November 2022 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

Changes to dbus packaging (Some Attention maybe required).
by Simon Lees 04 Oct '23

04 Oct '23

Hi All, For Tumbleweed and ALP we plan to follow Red Hat / Fedora / Debian and move from dbus-daemon to dbus-broker as it has a number of advantages and is what upstream is now focusing on. While one of the goals here is to provide the same user experience there will be a couple of changes that will likely require adjustments in a few packages. 1. tools such as dbus-send and dbus-uuid will no longer be installed by default on all systems (we have many use cases that will simply no longer need them and this follows other distro's). Currently the package dbus-1-tools exists and is required by dbus-1 but that will change maybe to a recommends so if you know your package needs one of these tools you can add the Requires there now, otherwise I plan to go through and look at debian and fedora to try and find any packages that need this requires before it becomes optional for dbus. 2. The symlink from /etc/machine-id to /var/lib/dbus/machine-id will no longer be present on all machines and software should be adapted to use /etc/machine-id from systemd rather then the dbus copy. Again this has already happened for Debian and Fedora so hopefully many upstreams have already adapted to this. I'll outline the plan / timeline below. 1. Currently - dbus-broker has been in the distro for quite some time and the dbus-1 package has already been split up and we are at the point of asking people nicely to start testing (instructions below), myself and at least several other people have already been testing this without issues. 2. In 2-3 weeks if I don't hear of any issues we will update the systemd presets to enable dbus-broker rather then dbus-daemon. 3. Unless someone indicates they really want to keep maintaining dbus-daemon and have good reasons for doing so I will make dbus-daemon uninstallable. 4. Once we have done the work to ensure that as many packages that use dbus-send and other tools require the tools package we will drop the requires for dbus-tools from the dbus package. Instead it will probably move to being a Recommends in one of the patterns so it still ends up on most users machines. Switching to dbus-broker: Run the following as root zypper in dbus-broker systemctl disable dbus systemctl enable dbus-broker systemctl --global disable dbus systemctl --global enable dbus-broker https://www.mail-archive.com/debian-policy@lists.debian.org/msg35437.html https://fedoraproject.org/wiki/Changes/DbusBrokerAsTheDefaultDbusImplementa… -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

4 6

Packages in OBS not configured for Factory
by Roger Oberholtzer 28 Aug '23

28 Aug '23

I have a newbie question about the decision about what targets a package in OBS are built for. I mean about the logic behind the choice of which to enable. I quite often find that packages are enabled for only 15.2, or only Tumblwweed. But it is quite common that the packages are not enabled for all current openSUSE/SUSE releases. For exampl (not a complaints against this ptroject! I just happen to be following the status of the tensorflow2 and it took me here as a unresolvable package): https://build.opensuse.org/package/show/devel%3Alanguages%3Apython/python-g… Why would a project in devel:languages:python not have Factory enabled? I know that in user's own builds, them might unfortunately do this. But in a place like devel:languages:python, I would have thought the all current openSUSE/SUSE targets would generally be enabled. If it is a 'I don't have time' thing, then I'm okay with that. No problem. I am curious if it is something else that I have just not cottoned on to. -- Roger Oberholtzer

6 14

munin for sale
by Wolfgang Rosenauer 16 Dec '22

16 Dec '22

Hi, some years ago I took over maintenance for munin in Tumbleweed as I used it myself. I don't do so anymore and I'm also not an expert so I'm looking for someone who might be interested to take ownership of the package. https://munin-monitoring.org/ Wolfgang

2 3

New package: os-update
by Thorsten Kukuk 09 Dec '22

09 Dec '22

Hi, there is a new package in Tumbleweed: os-update Since I'm lazy but wanted to have my non MicroOS servers also always up-to-date, I wrote this little package to make sure my servers are always fully patched like MicroOS: - runs regular via systemd.timer (default once a day) - Uses "zypper up" or "zypper dup" depending on the OS - If zypper reports "reboot necessary", a reboot will be triggered via rebootmgr, and if this is not running directly via "reboot". An enhancement could be to parse the services from the zypper ps -s output and restart the services... Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

3 8

Tumbleweed - Move to x86-64-v2 (plus mitigation plan and call for help)
by Dominique Leuenberger / DimStar 08 Dec '22

08 Dec '22

Dear Tumbleweed users and hackers, I'm sorry to bring up an old topic once again, but it is an important one and I believe we have found a solution that works for most users and still allows openSUSE Tumbleweed to move ahead. openSUSE Factory repository is be repurposed to move forward with x86-64-v2, and openSUSE:Factory:Intel will be set up as openSUSE Factory currently exists today. This change is necessary to align with the SUSE factory first policy (https://opensource.suse.com/legal/policy) to keep aligned with the project's sponsor's development efforts. The discussed and agreed upon solution forward is the following: Repurpose of Factory * openSUSE Tumbleweed main repository: + will move to x86-64-v2 (like ALP will) + i586 support will be dropped from the repository (i.e. only x86-64-v2 left) + -32bit packages as needed by wine and such will remain present (but no complete repo to be installed meaning only the necessary -32bit parts for specific packages will exist) To become Old Factory * for users of legacy systems, we will introduce openSUSE:Factory:Intel, the same setup we have for ports like ARM, PowerPC, zSystems, RISCV. This repo will build packages for x86-64 (v1) plus i586, so basically what the current openSUSE:Factory repository does. Community Actions Needed The :Intel port will require volunteers from the community to look after it. This will entail monitoring the builds, validating QA results (if not passing) and monitoring/pushing on bugs that are exclusive to these architectures Actions for Users: Users of V2 compatible machines Users will automatically be upgraded to x86-64-v2 flavors (which is what we want to happen for the majority of users) Users who can't migrate to V2 and i586 users The repository list will need to be updated away from download.o.o/tumbleweed/repo/oss to something like download.o.o/ports/intel/tumblewed/repo/oss With this solution, we provide benefits to users of more recent machines than that of V1 by using the newer CPU instructions (and staying aligned, and thus relevant, with ALP). Yet this provides a path for users to still run Tumbleweed on machines that might not have the needed hardware. **Once the new intel port repository is ready, I'll let you know the exact location of it. We can expect for these changes to take place in the first quarter of the new year of 2023.** Cheers, Dominique

53 172

Re: x86-64-v2: oggenc, zstd (Stephan Kulow)
by Fritz Hudnut 07 Dec '22

07 Dec '22

---------- Forwarded message ---------- > From: Stephan Kulow <coolo(a)suse.de> > To: factory(a)lists.opensuse.org > Cc: > Bcc: > Date: Sat, 8 Oct 2022 08:13:11 +0200 > Subject: Re: x86-64-v2: oggenc, zstd > > > > Yes, systems mainly doing heavy work will be upgraded when faster > > hardware and budget is available. But the former high performance > > systems remain suitable for doing ordinary work for long time. > Yes. But the question remains on how many of those you plan > to run tumbleweed on. > > Greetings, Stephan > > Stephan: As posted previously, I'm running TW and a number of Gecko Rolling, and Debian Sid, and Manjaro, along with Lubuntu developmental . . . on a '12 cMP using a Xeon i7 processor of that era . . . . The plan is to run it until a number of parts blow up. I'm also running Leap 15.5 on an '09 MBP using Core2Duo processor, perfectly competent for daily driver. F

