April 2022 - openSUSE Factory - openSUSE Mailing Lists

openSUSE Leap 15.4 - RC code submission deadline was today
by Lubos Kocman 20 Apr '22

20 Apr '22

Hello openSUSE! today, on April 20th, 2022 15:00 CEST was the code submission deadline for both openSUSE Leap 15.4 RC and SUSE Linux Enterprise 15 SP4 Public RC. We will not accept any further feature requests and will focus on fixing higher-severity bugs. Rest will have to be handled as *maintenance updates. The deadline for documentation and translations is traditionally May 14th. More information about the schedule can be found in the *roadmap. Thank you very much for your understanding [0] https://en.opensuse.org/openSUSE:Maintenance_update_process [1] https://en.opensuse.org/openSUSE:Roadmap -- Best regards Lubos Kocman openSUSE Leap Release Manager

1 0

openSUSE Leap 15.4 - Beta code submission deadline is on 16th of February
by Lubos Kocman 20 Apr '22

20 Apr '22

Hello openSUSE! this is a friendly reminder that the code submission deadline for openSUSE Leap 15.4 Beta is February 16th. Same as the code submission deadline for SUSE Linux Enterprise 15 SP4 Public Beta. SLE 15 SP4 has additionally a feature cutoff deadline of February 2nd. This is when SUSE Linux Enterprise 15 SP4 should be feature-full and we should ideally receive only bug fixes later. The later features would be late features handled via a separate late feature process (ECO) https://en.opensuse.org/ECO . We're here to help you with these cases. This and more details in https://en.opensuse.org/openSUSE:Roadmap and https://en.opensuse.org/Feature_Planning_15.4 ** Two tips that I'd like to share with you ** If you're submitting a new package to openSUSE Leap: Please submit it directly to openSUSE Backports. I had to reject some new package submissions that were accidentally submitted to SUSE:SLE- 15*. Simply do osc sr ... openSUSE:Backports:SLE-15-SP4 If you're trying to update a SLE package please reference an issue in the SR text. Examples boo#123456 or feature jsc#SLE-12345 / jsc#OPENSUSE-12345. Submit requests without issue references will be rejected with an ask to resubmit with issue reference. How to report bugs? https://en.opensuse.org/openSUSE:Submitting_bug_reports How to report features? https://en.opensuse.org/Feature_Planning_15.4 For general guidance with submit requests please use https://en.opensuse.org/openSUSE:Packaging_for_Leap -- Best regards Lubos Kocman openSUSE Leap Release Manager

11 13

Update on next generation of SLE
by Stefan Behlert 20 Apr '22

20 Apr '22

(Sending to both openuse-project as well as opensuse-factory. Please keep discussions on the -project list to make life easier for all.) Moin, In the last months many people have brought up the topic of "When will the next SLE major version come out?". Today we would like to give you a first update on the plans. Since 2018, when SLE 15 was initially released a lot of things have changed, including requirements from users and customers, technologies, the speed of new versions of applications, languages and their libraries appearing. Also the connection between Leap and SLE has changed. And while some bits and pieces got better, we firmly believe we can do better. SLE 15 is a great general purpose operating system, yet challenges with some use cases, now places of deployment, and the type of enhancement requests show that it's time for a successor. With the next generation of Enterprise releases we want to tackle the above. Intending to do radical changes (regarding technology- but also design-wise) we choose "Adaptable Linux Platform" or short "ALP" as codename for that next generation. This indicates already that some things will be quite different than a "mere "SLE 15++ would be ;) First and foremost, ALP will be developed in the open. We are not going to put the pieces together internally and then share outside, as in the past. No, we are creating and building in the openSUSE Build Service - in a project next to you :). You get to directly see to see what is going on and participate more easaily. Another important point is that we intend to split what was a more generic, everything is closely intertwined into two parts: One smaller hardware enabling piece, a kind of "host OS", and the and the layer providing and supporting applications, which will be container (and VM) based. You might say "This is very generic, can you tell us more?" - of course. In the upcoming weeks more and more will crystalize, and we will share as quickly and regularly as possible. This is just a first heads-up to inform you that we are in the process of setting everything up - from project to feedback channels, from documentation to testing. Of course, you will have lots of other questions - how will contribution work, what impacts this has on LEAP and get-o-o, how migration could work, and many more. We kindly ask you for a little bit of patience. We promise we will share as soon as possible more details. ciao, Stefan -- Stefan Behlert, SUSE Software Solutions Product Management SUSE Linux Enterprise Maxfeldstr. 5, D-90409 Nuernberg, Germany SUSE Software Solutions Germany GmbH, GF: Ivo Totev (HRB 36809, AG Nuernberg)

3 2

Tumbleweed: qt5-creator broken dependencies
by Markus Koßmann 20 Apr '22

20 Apr '22

Hallo; qt5-creator seems to need a rebuild. Either with dependencies libclang13 >= 13.0.1 or with libclang13 = 14.0.0 # zypper in qt5-creator Loading repository data... Reading installed packages... Resolving package dependencies... Problem: the to be installed qt5-creator-7.0.0-1.1.x86_64 requires 'libclang13 = 13.0.1', but this requirement cannot be provided not installable providers: llvm13- libclang13-13.0.1-4.1.i586[download.opensuse.org-oss] llvm13-libclang13-13.0.1-4.1.x86_64[download.opensuse.org- oss] llvm13-libclang13-13.0.1-4.1.i586[https-download.opensuse.org-2cacbc34] llvm13-libclang13-13.0.1-4.1.x86_64[https-download.opensuse.org-2cacbc34] Solution 1: deinstallation of libclang13-14.0.0-1.2.x86_64 Solution 2: do not install qt5-creator-7.0.0-1.1.x86_64 Solution 3: break qt5-creator-7.0.0-1.1.x86_64 by ignoring some of its dependencies

4 4

Re: firefox does not start after update to Tumbleweed 20220410
by Michael Hamilton 20 Apr '22

20 Apr '22

On Wednesday 20 April 2022, Berthold Höllmann wrote: > Michael Hamilton <michael(a)actrix.gen.nz> writes: > > > On Wednesday 13 April 2022, Werner LEMBERG wrote: > >> > >> > it crashes only with some specific fonts e.g. Noto Sans, Open Sans, > >> > ... Font DeJaVu Sans works > >> > >> Maybe > >> > >> https://gitlab.freedesktop.org/freetype/freetype/-/merge_requests/158 > >> > >> helps. Still waiting for confirmation before applying to FreeType's > >> git... > >> > >> A temporary alternative would be to build FreeType without SVG > >> support. > >> > >> > >> Werner > >> > > > > This can't be happening to everyone (firefox crashing) or there would be > > more complaints. So why is it happening to some of us? Are we missing > > or using fonts or libraries others are not? > > > > The only clue I have is both firefox and pycharm opened > > /usr/share/fonts/truetype/SourceCodePro-Regular.otf and fell over right > > afterward. > > > > If a fix is not imminent, is there are there libraries or fonts I can remove > > to work around the problem. I've currently moved /etc/fonts to > > /etc/fonts.disabled (but that causes issues with some PDF documents > > when viewed in okular). > > I uninstalled both packages containing the SourceCodePro font from my > system (texlive-sourcecodepro-fonts, adobe-sourcecodepro-fonts) and the > problem seems to be gone for now. > > I really would prefer reinstalling the packages after an upstream bugfix > solves the problem. > > Berthold Thanks Berthold, that's the hint I needed to fix my own desktop. Rather uninstall the font package, I've added the following rejectFont to fontconfig in /etc/fonts/local.conf <selectfont> <rejectfont> <pattern> <patelt name="family" > <string>Source Code Pro</string> </patelt> </pattern> </rejectfont> </selectfont> The family string was retrieved using fc-scan: % fc-scan /usr/share/fonts/truetype/SourceCodePro-Regular.otf --format='%{family}\n' The above was all based on the docs at: https://wiki.archlinux.org/title/font_configuration That's solved the problem until the actual fix gets released. Michael

