September 2021 - openSUSE Factory - openSUSE Mailing Lists

New package in Factory: apitrace
by Adam Mizerski 17 Sep '21

17 Sep '21

Apitrace: Tools for tracing OpenGL apitrace consists of a set of tools to: - trace OpenGL, OpenGL ES, Direct3D, and DirectDraw APIs calls to a file; - replay the recorded calls from a file, on any machine and, for OpenGL and OpenGL ES, on any operating system; - inspect state at any call while replaying; - view framebuffers and textures; - view call data; - edit trace files; - profile performance of traces; https://apitrace.github.io/ https://build.opensuse.org/package/show/openSUSE:Factory/apitrace

1 0

New Tumbleweed snapshot 20210908 released!
by Dominique Leuenberger 16 Sep '21

16 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: chrony fuse3 (3.10.4 -> 3.10.5) glslang (11.5.0 -> 11.6.0) gnome-shell-extensions grub2 json-glib (1.6.4 -> 1.6.6) libstorage-ng (4.4.35 -> 4.4.36) man-pages (5.12 -> 5.13) mdadm mpg123 (1.28.2 -> 1.29.0) pinentry (1.1.1 -> 1.2.0) transactional-update (3.5.2 -> 3.5.3) vulkan-loader (1.2.182.0 -> 1.2.189.0) xdg-utils (1.1.3+20200220 -> 1.1.3+20201113) yast2 (4.4.16 -> 4.4.17) === Details === ==== chrony ==== Subpackages: chrony-pool-openSUSE - Added hardening to systemd service(s). Added patch(es): * harden_chrony-wait.service.patch * harden_chronyd.service.patch ==== fuse3 ==== Version update (3.10.4 -> 3.10.5) Subpackages: libfuse3-3 - Update to release 3.10.5 * Various improvements to make unit tests more robust. ==== glslang ==== Version update (11.5.0 -> 11.6.0) - Update to release 11.6.0 * Atomic memory function only for shader storage block member or shared variable * Add support for gl_MaxVaryingVectors for ogl * Fix loading bool arrays from interface blocks * Generate separate stores for partially swizzled memory stores * Allow layout(std430) uniform with GL_EXT_scalar_block_layout * Support for pragma STDGL invariant(all) * Support for GL_NV_ray_tracing_motion_blur ==== gnome-shell-extensions ==== - Add dependency on gnome-shell-extensions-common for gnome-shell-classic to fix the translations in SLE Classic and GNOME Classic(bsc#1190016 jsc#SLE-20311). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Follow usr merge for looking up kernel config (bsc#1189782) (bsc#1190061) * 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch - Add btrfs zstd compression on i386-pc and also make sure it won't break existing grub installations (bsc#1161823) * deleted 0001-btrfs-disable-zstd-support-for-i386-pc.patch * added 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch - Delete the author list from %description (the %description section is literally for package descriptions (only) these days, encoding was also problematic). - Add %doc AUTHORS to get packaged that info ==== json-glib ==== Version update (1.6.4 -> 1.6.6) Subpackages: json-glib-lang libjson-glib-1_0-0 typelib-1_0-Json-1_0 - Update to version 1.6.6: + New release with the documentation and gi-docgen included in the archive. - Drop gtk-doc BuildRequires, no longer needed, nor used. - Add docbook-xsl-stylesheets and libxslt-tools BuildRequires, needed for building of manpages. ==== libstorage-ng ==== Version update (4.4.35 -> 4.4.36) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.4.36 ==== man-pages ==== Version update (5.12 -> 5.13) - version update to 5.13 [bsc#1189908] http://linux-man-pages.blogspot.com/2021/06/man-pages-512-released.html ==== mdadm ==== - Remove Spare drives line from details for external metadata (bsc#1180661, bsc#1182642) 0118-Remove-Spare-drives-line-from-details-for-external-m.patch - Don't associate spares with other arrays during RAID Examine (bsc#1180661, bsc#1182642) 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch ==== mpg123 ==== Version update (1.28.2 -> 1.29.0) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.29.0 build: * added --enable-runtime-tables libmpg123: * Float deocder runtime table computation is back as option, based on suggestion and initial patch by Ethan Halsall for a smaller download size of the wasm decoder built from libmpg23. This only trims the size of the binary on disk (network), for runtime overhead and a bit of uneasyness about concurrency during table computation, which happens implicitly on handle initialization, only guarded by an integer flag. This does _not_ revive mpg123_init(). * The ID3v2 UTF-16 BOM check is now a straight-on loop and not a recursive function. ==== pinentry ==== Version update (1.1.1 -> 1.2.0) Subpackages: pinentry-gnome3 pinentry-gtk2 pinentry-qt5 - pinentry 1.2.0: * qt: Show a warning if Caps Lock is on * qt: Support password formatting. This makes generated passwords easier to transcribe * qt: Fix showing of pinentry window on Wayland * qt: Check passphrase constraints before accepting passphrase if passphrase constraints are requested to be enforced * qt: Improve detection of running in a GUI session * qt: Improve accessibility when entering new password ==== transactional-update ==== Version update (3.5.2 -> 3.5.3) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.3 - t-u: Purge kernels as part of package operations Required for live patching support [bsc#1189728] ==== vulkan-loader ==== Version update (1.2.182.0 -> 1.2.189.0) - Update to release SDK-1.2.189.0 * loader: Dont return OOM on function load failure * Deallocate the extension lists when deleting an item from layer list * Add layer and implementation-specific logging * Allow "icd" as well as "implem" for VK_LOADER_DEBUG * Fix Vulkan CTS testcase bug: "create_instance_device_intentional_alloc_fail" * loader: Fix accidental error propagation ==== xdg-utils ==== Version update (1.1.3+20200220 -> 1.1.3+20201113) - Update to version 1.1.3+20201113: * Fix xdg-settings support for default-web-browser for Plasma 5.19+ ==== yast2 ==== Version update (4.4.16 -> 4.4.17) Subpackages: yast2-logs - Mark systemd unit/service state "maintenance" as active (bsc#1190163) - 4.4.17

6 12

New Tumbleweed snapshot 20210914 released!
by Dominique Leuenberger 16 Sep '21

16 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aria2 (1.35.0 -> 1.36.0) exim kernel-source (5.14.1 -> 5.14.2) links (2.23 -> 2.24) pfstools (2.1.0 -> 2.2.0) python-ldap rubygem-debase-ruby_core_source thunar (4.16.8 -> 4.16.9) tlp === Details === ==== aria2 ==== Version update (1.35.0 -> 1.36.0) Subpackages: aria2-lang libaria2-0 - Update to version 1.36.0 * Update wslay * Fix segfault when time_t is 64bit on 32bit arch * Updates the make_bash_completion script to Python3 * Prevent corrupt downloads after app and/or system crash * Reset sessionDownloadLength and sessionUploadLength on download start ==== exim ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * exim.service ==== kernel-source ==== Version update (5.14.1 -> 5.14.2) Subpackages: kernel-default kernel-docs - Delete 0001-apparmor-fix-unnecessary-creation-of-net-compat.patch (bsc#1189978) Compat patch no longer required since userspace is upgraded to v3.x - commit c28bbe5 - Delete patches.suse/setuid-dumpable-wrongdir (bsc#1189957). - commit 762368d - Bluetooth: schedule SCO timeouts with delayed_work (CVE-2021-3640 bsc#1188172). - Refresh patches.suse/Bluetooth-switch-to-lock_sock-in-SCO.patch. - commit 2605fb9 - rpm/kernel-source.spec.in: do some more for vanilla_only Make sure: * sources are NOT executable * env is not used as interpreter * timestamps are correct We do all this for normal kernel builds, but not for vanilla_only kernels (linux-next and vanilla). - commit b41e4fd - Linux 5.14.2 (bsc#1012628). - ext4: fix race writing to an inline_data file while its xattrs are changing (bsc#1012628). - ext4: fix e2fsprogs checksum failure for mounted filesystem (bsc#1012628). - xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG (bsc#1012628). - USB: serial: pl2303: fix GL type detection (bsc#1012628). - USB: serial: cp210x: fix control-characters error handling (bsc#1012628). - USB: serial: cp210x: fix flow-control error handling (bsc#1012628). - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup (bsc#1012628). - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (bsc#1012628). - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 (bsc#1012628). - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (bsc#1012628). - ALSA: usb-audio: Work around for XRUN with low latency playback (bsc#1012628). - media: stkwebcam: fix memory leak in stk_camera_probe (bsc#1012628). - commit b155faa - series.conf: cleanup - update upstream reference and move to appropriate section: - patches.suse/crypto-ecc-handle-unaligned-input-buffer-in-ecc_swap.patch - commit 1eedbb8 - crypto: ecc - handle unaligned input buffer in ecc_swap_digits (bsc#1188327). - commit f7925a4 - Refresh patches.suse/scsi-retry-alua-transition-in-progress. - Delete patches.suse/megaraid-mbox-fix-SG_IO. - commit d1e442c - memcg: enable accounting of ipc resources (bsc#1190115 CVE-2021-3759). - commit 9193235 ==== links ==== Version update (2.23 -> 2.24) - update to 2.24: * Fix a crash in the X driver if some window asks for clipboard and is closed before Links responds to this request * Updated the Turkish translation * Support the "id" attribute on COLGROUP, COL, TR, THEAD, TBODY, TFOOT tags ==== pfstools ==== Version update (2.1.0 -> 2.2.0) Subpackages: libpfs2 pfscalibration pfstmo - update to 2.2.0 This is mostly a bug-fix release with many fixes allowing to work with newer version of libraries. Several compilation issues have been resolved on Ubuntu 18.04, 20.04 and Cygwin. The HDR merging (pfshdrcalibrate) uses now better, noise-optimal weights, which should reduce noise for darker image parts. * Added: v210 format in pfsinyuv * Fixed: memleak in pfssize * Fixed: Fix format-security errors with Octave 5.1 * Added: pfs_automerge * Fixed: typos in the documentation * Added: simple deghosting in pfshdrcalibrate (-d option) * Fixed: pfsalign now uses free AKAZE feature detector, avoiding issues with missing non-free OpenCV classes * Fixed: Updated installation instruction for Ubuntu 18.04 * Fixed: Fixed a number of compiler warnings from g++ 7.4.0 * Fixed: Octave interface upgraded to Octave-6 * Fixed: pfstmo_durand02 - reversed the old fix that made images over-saturated. Now 99.5th percentile is mapped to white. * Removed: pfsinjpeghdr, pfsoutjpeghdr (discontinued) * Fixed: compilation fails with GCC11/std=c++17, duplicate "clamp" definition * Added: pfshdrcalibrate now performs exposure merging in a noise-optimal manner * Added: pfsindcraw now calls libraw's dcraw_emu instead of dcraw if the former is available - Rebase patch: pfstools-1.8.1-fix-return-in-nonvoid.patch - Drop patches (included upstream): - pfstools-Fix-build-with-Octave-6.patch - 0001-Remove-using-namespace-std-from-global-namespace.patch - Disable EXR package which does not build - Reenable OpenCV package ==== python-ldap ==== - %check: use %pyunittest_arch rpm macro ==== rubygem-debase-ruby_core_source ==== - Fix rpmlintrc name & add fdupes call ==== thunar ==== Version update (4.16.8 -> 4.16.9) Subpackages: libthunarx-3-0 thunar-lang - Update to version 4.16.9 * Listen to changes on shortcuts to update them when required * Use move action when dragging files of different users (gxo#xfce/thunar#196) * Fix file-icon update when file is cut (gxo#xfce/thunar#588) * Open correct folder on middle-click in tree-view (gxo#xfce/thunar#626) * Disable automatic queueing of file transferes (gxo#xfce/thunar#569) * Fix GLib-CRITICAL in list-view (gxo#xfce/thunar#487) * thunar_file_is_executable() now checks if .desktop file is safe * Fix missing folder in history when opened in new tab (gxo#xfce/thunar#594) * Fixing various memory leaks (gxo#xfce/thunar#573) * Update manpage (gxo#xfce/thunar#121) * Dont show "execute" on context menu for folders * Translation Updates ==== tlp ==== Subpackages: tlp-rdw - Recommend bbswitch for ThinkPad battery charge control instead of acpi-call or tp-smapi not present in the distribution.