23 47

Fwd: Undeliverable: Re: tcp mss clamping or ... ?
by L A Walsh 06 Dec '22

06 Dec '22

Anyone else getting these bounces -- looks like a misconfiguration somewhere? -------- Original Message -------- Subject: Undeliverable: Re: tcp mss clamping or ... ? Date: Tue, 29 Nov 2022 20:09:28 +0000 From: <postmaster(a)outlook.com> To: <suse(a)tlinx.org> References: <6385568C.6040308(a)tlinx.org> <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q(a)mail.gmail.com> <638666DD.4020000(a)tlinx.org> *Delivery has failed to these recipients or groups:* amdlnx60(a)googlemail.com <mailto:amdlnx60@googlemail.com> Your message wasn't delivered because the recipient's email provider rejected it. *Diagnostic information for administrators:* Generating server: GV1P251MB0793.EURP251.PROD.OUTLOOK.COM amdlnx60(a)googlemail.com Remote Server returned '550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' Original message headers: Received: from DB9P251MB0545.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:336::16) by GV1P251MB0793.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:50::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5834.15; Tue, 29 Nov 2022 20:09:26 +0000 Resent-From: <ppapen(a)hotmail.de> Received: from DB9P251MB0545.EURP251.PROD.OUTLOOK.COM ([::1]) by DB9P251MB0545.EURP251.PROD.OUTLOOK.COM ([fe80::278b:12f7:6b32:45dd%9]) with Microsoft SMTP Server id 15.20.5857.023; Tue, 29 Nov 2022 20:09:26 +0000 Authentication-Results: spf=pass (sender IP is 195.135.221.145) smtp.mailfrom=lists.opensuse.org; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=tlinx.org; Received-SPF: Pass (protection.outlook.com: domain of lists.opensuse.org designates 195.135.221.145 as permitted sender) receiver=protection.outlook.com; client-ip=195.135.221.145; helo=anna.opensuse.org; pr=C X-IncomingTopHeaderMarker: OriginalChecksum:B690860E3801DD1AABD7FDBE95586F50F5F0CC41A7D78CB4263EAE5C9DCC9896;UpperCasedChecksum:A718C217E7D5BF699F6077A0C83DC8C068CFCFCE4C5C1C5F2EF76F46998EC458;SizeAsReceived:3299;Count:36 X-Spam-Checker-Version: SpamAssassin 3.4.5 (2021-03-20) on mx1.infra.opensuse.org X-Spam-Level: X-Spam-Status: No, score=-5.0 required=5.0 tests=RCVD_IN_DNSWL_HI, RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_NONE,URIBL_DBL_BLOCKED_OPENDNS, URIBL_ZEN_BLOCKED_OPENDNS autolearn=disabled version=3.4.5 X-Spam-Virus: No Message-ID: <638666DD.4020000(a)tlinx.org> Date: Tue, 29 Nov 2022 12:09:01 -0800 From: L A Walsh <suse(a)tlinx.org> User-Agent: Thunderbird MIME-Version: 1.0 To: Erwin Van de Velde <erwin.vandevelde(a)gmail.com> Subject: Re: tcp mss clamping or ... ? References: <6385568C.6040308(a)tlinx.org> <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q(a)mail.gmail.com> In-Reply-To: <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q(a)mail.gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Message-ID-Hash: FJHSAAV5NKVRS4TSSZDY46BKEZDH7HIG X-Message-ID-Hash: FJHSAAV5NKVRS4TSSZDY46BKEZDH7HIG X-MailFrom: SRS0=sw8Z=35=tlinx.org=suse(a)opensuse.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-config-1; header-match-config-2; header-match-config-3; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: oS-fctry <opensuse-factory(a)opensuse.org> X-Mailman-Version: 3.3.6 Precedence: list List-Id: Discussions about the development of the openSUSE distributions <factory.lists.opensuse.org> Archived-At: <https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message…> List-Archive: <https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/> List-Help: <mailto:factory-request@lists.opensuse.org?subject=help> List-Owner: <mailto:factory-owner@lists.opensuse.org> List-Post: <mailto:factory@lists.opensuse.org> List-Subscribe: <mailto:factory-join@lists.opensuse.org> List-Unsubscribe: <mailto:factory-leave@lists.opensuse.org> X-IncomingHeaderCount: 36 Return-Path: suse(a)tlinx.org X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: HE1EUR04FT063:EE_|DB9P251MB0476:EE_|DB9P251MB0545:EE_|GV1P251MB0793:EE_ X-MS-Office365-Filtering-Correlation-Id: 96c91591-c82f-4ddb-1d56-08dad2459cca X-MS-Exchange-EOPDirect: true X-Sender-IP: 195.135.221.145 X-SID-PRA: SUSE(a)TLINX.ORG X-SID-Result: NONE X-Microsoft-Antispam: BCL:0; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Nov 2022 20:09:25.0633 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 96c91591-c82f-4ddb-1d56-08dad2459cca X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: HE1EUR04FT063.eop-eur04.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0476 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1991091 X-MS-Exchange-Processed-By-BccFoldering: 15.20.5857.023 X-MS-Exchange-Inbox-Rules-Loop: ppapen(a)hotmail.de X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-00b75.templateTenant UmVwb3J0aW5nLU1UQTogZG5zO0dWMVAyNTFNQjA3OTMuRVVSUDI1MS5QUk9ELk9VVExPT0su Q09NDQpSZWNlaXZlZC1Gcm9tLU1UQTogZG5zO0RCOVAyNTFNQjA1NDUuRVVSUDI1MS5QUk9E Lk9VVExPT0suQ09NDQpBcnJpdmFsLURhdGU6IFR1ZSwgMjkgTm92IDIwMjIgMjA6MDk6MjYg KzAwMDANCg0KRmluYWwtUmVjaXBpZW50OiByZmM4MjI7YW1kbG54NjBAZ29vZ2xlbWFpbC5j b20NCkFjdGlvbjogZmFpbGVkDQpTdGF0dXM6IDUuNy4yNg0KRGlhZ25vc3RpYy1Db2RlOiBz bXRwOzU1MC01LjcuMjYgVGhpcyBtZXNzYWdlIGRvZXMgbm90IHBhc3MgYXV0aGVudGljYXRp b24gY2hlY2tzIChTUEYgYW5kIERLSU0gYm90aA0KIDU1MC01LjcuMjYgZG8gbm90IHBhc3Mp LiBTUEYgY2hlY2sgZm9yIFt0bGlueC5vcmddIGRvZXMgbm90IHBhc3Mgd2l0aCBpcDoNCiA1 NTAtNS43LjI2IFsyYTAxOjExMTpmNDAwOjdlMGU6OjIwMF0uVG8gYmVzdCBwcm90ZWN0IG91 ciB1c2VycyBmcm9tIHNwYW0sIHRoZQ0KIDU1MC01LjcuMjYgbWVzc2FnZSBoYXMgYmVlbiBi bG9ja2VkLiBQbGVhc2UgdmlzaXQNCiA1NTAtNS43LjI2ICBodHRwczovL3N1cHBvcnQuZ29v Z2xlLmNvbS9tYWlsL2Fuc3dlci84MTEyNiNhdXRoZW50aWNhdGlvbiBmb3IgbW9yZQ0KIDU1 MCA1LjcuMjYgaW5mb3JtYXRpb24uIHoxMi0yMDAyMGEwNTY0MDIyNzRjMDBiMDA0NmFmZDlm MDdiMHNpODM4OTE5OWVkZC4xNCAtIGdzbXRwDQoNCg0K

7 7

some late build chain changes in factory degrades build performance of some packages
by Hans-Peter Jansen 03 Dec '22

03 Dec '22

Hi, some late changes in the build chain degrades build performance to a crawl: e.g. a package typically builds in under two minutes: https://build.opensuse.org/package/live_build_log/vdr:plugins/vdr-plugin-li… openSUSE_Tumbleweed/x86_64 shows this now: [ 2624s] CC live.o [ 3161s] CC thread.o [ 3828s] CC tntconfig.o [ 4459s] CC setup.o [ 4933s] CC i18n.o [ 5492s] CC timers.o [ 6065s] CC tools.o [ 6730s] CC recman.o [ 7457s] CC tasks.o [ 8034s] CC status.o [ 8608s] CC epg_events.o [ 9116s] CC epgsearch.o Any idea, what could have caused this? Cheers, Pete -- Life without chameleons is possible, but pointless.

4 6

journalctl --list-boots do not show the correct _BOOT_ID (Bengt Gördén)
by Fritz Hudnut 01 Dec '22

01 Dec '22

> ---------- Forwarded message ---------- > From: "Bengt Gördén" <bengan(a)bag.org> > To: factory(a)lists.opensuse.org > Cc: > Bcc: > Date: Mon, 28 Nov 2022 15:34:44 +0100 > Subject: journalctl --list-boots do not show the correct _BOOT_ID > I've got a problem with crashing computer since a couple of weeks and needs to > check logs. journalctl --list-boots doesn't show the right _BOOT_ID. Is this a > known problem? I couldn't find anything in bugzilla. > > time is UTC+1 > @Bengt: I just ran that command in my Leap 15.5 install that is a month or more old and got one entry, because I have been lately booting from the Super Grub2 disk to get into it. Previously I log into each of my installs once a week, so there should have been more entries. # journalctl --list-boots 0 f5339494adda41508d8cf2f7536ba6dd Mon 2022-11-28 08:13:14 PST—Mon 2022-11-28> After a recent zypper in Leap 15.5 a problem with the GUI freezing developed and I filed a bug report on that one . . . so far no crashes. What might be more relevant is that week or so back I ran a zypper in my TW install which had a "grub2" package and letting that go through it seemed to break my grub menu, removing the 7 other distros I had up until then AND it seemed to change the UUID numbers of the non-TW installs (which may relate to your issue?). At that point only TW was showing up to boot, I tried to #update-bootloader but that then removed all of the menu entries. Have another bug report filed on that one. https://bugzilla.suse.com/show_bug.cgi?id=1205772

