October 2022 - openSUSE Factory - openSUSE Mailing Lists

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 31 Oct '22

31 Oct '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-fastapi: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 4

New Tumbleweed snapshot 20221029 released!
by Dominique Leuenberger 30 Oct '22

30 Oct '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-openconnect SDL2 bluedevil5 (5.26.1 -> 5.26.2) breeze (5.26.1 -> 5.26.2) breeze-gtk (5.26.1 -> 5.26.2) coreutils discover (5.26.1 -> 5.26.2) drkonqi5 (5.26.1 -> 5.26.2) glibc kactivitymanagerd (5.26.1 -> 5.26.2) kcm_sddm (5.26.1 -> 5.26.2) kde-cli-tools5 (5.26.1 -> 5.26.2) kde-gtk-config5 (5.26.1 -> 5.26.2) kgamma5 (5.26.1 -> 5.26.2) khotkeys5 (5.26.1 -> 5.26.2) kinfocenter5 (5.26.1 -> 5.26.2) kmenuedit5 (5.26.1 -> 5.26.2) kpipewire (5.26.1 -> 5.26.2) kscreen5 (5.26.1 -> 5.26.2) kscreenlocker (5.26.1 -> 5.26.2) ksshaskpass5 (5.26.1 -> 5.26.2) ksystemstats5 (5.26.1 -> 5.26.2) kwayland-integration (5.26.1 -> 5.26.2) kwin5 (5.26.1 -> 5.26.2.1) kwrited5 (5.26.1 -> 5.26.2) layer-shell-qt (5.26.1 -> 5.26.2) libkdecoration2 (5.26.1 -> 5.26.2) libkscreen2 (5.26.1 -> 5.26.2) libksysguard5 (5.26.1 -> 5.26.2) llvm15 (15.0.2 -> 15.0.3) milou5 (5.26.1 -> 5.26.2) mpg123 (1.30.2 -> 1.31.0) openslp oxygen5-sounds (5.26.1 -> 5.26.2) plasma-browser-integration (5.26.1 -> 5.26.2) plasma-nm5 (5.26.1 -> 5.26.2) plasma5-addons (5.26.1 -> 5.26.2) plasma5-desktop (5.26.1 -> 5.26.2) plasma5-disks (5.26.1 -> 5.26.2) plasma5-integration (5.26.1 -> 5.26.2) plasma5-openSUSE plasma5-pa (5.26.1 -> 5.26.2) plasma5-systemmonitor (5.26.1 -> 5.26.2) plasma5-thunderbolt (5.26.1 -> 5.26.2) plasma5-workspace (5.26.1 -> 5.26.2) polkit-kde-agent-5 (5.26.1 -> 5.26.2) powerdevil5 (5.26.1 -> 5.26.2) python-pbr (5.10.0 -> 5.11.0) python-pyOpenSSL (22.0.0 -> 22.1.0) rubygem-rack-oauth2 (2.1.0 -> 2.2.0) rubygem-temple (0.8.2 -> 0.9.1) rubygem-timers (4.3.4 -> 4.3.5) rubygem-turbo-rails (1.3.0 -> 1.3.2) rubygem-tzinfo-data (1.2022.4 -> 1.2022.5) rubygem-xdg (6.6.0 -> 6.6.2) systemsettings5 (5.26.1 -> 5.26.2) xdg-desktop-portal-kde (5.26.1 -> 5.26.2) === Details === ==== NetworkManager-openconnect ==== Subpackages: NetworkManager-openconnect-gnome NetworkManager-openconnect-lang - Add dbus-location.patch: move dbus system.d conf file to /usr (bsc#1204795) - Due to patching: add BRs autoconf, automake and libtool ==== SDL2 ==== - Drop unused buildrequires on nasm ==== bluedevil5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: bluedevil5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== breeze ==== Version update (5.26.1 -> 5.26.2) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== breeze-gtk ==== Version update (5.26.1 -> 5.26.2) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== coreutils ==== Subpackages: coreutils-lang - coreutils-tests-workaround-make-fdleak.patch: Add patch to work around a GNU make bug which leaks file descriptors when using the jobserver; this makes some tests fail. - coreutils.spec: Reference the patch. ==== discover ==== Version update (5.26.1 -> 5.26.2) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * flatpak: make sure we look up the correct resource (kde#460365) * flatpak: Only show the beta information for apps (kde#459131) * flatpak: Properly render if the beta package is too old * snap: Port away from Kirigami.ItemViewHeader (kde#460391) ==== drkonqi5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: drkonqi5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * check telemetrymode * Use qdbus to query for the hostname * allow using debuginfod for symbol resolution with gdb12 (kde#454063) ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - dl-debug-bindings.patch: elf: Reinstate on DL_DEBUG_BINDINGS _dl_lookup_symbol_x (bsc#1204710) ==== kactivitymanagerd ==== Version update (5.26.1 -> 5.26.2) Subpackages: kactivitymanagerd-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kcm_sddm ==== Version update (5.26.1 -> 5.26.2) Subpackages: kcm_sddm-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kde-cli-tools5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kde-cli-tools5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kde-gtk-config5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kde-gtk-config5-gtk3 - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 - Require gsettings-desktop-schemas otherwise the kded module throws a fatal error in glib ==== kgamma5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kgamma5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== khotkeys5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: khotkeys5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kinfocenter5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kinfocenter5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * CommandOutputKCM: Fix text sizing and make it selectable ==== kmenuedit5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kmenuedit5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kpipewire ==== Version update (5.26.1 -> 5.26.2) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireRecord5 - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kscreen5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kscreenlocker ==== Version update (5.26.1 -> 5.26.2) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== ksshaskpass5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: ksshaskpass5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== ksystemstats5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: ksystemstats5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kwayland-integration ==== Version update (5.26.1 -> 5.26.2) - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== kwin5 ==== Version update (5.26.1 -> 5.26.2.1) Subpackages: kwin5-lang - Add patch to fix redraw issues with window scaling (kde#461032): * 0001-x11window-revert-more-from-3a28c02f.patch - Update to 5.26.2.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * fix compile * x11window: partially revert 3a28c02f * Replace some manual floored QPointF->QPoint conversion with flooredPoint calls * DecorationInputFilter: Use QPointF instead of QPoint for events * Window: Floor rather than round when doing hitTest for the decoration (kde#460686) * Add a helper function to convert QPointF to QPoint using floor instead of round * wayland: Fix missing relative motion events (kde#444510) * Implement a enableRequested signal for text-input-v3 * kcmkwin/kwindecoration: use Kirigami.ActionToolBar for the footer actions (kde#460793) * autotests/integration: make inputmethodtest more realstic * inputpanelv1window: never hide overlay panels * inputmethod: reset m_shouldShowPanel when the tracked window changes * inputpanelv1window: show window when client maps it after setting the mode (kde#460537) * x11window: don't change size for centering windows with maximization * output: don't round geometry as often * effects/blur: Fix clipping when sliding virtual desktops (kde#460382) * Fix potential race condition when text input state change and focus change happened at the same time * Fix wording in action 'Switch to Screen' * backends/drm: don't crash if connector has no modes ==== kwrited5 ==== Version update (5.26.1 -> 5.26.2) - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== layer-shell-qt ==== Version update (5.26.1 -> 5.26.2) - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== libkdecoration2 ==== Version update (5.26.1 -> 5.26.2) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private9 - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * Floor mouse positions rather than rounding ==== libkscreen2 ==== Version update (5.26.1 -> 5.26.2) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * Make error messages translatable - Use %autosetup - Use %fdupes with hardlinks ==== libksysguard5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== llvm15 ==== Version update (15.0.2 -> 15.0.3) Subpackages: clang-tools clang15 clang15-doc libLLVM15 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang-cpp15 libclang13 llvm15-gold - Update to version 15.0.3. * This release contains bug-fixes for the LLVM 