse mode * Fix saving of sub functions with default values * Add support for function creation in save() function and with associated operator (e.g. func1():=x*y^2) * Add operators (.', .*, ./, .^) and functions (replace multiply(), divide(), and pow()) for transpose and element-wise multiplication, division, and power * Fix norm() and magnitude(), and add second argument, p, to norm() function * New text operators: dot, cross, comb, and perm * Add support for ^^ as XOR operator * Fixes and improvements in multisolve() function * Always return exact result in base() function, in exact mode * Improve parsing of functions without parentheses * Do not try to load data objects from global definitions dir if data set is local * Interpret "±" at end of expression as "±0" * Convert Celsius to Fahrenheit if no calculation was performed * Add support for QALCULATE_USER_DIR environment variable and always check for "user" directory on Windows * Output both original and factorized integer, and output abs(x) as |x| * Improved HTML output of mathematical expressions in libqalculate * Minor bug fixes and feature improvements ==== radvd ==== - Add now working CONFIG parameter to sysusers generator - Remove unneeded shadow dependency, no longer required due to systemd-sysusers ==== schily ==== Subpackages: cdda2wav cdrecord libcdrdeflt1_0 libdeflt1_0 libedc_ecc1_0 libedc_ecc_dec1_0 libfile1_0 libfind4_0 libparanoia1_0 librmt1_0 librscg1_0 libscg1_0 libscgcmd1_0 libschily2_0 mkisofs readcd spax star - Update to release 2021.07.29 * Bourne Shell: "cd -" now prints the new directory, required by POSIX. * star: A single Linux xattr entry with a zero length value did disable all Linux xattrs for the related file. This is now handled correctly. * ved: ved maxll=79 now checks whether the cursor is > column 79 before entering a new line character. * ved: ved now aborts the startup if it turns out to be connected to a hardcopy terminal. ==== snappy ==== Version update (1.1.8 -> 1.1.9) - Update to 1.1.9: * Performance improvements - Add fix-always-inline.patch - Add use-system-test-libs.patch - Add a hardcoded snappy.pc file ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-doc systemd-lang systemd-logger systemd-sysvinit udev - Avoid the error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291) ==== yast2-trans ==== Version update (84.87.20210723.6ea31dfcf1 -> 84.87.20210802.da4df69bfc) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20210802.da4df69bfc: * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (French) * Translated using Weblate (Catalan) * New POT for text domain 'network'. * New POT for text domain 'country'. * Translated using Weblate (Italian) * New POT for text domain 'update'. * New POT for text domain 'autoinst'. * Translated using Weblate (Czech)

1 0

Heads up: UsrMerge impact imminent
by Ludwig Nussel 05 Aug '21

05 Aug '21

Hi, As you may have noticed Factory activated the UsrMerge last week. Tumbleweed tests in openQA look good, only a non-usrmerge related bug prevents the release. I haven't received a lot of feedback from the call for testing so I hope that means the migration works really well :-) Therefore *your next dup will automatically and live migrate your installation* to UsrMerge. Make sure to actually use "dup" and not just "up". Means everything in /bin, /sbin, /lib and /lib64 will be merged into their counterparts in /usr, then replacing those directories with symlinks to /usr. After the migration packages that have compat symlinks like eg /bin/foo -> /usr/bin/foo will no longer be installable as they conflict with themselves. All packages in the distro have been fixed though. Due to the full rebuild and activation of gcc11 as default compiler the next snapshot will be a big one, so make sure to have sufficient disk space. If you are not on btrfs with snapshots and are nervous to break the system you may want to make sure eg busybox-static is installed. So if thing unexpectedly go wrong you have the tools to complete the usrmerge manually. There is no way back. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH, GF: Felix Imendörffer HRB 36809 (AG Nürnberg)