4 4

openSUSE Release Engineering meeting 30.11.2022
by Lubos Kocman 30 Nov '22

30 Nov '22

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees rbrown, DimStar, lkocman, guillaumeg, DocB, ddemaio, dirk, maxlin ## Leap https://etherpad.opensuse.org/p/ReleaseEngineering-openh264-call-20221117 We'll have an update early next week according to Cisco. Code submission deadline for any SLES 15 SP5 related features (does not apply for 15SP4:Update etc), as well as Leap 15.5 Beta code-drop deadline is on January 25th 2023. 15.5 Feature tracking at https://code.opensuse.org/leap/features/issues Ongoing: SUSE Open Source policy review, SUSE Empoyees can participate https://opensource.suse.com/suse-open-source-policy (public facing url) I'd be happy for any feedback from community in form of e.g. email, since the github project SUSE/open-source-policy is private and limited to SUSE Employees as issues might contain discussion regarding confidential topics. Leap Micro 5.4 initial setup in place ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 114 failed 14 unresolvable (last week: 136 / 5) https://tinyurl.com/ysy4nnnz * Still daily snapshots (1124 had no announcement mail, but the snapshot did go out; there was apparently an issue on o3 when it was supposed to prepare the changelog file for that snapshot) * KDE Plasma 5.26.4 staged * Systemd 252.2 (Snapshot 1129) * Staging:G YaST is broken with new rubygem-rspec-* - https://bugzilla.opensuse.org/show_bug.cgi?id=1204871 * Staging:N: experiments with openssl-3 as default: main blocked are nodejs1[89], openssh and ibmtss * util-linux package layout changes remains a topic to be worked out. x86-64-v2 * openSUSE:Factory:LegacyX86 is setup and builds are in a similar state as openSUSE:Factory (slightly worse, would be the same if all pre- existing binaries in oS:F would be deleted and a full rebuild triggered) * Some bots are already up and running: ttm, pkglistgen, trigger- rebuild for rebuild=local * pkglistgen seems to have some trouble, busy debugging that one * once pkglistgen is settled, ttm config will be next, after that we can start the QA setup (possibly we need some more adjustments, as the DVDs are called the same, we have to be careful not to overwrite assets between groups) Only Jiri Slaby volunteered to maintain LegacyX86 so far; he mostly cares for x86-64-v1 in LegacyX86; x86-32 has no explicit volunteers (so it might just be tagging along, similar to what it did so far in openSUSE:Factory, where only few extra cycles are explicit to i586) lkocman: What's our recommendation to devel projects? I guess they should not all mass-enable the legacy target right? dimstar: agreed: Devel Projects are supposed to target Factory - i.e. x86-64-v2; just like most of them don't enable all the other ports ## Richard (MicroOS) openqa.opensuse.org now tests primarily on x86-64-v2/v3 now. New machine definitions will be reintroduced for v0/v1 testing as part of the legacy port. Desktop-GNOME: The Road to Release: transactional-update-notifier is once again WIP after great feedback about why the current approach wasn't the best idea from a security standpoint Bugs fixed Bug 1205108 New: Redundant program for system monitoring on Gnome libcontainers-common/podman was altered to 'better handle' when /home isn't the same filesystem type as the base OS (eg. XFS /home, btrfs /). Unfortunately the first version of this 'fix' caused excessive warnings on every system that was previously working. This is now also resolved. Bugs still WIP osinfo-db still doesn't recognise MicroOS as a seperate distribution - debates with upstream ongoing General MicroOS Stuff in Staging: podman 4.3.1 - broken, maintainer informed https://openqa.opensuse.org/tests/2912733#step/podman/83 Considering FDE by default now single-password-entry full disk encryption is in Tumbleweed Trying to decide if it's a better approach than a fully vertified boot/OS variant of MicroOS, which wouldn't use encryption, but would then encrypt user/system data (eg /home, /var, etc) Please join the Telegram/Matrix group and give your opinion. lkocman: Should we perhaps request addition of FDE devices by gnome- boxes/virt-manager by default? rbrown: the current working theory would be to go LUKS2 based with a nullcipher image, with the user then adding keys/passphrases on first boot. Such an approach would all but eliminate all use of YaST, so, yeah, we'd be making new images, and gnome-boxes/virt-manager/osinfo-db would need to learn how to handle that style of image..but see previous struggles with osinfo-db so far :) KDE MicroOS Desktop is still suffering from a significant lack of contribution. Please join the Telegram/Matrix group and dive in with helping. ## Max 15.5 * lua54 was whitelisted in rpmlint-backports, waiting for package maintainer's ack * The Backports build fail is increased because of 1)newer X/Mesa, and 2)a half of KDE Frameworks got merged to SLE15 SP5, but other KDE Frameworks/Apps are still pending for Backports * The pending KDE update needs some work on permissions/polkit-default- privs, before that the KDE can be broken in the new build * Look into libsnmp30 as an orphaned package issue, looks like some package still depend on libsnmp30 but we have had libsnmp40. The internal package needs a rebuild under my radar: sane-backends Build stats(x86_64): 49 build fails, 4 unresolvables(last week: 24 build fails, 2 unresolvables) ## Guillaume - Arm Tumbleweed: * Rolling * appx WSL image now builds in Factory:ARM (tested manually on a Windows-on-Arm machine). This can be uploaded as part of some "preview" program as a 1st step. * NVIDIA: tester with aarch64 server and NVIDIA card wanted - Proprietary drivers are now available for aarch64 (only G06): https://download.nvidia.com/opensuse/tumbleweed/ - New opengpu driver also available in OBS: https://build.opensuse.org/project/monitor/X11:Drivers:Video Leap: * appx WSL images (Leap 15.4 and 15.5) work ALP: * SUSE:ALP: - Still waiting for new images to add back aarch64 to openQA ## Sarah - s390 Not availalbe Dimstar: Fails on QA as fonts are unreadable in the installer. (https://bugzilla.opensuse.org/show_bug.cgi?id=1205585) Tumbleweed * No readable fonts: https://bugzilla.opensuse.org/show_bug.cgi?id=1205585 -> It can be, that it is a Mesa bug. * git tests have broken the build for git on s390x, but there is no error output. It is working on Fedora (upstream hint): https://bugzilla.opensuse.org/show_bug.cgi?id=1204762 / https://lore.kernel.org/git/CAN0heSoc+jKxseyyR-=8+ATc8rdY5UyFWZPepaQsGn9m+H… -> Workaround of disabling tests is giving a succeeded result and upstream discussion in progress Leap: * openQA tests have been failing because log files were not uploaded. okurz has created a PR for it at the end of last week: https://progress.opensuse.org/issues/119713, which works only with a single running test * problem exists continuously and is also transferred to openSUSE Tumbleweed: https://progress.opensuse.org/issues/120405 ## Doug * FOSDEM * Bus has 15 sign ups * Contact ddemaio if you're in Nuremberg and want to take the bus to FOSDEM. Space may be limited. * Beer labels arrived * openSUSE - https://paste.opensuse.org/74291193 * OBS - https://paste.opensuse.org/17123615 * Picked up demo machine and will install MicroOS for FOSDEM Booth * waiting on booths annoucedment * Should we consider ALP text-only installations as well? If yuu it on a RP3, I hae a little case with screen that could work * openSUSE on Volla advancing * TW microarchitecture generating interest/news coverage * Will not sponsor FOSS Backstage * oSC23 * Registration open * Waiting on contract for signature * Will annouce CfP next week. goes until April 9. * May 26 - 28 ## Dirk * Won maintainership of SUSE:ALP:RISCV - currently in bootstrap * Working on bisecting qemu/libseccomp/kernel-obs-build tests failure on Step:15-SP4/SP5 so that armv7l builds are published again https://bugzilla.suse.com/show_bug.cgi?id=1205624 ## Wolfgang (Package Hub), Scott Bahling Not available The workshop regarding Package HUB equivalent for ALP Lubos will schedule a call with wolfgang and Scott to ensure that they're in loop for the High Level requirements document. https://en.opensuse.org/openSUSE:ALP/Workgroups/Community/Workshops/Consumi… Package Hub for SLE-15-SP5 product definition added and SCC is currently picking it up so it will be ready for testing with the beta of SLE-15-SP5 ## Maintenance team (Marcus or Maurizio (m4u)) Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-dis… Need to setup Leap Micro 5.3 (don't have time this week) * Pending Leap Micro 5.3 maint-setup ffmpeg - possible file conflict on the next update, no idea how to avoid vendor switching at the moment. Removing the patch on the openSUSE side (that might contain security fixes) or releasing update on the packman side could fix the issue. Lubos to give Marcus some working contact for the team. Lubos: I was asked to provide requirements for the QA team. Mostly for the GA/current release but also for the update. Lubos will make wiki with requirements (something like maintenance plan perhaps). Marcus will review it. ## Adrian - OBS No update, OBS is broken at the moment. Axel: there were some cleaning activities in OBS, to determine inactive users and related unmaintained projects. Is there anything going on? Adrian: the script checks a project or a package that has no changes for more than one year. It will create a delete request, that can be deleted. If there is no reaction there will be auto-acceptance in few days. Package can be always manually submitted back if the DR was missed. Users will not be deactivated. Adrian: User cleanup would have to be discussed with IDP team (SUSE IT). OBS is just a consumer. Lubos will create a request to suggest this action in Service desk. Adrian: if the user never logged in into OBS, that's probably a cleanup that could stay in touch. ## Open Floor some members might not be able to join due to conflict with ALP OpenFloor meeting. We might want to give them heads up to provide information in etherpad before the meeting starts

4 3

New Tumbleweed snapshot 20221129 released!
by Dominique Leuenberger 30 Nov '22

30 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kdesu libiscsi (1.19.0+git.20220303 -> 1.19.0+git.20221112) libreoffice (7.4.2.3 -> 7.4.3.2) libva libva-gl python-pycairo (1.21.0 -> 1.22.0) systemd (252.1 -> 252.2) virt-manager === Details === ==== kdesu ==== Subpackages: libKF5Su5 libKF5Su5-lang - Drop fpie.patch, works as expected without - Drop setgid bit on kdesud, no longer needed since 5.99.0 ==== libiscsi ==== Version update (1.19.0+git.20220303 -> 1.19.0+git.20221112) - Update to version 1.19.0+git.20221112: * ci/build.sh: Enable parallel compilation * ci: Fix the Appveyor Linux and Windows builds * ci: Add ci/install.bat * Add CodeQL workflow for GitHub code scanning * test-tool: remove a redundant semicolon * lib/scsi-lowlevel: Make the REPORT LUNS unmarshalling code more flexible * Fix segmentation fault problem. * Check return value of scsi_malloc in order to avoid dereferencing NULL return value. * fix iscsi-ls parameter parse * iscsi-swp: handle setting of debug_level correctly * Update iscsi-dd.c * iscsi-inq: handle setting of debug_level correctly * Retain the immediate data param during login processing ==== libreoffice ==== Version update (7.4.2.3 -> 7.4.3.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.4.3.2: https://wiki.documentfoundation.org/Releases/7.4.3/RC2 https://wiki.documentfoundation.org/Releases/7.4.3/RC1 - Updated bundled dependencies: * curl-7.83.1.tar.xz -> curl-7.86.0.tar.xz - Added patches: * fix_harfbuzz_on_sle12_sp5.patch * fix_webp_on_sle12_sp5.patch - Refresh fix_gtk_popover_on_3.20.patch - Removed upstreamed patches: * bsc1202866.patch * bsc1201095.patch - Fix bsc#1202866 - LO-L3: PPTX: indentation of list items far too far to the left (overruns bullet items) * bsc1202866.patch ==== libva ==== Subpackages: libva-drm2 libva-x11-2 libva2 - Make sure make runs with verbose builds so we see the gcc cmdlines - Added propagate-dpy.patch: (boo#1202828) Patch taken from https://github.com/intel/libva/issues/479 ==== libva-gl ==== Subpackages: libva-glx2 libva-wayland2 - Make sure make runs with verbose builds so we see the gcc cmdlines - Added propagate-dpy.patch: (boo#1202828) Patch taken from https://github.com/intel/libva/issues/479 ==== python-pycairo ==== Version update (1.21.0 -> 1.22.0) - Updtae to version 1.22.0: * Officially support Python 3.11. * PDFSurface.version_to_string(): Fix crash with negative versions. * typing: ImageSurface.get_stride() returns an int. * typing: Fix incorrect interface for Matrix constructor. * typing: Use Generic for Context. * docs: some cairo.Context fixes. * docs: try to make create_from_png/write_to_png more clear. * docs: add an example for how to convert a surface to pillow. * docs: cairo.Format.RGB24: document that unused bytes may be overwritten. * tests: donât depend on specific ref counts. * tests: compatibility fixes for cairo 1.17.6. - Drop f5a795ea.patch: fixed upstream. ==== systemd ==== Version update (252.1 -> 252.2) Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-devel systemd-lang udev - Import commit e7e931b07edd786dc6ca1dae6c23ff7b785f8efd (merge of v252.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/64dc546913525e33e734500055a62ed… - Rebase 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1205675 - [Build 20221122] virt-install: Specifying --boot no longer implies no_install=yes 1cb0be40-virtinstall-split-no_install-conditional-apart-to-track-code-coverage.patch e94786c0-virtinstall-fix-regression-with-boot-and-no-install-method.patch