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 15 Sep '21

15 Sep '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-PyInstaller - python-pygame Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

list trouble..?
by L A Walsh 15 Sep '21

15 Sep '21

-------- Original Message -------- Subject: Returned mail: see transcript for details Date: Fri, 10 Sep 2021 12:51:33 -0700 From: Mail Delivery Subsystem <MAILER-DAEMON(at)Ishtar.sc.tlinx.org> To: <suse(at)tlinx.org> The original message was received at Fri, 10 Sep 2021 12:51:25 -0700 from Athenae [192.168.3.12] ----- The following addresses had permanent fatal errors ----- <factory(at)lists.opensuse.org> (reason: 550 5.7.1 Spam identified (10.1/5.0)) ----- Transcript of session follows ----- ... while talking to mx1.opensuse.org.: >>> DATA <<< 550 5.7.1 Spam identified (10.1/5.0) 454 4.0.0 Service unavailable Reporting-MTA: dns; Ishtar.sc.tlinx.org Received-From-MTA: DNS; Athenae Arrival-Date: Fri, 10 Sep 2021 12:51:25 -0700 Final-Recipient: RFC822; factory(at)lists.opensuse.org Action: failed Status: 5.7.1 Remote-MTA: DNS; mx1.opensuse.org Diagnostic-Code: SMTP; 550 5.7.1 Spam identified (10.1/5.0) Last-Attempt-Date: Fri, 10 Sep 2021 12:51:33 -0700 Final-Recipient: RFC822; opensuse(at)opensuse.org Action: failed Status: 5.7.1 Remote-MTA: DNS; mx1.opensuse.org Diagnostic-Code: SMTP; 550 5.7.1 Spam identified (10.1/5.0) Last-Attempt-Date: Fri, 10 Sep 2021 12:51:33 -0700 Subject: Re: New Tumbleweed snapshot 20210908 released!, and first try spammy bounce? From: L A Walsh <suse(at)tlinx.org> Date: Fri, 10 Sep 2021 12:51:06 -0700 To: oS-fctry <factory(at)lists.opensuse.org> Well, gave me a chance to add a bit to the message: On 2021/09/10 03:00, Dominique Leuenberger wrote: Why are there 4 dates associated with the release(s) that go out? internal date: 0907 title date (in message) 0908 file date: 0909 actual message date 0910. Shouldn't any of those agree? ----Also, why did the first copy of this get bounced as *s*p*a*m*???? Haven't seen that before... Will have to try some other addresses to see if this one gets through or bounces... I mean what is possibly spammy about the below? -------- Original Message -------- Subject: Postmaster notify: see transcript for details Date: Fri, 10 Sep 2021 12:22:46 -0700 From: Mail Delivery Subsystem <MAILER-DAEMON=Ishtar-sc-tlinx-org> To: Postmaster-Ishtar-sc-tlinx-org The original message was received at Fri, 10 Sep 2021 12:22:38 -0700 from Athenae [192.168.3.12] with id 18AJMagZ020964 ----- The following addresses had permanent fatal errors ----- <factory(at)lists.opensuse.org> (reason: 550 5.7.1 Spam identified (10.4/5.0)) ----- Transcript of session follows ----- ... while talking to mx2.opensuse.org.: >>> DATA <<< 550 5.7.1 Spam identified (10.4/5.0) 454 4.0.0 Service unavailable =============================== -------- Original Message -------- Subject: Re: New Tumbleweed snapshot 20210908 released! Date: Fri, 10 Sep 2021 12:22:21 -0700 From: L A Walsh <suse-tlinx-org> To: factory-lists-opensuse-org References: <163126805338.15681.9955158119170188019(at)go-agent-stagingbot-7> I have a question about the date listed in the subject. If I look at the repomd.xml file in oss/repodata, on dl.os.org, I see a timestamp of 09-Sep-2021 13:48 (i.e. 20210909 , not 0908). Looking inside that file I see the cpeid having a value of 20210907! Thats 3 different values: the 7th in the file, the 8th on the announce, and the 9th on the file date. So why don't any of them agree? Reporting-MTA: dns; Ishtar.sc.tlinx.org Received-From-MTA: DNS; Athenae Arrival-Date: Fri, 10 Sep 2021 12:51:25 -0700 Final-Recipient: RFC822; factory(a)lists.opensuse.org Action: failed Status: 5.7.1 Remote-MTA: DNS; mx1.opensuse.org Diagnostic-Code: SMTP; 550 5.7.1 Spam identified (10.1/5.0) Last-Attempt-Date: Fri, 10 Sep 2021 12:51:33 -0700 Final-Recipient: RFC822; opensuse(a)opensuse.org Action: failed Status: 5.7.1 Remote-MTA: DNS; mx1.opensuse.org Diagnostic-Code: SMTP; 550 5.7.1 Spam identified (10.1/5.0) Last-Attempt-Date: Fri, 10 Sep 2021 12:51:33 -0700 Subject: Re: New Tumbleweed snapshot 20210908 released!, and first try spammy bounce? From: L A Walsh <suse(a)tlinx.org> Date: Fri, 10 Sep 2021 12:51:06 -0700 To: oS-fctry <factory(a)lists.opensuse.org>