33 73

New Tumbleweed snapshot 20210803 released!
by Dominique Leuenberger 05 Aug '21

05 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fetchmail (6.4.19 -> 6.4.20) filesystem hxtools (20201116 -> 20210803) monitoring-plugins perl-Encode (3.10 -> 3.11) perl-Image-ExifTool (12.25 -> 12.29) rubygem-fog-libvirt (0.8.0 -> 0.9.0) squid (4.15 -> 4.16) === Details === ==== fetchmail ==== Version update (6.4.19 -> 6.4.20) Subpackages: fetchmailconf - Update to 6.4.20: [bsc#1188875, CVE-2021-36386] * CVE-2021-36386: DoS or information disclosure in some configurations. When a log message exceeds c. 2 kByte in size, for instance, with very long header contents, and depending on verbosity option, fetchmail can crash or misreport each first log message that requires a buffer reallocation. fetchmail then reallocates memory and re-runs vsnprintf() without another call to va_start(), so it reads garbage. The exact impact depends on many factors around the compiler and operating system configurations used and the implementation details of the stdarg.h interfaces of the two functions mentioned before. ==== filesystem ==== - Leave subdirectories of /srv mode 755 as the apache openqa test relies on it atm. Only set /srv itself to 555 - implement mkdir_p for ghost files as components may not exist - move usrmerge conversion to %pre instead of %pretrans (boo#1188847) - get rid of usrmerged macro usage, usrmerge is on in Factory always ==== hxtools ==== Version update (20201116 -> 20210803) Subpackages: fd0ssh ofl - Update to release 20210803 * vfontas: read support for BDF * kbd: cp437x.uni learned a few Unicode codepoints for checkmarks (This is a Unicode glyph map for use with all cp437 fonts) ==== monitoring-plugins ==== Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins -swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave - Remove unneeded BuildRequires on python-devel. ==== perl-Encode ==== Version update (3.10 -> 3.11) - updated to 3.11 see /usr/share/doc/packages/perl-Encode/Changes ==== perl-Image-ExifTool ==== Version update (12.25 -> 12.29) Subpackages: exiftool perl-File-RandomAccess - Update to version 12.29: * Added a few new Nikon and Olympus lenses (thanks LibRaw) * Improved a QuickTime "File format error" message to be more meaningful, and made it a minor error * Changed PNG writer to add EXIF before IDAT * Some changes the way JUMBF metadata is handled * Patched to read timed GPS from a different type of INSV videos * Patched a security issue * Fixed problem where ExifTool could hang when processing mebx timed metadata * Added read support for Leica Image File (LIF) images * Added a new Olympus LensType (thanks LibRaw) * Decode another Panasonic tag (thanks LibRaw) * Decode more timed metadata from Sony MP4 videos * Attempt to shorten tag names for metadata in CZI files * Allow full QuickTime Keys tag ID's in UserDefined tags * Patched to handle special characters in Torrent tag values * Added two new Nikon LensID values (thanks Daniel) * Added a new Pentax RawDevelopmentProcess value * Added a few new Sony LensType values (thanks Jos Roost) * Added warning if IPTCDigest is not current * Decode a couple more Pentax tags (thanks LibRaw) * Decode streaming GPS from Novatek INNOVV MP4 and TS videos * Improved tag names in confi_files/covert_regions.config * Changed MIME types for MS Office macro-enabled formats to add the .12 * Patched Canon LensID logic to properly identify the Canon RF 24-105mm F4 L IS USM lens * Patched decoding of camm6 GPSDateTime to use a flexible epoch because other apps don't seem to use a consistent time zero * Fixed family 7 group names for QuickTime Keys tags * Fixed problem reading BeatsPerMinute from some MP4 files * Fixed hemisphere problem when extracting GPS from 70mai dashcam videos * Added support for JPEG Stereo (JPS) images * Added a new Sony LensType (thanks LibRaw) * Added a new PentaxModelID (thanks LibRaw) * Changed ExifTool namespace URI to use exiftool.org instead of exiftool.ca in the -X option output (exiftool.ca is still recognized when reading XML) * Improved handling of large-array warnings in -htmldump output * Changed handling of escaped characters in #[CSTR] lines of -@ argfile * Patched security vulnerability in argument of -lang option * Fixed problem which could cause a "Wide character" warning and generate a corrupted output file when writing some illegal values ==== rubygem-fog-libvirt ==== Version update (0.8.0 -> 0.9.0) updated to version 0.9.0 no changelog found ==== squid ==== Version update (4.15 -> 4.16) - update to 4.16: - Regression Fix: --with-valgrind-debug build broken since 4.15 - Bug 5129 pt1: remove Lock use from HttpRequestMethod - Bug 5128: Translation: Fix '% i' typo in es/ERR_FORWARDING_DENIED - Bug 4528: ICAP transactions quit on async DNS lookups