1 0

tcp mss clamping or ... ?
by L A Walsh 29 Nov '22

29 Nov '22

I use a 9k mtu on my 10gb network @ home -- only exists between my desktop & my server where it can be worthwhile. Bridged to that NW is a 1gb, 1.5k mtu network use for my home IOT (Internet of Things) This works for administrative traffic, for the most part, but in gaining some new 'things', some wish to talk to a media/file server on the higher BW net. Someone referred me to possibly using tcp mss clamping, though they were using it in the context of a VPN tunnel which I'm not using. I'm wondering if it is as simple as installing routes with mtu clamping so hosts wanting(needing) to goto a smaller mtu would take the appropriate network and talk with smaller packets. Seems there maybe something missing there since some traffic can be ip-level w/no tcp in play (ex: dns). Doesn't seem that would really work too well... Has anyone had any experience w/this type of setup? tnx!

4 7

Troubles with sudo - and the fix for it
by Dominique Leuenberger / DimStar 29 Nov '22

29 Nov '22

Dear Tumbleweed users, At a perfectlty bad moment, a snapshot with a configuration change for sudo went out and me not being around on the weekend made this problem even worse for you. Background situation: a user requested the sudo configuration to be changed to no longer ask for the 'target user's password', but rather ask for the user willing to become somebody else's password (as other distros do) That change was submitted to Factory and was unfortunately not identified as being really bad for our existing users. So it went out in snapshot 1103 (published Friday evening) Over the weekend, many of you have struggled with this new default. Understandably so. As the change did not take into account ANY user that never had the need to change the sudo config, because it just worked for them. As this change is definitively bad in its current form I have reverted the sudo package to the state it was before snapshot 1103 and published the same version into the openSUSE Tumbleweed update channel. If you get the sudo version from there, your configuration shold start working again without further changes (if you did not change the config since then! Otherwise rpm will create an .rpmnew file and NOT replace your local modied version) Apologies at this place for the trouble caused to you. Of course I will also request openQA to also test the DEFAULT configuration provided - allowing us to spot such issues hopefully before sending them out to users ever again. Thank you very much for your understanding! Let's get this back on track and let's keep having a lot of fun Best regards, Dominique

26 60

New Tumbleweed snapshot 20221128 released!
by Dominique Leuenberger 29 Nov '22

29 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: plymouth skype4pidgin (1.5 -> 1.7) snapper === Details === ==== plymouth ==== Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner ==== skype4pidgin ==== Version update (1.5 -> 1.7) Subpackages: libpurple-plugin-skypeweb pidgin-plugin-skypeweb - Update to version 1.7 (changes since 1.5): * Fix "alt login" giving a 40499 error. * Fix file transfers. * Fix losing admin rights when joining a room. * Fix the Aug 2020 issues with "Failed to get Magic T" errors. Use the "Use alternate auth method" setting in the Advanced tab is always preferred as it's less prone to web-scraping issues. * Fix some issues that some users were experiencing with buddies not appearing as online. * Fix some static analysis warnings (memory leaks, security issues). ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - fix build with boost 1.81

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 28 Nov '22

28 Nov '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - rubygem-slim: Uninstallable: nothing provides rubygem(ruby:3.1.0:temple) < 0.9 needed by ruby3.1-rubygem-slim-4.1.0.i586 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Update from 20220908 to 20221101 Breaks SMB
by Joe Salmeri 28 Nov '22

28 Nov '22

Today I updated from TW 20220908 to 20221101 and SMB no longer works I use SMB to access my linux server from both Windows and Linux guest network machines. This configuration has worked fine for years with no issues. Today after updating to TW 20221101 neither the Windows or Linux guests can access the network shares. Samba is running and on the Windows machine when I map to one of the shares it maps the drive but then when i try to access the mapped drive it gets Access Denied. There have been no configuration changes to the system for SMB in years It is not a permission issue on the drive because the user that maps to the SMB share on the Linux machine has full permissions rwx on Linux and Full Control on Linux. I believe the problem is related to apparmour changes for samba but I am unsure how to resolve the issue. Here are the messages that are appearing for the smb service. Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + test No == Yes Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + test -e /etc/apparmor.d/local/usr.sbin.smbd-shares Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + grep -q 'update-apparmor-samba-profile 1.3' /etc/apparmor.d/local/usr.sbin.smbd-shares Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + test /etc/samba/smb.conf -nt /etc/apparmor.d/local/usr.sbin.smbd-shares Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + silentexit 'smb.conf is older than the AppArmor profile sniplet' Nov 03 19:59:44 update-apparmor-samba-profile[9984]: + exit 0 Nov 03 19:59:44 smbd[9988]: [2022/11/03 19:59:44.703896, 0] ../../source3/smbd/server.c:1741(main) Nov 03 19:59:44 smbd[9988]: smbd version 4.17.2-git.273.a55a83528b9SUSE-oS15.9-x86_64 started. Nov 03 19:59:44 smbd[9988]: Copyright Andrew Tridgell and the Samba Team 1992-2022 I suspect that the problem it is because it is complaining about smb.conf being different than what apparmour has but that config has not been changed since I originally set it up. Note that I first updated one of the client machines from TW 20220908 to 20221101 and after that machine was updated both the Windows machine and that TW 20221101 client had no problem accessing the TW 20220908 Linux server and SMB shares. Once the TW 20220908 server was updated to 22021101 then the linux clients and windows cllients could no longer access the TW 20221101 server. Is this a known issue? What are my options? I'd prefer to not have to rollback the machines but I also need a working SMB environment.

4 16

journalctl --list-boots do not show the correct _BOOT_ID
by Bengt Gördén 28 Nov '22

28 Nov '22

I've got a problem with crashing computer since a couple of weeks and needs to check logs. journalctl --list-boots doesn't show the right _BOOT_ID. Is this a known problem? I couldn't find anything in bugzilla. time is UTC+1 > linux-jrxm:~ # grep -e ^NAME -e ^VERSION_ID /etc/os-release > NAME="openSUSE Tumbleweed" > VERSION_ID="20221123" > linux-jrxm:~ # journalctl --list-boots > IDX BOOT ID FIRST ENTRY LAST ENTRY > -19 f1954a84587545feae999e9f37de5bcb Sat 2021-11-27 12:15:28 CET Sun 2021-11-28 20:34:16 CET > -18 aea5b20091a544e28be4b9ac7fa1208c Sun 2021-11-28 21:35:00 CET Tue 2021-12-21 17:14:34 CET > -17 e3b041d425db47b0a9e5475a4377f7f1 Tue 2021-12-21 18:24:06 CET Fri 2022-01-14 16:03:29 CET > -16 0439e448302f42b1b9190c06959dd8fe Fri 2022-01-14 17:22:07 CET Sat 2022-01-15 09:52:50 CET > -15 ca0f88cb3c4e4ac495292c26311f5811 Sat 2022-01-15 11:01:34 CET Wed 2022-02-02 09:53:03 CET > -14 dc5ed27de618455bbefabe80fdd6a885 Wed 2022-02-02 10:53:42 CET Wed 2022-02-02 11:17:47 CET > -13 ad59def20fa3498a9e451118bad0f802 Wed 2022-02-02 12:18:11 CET Wed 2022-02-09 23:20:30 CET > -12 a7f3ad89a1a74cf884d71d395612ef2d Thu 2022-02-10 08:53:30 CET Fri 2022-02-11 17:38:53 CET > -11 43b1403ac60d4d9884890cf25862607a Fri 2022-02-11 18:39:16 CET Tue 2022-02-15 15:02:39 CET > -10 38b6c17bcf404fb1be2e919bc6cef431 Tue 2022-02-15 16:06:20 CET Tue 2022-02-15 15:12:26 CET > -9 85748804c57a455fbda0761a303ed3d8 Tue 2022-02-15 16:12:48 CET Tue 2022-02-15 15:23:07 CET > -8 c627d843f74f4bbea07e8f6aa1a44786 Tue 2022-02-15 16:23:33 CET Tue 2022-02-15 19:19:38 CET > -7 c11187ba74f742e68da3c4f14bf0195b Tue 2022-02-15 20:20:48 CET Tue 2022-02-15 21:20:51 CET > -6 009204e8f5a0423499ed7580f248abab Tue 2022-02-15 22:21:19 CET Mon 2022-02-21 21:21:47 CET > -5 f66e2b3bd7e14399ab342071f2ce92f5 Mon 2022-02-21 21:27:36 CET Mon 2022-02-28 19:35:43 CET > -4 aded82346d404722bf310cd9c658db55 Mon 2022-02-28 20:36:15 CET Tue 2022-03-01 13:23:29 CET > -3 875cd66b3c0d422dbb4492befec0b344 Tue 2022-03-01 13:36:09 CET Tue 2022-03-08 09:58:42 CET > -2 14102c1313d14dc1abdfb54851273930 Tue 2022-03-08 11:22:13 CET Tue 2022-03-08 15:43:00 CET > -1 f35f23ff931444598fcee679503eff6d Tue 2022-03-08 16:36:41 CET Tue 2022-03-08 17:05:32 CET > 0 5b5506b8fd844ecb9175d7eb5f801bcc Tue 2022-03-08 17:31:51 CET Tue 2022-03-08 16:31:55 CET Two latest boots > linux-jrxm:~ # journalctl --since "Nov 28 00:00:00" | grep ^"--" > -- Boot f7d4bd3570294a8c900f1e8b88f9d310 -- > -- Boot 28d96a06f89c407594b6fb50b8af2b7f -- -- /bengan