12 26

New Tumbleweed snapshot 20210913 released!
by Dominique Leuenberger 15 Sep '21

15 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (91.0.2 -> 92.0) amarok (2.9.75git.20210626T134054~59b22189f6 -> 2.9.75git.20210830T182443~10309f00af) argyllcms (2.1.2 -> 2.2.0) c-ares emacs ghostscript irqbalance libetonyek (0.1.9 -> 0.1.10) libqt5-qtwebengine (5.15.5 -> 5.15.6) libsrtp2 (2.4.0 -> 2.4.1) libtpms libxfce4ui (4.16.0 -> 4.16.1) linux-glibc-devel (5.13 -> 5.14) nfs-utils patterns-base postgresql13 (13.3 -> 13.4) python-kiwi (9.23.49 -> 9.23.54) python-mysqlclient tuned (2.15.0+git.1625694366.bc3f737 -> 2.16.0) util-linux util-linux-systemd virtualbox virtualbox-kmp === Details === ==== MozillaFirefox ==== Version update (91.0.2 -> 92.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 92.0 * More secure connections: Firefox can now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc headers * Full-range color levels are now supported for video playback on many systems MFSA 2021-38 (bsc#1190269) * CVE-2021-29993 (bmo#1708544, bmo#1708767, bmo#1712240, bmo#1712242, bmo#1729259) Handling custom intents could lead to crashes and UI spoofs * CVE-2021-38491 (bmo#1551886) Mixed-Content-Blocking was unable to check opaque origins * CVE-2021-38492 (bmo#1721107) Navigating to `mk:` URL scheme could load Internet Explorer * CVE-2021-38493 (bmo#1723391, bmo#1724101, bmo#1724107) Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 * CVE-2021-38494 (bmo#1723920, bmo#1725638) Memory safety bugs fixed in Firefox 92 - updated appdata - remove mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch (does not apply anymore; unclear if obsolete) - bring back mozilla-silence-no-return-type.patch and run post-build-checks everywhere again - requires NSS 3.69.1 - Add mozilla-bmo1708709.patch: On [wayland] popup can be wrongly repositioned due to rounding errors when font scaling != 1 (bmo#1708709); patch taken from upstream bug report and rebased to apply cleanly against current version. - Bump using with GCC (tested locally). ==== amarok ==== Version update (2.9.75git.20210626T134054~59b22189f6 -> 2.9.75git.20210830T182443~10309f00af) - Update to version 2.9.75git.20210830T182443~10309f00af: * Set Attributes before constructing the Application * Port away from KRandom, bump Qt req. ver. to 5.10 - Rebase amarok-2.9.75git.20210830T182443~10309f00af.tar.xz - Update translations ==== argyllcms ==== Version update (2.1.2 -> 2.2.0) - Update to version 2.2.0: * Added native i1Pro3 and i1Pro3 Plus driver. * Fix bug in applycal.c where it gets an "Error - Write file: 1, icmTextDescription_write: ascii string is shorter" error on replacing one calibration with another. * Improved i1pro & Munki patch recognition to work much more reliably with a slow swipe speed. * Fixed oeminst to work with spyder V5.5. setup.exe * Fixed bug in oemdld that prevented HTML encoded characters in download file decoding properly, which prevented certain filenames from working. * Fixed bug in ccxxmake -S -f where save error wasn't being fully reported, and display technology presence check was faulty. * Fixed typo in display technology, VPA -> PVA. * Made Klein K10A "Lights Off" command timeout a soft error. For some reason this command doesn't seem to be implemented on some K10A's. * Added CIE dE2000 to spotread output. * Fixed accidental global "wrl" in gamut/gamut.h that cases compile warnings. * For more see http://www.argyllcms.com/doc/ChangesSummary.html - Drop argyllcms--gcc--fno-common.patch (upstreamed with exception of static declaration of struct huft, which is not required). ==== c-ares ==== - new upstream website - drop multibuild - tests do not require static library anymore - spec file cleanup - drop sources that were re-added to upstream distibution (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake) - 5c995d5.patch: augment input validation on hostnames to allow _ as part of DNS response (bsc#1190225) ==== emacs ==== Subpackages: emacs-info emacs-nox emacs-x11 etags - Work for boo#1183497: make sure that if ibus is the input method that there exists a working gtk immodule for ibus as well as the ibus daemon is up and running ==== ghostscript ==== Subpackages: ghostscript-x11 - CVE-2021-3781.patch fixes CVE-2021-3781 Trivial -dSAFER bypass cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342 (bsc#1190381) ==== irqbalance ==== Subpackages: irqbalance-ui - Update to version 1.8.0.18.git+2435e8d: * fix unsigned integer subtraction sign overflow * fix opendir fails in check_platform_device * irqbalance: Check validity of numa_node * configure.ac: use pkg-config to find numa * Disable the communication socket when UI is disabled * Fix comma typo in ui.c * drop NoNewPrivs from irqbalance service * remove no existing irq in banned_irqs * Fix compile issue with none AARCH64 builds - Fixes integrated mainline: * bsc#1119461 * bsc#1138190 * bsc#1154905 * bsc#1178477 bsc#1183405 (removed patches due to mainline integration): procinterrupts-check-xen-dyn-event-more-flexible.patch * bsc#1182254 bsc#1156315 (removed patches due to mainline integration): fix-ambiguous-parsing-of-node-entries-in-sys.patch * bsc#1183157 also-fetch-node-info-for-non-PCI-devices.patch ==== libetonyek ==== Version update (0.1.9 -> 0.1.10) - Added patch: * resolve-ambiguities.patch + fix some ambiguities in type resolutions on older compilers + enables building on sle12-sp5 - Update to 0.1.10: * Parse shadow. * Improve detection of the "new" formats. * Fix handling of text baseline shift. * Improve various formats. - Remove upstreamed patch 0001-add-missing-include-for-std-for_each.patch ==== libqt5-qtwebengine ==== Version update (5.15.5 -> 5.15.6) - Update to version 5.15.6: * Update Chromium: + [Backport] CVE-2021-30560: Use after free in Blink XSLT + [Backport] CVE-2021-30566: Stack buffer overflow in Printing + [Backport] CVE-2021-30585: Use after free in sensor handling + Bump V8_PATCH_LEVEL + [Backport] Security bug 1228036 + [Backport] CVE-2021-30604: Use after free in ANGLE + [Backport] CVE-2021-30603: Race in WebAudio + [Backport] CVE-2021-30602: Use after free in WebRTC + [Backport] CVE-2021-30599: Type Confusion in V8 + [Backport] CVE-2021-30598: Type Confusion in V8 + [Backport] Security bug 1227933 + [Backport] Security bug 1205059 + [Backport] Security bug 1184294 + [Backport] Security bug 1198385 + [Backport] CVE-2021-30588: Type Confusion in V8 + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows + [Backport] CVE-2021-30573: Use after free in GPU + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814 + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL + [Backport] CVE-2021-30541: Use after free in V8 + [Backport] Security bugs 1197786 and 1194330 + [Backport] Security bug 1194689 + [Backport] CVE-2021-30563: Type Confusion in V8 + [Backport] Security bug 1211215 + [Backport] Security bug 1209558 + [Backport] CVE-2021-30553: Use after free in Network service + [Backport] CVE-2021-30548: Use after free in Loader + [Backport] CVE-2021-30547: Out of bounds write in ANGLE + [Backport] CVE-2021-30556: Use after free in WebAudio + [Backport] CVE-2021-30559: Out of bounds write in ANGLE + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker + [Backport] Security bug 1202534 + [Backport] CVE-2021-30536: Out of bounds read in V8 + [Backport] CVE-2021-30522: Use after free in WebAudio + [Backport] CVE-2021-30554 Use after free in WebGL + [Backport] CVE-2021-30551: Type Confusion in V8 + [Backport] CVE-2021-30544: Use after free in BFCache + [Backport] CVE-2021-30535: Double free in ICU + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio + [Backport] CVE-2021-30523: Use after free in WebRTC + Generate mojo bindings before compiling extension API registration * Bump version from 5.15.5 to 5.15.6 * Always send phased wheel events beginning with Began - Import patch from the chromium package: * 0001-return-ENOSYS-for-clone3.patch - Add changes from the chromium package to 0001-Fix-build-with-glibc-2.34.patch ==== libsrtp2 ==== Version update (2.4.0 -> 2.4.1) - Update to release 2.4.1 * Use a full-length key even with null ciphers ==== libtpms ==== - security update - added patches fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets + libtpms-CVE-2021-3746.patch ==== libxfce4ui ==== Version update (4.16.0 -> 4.16.1) Subpackages: libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.16.1 * Add 4.16 section to docs * about: Replace stock with regular button * about: Make Close button translatable (bxo#xfce/libxfce4ui#41) * Fix cast alignment warning * Remove Gtk2 leftovers * Don't reserve vertical space for subtitles in headerbars * Translation Updates - Remove headerbar_subtitle.patch - fixed upstream ==== linux-glibc-devel ==== Version update (5.13 -> 5.14) - Update to kernel headers 5.14 ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Add 0001-gssd-fix-crash-in-debug-message.patch Fix crash when rpc-gssd run with -v. (boo#1190144) ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Fix typo in the icon name for the fips pattern (bsc#1189550) ==== postgresql13 ==== Version update (13.3 -> 13.4) Subpackages: libpq5 postgresql13-contrib postgresql13-docs postgresql13-llvmjit postgresql13-server - bsc#1185952: fix build with llvm12 on s390x. 0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch - bsc#1179945: Re-enable icu for PostgreSQL 10. - Upgrade to version 13.4: https://www.postgresql.org/docs/13/release-13-4.html * CVE-2021-3677 (boo#1189748) The planner could create an incorrect plan in cases where two ProjectionPaths were stacked on top of each other. The only known way to trigger that situation involves parallel sort operations, but there may be other instances. The result would be crashes or incorrect query results. Disclosure of server memory contents is also possible. - bsc#1187751: Make the dependency of postgresqlXX-server-devel on llvm and clang optional (postgresql-llvm-optional.patch). ==== python-kiwi ==== Version update (9.23.49 -> 9.23.54) - Bump version: 9.23.53 ? 9.23.54 - Fixed condition for GRUB_DISABLE_LINUX_UUID="true" The grub config parameter GRUB_DISABLE_LINUX_UUID must only be set if the device persistence setting is not UUID. However, in kiwi UUID device names are the default and doesn't have to be expressed explicitly. Therefore the condition to check for different than 'by-uuid' is wrong for the default case were no device persistence setting exists. This results in a wrong grub option to be set. This commit fixes it in a way to disable UUID device names in grub if the only other device persistency setting in kiwi named: 'by-label' is explicitly configured. This Fixes #1842 - Added force_trailing_slash argument to sync_data A speciality of the rsync tool is that it behaves differently if the given source_dir ends with a '/' or not. If it ends with a slash the data structure below will be synced to the target_dir. If it does not end with a slash the source_dir and its contents are synced to the target_dir. For example: source ??? some_data 1. $ rsync -a source target target ??? source ??? some_data 2. $ rsync -a source/ target target ??? some_data The parameter force_trailing_slash in the DataSync::sync_data method can be used to make sure rsync behaves like shown in the second case. This Fixes #1786 - Added type hints for DataSync class - Bump version: 9.23.52 ? 9.23.53 - Add missing bootloader tests Merging #1850 exposed the missing bootloader tests. This reminds me to move the gitlab driven unit tests to github actions because for forked repos the gitlab tests does not run but github actions tests would run - Fix logging of ISO publisher - Improving text formatting - Added documentation for grub2 loopback ISO images - Bump version: 9.23.51 ? 9.23.52 - Fixed pep E711 code smell comparison to None should be 'if cond is not None:' - Bump version: 9.23.50 ? 9.23.51 - No compression with encryption When an image is setup to use encryption the resulting image appears as a random stream of bytes and cannot be compressed. Simply skip the compression in this case. - Fix typo in schema documentation ciper -> cipher. Fix originally done by Robert Schweikert and moved to the right place, see Issue #1906 for details - Allow target dir for archive - Add the option to specify a target directory to unpack the archive - Update doc for target dir attribute This Fixes #1794 - Log deprecation errors to stderr Make sure information about deprecated shell methods logs their information to stderr. This will cause the error message to be exposed to the user and not only in the log file - Fixed TW build test Explicitly added packages that causes conflicts due to the busybox alternatives - Bump version: 9.23.49 ? 9.23.50 - Added support for repo customization script repo files allows for several customization options which could not be set by kiwi through the current repository schema. As the options used do not follow any standard and are not compatible between package managers and distributions the only generic way to handle this is through a script which is invoked with the repo file as parameter for each file created to describe a repo for the selected package manager. This allows users to update/change the repo file content on their individual needs. In the kiwi description the path to the custom script can be specified as follows <repository ... customize="/path/to/custom_script"> <source path="..."/> </repository> This Fixes #1896 ==== python-mysqlclient ==== - Add liberally-accept-charsets.patch: * Support multibyte utf8 return values with new versions of MariaDB. ==== tuned ==== Version update (2.15.0+git.1625694366.bc3f737 -> 2.16.0) - Update to version 2.16.0: * bootloader: make skip_grub_config consistent with initrd_remove_dir ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid-devel libuuid1 libuuid1-32bit util-linux-lang - Remove the raw utility altogether, as it is not even built any more with glibc >=2.34. ==== util-linux-systemd ==== - Remove the raw utility altogether, as it is not even built any more with glibc >=2.34. - login.pamd: use pam_motd to unify motd handling [bsc#1185897]. Else motd snippets of e.g. cockpit will not be shown. ==== virtualbox ==== Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Add file "fixes-for-5.15.patch" to fix builds on kernel 5.15. ==== virtualbox-kmp ==== - Add file "fixes-for-5.15.patch" to fix builds on kernel 5.15.

1 0

Re: New Fumbleweed snapshot 20210908 released!
by L A Walsh 14 Sep '21

14 Sep '21

On 2021/09/14 15:34, L A Walsh wrote: > > I have a question about the date listed in the subject. ^This^ post was totally about the new-release posting format and why it has 4 different dates that are on 4 different days. Spam my a**. Since the dates come , sometimes every day, that means a date (most likely) would refer to either the ill-dated snapshot date, or the internal cpeid number. Seems the snapshot date should match the cpeid number so any references to a specific date would be more likely to end up with 1 release choice.