2 1

openSUSE Release Engineering meeting 20.04.2022
by Lubos Kocman 20 Apr '22

20 Apr '22

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DocB, ddemaio, lkocman, DimStar, Dirk, maxlin, Maurizio (m4u) ## Leap Heads up !!! Update on SLE Next on project@ https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/… TODAY (April 20th) at 15:00 is the code submission deadline for Leap 15.4 RC. Only bugfixes afterwards. https://en.opensuse.org/openSUSE:Roadmap What about the backlog queue? We have to process all that arrived until ~15:00, we can't easily have different deadline than SLES 15 SP4 Public RC (also today). Ask from QA: https://progress.opensuse.org/issues/109223 Update description of job groups with insufficient description Leap 15.5 - we have to aim for very early planning announced Focusing on Leap Micro to SLE Micro migration in spare time * Having a discussion about existing migrated systems from CentOS 7 to Leap 15.X and how does Leap 15.5 being the last release and transition to ALP fits in. Users seem to be worried. We have several possible ways: provide SP6/SP7 updates to Leap, some nice offer to SLES migration (probably not an option for most), easy migration to ALP ... let's see what's possible and what not. * Traditional Leap user, and their journey after 2023. These are two scenarios that I'd like to have active discussion on ^ ## openSUSE Tumbleweed WSL/Tumbleweeed - openQA somehow stopped working 9 months ago https://openqa.opensuse.org/group_overview/68 do we know why? This has been asked by Jose (Cloud/WSL QA) openSUSE:Factory build fail stats: 177 failed, 11 unresolvable (last week: 197/17) https://tinyurl.com/ysy4nnnz * Easter-weekend: Tumbleweed was rolling, but with very few inputs (the number of SRs was lower and could thus still be handled) * Kernel 5.17.2 * Moved from LLVM13 to LLVM14 ## Richard (Kubic/TW MicroOS) Not available Podman 4.0.x is in Factory Pods in Podman 4.0.x are currently broken, due to catatonit 0.1.7 not being in Factory. It's on the way, meanwhile rolling back is a valid workaround openQA tests for Pods in Podman is written, reviewed, just being held back until catatonit 0.1.7 lands in Factory Experimenting with MicroOS Desktop (GNOME) SelfInstalling images. If experiments go well, next step will be to use TIU for OS updates. Ultimately may obsolete the current YaST-based installation method for MicroOS. lkocman: should I file inclusion requests for Leap/SLE Micro? Richard: no plan to have it there as of now. Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown(a)suse.com if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome. ## Max * Deleted duplicated SLE package rebuilt in Backports project, there is exceptions of multibuild package, because some specific build flavor has enabled on openSUSE only * Look into rpmlint issue, while debugging I found that it seem to we did introduce entry to DBUSServices.WhiteList in the wrong format therefore whitelisting doesn't work for kpmcore and others, bsc#1198521 * Tweaked openqa settings for disabling RNG device on upgrade tests for Leap * Build fail stats in Leap 15.4: 42 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures. Max: looking into pending submissions on Staging lkocman: I'll re-check status of the SLE submissions prior the RC deadline. Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios. ## Guillaume - Arm Not available Tumbleweed: * Factory:ARM recovered from GCC12 build failure. A new snapshot should go to openQA later today or tomorrow. * Upcoming GCC 12 tested for aarch64: https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:… Leap 15.4: * aarch64: * Go compiler has been updated in SLE. https://bugzilla.opensuse.org/show_bug.cgi?id=1183043 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkcoman: Correction trello shows me that 2/4 items are still pending). lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this ## Sarah - s390x Not available Tumbleweed: * Is rolling openSUSE Leap Beta: * no issues at the moment * fakeroot updated, that it is buildable for s390x again * arpack-ng requires 12GB of memory for successful builds (constraints expanded) lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted ## Doug * TSP * Temporary suspension of TSP until we can find a payment solution * Had meeting with accounts payable (need other experts on call) * Another meeting schedule for beginning of next week * oSC22 * 108 registrations, 63 submissions, 39 hours * Approving talks * Have mock schedule and feedback from people on talk times * Catering offer recieved (hope to approve it this week) * Meeting today at Z-Bau lkocman: I'd really like to see a panel discussion with our ALP steering comittee on the conference (similar to Fedora in the past). * OSCAL oSC22 * CfP goes until April 26 * LAS talk next week about Leap Micro * GSoC is May 12 deadline Git Hub maintainer day/week? mentioned on the #oscc ## Dirk * switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746) * fixed file(1) speedup regression * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. In backlog: https://code.opensuse.org/leap/features/issue/17 ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marina or Marcus, Maurizio (m4u)) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt - Marcus: 15.3 openQA is ok again. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb Max alrady removed packages from Backports Maurizio: Most packages from the list for 15-SP3 on the ticket are now staged, waiting to be sent for QA testing. Update on status to come as soon as package updates are released but it will likely take time. Leap Micro 5.2 - Maintenance setup should be rather small, as we do override only branding. https://build.opensuse.org/project/show/openSUSE:Leap:Micro:5.2 Lubos to open a progres-o-o ticket for the maintenance update. Marcus would also prefer as small overhead as possible. Adrian: we could have a policy that if there is an updated for Micro it should go only to the official code-stream even if the package didn't exist there yet. Raised by Marcus: removal of SUSEConnect in favor of suseconnect-ng lkocman: the obsoletes are set correctly, none of packages is installed by default. And installation of suseconnect-ng currently removes SUSEConnect. Documentation was updated accordingly. In my opinion this is already good enough. https://en.opensuse.org/SDB:How_to_migrate_to_SLE ## Adrian - OBS feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week)