1 0

New Tumbleweed snapshot 20221127 released!
by Dominique Leuenberger 28 Nov '22

28 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem gawk (5.2.0 -> 5.2.1) heaptrack (1.3.0 -> 1.4.0) iputils (20211215 -> 20221126) kdump (1.0.2+git20.gcb129d0 -> 1.0.2+git26.gc6fab38) libX11 libeconf (0.4.8+git20221114.7ff7704 -> 0.4.9) libgcrypt (1.9.4 -> 1.10.1) libotr mpfr === Details === ==== filesystem ==== - Add %_user_tmpfilesdir to the filesystem - Added zh_Hans (simplified Chinese) and zh_Hant (traditional chinese) locales ==== gawk ==== Version update (5.2.0 -> 5.2.1) - Update to gawk 5.2.1 * Issues related to the sign of NaN and Inf values on RiscV have been fixed * A few issues with the debugger have been fixed. * More subtle issues with untyped array elements being passed to functions have been fixed. * The rwarray extension's readall() function has had some bugs fixed. * The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on S/390x. - double-free.patch, pma.patch, nan-sign.patch: Removed ==== heaptrack ==== Version update (1.3.0 -> 1.4.0) Subpackages: heaptrack-gui heaptrack-lang - Update to 1.4.0 * Pass client exit code in heaptrack.sh * Leverage non-deprecated mallinfo2 * Add support for the mimalloc allocator * Explicitly encode which hooks are required and which are optional * Make mi_* symbols truly optional by usig weak symbols for them * Prevent malloc from disappearing in inlining example * handle calling heaptrack_stop() without debuginfo * Ensure we don't try to overwrite invalid tables * Make elf_symbol_table a view of const Elf::Sym * Ensure we don't read outside the string table for symbol names * Silence -Wuse-after-free for realloc call ==== iputils ==== Version update (20211215 -> 20221126) - Update to version 20221126 https://github.com/iputils/iputils/releases/tag/20221126 - Update configure variables (ninfod, rarpd and rdisc were removed from upstream in next release => remove -DBUILD_NINFOD=false -DBUILD_RARPD=false - DBUILD_RDISC=false) - Remove 2 backported fixes from this release 0001-ping-Add-SA_RESTART-to-sa_flags.patch 0002-ping-Make-ping_rts-struct-static.patch ==== kdump ==== Version update (1.0.2+git20.gcb129d0 -> 1.0.2+git26.gc6fab38) - Make the kdump-save.service reboot after kdump-save is finished (bsc#1204000) - fix renaming of qeth interfaces (bsc#1204743, bsc#1144337) - ppc64: rebuild initrd image after migration (bsc#1191410) - kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027) ==== libX11 ==== Subpackages: libX11-6 libX11-6-32bit libX11-data libX11-devel libX11-xcb1 - U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch * fixed Firefox freezes (regression since 1.8.2) (boo#1205778) ==== libeconf ==== Version update (0.4.8+git20221114.7ff7704 -> 0.4.9) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.4.9: * libeconf.h: added missing sys/types.h header (#171) * new API calls: econf_readFileWithCallback, econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172) * Checking NULL comment parameter in the parsing functions. ==== libgcrypt ==== Version update (1.9.4 -> 1.10.1) Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac - Update to 1.10.1: * Bug fixes: - Fix minor memory leaks in FIPS mode. - Build fixes for MUSL libc. * Other: - More portable integrity check in FIPS mode. - Add X9.62 OIDs to sha256 and sha512 modules. * Add the hardware optimizations config file hwf.deny to the /etc/gcrypt/ directory. This file can be used to globally disable the use of hardware based optimizations. * Remove not needed separate_hmac256_binary hmac256 package - Update to 1.10.0: * New and extended interfaces: - New control codes to check for FIPS 140-3 approved algorithms. - New control code to switch into non-FIPS mode. - New cipher modes SIV and GCM-SIV as specified by RFC-5297. - Extended cipher mode AESWRAP with padding as specified by RFC-5649. - New set of KDF functions. - New KDF modes Argon2 and Balloon. - New functions for combining hashing and signing/verification. * Performance: - Improved support for PowerPC architectures. - Improved ECC performance on zSeries/s390x by using accelerated scalar multiplication. - Many more assembler performance improvements for several architectures. * Bug fixes: - Fix Elgamal encryption for other implementations. [bsc#1190239, CVE-2021-40528] - Check the input length of the point in ECDH. - Fix an abort in gcry_pk_get_param for "Curve25519". * Other features: - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored because it is useless with the FIPS 140-3 related changes. - Update of the jitter entropy RNG code. - Simplification of the entropy gatherer when using the getentropy system call. * Interface changes relative to the 1.10.0 release: - GCRYCTL_SET_DECRYPTION_TAG NEW control code. - GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER NEW control code. - GCRYCTL_FIPS_SERVICE_INDICATOR_KDF NEW control code. - GCRYCTL_NO_FIPS_MODE = 83 NEW control code. - GCRY_CIPHER_MODE_SIV NEW mode. - GCRY_CIPHER_MODE_GCM_SIV NEW mode. - GCRY_CIPHER_EXTENDED NEW flag. - GCRY_SIV_BLOCK_LEN NEW macro. - gcry_cipher_set_decryption_tag NEW macro. - GCRY_KDF_ARGON2 NEW constant. - GCRY_KDF_BALLOON NEW constant. - GCRY_KDF_ARGON2D NEW constant. - GCRY_KDF_ARGON2I NEW constant. - GCRY_KDF_ARGON2ID NEW constant. - gcry_kdf_hd_t NEW type. - gcry_kdf_job_fn_t NEW type. - gcry_kdf_dispatch_job_fn_t NEW type. - gcry_kdf_wait_all_jobs_fn_t NEW type. - struct gcry_kdf_thread_ops NEW struct. - gcry_kdf_open NEW function. - gcry_kdf_compute NEW function. - gcry_kdf_final NEW function. - gcry_kdf_close NEW function. - gcry_pk_hash_sign NEW function. - gcry_pk_hash_verify NEW function. - gcry_pk_random_override_new NEW function. * Rebase libgcrypt-1.8.4-allow_FSM_same_state.patch and rename to libgcrypt-1.10.0-allow_FSM_same_state.patch * Remove unused CAVS tests and related patches: - cavs_driver.pl cavs-test.sh - libgcrypt-1.6.1-fips-cavs.patch - drbg_test.patch * Remove DSA sign/verify patches for the FIPS CAVS test since DSA has been disabled in FIPS mode: - libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch - libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch * Rebase libgcrypt-FIPS-SLI-pk.patch * Rebase libgcrypt_indicators_changes.patch and libgcrypt-indicate-shake.patch and merge both into libgcrypt-FIPS-SLI-hash-mac.patch * Rebase libgcrypt-FIPS-kdf-leylength.patch and rename to libgcrypt-FIPS-SLI-kdf-leylength.patch * Rebase libgcrypt-jitterentropy-3.4.0.patch * Rebase libgcrypt-FIPS-rndjent_poll.patch * Rebase libgcrypt-out-of-core-handler.patch and rename to libgcrypt-1.10.0-out-of-core-handler.patch * Since the FIPS .hmac file is now calculated with the internal tool hmac256, only the "module is complete" trigger .fips file is checked. Rename libgcrypt-1.6.1-use-fipscheck.patch to libgcrypt-1.10.0-use-fipscheck.patch * Remove patches fixed upstream: - libgcrypt-1.4.1-rijndael_no_strict_aliasing.patch - libgcrypt-1.5.0-LIBGCRYPT_FORCE_FIPS_MODE-env.diff - libgcrypt-fix-rng.patch - libgcrypt-1.8.3-fips-ctor.patch - libgcrypt-1.8.4-use_xfree.patch - libgcrypt-1.8.4-getrandom.patch - libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch - libgcrypt-dsa-rfc6979-test-fix.patch - libgcrypt-fix-tests-fipsmode.patch ... changelog too long, skipping 27 lines ... * Update libgcrypt.keyring ==== libotr ==== - Add sys/socket.h to the test suite that FTBFS without the include * Add libotr-4.1.1-include-socket.h.patch ==== mpfr ==== - Add mpfr-4.1.1-patch01.patch to fix bug with code using the mpfr_custom_get_kind macro.