1 0

New Tumbleweed snapshot 20210912 released!
by Dominique Leuenberger 14 Sep '21

14 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaThunderbird (91.0.3 -> 91.1.0) compat-usrmerge gcc glib2 krb5 libseccomp (2.5.1 -> 2.5.2) open-iscsi openexr patterns-server pipewire (0.3.34 -> 0.3.35) publicsuffix (20210823 -> 20210908) python-Jinja2 python-aiohttp python38 (3.8.11 -> 3.8.12) python38-core (3.8.11 -> 3.8.12) python38-documentation (3.8.11 -> 3.8.12) qemu spamassassin systemd yast2-country (4.4.5 -> 4.4.6) yast2-installation (4.4.17 -> 4.4.18) yast2-network (4.4.22 -> 4.4.23) === Details === ==== MozillaThunderbird ==== Version update (91.0.3 -> 91.1.0) Subpackages: MozillaThunderbird-translations-common - Mozilla Thunderbird 91.1.0 * Thunderbird registered Accessibility Handlers using same GUIDs as Firefox, causing performance issues for NVDA users * Focus lost when reordering accounts by keyboard in the Account Manager * Account setup did not use provider display name for setting up calendars * Various theme and UX fixes MFSA 2021-41 (bsc#1190269) * CVE-2021-38492 (bmo#1721107) Navigating to `mk:` URL scheme could load Internet Explorer * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101, bmo#1724107) Memory safety bugs fixed in Thunderbird 91.1 - (re-)added mozilla-silence-no-return-type.patch - add mozilla-bmo531915.patch to fix build for i586 ==== compat-usrmerge ==== - statically link xmv to avoid glibc 2.34 dependency (__libc_start_main(a)GLIBC_2.34) - turn on filetriggers in main package. Needed for single transaction upgrades (boo#1189788) ==== gcc ==== Subpackages: cpp gcc-info libstdc++-devel - Add libgccjit%{libgccjit_sover}-devel package ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - desktop-file-utils: add Pantheon desktop environment ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Fix KDC null pointer dereference via a FAST inner body that lacks a server field; (CVE-2021-37750); (bsc#1189929); - Added patches: * 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch ==== libseccomp ==== Version update (2.5.1 -> 2.5.2) - Update to release 2.5.2 * Update the syscall table for Linux v5.14-rc7 * Add a function, get_notify_fd(), to the Python bindings to get the nofication file descriptor. * Consolidate multiplexed syscall handling for all architectures into one location. * Add multiplexed syscall support to PPC and MIPS * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within the kernel. libseccomp's fd notification logic was modified to support the kernel's previous and new usage of SECCOMP_IOCTL_NOTIF_ID_VALID. ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Updated to latest upstream 2.1.5 as 2.1.5-suse, which contains these changes not already present: * Handle IPv6 interfaces correctly. (bsc#1187958) * Handle qedi correctly in NPAR mode (bsc#1187958) * Update iscsiadm man page (bsc#1187958) * Update iface.example for ipv6 * Change iscsi IP type from defines to enum. * Handle recv() returning 0 in iscsid_response() ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add patch to fix OpenEXRCore.testHUF on armv7: * openexr-fix-armv7.patch * openexr-fix-armv7-2.patch ==== patterns-server ==== Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-gateway_server patterns-server-kvm_server patterns-server-lamp_server patterns-server-mail_server patterns-server-printing patterns-server-xen_server - Make wireshark recommended, not required. ==== pipewire ==== Version update (0.3.34 -> 0.3.35) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.35: * Highlights: - S/PDIF passthrough over optical or HDMI is now implemented. - Some critical fixes to MIDI, draining of streams and various modules. - skypeforlinux should work better now after adding it to the quirks database. - Bluetooth codecs are now in separate plugins to make it easier to ship them. * PipeWire: - Drain was fixed in pw-stream. In some cases it would not clear the drain state correctly. Fixes the issue where speaker-test would only play one channel. - Loopback connections to a driver will now activate the driver. This fixes an issue where MIDI connections between devices or some applications (puredata) would not get any MIDI messages. (#1559)x. - The audiomixer can now mix more formats. Together with the passthrough improvements this can be used to avoid conversions to/from the DSP format in some cases. - Make sure we idle drivers when removing a node from it in all cases. JACK clients could keep a driver node busy. - Add new methods to accumulate object info. The old one was difficult to use when applications need to accumulate multiple changes. - A new interface to load modules has been added. Plugins can use this to ask the host (PipeWire) to load spa plugins. - Increase param buffer size to handle larger params. Nodes with a large number of channels would sometimes not have properties. (#1574) - Concurrent link negotiation that caused some links to not work, is now avoided. This fixes monitor ports in Ardour6. - Small tweaks to how the quantum and rate are handled when nodes move between drivers. Make node.lock-quantum work with node.latency * PipeWire modules: - The convolver plugin in filter-chain has been optimized some more. - The echo-cancel stream properties were improved so that it actually can remember the streams it links to. (#1557) - module-pulse-tunnel had the buffer attributes wrong and would cause high latency with older pulseaudio servers. (#1434) - module-roc had the properties configured wrongly, which would cause it to not work at all in most cases. (#1538) - There is now an example of a 7.1 virtual surround sink using the hesuvi impulse responses. - The convolver now supports dirac pulses as the IR. * ALSA: - UCM config is now cached per device, using up less memory. It also temporarily works around a problem in alsa-lib that is now being patched and rolled out. Should stop devices from disappearing when logging out and back in. (#1553) - Fix the MIDI clock rate matching. It was too sensitive to small changes and would spiral out of control and break MIDI rather quickly. * pipewire-media-session: - The media session can now save and restore IEC958 (S/PDIF) codecs for the sinks. - Passthrough of IEC958 (S/PDIF) content is now possible. If the client and the sink contain a compatible set of codecs, an exclusive connection can be made between client and sink to pass the encoded S/PDIF content directly to the device. - Use new introspection info update methods to suspend nodes in all cases. Sometimes, nodes would fail to suspend because the state info was not evaluated. - The media session can now work in non-DSP mode, which will try to avoid any audio conversions between client and device when possible. But, this will also disable compatibility with JACK applications. * Bluetooth - Bluetooth codecs are now compiled into separate plugins which are dynamically loaded. This makes it possible to change the plugin implementation or ship plugins separately without having to recompile the bluetooth module. * PulseAudio server - Delay stream create reply until the stream is linked to a sink/source. - The device-restore extension is now implemented. This makes it possible to configure the IEC958 (S/PDIF) codecs supported by the sink with pavucontrol. - skypeforlinux now uses the same quirks as teams to make the sinks show up in all cases. This fixes the issue of not being able to hear the remote end in skypeforlinux. * JACK - Improve catia and carla compatibility by caching objects a little longer after being removed. (#1531) - JACK ports now notify the negotiated format correctly. - A potential deadlock was fixed when multiple threads would perform a call that would require a roundtrip. - Improve bufsize callback, it should not be called right after doing activate() but only when the buffersize changes later. - Add tweak to disable the process lock. Some older apps might not expect it. (#1576) * Docs - man pages are now generated with rst2man. - DMA-BUF docs were updated. - Documentation updates. - Replace BuildRequires xmltoman with docutils (rst2man) - Update libcamera Buildrequires. ==== publicsuffix ==== Version update (20210823 -> 20210908) - Update to version 20210908: * Add instances.spawn.cc (#1411) * Remove: nctu.me (#1407) * Roll back diher.solutions PR #1393 (#1406) * Update public_suffix_list.dat (#1390) * Add barsy.ro to Lukanet Ltd private domains (#1402) * Add affinitylottery.org.uk raffleentry.org.uk and weeklylottery.org.uk to public suffix list (#1398) * Tabitorder.co.il (#1385) * add diher.solutions and rss.my.id to the list (#1393) * Include *.cloudera.site to the PSL (#1400) * Adds pages.it.hs-heilbronn.de (#1388) * these domains are being deprecated, we wish to clean up after ourselves (#1399) ==== python-Jinja2 ==== - Add no-warnings-as-errors.patch: * Do not treat warnings as errors until upstream fix using async loops. ==== python-aiohttp ==== - Restore python39-failures.patch, which is actually still needed. - Remove python39-failures.patch and replace it with actual fix of the issue in remove_deprecated_loop_argument.patch. - Add backport_fix_for_setting_cookies.patch for backport of fixes from 3.8 branch. - Add python39-failures.patch to fix test problems with Python 3.9.7+ (gh#aio-libs/aiohttp#5991). ==== python38 ==== Version update (3.8.11 -> 3.8.12) Subpackages: python38-curses python38-dbm python38-tk - Update to 3.8.12 * Complete list of changes is available at https://docs.python.org/release/3.8.12/whatsnew/changelog.html * Security - bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 ?Billion Laughs? vulnerability. This copy is most used on Windows and macOS. - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. - bpo-36384: ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros. - Refreshed patch: * decimal-3.8.patch - Add decimal-3.8.patch to add building with --with-system-libmpdec option (bsc#1189356). - test_faulthandler is still problematic under qemu linux-user emulation, disable it there - Reenable profileopt with qemu emulation, test_faulthandler is no longer run during profiling ==== python38-core ==== Version update (3.8.11 -> 3.8.12) Subpackages: libpython3_8-1_0 python38-base - Update to 3.8.12 * Complete list of changes is available at https://docs.python.org/release/3.8.12/whatsnew/changelog.html * Security - bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 ?Billion Laughs? vulnerability. This copy is most used on Windows and macOS. - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. - bpo-36384: ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros. - Refreshed patch: * decimal-3.8.patch - Add decimal-3.8.patch to add building with --with-system-libmpdec option (bsc#1189356). - test_faulthandler is still problematic under qemu linux-user emulation, disable it there - Reenable profileopt with qemu emulation, test_faulthandler is no longer run during profiling ==== python38-documentation ==== Version update (3.8.11 -> 3.8.12) - Update to 3.8.12 * Complete list of changes is available at https://docs.python.org/release/3.8.12/whatsnew/changelog.html * Security - bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 ?Billion Laughs? vulnerability. This copy is most used on Windows and macOS. - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. - bpo-36384: ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros. - Refreshed patch: * decimal-3.8.patch - Add decimal-3.8.patch to add building with --with-system-libmpdec option (bsc#1189356). - test_faulthandler is still problematic under qemu linux-user emulation, disable it there - Reenable profileopt with qemu emulation, test_faulthandler is no longer run during profiling ==== qemu ==== Subpackages: qemu-accel-qtest qemu-accel-tcg-x86 qemu-arm qemu-audio-spice qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Fix qemu build on ARMv7 (bsc#1190211) * Patches added: tcg-arm-Fix-tcg_out_vec_op-function-sign.patch - Update supported file for ARM machines. - Keep qemu-img without backing format still deprecated (bsc#1190135) * Patches added: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch - Update the support files to reflect the deprecation. - Update build dependencies versions: libgcrypt >= 1.8.0, gnutls >= 3.5.18, glib >= 2.56, libssh >= 0.8.7 - Fix hardcoded binfmt handler doesn't play well with containers (bsc#1186256) * Patches added: qemu-binfmt-conf.sh-allow-overriding-SUS.patch ==== spamassassin ==== Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - spamassassin: sa-update.timer does not work (bsc#1175375) Remove sence less SPAM_SA_UPDATE Document how to use sa-update.service ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-doc systemd-lang systemd-logger systemd-sysvinit udev - Don't reexecute user manager instances on package update yet This can't be done until users have their user instance updated to the new version that supports reexecuting with SIGRTMIN+25 because this signal terminates the user managers for the previous versions. - Import commit ec72db9ee0f8ce061f83624d7148ff38a5993b11 3b1aa2f79f manager: reexecute on SIGRTMIN+25, user instances only fd46c81922 test: make sure to include all haveged unit files - systemd.spec: reexec user manager instances on package updates - Make sure the versions of both udev and systemd packages are always the same (bsc#1189480) - Drop dependency on m4 (replaced by Jinja2) ==== yast2-country ==== Version update (4.4.5 -> 4.4.6) Subpackages: yast2-country-data - Use only one server when proposing the default NTP servers to be used (bsc#1188980). - 4.4.6 ==== yast2-installation ==== Version update (4.4.17 -> 4.4.18) - Display release notes during upgrade (bsc#1186044) - 4.4.18 ==== yast2-network ==== Version update (4.4.22 -> 4.4.23) - Add support for reading the default NTP servers from the control file in case of defined (bsc#1180699) - 4.4.23