2 1

New Tumbleweed snapshot 20220419 released!
by Dominique Leuenberger 20 Apr '22

20 Apr '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: acl apparmor audit audit-secondary elfutils-debuginfod file freetype2 ghostscript kernel-source (5.17.2 -> 5.17.3) libapparmor libcap (2.63 -> 2.64) libnl3 (3.5.0 -> 3.6.0) libstorage-ng (4.5.3 -> 4.5.4) pipewire (0.3.49 -> 0.3.50) plasma-framework plasma5-pk-updates rpm-config-SUSE (20220317 -> 20220414) sddm tigervnc timezone-java xfce4-panel (4.16.3 -> 4.16.4) xfce4-terminal (1.0.0 -> 1.0.1) xz yast2-trans (84.87.20220410.9099c51b0c -> 84.87.20220415.000649bca9) === Details === ==== acl ==== Subpackages: libacl1 libacl1-32bit - Disable -D_FORTIFY_SOURCE=3 for now as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964 ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531) ==== audit ==== Subpackages: libaudit1 libaudit1-32bit libauparse0 - Modernize specfile constructs. ==== audit-secondary ==== Subpackages: audit python3-audit system-group-audit - Drop buildrequire on C++ compiler. - Modernize specfile constructs. ==== elfutils-debuginfod ==== - Change to systemd-sysusers * Add elfutils-debuginfod.sysusers ==== file ==== Subpackages: file-magic libmagic1 - update file-5.41-cache-regexps.patch to fix cache offset miscalculation (bsc#1197780) ==== freetype2 ==== Subpackages: freetype2-devel libfreetype6 libfreetype6-32bit - fix segfault in some applications boo#1198497 add freetype-2.12.0-cff_slot_load-segfault.patch ==== ghostscript ==== Subpackages: ghostscript-x11 - Do no longer require apparmor-abstractions, it is not mandatory to use Ghostscript (bsc#1134289). ==== kernel-source ==== Version update (5.17.2 -> 5.17.3) - Linux 5.17.3 (bsc#1012628). - lib/logic_iomem: correct fallback config references (bsc#1012628). - um: fix and optimize xor select template for CONFIG64 and timetravel mode (bsc#1012628). - rtc: wm8350: Handle error for wm8350_register_irq (bsc#1012628). - net: dsa: felix: fix possible NULL pointer dereference (bsc#1012628). - mm: kfence: fix objcgs vector allocation (bsc#1012628). - KVM: x86/pmu: Use different raw event masks for AMD and Intel (bsc#1012628). - KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() (bsc#1012628). - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (bsc#1012628). - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (bsc#1012628). - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (bsc#1012628). - drm: Add orientation quirk for GPD Win Max (bsc#1012628). - Bluetooth: hci_sync: Fix compilation warning (bsc#1012628). - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1012628). - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1012628). - drm/amd/display: Add signal type check when verify stream backends same (bsc#1012628). - drm/amdkfd: enable heavy-weight TLB flush on Arcturus (bsc#1012628). - drm/edid: remove non_desktop quirk for HPN-3515 and LEN-B800 (bsc#1012628). - drm/edid: improve non-desktop quirk logging (bsc#1012628). - Bluetooth: hci_event: Ignore multiple conn complete events (bsc#1012628). - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (bsc#1012628). - drm/amd/display: Fix memory leak (bsc#1012628). - drm/amd/display: Use PSR version selected during set_psr_caps (bsc#1012628). - usb: gadget: tegra-xudc: Do not program SPARAM (bsc#1012628). - usb: gadget: tegra-xudc: Fix control endpoint's definitions (bsc#1012628). - usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (bsc#1012628). - ptp: replace snprintf with sysfs_emit (bsc#1012628). - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (bsc#1012628). - selftests, xsk: Fix bpf_res cleanup test (bsc#1012628). - net/mlx5e: TC, Hold sample_attr on stack instead of pointer (bsc#1012628). - drm/amdkfd: Don't take process mutex for svm ioctls (bsc#1012628). - drm/amdkfd: Ensure mm remain valid in svm deferred_list work (bsc#1012628). - drm/amdkfd: svm range restore work deadlock when process exit (bsc#1012628). - drm/amdgpu: Fix an error message in rmmod (bsc#1012628). - mlxsw: spectrum: Guard against invalid local ports (bsc#1012628). - RDMA/rtrs-clt: Do stop and failover outside reconnect work (bsc#1012628). - powerpc/xive: Export XIVE IPI information for online-only processors (bsc#1012628). - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (bsc#1012628). - ath11k: fix kernel panic during unload/load ath11k modules (bsc#1012628). - ath11k: pci: fix crash on suspend if board file is not found (bsc#1012628). - ath11k: mhi: use mhi_sync_power_up() (bsc#1012628). - net/smc: Send directly when TCP_CORK is cleared (bsc#1012628). - drm/bridge: Add missing pm_runtime_put_sync (bsc#1012628). - bpf: Make dst_port field in struct bpf_sock 16-bit wide (bsc#1012628). - scsi: mvsas: Replace snprintf() with sysfs_emit() (bsc#1012628). - scsi: bfa: Replace snprintf() with sysfs_emit() (bsc#1012628). - drm/v3d: fix missing unlock (bsc#1012628). - power: supply: axp20x_battery: properly report current when discharging (bsc#1012628). - mt76: mt7921: fix crash when startup fails (bsc#1012628). - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (bsc#1012628). - i40e: Add sending commands in atomic context (bsc#1012628). - cfg80211: don't add non transmitted BSS to 6GHz scanned channels (bsc#1012628). - libbpf: Fix build issue with llvm-readelf (bsc#1012628). - ipv6: make mc_forwarding atomic (bsc#1012628). - ref_tracker: implement use-after-free detection (bsc#1012628). - net: initialize init_net earlier (bsc#1012628). - powerpc: Set crashkernel offset to mid of RMA region (bsc#1012628). - drm/amdgpu: Fix recursive locking warning (bsc#1012628). - scsi: smartpqi: Fix rmmod stack trace (bsc#1012628). - scsi: smartpqi: Fix kdump issue when controller is locked up (bsc#1012628). - PCI: aardvark: Fix support for MSI interrupts (bsc#1012628). - kvm: selftests: aarch64: fix assert in gicv3_access_reg (bsc#1012628). - kvm: selftests: aarch64: pass vgic_irq guest args as a pointer (bsc#1012628). - kvm: selftests: aarch64: fix the failure check in kvm_set_gsi_routing_irqchip_check (bsc#1012628). - kvm: selftests: aarch64: fix some vgic related comments (bsc#1012628). - kvm: selftests: aarch64: use a tighter assert in vgic_poke_irq() (bsc#1012628). - iommu/arm-smmu-v3: fix event handling soft lockup (bsc#1012628). - usb: ehci: add pci device support for Aspeed platforms (bsc#1012628). - KVM: arm64: Do not change the PMU event filter after a VCPU has run (bsc#1012628). - libbpf: Fix accessing syscall arguments on powerpc (bsc#1012628). - libbpf: Fix accessing the first syscall argument on arm64 (bsc#1012628). - libbpf: Fix accessing the first syscall argument on s390 (bsc#1012628). - PCI: endpoint: Fix alignment fault error in copy tests (bsc#1012628). - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH (bsc#1012628). - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (bsc#1012628). - scsi: mpi3mr: Fix deadlock while canceling the fw event (bsc#1012628). - scsi: mpi3mr: Fix reporting of actual data transfer size (bsc#1012628). - scsi: mpi3mr: Fix memory leaks (bsc#1012628). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1012628). - power: supply: axp288-charger: Set Vhold to 4.4V (bsc#1012628). - drm/sprd: fix potential NULL dereference (bsc#1012628). - drm/sprd: check the platform_get_resource() return value (bsc#1012628). - drm/amd/display: reset lane settings after each PHY repeater LT (bsc#1012628). - net/mlx5e: Disable TX queues before registering the netdev (bsc#1012628). - HID: apple: Report Magic Keyboard 2021 battery over USB (bsc#1012628). - HID: apple: Report Magic Keyboard 2021 with fingerprint reader battery over USB (bsc#1012628). - usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() (bsc#1012628). - iwlwifi: mvm: Correctly set fragmented EBS (bsc#1012628). - iwlwifi: fix small doc mistake for iwl_fw_ini_addr_val (bsc#1012628). - iwlwifi: mvm: move only to an enabled channel (bsc#1012628). - ipv6: annotate some data-races around sk->sk_prot (bsc#1012628). - drm/msm/dsi: Remove spurious IRQF_ONESHOT flag (bsc#1012628). - x86/mce: Work around an erratum on fast string copy instructions (bsc#1012628). - rtw89: fix RCU usage in rtw89_core_txq_push() (bsc#1012628). - ath11k: Fix frames flush failure caused by deadlock (bsc#1012628). - ipv4: Invalidate neighbour for broadcast address upon address addition (bsc#1012628). - rtw88: change rtw_info() to proper message level (bsc#1012628). - dm ioctl: prevent potential spectre v1 gadget (bsc#1012628). - dm: requeue IO if mapping table not yet available (bsc#1012628). - drm/amdkfd: make CRAT table missing message informational only (bsc#1012628). - vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA (bsc#1012628). - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (bsc#1012628). - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (bsc#1012628). - scsi: pm8001: Fix tag values handling (bsc#1012628). - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (bsc#1012628). - scsi: pm8001: Fix tag leaks on error (bsc#1012628). - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (bsc#1012628). - mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (bsc#1012628). - mctp: make __mctp_dev_get() take a refcount hold (bsc#1012628). - powerpc/64s/hash: Make hash faults work in NMI context (bsc#1012628). - mt76: mt7615: Fix assigning negative values to unsigned variable (bsc#1012628). - power: supply: axp288_charger: Use acpi_quirk_skip_acpi_ac_and_battery() (bsc#1012628). - power: supply: axp288_fuel_gauge: Use acpi_quirk_skip_acpi_ac_and_battery() (bsc#1012628). - scsi: aha152x: Fix aha152x_setup() __setup handler return value (bsc#1012628). - scsi: hisi_sas: Free irq vectors in order for v3 HW (bsc#1012628). - scsi: hisi_sas: Limit users changing debugfs BIST count value (bsc#1012628). - net/smc: correct settings of RMB window update limit (bsc#1012628). - mips: ralink: fix a refcount leak in ill_acc_of_setup() (bsc#1012628). - iavf: stop leaking iavf_status as "errno" values (bsc#1012628). - macvtap: advertise link netns via netlink (bsc#1012628). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1012628). - tuntap: add sanity checks about msg_controllen in sendmsg (bsc#1012628). - Bluetooth: mediatek: fix the conflict between mtk and msft vendor event (bsc#1012628). - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (bsc#1012628). - Bluetooth: use memset avoid memory leaks (bsc#1012628). - bnxt_en: Eliminate unintended link toggle during FW reset (bsc#1012628). - PCI: endpoint: Fix misused goto label (bsc#1012628). - MIPS: fix fortify panic when copying asm exception handlers (bsc#1012628). - powerpc/code-patching: Pre-map patch area (bsc#1012628). - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (bsc#1012628). - powerpc/secvar: fix refcount leak in format_show() (bsc#1012628). - scsi: libfc: Fix use after free in fc_exch_abts_resp() (bsc#1012628). - platform/x86: x86-android-tablets: Depend on EFI and SPI (bsc#1012628). - can: isotp: set default value for N_As to 50 micro seconds (bsc#1012628). - can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() (bsc#1012628). - riscv: Fixed misaligned memory access. Fixed pointer comparison (bsc#1012628). - net: account alternate interface name memory (bsc#1012628). - net: limit altnames to 64k total (bsc#1012628). - net/mlx5e: Remove overzealous validations in netlink EEPROM query (bsc#1012628). - platform/x86: hp-wmi: Fix SW_TABLET_MODE detection method (bsc#1012628). - platform/x86: hp-wmi: Fix 0x05 error code reported by several WMI calls (bsc#1012628). - net: sfp: add 2500base-X quirk for Lantech SFP module (bsc#1012628). - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (bsc#1012628). - xen/usb: harden xen_hcd against malicious backends (bsc#1012628). - mt76: fix monitor mode crash with sdio driver (bsc#1012628). - xtensa: fix DTC warning unit_address_format (bsc#1012628). - iwlwifi: mei: fix building iwlmei (bsc#1012628). - MIPS: ingenic: correct unit node address (bsc#1012628). - Bluetooth: Fix use after free in hci_send_acl (bsc#1012628). - netfilter: conntrack: revisit gc autotuning (bsc#1012628). - netlabel: fix out-of-bounds memory accesses (bsc#1012628). - ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1012628). - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1012628). - lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option (bsc#1012628). - init/main.c: return 1 from handled __setup() functions (bsc#1012628). - minix: fix bug when opening a file with O_DIRECT (bsc#1012628). - clk: si5341: fix reported clk_rate when output divider is 2 (bsc#1012628). - clk: mediatek: Fix memory leaks on probe (bsc#1012628). - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (bsc#1012628). - staging: vchiq_core: handle NULL result of find_service_by_handle (bsc#1012628). - phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use (bsc#1012628). - phy: amlogic: meson8b-usb2: Use dev_err_probe() (bsc#1012628). - phy: amlogic: meson8b-usb2: fix shared reset control use (bsc#1012628). - clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 (bsc#1012628). - cpufreq: CPPC: Fix performance/frequency conversion (bsc#1012628). - opp: Expose of-node's name in debugfs (bsc#1012628). - staging: wfx: apply the necessary SDIO quirks for the Silabs WF200 (bsc#1012628). - staging: wfx: fix an error handling in wfx_init_common() (bsc#1012628). - w1: w1_therm: fixes w1_seq for ds28ea00 sensors (bsc#1012628). - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (bsc#1012628). - NFSv4: Protect the state recovery thread against direct reclaim (bsc#1012628). - habanalabs: fix possible memory leak in MMU DR fini (bsc#1012628). - habanalabs: reject host map with mmu disabled (bsc#1012628). - habanalabs/gaudi: handle axi errors from NIC engines (bsc#1012628). - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (bsc#1012628). - clk: ti: Preserve node in ti_dt_clocks_register() (bsc#1012628). - clk: Enforce that disjoints limits are invalid (bsc#1012628). - SUNRPC/xprt: async tasks mustn't block waiting for memory (bsc#1012628). - SUNRPC: remove scheduling boost for "SWAPPER" tasks (bsc#1012628). - NFS: swap IO handling is slightly different for O_DIRECT IO (bsc#1012628). - NFS: swap-out must always use STABLE writes (bsc#1012628). - x86: Annotate call_on_stack() (bsc#1012628). - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy (bsc#1012628). - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (bsc#1012628). - virtio_console: eliminate anonymous module_init & module_exit (bsc#1012628). - jfs: prevent NULL deref in diFree (bsc#1012628). - SUNRPC: Fix socket waits for write buffer space (bsc#1012628). - NFS: nfsiod should not block forever in mempool_alloc() (bsc#1012628). - NFS: Avoid writeback threads getting stuck in mempool_alloc() (bsc#1012628). - selftests: net: Add tls config dependency for tls selftests (bsc#1012628). - parisc: Fix CPU affinity for Lasi, WAX and Dino chips (bsc#1012628). - parisc: Fix patch code locking and flushing (bsc#1012628). - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (bsc#1012628). - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (bsc#1012628). - Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register() (bsc#1012628). - Drivers: hv: vmbus: Fix potential crash on module unload (bsc#1012628). - netfilter: bitwise: fix reduce comparisons (bsc#1012628). - Revert "NFSv4: Handle the special Linux file open access mode" (bsc#1012628). - NFSv4: fix open failure with O_ACCMODE flag (bsc#1012628). - scsi: core: scsi_logging: Fix a BUG (bsc#1012628). - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (bsc#1012628). - scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (bsc#1012628). - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (bsc#1012628). - vdpa: mlx5: prevent cvq work from hogging CPU (bsc#1012628). - net: sfc: add missing xdp queue reinitialization (bsc#1012628). - net/tls: fix slab-out-of-bounds bug in decrypt_internal (bsc#1012628). - vrf: fix packet sniffing for traffic originating from ip tunnels (bsc#1012628). - skbuff: fix coalescing for page_pool fragment recycling (bsc#1012628). - Revert "net: dsa: stop updating master MTU from master.c" (bsc#1012628). - ice: Clear default forwarding VSI during VSI release (bsc#1012628). - ice: Fix MAC address setting (bsc#1012628). - mctp: Fix check for dev_hard_header() result (bsc#1012628). - mctp: Use output netdev to allocate skb headroom (bsc#1012628). - net: ipv4: fix route with nexthop object delete warning (bsc#1012628). - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (bsc#1012628). - drm/imx: imx-ldb: Check for null pointer after calling kmemdup (bsc#1012628). - drm/imx: Fix memory leak in imx_pd_connector_get_modes (bsc#1012628). - drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe (bsc#1012628). - regulator: rtq2134: Fix missing active_discharge_on setting (bsc#1012628). - spi: rpc-if: Fix RPM imbalance in probe error path (bsc#1012628). - regulator: atc260x: Fix missing active_discharge_on setting (bsc#1012628). - arch/arm64: Fix topology initialization for core scheduling (bsc#1012628). - bnxt_en: Synchronize tx when xdp redirects happen on same ring (bsc#1012628). - bnxt_en: reserve space inside receive page for skb_shared_info (bsc#1012628). - bnxt_en: Prevent XDP redirect from running when stopping TX queue (bsc#1012628). - sfc: Do not free an empty page_ring (bsc#1012628). - RDMA/mlx5: Don't remove cache MRs when a delay is needed (bsc#1012628). - RDMA/mlx5: Add a missing update of cache->last_add (bsc#1012628). - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (bsc#1012628). - cifs: fix potential race with cifsd thread (bsc#1012628). - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (bsc#1012628). - sctp: count singleton chunks in assoc user stats (bsc#1012628). - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (bsc#1012628). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (bsc#1012628). - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (bsc#1012628). - ipv6: Fix stats accounting in ip6_pkt_drop (bsc#1012628). - ice: synchronize_rcu() when terminating rings (bsc#1012628). - ice: xsk: fix VSI state check in ice_xsk_wakeup() (bsc#1012628). - ice: clear cmd_type_offset_bsz for TX rings (bsc#1012628). - net: openvswitch: don't send internal clone attribute to the userspace (bsc#1012628). - net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (bsc#1012628). - net: openvswitch: fix leak of nested actions (bsc#1012628). - rxrpc: fix a race in rxrpc_exit_net() (bsc#1012628). - net: sfc: fix using uninitialized xdp tx_queue (bsc#1012628). - net: phy: mscc-miim: reject clause 45 register accesses (bsc#1012628). - qede: confirm skb is allocated before using (bsc#1012628). - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (bsc#1012628). - drm/amd/display: Fix for dmub outbox notification enable (bsc#1012628). - drm/amd/display: Remove redundant dsc power gating from init_hw (bsc#1012628). - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (bsc#1012628). - drbd: Fix five use after free bugs in get_initial_state (bsc#1012628). - scsi: sd: sd_read_cpr() requires VPD pages (bsc#1012628). - scsi: ufs: ufshpb: Fix a NULL check on list iterator (bsc#1012628). - io_uring: nospec index for tags on files update (bsc#1012628). - io_uring: don't touch scm_fp_list after queueing skb (bsc#1012628). - SUNRPC: Handle ENOMEM in call_transmit_status() (bsc#1012628). - SUNRPC: Handle low memory situations in call_status() (bsc#1012628). - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (bsc#1012628). - iommu/omap: Fix regression in probe for NULL pointer dereference (bsc#1012628). - perf unwind: Don't show unwind error messages when augmenting frame pointer stack (bsc#1012628). - perf: arm-spe: Fix perf report --mem-mode (bsc#1012628). - perf tools: Fix perf's libperf_print callback (bsc#1012628). - perf session: Remap buf if there is no space for event (bsc#1012628). - arm64: Add part number for Arm Cortex-A78AE (bsc#1012628). - scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (bsc#1012628). - scsi: ufs: ufs-pci: Add support for Intel MTL (bsc#1012628). - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (bsc#1012628). - mmc: block: Check for errors after write on SPI (bsc#1012628). - mmc: mmci: stm32: correctly check all elements of sg list (bsc#1012628). - mmc: renesas_sdhi: special 4tap settings only apply to HS400 (bsc#1012628). - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (bsc#1012628). - mmc: core: Fixup support for writeback-cache for eMMC and SD (bsc#1012628). - lz4: fix LZ4_decompress_safe_partial read out of bound (bsc#1012628). - highmem: fix checks in __kmap_local_sched_{in,out} (bsc#1012628). - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (bsc#1012628). - mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1012628). - io_uring: don't check req->file in io_fsync_prep() (bsc#1012628). - io_uring: defer splice/tee file validity check until command issue (bsc#1012628). - io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF (bsc#1012628). - io_uring: fix race between timeout flush and removal (bsc#1012628). - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (bsc#1012628). - btrfs: fix qgroup reserve overflow the qgroup limit (bsc#1012628). - btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone (bsc#1012628). - btrfs: remove device item and update super block in the same transaction (bsc#1012628). - btrfs: avoid defragging extents whose next extents are not targets (bsc#1012628). - btrfs: prevent subvol with swapfile from being deleted (bsc#1012628). - spi: core: add dma_map_dev for __spi_unmap_msg() (bsc#1012628). - cifs: force new session setup and tcon for dfs (bsc#1012628). - qed: fix ethtool register dump (bsc#1012628). - arm64: patch_text: Fixup last cpu should be master (bsc#1012628). - RDMA/hfi1: Fix use-after-free bug for mm struct (bsc#1012628). - drbd: fix an invalid memory access caused by incorrect use of list iterator (bsc#1012628). - gpio: Restrict usage of GPIO chip irq members before initialization (bsc#1012628). - x86/msi: Fix msi message data shadow struct (bsc#1012628). - x86/mm/tlb: Revert retpoline avoidance approach (bsc#1012628). - perf/x86/intel: Don't extend the pseudo-encoding to GP counters (bsc#1012628). - ata: sata_dwc_460ex: Fix crash due to OOB write (bsc#1012628). - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (bsc#1012628). - perf/core: Inherit event_caps (bsc#1012628). - irqchip/gic-v3: Fix GICR_CTLR.RWP polling (bsc#1012628). - fbdev: Fix unregistering of framebuffers without device (bsc#1012628). - amd/display: set backlight only if required (bsc#1012628). - drm/panel: ili9341: fix optional regulator handling (bsc#1012628). - drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (bsc#1012628). - drm/amdgpu/display: change pipe policy for DCN 2.1 (bsc#1012628). - drm/amdgpu/smu10: fix SoC/fclk units in auto mode (bsc#1012628). - drm/amdgpu/vcn: Fix the register setting for vcn1 (bsc#1012628). - drm/amdkfd: Create file descriptor after client is added to smi_clients list (bsc#1012628). - drm/amdgpu: don't use BACO for reset in S3 (bsc#1012628). - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (bsc#1012628). - Revert "ACPI: processor: idle: Only flush cache on entering C3" (bsc#1012628). - drm/amdkfd: Fix variable set but not used warning (bsc#1012628). - net/smc: send directly on setting TCP_NODELAY (bsc#1012628). - Revert "selftests: net: Add tls config dependency for tls selftests" (bsc#1012628). - bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide (bsc#1012628). - selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port (bsc#1012628). - bpf: Treat bpf_sk_lookup remote_port as a 2-byte field (bsc#1012628). - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 (bsc#1012628). - perf python: Fix probing for some clang command line options (bsc#1012628). - tools build: Filter out options and warnings not supported by clang (bsc#1012628). - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts (bsc#1012628). - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (bsc#1012628). - KVM: avoid NULL pointer dereference in kvm_dirty_ring_push (bsc#1012628). - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() (bsc#1012628). - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (bsc#1012628). - Revert "powerpc: Set max_mapnr correctly" (bsc#1012628). - x86/bug: Prevent shadowing in __WARN_FLAGS (bsc#1012628). - objtool: Fix SLS validation for kcov tail-call replacement (bsc#1012628). - sched/core: Fix forceidle balancing (bsc#1012628). - sched: Teach the forced-newidle balancer about CPU affinity limitation (bsc#1012628). - x86,static_call: Fix __static_call_return0 for i386 (bsc#1012628). - x86/extable: Prefer local labels in .set directives (bsc#1012628). - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling (bsc#1012628). - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (bsc#1012628). - irqchip/gic, gic-v3: Prevent GSI to SGI translations (bsc#1012628). - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (bsc#1012628). - static_call: Don't make __static_call_return0 static (bsc#1012628). - io_uring: move read/write file prep state into actual opcode handler (bsc#1012628). - io_uring: propagate issue_flags state down to file assignment (bsc#1012628). - io_uring: defer file assignment (bsc#1012628). - io_uring: drop the old style inflight file tracking (bsc#1012628). - Update config files. - commit a63605c - Update config files: set CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE=y (bsc#1198276) Using efivars as the pstore default backend is dangerous, as it might fill up quickly with dumps, eventually resulting in a non-bootable system. The feature can be enabled manually via efi_pstore.pstore_disable=0 option. - commit 458c79b - ALSA: memalloc: Add fallback SG-buffer allocations for x86 (bsc#1198248). - commit c87e719 - Update patches.suse/x86-pm-save-the-msr-validity-status-at-context-setup.patch (bsc#1198400). - Update patches.suse/x86-speculation-restore-speculation-related-msrs-during-s3-resume.patch (bsc#1198400). - commit b1cc750 - drm/nouveau/pmu: Add missing callbacks for Tegra devices (bsc#1196967). - commit 0789f15 ==== libapparmor ==== Subpackages: libapparmor1 libapparmor1-32bit - update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531) ==== libcap ==== Version update (2.63 -> 2.64) Subpackages: libcap2 libcap2-32bit - update to 2.64: * Fix memory leak in libpsx at program exit. * Be more resilient to CGo configuration with Go compiler when building tests. * Fix cap_*prctl() return code/errno handling. * Minor clarification to cap_get_pid() man page concerning pid value within namespaces. ==== libnl3 ==== Version update (3.5.0 -> 3.6.0) Subpackages: libnl-config libnl3-200 - Update to release 3.6.0 * route/mdb: add support for MAC multicast entries * mdb: support bridge multicast database notification * Support Hardware offload capability for MACsec * nflog: add CT support * Add IPv6 GRE support * Add IPv6 VTI support * Add support for team devices - Drop 0001-route-link-add-RTNL_LINK_REASM_OVERLAPS-stat.patch (merged) ==== libstorage-ng ==== Version update (4.5.3 -> 4.5.4) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Russian) (bsc#1149754) - 4.5.4 ==== pipewire ==== Version update (0.3.49 -> 0.3.50) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.50: * Highlights - pw-stream can now report more timing information and can suggest the optimal number of samples to queue for playback. - pw-dot now works again. - module-pulse-tunnel latency was improved. - Wine applications using the JACK backend should no longer crash. - The channelmixer defaults are improved and the muffled sound when playing back 5.1 and 7.1 material has been fixed. - Many fixes and improvements. * PipeWire - pw-stream now places a suggested amount of samples in the pw-buffer for playback. This allows you to remove some places where spa_io_rate_match was needed to get this information. - pw-stream has new API to request a timing update. New fields are added in the timing info, such as number of buffered samples in the resampler and the number of queued and dequeued buffers. - pw-stream has support for double controls now. More controls are exposed such as the Rate control to do adaptive resampling. - The thread-utils object was moved to the context to avoid some concurrent use cases that caused crashes. - Deactivating an exported node/stream will now remove the node from the data-thread immediately so that the process function will not be called anymore and resources can be safely freed. This could fix some of the last remaining crashes when streams are stopped. - PipeWire will now fail to load a module that tries to register the same export type twice instead of silently doing the wrong thing. * Modules - Many modules now use the NODE_WANT_DRIVER instead of the pipewire.dummy NODE_GROUP property. This makes it possible to use them with any other driver and can avoid resampling in some cases. - module-pulse-tunnel now uses an adaptive resampler to keep the latency under control. Latency should be much better than before and stay constant even when there are network delays. - There is now an option for packages to disable building the RTKit module, which is still built by default for backwards compatibility reasons. - A leak was fixed in filter-chain. - Module node names are now made more unique with the pid. * tools - pw-cat verbose output has been improved. - pw-link now has a man page. - pw-reserve now has an -r option to make it issue a RequestRelease command on the owner of the device. This makes it possible to ask WirePlumber to close and release a device. - Fix pw-dot again. It didn't work anymore because of stray done events that were emitted to notify the client of object serials. * SPA - The channelmixer now has PSD upmixing enabled again. We used the simple upmixing in the previous release but that just sounds too awful to be a good default. - The channelmixer will not upmix FC and LFE anymore when upmixing is explicitly disabled. - The channelmixer will only lowpass filter FC and LFE channels when they were upmixed. - The defaults of the channelmixer were tweaked a little. There is now a little bit more bass in the LFE channel and more high fequencies in the FC channel when upmixing. Also the channel widening has been disabled by default. - Locale independent float parsing now uses a more portable solution with uselocale. - ALSA will now only allocate a buffer size big enough to hold 4 times the quantum limit instead of as large as possible. * pulse-server - Internal cleanups in handling of modules. - A quirk to force s16 sample formats for teams-insider has been added. * JACK - The data-loop is now started in activate and stopped in deactivate. This makes the data-loop respect any custom thread functions you configure. This also makes Wine apps using the JACK backend work. - Port sorting was improved/fixed. - Rebase reduce-meson-dependency.patch. - Require RealtimeKit. ==== plasma-framework ==== Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Apply b62d83bef7733e4943e6f66787166b41198d1359.patch fixes plasmoid layout regression (kde#452512) ==== plasma5-pk-updates ==== Subpackages: plasma5-pk-updates-lang - Add patch to fix package list with newer Plasma/Frameworks (a version update might be lacking some translations for string changes): * 0001-Set-and-use-implicitHeight-instead-of-height.patch ==== rpm-config-SUSE ==== Version update (20220317 -> 20220414) - Update to version 20220414: * add SBAT values (boo#1193282) * Explain that rpm-config-SUSE covers also openSUSE ==== sddm ==== Subpackages: sddm-branding-openSUSE - Add patch to retry starting the display server (boo#1196228) * 0004-Retry-starting-the-display-server.patch ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - nasm is not needed for build, remove from buildrequires ==== timezone-java ==== - Add --add-exports for java versions that support it. * Fixes build in factory, since this is compulsory for jdk17+ ==== xfce4-panel ==== Version update (4.16.3 -> 4.16.4) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to 4.16.4 * Update copyright year and standardize formatting * Update and sort author list by name * panel: Fix regression "intellihide does not hide when leaving slowly" (gxo#xfce/xfce4-panel#388) * panel: Fix regression "'Span Monitor' has no effect" (gxo#xfce/xfce4-panel#405) * panel: Keep a reference on item during drag and drop * Fix `core.UndefinedBinaryOperatorResult` warning from `scan-build` (gxo#xfce/xfce4-panel#142) * panel: Fix broken drag and drop between panels (gxo#xfce/xfce4-panel#561) * panel: Disconnect from screen signals when window is destroyed * systray: Do not connect to proxy signal if async method failed * panel: Mitigate a memory leak when removing items (gxo#xfce/xfce4-panel!46) * windowmenu: Emit "deactivate" signal when hiding the menu (gxo#xfce/xfce4-panel#22, gxo#xfce/xfce4-panel!68) * systray: Fix wrong sanity check * systray: Properly initialize systray item * systray: Trust the status to update the attention icon (gxo#xfce/xfce4-panel#392, gxo#xfce/xfce4-panel!64) * Fixed some window buttons not appearing in the panel (gxo#xfce/xfce4-panel#188, gxo#xfce/xfce4-panel!66) * launcher: Only activate under mouse (gxo#xfce/xfce4-panel#519) * libxfce4panel: Review memory management for context menu (gxo#xfce/xfce4-panel#452, gxo#xfce/xfce4-panel!46) * actions: Block panel autohide (gxo#xfce/xfce4-panel#431, gxo#xfce/xfce4-panel!62) * launcher: Clear action menu when destroyed (gxo#xfce/xfce4-panel#540, gxo#xfce/xfce4-panel!61) * Translation Updates ==== xfce4-terminal ==== Version update (1.0.0 -> 1.0.1) Subpackages: xfce4-terminal-lang - Update to version 1.0.1 * A new hidden preference `DropdownParametersOnce` has been introduced to control whether the drop-down window accepts command line arguments after creation. With the introduction of this preference an older bug was fixed where tabs could be added to the drop-down window even though they weren't supposed to. * Options: --active-tab does not behave properly when adding tabs to existing windows. * Find dialog does not respond to Return key (gxo#apps/xfce4-terminal#176) * Dragging a URL from Chromium ends up truncated (gxo#apps/xfce4-terminal#180) * Toolbar size changes when the window is maximized (gxo#apps/xfce4-terminal#181). * Unable to create a single window with many tabs through command line options (gxo#apps/xfce4-terminal#182). * Translation Updates ==== xz ==== Subpackages: liblzma5 liblzma5-32bit xz-lang - use https urls. ==== yast2-trans ==== Version update (84.87.20220410.9099c51b0c -> 84.87.20220415.000649bca9) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220415.000649bca9: * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Slovak) * Translated using Weblate (Russian) * Fixed messages extracted from XML files * Fixed messages extracted from XML files * Translated using Weblate (Slovak) * Fixed messages extracted from XML files * Fixed messages extracted from XML files * Fixed messages extracted from XML files * Fixed translations * Fixed translations * Fixed messages extracted from XML files * Fixed firstboot translations * New POT for text domain 'iscsi-client'. * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'firstboot'.