1 0

New Tumbleweed snapshot 20221126 released!
by Dominique Leuenberger 27 Nov '22

27 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libpng16 (1.6.38 -> 1.6.39) libstorage-ng (4.5.52 -> 4.5.53) libtpms libzypp (17.31.5 -> 17.31.6) manpages-l10n (4.15.0 -> 4.16.0) psmisc python-setuptools (65.5.1 -> 65.6.3) shaderc === Details === ==== libpng16 ==== Version update (1.6.38 -> 1.6.39) Subpackages: libpng16-16 libpng16-16-32bit - Update to version 1.6.39: * cmake: Default to PNG_ARM_NEON=off for arm targets. + Turn large PNG chunks into benign errors. + Update, rename and clean up various scripts. + tools: Fix a buffer overflow involving a file name in pngfix. + tools: Fix a memory leak in pngcp. ==== libstorage-ng ==== Version update (4.5.52 -> 4.5.53) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#905 - read filters for udev links from config file - limit allowed by-id links for NVMEs (bsc#1205352) - make integration-tests subpackage noarch - cleanup - 4.5.53 ==== libtpms ==== - fix build for ppc64le: use -Wl,--no-as-needed in check-local [bsc#1204556] ==== libzypp ==== Version update (17.31.5 -> 17.31.6) - Avoid calling getsockopt when we know the info already. This patch hopefully fixes logging on WSL, getsockopt seems to not be fully supported but the code required it when accepting new socket connections. (for bsc#1178233) - Enhance yaml-cpp detection (fixes #428) - No need to redirect 'history.logfile=/dev/null' into the target. - MultiCurl: Make sure to reset the progress function when falling back. - version 17.31.6 (22) ==== manpages-l10n ==== Version update (4.15.0 -> 4.16.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR - Update to version 4.16.0: Updated many translations. - Upgrade macros: * Add Leap 15.5 and Fedora 37. * Remove Leap 15.4 and Fedora 36 (dropped by upstream). - Rebase links patch: * Remove manpages-l10n-4.15.0-fix-links.patch. * Add manpages-l10n-4.16.0-fix-links.patch. ==== psmisc ==== Subpackages: psmisc-lang - Add patch socket-fix.patch * Add test to check for named sockets as file as well as on mounts * Fix code to find named sockets - The former test requires nc at build aka netcat from openbsd to create a named socket on the fly ==== python-setuptools ==== Version update (65.5.1 -> 65.6.3) - Update to 65.6.3: * #3709: Fix condition to patch distutils.dist.log to only apply when using distutils from the stdlib. - v65.6.2 * No significant changes. - Update to 65.6.1: * #3689: Document that distutils.cfg might be ignored unless SETUPTOOLS_USE_DISTUTILS=stdlib. * #3678: Improve clib builds reproducibility by sorting sources -- by :user:`danigm`, fixing bsc#1201127 * #3684: Improved exception/traceback when invalid entry-points are specified. * #3690: Fixed logging errors: 'underlying buffer has been detached' (issue [#1631]). * #3693: Merge pypa/distutils@3e9d47e with compatibility fix for distutils.log.Log. * #3704: Fix temporary build directories interference with auto-discovery. - v65.6.0: * #3674: Sync with pypa/distutils@e0787fa, including pypa/distutils#183 updating distutils to use the Python logging framework. ==== shaderc ==== - Drop pkgconfig files for not provided static libraries