15.0.0 release. This release is API and ABI compatible with 15.0.0. - Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix lowering of non-canonical vector comparison with zero on armv7, preventing a crash (boo#1204267, gh#llvm/llvm-project#58514). - Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== milou5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: milou5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== mpg123 ==== Version update (1.30.2 -> 1.31.0) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.31.0 mpg123: * The --control / -C switch will make mpg123 abort now if terminal control cannot be enabled. * Revert to internal network code for plain HTTP to ensure continued support for original shoutcast servers that do not talk proper HTTP. External backends are built at the same time and can be enforced using --network <backend>. * Try-witout-port for internal network code is gone. We do not need to keep each ancient hack for specific hosts. * Handle redirections independently of the backend behind net123. * Set proxy environment variables when --proxy is specified, for net123 backends to use. * Continue reading for long commands in generic control, avoiding unnecessary unfinished command errors. * Change error message from 'unknown command' to 'unknown command with arguments' to avoid confusion why 'help foo' is unknown, as opposed to 'help'. * Reduce CPU load while just waiting for terminal input. * Condense terminal control help output and excessive vertical whitespace in printouts. * Fix interaction of pause (looping) with buffer, adding - -pauseloop to set the loop interval. * Numeric option arguments are strictly checked now for conversion errors. This also catches -devbuffer, which was interpretd as -d 0 before. This also applies to out123. libout123: * Add same interruption handling to out123_write() as to unintr_write(), adding EAGAIN to fix bug 342 for certain ALSA setups. * Fix race condition to deadlock on buffer_sync_param() where parameters after the command byte got read as more commands. This got triggered easily by using the pause key in terminal mode with buffer (which was discouraged before because of buffer flushing). Generally, changing parameters with active buffer process was dangerous since libout123 entered the scene. other: * some build fixes for compiler pickyness * Disable largefile renames also for non-sensitive POSIX systems ==== openslp ==== Subpackages: libslp1 openslp-server - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. ==== oxygen5-sounds ==== Version update (5.26.1 -> 5.26.2) - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma-browser-integration ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma-browser-integration-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma-nm5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-addons ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-addons-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * runners/spellchecker: Fix config group name mismatch (kde#460899) ==== plasma5-desktop ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * kcms/tablet: Fix dragging components (kde#460376) * Revert "applets/taskmanager: make it harder to accidentally start a drag" (kde#460809) * [applets/digitalclock] Fix font size change when migrating from 5.25 (kde#460415) * kcms/mouse: Set preventStealing on the button capture * Use KeySequenceItem.captureFinished to notify a binding has been entered ==== plasma5-disks ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-disks-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-integration ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.26.2 ==== plasma5-pa ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-pa-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-systemmonitor ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-systemmonitor-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-thunderbolt ==== Version update (5.26.1 -> 5.26.2) Subpackages: plasma5-thunderbolt-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== plasma5-workspace ==== Version update (5.26.1 -> 5.26.2) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * Revert "applets/notifications: allow screen reader to read notification body in FullRepresentation" (kde#460895) * runners/kill: Fix config group name mismatch (kde#460899) * [kcms/kcm_regionandlanguage] fix config not saved after clicking 'defaults' and 'save' (kde#460842) * disable automatic portal launching early on (kde#458865) * wallpapers/image: disable animated wallpaper on X11 * wallpapers/image: fall back to default wallpaper when url is empty (kde#460692) * systemtray: Avoid dbus calls after exit (kde#460814) * Save layout immediately after a resolution change triggered relayout * Remove unnecessary heuristic relayout function call * Use KeySequenceItem.captureFinished to notify a binding has been entered (kde#459322) ==== polkit-kde-agent-5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: polkit-kde-agent-5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== powerdevil5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: powerdevil5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1 ==== python-pbr ==== Version update (5.10.0 -> 5.11.0) - Update to 5.11.0 * Fix symbol identification in multiline message * Replace deprecated readfp method with read_file ==== python-pyOpenSSL ==== Version update (22.0.0 -> 22.1.0) - Upstream post-release doc fix (gh#pyca/pyopenssl#1150) * The minimum cryptography version is now 38.0.x (and we now pin releases against cryptography major versions to prevent future breakage) - Add pyOpenSSL-pr1158-conditional-__all__.patch gh#pyca/pyopenssl#1158 - update to 22.1.0: * Remove support for SSLv2 and SSLv3. * The minimum ``cryptography`` version is now 37.0.2. * The ``OpenSSL.crypto.X509StoreContextError`` exception has been refactored, changing its internal attributes. * Add ``OpenSSL.SSL.Connection.set_verify`` and ``OpenSSL.SSL.Connection.get_verify_mode`` to override the context object's verification flags. * Add ``OpenSSL.SSL.Connection.use_certificate`` and ``OpenSSL.SSL.Connection.use_privatekey`` to set a certificate per connection (and not just per context) ==== rubygem-rack-oauth2 ==== Version update (2.1.0 -> 2.2.0) updated to version 2.2.0 see installed CHANGELOG.md [#]# [2.1.0] - 2022-10-10 [#]## Added - accept local_http_config on Rack::OAuth2::Client#access_token! & revoke! to support custom headers etc. by @nov in https://github.com/nov/rack-oauth2/pull/93 ==== rubygem-temple ==== Version update (0.8.2 -> 0.9.1) updated to version 0.9.1 see installed CHANGES 0.9.1 * Fix Slim's error in AttributeMerger due to 0.9.0's :capture_generator (#137) * Fix Temple::ERB::Engine's <%= to not escape and <%== to escape expressions 0.9.0 * Require Ruby 2.5+ (#131) * Change default :capture_generator to self (#113) * Improve compatibility with Rails 7.1 (#135) * Support Rails 6.1's annotate_rendered_view_with_filenames with Temple::Filters::Ambles (#134) * Fix a crash in StringSplitter filter (#138) * Fix a warning by Object#=~ since Ruby 2.6 (#129) * Fix deprecated Tilt template mime type (#108) * Stop using deprecated EscapeUtils from Temple::Utils (#136) ==== rubygem-timers ==== Version update (4.3.4 -> 4.3.5) updated to version 4.3.5 no changelog found ==== rubygem-turbo-rails ==== Version update (1.3.0 -> 1.3.2) updated to version 1.3.2 no changelog found ==== rubygem-tzinfo-data ==== Version update (1.2022.4 -> 1.2022.5) updated to version 1.2022.5 no changelog found ==== rubygem-xdg ==== Version update (6.6.0 -> 6.6.2) updated to version 6.6.2 no changelog found ==== systemsettings5 ==== Version update (5.26.1 -> 5.26.2) Subpackages: systemsettings5-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - Changes since 5.26.1: * Recognize SystemSettingsExternalApp again - Drop patches, now upstream: * 0001-Recognize-SystemSettingsExternalApp-again.patch ==== xdg-desktop-portal-kde ==== Version update (5.26.1 -> 5.26.2) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.26.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.2 - No code changes since 5.26.1