1 0

firefox does not start after update to Tumbleweed 20220410
by Berthold Höllmann 19 Apr '22

19 Apr '22

I updated to Tumbleweed 20220410 today. After reboot firefox crashes on every start attempt. libreoffice starts only setting "SAL_USE_VCLPLUGIN=gen". /usr/libexec/ssh/gnome-ssh-askpass crashes, but /usr/libexec/ssh/ksshaskpass is working. There are other programs not starting anymore like "zotero". The problems occurred after updating from 20220408 to 20220410. I am using fvwm for my window manager.

7 13

New Tumbleweed snapshot 20220415 released!
by Dominique Leuenberger 18 Apr '22

18 Apr '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.28 -> 7.1.0.29) Mesa Mesa-drivers MozillaFirefox (99.0 -> 99.0.1) apparmor corosync (2.4.5+git70.64010f57 -> 2.4.5+git.5d625cef) cronie git (2.35.1 -> 2.35.3) hwinfo (21.80 -> 21.81) icu (70.1 -> 71.1) indic-fonts jemalloc kexec-tools libapparmor libgit2 (1.4.2 -> 1.4.3) libusb-1_0 (1.0.25 -> 1.0.26) libyui (4.3.3 -> 4.4.0) libyui-ncurses (4.3.3 -> 4.4.0) libyui-ncurses-pkg (4.3.3 -> 4.4.0) libyui-qt (4.3.3 -> 4.4.0) libyui-qt-graph (4.3.3 -> 4.4.0) libyui-qt-pkg (4.3.3 -> 4.4.0) osinfo-db perl-HTML-Parser (3.77 -> 3.78) perl-Mail-DKIM (1.20200907 -> 1.20220408) perl-libwww-perl (6.61 -> 6.62) postgresql python-FontTools (4.29.1 -> 4.32.0) python-kiwi (9.24.29 -> 9.24.31) python-matplotlib ruby3.1 (3.1.1 -> 3.1.2) samba (4.16.0+git.224.70319beb8f8 -> 4.16.0+git.227.931848a12ab) subversion (1.14.1 -> 1.14.2) suitesparse vim (8.2.4602 -> 8.2.4745) whois (5.5.12 -> 5.5.13) wicked (0.6.68 -> 0.6.69) xen (4.16.0_08 -> 4.16.1_02) zchunk (1.1.16 -> 1.2.1) === Details === ==== ImageMagick ==== Version update (7.1.0.28 -> 7.1.0.29) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.29 see ChangeLog.md for details (https://github.com/ImageMagick/ImageMagick/blob/main/ChangeLog.md) ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - use _multibuild ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libxatracker2 - use _multibuild ==== MozillaFirefox ==== Version update (99.0 -> 99.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 99.0.1 * Fixed an issue with text rendering in Bengali (bmo#1763368) * Fixed a selection issue in the Download panel with drag and drop (bmo#1762723) * Fixed: Fixed an issue preventing Zoom gallery mode for users who go to zoom.us URLs instead of subdomain.zoom.us URLs (bmo#1763801) ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon which now will spawn new additional services on demand. We need to modify the existing smbd/winbind profiles and additionally add a new set of profiles to cater for the new functionality; (bnc#1198309); - Add samba_deny_net_admin.patch to add new rule to deny noisy setsockopt calls from systemd; (bnc#1196850). ==== corosync ==== Version update (2.4.5+git70.64010f57 -> 2.4.5+git.5d625cef) Subpackages: libcfg6 libcmap4 libcorosync_common4 libcpg4 libquorum5 - Update to version corosync-2.4.5+git.5d625cef: * totemudpu: Don't block local socketpair * totemsrp: Switch totempg buffers at the right time * logsys: Unlock config mutex on error ==== cronie ==== Subpackages: cron - Fix bsc#1198265 Regression in handling 1-5 crontab entries * bsc1198265.patch ==== git ==== Version update (2.35.1 -> 2.35.3) Subpackages: git-core git-cvs git-email git-gui git-svn git-web gitk perl-Git - git 2.35.3: * usability fix-up for CVE-2022-24765 bsc#1198234: '*' can be used as the value for the `safe.directory` variable to signal that the user considers that any directory is safe. * The code that was meant to parse the new `safe.directory` configuration variable was not checking what configuration variable was being fed to it - Require bash in git-daemon because the service file uses it - Reword git-daemon.service description to get a useful sentence in journalctl -b - git 2.35.2 (CVE-2022-24765, bsc#1198234): * CVE-2022-24765: git may execute commands defined by other users from unexpected worktrees ==== hwinfo ==== Version update (21.80 -> 21.81) - merge gh#openSUSE/hwinfo#112 - fix bug in determining serial console device name (bsc#1198043) - 21.81 ==== icu ==== Version update (70.1 -> 71.1) - update to 71.1: * updates to CLDR 41 locale data with various additions and corrections. * phrase-based line breaking for Japanese. Existing line breaking methods follow standards and conventions for body text but do not work well for short Japanese text, such as in titles and headings. This new feature is optimized for these use cases. * support for Hindi written in Latin letters (hi_Latn). The CLDR data for this increasingly popular locale has been significantly revised and expanded. Note that based on user expectations, hi_Latn incorporates a large amount of English, and can also be referred to as ?Hinglish?. * time zone data updated to version 2022a. Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b. - drop fix-ucptrietest-golden-diff.patch (upstream) ==== indic-fonts ==== - update or add Bengali fonts [bsc#1197977]: * AkaashNormal.ttf Ani.ttf JamrulNormal.ttf MitraMono.ttf MuktiBold.ttf Mukti.ttf - remove obsoleted Bengali fonts [bsc#1197977c#4] * mitra.ttf MuktiNarrow.ttf MuktiNarrowBold.ttf bng2-n.ttf bng2-b.ttf ==== jemalloc ==== - Add use-volatile-to-workaround-buffer-overflow-false-pos.patch upstream patch that supports -D_FORTIFY_SOURCE=3. ==== kexec-tools ==== - kexec-tools-print-error-if-kexec_file_load-fails.patch: print error if kexec_file_load fails (bsc#1197176). ==== libapparmor ==== Subpackages: libapparmor1 libapparmor1-32bit - Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon which now will spawn new additional services on demand. We need to modify the existing smbd/winbind profiles and additionally add a new set of profiles to cater for the new functionality; (bnc#1198309); - Add samba_deny_net_admin.patch to add new rule to deny noisy setsockopt calls from systemd; (bnc#1196850). ==== libgit2 ==== Version update (1.4.2 -> 1.4.3) - update to 1.4.3: * compatibility with git's changes for CVE-2022-24765 boo#1187234 * several correctness fixes where invalid input can lead to a crash and denial of service ==== libusb-1_0 ==== Version update (1.0.25 -> 1.0.26) - Update to version 1.0.26 * Fix regression with transfer free's after closing device * Fix regression with destroyed context if API is misused * Workaround for applications using missing default context * Fix hotplog enumeration regression * Build fixes for various platforms and configurations * Add interface bound checking for broken devices * Add umockdev tests on Linux ==== libyui ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== libyui-ncurses ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== libyui-ncurses-pkg ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== libyui-qt ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== libyui-qt-graph ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== libyui-qt-pkg ==== Version update (4.3.3 -> 4.4.0) - Added dynamic property first-item to YQItemSelector and YQCustomStatusItemSelector for QSS styling (bsc#1196599) see also https://github.com/libyui/libyui/pull/68 - 4.4.0 - Reviewed and merged pending community PRs: - Perl bindings build error fix by Angelo Naselli <anaselli(a)linux.it> - Ruby bindings with libyui-mga by Angelo Naselli <anaselli(a)linux.it> - Typo fix in rest-api examples by George Gkioulis <ggkioulis(a)suse.com> - Missing examples header fix by James.W <jinnan.wjn(a)alibaba-inc.com> ==== osinfo-db ==== - bsc#1197958 - request support for SLE15-SP4 in the osinfo database - Add support for SUSE linux Enterprise Micro 5.2 add-slem5.2-support.patch ==== perl-HTML-Parser ==== Version update (3.77 -> 3.78) - updated to 3.78 see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.78 2022-03-28 * Remove unused variable (GH#26) (Michal Josef ?pa?ek) ==== perl-Mail-DKIM ==== Version update (1.20200907 -> 1.20220408) - updated to 1.20220408 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20220408 2022-04-08 UTC + Add support for signatures with an Expiration value ==== perl-libwww-perl ==== Version update (6.61 -> 6.62) - updated to 6.62 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.62 2022-04-05 01:04:17Z - Allow downloading to a filehandle (GH#400) (Andrew Fresh) ==== postgresql ==== Subpackages: postgresql-contrib postgresql-server - Change to systemd-sysusers ==== python-FontTools ==== Version update (4.29.1 -> 4.32.0) - Update to 4.32.0 * [otlLib] Disable GPOS7 optimization to work around bug in Apple CoreText. Always force Chaining GPOS8 for now (#2540). * [glifLib] Added outputImpliedClosingLine=False parameter to Glyph.draw(), to control behaviour of PointToSegmentPen (6b4e2e7). * [varLib.interpolatable] Check for wrong contour starting point (#2571). * [cffLib] Remove leftover GlobalState class and fix calls to TopDictIndex() (#2569, #2570). * [instancer] Clear AxisValueArray if it is empty after instantiating (#2563). - Release 4.31.2 * [varLib] fix instantiation of GPOS SinglePos values (#2555). - Release 4.31.1 * [subset] fix subsetting OT-SVG when glyph id attribute is on the root <svg> element (#2553). - Release 4.31.0 * [ttCollection] Fixed 'ResourceWarning: unclosed file' warning (#2549). * [varLib.merger] Handle merging SinglePos with valueformat=0 (#2550). * [ttFont] Update glyf's glyphOrder when calling TTFont.setGlyphOrder() (#2544). * [ttFont] Added ensureDecompiled method to load all tables irrespective of the lazy attribute (#2551). * [otBase] Added iterSubTable method to iterate over BaseTable's children of type BaseTable; useful for traversing a tree of otTables (#2551). - Release 4.30.0 * [varLib] Added debug logger showing the glyph name for which gvar is built (#2542). * [varLib.errors] Fixed undefined names in FoundANone and UnsupportedFormat exceptions (ac4d561). * [otlLib.builder] Added windowsNames and macNames (bool) parameters to the buildStatTable function, so that one can select whether to only add one or both of the two sets (#2528). * [t1Lib] Added the ability to recreate PostScript stream (#2504). * [name] Added getFirstDebugName, getBest{Family,SubFamily,Full}Name methods (#2526). ==== python-kiwi ==== Version update (9.24.29 -> 9.24.31) - Bump version: 9.24.30 ? 