1 0

fresh 15.2, then upgrade via usb key/iso to 15.3, first run of yast onlineupdate inside system, obsucre pgp trust keys import being asked
by cagsm 04 Aug '21

04 Aug '21

hello list, testing situation. real metal simple hardware. fresh clean 15.2 from usb key/iso. simple install. with ethx being enabled while install, immediately adding/using online repos. having a fresh and up todate 15.2 after frist reboot into this system. then using another usb key/iso with 15.3, booting the real metal hardware with this, selecting upgrade. also with network etx enabled. again using all the offered online update repos and all. still simple system. upgrade from usb key/iso and the online repos. all smooth. all fine. first reboot into this 15.3 upgraded system. firing up yast2, there going into onlineupdates. it automagically refreshed or fetches some repo stuff metadata or whatever, then showing two popup rather tiny windows asking the user to make a decision about pgp keys of online repos and strust and whatnot. has this problem actually never been solved? i had thought when using the final .iso bits from 15.3 and offline upgrading there would be no hassle with importing pgp keys and asking the user for imports and trusts of such keys. how is the normal enduser to come up with a sane decision about these keys and fingerprints being asked for and how to make up if one should trust those values? ty.

1 0

openSUSE Leap 15.4 roadmap
by Lubos Kocman 04 Aug '21

04 Aug '21

Hello openSUSE! I'd like to share with you an initial roadmap for Leap 15.4 https://en.opensuse.org/openSUSE:Roadmap As you would expect, the openSUSE Leap 15.4 roadmap is heavily influenced by the SLE 15 SP4 schedule. We essentially have to have the same deadlines by the binary-identical design. If anything changes on the SLE side we would then have to reflect the change as well. There are a few things I'd like to mention. There will be extra time for the GM availability compared to 15.4. We have to wait for SLE GM, and the current proposal would give us less than a week if we'd aim for the usual Wednesday. There is an explicit listing of early heads up to the openSUSE maintenance when we have Beta available. This is to kickstart early maintenance setup testing to avoid similar update issues we've seen in 15.3. Engineering interlock that will happen in about a month from now is also explicitly listed. Commitment from teams could help us to figure out whether we can get sufficient support for features such as https://code.opensuse.org/leap/features/issue/26 What would make sense additionally is to track Quartlery Update image refreshes for both 15.3 and 15.4. See recent openSUSE Release team meeting minutes for more context about QU. Thank you very much Lubos Kocman openSUSE Leap Release Manager

1 0

adobe source font update
by Cor Blom 04 Aug '21

04 Aug '21

Hi all, There is an update coming to Source Serif and Source Sans. The "pro" extension after the name is replaced by the major version number: Source Serif 4 and Source Sans 3. Personally I don't care about that, but maybe others do. It's SR#909177 and SR#909177 I came across some discussion and background here: https://github.com/adobe-fonts/source-serif/issues/77 https://github.com/google/fonts/issues/2599 Kind regards, Cor