1 0

TW update woes
by Frans de Boer 30 Oct '22

30 Oct '22

LS, Shortly after Linux 6.0 was introduced in TW, I noticed that when updating with "zypper dup --allow-vendor-change --no-recommends" that the system did (re)boot properly. The message "Failed to start Rule-Based Manager for Device Events and Files..." is repeated six times before starting "Coldplug All udev Devices" and finally to hang at starting a job for /dev/sda8 (the root fs). After that, I need to run an update using the TW-net boot CD. Most of the updates are the same what was previously installed with the zypper dup... command. Some updates are always the same: kernel-default, grub and mesa drivers. So, the initial update was not correctly performed. Secondly, "yast2 sw_single" does not display the auto-updates anymore. Under the tab Repositories you still can find that there are new packages, but you have to select them manually. Regards, Frans.

2 1

TW update woes
by Frans de Boer 30 Oct '22

30 Oct '22

LS, Shortly after Linux 6.0 was introduced in TW, I noticed that when updating with "zypper dup --allow-vendor-change --no-recommends" that the system did (re)boot properly. The message "Failed to start Rule-Based Manager for Device Events and Files..." is repeated six times before starting "Coldplug All udev Devices" and finally to hang at starting a job for /dev/sda8 (the root fs). After that, I need to run an update using the TW-net boot CD. Most of the updates are the same what was previously installed with the zypper dup... command. Some updates are always the same: kernel-default, grub and mesa drivers. So, the initial update was not correctly performed. Secondly, "yast2 sw_single" does not display the auto-updates anymore. Under the tab Repositories you still can find that there are new packages, but you have to select them manually. Regards, Frans.

1 0

Switch to Unified Kernel Images?
by yurishish＠gmail.com 30 Oct '22

30 Oct '22

I wonder if devs have considered to switch to Unified Kernel Images before? Existing tools are able to create such images already but the installation scripts needs to be updated. That would allow to simplify the booting process when Secure Boot and full disk encryption are used and also would make it more secure.

4 3

TW update woes
by Frans de Boer 30 Oct '22

30 Oct '22

LS, Shortly after Linux 6.0 was introduced in TW, I noticed that when updating with "zypper dup --allow-vendor-change --no-recommends" that the system did (re)boot properly. The message "Failed to start Rule-Based Manager for Device Events and Files..." is repeated six times before starting "Coldplug All udev Devices" and finally to hang at starting a job for /dev/sda8 (the root fs). After that, I need to run an update using the TW-net boot CD. Most of the updates are the same what was previously installed with the zypper dup... command. Some updates are always the same: kernel-default, grub and mesa drivers. So, the initial update was not correctly performed. Secondly, "yast2 sw_single" does not display the auto-updates anymore. Under the tab Repositories you still can find that there are new packages, but you have to select them manually. Regards, Frans.