9.24.31 - Fix LABEL detection (#2112) When only "root=" is specified on the kernel command line the match is located in the first group. Loop through the groups upon mtach to find what we are looking for. - Preserve LABEL setting (#2108) Preserve the LABEL= setting when the grub config file is re-generated. the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and not in any SUSE distribution. Set the grub setting such that LABEL is preserved on SUSE distros. (bsc#1197616) - Fix test_setup_default_grub_empty_kernelcmdline The unit test exists to check that GRUB_CMDLINE_LINUX_DEFAULT is not set depending on the provided cmdline. The test exists for reasons explained in Issue #1650 - Don't compress .appx containers (#2106) The container is actually inside and already compressed. - Added new CloneDevice class Added CloneDevice class to the storage interface. The class allows to create clone(s) from a given source block device into a list of target block devices. The target block devices are clones of the source but prevents device naming conflicts for unique identifiers like the UUID. This is requires to still allow to boot from images containing device clones and needs to be handled by tools that might work on top of the cloned devices. - Improve readability of shell commands The way the lsblk pipeline is constructed is improved to become easier to read by this commit - Added set_uuid() method to FileSystem API Allow to set a custom UUID not only at creation time of a filesystem but also at a later point in time in an already existing filesystem - Ensure BootloaderConfig resources are cleaned first This commit wraps the manual BootloaderConfig instance cleanup in disk builder into a try/finally scope. This way if KIWI is aborted or fails within this scope the BootloaderConfig is cleaned up first. Signed-off-by: David Cassany <dcassany(a)suse.com> - Fixed overlay root dracut module make sure there is always only one selection for the readonly root partition - Update LUKS integration test for TW Use cipher options to make cryptomount work again - Set LUKS(v1) for TW encryption integration test In Tumbleweed LUKS2 became the default but the grub cryptomount tool is not able to work with the v2 LUKS header. Thus the test explicitly builds against the former luks version for now - Set LUKS2 for TW luks encryption integration test In Tumbleweed LUKS2 became the default also for grub and cryptomount, which requires to create a LUKS2 header in the dm_crypt layer - Bump version: 9.24.29 ? 9.24.30 - Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783) Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from built images. This causes problems for some containers, notably Ceph when deployed in a Rook/k8s environment, which needs to have certain directories present inside /run/. This commit adds the ability to return to the previous behaviour and *not* empty those temporary directories, if you specify <image><preferences><type [...] ensure_empty_tmpdirs="false">. Fixes: https://github.com/OSInside/kiwi/issues/2093 Signed-off-by: Tim Serong <tserong(a)suse.com> - Fixed parsing of veritysetup output veritysetup uses tabs to align values. The way kiwi parsed the values did not strip out the tabs and later on keeps them in the verification metadata block. The unit test did not catch this because the mock output used for veritysetup did not contain tabs. This commit fixes the test to catch this condition and also fixes the code to handle all space characters (tabs, space, newlines) in a safe way - Update contents of store_credentials result file The method added information about the PARTUUID as useful information. However, PARTUUID's are not supported by all partition tables. The Linux generated artificial values from the disk identifier are not wanted in this scope. As the information is not mandatory it's better to not provide it at all and avoid confusion to users. - Make blkid call more robust Do not raise of blkid is not able to read the requested ID. It is expected that the methods of the BlockID class either returns a value or none but do not raise and cause the complete process to terminate - Added embed_verity_metadata attribute Specifies to write a binary block at the end of the partition serving the root filesystem, containing information for dm_verity verification and to construct the device map - Added create_verification_metadata method Along with creating a filesystem including device mapper features like dm_verity (see verity_blocks) or dm_crypt/dm_integrity (see luks) there is always the question where to store the metadata information required to setup the device map. This can include information about blocksizes, offset addresses and more. The create_verification_metadata() method allows to write a signed custom data block of a documented format at the end of the given block special which stores this type of information such that tools at boot time gets the opportunity to read this information. In this commit only information connected to the dm_verity feature activated via the verity_blocks attribute will be part of the verification block. With future changes other data might be added - Added runtime check for by-partuuid use Added check_partuuid_persistency_type_used_with_mbr(). Not every partition table type supports UUIDs. We don't want to make use of the artifical values created by Linux if the partition table doesn't support it natively - Support partuuid and label mounts in dracut module The 90kiwi-overlay dracut module was not able to parse the device link if done with PARTUUID or LABEL - Added integration test for by-partuuid The test hooks into the existing test-image-embedded integration test for leap. As I plan to extend the tests specific to features actually only useful for special embedded images, I thought this would be the right place to start - validate luksformat options validate options against the cryptsetup help info in a runtime check - Handle LUKS type in its own attribute - Fixed attribute description The overlayroot_verity_blocks attribute description contained outdated information - Add support for verity setup on standard rootfs So far the verity support was only available with the overlayroot layout and the read-only squashfs root. This commit adds a new attribute: verity_blocks="number|all" which allows to create the verity setup also on the standard root partition In addition to the change it was needed to extend the Filesystem API with an additional optional paramter to allow setup of the filesystem UUID. Having the opportunity to set the UUID at filesystem creation is generally useful and with regards to this particular change it became also required - Allow Btrfs and XFS as options for the boot partition filesystem We already do this implicitly when we do not define this attribute and request a boot partition, so let us explicitly offer these as options too. - Fix grub defaults for PARTUUID use Make sure to set GRUB_DISABLE_LINUX_PARTUUID to false when using by-partuuid - Allow luks format options Added new luksformat element which allows to pass along options to the luksFormat call. This allows users to switch between LUKS and LUKS2 via e.g <luksformat> <option name="--type" value="luks2"/> </luksformat> It also allows to pass along a set of options only available to LUKS2, e.g <luksformat> <option name="--type" value="luks2"/> <option name="--cipher" value="aes-gcm-random"/> <option name="--integrity" value="aead"/> </luksformat> In addition to the new attribute the existing luks attribute can also be specified to read credentials from a keyfile by using the file:// source locator, e.g <type ... luks="file:///path/to/a/keyfile"/> This Fixes #1898 - Fixed funny build_status.sh bug If the name of the repository starts with an 'F' like in Fedora, the 'F' is turned into a red escape sequence because it is assumed to be a failed status indicator :) The path here is probably also dumb as it just assumes there is a space after the status indicator. Well the complete script is not really a good one, but still helpful - Update Fedora arm integration test Move test to Fedora 34 - Added container build test for Fedora Fedora systems uses buildah to create containers. There is no integration test for kiwi which tests building containers with buildah. This commit adds a build test to cover this path. Related to Issue #2020 - Fixed test-image-docker-derived for leap The test still used the additionaltags attribute with the latest schema (v7.5) which fails to validate because the attribute was moved to additionalnames - Bump version: 9.24.28 ? 9.24.29 ==== python-matplotlib ==== Subpackages: python38-matplotlib python38-matplotlib-tk - Add matplotlib-pr22780-Pillow-deprecations.patch for deprecation errors with Pillow -- gh#matplotlib/matplotlib#22780 - Skip any test with svg png or pdf in its id for non x86_64, as image comparison tests compare to x86_64 references. ==== ruby3.1 ==== Version update (3.1.1 -> 3.1.2) Subpackages: libruby3_1-3_1 - add buildignore for ruby and ruby-common so we do not pull gem2rpm for the testsuite - Update to 3.1.2 (boo#1198441 boo#1198440) https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-1-2-released/ - CVE-2022-28738: Double free in Regexp compilation - CVE-2022-28739: Buffer overrun in String-to-Float conversion ==== samba ==== Version update (4.16.0+git.224.70319beb8f8 -> 4.16.0+git.227.931848a12ab) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). ==== subversion ==== Version update (1.14.1 -> 1.14.2) Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl subversion-server subversion-tools - Apache Subversion 1.14.2: * CVE-2021-28544: SVN authz protected copyfrom paths regression (boo#1197939) * CVE-2022-24070: mod_dav_svn memory corruption (boo#1197940) * Fix -r option documentation for some svnadmin subcommands * Fix error message encoding when system() call fails * Fix assertion failure in conflict resolver * Support multiple working copy formats (1.8-onward, 1.15) ==== suitesparse ==== Subpackages: libamd2 libcamd2 libccolamd2 libcholmod3 libcolamd2 libsuitesparseconfig5 libumfpack5 - update to 5.12.0: * GraphBLAS v7.0.3: see GraphBLAS/Doc/ChangeLog for details. - performance: GrB_mxm, GrB_assign, and