4 4

openSUSE Release Engineering Meeting 04.08.2021
by Lubos Kocman 04 Aug '21

04 Aug '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Participants bittin, AdaLovelace,guillaumeg, lkocman, deneb_alpha, DimStar, dirk ## Leap Considering self-update repos for yast in 15.4 https://code.opensuse.org/leap/features/issue/26 python 3.8 - considering for SLE TODO: 15.3 - SElinux won't boot without selinux policy https://bugzilla.suse.com/show_bug.cgi?id=1187326 I have to look into this seems SLE disabled feature in skelcd-control files. We will most likely have to supply the policy, but that will only work with enabled updates. (Release notes entry needed). SP3 selinux-policy seems to have a working fix for SLE, so we could most likely reuse it. TODO check this. Advertise https://code.opensuse.org/leap/features this on factory as a place to raise RFEs or larger efforts for the release. 15.3 Quarterly update setup is still in TODO Looking for review of https://github.com/openSUSE/openSUSE-release-process Leap 15.4 roadmap will be published this week. ## openSUSE Tumbleweed dleuenberger on FTO - from August 9 - 20 * TW is rolling, but mostly unspectacular changes. * glibc 2.34 staged * systemd 249 will be coming after the systemd maintainer is back from vacation ## Richard (Kubic/TW MicroOS) FTO k8s versions updated to 1.19.13, 1.20.9, 1.21.3 Working on adding k3s-install to Kubic, a curated version of the Rancher k3s installation script that negates the need to curl random shell scripts from the internet. ## Max FTO this afternoon * 'local' repository seem to be mis-configurated for openSUSE:Leap:15.4 Adrian should be able to fix this. We'll talk to him. * Enabled all needing bots for Leap:15.4 and Backports:SLE-15-SP4 * Filed 15.3 retro tickets, will go thru them in the retro meeting https://github.com/openSUSE/openSUSE-release-process/issues?q=is%3Aissue+is… Lubos will try to gather people for Monday morning 1h meeting 9am-ish if we can get for example yast, zypper team representatives. Otherwise we'd delay it for few weeks until DimStar and lkocman are both available. ## Guillaume - Arm Will be on FTO - from 9th to 27th of August. Tumbleweed: * installation-images:* are broken for Arm since last update. A fix is in system:install:head/installation-images and will be forwarded to Factory. * Fix for btrfs support in u-boot is on the way to Factory: https://build.opensuse.org/request/show/909899 Leap 15.3: * Armv7: Is good enough to release officialy. The maintenance setup is problematic, so we may not freeze and need to keep a rolling release model. Any opinion? WSL: Stalled: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL todo: lkocman to write a blog post how We have a WSL feature for 15 SP4 to have all SUSE/openSUSE images installed from outside of the store "adopt the new behavior". Therefore we wouldn't have to build the WSL-DistroLauncher image any more. ## Sarah - s390x * Problems with Tumbleweed releases because of kernel bug in several packages ( cross-epiphany-gcc11-bootstrap and gcc): https://bugzilla.opensuse.org/show_bug.cgi?id=1188896 * Updated wiki: https://en.opensuse.org/ZSystems * Offer to receive long-term (not only 120 days) VMs in the LinuxONE Community Cloud (pre-installed SLES), which can be upgraded to openSUSE (there is an unofficial documentation for this on wiki). Register today, if interested to receive one: https://doodle.com/poll/wqyrphvp78um825b * bi-weekly training sessions tor topics as mainframes, containerization, packaging: First session today: https://lists.opensuse.org/archives/list/zsystems@lists.opensuse.org/messag… * First training session was last Wednesday about LinuxONE Community Cloud, small overview about mainframes, upgrades and container building ## Doug FTO - from August 2 - 14 (will be availalbe for sprint, Summit and Nest. hopefully I have good internet ;-) * openSUSE.Asia Summit (August 6th- 8th) * Gave team an overview on tools and capablities of venueless * Fedora Nest/Flock booth complete * Collaboration panel discussion * Regular Meeting * finetuned software.o.o. proposal - https://etherpad.opensuse.org/p/weeklymeeting20210724 * Date: Every Saturday from 17:00 to 19:00 UTC (per the survey) (7- 9pm CEST) Location: https://meet.opensuse.org/meeting Etherpad: https://etherpad.opensuse.org/p/weeklymeeting * Likely there will be another 11:00 UTC meeting on Saturdays. Will send out email after I have the info. * will likely work on or discuss process for membership given connect.o.o will deactive * heroes plan to deactivate connect.o.o. ## Dirk No update Regular things, nothing important to report ## Gerald Not available Happy. And thank you to everyone who worked on that for a "boring" UsrMerge upgrade of my notebook. ## Wolfgang (Package Hub), Scott Bahling Not available openSUSE:Backports:SLE-15-SP4, builds for x86_64 are looking good (thanks to Max) other archs like s390x still have many failed and unresolvables discussion about gap https://software.opensuse.org/package/gap (fails to build on s390x), shall we keep it in Backports (it was removed from Factory long time ago) lkocman: https://code.opensuse.org/leap/features/issue/24 ## Maintenance team (Marina or Marcus) Marina: the rpm version update for 15.3 is ready to be released. We are just waiting for SUMA team before releasing it. This release could trigger a lot of rebuilds ;) Ongoing interactions between maintenance and PackageHub teams. Quite some good ideas on improvements. Info: Marina FTO on weeks 33 and 34. Q for maintenance team: https://code.opensuse.org/leap/features/issue/26 would this result into increased load on maint team? Marina: The first thing on my mind is a load for QA Team (Heiko). +Most likely a one time setup for maint. team. ## Adrian - CtLG or openSUSE Step Not present All covered in comments above. Adrian: I had to fix issues in product builder so we won't end up in situation where srpm is missing. We've had this issue by glibc (this would otherwise violate GPL). This would be another reason to rebuild ftp trees. How do we reference to CODE 15. 15.3 was the result of our survey.