1 0

New packages in Factory: Helvum and Lagrange
by Adam Mizerski 13 Sep '21

13 Sep '21

Say hello to: - Helvum. A GTK patchbay for pipewire. https://gitlab.freedesktop.org/ryuukyu/helvum/ https://build.opensuse.org/package/show/openSUSE:Factory/helvum - Lagrange. Desktop GUI client for browsing Geminispace. (this one is in Factory for quite some time, I just didn't announce it earlier) https://gmi.skyjake.fi/lagrange/ https://build.opensuse.org/package/show/openSUSE:Factory/lagrange

1 0

New Tumbleweed snapshot 20210910 released!
by Dominique Leuenberger 12 Sep '21

12 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ell (0.42 -> 0.43) ibus (1.5.24 -> 1.5.25) kernel-source (5.14.0 -> 5.14.1) nmap (7.91 -> 7.92) pam-config (1.3 -> 1.4) python-boto3 (1.18.7 -> 1.18.33) python-botocore (1.21.7 -> 1.21.33) python-ordered-set (3.1.1 -> 4.0.2) python-simplejson (3.17.3 -> 3.17.5) supermin system-users sysuser-tools yast2-kdump (4.4.0 -> 4.4.1) yast2-update (4.4.2 -> 4.4.3) === Details === ==== ell ==== Version update (0.42 -> 0.43) - Update to release 0.43 * Add support for DHCP Rapid Commit feature. * Add support for DHCP authorative mode feature. ==== ibus ==== Version update (1.5.24 -> 1.5.25) Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit typelib-1_0-IBus-1_0 - Refresh ibus-socket-name-compatibility.patch - Add ibus-missing-include.patch to fix build on Leap - Add ibus-fix-wrong-cursor-location.patch (based on https://github.com/ibus/ibus/commit/936a0e76df79d92a8bdc03e9205330fb84a2083…) (gh#ibus/ibus#2337) - Drop ibus-python-install-dir.patch Two reasons: it's for, disabled in .spec, python2, and patch forces the re-generation of configure, which requires aclocal-1.16, unavailable on Leap-15.3, and that breaks the build. - Update version to 1.5.25 * src/tests: Run gnome-session with no-overview mode * client/gtk2: Implement ibus_im_context_set_surrounding_with_selection * src/ibuscomposetable: Do not include the same compose file * src/ibusenginesimple: Multi_key to 0xB7 * src/ibusenginesimple: Make Compose preedit less intrusive * Change default Emoji shortcut key * setup: Enhance engine search function * client/gtk2/ibusimcontext: Enable sync process in GTK4 * engine: Update simple.xml with xkeyboard-config 2.33 * src/ibuscomposetable: Add support for the include directive (lf-) * src/ibuscomposetable: Fix a buffer overflow in compose handling (lf-) * client/x11: Add support for XFixes ClientDisconnectMode (Olivier Fourdan) * setup: Start ibus-daemon with the --daemonize option (Gunnar Hjalmarsson) * src: Fix a typo in ibusenginesimple.h (user202729) * Update translations ==== kernel-source ==== Version update (5.14.0 -> 5.14.1) Subpackages: kernel-default kernel-docs - watchdog: Fix NULL pointer dereference when releasing cdev (bsc#1190093). - Update config files. We can enable the option after this fix again. - commit 65109d0 - Linux 5.14.1 (bsc#1012628). - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (bsc#1012628). - net: dsa: mt7530: fix VLAN traffic leaks again (bsc#1012628). - btrfs: fix NULL pointer dereference when deleting device by invalid id (bsc#1012628). - Revert "floppy: reintroduce O_NDELAY fix" (bsc#1012628). - fscrypt: add fscrypt_symlink_getattr() for computing st_size (bsc#1012628). - ext4: report correct st_size for encrypted symlinks (bsc#1012628). - f2fs: report correct st_size for encrypted symlinks (bsc#1012628). - ubifs: report correct st_size for encrypted symlinks (bsc#1012628). - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls (bsc#1012628). - audit: move put_tree() to avoid trim_trees refcount underflow and UAF (bsc#1012628). - commit 1059c60 - update patches metadata - update upstream references: - patches.suse/Bluetooth-avoid-circular-locks-in-sco_sock_connect.patch - patches.suse/Bluetooth-btusb-Add-support-for-Foxconn-Mediatek-Chi.patch - patches.suse/Bluetooth-btusb-Add-support-for-IMC-Networks-Mediate.patch - patches.suse/Bluetooth-switch-to-lock_sock-in-SCO.patch - commit c2e3f15 - HID: usbhid: Simplify code in hid_submit_ctrl() (<cover.1630658591.git.mkubecek(a)suse.cz>). - HID: usbhid: Fix warning caused by 0-length input reports (<cover.1630658591.git.mkubecek(a)suse.cz>). - HID: usbhid: Fix flood of "control queue full" messages (<cover.1630658591.git.mkubecek(a)suse.cz>). - commit 4552165 - Delete patches.suse/hid-fix-length-inconsistency.patch. To be replaced by a cherry pick of corresponding upstream commits. - commit ba7e2a2 - Delete patches.suse/Revert-netfilter-conntrack-remove-helper-hook-again.patch (bsc#1189964) The regression addressed by this revert was fixed properly by mainline commit ee04805ff54a ("netfilter: conntrack: make conntrack userspace helpers work again") in 5.7. - commit 775ed38 - series.conf: cleanup Move queued patches to "almost mainline" section. No effect on expanded tree. - commit e91bb9d - vt_kdsetmode: extend console locking (bsc#1190025 CVE-2021-3753). - commit 18d6ea3 - Update config files. Disable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT (bsc#1190093) - commit 55bd270 - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (CVE-2021-3640 bsc#1188172). - commit b9d15a3 - Delete patches.suse/uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc (bsc#1189959). No longer needed, since it's upstream now. - commit b1aeba4 - arm64: Update config files. (bsc#1189922) Enable ISP1760_DUAL_ROLE - commit c265161 - rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed. - commit 357f09a ==== nmap ==== Version update (7.91 -> 7.92) - Update to 7.92: * TLS 1.3 now supported by most scripts for which it is relevant * Other bugfixes and improvements * https://nmap.org/changelog.html#7.92 ==== pam-config ==== Version update (1.3 -> 1.4) - Update to version 1.4 - Fix support for mulitple locations for configuration files - Drop pam-config-fix-pam_keyinit-options.patch - Drop pam-config-remove-bad-access-call.patch ==== python-boto3 ==== Version update (1.18.7 -> 1.18.33) - Update to version 1.18.33 * sync python-botocore dependency with setup.py * api-change:``iot``: [``botocore``] Added Create/Update/Delete/Describe/List APIs for a new IoT resource named FleetMetric. Added a new Fleet Indexing query API named GetBucketsAggregation. Added a new field named DisconnectedReason in Fleet Indexing query response. Updated their related documentations. * api-change:``polly``: [``botocore``] Amazon Polly adds new South African English voice - Ayanda. Ayanda is available as Neural voice only. * api-change:``compute-optimizer``: [``botocore``] Documentation updates for Compute Optimizer * api-change:``sqs``: [``botocore``] Amazon SQS adds a new queue attribute, RedriveAllowPolicy, which includes the dead-letter queue redrive permission parameters. It defines which source queues can specify dead-letter queues as a JSON object. * api-change:``memorydb``: [``botocore``] Documentation updates for MemoryDB - from version 1.18.32 * api-change:``codebuild``: [``botocore``] Documentation updates for CodeBuild * api-change:``firehose``: [``botocore``] This release adds the Dynamic Partitioning feature to Kinesis Data Firehose service for S3 destinations. * api-change:``kms``: [``botocore``] This release has changes to KMS nomenclature to remove the word master from both the "Customer master key" and "CMK" abbreviation and replace those naming conventions with "KMS key". * api-change:``cloudformation``: [``botocore``] AWS CloudFormation allows you to iteratively develop your applications when failures are encountered without rolling back successfully provisioned resources. By specifying stack failure options, you can troubleshoot resources in a CREATE_FAILED or UPDATE_FAILED status. - from version 1.18.31 * api-change:``s3``: [``botocore``] Documentation updates for Amazon S3. * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``ec2``: [``botocore``] This release adds the BootMode flag to the ImportImage API and showing the detected BootMode of an ImportImage task. - from version 1.18.30 * api-change:``transcribe``: [``botocore``] This release adds support for batch transcription in six new languages - Afrikaans, Danish, Mandarin Chinese (Taiwan), New Zealand English, South African English, and Thai. * api-change:``rekognition``: [``botocore``] This release added new attributes to Rekognition RecognizeCelebities and GetCelebrityInfo API operations. * api-change:``ec2``: [``botocore``] Support added for resizing VPC prefix lists * api-change:``compute-optimizer``: [``botocore``] Adds support for 1) the AWS Graviton (AWS_ARM64) recommendation preference for Amazon EC2 instance and Auto Scaling group recommendations, and 2) the ability to get the enrollment statuses for all member accounts of an organization. - from version 1.18.29 * api-change:``fms``: [``botocore``] AWS Firewall Manager now supports triggering resource cleanup workflow when account or resource goes out of policy scope for AWS WAF, Security group, AWS Network Firewall, and Amazon Route 53 Resolver DNS Firewall policies. * api-change:``ec2``: [``botocore``] Support added for IMDS IPv6 endpoint * api-change:``datasync``: [``botocore``] Added include filters to CreateTask and UpdateTask, and added exclude filters to StartTaskExecution, giving customers more granular control over how DataSync transfers files, folders, and objects. * api-change:``events``: [``botocore``] AWS CWEvents adds an enum of EXTERNAL for EcsParameters LaunchType for PutTargets API - from version 1.18.28 * api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added MBAFF encoding support for AVC video and the ability to pass encryption context from the job settings to S3. * api-change:``polly``: [``botocore``] Amazon Polly adds new New Zealand English voice - Aria. Aria is available as Neural voice only. * api-change:``transcribe``: [``botocore``] This release adds support for feature tagging with Amazon Transcribe batch jobs. * api-change:``ssm``: [``botocore``] Updated Parameter Store property for logging improvements. * api-change:``iot-data``: [``botocore``] Updated Publish with support for new Retain flag and added two new API operations: GetRetainedMessage, ListRetainedMessages. - from version 1.18.27 * api-change:``dms``: [``botocore``] Amazon AWS DMS service now support Redis target endpoint migration. Now S3 endpoint setting is capable to setup features which are used to be configurable only in extract connection attributes. * api-change:``frauddetector``: [``botocore``] Updated an element of the DescribeModelVersion API response (LogitMetrics -> logOddsMetrics) for clarity. Added new exceptions to several APIs to protect against unlikely scenarios. * api-change:``iotsitewise``: [``botocore``] Documentation updates for AWS IoT SiteWise * api-change:``dlm``: [``botocore``] Added AMI deprecation support for Amazon Data Lifecycle Manager EBS-backed AMI policies. * api-change:``glue``: [``botocore``] Add support for Custom Blueprints * api-change:``apigateway``: [``botocore``] Adding some of the pending releases (1) Adding WAF Filter to GatewayResponseType