1 0

New Tumbleweed snapshot 20221125 released!
by Dominique Leuenberger 26 Nov '22

26 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor (3.0.7 -> 3.1.2) babl (0.1.96 -> 0.1.98) busybox gegl (0.4.38 -> 0.4.40) grub2 hicolor-icon-theme highway icewm (3.2.0 -> 3.2.2) inxi (3.3.21 -> 3.3.23) iproute2 iso-codes (4.11.0 -> 4.12.0) k3b libapparmor (3.0.7 -> 3.1.2) libcaca (0.99.beta19.git20171003 -> 0.99.beta20) libdrm live555 (2022.10.01 -> 2022.11.19) luajit (2.1.0~beta3+git.1647772157.43ebb949 -> 2.1.0~beta3+git.1669107176.46aa45d) mutter nano (6.4 -> 7.0) nghttp2 (1.50.0 -> 1.51.0) openvpn (2.5.7 -> 2.5.8) perl-IO-Socket-SSL (2.075 -> 2.077) perl-IO-Tty (1.16 -> 1.17) perl-Mojolicious (9.28 -> 9.30) python python-base python-httpcore ruby-common (2.6 -> 3.2) ruby3.1 (3.1.2 -> 3.1.3) rubygem-gem2rpm schily sdl12_compat (1.2.52 -> 1.2.60) selinux-policy sqlite3 (3.39.4 -> 3.40.0) systemd systemd-rpm-macros (17 -> 18) vim (9.0.0814 -> 9.0.0924) vlc (3.0.17.4 -> 3.0.18) === Details === ==== apparmor ==== Version update (3.0.7 -> 3.1.2) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - update to AppArmor 3.1.2 - lots of cleanups, improvements and bugfixes in all areas - rework internal profile storage and handling in the aa-* tools - support boolean variable definitions in the aa-* tools - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1 and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2 for the detailed upstream changelog - remove upstream(ed) patches: - apparmor-3.0.7-egrep.patch - dnsmasq.diff - profiles-permit-php-fpm-pid-files-directly-under-run.patch - zgrep-profile-mr870.diff - no longer ship precompiled profile cache for Tumbleweed (boo#1205659) - BuildRequire iproute2 (needed for aa-unconfined tests) ==== babl ==== Version update (0.1.96 -> 0.1.98) - update to 0.1.98: * More robust bounds protection in ICC handling, avoid garbage collecting lookup tables in-line with processing. ==== busybox ==== Subpackages: busybox-static - Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065, boo#1199744). ==== gegl ==== Version update (0.4.38 -> 0.4.40) Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - luajit was disabled for riscv64 ppc64 ppc64le, patch it here accordingly (boo#1205102) - Update to version 0.4.40: + Operations: - newsprint: do not drop alpha channel in RGB modes. + Core: - fixes for legacy build, still supporting building latest GEGL for stable GIMP with old babl (not recommended if distros can have recent enough meson). - avoiding possible multi thread race in babl garbage collection, ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Make full utilization of btrfs bootloader area (bsc#1161823) * 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch * 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch - Patch removed * 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch ==== hicolor-icon-theme ==== - Add 1024x1024 directory for package ownership ==== highway ==== - Fix the library being built for incorrect microarchitecture on armv{6,7}hl. * add arm-disable-runtime-dispatch.patch to fix compiler error - Actually run the testsuite. ==== icewm ==== Version update (3.2.0 -> 3.2.2) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 3.2.2: + Freeze the task pane layout while Alt is pressed, + Only sort Alt+Tab on WM_CLASS when persistent, + Also sort Alt+Tab on the 'order' winoption when persistent, + Let the Escape key cancel a menu with all its submenu's, + Add a menu entry to rename the window title manually, + Adapt absolute paths in .desktop files to the installation prefix, + The sorting of windows in the window list window was improved a lot, + Restore the named frame tabs when recovering from a crash, + Preserve the non-fullscreen non-maximized window geometry across restarts, + Try harder to avoid a situation where nothing is focused, + Update the window list when a tab is moved to its own frame, + Make the window list menu actions more tab-savvy. + Drop the obsolete LSM file altogether. - Changes from version 3.2.1: + Add QuickSwitchPersistence=0 preference for stateful Alt+Tab. + Demarcate workspaces with a horizontal line in Alt+Tab. + Fixes for Alt+Tab size calculations. + Fix for changing workspace when Alt+Tab is open. + Fix for KeySysSwitchClass history. + Don't attempt to focus NoInput windows. + Ensure that active Alt+Tab item is visible. + Also sort Alt+Tab items on WM_CLASS. + Fix a compile error for GCC 4.8.5. + When moving a tab to a new frame, activate it. + Updated translations. ==== inxi ==== Version update (3.3.21 -> 3.3.23) - Update to version 3.3.23: + /usr/share/doc/packages/inxi/inxi.changelog. ==== iproute2 ==== Subpackages: iproute2-bash-completion - Replace routel program by a non-python version [boo#1205632] ==== iso-codes ==== Version update (4.11.0 -> 4.12.0) Subpackages: iso-codes-lang - Update to version 4.12.0: + ISO 3166-1: Update name for TR (TÃ¼rkiye). Fixes #38 + Updated translations for ISO 3166-1, ISO 3166-2, ISO 3166-3, ISO 639-2, ISO 639-3, ISO 639-5, ISO 4217, and ISO 15924. ==== k3b ==== Subpackages: k3b-lang - Add patch to fix knewstuff install location: * 0001-remove-unnecessary-and-incorrect-version-check.patch ==== libapparmor ==== Version update (3.0.7 -> 3.1.2) Subpackages: libapparmor1 libapparmor1-32bit - update to AppArmor 3.1.2 - lots of cleanups, improvements and bugfixes in all areas - rework internal profile storage and handling in the aa-* tools - support boolean variable definitions in the aa-* tools - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1 and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2 for the detailed upstream changelog - remove upstream(ed) patches: - apparmor-3.0.7-egrep.patch - dnsmasq.diff - profiles-permit-php-fpm-pid-files-directly-under-run.patch - zgrep-profile-mr870.diff - no longer ship precompiled profile cache for Tumbleweed (boo#1205659) - BuildRequire iproute2 (needed for aa-unconfined tests) ==== libcaca ==== Version update (0.99.beta19.git20171003 -> 0.99.beta20) - add patch [libcaca-autoconf-2.69.patch] * Don't force autoconf to be at version 2.71 - Upgrade to 0.99.beta20 * IPv6 support in cacaserver * fixed a bug from 2004 that caused PDF documentation generation to fail * memory allocation functions are now more robust * numerous fixes for memory leaks and invalid memory accesses: * CVE-2021-30498 * CVE-2021-30499 * CVE-2021-3410 * CVE-2018-20546 * CVE-2018-20547 * CVE-2018-20545 * CVE-2018-20548 * CVE-2018-20549 - Dropped upstream fixed patches * libcaca-bsc1182731-prevent-overflow.patch * libcaca-variable-type.patch * Bug1120502-add_cast_to_prevent_overflow.patch ==== libdrm ==== Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - Apply n_libdrm-drop-valgrind-dep-generic.patch and n_libdrm-drop-valgrind-dep-intel.patch only when the build uses meson < 0.64. With meson 0.64, we don't get the dependency on valgraind added. - split n_libdrm-drop-valgrind-dep.patch into n_libdrm-drop-valgrind-dep-generic.patch and n_libdrm-drop-valgrind-dep-intel.patch to fix build on s390 and armv7l - Only apply libdrm-drop-valgrind-dep.patch if valgrnid_support is enabled (fix build on e.g. aarch64). - renamed libdrm-drop-valgrind-dep.patch to n_libdrm-drop-valgrind-dep.patch in order to mark it as 'never to be upstreamed' - Add libdrm-drop-valgrind-dep.patch (as source): drop dependency on valgrind on generated pkgconfig files. The .pc files are auto-generated by meson and are 'technically' correct, but we do not want to inject valgrind here (we can get away with this hack as it's only relevant when using pkg-config --static, and we do not provide static libs anyway). ==== live555 ==== Version update (2022.10.01 -> 2022.11.19) Subpackages: libBasicUsageEnvironment1 libUsageEnvironment3 libgroupsock30 libliveMedia107 - update to 2022.11.19: - Added a new global variable "ReceivingInterfaceAddr6" (analogous to the existing variable "ReceivingInterfaceAddr" for IPv4) to allow applications to optionally change the default receiving address for IPv6. ==== luajit ==== Version update (2.1.0~beta3+git.1647772157.43ebb949 -> 2.1.0~beta3+git.1669107176.46aa45d) - Update to version 2.1.0~beta3+git.1669107176.46aa45d: * NX: Always compile with -fPIC. * Clarify contact page. * Ensure correct stack top for OOM error message. * ARM64: Fix IR_SLOAD assembly. * Fix trace join to BC_JLOOP originating from BC_ITERN. * Fix compiler warnings. * Fix last edit. * Remove dead Wiki links. * Fix QNX build. * Add -F option to override filename in jit.bcsave (luajit -b). * Patch luajit.pc with INSTALL_INC, if customized. * LJ_GC64: Fix lua_concat(). * Prevent use of RTLD_DEFAULT when NO_RTLD_DEFAULT is defined. * Improve GC estimation for userdata with attached managed memory. * Add missing GC steps to string buffer methods. * x86/x64: Limit VLOAD fusion to simple cases. * OSX/iOS/ARM64: Fix generation of Mach-O object files. * Prevent trace start at BC_ITERL after compiled BC_ITERN. * ARM64: Allow building with unwinding disabled. * FFI: Fix sizeof expression in C parser for reference types. * FFI: Fix ffi.alignof() for reference types. * FFI: Allow ffi.metatype() for typedefs with attributes. * OSX/iOS/ARM64: Fix bytecode embedding in Mach-O object file. * LJ_GC64: Fix IR_VARG offset for fixed number of results. * x86/x64: Fix math.ceil(-0.9) result sign. * Grammar and spell check. * Make embedded bytecode readable and forward-compatible. * DynASM: Fix warnings. * Fix warnings in minilua.c. * Update console build instructions. * Add Nintendo Switch port. * Avoid zero-sized arrays in jit_State. * Don't use jit_State during build with JIT disabled. * DynASM/ARM64: Fix LSL/BFI* encoding with variable registers. * Fix ITERN loop detection when hook checks are enabled. * Prevent C compiler undefined-behavior optimization. * Fix alias analysis for table length forwarding. * Fix loop initialization in table.foreach(). * LJ_GC64: Fix HREFK optimization. * Fix recording of __concat metamethod. * Cleanup of system and architecture support docs. * Add PS5 port. * Fix assertions. * x64: Fix RETHI/RETLO swap after call. * Fix assertion for LJ_KEYINDEX. * Add missing check for LJ_KEYINDEX in ITERN recording. * DynASM/ARM64: Fix NOP instruction for aligment - Was forced to remove perhaps in future important patches: - luajit-ppc64-replace-asserts.patch - 0004-Add-ppc64-support-based-on-koriakin-GitHub-patchset.patch - Also exclude s390x from the build (boo#1204557). ==== mutter ==== Subpackages: mutter-lang - Fix window freezes when maximized on Xorg (boo#1205714, glgo#GNOME/mutter!2694, glgo#GNOME/gnome-shell#6054) * add clutter-actor-Show-on-all-stage-views-when-actors-ha.patch ==== nano ==== Version update (6.4 -> 7.0) Subpackages: nano-lang - update to 7.0: * String binds may contain bindable function names between braces * Unicode codes can be entered (via M-V) without leading zeroes, by finishing short codes with <Space> or <Enter> * Word completion (^]) looks for candidates in all open buffers * No regular expression matches the final empty line any more ==== nghttp2 ==== Version update (1.50.0 -> 1.51.0) - update to 1.51.0: * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/ This release fixes affinity-cookie-stickiness parameter handling. ==== openvpn ==== Version update (2.5.7 -> 2.5.8) - update to 2.5.8: * allow running a default configuration with TLS libraries without BF-CBC (even if TLS cipher negotiation would not actually use BF-CBC, the long-term compatibility "default cipher BF-CBC" would trigger an error on such TLS libraries) * ``--auth-nocache'' was not always correctly clearing username+password after a renegotiation * ensure that auth-token received from server is cleared if requested by the management interface ("forget password" or automatically via ``--management-forget-disconnect'') * in a setup without username+password, but with auth-token and auth-token-username pushed by the server, OpenVPN would start asking for username+password on token expiry. Fix. * using ``--auth-token`` together with ``--management-client-auth`` (on the server) would lead to TLS keys getting out of sync and client being disconnected. Fix. * management interface would sometimes get stuck if client and server try to write something simultaneously. Fix by allowing a limited level of recursion in virtual_output_callback() * fix management interface not returning ERROR:/SUCCESS: response on "signal SIGxxx" commands when in HOLD state * tls-crypt-v2: abort connection if client-key is too short * make man page agree with actual code on replay-window backtrag log message * remove useless empty line from CR_RESPONSE message ==== perl-IO-Socket-SSL ==== Version update (2.075 -> 2.077) - updated to 2.077 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.077 2022/11/21 - fix memory leak in session cache, thanks to genuaboro https://github.com/noxxi/p5-io-socket-ssl/pull/118 - more race conditions in tests fixed thanks to jddurand https://github.com/noxxi/p5-io-socket-ssl/issues/97 2.076 2022/11/12 - added curl like tracing based on contribution from jddurand https://github.com/noxxi/p5-io-socket-ssl/pull/117 - fixed race condition in t/sni_verify.t based on analysis from jddurand https://github.com/noxxi/p5-io-socket-ssl/issues/97 ==== perl-IO-Tty ==== Version update (1.16 -> 1.17) - updated to 1.17 see /usr/share/doc/packages/perl-IO-Tty/ChangeLog 1.17 2022-11-11 Todd Rinaldo <toddr(a)cpan.org> * Switch changelog entries to metacpan friendly format * #29 - Fix printf format conversion specifiers in croak to support size_t on all platforms * #11,#30 - Tty.pm: pre-allocate buffer for ioctl but leave it length 0 * #28 - Use $arg to match @ARGV in Makefile.PL ==== perl-Mojolicious ==== Version update (9.28 -> 9.30) - updated to 9.30 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.30 2022-11-22 - Added EXPERIMENTAL support for parsing and generating Link headers. - Added EXPERIMENTAL links method to Mojo::Headers. - Added EXPERIMENTAL header_params function to Mojo::Util. 9.29 2022-11-11 - Fixed a bug where promises returning promises were not handled correctly. (batman) ==== python ==== - Restore python-2.7.9-sles-disable-verification-by-default.patch for SLE-12. ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Restore python-2.7.9-sles-disable-verification-by-default.patch for SLE-12. ==== python-httpcore ==== - Skip failing test_request_with_content test (gh#encode/httpcore#622). ==== ruby-common ==== Version update (2.6 -> 3.2) - actually bump the version so we can require the newer version for ruby3.2 - replace `File.exists?` with `File.exist?` as the `File.exists?` is no longer supported in 3.2 ==== ruby3.1 ==== Version update (3.1.2 -> 3.1.3) Subpackages: libruby3_1-3_1 - remove the bundled gems workaround - update to 3.1.3 (boo#1205726 CVE-2021-33621) https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi… https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-1-3-released/ ==== rubygem-gem2rpm ==== - Fix filelist for 3.2.0 - added support for 3.2.0 ==== schily ==== Subpackages: cdrecord libcdrdeflt1_0 libdeflt1_0 libedc_ecc1_0 libedc_ecc_dec1_0 libfile1_0 libfind4_0 librmt1_0 librscg1_0 libscg1_0 libscgcmd1_0 libschily2_0 mkisofs readcd spax star - Update to release 2022.10.16 * bsh: Implement ^L support * libmdigest: Add support for BLAKE2 digests * mkisofs: No longer warn about Joliet being nonstandard. With the 2019 revision of ECMA 119, Joliet has been added as an annex to the standard. ==== sdl12_compat ==== Version update (1.2.52 -> 1.2.60) - Update to release 1.2.60 * SDL_GetWMInfo() now works with SDL2 builds from the 2.0.xx revisions. * SDL_GetWMInfo() no longer asserts if used on Wayland. * SDL_WM_SetIcon() no longer crashes on NULL icons, to match SDL-1.2. * Make SDL2's OpenGL 2D renderer work with apps that update their screen surface from background threads * SDL_ANYFORMAT is now supported * SDL2 game controllers can optionally be used with the 1.2 Joystick API. * Check for specific X11 symbols in the process at startup and force SDL2 to use X11 if so (fixes startup failures on Wayland). - Delete 0001-Use-SDL_PIXELFORMAT_RGB888-for-24-bit-surfaces.patch, 0001-Set-pixels-in-SDL_CreateYUVOverlay-Fix-164.patch, 0001-SDL_GetWMInfo-work-like-1.2-when-SDL_SetVideoMode-ha.patch ==== selinux-policy ==== Subpackages: selinux-policy-targeted - fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for network interface definition instead of /etc/sysconfig/network-scripts/, modified sysnetwork.fc to reflect that (bsc#1205580). ==== sqlite3 ==== Version update (3.39.4 -> 3.40.0) Subpackages: libsqlite3-0 sqlite3-tcl - update to 3.40.0: * https://sqlite.org/releaselog/3_40_0.html * Add support for compiling SQLite to WASM and running it in wen browsers. * Add the recovery extension that might be able to recover some content from a corrupt database file. * For more changes, see https://sqlite.org/releaselog/3_40_0.html ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-lang udev - Import commit 3bd3e4e6c1efe0d6df776107efde47e15e58fe96 d28e81d65c test: fix the default timeout values described in README.testsuite d921c83f53 meson: install test-kernel-install only when -Dkernel-install=true c3b6c4b584 tests: update install_suse_systemd() 3c77335b19 tests: install dmi-sysfs module on openSUSE df632130cd tests: install systemd-resolved on openSUSE - Add 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch until upstream issue #25468 is fixed. - Drop 6000-meson-install-test-kernel-install-only-when-Dkernel-.patch, the patch has been merged in the SUSE git repo. ==== systemd-rpm-macros ==== Version update (17 -> 18) - Bump to version 18 - Add %_user_tmpfilesdir macro ==== vim ==== Version update (9.0.0814 -> 9.0.0924) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.0924, fixes the following problems * Aws config files are not recognized. * ":!" does not switch to the alternate screen. * CTRL-Z at end of file is always dropped. * Build error. * "!ls" does not work. * Still a build error, tests are failing. * Memory leak with empty shell command. * Crash when using win_move_statusline() in another tab page. * Crash when dragging the statusline with a mapping. * Mouse drag test fails. * Crash when using win_move_separator() in other tab page. * If 'endofline' is set the CTRL-Z may be written in the wrong place. * The <Home> key in tmux doesn't work when 'term' is set to "xterm". (Dominique PellÃ©) * Various typos. * Wrong counts in macro comment. * Compiler warning for redefining HAVE_DUP. * Deprecation warning causes build failure. * Warning for missing return type. * The window title is not redrawn when 'endoffile' changes. * Wrong error when using extend() with funcref. * append() reports failure when not appending anything. * Compiler warnings for unused variables. * Test may fail depending on sequence of events. * Cannot change a slice of a const list. (Takumi KAGIYAMA) * deletebufline() does not always return 1 on failure. * Unicode range for Apple SF symbols is outdated. * VHS tape files are not recognized. * Handling 'statusline' errors is spread out. * Shell command with just space gives strange error. * Using assert_fails() may cause hit-enter prompt. * CI: not totally clear what MS-Windows version is used. * Help item for --log argument is not aligned nicely. * Terminal mouse test is a bit flaky. * Terminal mouse test is still flaky. * Crypt test is skipped if xxd is not found. * No proper test for what 9.0.0846 fixes. * Comment not located above the code it refers to. * "!!sort" in a closed fold sorts too many lines. * Compiler warning for unused variable. * Solution for "!!sort" in closed fold is not optimal. * Default value of 'endoffile' is wrong. * col() and charcol() only work for the current window. * Crash when using "!!" without a previous shell command. * Duplicate arguments are not always detected. * No test for what patch 8.2.2207 fixes. * Wildmenu redrawing code is spread out. * Bogus error when string used after :elseif. * Get E967 when using text property in quickfix window. (Sergey Vlasov) * Using freed memory when clearing augroup at more prompt. * Code is indented more than needed. * Using freed memory when executing mapclear at the more prompt. * Using freed memory when executing unmenu at the more prompt. * Using freed memory when executing delfunc at the more prompt. * Code is indented more than needed. * Using freed memory with :comclear while listing commands. * Coverity warns for dead code. * Unnecessary nesting in makefile. * Preprocessor indenting is off. * Cannot get the currently showing mouse shape. * Using freed memory after SpellFileMissing autocmd uses bwipe. * A silent mapping may cause dots on the command line. * Mouse shape remains in op-pending mode after failed change. * Informational message has an error message number. * Horizontal mouse scroll only works in the GUI. * Cannot easily try out what codes various keys produce. * Keycode check script has a few flaws. * No test for what patch 9.0.0827 fixes. * Virtual text below after match has wrong highlight. * May redraw when not needed, causing slow scrolling. * 'smoothscroll' cursor calculations wrong when 'number' is set. * Virtual text property highlight ignores window background. * File renamed twice in test; missing feature check. * Test for home key fails when 'term' is "tmux". * Clinical Quality Language files are not recognized. * With 'smoothscroll' cursor is one screen line too far down. (Ernie Rael) * The builtin terminals are in one long list. * Cursor moves too far with 'smoothscroll'. * Setting w_leftcol and handling side effects is confusing. * Some mouse scroll code is not in a good place. * Key code checker doesn't check modifyOtherKeys resource. * Various comment and indent flaws. * Virtual text after the line wraps when 'wrap' is off. * Mouse scroll code is not optimal. * Restoring window after WinScrolled may fail. * With 'smoothscroll' cursor may end up in wrong position. * Error message for layout change does not match action. * Setting lines in another buffer may not work well. * With 'smoothscroll' set mouse click position may be wrong. * libvterm with modifyOtherKeys level 2 does not match xterm. * Only a change in the current window triggers the WinScrolled event. * deletebufline() may move marks in the wrong window. * WinScrolled may trigger immediately when defined. * getbufline() is inefficient for getting a single line. * The WinScrolled autocommand event is not enough. * MS-Windows: modifier keys do not work with mouse scroll events. * Build failure with tiny features. * Cannot find an import prefixed with "s:". (Doug Kearns) * Missing defined(PROTO) in #ifdef. * Mermaid files are not recognized. * Second SIGWINCH signal may be ignored. ==== vlc ==== Version update (3.0.17.4 -> 3.0.18) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.18: + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - Add support for Y16 chroma. - Fix build of gme plugin. + Lua: - Fix script for vocaroo. - Fix script for youtube to allow throttled playback. + Service Discovery: Fix UPnP regression on Windows. + Video Output: Fix video placement with caopengllayer. + Misc: Fix password search in kwallet module. - Changes from version 3.0.18-rc: + Demux: - Major adaptive streaming update, notably for multiple timelies and webvtt. - Fix seeking with some fragmented MP4 files. - Add support for DVBSub inside MKV. - Fix some Flac files that could not be played. - Improve seeking in Ogg files. + Decoders: - Fix DxVA/D3D11 crashes on HEVC files with bogus references. - Fix libass storage size and crash. - Fix decoding errors on macOS hw decoding on some HEVC files. + Video Output: - Fix color regression with VAAPI/iOS and OpenGL output. - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV. - Fix Direct3d9 texture stretching. - Fix 10-bit accelerated video filters on macOS. + Playlist: Avoid playlist liveloop on failed/tiny items (temporize EOS bursts). + Misc: - Misc fixes for the extension UI on macOS. - Improve SMBv1 and SMBv2 behaviours. - Improve FTP compatibility. - Support RISC-V. - Fix AVI muxing for Windows Media Player compatibility. - Fix seeking speed on macOS. - Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream. - Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch: fixed upstream (commit 05445b74). - Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch: fixed upstream (commit b689202d). - add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20