1 0

Re: OpenSuSE should use private home directories by defaut
by Clark, Peter 03 Aug '21

03 Aug '21

I agree, the default home directory permissions work against the system owner rather than helping. This is the kind of configuration that I would have expected RMS to have been in favor of in the 1970s at MIT - https://www.thefamouspeople.com/profiles/richard-stallman-13421.php In 2021, defaulting to mode 755 for home directories is an anachronism at best. Even in the 1990s, home directories on shell accounts were typically set to mode 711 (go+x to allow httpd into ~/public_html) Peter ---------------------------------------------------------------------- Note: Please be aware that unencrypted electronic mail is not secure. For this reason, please do not send any sensitive personal information such as your address, driver license, policy number, Social Security Number, or claims information by unencrypted electronic mail. The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you.

1 0

Missing Key in Leap 15.3 (boo#1188475)
by Larry Finger 03 Aug '21

03 Aug '21

Hi, We are still fighting the problem described in boo#1188475. Systems with secure boot enabled and upgraded from Leap 15.2 to Leap 15.3 cannot load the VirtualBox modules. In Leap 15.2, all modules are signed with "openSUSE Secure Boot CA" and all is well, but in Leap 15.3, the VB modules are signed with "openSUSE Secure Boot CA" as in Leap 15.2, but the standard modules are signed with "SUSE Linux Enterprise Secure Boot CA." Using 'mokutil -l', only the latter key is present. At present, the only work-around that I can suggest is to disable secure boot, which is hardly a fix. Reinstalling the shim package or installing "openSUSE-signkey-cert" do not help. Can someone with expertise in these keys suggest a way to add "openSUSE Secure Boot CA" to the list of keys, or how to re-sign the VB modules with "SUSE Linux Enterprise Secure Boot CA"? I have read the documentation on signing modules, but I still do not understand how to do these operations. Thanks, Larry

3 5

New Tumbleweed snapshot 20210801 released!
by Dominique Leuenberger 02 Aug '21

02 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: xapps (2.2.0 -> 2.2.3) === Details === ==== xapps ==== Version update (2.2.0 -> 2.2.3) Subpackages: libxapp1 typelib-1_0-XApp-1_0 xapps-common xapps-common-lang - Update to version 2.2.3. * mate status applet: Change icon name in applet definition file, and add a new icon to the xapp hicolor set. * Fix mate status icon. - Updates for version 2.2.2. * l10n: Update translations - Update to version 2.2.1. * Update docs * test-scripts: Add a QSystemTrayIcon script. * qt-system-tray.py: use a class. * l10n: Update translations

1 0