transpose - bug fix: vector iterator for bitmap - revised ACM TOMS submission: Doc/toms_parallel_grb2.pdf - spec bug: GrB_Matrix_diag was implemented incorrectly, thus requiring a version v7.x ==== vim ==== Version update (8.2.4602 -> 8.2.4745) Subpackages: gvim vim-data vim-data-common - Updated to version 8.2.4745, fixes the following problems * Vim9: not enough test coverage for executing :def function. * Sourcing buffer lines is too complicated. * Error for redefining a script item may be confusing. * Error for arguments of remote_expr() even when the +clientserver feature is not included. * Test fails because of changed error message. * Sourcing buffer lines may lead to errors for conflicts. * getcompletion() does not work properly when 'wildoptions contains "fuzzy". * :unhide does not check for failing to close a window. * Some conditions are always true. * Typos in tests; one lua line not covered by test. * Vim9: cannot use a recursive call in a nested function. (Sergey Vlasov) * Return type of swapfile_unchanged() is wrong. * Redrawing too much when 'cursorline' is set and jumping around. * Mapping with escaped bar does not work in :def function. (Sergey Vlasov) * Vim9: Declarations in a {} block of a user command do not use Vim9 rules if defined in a legacy script. (Yegappan Lakshmanan) * No completion for :scriptnames. * Command line completion does not recognize single letter commands. * Mapping is cancelled when mouse moves and popup is visible. * Two letter substitute commands don't work. (Yegappan Lakshmanan) * Crash when using the tabline right-click menu. * Vim9: Crash with :execute and :finish. (Sergey Vlasov) * Coverity warns for using uninitialized field. * Old Coverity warning for resource leak. * Old Coverity warning for resource leak. * Visual area not fully updated when removing sign in Visual mode while scrolling. * flatten() does not use maxdepth correctly. * Not enough testing for 2/3 letter substitute commands. * flattennew() makes a deep copy unnecessarily. * 'cursorline' not always updated with 'cursorlineopt' is "screenline". * Crash when switching window in BufWipeout autocommand. * Using freed memory in flatten(). * Visual range does not work before command modifiers. * Vim9: cannot initialize a variable to null_list. * Tests using null list or dict fail. * Not using Visual range. * Warning for using uninitialized variable. (Tony Mechelynck) * Superfluous check if a redraw is needed for 'cursorline'. * Not sufficient parenthesis in preprocessor macros. * Some boolean options use "long" instead of "int". * May mark the wrong window for redrawing. * Vim9: in :def function script var cannot be null. * Vim9: variable may be locked unintentionally. * Redrawing too often when 'relativenumber' is set. * 'shortmess' changed when session does not store options. * Using buffer line after it has been freed in old regexp engine. * "source" can read past end of copied line. * Handling LSP messages is a bit slow. * Various formatting problems. * "import autoload" only works with using 'runtimepath'. * Test fails because path differs. * Leaking memory if assignment fails. * "import autoload" does not check the file name. * Missing changes for import check. * Command line completion popup menu positioned wrong when using a terminal window. * Vim9: can't use items from "import autoload" with autoload directory name. * Errors for functions are sometimes hard to read. * Org-mode files are not recognized. * Invalid memory access when using printable function name. * Cursorcolumn is sometimes not correct. * Coverity warning for using uninitialized variable. * No error for using out of range list index. * Occasional crash when running the GUI tests. * Elvish files are not recognized. * Popup with "minwidth" and scrollbar not updated properly. * Vim9: assignment not recognized in skipped block. * expandcmd() fails on an error. * Buffer allocation failures insufficiently tested. * In compiled code len('string') is not inlined. * Memory allocation failures for new tab page not tested. * 'wildignorecase' is sometimes not used for glob(). * Using :normal with Ex mode may make :substitute hang. * Redrawing a vertically split window is slow when using CTRL-F and CTRL-B. * Cannot force getting MouseMove events. * No error for missing expression after :elseif. (Ernie Rael) * Test fails with different error. * Vim9: not all code is tested. * Cannot have expandcmd() give an error message for mistakes. * Build failure without +postscript. * Build fails with a combination of features. * Vim9: can use :unlockvar for const variable. (Ernie Rael) * Verbose check with dict_find() to see if a key is present. * Cannot open a channel on a Unix domain socket. * When a swap file is found for a popup there is no dialog and the buffer is loaded anyway. * Configure doesn't find the Motif library with Cygwin. * "vimgrep /\%v/ *" may cause a crash. * New regexp engine does not give an error for "\%v". * Using <Cmd> in a mapping does not work for mouse keys in Insert mode. (Sergey Vlasov) * Channel tests fail on MS-Windows. * Solution for <Cmd> in a mapping causes trouble. * No test for what 8.2.4691 fixes. * new regexp does not accept pattern "\%>0v". * Avoidance of #elif causes more preproc nesting. * JSON encoding could be faster. * delete() with "rf" argument does not report a failure. * Vim9: crash when adding a duplicate key to a dictionary. * Vim9: script variable has no flag that it was set. * Hard to reproduce hang when reading from a channel. * Buffer remains active if a WinClosed event throws an exception. * Kuka Robot Language files not recognized. * C++ scope labels are hard-coded. * Memory leak in handling 'cinscopedecls'. * Using "else" after return or break increases indent. * Jump list marker disappears. * Buffer remains active if a WinClosed event throws an exception when there are multiple tabpages. * Redrawing could be a bit more efficient. * PHP test files are not recognized. * After :redraw the statusline highlight might be used. * Smart indenting does not work after completion. * When 'insermode' is set :edit from <Cmd> mapping misbehaves. * Only get profiling information after exiting. * Plugins cannot track text scrolling. * Using g:filetype_dat and g:filetype_src not tested. * Vagrantfile not recognized. * Memory allocation failure not tested when defining a function. * For TextYankPost v:event does not contain information about the operation being inclusive or not. * @@@ in the last line sometimes drawn in the wrong place. * ">" marker sometimes not displayed in the jumplist. * ABB Rapid files are not recognized properly. * Cooklang files are not recognized. * When a recording is ended with a mapped key that key is also recorded. * The ModeChanged autocmd event is inefficient. * Current instance of last search pattern not easily spotted. * Unused variable in tiny build. * Cannot use expand() to get the script name. * Unused code. * No test that v:event cannot be modified. * HEEx and Surface templates do not need a separate filetype. * The changelist index is not remembered per buffer. * Duplicate code to free fuzzy matches. * HEEx and Surface do need a separate filetype. * getcharpos() may change a mark position. * Quickfix tests can be a bit hard to read. * Build problem for Cygwin with Motif. * // in JavaScript string recognized as comment. * Esc on commandline executes command instead of abandoning it. * Accessing freed memory after WinScrolled autocmd event. * When expand() fails there is no error message. * Startup test fails. * There is no way to start logging very early in startup. * A terminal window can't use the bell. * Using wrong flag for using bell in the terminal. ==== whois ==== Version update (5.5.12 -> 5.5.13) - update to 5.5.13: * Added the .sd TLD server. * Updated the list of new gTLDs. * Added the Turkish translation, contributed by O?uz Ersen. ==== wicked ==== Version update (0.6.68 -> 0.6.69) Subpackages: wicked-service - version 0.6.69 - redfish: decode smbios and setup host interface Add initial support to decode the SMBIOS Management Controller Host Interface (Type 42) structure and expose it as wicked `firmware:redfish` configuration to setup a Host Network Interface (to the BMC) using the `Redfish over IP` protocol allowing access to the Redfish Service (via redfish-localhost in /etc/hosts) used to manage the computer system. Tech Preview (jsc#SLE-17762). - buffer: fix size_t length downcast to uint, add guards to init functions - wireless: fix to not expect colons in 64byte long wpa-psk hex hash string - xml-schema: reference counting fix to not crash at exit on schema errors - compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl, remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5. - compat-suse: fix reading of sysctl addr_gen_mode to wrong variable - auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429) - removed obsolete patch included in the master sources (bsc#1194392) [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch] ==== xen ==== Version update (4.16.0_08 -> 4.16.1_02) Subpackages: xen-libs xen-tools xen-tools-domU - Update to Xen 4.16.1 bug fix release (bsc#1027519) xen-4.16.1-testing-src.tar.bz2 - Drop patches contained in new tarball 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch xsa397.patch xsa399.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch ==== zchunk ==== Version update (1.1.16 -> 1.2.1) - Update to version 1.2.1 * Better error detection * Add support for specifying compression-format in zck * zck: add option to select chunk hash * Fix testsuite: Add expected sha256sums for zstd 1.5.1+ * Fix memory leaks * Various bug fixes - Drop upstream merged zstd-1.5.1.patch

1 0

Bug 1198531 - AppArmor profile for zgrep is incomplete
by Achim Gratz 16 Apr '22

16 Apr '22

If you get strange "Permission Denied" errors from certain zgrep invocations after the latest update: the AppArmor profile does not allow expr to be executed. https://bugzilla.opensuse.org/show_bug.cgi?id=1198531 (includes patch) Regards Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Factory and User Sound Singles for Waldorf Q+, Q and microQ: http://Synth.Stromeko.net/Downloads.html#WaldorfSounds

2 1