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 29 Oct '22

29 Oct '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - buzztrax: Fails to build - python-PySDL2: Fails to build - python-django-rest-framework-braces: Fails to build - python-folium: Fails to build - python-limnoria: Fails to build - python-moto: Fails to build - python-streamz: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

obs-service-source-validator will enforce cargo-audit going forward
by Dirk Müller 29 Oct '22

29 Oct '22

Hi all, William Brown, together with the SUSE Security team implemented a new enforcing check that enforces that "cargo_audit" is going to be used for rust built packages going forward. see https://en.opensuse.org/openSUSE:Packaging_Rust_Software for details. While announced here, this will be enforced globally as source-validator is shared between all distros, so please also watch out for failing maintenance updates for that reason. Greetings, Dirk

3 4

New Tumbleweed snapshot 20221028 released!
by Dominique Leuenberger 29 Oct '22

29 Oct '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (106.0.1 -> 106.0.2) fwnn gcr3 gdk-pixbuf (2.42.9 -> 2.42.10) gnome-keyring gpgme (1.16.0 -> 1.18.0) guestfs-tools kernel-source (6.0.3 -> 6.0.5) kvm_stat (6.0.3 -> 6.0.5) libosinfo libstorage-ng (4.5.47 -> 4.5.48) libyuv (20220713+d248929c -> 20220920+f9fda6e) mosh (1.4.0.rc1 -> 1.4.0) openldap2 openldap2-contrib-src osinfo-db (20220830 -> 20221018) plymouth (22.02.122+77.c09c651 -> 22.02.122+94.4bd41a3) python310 (3.10.7 -> 3.10.8) python310-core (3.10.7 -> 3.10.8) rubygem-oauth2 (1.4.9 -> 2.0.9) spice-gtk sudo (1.9.11p3 -> 1.9.12) supermin tracker (3.4.0 -> 3.4.1) tracker-miners (3.4.0 -> 3.4.1) usbutils (014 -> 015) virt-manager virt-v2v xerces-c (3.2.3 -> 3.2.4) yast2-firstboot (4.5.4 -> 4.5.5) yast2-packager (4.5.5 -> 4.5.6) === Details === ==== MozillaFirefox ==== Version update (106.0.1 -> 106.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 106.0.2 * Fix missing content on some PDF forms (bmo#1794351) * Fix column width for the Notification sub-panel in Settings (bmo#1793558) * Fix a browser freeze with accessibility enabled on some sites such as the Proxmox Web UI (bmo#1793748) * Fix page reloading not working with Firefox View and not refreshing synced data (bmo#1792680, bmo#1794474) ==== fwnn ==== - Fix generation of debuginfo packages. The IMake based build system by default strips binaries during `make install` phase already. Avoid this by overriding the corresponding make variable. ==== gcr3 ==== Subpackages: gcr3-data gcr3-lang gcr3-prompter gcr3-ssh-agent gcr3-ssh-askpass libgck-1-0 libgcr-3-1 - Have libgcr-3-1 require gcr3-ssh-askpass when gnome-keyring is present: gnome-keyring interacts deeper with this library, which justifies a hard dep in this case (boo#1204071). ==== gdk-pixbuf ==== Version update (2.42.9 -> 2.42.10) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-query-loaders-32bit gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 libgdk_pixbuf-2_0-0-32bit typelib-1_0-GdkPixbuf-2_0 - Update to version 2.42.10: + Search for rst2man.py. + Update the memory size limit for JPEG images. + Updated translations. - Drop patch fixed upstream (with different limit): + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch ==== gnome-keyring ==== Subpackages: gnome-keyring-32bit gnome-keyring-lang gnome-keyring-pam gnome-keyring-pam-32bit libgck-modules-gnome-keyring - Use %_pam_moduledir instead of %{_lib}/security (boo#1191034). ==== gpgme ==== Version update (1.16.0 -> 1.18.0) Subpackages: libgpgme11 libgpgmepp6 - gpgme 1.18.0 * New keylist mode to force refresh via external methods * The keylist operations now create an import result to report the result of the locate keylist modes * core: Return BAD_PASSPHRASE error code on symmetric decryption failure * cpp, qt: Do not export internal symbols anymore * cpp, qt: Support revocation of own OpenPGP keys * qt: The file name of (signed and) encrypted data can now be set * cpp, qt: Support setting the primary user ID * python: Fix segv(NULL) when inspecting contect after exeception - includes changes from version 1.17.1: * qt: Fix a bug in the ABI compatibility of 1.17.0 - includes changes from 1.17.0: * New context flag "key-origin" * New context flag "import-filter" * New export mode to export secret subkeys * Detect errors during the export of secret keys * New function gpgme_op_receive_keys to import keys from a keyserver without first running a key listing * Detect bad passphrase error in certificate import * Allow setting --key-origin when importing keys * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr", "pinentry", and "socketdir" in gpgme_get_dirinfo * Under Unix use poll(2) instead of select(2), when available. * Fix results returned by gpgme_data_* functions * Support closefrom also for glibc (drop upstream gpgme-use-glibc-closefrom.patch * cpp,qt: Add support for export of secret keys and secret subkeys. * cpp,qt: Support for adding existing subkeys to other keys * qt: Extend ChangeExpiryJob to change expiration of primary key and of subkeys at the same time * qt: Support WKD lookup without implicit import * qt: Allow specifying an import filter when importing keys * qt: Allow retrieving the default value of a config entry - drop patches included upstream * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch - add patches to fix tests: * gpgme-1.18.0-T6137-qt_test.patch ==== guestfs-tools ==== - jsc#PED-2104 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== kernel-source ==== Version update (6.0.3 -> 6.0.5) - Linux 6.0.5 (bsc#1012628). - Revert "btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure" (bsc#1012628). - clk: tegra: Fix Tegra PWM parent clock (bsc#1012628). - commit 7359656 - Linux 6.0.4 (bsc#1012628). - Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()" (bsc#1012628). - fbdev/core: Remove remove_conflicting_pci_framebuffers() (bsc#1012628). - io-wq: Fix memory leak in worker creation (bsc#1012628). - gcov: support GCC 12.1 and newer compilers (bsc#1012628). - efi: ssdt: Don't free memory if ACPI table was loaded successfully (bsc#1012628). - efi: efivars: Fix variable writes without query_variable_store() (bsc#1012628). - dm clone: Fix typo in block_device format specifier (bsc#1012628). - drm/amd/pm: update SMU IP v13.0.4 driver interface version (bsc#1012628). - drm/amd/pm: fulfill SMU13.0.0 cstate control interface (bsc#1012628). - drm/amd/pm: disable cstate feature for gpu reset scenario (bsc#1012628). - drm/amd/pm: add SMU IP v13.0.4 IF version define to V7 (bsc#1012628). - drm/amd/pm: fulfill SMU13.0.7 cstate control interface (bsc#1012628). - net: flag sockets supporting msghdr originated zerocopy (bsc#1012628). - HID: playstation: add initial DualSense Edge controller support (bsc#1012628). - HID: playstation: stop DualSense output work on remove (bsc#1012628). - io_uring/net: fail zc send when unsupported by socket (bsc#1012628). - thermal: intel_powerclamp: Use first online CPU as control_cpu (bsc#1012628). - pinctrl: amd: change dev_warn to dev_dbg for additional feature support (bsc#1012628). - drm/i915/bios: Use hardcoded fp_timing size for generating LFP data pointers (bsc#1012628). - drm/i915/bios: Validate fp_timing terminator presence (bsc#1012628). - commit 12375d5 - arm64: Update config files. (bsc#1203558) Enable Renesas serial console and earlycon. - commit e782884 - Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()" (bsc#1204679). - commit df34d12 - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (CVE-2022-3640 bsc#1204619). - commit c41533c ==== kvm_stat ==== Version update (6.0.3 -> 6.0.5) - Fix security issue about debugfs described in bsc#1202924 * Added patches: tools-kvm_stat-fix-attack-vector-with-user-controlle.patch ==== libosinfo ==== Subpackages: libosinfo-1_0-0 libosinfo-lang typelib-1_0-Libosinfo-1_0 - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== libstorage-ng ==== Version update (4.5.47 -> 4.5.48) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#901 - set used feature flag for quota (bsc#1204773) - 4.5.48 ==== libyuv ==== Version update (20220713+d248929c -> 20220920+f9fda6e) - Update to version 20220920+f9fda6e: * Fix shift amount for SSSE3 assembly for I012 format conversions * 10/12 bit YUV replicate upper bits to low bits before converting to RGB * Fix immediate offsets for row_neon build on gcc - Update to version 20220920+248172e: * I422ToRGB24, I422ToRAW, I422ToRGB24MatrixFilter conversion functions added. * Remove include resource.h for Fuchsia build * I420ToRGB24MatrixFilter function added * SSE2 MM21->YUY2 conversion * MM21ToYUY2 and ABGRToJ420 conversion * AB64ToARGB fix for inplace conversion * Bump up version to 1838 * Add I422ToRGB565Matrix * RAWToJ400 require multiple of 16 pixels for NEON * row_neon*: Explicitly initialize pad in RgbConstants * Fix MSVC warnings by adding casts * Define _CRT_SECURE_NO_WARNINGS if MSVC CRT is used * Reduce cmake verbosity and update min version * Set IMPORT_PREFIX to "lib" on Windows * Android.bp: Remove reference to LICENSE_THIRD_PARTY * Fix SSE2 version of ScalePlaneUp2_16_Bilinear * Disable bilinear 16 bit scale up for SSE2 * Add .vpython3 to libyuv. * Switch from python to python3. ==== mosh ==== Version update (1.4.0.rc1 -> 1.4.0) - Update to version 1.4.0: * New features: Support OSC 52 clipboard copy integration (Alex Cornejo) Allow non-inserting prediction (--predict-overwrite) (John Hood) Don't do prediction on large pastes into mosh-client (John Hood) Add true color support (Kang Jianbin) Add syslog logging of connections (Tom Judge) If exec()ing the remote command fails, pause briefly (John Hood) * Bug fixes: ignore unknown renditions (Keith Winstein) Overlays were getting set to the wrong colors (John Hood) Fix issue with incorrect true-color background erase colors (John Hood) Use HAVE_UTEMPTER instead of HAVE_UPTEMPTER (Michael Jarvis) Apply latest consecutive resize, not earliest (Peter Edwards) Use CLOCK_MONOTONIC_RAW when available (Harry Sintonen) Add tmux and alacritty to title_term_types (NaÃ¯m Favier) Don't sometimes hang just after launching ssh (Kalle Samuels) * Internal changes: Reformat printed strings in source (John Hood) Code cleanups (John Hood, Anders Kaseorg, Benjamin Barenblat, Alex Chernyakhovsky) Always use non-blocking sockets for recvmsg() (John Hood) Add Perl compile (John Hood) Improvements to the test suite (John Hood) Fixes to autoconf configure (Anders Kaseorg) Cleanups to our cryptography code (Benjamin Barenblat, Alex Chernyakhovsky) * Infrastructure changes: Add support for OCLint static checker (John Hood) Switch from Travis-CI to Github Actions (Wolfgang E. Sanyer, Alex Chernyakhovsky) Add code coverage and fuzzing infrastructure (Alex Chernyakhovsky) ==== openldap2 ==== Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - bsc#1202931 - CVE-2022-31253 - Openldap start script allowed the ldap user to privilege escalate to root due to unbound chown commands. ==== openldap2-contrib-src ==== - bsc#1202931 - CVE-2022-31253 - Openldap start script allowed the ldap user to privilege escalate to root due to unbound chown commands. ==== osinfo-db ==== Version update (20220830 -> 20221018) - Update to database version 20221018 osinfo-db-20221018.tar.xz - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== plymouth ==== Version update (22.02.122+77.c09c651 -> 22.02.122+94.4bd41a3) Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Update to version 22.02.122+94.4bd41a3: * plugins: label-freetype: Fixes calculation of line width. * plugins: label-freetype: Fix font alignment. * populate-initrd: Install label-freetype plugin into initrd if available. * plugins: Add FreeType-based label plugin. * ply-label: Don't crash if label plugin fails. * details: Don't replay boot buffer on serial consoles. * main: Add "reload" command. * ply-device-manager: Add plymouth.force-frame-buffer-on-boot parameter, allow to choose force framebuffer mode. * systemd: Add mkinitcpio support to plymouth-switch-root-initramfs.service. * Rebase plymouth-only_use_fb_for_cirrus_bochs.patch; for build success. * Rebase plymouth-watermark-config.patch; for build success. * Drop 0001-Add-label-ft-plugin.patch; for already merged by upstream. * Drop 0002-Install-label-ft-plugin-into-initrd-if-available.patch for already merged by upstream. * Drop 0003-fix_null_deref.patch for already merged by upstream. * Drop 0004-label-ft-fix-alignment.patch for already merged by upstream. ==== python310 ==== Version update (3.10.7 -> 3.10.8) Subpackages: python310-curses python310-dbm python310-tk - Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to allow building of documentation with the latest Sphinx 5.3.0 (gh#python/cpython#98366). - Update to 3.10.8: - Fix multiplying a list by an integer (list *= int): detect the integer overflow when the new allocated length is close to the maximum size. - Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. (originally filed as CVE-2022-37460, later withdrawn) - Fix command line parsing: reject -X int_max_str_digits option with no value (invalid) when the PYTHONINTMAXSTRDIGITS environment variable is set to a valid limit. - When ValueError is raised if an integer is larger than the limit, mention the sys.set_int_max_str_digits() function in the error message. - The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). - os.sched_yield() now release the GIL while calling sched_yield(2). - Bugfix: PyFunction_GetAnnotations() should return a borrowed reference. It was returning a new reference. - Fixed a missing incref/decref pair in Exception.__setstate__(). - Fix overly-broad source position information for chained comparisons used as branching conditions. - Fix undefined behaviour in _testcapimodule.c. - At Python exit, sometimes a thread holding the GIL can wait forever for a thread (usually a daemon thread) which requested to drop the GIL, whereas the thread already exited. To fix the race condition, the thread which requested the GIL drop now resets its request before exiting. - Fix a possible assertion failure, fatal error, or SystemError if a line tracing event raises an exception while opcode tracing is enabled. - Fix undefined behaviour in C code of null pointer arithmetic. - Do not expose KeyWrapper in _functools. - When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted. - Disable incorrect pickling of the C implemented classmethod descriptors. - Fix AttributeError missing name and obj attributes in . object.__getattribute__() bpo-42316: Document some places . where an assignment expression needs parentheses . - Wrap network errors consistently in urllib FTP support, so the test suite doesnât fail when a network is available but the public internet is not reachable. - Fixes AttributeError when subprocess.check_output() is used with argument input=None and either of the arguments encoding or errors are used. - Avoid spurious tracebacks from asyncio when default executor cleanup is delayed until after the event loop is closed (e.g. as the result of a keyboard interrupt). - Avoid a crash in the C version of asyncio.Future.remove_done_callback() when an evil argument is passed. - Remove tokenize.NL check from tabnanny. - Make Semaphore run faster. - Fix generation of the default name of tkinter.Checkbutton. Previously, checkbuttons in different parent widgets could have the same short name and share the same state if arguments ânameâ and âvariableâ are not specified. Now they are globally unique. - Update bundled libexpat to 2.4.9 - Fix race condition in asyncio where process_exited() called before the pipe_data_received() leading to inconsistent output. - Fixed check in multiprocessing.resource_tracker that guarantees that the length of a write to a pipe is not greater than PIPE_BUF. - Corrected type annotation for dataclass attribute pstats.FunctionProfile.ncalls to be str. - Fix the faulthandler implementation of faulthandler.register(signal, chain=True) if the sigaction() function is not available: donât call the previous signal handler if itâs NULL. - In inspect, fix overeager replacement of âtyping.