1 0

Tumbleweed - Review of the week 2022/47
by Dominique Leuenberger / DimStar 26 Nov '22

26 Nov '22

Dear Tumbleweed users and hackers, Apologies for sending out the review a day late, somehow I was drowning myself in build fixes yesterday, lost track of time, and suddenly it was too late. But of course, you are all curious to hear what happened during this week and, most likely even more interested in what the future holds for us. We again published a full 7 snapshots (1118…1124), of which 1124 did not have a Changes file generated, and thus no announcement mail was sent out (which will need to be investigated). The most relevant changes in those snapshots were: * libinput 1.22.0: A new flat acceleration profile for trackpoints, making them more usable in some cases * ibus: switch to systemd service to start ibus daemon (boo#1201421) * Mesa 22.2.4 * bind 9.18.9 * Virtualbox 7.0.4 * MariaDB 10.10.2 * llvm 15.0.5 * Nodejs 19.1.0 * pipewire 0.3.60 * Samba 4.17.3 * Poppler 22.11.0 * Memcached: binary was moved to /usr/bin to be aligned with RHEL and Debian (some of our build scripts explicitly expect it in /usr/sbin, those need to be adjusted) * Apparmor 3.1.2 * Meson 0.64.0 Things that are currently in stagings or already passed and will be part of the next few snapshots: * VLC 3.0.18 * Meson 0.64.1 * Icewm 3.2.2 * SQLite 3.40.0 * Python setuptools 65.6.3 * Libgcrypt 1.10.1 * gawk 5.2.1 * rubygem-rspec 3.12.0: YaST is in the progress of catching up with the needed changes * Switch default from ffmpeg4 to ffmpeg5 (opencv3 is the last package missing) * Switch to openSSL 3 (Status can be tracked in Staging:N) Cheers, Dominique

1 0

Issues with Plasma Lockscreen and pam_u2f: Unlock needed for each monitor?
by Johannes Kastl 26 Nov '22

26 Nov '22

Hi all, this has been annoying me for several months/years and I always forgot to open up a bug report: I am using pam_u2f to unlock my Plasma/KDE lock screen using a U2F device (the predecessor of FIDO). ``` # /etc/pam.d/kde #%PAM-1.0 auth sufficient pam_u2f.so openasuser [...] ``` Works like a charm with sudo. Works like a charm with the lockscreen, if the laptop is not connected to an external monitor. Works with two external monitors connected, but it seems I need to go through the "press U2F device and click the 'unlock' button" process for each monitor. In my case, three times. Sometimes it seems to be enough to just have 2 of each, however: Once should be enough. This looks like a bug in Plasma, but what component should the bug be opened against? Anyone else experiencing the same? (I am not sure if this also explains why the fingerprint sensor is not working in plasma unlocking, but works for sudo, but that might be another story) Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

3 6

Illegal (e.g. patented) software in users home projects
by Stefan Brüns 26 Nov '22

26 Nov '22

Hi everyone, there are several users who are hosting packages like libx264 and libx265 in their home repositories. They do although it is clearly stated in https://en.opensuse.org/ openSUSE:Build_Service_application_blacklist[1] "This page lists a number of applications that neither can become part of openSUSE distribution **nor can be hosted** on the Build Service[2] for legal reasons." (emphasis mine) When pointed to the above page, often the users just give rude answers, and keep the packages. Apparently, the users are either not aware they put SUSE and the openSUSE project at risk, or they just do not care. Whats the best option here? Kind regards, Stefan -- Stefan Brüns / Bergstraße 21 / 52062 Aachen phone: +49 241 53809034 mobile: +49 151 50412019 -------- [1] https://en.opensuse.org/openSUSE:Build_Service_application_blacklist

4 4