enum (2) Ensuring consistent error model for all operations (3) Add missing BRE to GetVpcLink operation * api-change:``backup``: [``botocore``] AWS Backup - Features: Evaluate your backup activity and generate audit reports. - from version 1.18.26 * api-change:``eks``: [``botocore``] Adds support for EKS add-ons "preserve" flag, which allows customers to maintain software on their EKS clusters after removing it from EKS add-ons management. * api-change:``comprehend``: [``botocore``] Add tagging support for Comprehend async inference job. * api-change:``robomaker``: [``botocore``] Documentation updates for RoboMaker * api-change:``ec2``: [``botocore``] encryptionInTransitSupported added to DescribeInstanceTypes API - from version 1.18.25 * api-change:``ec2``: [``botocore``] The ImportImage API now supports the ability to create AMIs with AWS-managed licenses for Microsoft SQL Server for both Windows and Linux. * api-change:``memorydb``: [``botocore``] AWS MemoryDB SDK now supports all APIs for newly launched MemoryDB service. * api-change:``application-autoscaling``: [``botocore``] This release extends Application Auto Scaling support for replication group of Amazon ElastiCache Redis clusters. Auto Scaling monitors and automatically expands node group count and number of replicas per node group when a critical usage threshold is met or according to customer- defined schedule. * api-change:``appflow``: [``botocore``] This release adds support for SAPOData connector and extends Veeva connector for document extraction. - from version 1.18.24 * api-change:``codebuild``: [``botocore``] CodeBuild now allows you to make the build results for your build projects available to the public without requiring access to an AWS account. * api-change:``route53``: [``botocore``] Documentation updates for route53 * api-change:``sagemaker-runtime``: [``botocore``] Update sagemaker- runtime client to latest version * api-change:``route53resolver``: [``botocore``] Documentation updates for Route 53 Resolver * api-change:``sagemaker``: [``botocore``] Amazon SageMaker now supports Asynchronous Inference endpoints. Adds PlatformIdentifier field that allows Notebook Instance creation with different platform selections. Increases the maximum number of containers in multi- container endpoints to 15. Adds more instance types to InstanceType field. - from version 1.18.23 * api-change:``cloud9``: [``botocore``] Added DryRun parameter to CreateEnvironmentEC2 API. Added ManagedCredentialsActions parameter to UpdateEnvironment API * api-change:``ec2``: [``botocore``] This release adds support for EC2 ED25519 key pairs for authentication * api-change:``clouddirectory``: [``botocore``] Documentation updates for clouddirectory * api-change:``ce``: [``botocore``] This release is a new feature for Cost Categories: Split charge rules. Split charge rules enable you to allocate shared costs between your cost category values. * api-change:``logs``: [``botocore``] Documentation-only update for CloudWatch Logs - from version 1.18.22 * api-change:``iotsitewise``: [``botocore``] AWS IoT SiteWise added query window for the interpolation interval. AWS IoT SiteWise computes each interpolated value by using data points from the timestamp of each interval minus the window to the timestamp of each interval plus the window. * api-change:``s3``: [``botocore``] Documentation updates for Amazon S3 * api-change:``codebuild``: [``botocore``] CodeBuild now allows you to select how batch build statuses are sent to the source provider for a project. * api-change:``ds``: [``botocore``] This release adds support for describing client authentication settings. * api-change:``config``: [``botocore``] Update ResourceType enum with values for Backup Plan, Selection, Vault, RecoveryPoint; ECS Cluster, Service, TaskDefinition; EFS AccessPoint, FileSystem; EKS Cluster; ECR Repository resources * api-change:``license-manager``: [``botocore``] AWS License Manager now allows end users to call CheckoutLicense API using new CheckoutType PERPETUAL. Perpetual checkouts allow sellers to check out a quantity of entitlements to be drawn down for consumption. - from version 1.18.21 * api-change:``quicksight``: [``botocore``] Documentation updates for QuickSight. * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``customer-profiles``: [``botocore``] This release introduces Standard Profile Objects, namely Asset and Case which contain values populated by data from third party systems and belong to a specific profile. This release adds an optional parameter, ObjectFilter to the ListProfileObjects API in order to search for these Standard Objects. * api-change:``elasticache``: [``botocore``] This release adds ReplicationGroupCreateTime field to ReplicationGroup which indicates the UTC time when ElastiCache ReplicationGroup is created - from version 1.18.20 * api-change:``sagemaker``: [``botocore``] Amazon SageMaker Autopilot adds new metrics for all candidate models generated by Autopilot experiments. * api-change:``apigatewayv2``: [``botocore``] Adding support for ACM imported or private CA certificates for mTLS enabled domain names * api-change:``apigateway``: [``botocore``] Adding support for ACM imported or private CA certificates for mTLS enabled domain names * api-change:``databrew``: [``botocore``] This SDK release adds support for the output of a recipe job results to Tableau Hyper format. * api-change:``lambda``: [``botocore``] Lambda Python 3.9 runtime launch - from version 1.18.19 * api-change:``snow-device-management``: [``botocore``] AWS Snow Family customers can remotely monitor and operate their connected AWS Snowcone devices. * api-change:``ecs``: [``botocore``] Documentation updates for ECS. * api-change:``nimble``: [``botocore``] Add new attribute 'ownedBy' in Streaming Session APIs. 'ownedBy' represents the AWS SSO Identity Store User ID of the owner of the Streaming Session resource. * api-change:``codebuild``: [``botocore``] CodeBuild now allows you to make the build results for your build projects available to the public without requiring access to an AWS account. * api-change:``ebs``: [``botocore``] Documentation updates for Amazon EBS direct APIs. * api-change:``route53``: [``botocore``] Documentation updates for route53 - from version 1.18.18 * api-change:``chime``: [``botocore``] Add support for "auto" in Region field of StartMeetingTranscription API request. * enchancement:Client: [``botocore``] Improve client performance by caching _alias_event_name on EventAliaser - from version 1.18.17 * api-change:``wafv2``: [``botocore``] This release adds APIs to support versioning feature of AWS WAF Managed rule groups * api-change:``rekognition``: [``botocore``] This release adds support for four new types of segments (opening credits, content segments, slates, and studio logos), improved accuracy for credits and shot detection and new filters to control black frame detection. * api-change:``ssm``: [``botocore``] Documentation updates for AWS Systems Manager. - from version 1.18.16 * api-change:``synthetics``: [``botocore``] Documentation updates for Visual Monitoring feature and other doc ticket fixes. * api-change:``chime-sdk-identity``: [``botocore``] The Amazon Chime SDK Identity APIs allow software developers to create and manage unique instances of their messaging applications. * api-change:``chime-sdk-messaging``: [``botocore``] The Amazon Chime SDK Messaging APIs allow software developers to send and receive messages in custom messaging applications. * api-change:``connect``: [``botocore``] This release adds support for agent status and hours of operation. For details, see the Release Notes in the Amazon Connect Administrator Guide. * api-change:``lightsail``: [``botocore``] This release adds support to track when a bucket access key was last used. * api-change:``athena``: [``botocore``] Documentation updates for Athena. - from version 1.18.15 * api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version * api-change:``autoscaling``: [``botocore``] EC2 Auto Scaling adds configuration checks and Launch Template validation to Instance Refresh. - from version 1.18.14 * api-change:``rds``: [``botocore``] This release adds AutomaticRestartTime to the DescribeDBInstances and DescribeDBClusters operations. AutomaticRestartTime indicates the time when a stopped DB instance or DB cluster is restarted automatically. * api-change:``imagebuilder``: [``botocore``] Updated list actions to include a list of valid filters that can be used in the request. * api-change:``transcribe``: [``botocore``] This release adds support for call analytics (batch) within Amazon Transcribe. * api-change:``events``: [``botocore``] Update events client to latest version * api-change:``ssm-incidents``: [``botocore``] Documentation updates for Incident Manager. - from version 1.18.13 * api-change:``redshift``: [``botocore``] API support for Redshift Data Sharing feature. * api-change:``iotsitewise``: [``botocore``] My AWS Service (placeholder) - This release introduces custom Intervals and offset for tumbling window in metric for AWS IoT SiteWise. * api-change:``glue``: [``botocore``] Add ConcurrentModificationException to create-table, delete-table, create- database, update-database, delete-database * api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added control over the passthrough of XDS captions metadata to outputs. * api-change:``proton``: [``botocore``] Docs only add idempotent create apis - from version 1.18.12 * api-change:``ssm-contacts``: [``botocore``] Added new attribute in AcceptCode API. AcceptCodeValidation takes in two values - ENFORCE, IGNORE. ENFORCE forces validation of accept code and IGNORE ignores it which is also the default behavior; Corrected TagKeyList length from 200 to 50 * api-change:``greengrassv2``: [``botocore``] This release adds support for component system resource limits and idempotent Create operations. You can now specify the maximum amount of CPU and memory resources that each component can use. - from version 1.18.11 * api-change:``appsync``: [``botocore``] AWS AppSync now supports a new authorization mode allowing you to define your own authorization logic using an AWS Lambda function. * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``secretsmanager``: [``botocore``] Add support for KmsKeyIds in the ListSecretVersionIds API response * api-change:``sagemaker``: [``botocore``] API changes with respect to Lambda steps in model building pipelines. Adds several waiters to async Sagemaker Image APIs. Add more instance types to AppInstanceType field - from version 1.18.10 * api-change:``savingsplans``: [``botocore``] Documentation update for valid Savings Plans offering ID pattern * api-change:``ec2``: [``botocore``] This release adds support for G4ad xlarge and 2xlarge instances powered by AMD Radeon Pro V520 GPUs and AMD 2nd Generation EPYC processors * api-change:``chime``: [``botocore``] Adds support for live transcription of meetings with Amazon Transcribe and Amazon Transcribe Medical. The new APIs, StartMeetingTranscription