â in formatting annotations. - Fix asyncio.streams.StreamReaderProtocol to keep a strong reference to the created task, so that itâs not garbage collected - Fix handling compiler warnings (SyntaxWarning and DeprecationWarning) in codeop.compile_command() when checking for incomplete input. Previously it emitted warnings and raised a SyntaxError. Now it always returns None for incomplete input without emitting any warnings. - Fixed flickering of the turtle window when the tracer is turned off. - Allow asyncio.StreamWriter.drain() to be awaited concurrently by multiple tasks. - Fix broken asyncio.Semaphore when acquire is cancelled. - Fix ast.unparse() when ImportFrom.level is None - Improve performance of urllib.request.getproxies_environment when there are many environment variables - Fix ! in c domain ref target syntax via a conf.py patch, so ... changelog too long, skipping 10 lines ... - Remove upstreamed test-int-timing.patch. ==== python310-core ==== Version update (3.10.7 -> 3.10.8) Subpackages: libpython3_10-1_0 python310-base - Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to allow building of documentation with the latest Sphinx 5.3.0 (gh#python/cpython#98366). - Update to 3.10.8: - Fix multiplying a list by an integer (list *= int): detect the integer overflow when the new allocated length is close to the maximum size. - Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. (originally filed as CVE-2022-37460, later withdrawn) - Fix command line parsing: reject -X int_max_str_digits option with no value (invalid) when the PYTHONINTMAXSTRDIGITS environment variable is set to a valid limit. - When ValueError is raised if an integer is larger than the limit, mention the sys.set_int_max_str_digits() function in the error message. - The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). - os.sched_yield() now release the GIL while calling sched_yield(2). - Bugfix: PyFunction_GetAnnotations() should return a borrowed reference. It was returning a new reference. - Fixed a missing incref/decref pair in Exception.__setstate__(). - Fix overly-broad source position information for chained comparisons used as branching conditions. - Fix undefined behaviour in _testcapimodule.c. - At Python exit, sometimes a thread holding the GIL can wait forever for a thread (usually a daemon thread) which requested to drop the GIL, whereas the thread already exited. To fix the race condition, the thread which requested the GIL drop now resets its request before exiting. - Fix a possible assertion failure, fatal error, or SystemError if a line tracing event raises an exception while opcode tracing is enabled. - Fix undefined behaviour in C code of null pointer arithmetic. - Do not expose KeyWrapper in _functools. - When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted. - Disable incorrect pickling of the C implemented classmethod descriptors. - Fix AttributeError missing name and obj attributes in . object.__getattribute__() bpo-42316: Document some places . where an assignment expression needs parentheses . - Wrap network errors consistently in urllib FTP support, so the test suite doesnât fail when a network is available but the public internet is not reachable. - Fixes AttributeError when subprocess.check_output() is used with argument input=None and either of the arguments encoding or errors are used. - Avoid spurious tracebacks from asyncio when default executor cleanup is delayed until after the event loop is closed (e.g. as the result of a keyboard interrupt). - Avoid a crash in the C version of asyncio.Future.remove_done_callback() when an evil argument is passed. - Remove tokenize.NL check from tabnanny. - Make Semaphore run faster. - Fix generation of the default name of tkinter.Checkbutton. Previously, checkbuttons in different parent widgets could have the same short name and share the same state if arguments ânameâ and âvariableâ are not specified. Now they are globally unique. - Update bundled libexpat to 2.4.9 - Fix race condition in asyncio where process_exited() called before the pipe_data_received() leading to inconsistent output. - Fixed check in multiprocessing.resource_tracker that guarantees that the length of a write to a pipe is not greater than PIPE_BUF. - Corrected type annotation for dataclass attribute pstats.FunctionProfile.ncalls to be str. - Fix the faulthandler implementation of faulthandler.register(signal, chain=True) if the sigaction() function is not available: donât call the previous signal handler if itâs NULL. - In inspect, fix overeager replacement of âtyping.â in formatting annotations. - Fix asyncio.streams.StreamReaderProtocol to keep a strong reference to the created task, so that itâs not garbage collected - Fix handling compiler warnings (SyntaxWarning and DeprecationWarning) in codeop.compile_command() when checking for incomplete input. Previously it emitted warnings and raised a SyntaxError. Now it always returns None for incomplete input without emitting any warnings. - Fixed flickering of the turtle window when the tracer is turned off. - Allow asyncio.StreamWriter.drain() to be awaited concurrently by multiple tasks. - Fix broken asyncio.Semaphore when acquire is cancelled. - Fix ast.unparse() when ImportFrom.level is None - Improve performance of urllib.request.getproxies_environment when there are many environment variables - Fix ! in c domain ref target syntax via a conf.py patch, so ... changelog too long, skipping 10 lines ... - Remove upstreamed test-int-timing.patch. ==== rubygem-oauth2 ==== Version update (1.4.9 -> 2.0.9) updated to version 2.0.9 see installed CHANGELOG.md updated to version 2.0.7 see installed CHANGELOG.md [#]# [2.0.7] - 2022-08-22 [#]## Added - [#629](https://github.com/oauth-xx/oauth2/pull/629) - Allow POST of JSON to get token (@pboling, @terracatta) [#]## Fixed - [#626](https://github.com/oauth-xx/oauth2/pull/626) - Fixes a regression in 2.0.6. Will now prefer the key order from the lookup, not the hash keys (@rickselby) - Note: This fixes compatibility with `omniauth-oauth2` and AWS - [#625](https://github.com/oauth-xx/oauth2/pull/625) - Fixes the printed version in the post install message (@hasghari) updated to version 2.0.6 see installed CHANGELOG.md ==== spice-gtk ==== Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== sudo ==== Version update (1.9.11p3 -> 1.9.12) Subpackages: sudo-plugin-python - Update to 1.9.12: * Dropped sudo-1.9.10-update_sudouser_to_utf8.patch * Changes in Sudo 1.9.12: * Fixed a bug when logging the commandâs exit status in intercept mode. The wrong command could be logged with the exit status. * For ptrace-based intercept mode, sudo will now attempt to verify that the command path name, arguments and environment have not changed from the time when they were authorized by the security policy. The new intercept_verify sudoers setting can be used to control this behavior. * Fixed running commands with a relative path (e.g. ./foo) in intercept mode. Previously, this would fail if sudoâs current working directory was different from that of the command. * Sudo now