and StopMeetingTranscription, control the generation of user-attributed transcriptions sent to meeting clients via Amazon Chime SDK data messages. * api-change:``iotsitewise``: [``botocore``] Added support for AWS IoT SiteWise Edge. You can now create an AWS IoT SiteWise gateway that runs on AWS IoT Greengrass V2. With the gateway, you can collect local server and equipment data, process the data, and export the selected data from the edge to the AWS Cloud. * api-change:``iot``: [``botocore``] Increase maximum credential duration of role alias to 12 hours. - from version 1.18.9 * api-change:``sso-admin``: [``botocore``] Documentation updates for arn:aws:trebuchet:::service:v1:03a2216d-1cda-4696-9ece-1387cb6f6952 * api-change:``cloudformation``: [``botocore``] SDK update to support Importing existing Stacks to new/existing Self Managed StackSet - Stack Import feature. - from version 1.18.8 * api-change:``route53``: [``botocore``] This release adds support for the RECOVERY_CONTROL health check type to be used in conjunction with Route53 Application Recovery Controller. * api-change:``iotwireless``: [``botocore``] Add SidewalkManufacturingSn as an identifier to allow Customer to query WirelessDevice, in the response, AmazonId is added in the case that Sidewalk device is return. * api-change:``route53-recovery-control-config``: [``botocore``] Amazon Route 53 Application Recovery Controller's routing control - Routing Control Configuration APIs help you create and delete clusters, control panels, routing controls and safety rules. State changes (On/Off) of routing controls are not part of configuration APIs. * api-change:``route53-recovery-readiness``: [``botocore``] Amazon Route 53 Application Recovery Controller's readiness check capability continually monitors resource quotas, capacity, and network routing policies to ensure that the recovery environment is scaled and configured to take over when needed. * api-change:``quicksight``: [``botocore``] Add support to use row- level security with tags when embedding dashboards for users not provisioned in QuickSight * api-change:``iotanalytics``: [``botocore``] IoT Analytics now supports creating a dataset resource with IoT SiteWise MultiLayerStorage data stores, enabling customers to query industrial data within the service. This release includes adding JOIN functionality for customers to query multiple data sources in a dataset. * api-change:``shield``: [``botocore``] Change name of DDoS Response Team (DRT) to Shield Response Team (SRT) * api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version * api-change:``redshift-data``: [``botocore``] Added structures to support new Data API operation BatchExecuteStatement, used to execute multiple SQL statements within a single transaction. * api-change:``route53-recovery-cluster``: [``botocore``] Amazon Route 53 Application Recovery Controller's routing control - Routing Control Data Plane APIs help you update the state (On/Off) of the routing controls to reroute traffic across application replicas in a 100% available manner. * api-change:``batch``: [``botocore``] Add support for ListJob filters ==== python-botocore ==== Version update (1.21.7 -> 1.21.33) - Version update to 1.21.33 * api-change:iot: Added Create/Update/Delete/Describe/List APIs for a new IoT resource named FleetMetric. Added a new Fleet Indexing query API named GetBucketsAggregation. Added a new field named DisconnectedReason in Fleet Indexing query response. Updated their related documentations. * api-change:polly: Amazon Polly adds new South African English voice - Ayanda. Ayanda is available as Neural voice only. * api-change:compute-optimizer: Documentation updates for Compute Optimizer * api-change:sqs: Amazon SQS adds a new queue attribute, RedriveAllowPolicy, which includes the dead-letter queue redrive permission parameters. It defines which source queues can specify dead-letter queues as a JSON object. * api-change:memorydb: Documentation updates for MemoryDB - from version 1.21.32 * api-change:codebuild: Documentation updates for CodeBuild * api-change:firehose: This release adds the Dynamic Partitioning feature to Kinesis Data Firehose service for S3 destinations. * api-change:kms: This release has changes to KMS nomenclature to remove the word master from both the "Customer master key" and "CMK" abbreviation and replace those naming conventions with "KMS key". * api-change:cloudformation: AWS CloudFormation allows you to iteratively develop your applications when failures are encountered without rolling back successfully provisioned resources. By specifying stack failure options, you can troubleshoot resources in a CREATE_FAILED or UPDATE_FAILED status. - from version 1.21.31 * api-change:s3: Documentation updates for Amazon S3. * api-change:emr: Update emr client to latest version * api-change:ec2: This release adds the BootMode flag to the ImportImage API and showing the detected BootMode of an ImportImage task. - from version 1.21.30 * api-change:transcribe: This release adds support for batch transcription in six new languages - Afrikaans, Danish, Mandarin Chinese (Taiwan), New Zealand English, South African English, and Thai. * api-change:rekognition: This release added new attributes to Rekognition RecognizeCelebities and GetCelebrityInfo API operations. * api-change:ec2: Support added for resizing VPC prefix lists * api-change:compute-optimizer: Adds support for 1) the AWS Graviton (AWS_ARM64) recommendation preference for Amazon EC2 instance and Auto Scaling group recommendations, and 2) the ability to get the enrollment statuses for all member accounts of an organization. - from version 1.21.29 * api-change:fms: AWS Firewall Manager now supports triggering resource cleanup workflow when account or resource goes out of policy scope for AWS WAF, Security group, AWS Network Firewall, and Amazon Route 53 Resolver DNS Firewall policies. * api-change:ec2: Support added for IMDS IPv6 endpoint * api-change:datasync: Added include filters to CreateTask and UpdateTask, and added exclude filters to StartTaskExecution, giving customers more granular control over how DataSync transfers files, folders, and objects. * api-change:events: AWS CWEvents adds an enum of EXTERNAL for EcsParameters LaunchType for PutTargets API - from version 1.21.28 * api-change:mediaconvert: AWS Elemental MediaConvert SDK has added MBAFF encoding support for AVC video and the ability to pass encryption context from the job settings to S3. * api-change:polly: Amazon Polly adds new New Zealand English voice - Aria. Aria is available as Neural voice only. * api-change:transcribe: This release adds support for feature tagging with Amazon Transcribe batch jobs. * api-change:ssm: Updated Parameter Store property for logging improvements. * api-change:iot-data: Updated Publish with support for new Retain flag and added two new API operations: GetRetainedMessage, ListRetainedMessages. - from version 1.21.27 * api-change:dms: Amazon AWS DMS service now support Redis target endpoint migration. Now S3 endpoint setting is capable to setup features which are used to be configurable only in extract connection attributes. * api-change:frauddetector: Updated an element of the DescribeModelVersion API response (LogitMetrics -> logOddsMetrics) for clarity. Added new exceptions to several APIs to protect against unlikely scenarios. * api-change:iotsitewise: Documentation updates for AWS IoT SiteWise * api-change:dlm: Added AMI deprecation support for Amazon Data Lifecycle Manager EBS-backed AMI policies. * api-change:glue: Add support for Custom Blueprints * api-change:apigateway: Adding some of the pending releases (1) Adding WAF Filter to GatewayResponseType enum (2) Ensuring consistent error model for all operations (3) Add missing BRE to GetVpcLink operation * api-change:backup: AWS Backup - Features: Evaluate your backup activity and generate audit reports. - from version 1.21.26 * api-change:eks: Adds support for EKS add-ons "preserve" flag, which allows customers to maintain software on their EKS clusters after removing it from EKS add-ons management. * api-change:comprehend: Add tagging support for Comprehend async inference job. * api-change:robomaker: Documentation updates for RoboMaker * api-change:ec2: encryptionInTransitSupported added to DescribeInstanceTypes API - from version 1.21.25 * api-change:ec2: The ImportImage API now supports the ability to create AMIs with AWS-managed licenses for Microsoft SQL Server for both Windows and Linux. * api-change:memorydb: AWS MemoryDB SDK now supports all APIs for newly launched MemoryDB service. * api-change:application-autoscaling: This release extends Application Auto Scaling support for replication group of Amazon ElastiCache Redis clusters. Auto Scaling monitors and automatically expands node group count and number of replicas per node group when a critical usage threshold is met or according to customer-defined schedule. * api-change:appflow: This release adds support for SAPOData connector and extends Veeva connector for document extraction. - from version 1.21.24 * api-change:codebuild: CodeBuild now allows you to make the build results for your build projects available to the public without requiring access to an AWS account. * api-change:route53: Documentation updates for route53 * api-change:sagemaker-runtime: Update sagemaker-runtime client to latest version * api-change:route53resolver: Documentation updates for Route 53 Resolver * api-change:sagemaker: Amazon SageMaker now supports Asynchronous Inference endpoints. Adds PlatformIdentifier field that allows Notebook Instance creation with different platform selections. Increases the maximum number of containers in multi-container endpoints to 15. Adds more instance types to InstanceType field. - from version 1.21.23 * api-change:cloud9: Added DryRun parameter to CreateEnvironmentEC2 API. Added ManagedCredentialsActions parameter to UpdateEnvironment API * api-change:ec2: This release adds support for EC2 ED25519 key pairs for authentication * api-change:clouddirectory: Documentation updates for clouddirectory * api-change:ce: This release is a new feature for Cost Categories: Split charge rules. Split charge rules enable you to allocate shared costs between your cost category values. * api-change:logs: Documentation-only update for CloudWatch Logs - from version 1.21.22 * api-change:iotsitewise: AWS IoT SiteWise added query window for the interpolation interval. AWS IoT SiteWise computes each interpolated value by using data points from the timestamp of each interval minus the window to the timestamp of each interval plus the window. * api-change:s3: Documentation updates for Amazon S3 * api-change:codebuild: CodeBuild now allows you to select how batch build statuses are sent to the source provider for a project. * api-change:ds: This release adds support for describing client authentication settings. * api-change:config: Update ResourceType enum with values for Backup Plan, Selection, Vault, RecoveryPoint; ECS Cluster, Service, TaskDefinition; EFS