supports passing the execve(2) system call the NULL pointer for the argv and/or envp arguments when in intercept mode. Linux treats a NULL pointer like an empty array. * The sudoers LDAP schema now allows sudoUser, sudoRunasUser and sudoRunasGroup to include UTF-8 characters, not just 7-bit ASCII. * Fixed a problem with sudo -i on SELinux when the target userâs home directory is not searchable by sudo. GitHub issue #160. * Neovim has been added to the list of visudo editors that support passing the line number on the command line. * Fixed a bug in sudoâs SHA384 and SHA512 message digest padding. * Added a new -N (no-update) command line option to sudo which can be used to prevent sudo from updating the userâs cached credentials. It is now possible to determine whether or not a userâs cached credentials are currently valid by running: $ sudo -Nnv and checking the exit value. One use case for this is to indicate in a shell prompt that sudo is âactiveâ for the user. * PAM approval modules are no longer invoked when running sub-commands in intercept mode unless the intercept_authenticate option is set. There is a substantial performance penalty for calling into PAM for each command run. PAM approval modules are still called for the initial command. * Intercept mode on Linux now uses process_vm_readv(2) and process_vm_writev(2) if available. * The XDG_CURRENT_DESKTOP environment variable is now preserved by default. This makes it possible for graphical applications to choose the correct theme when run via sudo. * On 64-bit systems, if sudo fails to load a sudoers group plugin, it will use system-specific heuristics to try to locate a 64-bit version of the plugin. * The cvtsudoers manual now documents the JSON and CSV output formats. GitHub issue #172. * Fixed a bug where sub-commands were not being logged to a remote log server when log_subcmds was enabled. GitHub issue #174. * The new log_stdin, log_stdout, log_stderr, log_ttyin, and log_ttyout sudoers settings can be used to support more fine-grained I/O logging. The sudo front-end no longer allocates a pseudo-terminal when running a command if the I/O logging plugin requests logging of stdin, stdout, or stderr but not terminal input/output. * Quieted a libgcrypt run-time initialization warning. This fixes Debian bug #1019428 and Ubuntu bug #1397663. * Fixed a bug in visudo that caused literal backslashes to be removed from the EDITOR environment variable. GitHub issue #179. * The sudo Python plugin now implements the find_spec method instead of the the deprecated find_module. This fixes a test failure when a newer version of setuptools that doesnât include find_module is found on the system. * Fixed a bug introduced in sudo 1.9.9 where sudo_logsrvd created the process ID file, usually /var/run/sudo/sudo_logsrvd.pid, as a directory instead of a plain file. The same bug could result in I/O log directories that end in six or more Xâs being created literally in addition to the name being used as a template for the mkdtemp(3) function. * Fixed a long-standing bug where a sudoers rule with a command line argument of ââ, which indicates the command may be run with no arguments, would also match a literal "" on the command line. GitHub issue #182. * Added the -I option to visudo which only edits the main sudoers file. Include files are not edited unless a syntax error is found. * Fixed sudo -l -U otheruser output when the runas list is empty. Previously, sudo would list the invoking user instead of the list user. GitHub issue #183. * Fixed the display of command tags and options in sudo -l output when the RunAs user or group changes. A new line is started for RunAs changes which means we need to display the command tags and options again. GitHub issue #184. * The sesh helper program now uses getopt_long(3) to parse the command line options. * The embedded copy of zlib has been updated to version 1.2.13. * Fixed a bug that prevented event log data from being sent to the log server when I/O logging was not enabled. This only affected systems without PAM or configurations where the pam_session and pam_setcred options were disabled in the sudoers file. * Fixed a bug where sudo -l output included a carriage return after the newline. This is only needed when displaying to a terminal in raw mode. Bug #1042. ==== supermin ==== - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== tracker ==== Version update (3.4.0 -> 3.4.1) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.4.1: + Fixes to VAPI file. + Fixes to IRI escaping checks in TrackerResource. + Move fts: prefix definition to base ontology. + Improve memory usage of already executed TrackerBatch objects for GC languages. + Replace deprecated egrep tool usage in bash completion script. + Fixes for memory leaks and invalid memory access. + Fix endpoint-side cancellation of client-side D-Bus cancelled queries. + Updated translations. - Drop tracker-no-egrep.patch: Fixed upstream. ==== tracker-miners ==== Version update (3.4.0 -> 3.4.1) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.4.1: + Warning fixes to gstreamer extractor. + Silence EXDEV warnings on FANotify monitor failures, likely in some systems. + New handled syscalls in seccomp: set_mempolicy, get_mempolicy, epoll_create1. + Improve performance of lookups of related CUE files for gstreamer media. + Fix memory leaks. + Updated translations. ==== usbutils ==== Version update (014 -> 015) - update to 015: * usb-devices: list the root devices in numerical order * usb-devices: use 'local' variable type to handle recursion * lsusb: remove unused wireless check * lsusb: remove wireless descriptor information * usb-devices: fix field width on device speed field * lsusb: fix up Midi Device specification devices * Fix an runtime error reported by undefind sanitizer * lsusb: Improve status display for SuperSpeedPlus hubs * lsusb-t: Fix recursive sorting on child devices. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== virt-v2v ==== Subpackages: virt-v2v-bash-completion - jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management ==== xerces-c ==== Version update (3.2.3 -> 3.2.4) - update to 3.2.4: * [XERCESC-2195] - Invalid attribute in .gitattributes file * [XERCESC-2196] - cross-compiling issue * [XERCESC-2214] - Wrong delete[] in MemBufInputSource dtor * [XERCESC-2217] - ICUTranscoder::transcodeFrom buffer overflow * [XERCESC-2218] - CurlURLInputStream constructor memory leak * [XERCESC-2219] - XMLReader constructor: memory leak when refreshRawBuffer() throws * [XERCESC-2221] - InMemMsgLoader::loadMsg(): fix memory leak when transcoding fails * [XERCESC-2222] - DFAContentModel::checkUniqueParticleAttribution(): fix memory leak * [XERCESC-2223] - SAX2XMLReaderImpl::error(): potential memory leak * [XERCESC-2225] - Link to installed CMake targets of CURL * [XERCESC-2227] - Memleak fixes in ContentSpecNode and ComplexTypeInfo classes * [XERCESC-2228] - DFAContentModel: fix memory leaks when OutOfMemoryException occurs * [XERCESC-2229] - IGXMLScanner::scanDocTypeDecl(): fix memory leak on exception * [XERCESC-2230] - DFAContentModel::buildSyntaxTree(): fix memory leaks when OutOfMemoryException occurs * [XERCESC-2235] - DFAContentModel::buildDFA(): correctly zero-initialize fFollowList * [XERCESC-2236] - Dependencies aren't loaded when using provided CMake config package * [XERCESC-2241] - Integer overflows in DFAContentModel class * [XERCESC-2242] - Non-default curl location breaks autoconf link detection ==== yast2-firstboot ==== Version update (4.5.4 -> 4.5.5) - Compute properly dependencies of WSL GUI pattern (jsc#PM-3439) - 4.5.5 ==== yast2-packager ==== Version update (4.5.5 -> 4.5.6) - support 'repo' scheme for add-ons (jsc#SLE-22578, jsc#SLE-24584) - 4.5.6