AccessPoint, FileSystem; EKS Cluster; ECR Repository resources * api-change:license-manager: AWS License Manager now allows end users to call CheckoutLicense API using new CheckoutType PERPETUAL. Perpetual checkouts allow sellers to check out a quantity of entitlements to be drawn down for consumption. - from version 1.21.21 * api-change:quicksight: Documentation updates for QuickSight. * api-change:emr: Update emr client to latest version * api-change:customer-profiles: This release introduces Standard Profile Objects, namely Asset and Case which contain values populated by data from third party systems and belong to a specific profile. This release adds an optional parameter, ObjectFilter to the ListProfileObjects API in order to search for these Standard Objects. * api-change:elasticache: This release adds ReplicationGroupCreateTime field to ReplicationGroup which indicates the UTC time when ElastiCache ReplicationGroup is created - from version 1.21.20 * api-change:sagemaker: Amazon SageMaker Autopilot adds new metrics for all candidate models generated by Autopilot experiments. * api-change:apigatewayv2: Adding support for ACM imported or private CA certificates for mTLS enabled domain names * api-change:apigateway: Adding support for ACM imported or private CA certificates for mTLS enabled domain names * api-change:databrew: This SDK release adds support for the output of a recipe job results to Tableau Hyper format. * api-change:lambda: Lambda Python 3.9 runtime launch - from version 1.21.19 * api-change:snow-device-management: AWS Snow Family customers can remotely monitor and operate their connected AWS Snowcone devices. * api-change:ecs: Documentation updates for ECS. * api-change:nimble: Add new attribute 'ownedBy' in Streaming Session APIs. 'ownedBy' represents the AWS SSO Identity Store User ID of the owner of the Streaming Session resource. * api-change:codebuild: CodeBuild now allows you to make the build results for your build projects available to the public without requiring access to an AWS account. * api-change:ebs: Documentation updates for Amazon EBS direct APIs. * api-change:route53: Documentation updates for route53 - from version 1.21.18 * api-change:chime: Add support for "auto" in Region field of StartMeetingTranscription API request. * enchancement:Client: Improve client performance by caching _alias_event_name on EventAliaser - from version 1.21.17 * api-change:wafv2: This release adds APIs to support versioning feature of AWS WAF Managed rule groups * api-change:rekognition: This release adds support for four new types of segments (opening credits, content segments, slates, and studio logos), improved accuracy for credits and shot detection and new filters to control black frame detection. * api-change:ssm: Documentation updates for AWS Systems Manager. - from version 1.21.16 * api-change:synthetics: Documentation updates for Visual Monitoring feature and other doc ticket fixes. * api-change:chime-sdk-identity: The Amazon Chime SDK Identity APIs allow software developers to create and manage unique instances of their messaging applications. * api-change:chime-sdk-messaging: The Amazon Chime SDK Messaging APIs allow software developers to send and receive messages in custom messaging applications. * api-change:connect: This release adds support for agent status and hours of operation. For details, see the Release Notes in the Amazon Connect Administrator Guide. * api-change:lightsail: This release adds support to track when a bucket access key was last used. * api-change:athena: Documentation updates for Athena. - from version 1.21.15 * api-change:lexv2-models: Update lexv2-models client to latest version * api-change:autoscaling: EC2 Auto Scaling adds configuration checks and Launch Template validation to Instance Refresh. - from version 1.21.14 * api-change:rds: This release adds AutomaticRestartTime to the DescribeDBInstances and DescribeDBClusters operations. AutomaticRestartTime indicates the time when a stopped DB instance or DB cluster is restarted automatically. * api-change:imagebuilder: Updated list actions to include a list of valid filters that can be used in the request. * api-change:transcribe: This release adds support for call analytics (batch) within Amazon Transcribe. * api-change:events: Update events client to latest version * api-change:ssm-incidents: Documentation updates for Incident Manager. - from version 1.21.13 * api-change:redshift: API support for Redshift Data Sharing feature. * api-change:iotsitewise: My AWS Service (placeholder) - This release introduces custom Intervals and offset for tumbling window in metric for AWS IoT SiteWise. * api-change:glue: Add ConcurrentModificationException to create-table, delete-table, create-database, update-database, delete-database * api-change:mediaconvert: AWS Elemental MediaConvert SDK has added control over the passthrough of XDS captions metadata to outputs. * api-change:proton: Docs only add idempotent create apis - from version 1.21.12 * api-change:ssm-contacts: Added new attribute in AcceptCode API. AcceptCodeValidation takes in two values - ENFORCE, IGNORE. ENFORCE forces validation of accept code and IGNORE ignores it which is also the default behavior; Corrected TagKeyList length from 200 to 50 * api-change:greengrassv2: This release adds support for component system resource limits and idempotent Create operations. You can now specify the maximum amount of CPU and memory resources that each component can use. - from version 1.21.11 * api-change:appsync: AWS AppSync now supports a new authorization mode allowing you to define your own authorization logic using an AWS Lambda function. * api-change:elbv2: Update elbv2 client to latest version * api-change:secretsmanager: Add support for KmsKeyIds in the ListSecretVersionIds API response * api-change:sagemaker: API changes with respect to Lambda steps in model building pipelines. Adds several waiters to async Sagemaker Image APIs. Add more instance types to AppInstanceType field - from version 1.21.10 * api-change:savingsplans: Documentation update for valid Savings Plans offering ID pattern * api-change:ec2: This release adds support for G4ad xlarge and 2xlarge instances powered by AMD Radeon Pro V520 GPUs and AMD 2nd Generation EPYC processors * api-change:chime: Adds support for live transcription of meetings with Amazon Transcribe and Amazon Transcribe Medical. The new APIs, StartMeetingTranscription and StopMeetingTranscription, control the generation of user-attributed transcriptions sent to meeting clients via Amazon Chime SDK data messages. * api-change:iotsitewise: Added support for AWS IoT SiteWise Edge. You can now create an AWS IoT SiteWise gateway that runs on AWS IoT Greengrass V2. With the gateway, you can collect local server and equipment data, process the data, and export the selected data from the edge to the AWS Cloud. * api-change:iot: Increase maximum credential duration of role alias to 12 hours. - from version 1.21.9 * api-change:sso-admin: Documentation updates for arn:aws:trebuchet:::service:v1:03a2216d-1cda-4696-9ece-1387cb6f6952 * api-change:cloudformation: SDK update to support Importing existing Stacks to new/existing Self Managed StackSet - Stack Import feature. - from version 1.21.8 * api-change:route53: This release adds support for the RECOVERY_CONTROL health check type to be used in conjunction with Route53 Application Recovery Controller. * api-change:iotwireless: Add SidewalkManufacturingSn as an identifier to allow Customer to query WirelessDevice, in the response, AmazonId is added in the case that Sidewalk device is return. * api-change:route53-recovery-control-config: Amazon Route 53 Application Recovery Controller's routing control - Routing Control Configuration APIs help you create and delete clusters, control panels, routing controls and safety rules. State changes (On/Off) of routing controls are not part of configuration APIs. * api-change:route53-recovery-readiness: Amazon Route 53 Application Recovery Controller's readiness check capability continually monitors resource quotas, capacity, and network routing policies to ensure that the recovery environment is scaled and configured to take over when needed. * api-change:quicksight: Add support to use row-level security with tags when embedding dashboards for users not provisioned in QuickSight * api-change:iotanalytics: IoT Analytics now supports creating a dataset resource with IoT SiteWise MultiLayerStorage data stores, enabling customers to query industrial data within the service. This release includes adding JOIN functionality for customers to query multiple data sources in a dataset. * api-change:shield: Change name of DDoS Response Team (DRT) to Shield Response Team (SRT) * api-change:lexv2-models: Update lexv2-models client to latest version * api-change:redshift-data: Added structures to support new Data API operation BatchExecuteStatement, used to execute multiple SQL statements within a single transaction. * api-change:route53-recovery-cluster: Amazon Route 53 Application Recovery Controller's routing control - Routing Control Data Plane APIs help you update the state (On/Off) of the routing controls to reroute traffic across application replicas in a 100% available manner. * api-change:batch: Add support for ListJob filters ==== python-ordered-set ==== Version update (3.1.1 -> 4.0.2) - Update to version 4.0.2 * Restore compatibility with Python 3.5 * fix packaging, remove vestiges of type stubs * Remove unused type * Add a mailmap * remove old .pyi type stub * Implement code review suggestions for types * Code formatting (isort and black) * Move type annotations inline * Directly distribute type stub file via PEP 561 * Handle another indexing case from NumPy ==== python-simplejson ==== Version update (3.17.3 -> 3.17.5) - update to 3.17.5: * Fix the C extension module to harden is_namedtuple against looks-a-likes such as Mocks. Also prevent dict encoding from causing an unraised SystemError when encountering a non-Dict. Noticed by running user tests against a CPython interpreter with C asserts enabled (COPTS += -UNDEBUG). ==== supermin ==== - Remove arch exclusion, almost all of them build. ==== system-users ==== Subpackages: system-group-hardware system-group-kvm system-group-libvirt system-group-wheel system-user-bin system-user-daemon system-user-ftp system-user-games system-user-lp system-user-mail system-user-man system-user-news system-user-nobody system-user-qemu system-user-tftp system-user-tss system-user-upsd system-user-uucp system-user-vscan system-user-wwwrun - Set shell for nobody in sysusers.d config ==== sysuser-tools ==== - Add support for new shell field [bsc#1189518] ==== yast2-kdump ==== Version update (4.4.0 -> 4.4.1) - Improve the kdump proposal warning (bsc#1095207) - 4.4.1 ==== yast2-update ==== Version update (4.4.2 -> 4.4.3) - Fixed crash during system upgrade (synchronize the YaST and libzypp repositories to avoid deleting caches for used repositories) (bsc#1189590) - 4.4.3

1 0