1 0

Tumbleweed - Review of the week 2022/43
by Dominique Leuenberger / DimStar 28 Oct '22

28 Oct '22

Dear Tumbleweed users and hackers, Tumbleweed snapshots are being released stably and reliably. Whenever a snapshot comes out, you know it has gone through extensive testing using openQA. Of course, this is no guarantee that all snapshots are error-free. openQA works on virtual machines based on scripts, so it tests what it is instructed to try (not seldom do we see issues that were not intentionally tested for, but they are ‘happy accidents’). This week, a less fortunate update reached our users that caused some pain for some: The Linux Kernel 6.0.3 managed to break audio for a couple of users (See https://bugzilla.opensuse.org/show_bug.cgi?id=1204679). Kernel 6.0.5 is in the queue and should be published in the next 48 hours and fix those issues. Of course, not all was broken, and the last 7 days have seen 7 snapshots being published (1021…1027) including these changes: * Linux kernel 6.0.3 (Snapshot 1023) * GStreamer 1.20.4 * Switch to NodeJS 19 by default * XWayland 22.1.4 * Mesa 22.2.2 * Mozilla Firefox 106.0 & 106.0.1 * Samba 4.17.1 & 4.17.2 * Systemd 251.6 & 251.7 * fwupd 1.8.6 (updated from 1.7.10) * dbus 1.14.4 * LibreOffice 7.4.2.3 Stagings look a bit sad and empty at the moment, but that is mostly due to them passing so quickly. most stagings have a short lifetime these days and are ready to be accepted within 24 hours. Still, there are a few things currently being tested: * Linux kernel 6.0.5 (expected latest in snapshot 1029, possibly even in 1028) * KDE Plasma 5.26.2 * Mozilla Thunderbird 102.4.1 * Mozilla Firefox 106.0.2 * gpgme 1.18 * Python 3.10.8 & 3.9.15 * Python Sphinx 5.3.0 * Staging:L, the ‘show-me-errors-staging’, currently contains: swig 4.1.0 (breaks llvm and nodejs), git 2.38.1 (breaks python-GitPython), ICU 72.1 (breaks the world, as usual), suse-module-tools 16.0.24 (breaks VirtualBox and vmdk) Cheers, Dominique

1 0